-
Notifications
You must be signed in to change notification settings - Fork 62
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Two refactoring patches, validation of entrypoint state #89
Conversation
What I actually was going to fix is detecting |
9c6f13a
to
3ff1619
Compare
Only lightly tested locally so far...doing some more |
OK now with some logic to validate that we're not running rootless, etc. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you, this is super nice! I have some suggestions/nitpicks inline but no blockers. Feel free to ignore but maybe something in there is useful.
c1625af
to
cfeeb31
Compare
OK resolved all the nits except one |
af81edc
to
9d39e4d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is great, just one tiny comment/nitpick.
In the future it will very likely be useful for us to have other verbs. For now, this is effectively an implementation detail though because the entrypoint is changed to always pass `build`. (Actually right now this fixes the problem that the `completion` verb was being masked) Signed-off-by: Colin Walters <walters@verbum.org>
It's just ugly to have bits of this in shell script in this way; it's not complex code and doing it in Go helps keep the development environment simpler. Signed-off-by: Colin Walters <walters@verbum.org>
For functional clarity. Signed-off-by: Colin Walters <walters@verbum.org>
As this is a footgun that multiple people have run into. Signed-off-by: Colin Walters <walters@verbum.org>
In most cases e.g. we do want to show stdout/stderr, and it's handy to have a debug log when we're running a subprocess. While we're here, switch to just forking `cp` in the setup code. Signed-off-by: Colin Walters <walters@verbum.org>
Signed-off-by: Colin Walters <walters@verbum.org>
Per style.
a2ef51a
to
0dd9197
Compare
Clicked the rebase button to get the |
@achilleas-k I think to merge you need to change your review state to approval |
Move build logic into
build
sub-command verbIn the future it will very likely be useful for us to have
other verbs. For now, this is effectively an implementation
detail though because the entrypoint is changed to always pass
build
.(Actually right now this fixes the problem that the
completion
verb was being masked)
Move
prepare.sh
into Go codeIt's just ugly to have bits of this in shell script in this
way; it's not complex code and doing it in Go helps keep
the development environment simpler.
Move some helpers into modules
For functional clarity.
Validate that we're in rootful podman
As this is a footgun that multiple people have run into.
Validate that we're running privileged
On general principle.