Commit Graph

19 Commits

Author SHA1 Message Date
Colin Walters 1bfa82ef77 tier-1: Enable lvm dracut module
Right now we have an "allowlist" effectively for our dracut modules
because we specify a configuration in `/usr/lib/dracut/dracut.conf.d`
which seems to turn off autodetection.

Add in lvm which we definitely want to support.

Signed-off-by: Colin Walters <walters@verbum.org>
2024-01-25 09:20:41 -05:00
Colin Walters 67462b0dbc Enable `bootc-fetch-apply-updates.service` by default
This landed in c13c9eb8dc
And we want to come out emphasizing it.

Signed-off-by: Colin Walters <walters@verbum.org>
2024-01-18 18:21:44 -05:00
Colin Walters 929e3e58e4 Add subscription-manager
We need this to access RHEL RPM content today.

(I would like longer term to be able to fetch RPMs from registries
 with a pull secret, xref https://github.com/coreos/rpm-ostree/issues/4155 )
2023-12-13 14:39:28 -05:00
Colin Walters dd0a042a17 Always add bootc install config
bootc isn't in C9S yet, but it is in the -dev images.  Add
the install config unconditionally so that `bootc install`
works in the `centos-bootc-dev` image.
2023-12-08 12:45:42 -05:00
Liora Milbaum 03033108a5 Mass rename tier-1/boot => bootc 2023-11-23 14:42:56 +02:00
Colin Walters 8a987bb166 tier-1: Add lvm2
We expect to support this by default.
2023-11-19 15:20:26 -05:00
Liora Milbaum 6fe2272322 Squash sagano identifier 2023-11-07 09:05:21 +02:00
Colin Walters f53dd4966e tier-1: Drop qemu emulators
These don't exist in C9S/ELN, and break the build on non-x86_64
on those.
2023-10-29 10:17:18 -04:00
Colin Walters 2ea1dcabc2 Enable readonly sysroot via config file
This is the more proper way to do it.
2023-10-21 16:03:18 -04:00
Colin Walters ec478a0a1b tier-1: Strip out various things not in ELN
We won't ship things not in ELN.
2023-09-29 17:59:20 -04:00
Colin Walters 925d2a89cf Move container entrypoint to tier 0 2023-09-28 16:29:56 -04:00
Colin Walters aabca8e623 networking: But do exclude systemd-networkd 2023-09-23 09:09:02 -04:00
Colin Walters 719024a2c1 tier-1: Enable recommends, fix podman
We were missing `container-selinux`...oops.  Fix that.  While
we're here..

- Fully re-enable `recommends: true` - this is not a small image,
  and so let's not try to override things.
- Drop out the old-style compat networking packages for podman,
  since this is a new image
2023-09-23 08:27:45 -04:00
Colin Walters e67a9ca22c tier-1: Add dnf (and for -dev, fetch from copr)
Part of the aim of this project is to make `dnf` "Just work"
in a bootable container native host.

There's some details to work through, but tier-1 is already
large, and this doesn't add much more.
2023-09-22 10:57:29 -04:00
Colin Walters d6c5c14f38 tier-1: Enable persistent journal by default
The copies of this never stop!
2023-09-21 17:00:10 -04:00
Colin Walters dcebb7adac firmware: Include fwupd
I think this makes sense; in theory you can use bare metal
but not ship fwupd, but eh.
2023-09-15 17:51:21 -04:00
Colin Walters 29f6c6fcd2 manifests: Split out firmware, do use bootable-rpm-ostree 2023-09-15 17:30:44 -04:00
Colin Walters 7361f26eeb Introduce a tier-0 image
This is basically just:

- kernel
- systemd
- selinux-policy-targeted
- bootc

Notably it doesn't have `rpm-ostree` or `rpm`, or many other things.
It also doesn't even have `linux-firmware`.

And no `openssh`!

It's almost certain that you need to derive from this, but
it should be a suitable starting point.

TODO: Add something like

```
$ dnf-system-bootstrap
Installing packaging tools from quay.io/fedora/fedora-boot-dnf@sha256:abcd...)
 # This would be basically all the packages not in tier-0 that
 # are enough to give `dnf install`
$ dnf install cowsay
 # Install critical stuff
$ dnf system-bootstrap remove
 # Remove everything that we added for the package system, that isn't
 # a dependency of what the user wants!
```

(In theory we could make this work with multi-stage builds, but
 it's a little hard)
2023-09-15 15:11:01 -04:00
Colin Walters 380886b80a A few renames; oscore -> tier-1
Prep for multiple tiers.
2023-09-13 17:45:16 -04:00