public/bootc-base-images
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
556 Commits 9 Branches 3 Tags
fb8efab43f4e3eabd4e3ae5d4bcde5d28e12fa3c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Colin Walters fb8efab43f tier-0: Enable tmp.mount by default 
The long-carried-forward patch to disable `tmp.mount` for RHEL
rears its head again.
 2024-02-12 15:06:34 -05:00
Colin Walters 76d079d6c3 Merge pull request #280 from cgwalters/drop-s390x-ppc64le 
Temporarily drop s390x/ppc64le builds
 2024-02-09 14:15:02 -05:00
Colin Walters 5b7e073463 Temporarily drop s390x/ppc64le builds 
These are more flaky, but also bib needs to be built for those
before we can merge https://github.com/CentOS/centos-bootc/pull/277
 2024-02-09 11:37:18 -05:00
Colin Walters 9a439dacf3 Merge pull request #275 from cgwalters/drop-unnecessary-bootupd-root 
manifests/bootupd: Drop unnecessary /
 2024-02-08 07:54:34 -05:00
Colin Walters d933e13974 manifests/bootupd: Drop unnecessary / 
It's not supported to pass anything other than `/` now, and
the argument has been optional for some time.
 2024-02-07 08:33:21 -05:00
Colin Walters 11bc68471b Merge pull request #268 from rhatdan/main 
Add sos package to allow easy reporting of issues
 2024-02-06 16:38:38 -05:00
Colin Walters b2fc8df25e Merge pull request #263 from lmilbaum/fix 
markdownlint reporting error - line too long
 2024-02-05 13:47:40 -05:00
Colin Walters d344254dd5 Merge pull request #245 from mrguitar/patch-2 
Update usage.md for air-gapped & disconnected updates
 2024-02-05 11:07:25 -05:00
Colin Walters 04424cc59c Merge pull request #259 from cgwalters/add-bootc-label 
Add a `containers.bootc` label
 2024-02-05 09:28:10 -05:00
Colin Walters b8bfc88c37 Merge pull request #258 from cgwalters/enable-crypt 
tier-1: Enable dracut crypt module too
 2024-02-05 09:26:57 -05:00
Colin Walters 86c7e64b72 Add a containers.bootc label 
Pairs with https://github.com/containers/bootc/pull/299

This is intended to be the new canonical label for bootc-compatible
images, as opposed to the existing `ostree.linux` etc.
 2024-02-05 09:00:28 -05:00
Colin Walters d858a847a3 tier-1: Enable dracut crypt module too 
We want to support LUKS encrypted root filesystems in general.
We're shipping the code in the root, so we might as well enable
it in the initramfs.
 2024-02-05 08:45:11 -05:00
Colin Walters 93588bf969 Merge pull request #232 from cgwalters/machined-compat-true 
Start with an empty `/etc/machine-id` to disable `ConditionFirstBoot`
 2024-02-03 08:01:21 -05:00
Colin Walters ab4c733179 Merge pull request #219 from cgwalters/add-virtiofs-root 
initramfs: Add virtiofs
 2024-01-30 13:27:43 -05:00
Colin Walters 256852e764 Start with an empty /etc/machine-id to disable ConditionFirstBoot 
The systemd firstboot process does several things, but notably
it runs a preset process.  This means that basically a plain
`RUN systemctl enable foo` won't work unless you *also* write
a preset file for it, and no one will know to do that.
 2024-01-30 13:09:43 -05:00
Colin Walters 776e92256b initramfs: Add virtiofs 
Today it's built as a module for Fedora derivatives, but
it's a relatively small kmod.

