Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-08-05 Thread Panu Matilainen
On 7/30/19 6:10 PM, Jason L Tibbitts III wrote: "PM" == Panu Matilainen writes: PM> So a big +1 for sysusers in sub-packages + file trigger to handle PM> running systemd-sysusers. It solves more problems than the current PM> sysusers-proposal and in a far more elegant way at that. It's great

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-30 Thread Jason L Tibbitts III
> "PM" == Panu Matilainen writes: PM> So a big +1 for sysusers in sub-packages + file trigger to handle PM> running systemd-sysusers. It solves more problems than the current PM> sysusers-proposal and in a far more elegant way at that. It's great that you agree. That leaves all of the

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-30 Thread Neal Gompa
On Tue, Jul 30, 2019 at 5:47 AM Panu Matilainen wrote: > > On 7/15/19 6:57 PM, Neal Gompa wrote: > > On Mon, Jul 15, 2019 at 11:52 AM Zbigniew Jędrzejewski-Szmek > > wrote: > >> > >> On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: > >>> On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-30 Thread Panu Matilainen
On 7/15/19 6:57 PM, Neal Gompa wrote: On Mon, Jul 15, 2019 at 11:52 AM Zbigniew Jędrzejewski-Szmek wrote: On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý wrote: Dne 10. 07. 19 v 9:19 James Antill napsal(a): 2. adduser/group/etc.

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-22 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Jul 22, 2019 at 07:25:50AM -0400, Neal Gompa wrote: > On Mon, Jul 22, 2019 at 4:00 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Sun, Jul 21, 2019 at 01:03:59PM -0400, Neal Gompa wrote: > > > On Mon, Jul 15, 2019 at 11:52 AM Zbigniew Jędrzejewski-Szmek > > > wrote: > > > > > > > >

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-22 Thread Neal Gompa
On Mon, Jul 22, 2019 at 4:00 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Sun, Jul 21, 2019 at 01:03:59PM -0400, Neal Gompa wrote: > > On Mon, Jul 15, 2019 at 11:52 AM Zbigniew Jędrzejewski-Szmek > > wrote: > > > > > > On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: > > > > On Mon,

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-22 Thread Zbigniew Jędrzejewski-Szmek
On Sun, Jul 21, 2019 at 01:03:59PM -0400, Neal Gompa wrote: > On Mon, Jul 15, 2019 at 11:52 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: > > > On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý wrote: > > > > > > > > Dne 10. 07. 19 v

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-21 Thread Neal Gompa
On Mon, Jul 15, 2019 at 11:52 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: > > On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý wrote: > > > > > > Dne 10. 07. 19 v 9:19 James Antill napsal(a): > > > > 2. adduser/group/etc. => sysusers files

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-16 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Jul 15, 2019 at 01:24:06PM -0500, Jason L Tibbitts III wrote: > > "VO" == Vít Ondruch writes: > > VO> I just wonder what is the point of: > > VO> > https://github.com/systemd/systemd/blob/b0ca726/src/core/macros.systemd.in#L122 > > You include the configuration file in the source

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-15 Thread Jason L Tibbitts III
> "VO" == Vít Ondruch writes: VO> I just wonder what is the point of: VO> https://github.com/systemd/systemd/blob/b0ca726/src/core/macros.systemd.in#L122 I guess it just saves packagers from having to call systemd-sysusers properly. You include the configuration file in the source

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-15 Thread Neal Gompa
On Mon, Jul 15, 2019 at 11:52 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: > > On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý wrote: > > > > > > Dne 10. 07. 19 v 9:19 James Antill napsal(a): > > > > 2. adduser/group/etc. => sysusers files

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-15 Thread Vít Ondruch
Dne 15. 07. 19 v 17:03 Zbigniew Jędrzejewski-Szmek napsal(a): > On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: >> On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý wrote: >>> Dne 10. 07. 19 v 9:19 James Antill napsal(a): 2. adduser/group/etc. => sysusers files >>> For anyone

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-15 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Jul 15, 2019 at 10:13:21AM -0400, Neal Gompa wrote: > On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý wrote: > > > > Dne 10. 07. 19 v 9:19 James Antill napsal(a): > > > 2. adduser/group/etc. => sysusers files > > > > For anyone willing to do this in advance on his/her package - this is

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-15 Thread Neal Gompa
On Mon, Jul 15, 2019 at 10:04 AM Miroslav Suchý wrote: > > Dne 10. 07. 19 v 9:19 James Antill napsal(a): > > 2. adduser/group/etc. => sysusers files > > For anyone willing to do this in advance on his/her package - this is how you > can do that: > >

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-15 Thread Miroslav Suchý
Dne 10. 07. 19 v 9:19 James Antill napsal(a): > 2. adduser/group/etc. => sysusers files For anyone willing to do this in advance on his/her package - this is how you can do that: https://github.com/rpm-software-management/mock/commit/cf4c8f076637755acc3cf4eb091d8ebb36020237 Here is relevant

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-11 Thread Dridi Boukelmoune
> I disagree about the user/group creation, at least the way it's being > planned in here. > > The way openSUSE solved this problem probably makes sense for dealing > with issues like needing the users+groups to exist before package is > being installed: > > 1. sysusers are in their own

