keremet/rpm-ostree
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
b3e16a3313
rpm-ostree/src/libpriv/rpmostree-unpacker.h

74 lines
2.7 KiB
C
Raw Normal View History

internals: New `unpack` verb This is part of taking over from librpm. The most important high level goal is fully unprivilged operation. Right now we're basically starting to do what http://libguestfs.org/supermin.1.html does, except in C, and faster. There's no reason that `compose tree` should require privileges. However right now, things like `%post` scripts will want to run in the target root - so we'd have to require `linux-user-chroot`. Regardless of unprivileged operation though, another major thing we can do is use our control over the unpacking process to do a lot more sophisticated caching. We can build up a precise mapping of (rpm ENVR, file path, selinux label) -> object and avoid rechecksumming each time. And even for files that aren't known, we can parallelize commit with unpacking, etc. (Ok assuming treecompose-post won't mutate anything).
2016-01-12 07:07:24 +03:00
/* -*- mode: C; c-file-style: "gnu"; indent-tabs-mode: nil; -*-
*
* Copyright (C) 2015 Colin Walters <walters@verbum.org>
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Lesser General Public License as published
* by the Free Software Foundation; either version 2 of the licence or (at
* your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General
* Public License along with this library; if not, write to the
* Free Software Foundation, Inc., 59 Temple Place, Suite 330,
* Boston, MA 02111-1307, USA.
*/
#pragma once
#include <ostree.h>
#include "libglnx.h"
Major revamp/extension of libhif/unpacker code This is in preparation for `rpm-ostree container`, which handles unpacking RPMs as non-root. At the moment, I'm copying code in from both ostree's libarchive bits (fixable...may need to export some utility functions) and some functions from libhif (harder, see: http://lists.rpm.org/pipermail/rpm-ecosystem/2016-January/000297.html ) There's lots more cleanup to do here, but I don't want to block on the resolution of the libhif changes.
2016-01-26 22:34:51 +03:00
#include <rpm/rpmlib.h>
internals: New `unpack` verb This is part of taking over from librpm. The most important high level goal is fully unprivilged operation. Right now we're basically starting to do what http://libguestfs.org/supermin.1.html does, except in C, and faster. There's no reason that `compose tree` should require privileges. However right now, things like `%post` scripts will want to run in the target root - so we'd have to require `linux-user-chroot`. Regardless of unprivileged operation though, another major thing we can do is use our control over the unpacking process to do a lot more sophisticated caching. We can build up a precise mapping of (rpm ENVR, file path, selinux label) -> object and avoid rechecksumming each time. And even for files that aren't known, we can parallelize commit with unpacking, etc. (Ok assuming treecompose-post won't mutate anything).
2016-01-12 07:07:24 +03:00
typedef struct RpmOstreeUnpacker RpmOstreeUnpacker;
#define RPMOSTREE_TYPE_UNPACKER (rpmostree_unpacker_get_type ())
#define RPMOSTREE_UNPACKER(inst) (G_TYPE_CHECK_INSTANCE_CAST ((inst), RPMOSTREE_TYPE_UNPACKER, RpmOstreeUnpacker))
#define RPMOSTREE_IS_UNPACKER(inst) (G_TYPE_CHECK_INSTANCE_TYPE ((inst), RPMOSTREE_TYPE_UNPACKER))
GType rpmostree_unpacker_get_type (void);
unpacker: major rework - Delete unpack_to_dfd path - Get rid of copynpaste stuff and use the newly reworked ostree libarchive API which now supports the callbacks we need Closes: #289 Approved by: cgwalters
2016-05-20 21:14:47 +03:00
/**
* RpmOstreeUnpackerFlags:
* @RPMOSTREE_UNPACKER_FLAGS_OSTREE_CONVENTION: Move files to follow ostree convention
core: Make unprivileged case ignore ownership, add "_compose" context I was in the process of trying to support `%post` scripts, and I wanted to use `rpm-ostree container` for convenient and safe testing. However the recent package layering changes broke it to error out on perms like `filesystem`'s `root:mail` on `/var/mail`. I decided to introduce a new `rpmostree_context_new_compose` which had the current behavior, switch `compose tree` to use it, and then change `_new_unprivileged` to *really* be unprivileged. Specifically we ignore file ownership (and fix dir owners) because we assume we'll be operating with `bare-user` repos. Closes: #327 Approved by: jlebon
2016-06-16 15:52:29 +03:00
* @RPMOSTREE_UNPACKER_FLAGS_UNPRIVILEGED: Ignore file ownership and setuid modes
unpacker: major rework - Delete unpack_to_dfd path - Get rid of copynpaste stuff and use the newly reworked ostree libarchive API which now supports the callbacks we need Closes: #289 Approved by: cgwalters
2016-05-20 21:14:47 +03:00
*/
internals: New `unpack` verb This is part of taking over from librpm. The most important high level goal is fully unprivilged operation. Right now we're basically starting to do what http://libguestfs.org/supermin.1.html does, except in C, and faster. There's no reason that `compose tree` should require privileges. However right now, things like `%post` scripts will want to run in the target root - so we'd have to require `linux-user-chroot`. Regardless of unprivileged operation though, another major thing we can do is use our control over the unpacking process to do a lot more sophisticated caching. We can build up a precise mapping of (rpm ENVR, file path, selinux label) -> object and avoid rechecksumming each time. And even for files that aren't known, we can parallelize commit with unpacking, etc. (Ok assuming treecompose-post won't mutate anything).
