Can we update OTA in sysroot=readonly mode?

[codeshravan]

1). We are generating a ostree_repo https://github.com/uptane/meta-updater/blob/master/classes/image_types_ostree.bbclass#L139
2). We are pushing this ostree repo on device using adb or some other transport method to /tmp dir
3). Then we use ostree pull-local /tmp/ostree-repo But it gets failed because sysroot is read-only
4). Finally we use ostree admin deploy

Any solution for 3rd and 4th step? Or we always need to boot sysroot as rw only?

[champtar]

We use ostree pull-local on Alma/RHEL 9 with read-only sysroot and it works. ostree takes care of remounting rw, so I would check if anything is preventing the remount (selinux ? ...)

Also share the version you are using.

[codeshravan]

Can you show from the pull-local code where we are remounting when we trigger pull-local? Or is there any different command we have to use before running pull-local, I see in pull-local code it’s just checking if repo is writable or not.

ostree --version
libostree:
Version: '2024.5'
Features:

• inode64
• initial-var
• libcurl
• libsoup3
• composefs
• ex-fsverity
• libarchive
• selinux
• libmount
• systemd
• release
• p2p

[champtar]

ostree/src/ostree/ot-builtin-pull-local.c

Line 98 in e4590bc

if (!ostree_option_context_parse (context, options, &argc, &argv, invocation, &repo, cancellable,

ostree/src/ostree/ot-main.c

Line 540 in e4590bc

repo = parse_repo_option_and_maybe_remount (

ostree/src/ostree/ot-main.c

Line 383 in e4590bc

parse_repo_option_and_maybe_remount (GOptionContext *context, const char *repo_path,

what error do you get BTW ?

[codeshravan]

yes its working in permissive mode. I need to address the denials .

[codeshravan]

Thanks a lot @champtar . I somehow missed this part.