GitLab

Legacy path-based names are more difficult to use against a sysroot:
if your sysroot is in ~/sysroot and your detached debug symbols are
in ~/symbols, and you want to find detached debug symbols for
~/sysroot/usr/lib/x86_64-linux-gnu/libfoo.so.0 by using
"gdb -iex set-debug-file-directory /home/me/symbols:/usr/lib/debug",
then you would have to create a symlink
~/symbols/home/me/sysroot/usr pointing to ~/symbols/usr. Build-ID-based
names do not have this issue.

This change is based on code in steam-runtime, which uses symbolic
links. Hard links are a somewhat better fit for OSTree, since they
are automatically deduplicated, and also have the advantage that
multiple .build-id directories can easily be combined with rsync.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

This file is read by the default /etc/bash.bashrc in Debian and
included as a prefix to the prompt, in this style:

    (contents of /etc/debian_chroot) user@host:~$

It is automatically populated with the chroot name by schroot, but not
by other container tools like Docker and Flatpak. We might as well
give it a useful value for all Flatdeb-generated containers.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Fixes: 5128513c

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

If the runtime is to be used as an unmanaged extension or with a
non-Flatpak container-runner, or if it's going to be postprocessed or
transferred as a tarball to somewhere where it can be committed to a
libostree repository, it's time-consuming and not necessarily useful
to commit it here.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

The previous shell script version didn't actually work, because as
shellcheck pointed out, the variable "unwanted" was local to the
subshell. Write in a real programming language instead.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

This avoids some warnings from apt.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

For example, the image can be built with a local mirror or an
unreleased version of the distribution, then configured to use a
generic public mirror or the release version of the distribution to
download any subsequent packages.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

This tells us the runtime name (package set) and architecture.
Signed-off-by: Simon McVittie <smcv@collabora.com>

This makes it easier to tell what has been run.
Signed-off-by: Simon McVittie <smcv@collabora.com>

One prominent use for the sysroot tarball is with schroot, but schroot
assumes that it can safely copy /etc/passwd and /etc/group from the
host system into the chroot.
Signed-off-by: Simon McVittie <smcv@collabora.com>

_apt is a dynamically-allocated system uid that varies between systems.
Luckily, if we delete these directories, apt will recreate them without
complaint.
Signed-off-by: Simon McVittie <smcv@collabora.com>

This means we can continue and produce derived Docker images without
needing to download a new package list every time.
Signed-off-by: Simon McVittie <smcv@collabora.com>

This means all the packages we install are consistent with the apt
lists from the base tarball.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

/var/lock is canonically a symlink to /run/lock now.
Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

This is helpful if you want to run aptitude. On a real system, /run
would be a tmpfs, but Docker doesn't do that.
Signed-off-by: Simon McVittie <smcv@collabora.com>

This is a workaround to be able to install openjdk-8-jre-headless from
jessie-backports on Debian 8 'jessie'.
Signed-off-by: Simon McVittie <smcv@collabora.com>

On Debian 8 'jessie', removing udev calls update-rc.d.
Signed-off-by: Simon McVittie <smcv@collabora.com>