Re: [gentoo-dev] Braindump wrt fakeroot and path sandboxing

[Chad Huneycutt <chad.huneycutt@acm.org>]

Karl Trygve Kalleberg wrote:

> For those who're not up to date on this subject, the reason why we want a
> combination of subterfugue's SimplePathSandbox and fakeroot is that
> 1) We don't want ebuilds to write outside of ${S}, /tmp or ${D}
> 2) We really don't want to run the ebuilds as the real root, if we can
> fake it,
>    hence fakeroot. (Fakeroot lets the ebuild think it runs as root; in
> practice
>    this infers chown-privileges to a regular user).
> 3) We do not want to use subterfugue since it's too slow. Fakeroot seems
> to have
>    some features that are overkill for this project, and at any rate, we
> really
>    only want to do syscall tracing once. (The alternative would be a
> sandbox
>    process that contained fakeroot that contained the ebuild...)

I am sure I have heard the argument, but I can't remember it.  Is there 
a reason other than (2) that we can't just do a chroot to the image 
directory?

-- 
Chad Huneycutt
Ph.D. Student
http://www.cc.gatech.edu/~chadh