Re: [atomic-devel] bwrap-oci: convert from OCI to bubblewrap command line

[Giuseppe Scrivano <gscrivano gnu org>]

Hi,

Colin Walters <walters verbum org> writes:

> On Tue, Aug 9, 2016, at 12:55 PM, Giuseppe Scrivano wrote:
>> Hi,
>> 
>> I would like to introduce bwrap-oci, a tool to convert from an OCI
>> configuration file to a command line for bubblewrap:
>> 
>> https://github.com/giuseppe/bwrap-oci
>> 
>> While system containers are executed through runc which uses directly
>> the OCI configuration file, containers that run as non root will use
>> bubblewrap[1] through bwrap-oci.  With bwrap-oci the same image format
>> can be used for both variants, as the OCI configuration file will be
>> converted to the bubblewrap command line to run the container.
>
> And this is likely to become a dependency of the atomic install --user
> work right?  In that case, makes sense to me.  If no one has any further
> comment let's do the move tomorrow.

some new options were needed in bubblewrap to support a readonly rootfs
and OCI hooks, those got merged in bubblewrap last week.  I don't
expect big changes to happen soon in bwrap-oci, so I think it is a good
time to move it under projectatomic and continue development from there.

Regards,
Giuseppe