Commit Graph

6138 Commits

Author SHA1 Message Date
Jonathan Lebon 4a83cf4a36
Merge pull request #2738 from lucab/ups/lib-zipl-check-open-errors 2022-10-13 11:22:38 -04:00
Dan Nicholson 1075e58c16
Merge pull request #2737 from lucab/ups/repo-checkout-fix-uid-typo
lib/repo-checkout: fix typo in error message
2022-10-13 06:41:55 -06:00
Luca BRUNO 39ef6253e9
lib/bootloader-zipl: check for errors when opening initrd
This adds a missing error check when opening an initrd in s390x
Secure Execution (SE) logic.
It was detected by RH internal static checks.
2022-10-13 10:48:38 +00:00
Luca BRUNO 1ea5e8e7d2
lib/repo-checkout: fix typo in error message
This fixes a typo in an error message, resulting in a GID vs UID
mixup. It was detected by RH internal static checks.
2022-10-13 10:38:11 +00:00
Luca Bruno e0cc8069c9
Merge pull request #2730 from ostreedev/release-2022.6
Release 2022.6
2022-10-07 16:40:10 +00:00
Luca BRUNO b147166d06
configure: post-release version bump 2022-10-07 07:56:24 +00:00
Luca BRUNO eee649d902
Release 2022.6 2022-10-07 07:54:09 +00:00
Luca Bruno 017ea3edc1
Merge pull request #2721 from cgwalters/link-otto
README.md: Link otto
2022-09-28 21:54:53 +00:00
Colin Walters b04dde8882
Merge pull request #2717 from mangelajo/support-whiteouts
Support overlayfs whiteouts on checkout
2022-09-28 08:35:24 -04:00
Colin Walters b83032d0d3 README.md: Link otto
Another project in the ostree/container space.
2022-09-28 08:30:18 -04:00
Miguel Angel Ajo e234b630f8 Support overlayfs whiteouts on checkout
Introduces an intermediate format for overlayfs storage, where
.wh-ostree. prefixed files will be converted into char 0:0
whiteout devices used by overlayfs to mark deletions across layers.

The CI scripts now uses a volume for the scratch directories
previously in /var/tmp otherwise we cannot create whiteout
devices into an overlayfs mounted filesystem.

