bundle: allow installing bundle from ZFS partitions

[zonque]

Add ZFS_SUPER_MAGIC as defines in openzfs.

[jluebbe]

https://github.com/openzfs/zfs/blob/master/include/sys/fs/zfs.h#L1198 calls it LINUX_ZFS_SUPER_MAGIC. Please add it to the list in https://github.com/rauc/rauc/blob/master/src/bundle.c#L21-L81 with a comment where it was found.

[zonque]

https://github.com/openzfs/zfs/blob/master/include/sys/fs/zfs.h#L1198 calls it LINUX_ZFS_SUPER_MAGIC. Please add it to the list in https://github.com/rauc/rauc/blob/master/src/bundle.c#L21-L81 with a comment where it was found.

Ah, I missed that list. Thanks!

Also, ZFS apparently cannot be checked with the rdev check in bundle.c so we have to set mount_checked to TRUE immediately. Will update.

[zonque]

Updated. PTAL.

[codecov]

Codecov Report

Merging #689 (21bb303) into master (f81061c) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #689   +/-   ##
=======================================
  Coverage   72.81%   72.81%           
=======================================
  Files          28       28           
  Lines        8645     8645           
=======================================
  Hits         6295     6295           
  Misses       2350     2350           

Impacted Files	Coverage Δ
src/bundle.c	62.79% <ø> (ø)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f81061c...21bb303. Read the comment docs.

[jluebbe]

This should also help with #688.

@zonque You're actually installing from ZFS on embedded devices? Have you tried the verity bundle format?

[zonque]

@zonque You're actually installing from ZFS on embedded devices?

Yes, we're using it both on x86 and raspberrypis.

Have you tried the verity bundle format?

No, how would that help?

[jluebbe]

Have you tried the verity bundle format?

No, how would that help?

With plain bundles, RAUC uses these checks to protect against the TOCTOU vulnerability:
https://rauc.readthedocs.io/en/latest/advanced.html#protection-against-concurrent-bundle-modification

If it detects a verity bundle, these checks are not necessary and skipped.