Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

prepare-root: Switch to a tmpfs for transient root #3173

Merged
merged 1 commit into from Feb 13, 2024

Conversation

cgwalters
Copy link
Member

We're debating this over in CentOS/centos-bootc-dev#27 and I have come to the conclusion that having changes to / persist across reboot by default was a bad idea.

  • It conflicts with any kind of secure boot scenario
  • Having things only go away on upgrades is in some ways even more surprising
  • The term transient implies this

There may be a use case in the future for having something like root.transient = persistent, but this is just a better default.

@cgwalters cgwalters mentioned this pull request Feb 13, 2024
@github-actions github-actions bot added the area/prepare-root Issue relates to ostree-prepare-root label Feb 13, 2024
We're debating this over in CentOS/centos-bootc-dev#27
and I have come to the conclusion that having changes to `/`
persist across reboot by default was a bad idea.

- It conflicts with any kind of secure boot scenario
- Having things only go away on upgrades is in some ways even *more* surprising
- The term `transient` implies this

There may be a use case in the future for having something like `root.transient = persistent`,
but this is just a better default.

Signed-off-by: Colin Walters <walters@verbum.org>
@cgwalters cgwalters force-pushed the transient-root-really-transient branch from 3c5447d to 0cff65d Compare February 13, 2024 20:56
@cgwalters cgwalters merged commit d2fc1f3 into ostreedev:main Feb 13, 2024
24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/prepare-root Issue relates to ostree-prepare-root
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants