Commit Graph

3810 Commits

Author SHA1 Message Date
dependabot[bot]
bb0fca0873
build(deps): bump curl from 0.4.37 to 0.4.38
Bumps [curl](https://github.com/alexcrichton/curl-rust) from 0.4.37 to 0.4.38.
- [Release notes](https://github.com/alexcrichton/curl-rust/releases)
- [Commits](https://github.com/alexcrichton/curl-rust/compare/curl-sys-0.4.37...0.4.38)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-31 06:10:34 +00:00
Jonathan Lebon
32325ce109
Merge pull request #2857 from cgwalters/remove-ex-container
importer: Remove traces of unprivileged import
2021-05-26 10:59:57 -04:00
Luca BRUNO
f2b1f2038b packaging/spec: require rpm >= 4.16.0
This adds a minimum required version on rpm-devel >= 4.16.0.
rpm-ostree uses the new comparison APIs from 'rpmver.h', which
did not exist on previous versions.
2021-05-26 09:38:12 -04:00
Colin Walters
8044f69de8 importer: Remove traces of unprivileged import
This was only used for the code that was removed in
https://github.com/coreos/rpm-ostree/pull/2344 and
https://github.com/coreos/rpm-ostree/pull/2410
2021-05-25 20:31:18 -04:00
Jonathan Lebon
0950488d71
Merge pull request #2849 from cgwalters/variant-utils
rust: Port some bits to new ostree_ext::variant_utils
2021-05-25 16:38:51 -04:00
Jonathan Lebon
f3ccb97685
Merge pull request #2842 from cgwalters/remove-more-rojig-bits 2021-05-25 16:36:03 -04:00
Colin Walters
9244d7a8ae daemon: Make actually initiating reboot asynchronous
Alternative to https://github.com/coreos/rpm-ostree/pull/2845
which moved the `reboot` invocation into the client (which I think
still makes sense in some cases).

Previously we were starting the reboot before we're returned
a success reply to the client, so it could see the daemon killed
by `SIGTERM` and hence emit a spurious error.

(Really in this case any 3 of the calling process, the client
 binary or the daemon could be killed in any order, so it's messy
 but this just closes one race)

For cleanliness we reject starting any new transactions after the daemon has
started a reboot.

Closes: https://github.com/coreos/rpm-ostree/issues/1348
2021-05-25 12:58:38 -04:00
Luca Bruno
d799cfe537
Merge pull request #2851 from coreos/dependabot/submodules/libdnf-1b9efdc
build(deps): bump libdnf from `fefe0b6` to `1b9efdc`
2021-05-25 07:03:47 +00:00
Luca Bruno
d0fa576854
Merge pull request #2852 from coreos/dependabot/cargo/rayon-1.5.1
build(deps): bump rayon from 1.5.0 to 1.5.1
2021-05-24 11:04:31 +00:00
dependabot[bot]
010e85750a
build(deps): bump rayon from 1.5.0 to 1.5.1
Bumps [rayon](https://github.com/rayon-rs/rayon) from 1.5.0 to 1.5.1.
- [Release notes](https://github.com/rayon-rs/rayon/releases)
- [Changelog](https://github.com/rayon-rs/rayon/blob/master/RELEASES.md)
- [Commits](https://github.com/rayon-rs/rayon/compare/rayon-core-v1.5.0...v1.5.1)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-24 06:14:55 +00:00
dependabot[bot]
970a85844b
build(deps): bump libdnf from fefe0b6 to 1b9efdc
Bumps [libdnf](https://github.com/rpm-software-management/libdnf) from `fefe0b6` to `1b9efdc`.
- [Release notes](https://github.com/rpm-software-management/libdnf/releases)
- [Commits](fefe0b69e8...1b9efdcb7e)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-24 05:50:03 +00:00
Colin Walters
d7a0a67ac8 rust: Port some bits to new ostree_ext::variant_utils
Trying to deduplicate this stuff there.
2021-05-21 17:45:33 -04:00
Colin Walters
7082822efa tree-wide: Remove (almost) all remaining rojig bits
The only part left that we will need to keep ~forever is
the treefile parsing `rojig:` because it's used by coreos-assembler.
But all we need is to propagate it into the JSON treefile.
2021-05-19 17:28:54 -04:00
Colin Walters
5a89dcee76 rust/treefile: Remove rojig spec writing
One thing I realized is we need to keep the `rojig:` bit
in the treefile because we're (ab)using it in coreos-assembler
for image naming.

