4 Commits

Author	SHA1	Message	Date
Colin Walters	e86dc13c49	bwrap: Don't use --unshare-net in nspawn by default ... This will fix rpm-ostree-in-mock-in-koji. The drawback is minor: post scripts will have network access. But we're going to be testing the no-network case in our Docker-based builds, so that's fine. Closes: #672 Approved by: jlebon	2017-03-10 17:27:56 +00:00
Colin Walters	22048b25a7	scripts: Use tmpfs for /var/tmp, not the host's /tmp ... We don't want to expose the host's `/tmp` since that means scripts could potentially find things like the X11 socket or whatever. To debug things better, add a quick bash script to run bwrap like the C code does. Perhaps down the line we can add `rpm-ostree internals run-bwrap` or so. Closes: #647 Approved by: jlebon	2017-02-28 23:37:15 +00:00
James Antill	855ab9ad01	compose: Add check-passwd/group JSON options, fails compose if uids/gids change ... Verify uid/gid on files, directories and symlinks Just output a msg when user/group is removed with no files json-parsing: Add functions for strictly dealing with ints passwd/json: Add simple scripts to convert passwd/group files to json data docs: Check-passwd/groups and ignore-remove-users/groups JSON config. entries	2014-12-18 16:59:33 -05:00
Colin Walters	04028b8f81	scripts/ostree-ls-big-files.js: New script to analyze repo files for size	2014-01-29 17:55:07 -05:00