On Thu, Jul 14, 2016, at 08:33 AM, Colin Walters wrote: > > Another thing I think is cool is that we use bubblewrap[3] to > run %post scripts, which greatly helps avoid system damage from badly written > scripts, and helps ensure that system changes are under control of rpm-ostree. I also meant to link to: https://bugzilla.redhat.com/show_bug.cgi?id=1352154 which is one of the reasons I wanted to post this here. Adapting packages to the OSTree model of `/usr` snapshots that use plain old hardlinks may require some work in your packages to ensure your `%post` scripts do: - create-new-then-rename rather than open(O_TRUNC) - Keep cache files in /usr, not /var (a "cache file" contains data solely derived from content in /usr, examples are ldconfig and gtk-update-icon-cache) -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/devel@xxxxxxxxxxxxxxxxxxxxxxx