Add a rootless bootstrap mode using bubblewrap

Set up a bubblewrap sandbox suitable for bootstrap. Since bubblewrap
can operate without root permissions when user namespaces are
allowed, this effectively adds a rootless bootstrap mode.
This commit is contained in:
Dor Askayo 2021-12-25 20:19:01 +02:00
parent 8330ab4504
commit 1e67477ff2
2 changed files with 42 additions and 3 deletions

View file

@ -23,13 +23,15 @@ Get me started!
installed.
a. Alternatively, run ``./rootfs.py --chroot`` to run it in a chroot.
b. Alternatively, run ``./rootfs.py`` but dont run the actual
b. Alternatively, run ``./rootfs.py --bwrap`` to run it in a bubblewrap
sandbox. When user namespaces are supported, this mode is rootless.
c. Alternatively, run ``./rootfs.py`` but dont run the actual
virtualization and instead copy sysa/tmp/initramfs to a USB or
some other device and boot from bare metal. NOTE: we now require
a hard drive. This is currently hardcoded as sda. You also need
to put ``sysc/tmp/disk.img`` onto your sda on the bootstrapping
machine.
c. Alternatively, do not use python at all, see "Python-less build"
d. Alternatively, do not use python at all, see "Python-less build"
below.
5. Wait.