Related-Issue: #2712
2022-09-28 12:26:31 +02:00
Luca Bruno 4e51f22145
Merge pull request #2720 from lucab/ups/lib-deploy-ignore-result
lib/sysroot-deploy: explicitly handle `g_variant_lookup` results
2022-09-26 12:40:04 +00:00
Luca BRUNO a1018840f4
lib/sysroot-deploy: explicitly handle `g_variant_lookup` results
This explicitly ignores the results of two optional variant lookups,
in order to pacify a RHT internal static analyzer.
2022-09-26 07:42:12 +00:00
Colin Walters f442f02c15
Merge pull request #2718 from lucab/ups/repo-initialize-valid-bootloader
lib/repo: properly initialize boolean variable
2022-09-23 11:09:13 -04:00
Luca BRUNO 5412dc49ae
lib/repo: properly initialize boolean variable
This initializes a boolean variable that was previously left
uninitialized. It was detected by a RHT internal static analyzer.
2022-09-23 13:02:00 +00:00
Colin Walters 404fcc0206
Merge pull request #2716 from dbnicholson/max-metadata-size-doc
lib/pull: Fix max-metadata-size documentation
2022-09-18 15:04:54 -04:00
Dan Nicholson 631e014bd6 lib/pull: Fix max-metadata-size documentation
The documented option is incorrect and has been since it's introduction
in 2c55bc6997.
2022-09-18 12:15:18 -06:00
Dan Nicholson f2d8b583e0
Merge pull request #2714 from andreamtp/patch-1
Fix recursive git archive reference
2022-09-17 12:12:09 -06:00
Andrea Perotti 565ad4a1b4
Fix recursive git archive reference
Broken link for "recursive git archive" example
2022-09-17 11:00:46 +02:00
Colin Walters c6c3c5ae9f
Merge pull request #2711 from lucab/ups/sign-assertions
lib/sign: convert invariant checks to assertions
2022-09-09 10:05:27 -04:00
Luca BRUNO ace973186c
lib/sign: convert invariant checks to assertions
This converts several invariant checks to asserts. Most of the
functions in this file were already using assertions, so this aligns
the remaining few outliers to the rest.
2022-09-09 13:20:43 +00:00
Luca Bruno c2dc6d3893
Merge pull request #2709 from lucab/ups/otutils-variant-builder-error
otutil: add error handling to variant builders
2022-09-08 14:41:53 +00:00
Luca BRUNO 542b79cfeb
otutil: add error handling to variant builders
This enhances a bunch of helpers related to GVariant building, in
order to properly handle errors and avoid some potential cases of
unexpected NULL results.
2022-09-08 13:53:05 +00:00
Colin Walters 6873a2511b
Merge pull request #2708 from nikita-dubrovskii/sh_to_c
s390x: drop shell code for `initrd` modification in SE case
2022-09-08 07:45:04 -04:00
Nikita Dubrovskii c6a53ef6e8 s390x: use 'libarchive' to modify initrd in SE case 2022-09-08 11:41:34 +02:00
Luca Bruno dc0a5152c7
Merge pull request #2710 from lucab/ups/lib-mtree-redundant-validation
lib/mtree: drop redundant name checks
2022-09-07 13:24:36 +00:00
Luca BRUNO 642efe924f
lib/mtree: drop redundant name checks
This drops several NULL checks against filename input argument.
Those checks are both redundant (as filename validation already
checks for that) and dangerous (as they return early without
setting an error value).
2022-09-07 12:33:37 +00:00
Luca Bruno 73eda79662
Merge pull request #2707 from lucab/ups/libostree-bootloader-asserts
lib/bootloader: assert invariants
2022-09-06 00:36:11 +00:00
Nikita Dubrovskii 769ac686f1 s390x: simplify 's390x-se-luks-gencpio' script 2022-09-05 12:08:35 +02:00
Luca Bruno fdbc05dab0
Merge pull request #2706 from git-bruh/main
ostree-fetcher-curl: check for HTTP2 support before trying to use it
2022-09-05 09:29:29 +00:00
Luca BRUNO 273089d9e4
lib/bootloader: assert invariants
This tweaks some invariants checks into full assertions, in order
to avoid returning to the caller in case of known invalid states.
2022-09-05 09:27:38 +00:00
Nikita Dubrovskii 49ce9b0289 s390x: ensure both 'root' and 'boot' luks keys exist 2022-09-05 10:46:13 +02:00
git-bruh 35d6ea88f6
ostree-fetcher-curl: check for HTTP2 support before trying to use it 2022-09-03 12:50:00 +05:30
Dan Nicholson eed9e9f335
Merge pull request #2704 from cgwalters/finalize-no-sigterm
finalize-staged: Don't listen to `SIGTERM`, just let kernel exit us
2022-08-30 16:32:46 -06:00
Colin Walters 683e4eff08 finalize-staged: Don't listen to `SIGTERM`, just let kernel exit us
Followup from discussion in
https://github.com/ostreedev/ostree/pull/2544#discussion_r958840936

This is more efficient; no need to have the kernel context switch
us in at shutdown time just so we can turn around and call
`exit()`.
2022-08-30 17:50:03 -04:00
Colin Walters 6651b72a7a
Merge pull request #2544 from dbnicholson/finalize-block
finalize-staged: Ensure /boot and /sysroot automounts don't expire
2022-08-30 15:12:32 -04:00
Dan Nicholson f3db79e7fa finalize-staged: Ensure /boot automount doesn't expire
If `/boot` is an automount, then the unit will be stopped as soon as the
automount expires. That's would defeat the purpose of using systemd to
delay finalizing the deployment until shutdown. This is not uncommon as
`systemd-gpt-auto-generator` will create an automount unit for `/boot`
when it's the EFI System Partition and there's no fstab entry.

