Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

compose-rootfs: Ensure we don't emit user.ostreemeta #5341

Merged
merged 1 commit into from
Mar 20, 2025

Conversation

cgwalters
Copy link
Member

  • First ensure we're always ignoring SELinux here, in this use case we rely on e.g. bootc to do client side labeling. Doing this required a fix in the compose path.
  • Second and more importantly, ensure we don't leak user.ostreemeta xattrs into the target root! This is just generally ugly, and will e.g. cause object duplication on disk. But worse, having user. xattrs provokes backwards incompat bugs from core: Always sort incoming xattrs ostreedev/ostree#3346

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
- First ensure we're always ignoring SELinux here, in this
  use case we rely on e.g. bootc to do client side labeling.
  Doing this required a fix in the compose path.
- Second and more importantly, ensure we don't leak
  user.ostreemeta xattrs into the target root! This is just
  generally ugly, and will e.g. cause object duplication on disk.
  But worse, having `user.` xattrs provokes backwards incompat
  bugs from ostreedev/ostree#3346
@cgwalters cgwalters requested a review from jeckersb March 20, 2025 19:51
@cgwalters cgwalters enabled auto-merge March 20, 2025 19:58
Copy link
Member

@jmarrero jmarrero left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@cgwalters cgwalters merged commit 5c9af09 into coreos:main Mar 20, 2025
20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants