Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-71327

Defend against packages moving in and out of the base UBI image

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Undefined Undefined
    • rhel-9.6
    • rhel-9.6
    • toolbox-container
    • None
    • None
    • 3
    • rhel-display-tools-accessibility
    • 17
    • 26
    • 2
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • DESKTOP Cycle #3 10.0 phase, DESKTOP Cycle #4 10.0 phase, DESKTOP Cycle #5 10.0 phase
    • Unspecified Release Note Type - Unknown
    • None

      The original idea was that packages listed in missing-docs are the ones that get inherited from the base UBI image and have some content, such as documentation or translations, stripped out; and packages listed in extra-packages are the ones added on top of the base UBI image specifically for Toolbx containers. The stripped out content was to be restored by reinstalling those packages, followed by installing the extra packages on top.

      In practice, the set of packages in the base UBI image is not constant and changes over time.

      Currently, if a package that's listed in extra-packages, but not in missing-docs, gets included in the base UBI image, then it will fail the missing files test, because the content stripped out by the base UBI image wouldn't be restored.

      Therefore, to avoid such test failures, all the packages listed in extra-packages should also be listed in missing-docs.

              dray@redhat.com Debarshi Ray
              dray@redhat.com Debarshi Ray
              Debarshi Ray Debarshi Ray
              Petr Schindler Petr Schindler
              Malhar Jivrajani Malhar Jivrajani
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: