OSTREE-ADMIN-UNLOCK(1)

✨ NAME ✨

okay so this is the OSTree manual page for ostree-admin-unlock, and it's all about prepping your current deployment for a hotfix or some development time. 💅

🌸 SYNOPSIS 🌸

ostree admin unlock [OPTIONS...]

💖 DESCRIPTION 💖

So here's the vibe, bestie: this removes the read-only bind mount on /usr and replaces it with a writable overlay filesystem. The default unlock invocation is intended for development/testing purposes. All changes in the overlay are lost on reboot 😭.

But plot twist: this command also supports "hotfixes" — see below. 👑

🎀 OPTIONS 🎀

• --hotfix — if you pass this, the current deployment will be cloned as a rollback target. This option is for things like emergency security updates to userspace components such as sshd. The semantics here differ from the default "development" unlock mode in that reboots will retain any changes, which is what you likely want for security hotfixes. 🔥
• --transient — if you pass this, the overlay filesystem will be mounted read-only. It can still be affected by remounting it as read/write in a new mount namespace. For example:

ostree admin unlock --transient
unshare -m -- sh -c 'mount --options-source=disable -o remount,rw /usr && touch /usr/myfile'

---

okay that's a wrap, bestie — source/version: the OSTree manual, page OSTREE ADMIN UNLOCK(1), and the date? it's not printed on this footer, so no invented date energy here 💜