Skip to content

Improve and harden EROFS generation (esp with sealed UKIs) #212

@Johan-Liebert1

Description

@Johan-Liebert1

(edited by @cgwalters )

Strengthening our EROFS generation handling

Right now we have an integration test that is verifying the composefs digest of a pinned centos-bootc image.

However: we have two different ways to compute digests (see below), and we need to extend this test case to ensure that computing the digest via the containers-storage: read also works and results in the same thing. That's the issue we're seeing in #299 most likely

Ensure we filter xattrs consistently

#209 introduces xattrs filters. Right now we filter out every xattr other than security.selinux, which sometimes causes issues like #211 (comment)

We should have the same xattr filter everywhere we create a filesystem

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions