Port build system to Forge Actions #15

Closed
opened 2024-08-14 05:01:16 +00:00 by forge · 3 comments
Owner
No description provided.
forge added this to the QubesOS Alpine Linux Template project 2024-08-14 05:01:16 +00:00
Author
Owner

Hit a snag: loop mounts dont work within docker containers. Since the infra is docker-on-lxc, LXC would require making it available. Since docker runs as root in this unpriviliged container, it would pick up whatever loop device lxc would create. But making loop devices available breaks LXC's security context. So either I find a way to hack loopback support in userspace, or break some security contexts.

Hit a snag: loop mounts dont work within docker containers. Since the infra is docker-on-lxc, LXC would require making it available. Since docker runs as root in this unpriviliged container, it would pick up whatever loop device lxc would create. But making loop devices available breaks LXC's security context. So either I find a way to hack loopback support in userspace, or break some security contexts.
Author
Owner

I've converted linux-template-builder to use fuse instead, which works in docker.

I've converted linux-template-builder to use fuse instead, which works in docker.
Author
Owner

Done with a8b3f4c64d

Done with https://ayakael.net/forge/qubes-builder-alpine/commit/a8b3f4c64d322e3610e4a8709ef54b75cd96df17
forge closed this issue 2024-08-22 20:30:18 +00:00
Sign in to join this conversation.
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: forge/qubes-builder-alpine#15
No description provided.