b3e16a3313
The fact we weren't doing this is an oversight. We should *really* be using the PID namespace at a minimum, but I decided to just turn them all on. The one that seems most likely to potentially introduce a regression is turning on the netns (i.e. disabling networking). But I can't really think of what we'd be running in a script today that would break in practice. Closes: #572 Approved by: jlebon
rpm-ostree Overview
rpm-ostree is a hybrid image/package system. It uses OSTree as a base image format, and supports RPM on both the client and server side using libhif.
For more information, see the online manual: Read The Docs (rpm-ostree)
Features:
- Atomic upgrades and rollback for host system updates
- A server side tool to consume RPMs and commit them to an OSTree repository
- A system daemon to consume OSTree commits as updates
Projects using rpm-ostree
Project Atomic uses rpm-ostree to provide a minimal host for Docker formatted Linux containers. Replicating a base immutable OS, then using Docker for applications.
Manual
For more information, see the online manual: Read The Docs (rpm-ostree)