Re: [PATCH 1/1] wic: disable generation of python bytecode cache

[Baurzhan Ismagulov <ibr@radix50.net>]

On 2025-06-05 16:58, 'Felix Moessbauer' via isar-users wrote:
> Wic is executed as root, so the python bytecode cache is also
> created as root. This is problematic as the cache is created inside the
> source tree in a folder__pycache__ next to the python script itself. By
> that, we end up with files belonging to root inside the repo source
> tree, which makes it impossible to delete the source tree as a regular
> user.
> 
> This problem became visible with the kas purge plugin that removes the
> fetched layers as a regular user (these layers are fetched and managed
> by kas). Also the read-only mounting of repos in kas does not help here,
> as the fetched repos are not mounted ro for obvious reasons.
> 
> Anyways, we should not create files inside the source tree that do not
> belong to the calling user. To fix this, we just disable the python
> cache for the wic task. This is the only task that executes a python
> script from the source tree as root.

If there is consensus on this, I'd like to merge this in the next days because
it provides a specific improvement.

Any broader / more optimal changes can be merged on top.

With kind regards,
Baurzhan

-- 
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/aHPl1I4EJuBCfYRb%40abai.de.