Skip to content

Conversation

cgwalters
Copy link
Collaborator

lib: Drop usage of hacky run_in_host_mount_ns

What we're doing here is a bit gross because while we're
changing the mountns, other things (especially networking)
will be inherited from our container, creating an ill-defined
mess. If we do need true host code execution then we should
actually use systemd-run or so.

But we don't need that here - now that we've been automatically
ensuring the /var/lib/containers mount, we can use the version
of podman in the container image here.

Signed-off-by: Colin Walters walters@verbum.org


install: Use skopeo instead of podman

Right now we depend on both in general (the ostree-container side uses
skopeo, the logically bound images use podman), but today LBIs are
a "soft" dependency.

Let's use skopeo here for consistency.

Signed-off-by: Colin Walters walters@verbum.org


What we're doing here is a bit gross because while we're
changing the mountns, other things (especially networking)
will be inherited from our container, creating an ill-defined
mess. If we do need true host code execution then we should
actually use systemd-run or so.

But we don't need that here - now that we've been automatically
ensuring the `/var/lib/containers` mount, we can use the version
of podman in the container image here.

Signed-off-by: Colin Walters <walters@verbum.org>
Right now we depend on both in general (the ostree-container side uses
skopeo, the logically bound images use podman), but today LBIs are
a "soft" dependency.

Let's use skopeo here for consistency.

Signed-off-by: Colin Walters <walters@verbum.org>
@cgwalters cgwalters marked this pull request as draft December 7, 2024 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant