Commit Graph

3617 Commits

Author SHA1 Message Date
Colin Walters
4daed91a7a ci/prow: Update to use new buildroot image
Matching CCI.
2021-04-07 16:08:31 +00:00
Luca Bruno
bc1e596014
Merge pull request #2727 from cgwalters/composepost-cleanup
postprocess: Move more code into Rust
2021-04-07 14:38:51 +00:00
Luca Bruno
78f3e794f7
Merge pull request #2718 from coreos/dependabot/cargo/ostree-sys-0.7.2
build(deps): bump ostree-sys from 0.7.1 to 0.7.2
2021-04-07 13:22:19 +00:00
Colin Walters
46728cfd99 postprocess: Move more code into Rust
Previously we carefully ported functionality bit by bit here.
Now take the last step and move it all in to Rust.

A reason I didn't do this in one go before is around the
incredibly twisted handling of the `/etc` vs `/usr/etc`.

I think longer term we should aim to basically have all
of our code keep it as `/etc` up until the very end.  For
now we just do a rename dance around some of the add/remove
files code.
2021-04-07 11:32:40 +00:00
Colin Walters
86f9612395 composeutil: Clarify which dev failed to create 2021-04-07 11:32:08 +00:00
Jonathan Lebon
4624c3bdf8 app/db: Add db diff --advisories
This will be used by at least coreos-assembler to store in `meta.json`
so it's easy to tell new advisories that appeared in a given build.
2021-04-06 17:04:51 -04:00
Jonathan Lebon
136a3ea7e9 app/db: Add db list --advisories
This makes it easy to see the advisories stored in commit metadata.
2021-04-06 17:04:51 -04:00
Jonathan Lebon
427fe683a8 compose: Bake advisory information into commit metadata
There are a lot of use cases for this, notably:
- This allows us to display advisories without fetching updateinfo
  metadata in the pure OSTree case.
- It allows pipelines to fetch and display this information to
  sanity-check builds.
- It makes it much easier to fix the "intermediate CVEs" issue described
  in https://github.com/coreos/rpm-ostree/issues/1696#issuecomment-443861107.

This patch just adds the advisory information to the commit metadata.
There's follow-up work to make the client-side of rpm-ostree use this
data.

Also, remove the newly added metadata from the output of `rpm-ostree
status --json` for the same reason we remove the rpmdb. A follow-up
patch will teach `rpm-ostree db list/diff` to output advisories.