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-11 Thread Neal Gompa
On Thu, Jul 11, 2019 at 4:26 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Wed, Jul 10, 2019 at 03:19:43AM -0400, James Antill wrote: > > On Tue, 2019-07-02 at 10:22 +, Zbigniew Jędrzejewski-Szmek wrote: > > > > > > I love the goal, but this document says very little about the means > > > to

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-11 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jul 10, 2019 at 03:19:43AM -0400, James Antill wrote: > On Tue, 2019-07-02 at 10:22 +, Zbigniew Jędrzejewski-Szmek wrote: > > > > I love the goal, but this document says very little about the means > > to achieve that goal. I would like to see specific solutions > > described for each

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-10 Thread James Antill
On Wed, 2019-07-10 at 10:36 +0200, Florian Weimer wrote: > > Do you have a way to remove files from search paths before remaining > scriptlets (from non-core packages, for example) run? RPM deletes > removed files very late in the transaction, and if they are still on > search paths, this might

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-10 Thread Florian Weimer
* James Antill: > Yes, we've had a spreadsheet for a bit with that data (raw data > generated by[1]), I'll try to get that into html/wiki this week. > For a significant portion of the work the plan is: > > 1. ldconfig => delete them as not needed > 2. adduser/group/etc. => sysusers files > 3.

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-10 Thread James Antill
On Tue, 2019-07-02 at 10:22 +, Zbigniew Jędrzejewski-Szmek wrote: > > I love the goal, but this document says very little about the means > to achieve that goal. I would like to see specific solutions > described for each class of scriptlets that is present, including > approximate numbers of

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-04 Thread Tomas Mraz
On Thu, 2019-07-04 at 09:03 -0700, Adam Williamson wrote: > On Thu, 2019-07-04 at 11:38 +0200, Tomas Mraz wrote: > > OK, let's talk about concrete package: crypto-policies needs to run > > update-crypto-policies --no-check >/dev/null > > > > It currently does it in %post. > > > > It could do it

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-04 Thread Adam Williamson
On Thu, 2019-07-04 at 11:38 +0200, Tomas Mraz wrote: > > OK, let's talk about concrete package: crypto-policies needs to run > update-crypto-policies --no-check >/dev/null > > It currently does it in %post. > > It could do it in %posttrans - that would be one option. Presumably only if no

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-04 Thread Tomas Mraz
On Mon, 2019-07-01 at 17:18 -0400, James Antill wrote: > On Mon, 2019-07-01 at 17:03 -0400, Robbie Harwood wrote: > > Ben Cotton writes: > > > > > == Detailed Description == > > > > > > Currently we know how to make an installable OS with packages > > > that > > > doesn't require the use of

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-02 Thread Florian Weimer
* Ben Cotton: > == Dependencies == > N/A (not a System Wide Change) Surely this counts as a system-wide change. It may actually be easier to ban scriptlets altogether, rather than live in a mixed world where both scriptlets from non-core packages run before triggers from core packages. For the

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-02 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Jul 01, 2019 at 04:26:07PM -0400, Ben Cotton wrote: > https://fedoraproject.org/wiki/Features/LimitScriptletUsage > > == Summary == > Remove direct scriptlet calls from "core packages" (those that are > used to build minimal container image). The packages can still affect > changes during

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-02 Thread Richard W.M. Jones
On Mon, Jul 01, 2019 at 04:26:07PM -0400, Ben Cotton wrote: > https://fedoraproject.org/wiki/Features/LimitScriptletUsage > > == Summary == > Remove direct scriptlet calls from "core packages" (those that are > used to build minimal container image). The packages can still affect > changes during

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-02 Thread Miroslav Suchý
Dne 01. 07. 19 v 23:18 James Antill napsal(a): > I don't believe there is a single document atm. ... I could look at > putting one somewhere, although it's a bit like lumping random things > together because we happen to be doing them at the same time. Even list of links pointing to all those PR

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-01 Thread Vít Ondruch
Wonderful. Is there some tracker covering the issues/packages? I was recently looking into filesystem: https://bugzilla.redhat.com/show_bug.cgi?id=1306489#c7 Vít Dne 01. 07. 19 v 22:26 Ben Cotton napsal(a): > https://fedoraproject.org/wiki/Features/LimitScriptletUsage > > == Summary == >

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-01 Thread James Antill
On Mon, 2019-07-01 at 17:03 -0400, Robbie Harwood wrote: > Ben Cotton writes: > > > == Detailed Description == > > > > Currently we know how to make an installable OS with packages that > > doesn't require the use of scriptlets, indeed rpm-ostree and others > > have already done this on a

Re: Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-01 Thread Robbie Harwood
Ben Cotton writes: > == Detailed Description == > > Currently we know how to make an installable OS with packages that > doesn't require the use of scriptlets, indeed rpm-ostree and others > have already done this on a significantly bigger scale. So we plan to > remove direct scriptlets from

Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-01 Thread Ben Cotton
https://fedoraproject.org/wiki/Features/LimitScriptletUsage == Summary == Remove direct scriptlet calls from "core packages" (those that are used to build minimal container image). The packages can still affect changes during installation by placing files in the correct locations to trigger

Fedora 31 Self-Contained Change proposal: Limit Scriptlet Usage of core packages

2019-07-01 Thread Ben Cotton
https://fedoraproject.org/wiki/Features/LimitScriptletUsage == Summary == Remove direct scriptlet calls from "core packages" (those that are used to build minimal container image). The packages can still affect changes during installation by placing files in the correct locations to trigger