Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Rewrite livefs (in Rust) #2293

Merged
merged 2 commits into from
Nov 16, 2020
Merged

Rewrite livefs (in Rust) #2293

merged 2 commits into from
Nov 16, 2020

Commits on Nov 15, 2020

  1. Rewrite livefs 

    Now always based on an overlayfs:
ostreedev/ostree@f2773c1
This fixes a whole swath of problems with the previous design,
including the danger in replacing `/usr/lib/ostree-boot` which
broke booting for some people.

Further, we don't need to push a rollback deployment; the livefs
changes are always transient.  So now we store livefs state
in `/run` instead of in the origin file.

Since we're doing a rewrite, it's now in Rust for much more safety.

We also always work in terms of incremental diffs between commits;
the previous huge hammer of swapping `/usr` was way too dangerous.
    @cgwalters
    cgwalters committed Nov 15, 2020
    Configuration menu
    Copy the full SHA
    a62ae70 View commit details
    Browse the repository at this point in the history

  2. service: Enable ProtectHome=true 

    We have no business accessing `/var/roothome` or `/var/home`.  In general
the ostree design clearly avoids touching those, but since systemd offers
us easy tools to toggle on protection, let's use them.  In the future
it'd be nice to do something like using `DynamicUser=yes` for the main service,
and have a system `rpm-ostreed-transaction.service` that runs privileged
but as a subprocess.
    @cgwalters
    cgwalters committed Nov 15, 2020
    Configuration menu
    Copy the full SHA
    10a621e View commit details
    Browse the repository at this point in the history