| OSTREE ADMIN UNLOCK(1) | ostree admin unlock | OSTREE ADMIN UNLOCK(1) |
.SH "NAME" ostree-admin-unlock - Prepare the current deployment for
hotfix or development
.SH "SYNOPSIS"
.HP 480u
ostree admin unlock [OPTIONS...]
.SH "DESCRIPTION"
.PP Remove the read-only bind mount on /usr and replace it with a writable
overlay filesystem. This default invocation of "unlock" is
intended for development/testing purposes. All changes in the overlay are
lost on reboot. However, this command also supports "hotfixes",
see below.
.SH "OPTIONS"
.PP --hotfix
If this option is provided, the current deployment will be cloned as a
rollback target. This option is intended for things like emergency security
updates to userspace components such as sshd. The semantics here differ from
the default "development" unlock mode in that reboots will retain
any changes (which is what you likely want for security hotfixes).
.RE
.PP --transient
If this option is provided, the overlay filesystem will be mounted read-only.
It can still be affected by remounting it as read/write in a new mount
namespace. For example:
ostree admin unlock --transient unshare -m -- sh -c 'mount --options-source=disable -o remount,rw /usr && touch /usr/myfile'
.RE
| OSTree |