[pve-devel] [RFC proxmox-ve/kernel-meta 00/15] ESP sync improvements

[Thomas Lamprecht]

On 7/10/19 5:04 PM, Fabian Grünbichler wrote:
> move ESP sync and kernel autoremove snippets to pve-kernel-meta and
> introduce a new binary package there, to allow easier sharing with
> future PMG versions.
> 
> add a new pveesptool for formatting, initializing and refreshing synced
> ESPs. various small improvements and cleanups to the hooks as well.
> 
> proxmox-ve needs a bump accordingly, see last patch for pve-kernel-meta.
> 
> There is probably lots of room for improvement, some areas for potential
> follow-ups:
> - 'pveesptool mount' and 'umount' commands (for manual configuration,
>   cleanup, ...)
> - 'pveesptool scan' to list ESPs that might be added to the list of
>   synced ones
> - 'pveesptool remove' to remove an ESP from the list (and clean up its
>   contents?)
> - more helpers in the functions file
> - handle more edge/error case correctly in zz-pve-efiboot (there are
>   surely still some missing)
> - mktemp or something fancier for mountpoint directory creation, instead
>   of easy-to-guess hardcoded ones

We could just use a mount namespace, e.g., with
# unshare --mount

Then the outside would not see our mounts, at least unpriv. users..

> 
> CC: Wolfgang Bumiller <w.bumiller at proxmox.com>
> 
> (especially for the last two points, which should be looked at before the
> final release)