2 Commits

Author	SHA1	Message	Date
Colin Walters	3c0da8864b	compose: Do relabel before downloading in --ex-unified-core ... We removed this in review, but I rediscovered why I added it. We fail the `g_assert (sepolicy_matches)` if we already had packages done with the final label when we go to reuse the cache. (Basically, if we use the cache multiple times it's hard to avoid relabeling all the time which is unfortunate...gets back a bit to a way to annotate pkgcache commits as supporting multiple policies) Closes: #1109 Approved by: jlebon	2017-11-20 15:35:21 +00:00
Colin Walters	6bf4206223	compose: Add --ex-unified-core ... The "--ex" prefix here means it's an experimental option. A tremendous change here is that start to support non-uid 0, but there are various things to fix there; the unpacker for example needs to learn to set imported objects fully based on the rpmfi information (i.e. default to uid 0, since libarchive gives the current uid by default). And even when run as uid 0, there are some bugs, though I'm not sure of any showstoppers yet. For example, dracut's `dracut-install` calls `cp --preserve=xattrs` which fails to copy the `user.ostreemeta` xattrs from a checkout (it shouldn't be copying that anyways...) Nevertheless, the infrastructure behind this really helps (is almost a hard requirement for) the [jigdo effort](https://github.com/projectatomic/rpm-ostree/issues/1081). Which is really only true due to SELinux - we need to import the packages, then generate the final tree to get the final policy, then use that policy to relabel all of the packages. Closes: #940 Approved by: jlebon	2017-11-17 18:59:34 +00:00