August 2021 - openSUSE Kubic - openSUSE Mailing Lists

New MicroOS snapshot 20210805 released!
by Richard Brown 06 Aug '21

06 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: grep hwdata (0.349 -> 0.350) ilmbase (2.5.6 -> 2.5.7) installation-images-MicroOS (17.10 -> 17.11) keyutils libinput (1.18.0 -> 1.18.1) ncurses (6.2.20210718 -> 6.2.20210724) openexr (2.5.6 -> 2.5.7) pcre (8.44 -> 8.45) python-gobject python38 python38-core samba (4.14.5+git.165.70143cb153d -> 4.14.6+git.168.6a9fc8a1ddd) transactional-update (3.4.0 -> 3.5.1) vte === Details === ==== grep ==== - gnulib-c-stack.patch: Fix AC_SYS_XSI_STACK_OVERFLOW_HEURISTIC configure check ==== hwdata ==== Version update (0.349 -> 0.350) - Update to version 0.350 (bsc#1189005): + Updated pci, usb and vendor ids. ==== ilmbase ==== Version update (2.5.6 -> 2.5.7) Subpackages: libHalf-2_5-25 libIex-2_5-25 libIlmThread-2_5-25 libImath-2_5-25 - version update to 2.5.7 Patch release of 2.5 with security and build fixes: * OSS-fuzz 28051 Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer * OSS-fuzz 28155 Crash in Imf_2_5::PtrIStream::read * Fix broken symlink and pkg-config lib suffix for cmake debug builds - modified patches % 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch (refreshed) - deleted patches - openexr-CVE-2021-3598.patch (upstreamed) - openexr-CVE-2021-3605.patch (upstreamed) ==== installation-images-MicroOS ==== Version update (17.10 -> 17.11) - merge gh#openSUSE/installation-images#517 - fix getting the kernel file name - 17.11 ==== keyutils ==== Subpackages: libkeyutils1 - Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654) ==== libinput ==== Version update (1.18.0 -> 1.18.1) - Update to release 1.18.1 * This release only adds device-specific quirks. ==== ncurses ==== Version update (6.2.20210718 -> 6.2.20210724) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20210724 + add workaround for Windows Terminal's problems with CR/LF mapping to ms-terminal (patch by Juergen Pfeifer). + review/update current Windows Terminal vs ms-terminal -TD - Correct offsets of patch ncurses-6.2.dif ==== openexr ==== Version update (2.5.6 -> 2.5.7) - version update to 2.5.7 Patch release of 2.5 with security and build fixes: * OSS-fuzz 28051 Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer * OSS-fuzz 28155 Crash in Imf_2_5::PtrIStream::read * Fix broken symlink and pkg-config lib suffix for cmake debug builds - modified patches % 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch (refreshed) - deleted patches - openexr-CVE-2021-3598.patch (upstreamed) - openexr-CVE-2021-3605.patch (upstreamed) ==== pcre ==== Version update (8.44 -> 8.45) - update to 8.45: * This is the final PCRE1 release. A very few small issues have been fixed. ==== python-gobject ==== Subpackages: python38-gobject python38-gobject-Gdk python38-gobject-cairo - Adjust BuildRequires for python_module cairo to python-module pycairo: the module was renamed 2 years ago. - Skip build for python2: not supported anymore since 3.38.0. ==== python38 ==== - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). ==== samba ==== Version update (4.14.5+git.165.70143cb153d -> 4.14.6+git.168.6a9fc8a1ddd) Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr1 libnetapi0 libsamba-credentials1 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-libs samba-libs-python3 - Update to 4.14.6 * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722). * smbd: Fix pathref unlinking in create_file_unixpath(); (bso#14732). * s3: VFS: default: Add proc_fd's fallback for vfswrap_fchown(); (bso#14734). * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736). * NT_STATUS_FILE_IS_A_DIRECTORY error messages when using glusterfs VFS module; (bso#14730). * s3/modules: fchmod: Fallback to path based chmod if pathref; (bso#14734). * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740). * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750). * smbXsrv_{open,session,tcon}: protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752). * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027). * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669). ==== transactional-update ==== Version update (3.4.0 -> 3.5.1) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.5.1 - t-u: Disable status file generation by default The new experimental `status` command requires the availability of /etc/YaST2/control.xml, which is not present on all systems. Hide the creation of the corresponding status file behind a new EXPERIMENTAL_STATUS option to try out this functionality. - Increase library version - Add tukit.conf to spec file - Version 3.5.0 - Add alias setDiscardIfUnchanged for setDiscard. The old method name wasn't really clear and will be removed if we should have an API break in the future - Replace mkinitrd with direct dracut call [boo#1186213] - tukit: Add configuration file support (/etc/tukit.conf) - Allow users to configure additional bind mounts (see /usr/etc/tukit.conf for an example and limitations) [bsc#1188322] - Add 'transactional-update status' call. This is a POC for obtaining a hash of a system to verify its integrity. The functionality is still experimental! - Internal bugfixes / optimizations ==== vte ==== - Add vte-enable-build-flag-pie.patch: enable PIE flag to be compatible with gcc default linking option. Otherwise build will be failed with current SLE-15-SP4 project setup.

1 0

New Kubic snapshot 20210805 released!
by Richard Brown 06 Aug '21

06 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: grep installation-images-MicroOS (17.10 -> 17.11) keyutils ncurses (6.2.20210718 -> 6.2.20210724) pcre (8.44 -> 8.45) python-gobject python38 python38-core transactional-update (3.4.0 -> 3.5.1) === Details === ==== grep ==== - gnulib-c-stack.patch: Fix AC_SYS_XSI_STACK_OVERFLOW_HEURISTIC configure check ==== installation-images-MicroOS ==== Version update (17.10 -> 17.11) - merge gh#openSUSE/installation-images#517 - fix getting the kernel file name - 17.11 ==== keyutils ==== Subpackages: libkeyutils1 - Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654) ==== ncurses ==== Version update (6.2.20210718 -> 6.2.20210724) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20210724 + add workaround for Windows Terminal's problems with CR/LF mapping to ms-terminal (patch by Juergen Pfeifer). + review/update current Windows Terminal vs ms-terminal -TD - Correct offsets of patch ncurses-6.2.dif ==== pcre ==== Version update (8.44 -> 8.45) - update to 8.45: * This is the final PCRE1 release. A very few small issues have been fixed. ==== python-gobject ==== - Adjust BuildRequires for python_module cairo to python-module pycairo: the module was renamed 2 years ago. - Skip build for python2: not supported anymore since 3.38.0. ==== python38 ==== - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). ==== transactional-update ==== Version update (3.4.0 -> 3.5.1) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.5.1 - t-u: Disable status file generation by default The new experimental `status` command requires the availability of /etc/YaST2/control.xml, which is not present on all systems. Hide the creation of the corresponding status file behind a new EXPERIMENTAL_STATUS option to try out this functionality. - Increase library version - Add tukit.conf to spec file - Version 3.5.0 - Add alias setDiscardIfUnchanged for setDiscard. The old method name wasn't really clear and will be removed if we should have an API break in the future - Replace mkinitrd with direct dracut call [boo#1186213] - tukit: Add configuration file support (/etc/tukit.conf) - Allow users to configure additional bind mounts (see /usr/etc/tukit.conf for an example and limitations) [bsc#1188322] - Add 'transactional-update status' call. This is a POC for obtaining a hash of a system to verify its integrity. The functionality is still experimental! - Internal bugfixes / optimizations

