| thcipriani | |
| mobrovac | |
| mmodell |
| Release-Engineering-Team |
Establish /opt/lib as the location for installing application
dependencies that are installed via unprivileged execution and from
untrusted sources. The directory is created during the privileged build
phase and owned by the unprivileged runtime user.
Depends on D741
Run go test ./... or arc unit.
| Automatic diff as part of commit; lint not applicable. |
| Automatic diff as part of commit; unit tests not applicable. |
| config/runs.go | ||
|---|---|---|
| 9 | Why /opt/local ? Also, would it be possible to configure it rather than hard-code it? | |
I remember talking about the necessity for this directory.
Accepting this revision to unblock additional patches; however, I think this should either be made configurable (as @mobrovac suggests) and/or follow the conventions being established in T169998: RFC: Container path conventions
| config/runs.go | ||
|---|---|---|
| 9 | I chose /opt/local based on my (probably incorrect) interpretation of its role in the FHS. Looking at FHS 3.0 now, I would say /opt/lib is more correct but I honestly think this is just one of those things that could be debated endlessly. There are currently limitations of scope between config elements that prevents this from being configurable at the moment but I plan on factoring out those limitations soon. | |
I'm ok with it with the caveat that I'd like to see a refectoring of the code to allow this path to be configurable.