debian-forge/osbuild
Christian Kellner 136e13eca1 buildroot: don't explicitly add CAP_MAC_ADMIN
This is a left-over from the time when `systemd-nspawn` was used,
which only retained a limited set of capabilities which did not
include `CAP_MAC_ADMIN`[1]. Bubblewrap, on the other hand, retains
all currently capabilities if the process is run as root[2].

[1] see e.g. src/nspawn/nspawn.c#L147 of commit c52950c
[2] see commit abc56644566a6095bb72a5bf70fcee7dd90e9447
2022-04-20 12:05:36 +01:00
..
formats v2: Add source-epoch key in pipeline declaration and pass to buildroot 2022-02-09 09:58:49 +01:00
util util/selinux: add setfilecon method 2022-03-18 20:36:10 +01:00
__init__.py pipeline: remove Assembler class 2021-01-19 10:42:26 +01:00
__main__.py osbuild: always return exit code 2020-10-27 22:04:09 +01:00
api.py api: remove host side arguments facility 2021-07-08 15:01:33 +01:00
buildroot.py buildroot: don't explicitly add CAP_MAC_ADMIN 2022-04-20 12:05:36 +01:00
devices.py devices: add device path helper functions 2021-10-30 15:32:44 +01:00
host.py host: add support for emitting signals 2022-02-22 10:38:43 +01:00
inputs.py inputs: convert to host service 2021-06-09 18:37:47 +01:00
loop.py loop: add setup callback to loop_for_fd 2021-12-09 00:44:21 +00:00
main_cli.py osbuild: make monitor configurable via comandline 2021-12-09 00:44:21 +00:00
meta.py meta: allow mounts for all stages 2021-10-30 15:32:44 +01:00
monitor.py monitor/log: print pipeline information 2021-02-12 15:55:43 +01:00
mounts.py mounts: include tree directory in arguments 2021-10-30 15:32:44 +01:00
objectstore.py objectstore: don't store objects by their treesum 2021-12-16 16:44:07 +00:00
pipeline.py Pass source-epoch to stages only if set 2022-02-09 09:58:49 +01:00
remoteloop.py remoteloop: close loop device controller 2021-08-11 20:59:51 +02:00
sources.py sources: pass items via temporary file 2021-09-24 08:27:19 +01:00