1 0

New MicroOS snapshot 20210804 released!
by Richard Brown 06 Aug '21

06 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager (1.32.4 -> 1.32.6) avahi busybox-links freetype2 (2.10.4 -> 2.11.0) gtk3 libXfont2 (2.0.4 -> 2.0.5) libXft (2.3.3 -> 2.3.4) python-python-gnupg (0.4.6 -> 0.4.7) snappy (1.1.8 -> 1.1.9) systemd === Details === ==== NetworkManager ==== Version update (1.32.4 -> 1.32.6) Subpackages: libnm0 typelib-1_0-NM-1_0 - Update to version 1.32.6: + core: - Fix adding stale local routes when address changes. - Introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. - Introduce "keep-configuration" device option to forcefully activate a profile on start. + initrd: - Tag generated profiles with origin in user data. - Add "ib.pkey=" command line option. + dhcp: Handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Obsolete the same version of mDNSResponder-lib and mDNSResponder in baselib.conf and spec. ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-hostname busybox-psmisc busybox-sed busybox-xz - Add shadow as BuildRequires ==== freetype2 ==== Version update (2.10.4 -> 2.11.0) - Update to version 2.11.0 * A new rendering module has been added to create 8-bit Signed Distance Field (SDF) bitmaps for both outline and bitmap glyphs. * A new, experimental API is now available for surfacing properties of 'COLR' v1 color fonts. * A new function `FT_Get_Transform` returns the values set by FT_Set_Transform. * The legacy Type 1 and CFF engines are further demoted due to lack of CFF2 charstring support. * The experimental 'warp' mode (AF_CONFIG_OPTION_USE_WARPER) for the auto-hinter has been removed. * The smooth rasterizer performance has been improved by >10%. * PCF bitmap fonts compressed with LZW (these are usually files with the extension .pcf.Z) are now handled correctly. ==== gtk3 ==== Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Drop patch fixed upstream on SLE and Leap 15.4: gtk3-x11-fix-menu-touch-by-pointer-emulation.patch ==== libXfont2 ==== Version update (2.0.4 -> 2.0.5) - Update to version 2.0.5 * README: Remove mention of libXfont 1.5 * Fix out-of-bounds read in FontFileMakeDir() * configure: define HAVE_LIBBSD when libbsd was found * Fix Win32 build since c4ed2e06 "Add some unit testing utilities" * Fix crash when font server connection lost * Fix use after free when font server connection lost ==== libXft ==== Version update (2.3.3 -> 2.3.4) - Update to version 2.3.4 * This release handles the deprecation of the FcNameRegisterObjectTypes API by fontconfig, and provides minor cleanups for compiler warnings and man pages. ==== python-python-gnupg ==== Version update (0.4.6 -> 0.4.7) - update to 0.4.7: * Added support for no passphrase during key generation. * Improved permission-denied test. * Updated logging to only show partial results. * Allowed a passphrase to be passed to import_keys(). ==== snappy ==== Version update (1.1.8 -> 1.1.9) - Update to 1.1.9: * Performance improvements - Add fix-always-inline.patch - Add use-system-test-libs.patch - Add a hardcoded snappy.pc file ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Avoid the error message when udev is updated due to udev being already active when the sockets are started again (bsc#1188291)

1 0

New Kubic snapshot 20210804 released!
by Richard Brown 06 Aug '21

06 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: avahi busybox-links ceph (16.2.5.111+ga5b472dfcf8 -> 16.2.5.113+g8b5bda7684e) freetype2 (2.10.4 -> 2.11.0) gtk3 libXft (2.3.3 -> 2.3.4) python-python-gnupg (0.4.6 -> 0.4.7) snappy (1.1.8 -> 1.1.9) systemd === Details === ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 - Obsolete the same version of mDNSResponder-lib and mDNSResponder in baselib.conf and spec. ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-hostname busybox-sed busybox-xz - Add shadow as BuildRequires ==== ceph ==== Version update (16.2.5.111+ga5b472dfcf8 -> 16.2.5.113+g8b5bda7684e) Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw - Update to 16.2.5-113-g8b5bda7684e: + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9 improved version of patch that did not work as intended ==== freetype2 ==== Version update (2.10.4 -> 2.11.0) - Update to version 2.11.0 * A new rendering module has been added to create 8-bit Signed Distance Field (SDF) bitmaps for both outline and bitmap glyphs. * A new, experimental API is now available for surfacing properties of 'COLR' v1 color fonts. * A new function `FT_Get_Transform` returns the values set by FT_Set_Transform. * The legacy Type 1 and CFF engines are further demoted due to lack of CFF2 charstring support. * The experimental 'warp' mode (AF_CONFIG_OPTION_USE_WARPER) for the auto-hinter has been removed. * The smooth rasterizer performance has been improved by >10%. * PCF bitmap fonts compressed with LZW (these are usually files with the extension .pcf.Z) are now handled correctly. ==== gtk3 ==== Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 - Drop patch fixed upstream on SLE and Leap 15.4: gtk3-x11-fix-menu-touch-by-pointer-emulation.patch ==== libXft ==== Version update (2.3.3 -> 2.3.4) - Update to version 2.3.4 * This release handles the deprecation of the FcNameRegisterObjectTypes API by fontconfig, and provides minor cleanups for compiler warnings and man pages. ==== python-python-gnupg ==== Version update (0.4.6 -> 0.4.7) - update to 0.4.7: * Added support for no passphrase during key generation. * Improved permission-denied test. * Updated logging to only show partial results. * Allowed a passphrase to be passed to import_keys(). ==== snappy ==== Version update (1.1.8 -> 1.1.9) - Update to 1.1.9: * Performance improvements - Add fix-always-inline.patch - Add use-system-test-libs.patch - Add a hardcoded snappy.pc file ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Avoid the error message when udev is updated due to udev being already active when the sockets are started again (bsc#1188291)

