Add ostree admin post-copy command
#3094
Conversation
|
CI failing on
|
That is quite a rearchitecture of osbuild though. |
alexlarsson
force-pushed
the
admin-deploy-post-copy
branch
from
6e6a558
to
1ab4ec4
Compare
This command will apply fs-verity on all objects that need it and needs to be called when an ostree deployment has been copied on a file-by-file basis, which would loose information such as fs-verity. This is needed by osbuild which works by creating the final image in a rootfs, and then separately copying that rootfs file-by-file to a loopback mounted filesystem image.
alexlarsson
force-pushed
the
admin-deploy-post-copy
branch
from
1ab4ec4
to
accb1f0
Compare
|
It seems fcos-e2e fails with: Do we have some version skew in the CI? |
Yeah see coreos/coreos-assembler#3653 |
|
@cgwalters: Overrode contexts on behalf of cgwalters: ci/prow/fcos-e2e In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
I was a bit confused into thinking our `-dev` images had `root.transient` on, but they don't quite right now because we don't regenerate the initramfs after installing the updated ostree in that image. However, because bootc-image-builder today is throwing away the immutable bit on `/` (a different bug, see ostreedev/ostree#3094 ) we actually... amazingly get a very similar effect in practice! Anyways, let's go ahead and describe filesystem state here.
I was a bit confused into thinking our `-dev` images had `root.transient` on, but they don't quite right now because we don't regenerate the initramfs after installing the updated ostree in that image. However, because bootc-image-builder today is throwing away the immutable bit on `/` (a different bug, see ostreedev/ostree#3094 ) we actually... amazingly get a very similar effect in practice! Anyways, let's go ahead and describe filesystem state here.
This command will apply fs-verity on all objects that need it and needs to be called when an ostree deployment has been copied on a file-by-file basis, which would loose information such as fs-verity.
This is needed by osbuild which works by creating the final image in a rootfs, and then separately copying that rootfs file-by-file to a loopback mounted filesystem image.
This comes from osbuild/osbuild#1343