Mailinglist Archive: opensuse-buildservice (272 mails)

< Previous Next >
Re: [opensuse-buildservice] Why don't we use debootstrap?
  • From: Adrian Schröter <adrian@xxxxxxx>
  • Date: Fri, 12 Nov 2010 18:00:08 +0100
  • Message-id: <201011121800.09055.adrian@xxxxxxx>
Am Freitag, 12. November 2010, 13:47:42 schrieb Justus Winter:
On Thu, 11 Nov 2010 08:26:16 +0100
Adrian Schröter <adrian@xxxxxxx> wrote:

debootstrap would be a full seperate path beside the build script.
That means all other features, like modifing release numbers, take
care about provided file lists (so that prjconf settings have an
effect at all) and so on would need to get implemented seperatly.

Also debootstrap is afaik no secure build mechanism (like build with
XEN or kvm). So we would not be able to allow service side builds

debootstrap is no build mechanism at all, it merely installs a debian
system. Could you elaborate why the resulting installation couldn't be
used with XEN or kvm to provide a secure build environment?

You need to run scripts (esp on debian) during installation. To do this in
a secure way the script needs to know how to pre install (without scripts),
jump into VM, run missing scripts and continue with rest of packages.

The debian script is no help here as it was not designed for this.

Adrian Schroeter
SUSE Linux Products GmbH
email: adrian@xxxxxxx
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-buildservice+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups