composing/shipping OSTree trees

Colin Walters walters at verbum.org
Tue Jun 3 02:48:36 UTC 2014


Hi,

On Mon, Jun 2, 2014, at 12:20 PM, Dennis Gilmore wrote:

> what do you mean by not mirroring to all the mirrors? we dont get to
> pick and choose what goes where.mirrors choose what they want to
> mirror. I have started a conversation with them but have had no
> response. i suspect we may only hear from them when they start having
> issues.

Ok.

> without knowing the details of the parts you talk about here I can not
> give you any feedback on any of it.

Is there a part I can give more detail on?

> I do not know how the update process works, and have zero clue about
> how we can tell the updates process to use mirrormanager to find the
> mirrors to pull from.

The mirrorlist bug is:
https://bugzilla.gnome.org/show_bug.cgi?id=729388

I think that one is now more on track now that librepo is LGPLv2+,
so code can be more easily shared.  That's on my plate.

As far as the updates process - an OSTree repository is a set of
flat files - the refs or branch files look like this:
http://rpm-ostree.cloud.fedoraproject.org/repo/refs/heads/fedora-atomic/rawhide/x86_64/buildmaster/base/core

These files under refs/are mutable - they are updated to point to newer
commits.

The commit objects are immutable, with detached metadata which is
where the GPG signatures live.

http://rpm-ostree.cloud.fedoraproject.org/repo/objects/07/99c0418acd4c6b356e4eddb9edf16dde74bf24fa9d548d38b32abcc853f30f.commit
http://rpm-ostree.cloud.fedoraproject.org/repo/objects/07/99c0418acd4c6b356e4eddb9edf16dde74bf24fa9d548d38b32abcc853f30f.commitmeta

The format is binary GVariants (kind of like Google Protocol Buffers). 
The
schema definition is in
https://git.gnome.org/browse/ostree/tree/src/libostree/ostree-core.h#n105


A key discussion to have is the linkup between Koji and the tree compose
process - what servers that lives on, how they communicate, how does
that compose server get access to GPG signing infrastructure, etc?

> Basically we just dont have anywhere near enough information to proceed.

Does that help at all?  Thanks!


More information about the rel-eng mailing list