0e4a9e586f
Remove all the internal package that are now in the github.com/osbuild/images package and vendor it. A new function in internal/blueprint/ converts from an osbuild-composer blueprint to an images blueprint. This is necessary for keeping the blueprint implementation in both packages. In the future, the images package will change the blueprint (and most likely rename it) and it will only be part of the osbuild-composer internals and interface. The Convert() function will be responsible for converting the blueprint into the new configuration object.
31 lines
846 B
Go
31 lines
846 B
Go
package pathpolicy
|
|
|
|
// MountpointPolicies is a set of default mountpoint policies used for filesystem customizations
|
|
var MountpointPolicies = NewPathPolicies(map[string]PathPolicy{
|
|
"/": {Exact: true},
|
|
"/boot": {Exact: true},
|
|
"/var": {},
|
|
"/opt": {},
|
|
"/srv": {},
|
|
"/usr": {},
|
|
"/app": {},
|
|
"/data": {},
|
|
"/home": {},
|
|
"/tmp": {},
|
|
})
|
|
|
|
// CustomDirectoriesPolicies is a set of default policies for custom directories
|
|
var CustomDirectoriesPolicies = NewPathPolicies(map[string]PathPolicy{
|
|
"/": {Deny: true},
|
|
"/etc": {},
|
|
})
|
|
|
|
// CustomFilesPolicies is a set of default policies for custom files
|
|
var CustomFilesPolicies = NewPathPolicies(map[string]PathPolicy{
|
|
"/": {Deny: true},
|
|
"/etc": {},
|
|
"/etc/fstab": {Deny: true},
|
|
"/etc/shadow": {Deny: true},
|
|
"/etc/passwd": {Deny: true},
|
|
"/etc/group": {Deny: true},
|
|
})
|