In particular I want to be able to use a virtiofs root as
a bootstrap mechanism to generate disk images in a situation
where we can't do nested containers, but we do have `/dev/kvm` -
which is the setup we have in e.g. OpenShift Prow on `build02`
with nested virt.
 2024-01-27 10:57:47 -05:00
Colin Walters 781e554adf Merge pull request #200 from cgwalters/enable-rhsm 
rpm-packaging: Add rhsm links
 2024-01-26 17:25:18 -05:00
Colin Walters 8c72e66bb0 Merge pull request #205 from cgwalters/doc-bootc-and-systemd-creds 
docs/install: Doc direct bootc raw and systemd creds
 2024-01-26 15:51:47 -05:00
Colin Walters 7ff2c0151d Merge pull request #207 from cgwalters/doc-ostree-container-commit 
docs: Talk about ostree container commit
 2024-01-26 13:52:02 -05:00
Colin Walters 45124baff7 docs: Talk about ostree container commit 
Came up in chat.
 2024-01-25 16:28:52 -05:00
Colin Walters 95ca7361e9 docs: Update now that bib supports c9s now 
Hooray!
 2024-01-25 15:28:11 -05:00
Colin Walters 708de70bd5 Merge pull request #204 from cgwalters/enable-lvm 
tier-1: Enable lvm dracut module
 2024-01-25 10:45:58 -05:00
Colin Walters dabf837e32 docs/install: Doc direct bootc raw and systemd creds 
First, we're still in a situation where bib doesn't work with c9s.
Let's link to the existing docs for using `bootc install to-disk`
which *does* work (and fixes multiple other bugs at the same time too).

Second: Let's document using systemd credentials to inject a root
SSH key, because this works across every image we ship where
one can inject SMBIOS bits.  (But notably this doesn't work in
most production IaaS virt systems like KubeVirt, AWS etc. which
gets into cloud agents).
 2024-01-25 09:55:00 -05:00
Colin Walters 1bfa82ef77 tier-1: Enable lvm dracut module 
Right now we have an "allowlist" effectively for our dracut modules
because we specify a configuration in `/usr/lib/dracut/dracut.conf.d`
which seems to turn off autodetection.

Add in lvm which we definitely want to support.

Signed-off-by: Colin Walters <walters@verbum.org>
 2024-01-25 09:20:41 -05:00
Colin Walters 603a196eec Merge pull request #199 from cgwalters/install-minor 
docs/install: two minor tweaks
 2024-01-25 07:53:10 -05:00
Colin Walters c5c5ca9ec0 rpm-packaging: Add rhsm links 
This pulls in the code from https://github.com/openshift/os/pull/876/commits/dd35dd0e102aeed90df14f05c8ae9da4c8c5962a
for the same reason.
 2024-01-24 20:04:15 -05:00
Colin Walters 73135ea845 docs/install: two minor tweaks 
Mainly wanted to clarify the ISO situation.

Signed-off-by: Colin Walters <walters@verbum.org>
 2024-01-24 18:10:45 -05:00
Colin Walters b84f3436a7 Merge pull request #196 from cgwalters/more-doc-cleanups 
docs/install: Cleanup, move bib earlier
 2024-01-24 09:13:35 -05:00
Colin Walters d893dd2aa7 docs/install: Cleanup, move bib earlier 
Move bib earlier than anaconda as a more likely entrypoint.
 2024-01-24 08:56:47 -05:00
Colin Walters ded33be79a Merge pull request #188 from cgwalters/retrigger 
autoupdates: Minor comment cleanup
 2024-01-23 13:25:54 -05:00
Colin Walters 2e56406003 autoupdates: Minor comment cleanup 
Real motivation is to retrigger a build.
 2024-01-23 12:55:27 -05:00
Colin Walters 5e848ba8bd Merge pull request #186 from cgwalters/backout-root-transient 
tier-0: back off transient root
 2024-01-23 09:28:44 -05:00
Colin Walters 7977ead6e4 tier-0: back off transient root 
Until https://github.com/osbuild/bootc-image-builder/issues/149 is
fixed.
 2024-01-23 08:11:35 -05:00
Colin Walters 257cbde2d7 Merge pull request #169 from cgwalters/doc-units 
docs: Explain about the `systemctl enable` trap
 2024-01-23 02:15:10 -05:00
Colin WaltersandValentin Rothberg 568428be35 Update docs/usage.md 
Co-authored-by: Valentin Rothberg <vrothberg@redhat.com>
 2024-01-22 08:01:58 -05:00
Colin WaltersandValentin Rothberg 856e206ec4 Update docs/usage.md 
Co-authored-by: Valentin Rothberg <vrothberg@redhat.com>
 2024-01-22 08:01:54 -05:00
Colin Walters 8245847221 Merge pull request #172 from cgwalters/doc-partitioning 
usage: Describe filesystem semantics
 2024-01-21 11:28:19 -05:00
Colin Walters c93512c6b1 usage: Describe filesystem semantics 
I was a bit confused into thinking our `-dev` images had
`root.transient` on, but they don't quite right now because
we don't regenerate the initramfs after installing the updated
ostree in that image.

However, because bootc-image-builder today is throwing away
the immutable bit on `/` (a different bug, see
https://github.com/ostreedev/ostree/pull/3094 ) we actually...
amazingly get a very similar effect in practice!

Anyways, let's go ahead and describe filesystem state here.
 2024-01-21 11:11:17 -05:00
Colin Walters 460ba40b76 Merge pull request #171 from cgwalters/fix-autoupdates 
autoupdates: Fix to use correct unit
 2024-01-21 11:09:39 -05:00
Colin Walters e456c289b5 autoupdates: Fix to use correct unit 
Definitely a brown paper bag bug.
 2024-01-19 17:43:05 -05:00
Colin Walters abb6a025c2 docs: Explain about the systemctl enable trap 2024-01-19 14:48:38 -05:00
Colin Walters a195894386 Merge pull request #165 from cgwalters/doc-usage 
docs/usage: New doc
 2024-01-19 09:46:27 -05:00
Colin Walters 820837e765 docs/usage: New doc 
There is some overlap with `install.md`, but that doc is all about
how to just get started.

This doc aims to cover things that are somewhat different about
the base image we ship here versus just what one might get
from installing the same RPM packages.

The automatic updates being on by default is a big one.

Signed-off-by: Colin Walters <walters@verbum.org>
 2024-01-19 09:44:59 -05:00
Colin Walters 67462b0dbc Enable bootc-fetch-apply-updates.service by default 
This landed in https://github.com/containers/bootc/pull/179/commits/c13c9eb8dcd829db0b8d35a526ee7a0e9bc91e97
And we want to come out emphasizing it.

Signed-off-by: Colin Walters <walters@verbum.org>
 2024-01-18 18:21:44 -05:00
Colin Walters 626d460101 Merge pull request #154 from cgwalters/c9s-dev-compose 
docs: Describe how to avoid home directory persistence
 2024-01-18 12:16:47 -05:00
Colin Walters 0a935522b1 docs: Describe how to avoid home directory persistence 
Since many if not most of our initial target use cases I think
don't want this.

Signed-off-by: Colin Walters <walters@verbum.org>
 2024-01-18 10:35:02 -05:00
Colin Walters 4f3f2b432f Merge pull request #136 from cgwalters/c9s-dev-compose 
c9s: Pull in odcs-4383
 2024-01-16 13:36:31 -05:00
Colin Walters e374bcc51a c9s: Pull in odcs-4383 
Hopefully this fixes https://github.com/CentOS/centos-bootc/issues/124
I verified at least that compose has the changes from
https://gitlab.com/redhat/centos-stream/release-engineering/pungi-centos/-/merge_requests/537
 2024-01-16 12:54:06 -05:00
Colin Walters f3ee0d0e0a Merge pull request #135 from CentOS/renovate/fedora-eln-20240116.x 
chore(deps): update dependency fedora-eln to fedora-eln-20240116.3
 2024-01-16 12:47:53 -05:00
Colin Walters 6553f32ebb Merge pull request #130 from cgwalters/base-add-bootc 
tier-0: bootc is now in c9s
 2024-01-15 13:21:52 -05:00
Colin Walters 7326c3686a tier-0: bootc is now in c9s 
So drop the conditional.
 2024-01-15 09:33:53 -05:00
Colin Walters 4d5e1d86fb Merge pull request #123 from cgwalters/pointless-rebuild 
docs: Link a commonly hit issue
 2024-01-11 09:41:12 -05:00
Colin Walters c3124cad03 docs: Link a commonly hit issue 
(I also pinned that and one other issue on that repo)
 2024-01-10 13:30:46 -05:00
Colin Walters 08814100c1 Merge pull request #112 from sallyom/update-docs 
update docs for bootc release 0.1.5
 2023-12-20 14:03:25 -05:00
Colin Walters 948f774a70 Merge pull request #72 from poncovka/main-reqpart 
docs: Remove workarounds from example.ks
 2023-12-15 14:05:15 -05:00
Colin Walters d3f38f6089 Merge pull request #108 from cgwalters/doc-user-groups 
docs: Add users and groups
 2023-12-15 07:59:44 -05:00
Colin Walters 231a0f9669 Merge pull request #107 from cgwalters/add-subman 
Add subscription-manager
 2023-12-14 15:32:48 -05:00
Colin Walters 36041681ae docs: Link to existing example repo 
I've started to put more content there.
 2023-12-14 15:31:46 -05:00
Colin Walters a586acb8f5 docs: Add users and groups 
Since this is a complex tricky topic.
 2023-12-14 15:31:01 -05:00
Colin Walters 929e3e58e4 Add subscription-manager 
We need this to access RHEL RPM content today.

