keremet/rpm-ostree
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4c405bf62f
rpm-ostree/src
History
Colin Walters 4c405bf62f compose: Protect the system during treecompose using container APIs 
I was looking again at using hawkey/librepo, and realized just how
much I'd have to fight all of these libraries to avoid affecting
the running system.

What we really want to do with librepo/hawkey is run them effectively
unprivileged, and to hide the system's RPM database from them.  This
is a baby step towards that, by confining our existing yum.

- /usr, /etc, and /var/lib/rpm are mounted read-only
- yum is now run under CLONE_NEWPID, to avoid stray %post scripts
  affecting system processes
2014-11-10 12:13:44 -05:00
..
hif-utils.c upgrade: Print out a summary of the package delta 2014-03-28 17:34:08 -04:00
hif-utils.h upgrade: Print out a summary of the package delta 2014-03-28 17:34:08 -04:00
main.c Add --disable-compose-tooling build option 2014-09-16 21:45:30 -04:00
ostree-nspawn ostree-nspawn: Correctly shift initial root argument 2014-07-20 07:33:47 -04:00
rpmostree-builtin-compose.c Add new "compose" builtin, rename "treecompose" -> "compose tree" 2014-05-26 15:05:08 -04:00
rpmostree-builtin-rebase.c rebase: Cleanup dead variables and origin references 2014-10-16 19:10:13 -04:00
rpmostree-builtin-rollback.c Add: --sysroot and --os arguments 2014-07-17 12:59:38 -04:00
rpmostree-builtin-rpm.c rpm: Check out rpmdb in user mode 2014-10-16 14:22:11 -04:00
rpmostree-builtin-rpm.h upgrade: Download only /usr/share/rpm in check-diff 2014-08-22 15:57:27 -04:00
rpmostree-builtin-status.c status: Print the version, using timestamp column if we have all versions 2014-10-24 02:03:08 -04:00
rpmostree-builtin-upgrade.c upgrade: Honor pull flags 2014-10-17 13:42:25 -04:00
rpmostree-builtins.h Add "rpm" command, for doing rpm/yum queries on commits. 2014-07-11 02:01:41 -04:00
rpmostree-compose-builtin-sign.c Add new "compose" builtin, rename "treecompose" -> "compose tree" 2014-05-26 15:05:08 -04:00
rpmostree-compose-builtin-tree.c compose: Protect the system during treecompose using container APIs 2014-11-10 12:13:44 -05:00
rpmostree-compose-builtins.h Add new "compose" builtin, rename "treecompose" -> "compose tree" 2014-05-26 15:05:08 -04:00
rpmostree-hawkey-utils.h treecompose: Replace shell callout for package caching with builtin C 2014-11-03 16:42:16 -05:00
rpmostree-postprocess.c postprocess: Clean up rpmdb detritus 2014-11-03 15:49:32 -05:00
rpmostree-postprocess.h treecompose: Add --add-metadata-string argument for versioning 2014-10-16 19:10:42 -04:00
rpmostree-pull-progress.c Add a "rebase" builtin 2014-05-29 18:00:11 -04:00
rpmostree-pull-progress.h Add a "rebase" builtin 2014-05-29 18:00:11 -04:00
rpmostree-treepkgdiff.c treecompose: Replace shell callout for package caching with builtin C 2014-11-03 16:42:16 -05:00
rpmostree-treepkgdiff.h treecompose: Replace shell callout for package caching with builtin C 2014-11-03 16:42:16 -05:00
rpmostree-util.c treecompose: Add initial caching 2014-05-16 04:29:17 -04:00
rpmostree-util.h Namespace and share DEFINE_TRIVIAL_CLEANUP_FUNC via. rpmostree-util.h 2014-07-11 16:47:05 -04:00
rpmqa-sorted-and-clean tree compose: Delete .dbenv.lock and __db.* files from /usr/share/rpm 2014-06-06 16:28:19 -04:00
tmpfiles-ostree-integration.conf tmpfiles: Make /var/home a directory, not a symlink by default 2014-02-15 19:35:43 -05:00