Re: [Rpm-maint] [rpm-software-management/rpm] Add support for fsverity signatures (#1121)

2020-03-12 Thread jessorensen
I am currently working on splitting fsverity-utils into a shared library which 
will provide the needed functionality for computing digests and signing.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1121#issuecomment-598360390___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] Add support for fsverity signatures (#1121)

2020-03-12 Thread jessorensen
fsverity is a new integrity feature in the kernel, which in combination with 
fsverity-utils allows for validating integrity of binaries when data blocks are 
read from disk.

This request is to add native rpm support for fsverity signatures, similar to 
what is already available in RPM for IMA signatures. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1121___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Make "rpmspec -q --srpm foo.spec" say .src, not .%{arch} (#1116)

2020-03-12 Thread Peter Jones
> What about nosrc packages?

It's a bit harder to do well, as "rpmspec -q" goes through rpmcliQuery(), which 
doesn't parse the spec file, and rpmspec.c doesn't know about rpmSpec 
internals, so can't access spec->noSource without including 
rpmbuild_internals.h, but I've pushed an updated patch to do that.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1116#issuecomment-598228143___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Make "rpmspec -q --srpm foo.spec" say .src, not .%{arch} (#1116)

2020-03-12 Thread Michael Schroeder
What about nosrc packages?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1116#issuecomment-598149647___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] %force file list directive (#1118)

2020-03-12 Thread Michael Schroeder
It's not so easy, it needs some changes in rpm's aliasing detection code (i.e. 
symlinked directories) so that the rpm internals know what's going on.

I'm already working on this, but the development has been stalled the last 
weeks due to other work needing to be done first.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1118#issuecomment-598129379___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] %force file list directive (#1118)

2020-03-12 Thread Vít Ondruch
Alternatively, I can also imagine more specific `%replace_{symlink,directory}` 
where RPM would know what was expected there and what is the replacement.

On top of that, RPM could automatically create backup and own the backup, so it 
is removed when RPM is removed.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1118#issuecomment-598109398___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] Handling of files during installation via hooks (#1120)

2020-03-12 Thread Vít Ondruch
This is third idea in my series of handling symlink <-> directory conversion. 
Would it be possible to mark files, which should have some special treatment 
and process them via some hook? E.g. if the there is `%hook somefile` listed in 
`%files` section, for every action above this file, some scriptlet would be 
called.

E.g. if RPM compares the files on this with what is going to be installed, that 
would be one action, other action would be the installation itself, etc.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1120___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] Always open (and initialize) the entire database at once (#1119)

2020-03-12 Thread Panu Matilainen
In some scenarios we previously only created some of the indexes only
lazy db init through query. Partially initialized databases don't make
sense and are only asking for trouble, in particular this was causing
issues with sqlite backend which is stricter about readonly-mode.

Except for the special case of reading a potentially damaged database
for rebuilding, always open all the indexes from openDatabase().
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1119

-- Commit Summary --

  * Always open (and initialize) the entire database at once

-- File Changes --

M lib/rpmdb.c (37)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1119.patch
https://github.com/rpm-software-management/rpm/pull/1119.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1119
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] %force file list directive (#1118)

2020-03-12 Thread Vít Ondruch
Thinking about symlink <-> directory conversion, wouldn't be possible to have 
something like `%force` file list directive? That would do something like 
"remove whatever is standing in a way, be it file/directory/symlink and place 
there content from this RPM".

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1118___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] Is there RPM file list accesible in LUA? (#1117)

2020-03-12 Thread Vít Ondruch
Looking at the symlink <-> directory replacements scripts [[1]], I wonder if 
there is a way to access the RPM file list from LUA, because it is rather 
strange, that the scriptlet is supposed to define the path, which can be pretty 
random one. It would be much better, if the scope could be limited to the files 
managed by the current RPM being handled.


[1]: 
https://docs.fedoraproject.org/en-US/packaging-guidelines/Directory_Replacement/

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1117___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint