RFC: new mock: strategy, selinux, etc.

[Axel Thimm]

On Fri, Jan 05, 2007 at 02:42:51PM -0500, Jesse Keating wrote:
> On Friday 05 January 2007 12:46, Axel Thimm wrote:
> > The question is whether that is technically possible - for what I use
> > at ATrpms, an ancient bunch of shell scripts being the equivalent of
> > mock, I use fakechroot/fakeroot to maintain chroots as a simple
> > user. I think that will work with eliminating the need for the chroot
> > part in the mock helper as well. If we check the remaining parts in
> > mock requiring root priviledges (perhaps just for mounting?) perhaps
> > we can eliminate these, too, and end up with a pure non-root working
> > mock.
> 
> Would one still be able to do things IN the chroot like create loopback images 
> and write to them?  I need mock to be able to compose trees, which requires 
> these types of things.

I don't know, I haven't had the need to do so in chroots, but I would
think that not, since fakeroot/fakechroot only emulates some library
calls accociated with file access/manipulation and chrooting, and
mounting requires kernel cooperation (even for fuse).

So, if the kernel does not allow user mounts, and that's the only way
to write/manipulate images then most likely no.
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-buildsys-list/attachments/20070105/e9a46a97/attachment.sig>