But we don't need the spec file generation bits, so that can go.
2021-05-19 17:28:54 -04:00
Colin Walters
5c0b64535a util: Remove rojig cache branch mapping functions
Not used.
2021-05-19 17:28:54 -04:00
Colin Walters
05bc9beac5 rust/origin: Remove rojig bits
Has never been used.
2021-05-19 17:28:54 -04:00
Colin Walters
727b79acb8 origin: Remove rojig bits
Nothing calls these now.
2021-05-19 17:28:52 -04:00
Colin Walters
746c0593b3 daemon/sysroot: Replace some rojig code with g_assert_not_reached()
Prep for removing the APIs entirely.
2021-05-19 17:28:20 -04:00
Colin Walters
82f024d45b core: Remove rojig bits
Nothing uses this code now.
2021-05-19 17:28:20 -04:00
Colin Walters
f8ab5c2669 importer: Remove rojig bits 2021-05-19 17:28:20 -04:00
Jonathan Lebon
da84ab872c
Merge pull request #2827 from cgwalters/client-cliwrap
Add support for `rpm-ostree deploy --ex-cliwrap=true`
2021-05-19 15:57:41 -04:00
Colin Walters
d40434db47 Add support for rpm-ostree deploy --ex-cliwrap=true
This is a better alternative to https://github.com/coreos/fedora-coreos-config/pull/830

Basically rather than trying to send this out to all FCOS users,
it's much saner to allow people to opt-in to it locally.

If we'd finished https://github.com/coreos/rpm-ostree/issues/2326
then this would be something as trivial as:
```
$ echo 'cliwrap: true' > /etc/rpm-ostree.d/cliwrap.yaml
$ rpm-ostree rebuild
```

Unfortunately that's not the world we live in, so a whole lot of
layers here need crossing to just propagate a boolean.  And it
interacts in a tricky way with our change detection code.

But, it works and will allow people to try this out.

Other fixed problems:

- Our `rpm --verify` wrapping was broken
- Dropping privileges clashed with the default directory being `/root`,
  so `chdir(/)` too
2021-05-19 14:42:18 -04:00
Colin Walters
79c3641166 daemon: If we can't figure out auth rule, use override
This is needed for `deploy --ex-cliwrap=true` which is kind
of like a local override.
2021-05-19 14:42:18 -04:00
Jonathan Lebon
11718b9715
Merge pull request #2841 from cgwalters/remove-more-rojig
Remove large chunks of rojig code
2021-05-19 10:51:21 -04:00
Jonathan Lebon
1a6eedf0e3 man/rpm-ostree: Document install --idempotent
This was brought up in #2830.
2021-05-18 17:32:35 -04:00
Colin Walters
562e03f7c1 Remove large chunks of rojig code
The inevitable followup to https://github.com/coreos/rpm-ostree/pull/2278
that I was too cowardly to do at the time.  But it's time to admit
the 2 months or so of work on this was wasted.  We have too much
tech debt and this is a large chunk of C/C++ code that touches everything
in the codebase in a nontrivial way.

Bigger picture, I'm going to work on
https://github.com/coreos/fedora-coreos-tracker/issues/828
which will strongly orient rpm-ostree towards the container world instead.
We'll still obviously keep the rpm package world around, but only
as a secondary layer.  What rojig was trying to do in putting "images"
inside an RPM was conflating layers.  It would have had a lot of
benefits probably if we'd truly pushed it over the edge into completion,
but that didn't happen.  Let's focus on containers instead.

There's still a lot more rojig code to delete but this first patch removes
the bulk of it.  Touching everything that references e.g. `RPMOSTREE_REFSPEC_TYPE_ROJIG`
etc. can come as a 3rd phase.
2021-05-18 17:31:36 -04:00
Luca Bruno
ba6a2acb4d
Merge pull request #2837 from lucab/ups/importer-var-lib-rpm
importer: align /var/lib/rpm handling
2021-05-18 15:09:26 +00:00
Colin Walters
54a011df40 Update to ostree-ext v0.1.2, add new ex-container command
This new `rpm-ostree ex-container` CLI is just code copied
from the `ostree-ext-cli container` binary code.  In the future
I may just add the CLI code as a library API too to simplify this.

