exclude ca-certificate symlinks from overlay
etc/ssl/certs is populated with symlinks for the system wide ca-certificates in /usr/share/ca-certificates. As these are maintained by the trigger, they should not go to overlay - they get rewritten anyway and just take up extra space and clutter lbu diff.
Two solution options:
- rename these symlinks to be ca-cert-*.pem and update the protected_path mask to exclude these
- new apk-tools feature to exclude symlinks (that point outside) in certain path
#2 seems very tricky to get right. So I’d prefer solution #1.
(from redmine: issue id 2846, created on 2014-04-17, closed on 2014-05-06)
- Relations:
- relates #2715 (closed)
- Changesets:
- Revision af18a975 by Timo Teräs on 2014-04-21T16:11:43Z:
main/ca-certificates: rewrite update-ca-certificates in lua
fix also overlay protected paths to exclude generated links.
ref #2846
- Revision 5f8b675b by Timo Teräs on 2014-04-21T18:12:08Z:
main/update-ca-certificates: fix few minor issues in lua version
also optimize and cleanup the lua code a bit too. ref #2846
- Revision 3ec43469 by Timo Teräs on 2014-05-06T13:26:48Z:
main/ca-certificates: rewrite update-ca-certificates in lua
fix also overlay protected paths to exclude generated links.
ref #2846
(cherry picked from commit af18a975d8494f923d0ff3754dd250ffc641b6ef)
- Revision 6590afe4 by Timo Teräs on 2014-05-06T13:27:22Z:
main/ca-certificates: fix few minor issues in lua version
also optimize and cleanup the lua code a bit too. fixes #2846
(cherry picked from commit 5f8b675b20728b5589dcd6216e0f154065aec7b8)