Skip to content
This repository has been archived by the owner on Nov 7, 2024. It is now read-only.

store: Use policy from merged tree with derived layers #669

Merged
merged 1 commit into from
Oct 2, 2024

Conversation

cgwalters
Copy link
Member

@cgwalters cgwalters commented Sep 30, 2024

I was initially worried this was going to slow things down but actually AFAICS because we are already setting a policy we end up rechecking the labels for all of the base image files anyways, even in the optimal
path.

So what's really happening here is we could likely speed up the non-derived case. But let's leave that as a TODO as we have much more important things.

Closes: #510

@cgwalters
Copy link
Member Author

This works for me, but draft since it could use a test.

@cgwalters
Copy link
Member Author

I was initially worried this was going to slow things
down but actually AFAICS because we are already setting
a policy we end up rechecking the labels for all of
the base image files anyways, even in the optimal
path.

So what's really happening here is we could likely
speed up the non-derived case. But let's leave that
as a TODO as we have much more important things.

Signed-off-by: Colin Walters <[email protected]>
@cgwalters cgwalters marked this pull request as ready for review October 1, 2024 17:54
@cgwalters
Copy link
Member Author

Now with a test case! (In shell script because...ug)

Copy link
Member

@jmarrero jmarrero left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OCI SELinux labeling mismatch when package only ships binary policy - greetd is broken
2 participants