(I would like longer term to be able to fetch RPMs from registries
 with a pull secret, xref https://github.com/coreos/rpm-ostree/issues/4155 )
 2023-12-13 14:39:28 -05:00
Colin Walters b65d2c5bdc Merge pull request #105 from cgwalters/fix-bootc-to-eln 
tier-0: bootc is only in eln
 2023-12-13 13:53:30 -05:00
Colin Walters 21ea7dd3c9 Merge pull request #104 from cgwalters/enable-development-bootupd 
Add devel composes (off by default), but pull in new bootupd
 2023-12-13 08:00:50 -05:00
Colin Walters de03b77962 Merge pull request #103 from cgwalters/dracut-fixes 
Dracut fixes
 2023-12-13 08:00:40 -05:00
Colin Walters 6c9d3b8b62 tier-0: bootc is only in eln 
Prep for building with non-stream9 distros.

(TODO: add a dedicated variable for this at the toplevel)
 2023-12-12 15:38:10 -05:00
Colin Walters d49c4299a1 Merge pull request #102 from CentOS/rhtap/references/main 
chore(deps): update rhtap references
 2023-12-12 15:33:10 -05:00
Colin Walters a9560ae57d Add devel composes (off by default), but pull in new bootupd 
This fixes compatibility with `bootc install` in BIOS mode.
 2023-12-12 13:28:10 -05:00
Colin Walters b943729fb2 initramfs: Also enable ostree module 
rpm-ostree does this, but let's do it here too for
extra reliability.
 2023-12-12 12:33:37 -05:00
Colin Walters ecbd78af68 initramfs: Consolidate and rename drop-initramfs 
No reason to have the "base" settings in distinct files.
 2023-12-12 11:32:49 -05:00
Colin Walters 48c85849e6 initramfs: Move our dracut config later 
Our hostonly setting was conflicting with the default
`hostonly=yes` in `01-dist.conf`.
 2023-12-12 11:31:05 -05:00
Colin Walters 3d4706c2e9 Merge pull request #99 from cgwalters/doc-builds 
docs: Add a builds.md
 2023-12-10 10:45:48 -05:00
Colin Walters d9a4b02b54 Merge pull request #100 from cgwalters/enable-root-config-c9s 
Always add bootc install config
 2023-12-10 09:55:25 -05:00
Colin Walters 9149bc46eb docs: Add a builds.md 
About time we start this.
 2023-12-08 12:51:16 -05:00
Colin Walters dd0a042a17 Always add bootc install config 
bootc isn't in C9S yet, but it is in the -dev images.  Add
the install config unconditionally so that `bootc install`
works in the `centos-bootc-dev` image.
 2023-12-08 12:45:42 -05:00
Colin Walters e6761c23bc ostree: Enable root.transient = true by default 
This turns on the functionality added in
https://github.com/ostreedev/ostree/pull/3114
 2023-12-08 08:08:05 -05:00
Colin Walters 7f1b496209 tekton: Fix duplicate s390x, use ppc64le 
This was a copy-paste failure; we were intending to build ppc64le
here.
 2023-12-05 14:09:45 -05:00
Colin Walters ffc99c53cc docs/install: Link bootc-playground 
Since it's got more fleshed out bits here.
 2023-12-04 08:52:26 -05:00
Colin Walters d0718b2ed5 docs/install: Add ssh-key-dir workaround 
We broke the FCOS switch with ec478a0a1b
because `ssh-key-dir` is not in ELN.  That's fixable but
for now let's document the current state.
 2023-11-29 11:57:48 -05:00
Colin Walters 0b0a2f3308 Merge pull request #78 from germag/fix-cat-redirection 
Fix cat redirection
 2023-11-29 09:51:00 -05:00
Colin Walters ec10e79696 Merge pull request #75 from cgwalters/cloud-image-cleanup 
docs/install: Fix cloud image link
 2023-11-28 09:55:29 -05:00
Colin Walters 3f17b80388 Merge pull request #74 from cgwalters/link-osbuild 
install: Link osbuild-deploy-container
 2023-11-28 09:49:28 -05:00
Colin Walters dfd8d8e142 docs/install: Fix cloud image link 
This moved in a recent PR.
 2023-11-28 09:48:08 -05:00
Colin Walters 18be4b77fe install: Link osbuild-deploy-container 2023-11-28 09:45:04 -05:00
Colin Walters 503e087502 Merge pull request #73 from cgwalters/fix-docs 
A few docs fixes
 2023-11-27 16:40:38 -05:00
Colin Walters aef532fa34 docs: Tweak install a bit 
Emphasize the accounts issue, suggest starting with cloud image.
 2023-11-27 16:31:28 -05:00
Colin Walters 0047381f0d docs: Consolidate related projects 2023-11-27 16:31:28 -05:00
Colin Walters 0eebde9936 docs: Fix goals order 2023-11-27 15:53:31 -05:00
Colin Walters 657a7d6879 Merge pull request #61 from cgwalters/add-lvm 
tier-1: Add lvm2
 2023-11-20 07:42:39 -05:00
Colin Walters 8a987bb166 tier-1: Add lvm2 
We expect to support this by default.
 2023-11-19 15:20:26 -05:00
Colin Walters b1cbe4e900 docs: Link to new stream9 image and layered, dev images 2023-11-19 15:02:43 -05:00
Colin Walters 5a9aad589b Merge pull request #60 from cgwalters/fix-anaconda-inst 
docs/example.ks: Update
 2023-11-19 14:57:36 -05:00
Colin Walters cc83572a63 docs/example.ks: Update 
We now have the static configs in bootupd, which significantly
simplifies this.  Still need to land the Anaconda PR.
 2023-11-19 14:52:51 -05:00
Colin Walters a49db5ea96 builder: re-float 2023-11-19 10:40:29 -05:00
Colin Walters 51784537f6 Merge pull request #59 from cgwalters/build-c9s 
Also build c9s
 2023-11-19 10:08:43 -05:00
Colin Walters df81da29c0 Also build c9s 
Fedora ELN has a few bugs (e.g. the kernel dropped iptables
support which breaks podman), we will also target c9s.
 2023-11-19 09:43:32 -05:00
Colin Walters 1435c4c1a1 Merge pull request #24 from cgwalters/source-date-epoch 
ci/github: Set SOURCE_DATE_EPOCH
 2023-11-17 15:28:36 -05:00
Colin Walters 23140d624b ci: Re-float to builder image 
Until something is tagging the builder image, quay.io is going to GC
older images.
 2023-11-17 10:48:58 -05:00
Colin Walters b7407bb1a7 ci/github: Set SOURCE_DATE_EPOCH 
This is important since it turns on some rpm-ostree reproducibility bits.
TODO: replicate with RHTAP
 2023-11-17 10:47:02 -05:00
Colin Walters 6781666c0e docs/install: Link to cloud image 
Many will find this easiest.
 2023-11-12 17:54:18 -05:00
Colin Walters 322cdd78f0 ci: Re-float to builder image 
Until something is tagging the builder image, quay.io is going to GC
older images.
 2023-11-09 17:30:47 -05:00
Colin Walters 5bf5ee31f0 Merge pull request #49 from travier/ci-docs-only-changes 
ci: Don't rebuild images on doc only changes
 2023-11-09 15:33:14 -05:00