To ensure that systemd doesn't stop the service early when the `/boot`
automount expires, introduce a new unit that holds `/boot` open until
it's sent `SIGTERM`. This uses a new `--hold` option for
`finalize-staged` that loads but doesn't lock the sysroot. A separate
unit is used since we want the process to remain active throughout the
finalization run in `ExecStop`. That wouldn't work if it was specified
in `ExecStart` in the same unit since it would be killed before the
`ExecStop` action was run.

Fixes: #2543
2022-08-30 09:16:39 -06:00
Dan Nicholson e30a3b6b17 main: Factor out sysroot loading
It can be useful to parse the options and initialize the sysroot without
actually loading it until later. Factor out the sysroot loading to a new
`ostree_admin_sysroot_load` and add a new
`OSTREE_ADMIN_BUILTIN_FLAG_NO_LOAD` flag to accommodate this.
2022-08-30 08:46:26 -06:00
Colin Walters 06cd216f4e
Merge pull request #2695 from HuijingHei/kargs-stage
Fix `ostree admin kargs edit-in-place` assertion when deployments are pending
2022-08-29 08:23:15 -04:00
Huijing Hei 37aa2ac287 Fix `ostree admin kargs edit-in-place` assertion when deployments
are pending

This is to support pending deployments instead of rasing assertion.
For example:
```
$ sudo rpm-ostree kargs --append=foo=bar
$ sudo ostree admin kargs edit-in-place --append-if-missing=foobar
```
After reboot we get both `foo=bar foobar`.

Fix https://github.com/ostreedev/ostree/issues/2679
2022-08-29 11:31:32 +08:00
Colin Walters 93a6d7bea2
Merge pull request #2701 from cgwalters/bind-list-commits
rust: Bind `ostree_repo_list_commits_starting_with`
2022-08-24 12:03:58 -04:00
Colin Walters b55054ec24 rust: Bind `ostree_repo_list_commits_starting_with`
I wanted to use this as a fallback for
30dee81c22
2022-08-24 09:44:34 -04:00
Luca Bruno a266fabb77
Merge pull request #2702 from thesamesam/bashism
buildutil/glibtests.m4: fix bashism
2022-08-24 13:24:35 +00:00
Luca Bruno f0abd9de30
Merge pull request #2700 from jlebon/pr/staged-docs
docs: Add section about staged deployments
2022-08-24 13:17:41 +00:00
Sam James c568073d1e buildutil/glibtests.m4: fix bashism
configure scripts need to be runnable with a POSIX-compliant /bin/sh.

On many (but not all!) systems, /bin/sh is provided by Bash, so errors
like this aren't spotted. Notably Debian defaults to /bin/sh provided
by dash which doesn't tolerate such bashisms as '=='.

This retains compatibility with bash.

Fixes configure warnings/errors like:
```

checking whether to build static libraries... no
./configure: 14795: test: unexpected operator
```

Signed-off-by: Sam James <sam@gentoo.org>
2022-08-23 23:38:20 +01:00
Jonathan Lebon 8f609dddaa
Merge pull request #2698 from cgwalters/update-gir 2022-08-23 14:53:36 -04:00
Jonathan Lebon e075c51057 docs: Add section about staged deployments
I was explaining staged deployments to someone today and was looking for
a doc but we didn't have any. Fix that.
2022-08-23 10:59:40 -04:00
Dan Nicholson 51edc3a70c
Merge pull request #2699 from cgwalters/drop-debian-testing
ci: Also drop seccomp on debian testing
2022-08-23 01:35:40 -06:00
Colin Walters 21a8f39284 ci: Also drop seccomp on debian testing
I didn't deep dive into debugging this but I'm pretty sure it's
 https://gitlab.gnome.org/GNOME/glib/-/issues/2580
which is us having an older Docker in the middle here.
2022-08-22 17:00:09 -04:00
Colin Walters 629d2f5d7e rust: Update to latest git
In the future I may try to add CI that requires this to be
sync'd...
2022-08-22 15:11:51 -04:00