1 0

New ARM MicroOS snapshot 20210803 released!
by Guillaume Gardet 05 Aug '21

05 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: filesystem installation-images-MicroOS (17.8 -> 17.11) === Details === ==== filesystem ==== - Leave subdirectories of /srv mode 755 as the apache openqa test relies on it atm. Only set /srv itself to 555 - implement mkdir_p for ghost files as components may not exist - move usrmerge conversion to %pre instead of %pretrans (boo#1188847) - get rid of usrmerged macro usage, usrmerge is on in Factory always ==== installation-images-MicroOS ==== Version update (17.8 -> 17.11) - merge gh#openSUSE/installation-images#517 - fix getting the kernel file name - 17.11 - merge gh#openSUSE/installation-images#516 - adobe-sourcesanspro-fonts have their font names changed (bsc#1188927) - 17.10 - merge gh#openSUSE/installation-images#488 - Find kernel also outside boot (boo#1184804) - 17.9

1 0

New ARM Kubic snapshot 20210803 released!
by Guillaume Gardet 05 Aug '21

05 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: filesystem installation-images-MicroOS (17.8 -> 17.11) === Details === ==== filesystem ==== - Leave subdirectories of /srv mode 755 as the apache openqa test relies on it atm. Only set /srv itself to 555 - implement mkdir_p for ghost files as components may not exist - move usrmerge conversion to %pre instead of %pretrans (boo#1188847) - get rid of usrmerged macro usage, usrmerge is on in Factory always ==== installation-images-MicroOS ==== Version update (17.8 -> 17.11) - merge gh#openSUSE/installation-images#517 - fix getting the kernel file name - 17.11 - merge gh#openSUSE/installation-images#516 - adobe-sourcesanspro-fonts have their font names changed (bsc#1188927) - 17.10 - merge gh#openSUSE/installation-images#488 - Find kernel also outside boot (boo#1184804) - 17.9

1 0

SELinux policy updates overwriting custom policies
by Attila Pinter 05 Aug '21

05 Aug '21

Hi, Could use a little help with this one. I have a small system with a few containers running with podman on MicroOS w/ SELinux targeted enforcing. Configured pretty much everything ~2 weeks ago (labels and policy where it was necessary), all the containers are started with systemd and today all the containers were stopped after a policy update. I assume it overwrote my changes. Is there a way to make the policy changes persistent across updates? Or I should just have a script importing these changes that runs after every boot? Br, A.

1 0

New MicroOS snapshot 20210803 released!
by Richard Brown 04 Aug '21

04 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: filesystem === Details === ==== filesystem ==== - Leave subdirectories of /srv mode 755 as the apache openqa test relies on it atm. Only set /srv itself to 555 - implement mkdir_p for ghost files as components may not exist - move usrmerge conversion to %pre instead of %pretrans (boo#1188847) - get rid of usrmerged macro usage, usrmerge is on in Factory always

1 0

New Kubic snapshot 20210803 released!
by Richard Brown 04 Aug '21

04 Aug '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: filesystem === Details === ==== filesystem ==== - Leave subdirectories of /srv mode 755 as the apache openqa test relies on it atm. Only set /srv itself to 555 - implement mkdir_p for ghost files as components may not exist - move usrmerge conversion to %pre instead of %pretrans (boo#1188847) - get rid of usrmerged macro usage, usrmerge is on in Factory always

1 0

Update questions for MicroOS deployed on a private network
by Paul Graham 04 Aug '21

04 Aug '21

Hi, I had a couple of questions that I was hoping someone could give me some guidance or opinions on. First, I have a use case where I would like to run some embedded systems with MicroOS on a private network. Do you have any guidance on how I should mirror various repositories so I can update those machines regularly while they are on the private network? I have run across tools like Pulp (https://pulpproject.org/) that might help in creating the mirrors, but I haven't tried it out yet. From what I can tell, the repos that are being used to perform software installs and updates can be found in /etc/zypp/repos.d. If I had mirrors for the repositories listed in that directory and updated the .repo files in /etc/zypp/repos.d to point to my mirrors, do I need to do anything else? Any pointers to documentation or other suggestions are welcomed. The second question is related. If I wanted to push updates to the individual systems rather than have them pull updates from repository mirrors, would it be possible to use a single "golden" system for managing the configuration for a collection of identical systems and then use "btrfs send" to update that collection of systems with updated software for the OS? In other words, I could see how you might perform an update on the "golden" system and then use the new snapshot that was created by the "transactional-update" tool in a "btrfs send" operation to push the changes to other systems. I understand that this is probably not compatible with the "transactional-update" tool on the receiving end, but it might be a nice way to push updates to systems, taking advantage of the fact that only snapshots are being sent and, ideally, they would represent only the differences from previous snapshots (a natural way of handling the deltas between two file systems). If "btrfs send" isn't the right mechanism for pushing updates, is there a better mechanism? Thanks! Paul

4 6