Colin Walters
09238da065
I'm trying to improve the developer experience on OSTree-managed systems, and I had an epiphany the other day - there's no reason we have to be absolutely against mutating the current rootfs live. The key should be making it easy to rollback/reset to a known good state. I see this command as useful for two related but distinct workflows: - `ostree admin unlock` will assume you're doing "development". The semantics hare are that we mount an overlayfs on `/usr`, but the overlay data is in `/var/tmp`, and is thus discarded on reboot. - `ostree admin unlock --hotfix` first clones your current deployment, then creates an overlayfs over `/usr` persistent to this deployment. Persistent in that now the initramfs switchroot tool knows how to mount it as well. In this model, if you want to discard the hotfix, at the moment you roll back/reboot into the clone. Note originally, I tried using `rofiles-fuse` over `/usr` for this, but then everything immediately explodes because the default (at least CentOS 7) SELinux policy denies tons of things (including `sshd_t` access to `fusefs_t`). Sigh. So the switch to `overlayfs` came after experimentation. It still seems to have some issues...specifically `unix_chkpwd` is broken, possibly because it's setuid? Basically I can't ssh in anymore. But I *can* `rpm -Uvh strace.rpm` which is handy. NOTE: I haven't tested the hotfix path fully yet, specifically the initramfs bits.
198 lines
8.4 KiB
C
198 lines
8.4 KiB
C
/* -*- mode: C; c-file-style: "gnu"; indent-tabs-mode: nil; -*-
|
|
*
|
|
* Copyright (C) 2013 Colin Walters <walters@verbum.org>
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the
|
|
* Free Software Foundation, Inc., 59 Temple Place - Suite 330,
|
|
* Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "ostree-repo.h"
|
|
#include "ostree-deployment.h"
|
|
|
|
G_BEGIN_DECLS
|
|
|
|
#define OSTREE_TYPE_SYSROOT ostree_sysroot_get_type()
|
|
#define OSTREE_SYSROOT(obj) \
|
|
(G_TYPE_CHECK_INSTANCE_CAST ((obj), OSTREE_TYPE_SYSROOT, OstreeSysroot))
|
|
#define OSTREE_IS_SYSROOT(obj) \
|
|
(G_TYPE_CHECK_INSTANCE_TYPE ((obj), OSTREE_TYPE_SYSROOT))
|
|
|
|
_OSTREE_PUBLIC
|
|
GType ostree_sysroot_get_type (void);
|
|
|
|
_OSTREE_PUBLIC
|
|
OstreeSysroot* ostree_sysroot_new (GFile *path);
|
|
|
|
_OSTREE_PUBLIC
|
|
OstreeSysroot* ostree_sysroot_new_default (void);
|
|
|
|
_OSTREE_PUBLIC
|
|
GFile *ostree_sysroot_get_path (OstreeSysroot *self);
|
|
|
|
_OSTREE_PUBLIC
|
|
int ostree_sysroot_get_fd (OstreeSysroot *self);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_load (OstreeSysroot *self,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_load_if_changed (OstreeSysroot *self,
|
|
gboolean *out_changed,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
void ostree_sysroot_unload (OstreeSysroot *self);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_ensure_initialized (OstreeSysroot *self,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
int ostree_sysroot_get_bootversion (OstreeSysroot *self);
|
|
_OSTREE_PUBLIC
|
|
int ostree_sysroot_get_subbootversion (OstreeSysroot *self);
|
|
_OSTREE_PUBLIC
|
|
GPtrArray *ostree_sysroot_get_deployments (OstreeSysroot *self);
|
|
_OSTREE_PUBLIC
|
|
OstreeDeployment *ostree_sysroot_get_booted_deployment (OstreeSysroot *self);
|
|
|
|
_OSTREE_PUBLIC
|
|
GFile *ostree_sysroot_get_deployment_directory (OstreeSysroot *self,
|
|
OstreeDeployment *deployment);
|
|
|
|
_OSTREE_PUBLIC
|
|
char *ostree_sysroot_get_deployment_dirpath (OstreeSysroot *self,
|
|
OstreeDeployment *deployment);
|
|
|
|
_OSTREE_PUBLIC
|
|
GFile * ostree_sysroot_get_deployment_origin_path (GFile *deployment_path);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_lock (OstreeSysroot *self, GError **error);
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_try_lock (OstreeSysroot *self,
|
|
gboolean *out_acquired,
|
|
GError **error);
|
|
_OSTREE_PUBLIC
|
|
void ostree_sysroot_lock_async (OstreeSysroot *self,
|
|
GCancellable *cancellable,
|
|
GAsyncReadyCallback callback,
|
|
gpointer user_data);
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_lock_finish (OstreeSysroot *self,
|
|
GAsyncResult *result,
|
|
GError **error);
|
|
_OSTREE_PUBLIC
|
|
void ostree_sysroot_unlock (OstreeSysroot *self);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_init_osname (OstreeSysroot *self,
|
|
const char *osname,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_cleanup (OstreeSysroot *self,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_prepare_cleanup (OstreeSysroot *self,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_write_origin_file (OstreeSysroot *sysroot,
|
|
OstreeDeployment *deployment,
|
|
GKeyFile *new_origin,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_get_repo (OstreeSysroot *self,
|
|
OstreeRepo **out_repo,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_deployment_set_kargs (OstreeSysroot *self,
|
|
OstreeDeployment *deployment,
|
|
char **new_kargs,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_write_deployments (OstreeSysroot *self,
|
|
GPtrArray *new_deployments,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_deploy_tree (OstreeSysroot *self,
|
|
const char *osname,
|
|
const char *revision,
|
|
GKeyFile *origin,
|
|
OstreeDeployment *provided_merge_deployment,
|
|
char **override_kernel_argv,
|
|
OstreeDeployment **out_new_deployment,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_deployment_set_mutable (OstreeSysroot *self,
|
|
OstreeDeployment *deployment,
|
|
gboolean is_mutable,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_deployment_unlock (OstreeSysroot *self,
|
|
OstreeDeployment *deployment,
|
|
OstreeDeploymentUnlockedState unlocked_state,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
_OSTREE_PUBLIC
|
|
OstreeDeployment *ostree_sysroot_get_merge_deployment (OstreeSysroot *self,
|
|
const char *osname);
|
|
|
|
|
|
_OSTREE_PUBLIC
|
|
GKeyFile *ostree_sysroot_origin_new_from_refspec (OstreeSysroot *self,
|
|
const char *refspec);
|
|
|
|
typedef enum {
|
|
OSTREE_SYSROOT_SIMPLE_WRITE_DEPLOYMENT_FLAGS_NONE = 0,
|
|
OSTREE_SYSROOT_SIMPLE_WRITE_DEPLOYMENT_FLAGS_RETAIN = (1 << 0),
|
|
OSTREE_SYSROOT_SIMPLE_WRITE_DEPLOYMENT_FLAGS_NOT_DEFAULT = (1 << 1)
|
|
} OstreeSysrootSimpleWriteDeploymentFlags;
|
|
|
|
_OSTREE_PUBLIC
|
|
gboolean ostree_sysroot_simple_write_deployment (OstreeSysroot *sysroot,
|
|
const char *osname,
|
|
OstreeDeployment *new_deployment,
|
|
OstreeDeployment *merge_deployment,
|
|
OstreeSysrootSimpleWriteDeploymentFlags flags,
|
|
GCancellable *cancellable,
|
|
GError **error);
|
|
|
|
G_END_DECLS
|