Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use passwd symlinks instead of bind mounts #3200

Open
wants to merge 10 commits into
base: main
Choose a base branch
from
Open

Use passwd symlinks instead of bind mounts #3200

wants to merge 10 commits into from
+82 −24

Commits on Nov 16, 2024

  1. sandbox; Only readlink() if the target is a symlink

    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    15a2fbc View commit details
    Browse the repository at this point in the history

  2. sandbox: Make --symlink work on top of existin files and symlinks 

    With the new mount API, we can mount on top of existing symlinks and
files, so let's make use of that for --symlink.
    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    a43866b View commit details
    Browse the repository at this point in the history

  3. Use passwd symlinks instead of bind mounts 

    Bind mounts don't reflect changes to the original files if they're
replaced instead of modified. Let's use symlinks instead so that
changes to the original files are always reflected.

Fixes systemd#3189
    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    57a716e View commit details
    Browse the repository at this point in the history

  4. Add ToolsTreePackageDirectories= 

    Sometimes, we want to add locally built rpm packages to the default
tools tree. For example, systemd-repart depends on mkfs binaries that
might not be available on the host system, so the only way to run it
is from within the tools tree, which means we need a way to install
systemd-repart built from source within the tools tree.
    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    a16f27d View commit details
    Browse the repository at this point in the history

  5. Don't require sbsigntools for secure boot auto enroll unless required 

    If bootctl 257 or newer is installed, we don't use sbsigntools anymore
so don't require it in that case.
    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    5a3a3b6 View commit details
    Browse the repository at this point in the history

  6. Fix condition to also check the certificate source type

    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    c19f078 View commit details
    Browse the repository at this point in the history

  7. Only allow certificate files when not using systemd-sbsign

    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    05ed450 View commit details
    Browse the repository at this point in the history

  8. Install pkcs11-provider and opensc in tools tree 

    Required for signing with openssl pkcs11 provider.
    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    a1dc897 View commit details
    Browse the repository at this point in the history

  9. qemu: Use advanced form of specifying display

    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    b89a6d8 View commit details
    Browse the repository at this point in the history

  10. Add packages required for --qemu-gui to Arch tools tree

    @DaanDeMeyer
    DaanDeMeyer committed Nov 16, 2024
    Configuration menu
    Copy the full SHA
    fc8a959 View commit details
    Browse the repository at this point in the history