For now, I don't want to try to add a new Rust CLI as an RPM
package for example.  This exposes it via rpm-ostree, and
in the future rpm-ostree may have some layering on top of this
anyways.
2021-05-18 09:51:35 -04:00
Luca BRUNO
62f311ba9b
importer: align /var/lib/rpm handling
This reworks the special-case handling of `/var/lib/rpm`, in order
to make it uniform across codepaths and outside of auto-tmpfiles logic.
It prepares for further oxidation and auto-tmpfiles codepaths unification.
2021-05-18 12:36:45 +00:00
Luca Bruno
38c25bfb75
Merge pull request #2834 from coreos/dependabot/cargo/serde-1.0.126
build(deps): bump serde from 1.0.125 to 1.0.126
2021-05-17 12:16:39 +00:00
dependabot[bot]
cd27dc3825
build(deps): bump serde from 1.0.125 to 1.0.126
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.125 to 1.0.126.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.125...v1.0.126)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-17 11:15:08 +00:00
Luca Bruno
3b33848d75
Merge pull request #2835 from coreos/dependabot/cargo/curl-0.4.37
build(deps): bump curl from 0.4.36 to 0.4.37
2021-05-17 11:14:07 +00:00
dependabot[bot]
a9aa742bc8
build(deps): bump curl from 0.4.36 to 0.4.37
Bumps [curl](https://github.com/alexcrichton/curl-rust) from 0.4.36 to 0.4.37.
- [Release notes](https://github.com/alexcrichton/curl-rust/releases)
- [Commits](https://github.com/alexcrichton/curl-rust/compare/curl-sys-0.4.36...curl-sys-0.4.37)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-17 08:11:26 +00:00
Luca Bruno
b2edfd94d4
Merge pull request #2832 from coreos/dependabot/cargo/subprocess-0.2.7
build(deps): bump subprocess from 0.2.6 to 0.2.7
2021-05-17 07:51:00 +00:00
Luca Bruno
3ef74fac0c
Merge pull request #2833 from coreos/dependabot/cargo/ostree-ext-0.1.2
build(deps): bump ostree-ext from 0.1.0 to 0.1.2
2021-05-17 07:42:51 +00:00
dependabot[bot]
275bf4a2bd
build(deps): bump ostree-ext from 0.1.0 to 0.1.2
Bumps [ostree-ext](https://github.com/ostreedev/ostree-ext) from 0.1.0 to 0.1.2.
- [Release notes](https://github.com/ostreedev/ostree-ext/releases)
- [Commits](https://github.com/ostreedev/ostree-ext/commits)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-17 06:05:20 +00:00
dependabot[bot]
e6d64586f2
build(deps): bump subprocess from 0.2.6 to 0.2.7
Bumps [subprocess](https://github.com/hniksic/rust-subprocess) from 0.2.6 to 0.2.7.
- [Release notes](https://github.com/hniksic/rust-subprocess/releases)
- [Commits](https://github.com/hniksic/rust-subprocess/compare/release/0.2.6...release/0.2.7)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-17 06:05:15 +00:00
Colin Walters
a6da3c08d4 passwd: Make default perms 0644
This matches the default from the RPM, and we don't want
the file to be writable if an admin adds a user to the `root`
group.  (Which IMO is just a bad idea, but
for historical reasons OpenShift suggests this for
images
https://docs.openshift.com/container-platform/4.7/openshift_images/create-images.html#images-create-guide-openshift_create-images
for example)
2021-05-13 17:49:07 -04:00
Luca Bruno
58684c43f1
Merge pull request #2823 from coreos/ups/release-steps
docs: update release steps
2021-05-11 19:12:23 +00:00
Jonathan Lebon
8cc31a20b2
Merge pull request #2816 from travier/rename-ext
*: rename master branch to main (for external projects)
2021-05-11 13:15:33 -04:00
Luca BRUNO
1e50821bcb
docs: update release step
This fixes the release instructions.
2021-05-11 16:11:36 +00:00
Timothée Ravier
aed0f194ad *: rename master branch to main (external repos) 2021-05-11 18:11:30 +02:00
Jonathan Lebon
195807870a
Merge pull request #2815 from travier/rename
*: rename master branch to main
2021-05-11 12:03:08 -04:00
Luca Bruno
2f75135d56
Merge pull request #2822 from lucab/release-2021.5
Release 2021.5
2021-05-11 15:09:07 +00:00
Luca BRUNO
c0081311dd
Release 2021.5
New release `2021.5`.
2021-05-11 13:56:26 +00:00
Jonathan Lebon
5d79fbf375
Merge pull request #2819 from jlebon/pr/skip-branch-validation
app/deploy: Add --skip-branch-check
2021-05-11 09:18:20 -04:00
Luca BRUNO
7c7d00421f libpriv/importer: move path-checking logic to Rust
This moves the path-checking logic to Rust.
Additionally it tweaks the /opt conditions to use absolute paths.
2021-05-10 19:49:18 -04:00
Jonathan Lebon
ffb8353b11 lockfile: Allow metadata field in locked packages
This field will allow humans to shove additional structured metadata
into lockfiles which could then be used by higher-level tools.

See: https://github.com/coreos/fedora-coreos-config/pull/965
2021-05-10 19:48:42 -04:00
Jonathan Lebon
771361d59b lockfile: Add missing serde(deny_unknown_fields)
Match the treefile spec and default to denying unknown fields.
2021-05-10 19:48:42 -04:00
Jonathan Lebon
18a00f2825
Merge pull request #2820 from Razaloc/fu2776
kargs: Simplify conditional statements
2021-05-10 11:46:09 -04:00