diff --git a/Containerfile b/Containerfile index c3bb6c7..1c6f1c6 100644 --- a/Containerfile +++ b/Containerfile @@ -3,26 +3,26 @@ # This is a local reference by default because we haven't shipped this image yet. FROM localhost/fedora-bootc:base as rootfs # Drop our package sets into /usr/share/doc, so that other things can parse it -COPY packages-*.txt /usr/share/doc/fedora-bootc/ +COPY packages*.txt /usr/share/doc/fedora-bootc/ # Overlay our defaults -COPY tier-1/usr/ /usr/ +COPY usr/ /usr/ RUN <= 10 +crypto-policies-scripts +# Configuring SSH keys, cloud provider check-in, etc +# TODO: needs Ignition kargs +# - afterburn afterburn-dracut +# NTP support +chrony +# Storage configuration/management +sg3_utils +## This is generally useful... https://github.com/CentOS/centos-bootc/issues/394 +cloud-utils-growpart +# User configuration +passwd +shadow-utils +acl +# Manipulating the kernel keyring; used by bootc +keyutils +# There are things that write outside of the journal still (such as the +# classic wtmp, etc.). auditd also writes outside the journal but it has its +# own log rotation. +# Anything package layered will also tend to expect files dropped in +# /etc/logrotate.d to work. Really, this is a legacy thing, but if we don't +# have it then people's disks will slowly fill up with logs. +logrotate +# Boost starving threads +# https://github.com/coreos/fedora-coreos-tracker/issues/753 +stalld + +# This defines a set of tools that are useful for configuring, debugging, +# or manipulating the network of a system. +# Interactive Networking configuration during coreos-install +NetworkManager-tui +# Support for cloud quirks and dynamic config in real rootfs: +# https://github.com/coreos/fedora-coreos-tracker/issues/320 +NetworkManager-cloud-setup +# Route manipulation and QoS +iproute iproute-tc +# Firewall manipulation +iptables nftables +# Interactive network tools for admins +socat net-tools bind-utils \ No newline at end of file diff --git a/tier-1/coreos-user-experience.yaml b/tier-1/coreos-user-experience.yaml deleted file mode 100644 index 1098094..0000000 --- a/tier-1/coreos-user-experience.yaml +++ /dev/null @@ -1,17 +0,0 @@ -# This file was forked/copied from Fedora CoreOS. TODO: resync -# once we have a good generic mechanism for sharing. -packages: - # Additional file compression/decompression - - bzip2 zstd - # Improved MOTD experience - - console-login-helper-messages-issuegen - - console-login-helper-messages-profile - # kdump support - # https://github.com/coreos/fedora-coreos-tracker/issues/622 - - kexec-tools - # Container tooling - - toolbox - # nvme-cli for managing nvme disks - - nvme-cli - # Used by admins interactively - - lsof diff --git a/tier-1/manifest.yaml b/tier-1/manifest.yaml deleted file mode 100644 index be1857b..0000000 --- a/tier-1/manifest.yaml +++ /dev/null @@ -1,34 +0,0 @@ -# Flip this back on, we're going to be a larger system -recommends: true - -include: - - ../tier-x/manifest.yaml - - networking-tools.yaml - - system-configuration.yaml - - coreos-user-experience.yaml - -packages: - # Include and set the default editor - - nano - - nfs-utils - # Additional firewall support; we aren't including these in RHCOS or they - # don't exist in RHEL - - iptables-services - - WALinuxAgent-udev - # Allow communication between sudo and SSSD - # for caching sudo rules by SSSD. - # https://github.com/coreos/fedora-coreos-tracker/issues/445 - - libsss_sudo - # SSSD; we only ship a subset of the backends - - sssd-client sssd-ad sssd-ipa sssd-krb5 sssd-ldap - # Used by admins interactively - - openssl - # Provides terminal tools like clear, reset, tput, and tset - - ncurses - # i18n - - kbd - # zram-generator (but not zram-generator-defaults) for F33 change - # https://github.com/coreos/fedora-coreos-tracker/issues/509 - - zram-generator - # This one is in Python so isn't in FCOS, but we can safely add it here. - - sos diff --git a/tier-1/networking-tools.yaml b/tier-1/networking-tools.yaml deleted file mode 100644 index 79ad66c..0000000 --- a/tier-1/networking-tools.yaml +++ /dev/null @@ -1,16 +0,0 @@ -# This defines a set of tools that are useful for configuring, debugging, -# or manipulating the network of a system. It is desired to keep this list -# generic enough to be shared downstream with RHCOS. - -packages: - # Interactive Networking configuration during coreos-install - - NetworkManager-tui - # Support for cloud quirks and dynamic config in real rootfs: - # https://github.com/coreos/fedora-coreos-tracker/issues/320 - - NetworkManager-cloud-setup - # Route manipulation and QoS - - iproute iproute-tc - # Firewall manipulation - - iptables nftables - # Interactive network tools for admins - - socat net-tools bind-utils diff --git a/tier-1/system-configuration.yaml b/tier-1/system-configuration.yaml deleted file mode 100644 index 561da50..0000000 --- a/tier-1/system-configuration.yaml +++ /dev/null @@ -1,30 +0,0 @@ -# These are packages that are related to configuring parts of the system. - -packages: - # Explicit dep for RHEL >= 10 - - crypto-policies-scripts - # Configuring SSH keys, cloud provider check-in, etc - # TODO: needs Ignition kargs - # - afterburn afterburn-dracut - # NTP support - - chrony - # Storage configuration/management - - sg3_utils - ## This is generally useful... https://github.com/CentOS/centos-bootc/issues/394 - - cloud-utils-growpart - # User configuration - - passwd - - shadow-utils - - acl - # Manipulating the kernel keyring; used by bootc - - keyutils - # There are things that write outside of the journal still (such as the - # classic wtmp, etc.). auditd also writes outside the journal but it has its - # own log rotation. - # Anything package layered will also tend to expect files dropped in - # /etc/logrotate.d to work. Really, this is a legacy thing, but if we don't - # have it then people's disks will slowly fill up with logs. - - logrotate - # Boost starving threads - # https://github.com/coreos/fedora-coreos-tracker/issues/753 - - stalld diff --git a/tier-1/usr/lib/dracut/dracut.conf.d/30-bootc-full.conf b/usr/lib/dracut/dracut.conf.d/30-bootc-full.conf similarity index 100% rename from tier-1/usr/lib/dracut/dracut.conf.d/30-bootc-full.conf rename to usr/lib/dracut/dracut.conf.d/30-bootc-full.conf diff --git a/tier-1/usr/lib/systemd/system-preset/05-bootc.preset b/usr/lib/systemd/system-preset/05-bootc.preset similarity index 100% rename from tier-1/usr/lib/systemd/system-preset/05-bootc.preset rename to usr/lib/systemd/system-preset/05-bootc.preset diff --git a/tier-1/usr/lib/systemd/system/bootc-generic-growpart.service b/usr/lib/systemd/system/bootc-generic-growpart.service similarity index 100% rename from tier-1/usr/lib/systemd/system/bootc-generic-growpart.service rename to usr/lib/systemd/system/bootc-generic-growpart.service diff --git a/tier-1/usr/libexec/bootc-generic-growpart b/usr/libexec/bootc-generic-growpart similarity index 100% rename from tier-1/usr/libexec/bootc-generic-growpart rename to usr/libexec/bootc-generic-growpart