-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Installability tests fail when testing core packages #64
Comments
"dnf --installroot=/some/directory install system-udev" will install system-udev (and its dependecies) to an empty system. Empty from RPM and DNF point of view. Though, I don't know whether it is implemented with chroot or whether it isolates another name spaces. That means fancy RPM scriptlets which inspect running processes or expect mounted /proc or /sys might fail. Mock is good at creating an empty system (it populates /etc/localtime and maybe more). If you redefined what "mock init" does (config_opts['chroot_setup_cmd']) to "install system-udev", you would get a neat test. Another option is install the packages with "dnf reinstall" command. |
|
I think making sure to run Lines 38 to 49 in 7bdb084
How does the AVC check work with a different root? |
Oh, I actually meant to ping @jpopelka about these issues. |
I believe that "dnf --installroot" is a disguise for "rpm --root". rpm(8) reads:
So it's a chroot. Regarding AVC, SELinux evaluates rules on labels. Not on file names. The only place where file names are used are default file labels. But default labels are computed by userspace which will read them from the chrooted file system and evaluate relatively to its chroot. So I don't think it's a problem. I recommend contacting an RPM maintainer for more details. |
+1. I just wrote something similar on the mailing list before looking here. My version:
The invocation of dnf should be wrapped in 'bwrap' to set up /dev, /proc for the invocation. |
See for example systemd PR, most tests fail or are skipped because
system-udev
is pre-installed. Any ideas how to unblock these tests? What about running these in achroot
,rpm-ostree
or any other way to isolate these environments.The text was updated successfully, but these errors were encountered: