Re: [Rpm-maint] [rpm-software-management/rpm] How can I find details on the binary representation of the RPM DB? (Discussion #2211)

2023-11-05 Thread Panu Matilainen
If you don't want to link to librpm, then other option is to use rpm cli. 
Everything about the packages is accessible with rpm cli queries. 

I don't understand your use-case, but if you absolutely need the package 
information on file-system then create that info using rpm queries, as a part 
of the container image create process or otherwise. We even ship with a cron 
script to do this daily (see script/rpm.daily in the source) that you can use 
as a basis if it doesn't do what you need.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/2211#discussioncomment-7484095
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] How can I find details on the binary representation of the RPM DB? (Discussion #2211)

2023-11-05 Thread Demi Marie Obenour
Nope.

Is there a reason that using librpm is not an option?  If there is, you will 
need to reverse-engineer the format and keep pace with whatever librpm does.  
Could you compile librpm to WebAssembly and create a new WebAssembly runtime 
for each container?  That could be a solution to security concerns.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/2211#discussioncomment-7482856
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] How can I find details on the binary representation of the RPM DB? (Discussion #2211)

2023-11-05 Thread Ron Desmond
This restricts our use case (container vulnerability scanning): is there a 
recommended way to see package information from the filesystem (like how Debian 
has `/var/lib/dpkg/info/[PACKAGE].list` files)

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/2211#discussioncomment-7482049
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint