add yum plugin to repatch rootfs on yum update

config/Makefile.am

-SUBDIRS = apparmor bash etc init templates
+SUBDIRS = apparmor bash etc init templates yum

config/yum/Makefile.am

+yumpluginsdir=$(datadir)/lxc
+
+yumplugins_SCRIPTS = \
+	lxc-patch.py
+
+EXTRA_DIST = $(yumplugins_SCRIPTS)

config/yum/lxc-patch.py

+# Yum plugin to re-patch container rootfs after a yum update is done
+#
+# Copyright (C) 2012 Oracle
+#
+# Authors:
+# Dwight Engen <dwight.engen@oracle.com>
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Library General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+#
+
+import os
+from fnmatch import fnmatch
+from yum.plugins import TYPE_INTERACTIVE
+from yum.plugins import PluginYumExit
+
+requires_api_version = '2.0'
+plugin_type = (TYPE_INTERACTIVE,)
+
+def posttrans_hook(conduit):
+    pkgs = []
+    patch_required = False
+
+    # If we aren't root, we can't have updated anything
+    if os.geteuid():
+        return
+
+    # See what packages have files that were patched
+    confpkgs = conduit.confString('main', 'packages')
+    if not confpkgs:
+        return
+
+    tmp = confpkgs.split(",")
+    for confpkg in tmp:
+        pkgs.append(confpkg.strip())
+
+    conduit.info(2, "lxc-patch: checking if updated pkgs need patching...")
+    ts = conduit.getTsInfo()
+    for tsmem in ts.getMembers():
+        for pkg in pkgs:
+            if fnmatch(pkg, tsmem.po.name):
+                patch_required = True
+    if patch_required:
+        conduit.info(2, "lxc-patch: patching container...")
+        os.spawnlp(os.P_WAIT, "lxc-patch", "lxc-patch", "--patch", "/")

configure.ac

@@ -588,6 +588,7 @@ AC_CONFIG_FILES([
 	config/templates/ubuntu.common.conf
 	config/templates/ubuntu.lucid.conf
 	config/templates/ubuntu.userns.conf
+	config/yum/Makefile
 
 	doc/Makefile
 	doc/api/Makefile