Thomas Lamprecht
acef423b96
mask systemd-journald-audit.socket
...
won't work in unpriv CTs and mark the systemctl status as failed.
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2022-11-11 16:39:44 +01:00
Thomas Lamprecht
03406f3e36
always add enabled mirror
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2022-11-10 15:09:16 +01:00
Thomas Lamprecht
c540795686
buildsys: remove all archlinux*.tar* files on dist-clean
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2022-11-10 15:08:54 +01:00
Thomas Lamprecht
903d29f84d
typo & whitespace fixes
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-12-02 16:44:45 +01:00
Thomas Lamprecht
f29113a862
caching: cache signatures but ignore outer verify errors
...
new pacman (6.0) doesn't downloads the <pkg>.sig files if SigLevel is
set to `Never`, an understandable optimization in general but for our
use case an issue.
We cache packages on the host, where we have internet but do not have
an archlinux trusted keyring setup, we then verify the non-bootstrap
packages (i.e., all but pacman and the keyring) in the bootstrapping
container itself
This is somewhat ugly, but one of the simpler options, an possible
alternative on the long run could be to package archlinux-keyring for
debian and have that as dependency for aab, then we could populate a
local directory (pacman gas a `--gpgdir` option) and fully verify all
that..
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-12-02 16:43:01 +01:00
Thomas Lamprecht
fbec3675cc
pacman: allow overriding config file and siglevel
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-12-02 14:44:18 +01:00
Thomas Lamprecht
034835001d
run_command: allow to opt-out dying on non-zero exit code
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-12-02 14:42:38 +01:00
Thomas Lamprecht
ae71b49f69
split out writing (host-side) pacman.conf
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-12-02 13:15:47 +01:00
Thomas Lamprecht
b867882aee
finalize: allow to choose gzip or zstd and default to latter
...
zstd shaves of >50 MiB of the final archive and is (in general)
faster on decompression too
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-12-01 19:47:41 +01:00
Thomas Lamprecht
6bd339d3b8
update copyright years
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-12-01 19:46:45 +01:00
Thomas Lamprecht
2d2bee9185
mask sys-kernel-*.mount units, no use in CT by default
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2020-04-25 17:55:21 +02:00
Thomas Lamprecht
9cf8106382
aab: add use local lib
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2020-04-25 17:54:31 +02:00
Thomas Lamprecht
18ef2f8c0d
print out fianl commpressed archive size and format better
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2019-09-24 17:29:49 +02:00
Thomas Lamprecht
1e25020c9b
print out available commands and short description
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2019-09-23 10:52:13 +02:00
Thomas Lamprecht
333bdb6220
followup: fix indentation and missing single quote
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2019-09-23 10:28:13 +02:00
Thomas Lamprecht
dcc40f0e99
followup: separate newline to new line
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2019-09-20 14:35:39 +02:00
Thomas Lamprecht
87fbfb3a1f
use new config properties for sample lxc config
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2018-04-05 10:15:44 +02:00
Thomas Lamprecht