Support unprivileged operation about rpm-ostree HOT 4 CLOSED

Also, for rpm-ostree, we already want to ignore %post useradd because realistically for reproducibility, we need to hardcode /etc/passwd and such anyways.

I bet it would actually work to just ignore %post, and for things like ldconfig, switch to doing them "cross" i.e. ldconfig -r /path/to/target.

from rpm-ostree.

OpenEmbedded has also done "defer %post to boot time" for a while: https://github.com/openembedded/openembedded/blob/fabd8e6d07d3cd0cc93c2a0fc804f8c8f316c649/classes/rootfs_rpm.bbclass#L135

from rpm-ostree.

Don't user namespaces simplify this significantly?

from rpm-ostree.

I think this would still be nice to have, but with coreos-assembler now the model is geared towards using virtualization to perform unprivileged builds. Since you likely want virt anyway for VM image generation, it doesn't seem as much of a deal breaker if rpm-ostree also uses virt for composes. Closing, but feel free to reopen.

from rpm-ostree.