Add a new chroot mode: unshare
Builds packages using an arbitrary chroot tarball without needing
superuser privileges. The schroot backend also doesn't require sudo when
building (schroot is suid root) but it needs superuser privileges for
setting up or changing chroots. The unshare backend makes use of Linux
user namespaces which allow using chroot() and mount() without being
root. The only suid root binaries the unshare backend uses are newuidmap
and newgidmap.
Debian carries a custom kernel patch that disallows user namespaces by
default. For the unshare backend to work, they have to be enabled:
$ sudo sysctl -w kernel.unprivileged_userns_clone=1
The unshare backend allows building packages in arbitrary chroots on
systems that have user namespaces enabled but where the user does not
have sudo rights otherwise.
The default tarball location is ~/.local/share/sbuild/%r-%a.tar.gz
Loading
Please register or sign in to comment