Closes: #1696
2021-04-06 17:04:51 -04:00
dependabot[bot]
23e53bc492
build(deps): bump ostree-sys from 0.7.1 to 0.7.2
Bumps [ostree-sys](https://gitlab.com/fkrull/ostree-rs) from 0.7.1 to 0.7.2.
- [Release notes](https://gitlab.com/fkrull/ostree-rs/tags)
- [Commits](https://gitlab.com/fkrull/ostree-rs/compare/ostree-sys/0.7.1...ostree-sys/0.7.2)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-06 16:57:21 +00:00
Luca BRUNO
17d80dc566 passwd: aling all bridge functions to return CxxResult
This updates all bridged functions in order to return CxxResult in
a uniform way.
2021-04-05 13:44:44 -04:00
Luca BRUNO
d922f46bfd libpriv/json-parsing: remove dead code
This removes some JSON-handling helper methods which are not used
anymore. All the consumers have been moved to directly use the
treefile logic in Rust in the meanwhile.
2021-04-05 13:43:58 -04:00
Jonathan Lebon
b7a27e2328 app/clientlib: Support printing advisories without padding 2021-04-05 13:31:25 -04:00
Jonathan Lebon
4185178be7 app/clientlib: Make function for printing advisories public
We'll use this in a future patch.
2021-04-05 13:31:25 -04:00
Jonathan Lebon
6df0efb0c6 libpriv/util: Add g_variant_byteswap helpers
Will use these in a future patch.
2021-04-05 13:31:25 -04:00
Jonathan Lebon
4c5436e666 daemon: Move advisory GVariant generation to libpriv
Prep for future patch.
2021-04-05 13:31:25 -04:00
Jonathan Lebon
6077dcfae3 rust/treefile: Drop unnecessary semi-colons
Latest compiler really wants me to remove these.
2021-04-05 13:31:25 -04:00
Luca Bruno
689405d5ee
Merge pull request #2720 from coreos/dependabot/cargo/libc-0.2.92
build(deps): bump libc from 0.2.90 to 0.2.92
2021-04-01 12:45:44 +00:00
dependabot[bot]
857cb973ce
build(deps): bump libc from 0.2.90 to 0.2.92
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.90 to 0.2.92.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.90...0.2.92)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-01 11:30:39 +00:00
Jonathan Lebon
9264cb570f
Merge pull request #2701 from coreos/dependabot/submodules/libdnf-31a8b8b
build(deps): bump libdnf from `5d45a79` to `31a8b8b`
2021-04-01 07:30:29 -04:00
Luca Bruno
2de93143c5
Merge pull request #2717 from coreos/dependabot/cargo/serde-1.0.125
build(deps): bump serde from 1.0.124 to 1.0.125
2021-04-01 10:29:10 +00:00
dependabot[bot]
89f6572f69
build(deps): bump serde from 1.0.124 to 1.0.125
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.124 to 1.0.125.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.124...v1.0.125)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-01 09:36:23 +00:00
Luca Bruno
203a56b73c
Merge pull request #2707 from coreos/dependabot/cargo/system-deps-3.1.1
build(deps): bump system-deps from 3.1.0 to 3.1.1
2021-04-01 09:35:02 +00:00
dependabot[bot]
70f934a6ad
build(deps): bump system-deps from 3.1.0 to 3.1.1
Bumps [system-deps](https://github.com/gdesmott/system-deps) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/gdesmott/system-deps/releases)
- [Commits](https://github.com/gdesmott/system-deps/compare/v3.1.0...v3.1.1)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-31 20:44:51 +00:00
Jonathan Lebon
0d12cb5548
Merge pull request #2702 from coreos/dependabot/cargo/cxx-1.0.40 2021-03-31 16:43:29 -04:00
Jonathan Lebon
d66f2bfd92
Merge pull request #2711 from coreos/dependabot/cargo/rust-ini-0.17.0
build(deps): bump rust-ini from 0.16.1 to 0.17.0
2021-03-31 10:39:02 -04:00
Jonathan Lebon
306715de1c
Merge pull request #2714 from jlebon/pr/daemon-architecture
docs: Add page about the daemon interface
2021-03-31 09:25:35 -04:00
Jonathan Lebon
e54d376055 build(deps): bump cxx and cxx-build from 1.0.33 to 1.0.41
The 1.0.41 includes a fix we need:

https://github.com/dtolnay/cxx/issues/799
2021-03-30 20:25:22 -04:00
Jonathan Lebon
7b2c2db3c9 docs: Add page about the daemon interface
To help new contributors trying to understand how it all fits together.
2021-03-30 16:09:22 -04:00
dependabot[bot]
77ce1064a3
build(deps): bump rust-ini from 0.16.1 to 0.17.0
Bumps [rust-ini](https://github.com/zonyitoo/rust-ini) from 0.16.1 to 0.17.0.
- [Release notes](https://github.com/zonyitoo/rust-ini/releases)
- [Commits](https://github.com/zonyitoo/rust-ini/compare/v0.16.1...v0.17.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-30 12:39:33 +00:00
Jonathan Lebon
bef1fc7926
Merge pull request #2703 from coreos/dependabot/cargo/anyhow-1.0.40
build(deps): bump anyhow from 1.0.38 to 1.0.40
2021-03-30 08:38:23 -04:00
Ukpai Ugochi
695312fc43 Help text on error: Transaction in progress #2341
This is a feature request, to add help text to get new users unblocked.
2021-03-30 08:37:35 -04:00
Jonathan Lebon
914e79f414
Merge pull request #2706 from cgwalters/depmod-rs
Migrate `depmod` helper to core.rs
2021-03-29 16:32:40 -04:00
Jonathan Lebon
b73c2a6f0d
Merge pull request #2708 from cgwalters/more-indoc
rust: More usage of indoc
2021-03-29 14:52:04 -04:00
Colin Walters
4298fd4ddd rust: More usage of indoc
There's a lot more of this in the code, just decided to do a little
bit more in treefile.rs mostly.
2021-03-29 17:50:06 +00:00
Kelvin Fan
dedf2a2653
Merge pull request #2700 from cgwalters/indoc
rust: Use indoc crate
2021-03-29 13:18:43 -04:00
Colin Walters
eba911c00a Migrate depmod helper to core.rs
Since it's called from both client and compose side, it should be
in core.  Migrate to Rust too.
2021-03-29 16:43:19 +00:00
Jonathan Lebon
be4fe77ebb
Merge pull request #2692 from cgwalters/bwrap-rs 2021-03-29 12:42:18 -04:00
Jonathan Lebon
307d52044b
Merge pull request #2705 from cgwalters/fix-treefile-leak
compose: Fix leak of Rust treefile object
2021-03-29 12:30:44 -04:00
Colin Walters
a07e331eb1 compose: Fix leak of Rust treefile object
I did at one point look at converting this stuff into a C++
object but that led in to a whole rathole around a C++ `GObject<>`
smart pointer like glibmm has.  But that would take over the code
and it's better to just port to Rust.
2021-03-29 14:51:47 +00:00
Colin Walters
fd69eeec5a bwrap: Add more docstrings
Trying to do this on general principle.
2021-03-29 14:45:35 +00:00
Colin Walters
a8f45b5848 bwrap: Clean up /sys ro binds
Less repetitive and a bit more documented this way.
2021-03-29 14:45:35 +00:00
Colin Walters
922e6847bc bwrap: Clean up capability additions
It's easier to read this way.
2021-03-29 14:45:35 +00:00
Colin Walters
8ba6348267 bwrap: Create a RoFilesMount struct
This cleans up the drop handling/ownership.
2021-03-29 14:45:35 +00:00
Colin Walters
fa81456cbf Rewrite bwrap code in Rust
I tried to do this incrementally but it snowballed.
2021-03-29 14:45:35 +00:00
Colin Walters
40dc281e5e bwrap: Initial Rust stub
This compiles and demonstrates moving a little bit of the bwrap
code to Rust.
2021-03-29 14:44:09 +00:00
Jonathan Lebon
ba9f88f477 spec: Add more deps from libdnf
It's important to track these closely to avoid odd runtime issues on
clients. See previous commit for details.
2021-03-29 10:37:13 -04:00
Jonathan Lebon
8e22075721 RELEASE: Add step to update libdnf's deps
In the latest release, we should've bumped librepo's requirement. It
doesn't use symbol versioning, so we don't automatically get this. At
release time at least, we should just peek at the spec we're baking in
and pick up from that.

Clearly the updated deps are in the buildroot if CI is green, so this
should mostly be a matter of bumping to versions which are already
shipped in Fedora.

See: https://github.com/rpm-software-management/libdnf/pull/1128
See: https://github.com/coreos/rpm-ostree/pull/2644
See: https://bugzilla.redhat.com/show_bug.cgi?id=1943773
2021-03-29 10:37:13 -04:00
dependabot[bot]
63a2a727cc
build(deps): bump anyhow from 1.0.38 to 1.0.40
Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.38 to 1.0.40.
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.38...1.0.40)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-29 06:46:16 +00:00
dependabot[bot]
cc8adac055
build(deps): bump cxx from 1.0.33 to 1.0.40
Bumps [cxx](https://github.com/dtolnay/cxx) from 1.0.33 to 1.0.40.
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](https://github.com/dtolnay/cxx/compare/1.0.33...1.0.40)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-29 06:46:10 +00:00
dependabot[bot]
8ffd934c25
build(deps): bump libdnf from 5d45a79 to 31a8b8b
Bumps [libdnf](https://github.com/rpm-software-management/libdnf) from `5d45a79` to `31a8b8b`.
- [Release notes](https://github.com/rpm-software-management/libdnf/releases)
- [Commits](5d45a795b3...31a8b8bcec)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-29 06:04:34 +00:00