cpak Packager

1. 1. A photo editor opens files a person picks and saves settings of its own. Which filesystem list does its manifest carry?

   home, read-write xdg-pictures read-write, and home/.config/<app> read-write home read-only, and xdg-pictures read-write host read-only
2. 2. Why is a user directory written as xdg-documents rather than home/Documents?

   The xdg form survives the manifest migration and the other does not They are the same, and the short form is conventional home/Documents is read-only and the xdg form is not It resolves against whatever that person's desktop has that directory set to
3. 3. A .desktop file in your image sets Exec three times with different leading whitespace. What does cpak rewrite?

   None, and the export is refused The first, because a launcher reads top to bottom All three The last, because that is the one a launcher keeps
4. 4. The same file also has a line reading Exec[de]=... . What happens to it?

   It is rewritten, because it sets Exec It makes the export fail It is deleted, because cpak exports one locale It is left alone, because it is a different key
5. 5. Your manifest asks for nothing at all. What can the application reach?

   The display and the session bus, which every application gets Its own image, and nothing else on the machine Whatever the person installing it allows at the prompt The home directory, read-only
6. 6. A user runs cpak override --network=false on your package. What happens?

   The application runs without the network, and can be given it back later The install is refused until the manifest is changed Nothing: an override cannot narrow what the manifest asked for The package is re-fetched with a different manifest
7. 7. Which of these is not a grant cpak can express, and would be dropped with a warning?

   home/.local/share/example xdg-download ~/Documents /opt/data
8. 8. You are unsure whether your program needs a directory. What belongs in the manifest you publish?

   home, so the question stops coming up Nothing, and the entry is added when somebody reports what broke The directory, since removing it later breaks people The directory, read-only, as a compromise
9. 9. What does socketX11 open, beyond a socket to draw through?

   The clipboard, the keystrokes and the pixels of every other window on that display Nothing else: it is one socket The display and the audio server, which share a socket directory The display, and the network if the session is remote
10. 10. Your image ships a .desktop file with no [Desktop Entry] group. What does cpak do on export?

    It rewrites the commands it can read and does not invent the group It refuses to install the package It exports the file unchanged It writes the group and carries on
11. 11. A vendor permits installation but not redistribution of its binary. Which package design respects that boundary?

    Declare a runtime source with the vendor HTTPS URL, exact size and SHA-256 Commit the binary with Git LFS Download the latest file from the wrapper at every launch Copy the binary into a private OCI registry
12. 12. When should a Debian runtime source use deb-extract instead of dpkg?

    Whenever the package contains a desktop entry When its SHA-256 is not available When its payload is sufficient and maintainer scripts are not required Only when the package is built for arm64
13. 13. An application requires a helper command but the helper should keep its own sandbox. What relationship should the manifest use?

    A layer dependency An optional addon A runtime source A nested dependency
14. 14. Why clean APT data in the same image layer that installed the runtime packages?

    cpak validates only the last layer Files removed in a later layer still occupy bytes in the earlier OCI layer The storage driver cannot deduplicate package indexes The Store rejects images containing manuals

0 of 14 answered. Finish the 14 remaining questions to hand it in.