2016-01-12 07:07:24 +03:00
typedef enum {
core: Make unprivileged case ignore ownership, add "_compose" context I was in the process of trying to support `%post` scripts, and I wanted to use `rpm-ostree container` for convenient and safe testing. However the recent package layering changes broke it to error out on perms like `filesystem`'s `root:mail` on `/var/mail`. I decided to introduce a new `rpmostree_context_new_compose` which had the current behavior, switch `compose tree` to use it, and then change `_new_unprivileged` to *really* be unprivileged. Specifically we ignore file ownership (and fix dir owners) because we assume we'll be operating with `bare-user` repos. Closes: #327 Approved by: jlebon
2016-06-16 15:52:29 +03:00
RPMOSTREE_UNPACKER_FLAGS_OSTREE_CONVENTION = (1 << 0),
RPMOSTREE_UNPACKER_FLAGS_UNPRIVILEGED = (1 << 1)
internals: New `unpack` verb This is part of taking over from librpm. The most important high level goal is fully unprivilged operation. Right now we're basically starting to do what http://libguestfs.org/supermin.1.html does, except in C, and faster. There's no reason that `compose tree` should require privileges. However right now, things like `%post` scripts will want to run in the target root - so we'd have to require `linux-user-chroot`. Regardless of unprivileged operation though, another major thing we can do is use our control over the unpacking process to do a lot more sophisticated caching. We can build up a precise mapping of (rpm ENVR, file path, selinux label) -> object and avoid rechecksumming each time. And even for files that aren't known, we can parallelize commit with unpacking, etc. (Ok assuming treecompose-post won't mutate anything).
2016-01-12 07:07:24 +03:00
} RpmOstreeUnpackerFlags;
unpacker: major rework - Delete unpack_to_dfd path - Get rid of copynpaste stuff and use the newly reworked ostree libarchive API which now supports the callbacks we need Closes: #289 Approved by: cgwalters
2016-05-20 21:14:47 +03:00
RpmOstreeUnpacker*
rpmostree_unpacker_new_fd (int fd,
RpmOstreeUnpackerFlags flags,
GError **error);
internals: New `unpack` verb This is part of taking over from librpm. The most important high level goal is fully unprivilged operation. Right now we're basically starting to do what http://libguestfs.org/supermin.1.html does, except in C, and faster. There's no reason that `compose tree` should require privileges. However right now, things like `%post` scripts will want to run in the target root - so we'd have to require `linux-user-chroot`. Regardless of unprivileged operation though, another major thing we can do is use our control over the unpacking process to do a lot more sophisticated caching. We can build up a precise mapping of (rpm ENVR, file path, selinux label) -> object and avoid rechecksumming each time. And even for files that aren't known, we can parallelize commit with unpacking, etc. (Ok assuming treecompose-post won't mutate anything).
2016-01-12 07:07:24 +03:00
unpacker: major rework - Delete unpack_to_dfd path - Get rid of copynpaste stuff and use the newly reworked ostree libarchive API which now supports the callbacks we need Closes: #289 Approved by: cgwalters
2016-05-20 21:14:47 +03:00
RpmOstreeUnpacker*
rpmostree_unpacker_new_at (int dfd,
const char *path,
RpmOstreeUnpackerFlags flags,
GError **error);
Major revamp/extension of libhif/unpacker code This is in preparation for `rpm-ostree container`, which handles unpacking RPMs as non-root. At the moment, I'm copying code in from both ostree's libarchive bits (fixable...may need to export some utility functions) and some functions from libhif (harder, see: http://lists.rpm.org/pipermail/rpm-ecosystem/2016-January/000297.html ) There's lots more cleanup to do here, but I don't want to block on the resolution of the libhif changes.
2016-01-26 22:34:51 +03:00
gboolean
rpmostree_unpacker_read_metainfo (int fd,
Header *out_header,
gsize *out_cpio_offset,
rpmfi *out_fi,
GError **error);
unpacker: major rework - Delete unpack_to_dfd path - Get rid of copynpaste stuff and use the newly reworked ostree libarchive API which now supports the callbacks we need Closes: #289 Approved by: cgwalters
2016-05-20 21:14:47 +03:00
const char*
rpmostree_unpacker_get_ostree_branch (RpmOstreeUnpacker *unpacker);
Major revamp/extension of libhif/unpacker code This is in preparation for `rpm-ostree container`, which handles unpacking RPMs as non-root. At the moment, I'm copying code in from both ostree's libarchive bits (fixable...may need to export some utility functions) and some functions from libhif (harder, see: http://lists.rpm.org/pipermail/rpm-ecosystem/2016-January/000297.html ) There's lots more cleanup to do here, but I don't want to block on the resolution of the libhif changes.
2016-01-26 22:34:51 +03:00
unpacker: major rework - Delete unpack_to_dfd path - Get rid of copynpaste stuff and use the newly reworked ostree libarchive API which now supports the callbacks we need Closes: #289 Approved by: cgwalters
2016-05-20 21:14:47 +03:00
gboolean
rpmostree_unpacker_unpack_to_ostree (RpmOstreeUnpacker *unpacker,
OstreeRepo *repo,
OstreeSePolicy *sepolicy,
char **out_commit,
GCancellable *cancellable,
GError **error);
Reference in New Issue Copy Permalink