On 7/26/12 8:26 PM, Rich Freeman wrote:
> I've been messing around with namespaces and some of what systemd has
> been doing with them, and I have an idea for a portage feature.
> 
> But before doing a brain dump of ideas, how useful would it be to have
> a FEATURE for portage to do a limited-visibility build?  That is, the
> build would be run in an environment where the root filesystem appears
> to contain everything in a DEPEND (including @system currently) and
> nothing else?

I was thinking about something similar too. In my opinion it's a great
feature. If/when there are any bugs to get this implemented, please let
me know.

A possible alternative implementation would be to make the sandbox deny
access to anything outside DEPEND. One totally crazy idea to make that
fast are extended attributes (portage would record which package a file
belongs to when merging the file). Another possible solution is using a
cache.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to