-
Notifications
You must be signed in to change notification settings - Fork 697
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Introduce new CPE platform for bootable containers #12519
Conversation
@@ -0,0 +1,18 @@ | |||
name: cpe:/a:bootc |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This also applies to other immutable OSes like Fedora Silverblue.
Should we rename to something like immutable?
This commit adds a new CPE platform `bootc`. Matches: - bootc (RHEL Image Mode) containers and container images - running bootc (RHEL Image Mode) systems Does not match: - classic containers and container images - normal bare-metal systems or VMs The matching platforms and non-matching platforms can be easily distinguished by checking for presence of the kernel and rpm-ostree RPM packages. Bootable containers and running bootc systems both contain both these packages. Normal bare-metal systems usually don't have the rpm-ostree, normal containers don't contain kernel.
The original definition would match other rpm-ostree based platforms such as Fedora SilverBlue. With this change, we will improve the platform definition so that it will match only the bootable containers and running systems deployed from bootable containers.
Change OVAL test IDs in the bootc platform CPE OVAL to prevent ID collisions during the build. Addressing: CRITICAL: ERROR: it's not possible to use the same ID: inventory_test_kernel_installed for two semantically different OVAL entities
a662a52
to
4470e08
Compare
I have rebased this PR on the top of the latest upstream master branch. I have extended the check to not match other immutable platforms and I have fixed the OVAL test IDs. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just one minor change.
Co-authored-by: Matthew Burket <[email protected]>
Code Climate has analyzed commit 1849ef6 and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 60.9% (0.0% change). View more on Code Climate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks!
This commit adds a new CPE platform
bootc
.Matches:
Does not match:
The matching platforms and non-matching platforms can be easily distinguished by checking for presence of the kernel and rpm-ostree RPM packages. Bootable containers and running bootc systems both contain both these packages. Normal bare-metal systems usually don't have the rpm-ostree, normal containers don't contain kernel.