[SailfishDevel] Scriptlets in RPM hot allowed to Harbour

Jonni Rainisto jonni.rainisto at jolla.com
Sat Jan 11 22:21:17 UTC 2014


Hi

With current Harbour QA rules, application like that is not allowed. Issues:
- privileged group is reserved for Jolla applications only, harbour apps are not allowed to have it
- applications that install rpm packages are not allowed before there is setting for allowing 3rd party rpm in some future update

Most likely you could do an application that uses holes in the system that passes the QA, but the current answer is that unfortunately that kind of application is not allowed.
But not all hope is lost, in some coming update the policy might change when the 3rd party rpm setting comes to device.

________________________________
From: devel-bounces at lists.sailfishos.org [devel-bounces at lists.sailfishos.org] on behalf of Semuonov Basil [basil.semuonov at gmail.com]
Sent: Saturday, January 11, 2014 11:45 PM
To: devel at lists.sailfishos.org
Subject: [SailfishDevel] Scriptlets in RPM hot allowed to Harbour

I guess, that I am the person who started this story about scriptlets.

As Thomas suggested at his mail ( https://lists.sailfishos.org/pipermail/devel/2014-January/002767.html ), here is the problem which I personally trying to solve using postinst scriplet:
Sailfish use zypp as backend, packagekit as frontend, and ssu for repository management.
Ssu does have "global" repositories, and "user" repositories. By using packagekit you can only enable and disable repositories. You should use ssu to add or remove  repositories. But as "nemo" user, you cannot add/remove "user" repositories, root permissions are required to perform actual repository list update (ssu ur).

Scriptlet is used to create nemo:privileged file at /etc/zypp/repos.d/ so it can be updated(rw access) from warehouse application.
Of course you can use %files with

%defattr(-,nemo,privileged,-)

/etc/zypp/repos.d/openrepos.repo

but this way is already banned, since you can only deploy to predefined locations.


So, the question is, how to achieve this, don't violate policy and be at harbour?


Another use-case (as Andrey Kozhevnikov mentioned) is sending "quit" signal to app which constantly running at background(recieving updates or whatever).

So it does quits before update, and auto-starts after update completes.




With all that recent discussion, please do update https://harbour.jolla.com/faq and specify, that scriptlets are forbidden.


Regards,

Basil.

--
Semuonov Basil
--- Line of cut --- Linux everywhere...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.sailfishos.org/pipermail/devel/attachments/20140111/ba94c94b/attachment.html>


More information about the Devel mailing list