Compare commits
5
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
fd2bebf327 | ||
|
|
e968082085 | ||
|
|
53fcaa9169 | ||
|
|
0a3e4e6c4b | ||
|
|
6164af490f |
No files matched your search
@@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
repos:
|
repos:
|
||||||
- repo: https://github.com/pre-commit/pre-commit-hooks
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
||||||
rev: v4.6.0
|
rev: v5.0.0
|
||||||
hooks:
|
hooks:
|
||||||
- id: end-of-file-fixer
|
- id: end-of-file-fixer
|
||||||
- id: trailing-whitespace
|
- id: trailing-whitespace
|
||||||
|
|||||||
+1
-1
@@ -23,7 +23,7 @@
|
|||||||
# Because it's generating a base image and uses containerbuildcontextization features itself.
|
# Because it's generating a base image and uses containerbuildcontextization features itself.
|
||||||
# In the future some of this can be lifted.
|
# In the future some of this can be lifted.
|
||||||
|
|
||||||
FROM quay.io/fedora/fedora:41 as repos
|
FROM quay.io/fedora/fedora:40 as repos
|
||||||
|
|
||||||
FROM quay.io/centos-bootc/bootc-image-builder:latest as builder
|
FROM quay.io/centos-bootc/bootc-image-builder:latest as builder
|
||||||
ARG MANIFEST=fedora-bootc.yaml
|
ARG MANIFEST=fedora-bootc.yaml
|
||||||
|
|||||||
@@ -3,7 +3,7 @@
|
|||||||
"containers.bootc": "1",
|
"containers.bootc": "1",
|
||||||
"bootc.diskimage-builder": "quay.io/centos-bootc/bootc-image-builder",
|
"bootc.diskimage-builder": "quay.io/centos-bootc/bootc-image-builder",
|
||||||
"redhat.id": "fedora",
|
"redhat.id": "fedora",
|
||||||
"redhat.version-id": "41"
|
"redhat.version-id": "40"
|
||||||
},
|
},
|
||||||
"StopSignal": "SIGRTMIN+3",
|
"StopSignal": "SIGRTMIN+3",
|
||||||
"Env": [
|
"Env": [
|
||||||
|
|||||||
+5
-2
@@ -1,12 +1,15 @@
|
|||||||
releasever: 41
|
releasever: 40
|
||||||
|
variables:
|
||||||
|
distro: "fedora"
|
||||||
|
|
||||||
repos:
|
repos:
|
||||||
- fedora
|
- fedora
|
||||||
|
- updates
|
||||||
|
|
||||||
metadata:
|
metadata:
|
||||||
name: fedora-boot-tier1
|
name: fedora-boot-tier1
|
||||||
summary: Fedora Bootable Tier 1
|
summary: Fedora Bootable Tier 1
|
||||||
|
|
||||||
include:
|
include:
|
||||||
- fedora-generic.yaml
|
|
||||||
- tier-1/manifest.yaml
|
- tier-1/manifest.yaml
|
||||||
- tier-1/kernel.yaml
|
- tier-1/kernel.yaml
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
variables:
|
|
||||||
distro: "fedora"
|
|
||||||
|
|
||||||
# Fedora-specific packages here
|
|
||||||
packages:
|
|
||||||
# https://gitlab.com/fedora/bootc/base-images/-/issues/12
|
|
||||||
- fedora-repos-archive
|
|
||||||
+6
-3
@@ -1,12 +1,15 @@
|
|||||||
releasever: 41
|
releasever: 40
|
||||||
|
variables:
|
||||||
|
distro: "fedora"
|
||||||
|
|
||||||
repos:
|
repos:
|
||||||
- fedora
|
- fedora-devel
|
||||||
|
- fedora-updates
|
||||||
|
|
||||||
metadata:
|
metadata:
|
||||||
name: fedora-boot-tier0
|
name: fedora-boot-tier0
|
||||||
summary: Fedora Bootable Tier 0
|
summary: Fedora Bootable Tier 0
|
||||||
|
|
||||||
include:
|
include:
|
||||||
- fedora-generic.yaml
|
|
||||||
- tier-0/manifest.yaml
|
- tier-0/manifest.yaml
|
||||||
- tier-0/kernel.yaml
|
- tier-0/kernel.yaml
|
||||||
+65
-2
@@ -3,8 +3,8 @@
|
|||||||
|
|
||||||
[fedora]
|
[fedora]
|
||||||
name=Fedora $releasever - $basearch
|
name=Fedora $releasever - $basearch
|
||||||
# using the Latest Fedora 41 repository from Koji until GA
|
baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
|
||||||
baseurl=https://kojipkgs.fedoraproject.org/compose/branched/latest-Fedora-41/compose/Everything/$basearch/os/
|
https://dl.fedoraproject.org/pub/fedora-secondary/releases/$releasever/Everything/$basearch/os/
|
||||||
#metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
|
#metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
|
||||||
enabled=1
|
enabled=1
|
||||||
#metadata_expire=7d
|
#metadata_expire=7d
|
||||||
@@ -37,3 +37,66 @@ gpgcheck=1
|
|||||||
metadata_expire=6h
|
metadata_expire=6h
|
||||||
gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
|
gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
|
||||||
skip_if_unavailable=False
|
skip_if_unavailable=False
|
||||||
|
|
||||||
|
[fedora-modular]
|
||||||
|
name=Fedora Modular $releasever - $basearch
|
||||||
|
baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/$releasever/Modular/$basearch/os/
|
||||||
|
https://dl.fedoraproject.org/pub/fedora-secondary/releases/$releasever/Modular/$basearch/os/
|
||||||
|
#metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-$releasever&arch=$basearch
|
||||||
|
enabled=1
|
||||||
|
#metadata_expire=7d
|
||||||
|
repo_gpgcheck=0
|
||||||
|
type=rpm
|
||||||
|
gpgcheck=1
|
||||||
|
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
||||||
|
skip_if_unavailable=False
|
||||||
|
|
||||||
|
[fedora-updates-modular]
|
||||||
|
name=Fedora Modular $releasever - $basearch - Updates
|
||||||
|
baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/Modular/$basearch/
|
||||||
|
https://dl.fedoraproject.org/pub/fedora-secondary/updates/$releasever/Modular/$basearch/
|
||||||
|
#metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-released-modular-f$releasever&arch=$basearch
|
||||||
|
enabled=1
|
||||||
|
repo_gpgcheck=0
|
||||||
|
type=rpm
|
||||||
|
gpgcheck=1
|
||||||
|
metadata_expire=6h
|
||||||
|
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
|
||||||
|
skip_if_unavailable=False
|
||||||
|
|
||||||
|
[fedora-updates-testing-modular]
|
||||||
|
name=Fedora Modular $releasever - $basearch - Test Updates
|
||||||
|
baseurl=https://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/Modular/$basearch/
|
||||||
|
https://dl.fedoraproject.org/pub/fedora-secondary/updates/testing/$releasever/Modular/$basearch/
|
||||||
|
#metalink=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch
|
||||||
|
enabled=1
|
||||||
|
gpgcheck=1
|
||||||
|
metadata_expire=6h
|
||||||
|
gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
|
||||||
|
skip_if_unavailable=False
|
||||||
|
|
||||||
|
[rawhide]
|
||||||
|
name=Fedora - Rawhide - Developmental packages for the next Fedora release
|
||||||
|
baseurl=https://dl.fedoraproject.org/pub/fedora/linux/development/$releasever/Everything/$basearch/os/
|
||||||
|
https://dl.fedoraproject.org/pub/fedora-secondary/development/$releasever/Everything/$basearch/os/
|
||||||
|
#metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
|
||||||
|
enabled=1
|
||||||
|
#metadata_expire=7d
|
||||||
|
repo_gpgcheck=0
|
||||||
|
type=rpm
|
||||||
|
gpgcheck=1
|
||||||
|
gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
|
||||||
|
skip_if_unavailable=False
|
||||||
|
|
||||||
|
[fedora-devel]
|
||||||
|
name=Fedora $releasever - $basearch
|
||||||
|
baseurl=https://dl.fedoraproject.org/pub/fedora/linux/development/$releasever/Everything/$basearch/os/
|
||||||
|
https://dl.fedoraproject.org/pub/fedora-secondary/development/$releasever/Everything/$basearch/os/
|
||||||
|
#metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
|
||||||
|
enabled=1
|
||||||
|
#metadata_expire=7d
|
||||||
|
repo_gpgcheck=0
|
||||||
|
type=rpm
|
||||||
|
gpgcheck=1
|
||||||
|
gpgkey=file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-$releasever-primary
|
||||||
|
skip_if_unavailable=False
|
||||||
+1
-3
@@ -3,12 +3,10 @@
|
|||||||
"extends": [
|
"extends": [
|
||||||
"github>platform-engineering-org/.github"
|
"github>platform-engineering-org/.github"
|
||||||
],
|
],
|
||||||
"baseBranches": ["main", "f40"],
|
|
||||||
"packageRules": [
|
"packageRules": [
|
||||||
{
|
{
|
||||||
"matchPackageNames": ["quay.io/fedora/fedora"],
|
"matchPackageNames": ["quay.io/fedora/fedora"],
|
||||||
"allowedVersions": "=40",
|
"allowedVersions": "=40"
|
||||||
"matchBaseBranches": ["f40"]
|
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
@@ -6,13 +6,13 @@ postprocess:
|
|||||||
cat > /usr/lib/dracut/dracut.conf.d/20-bootc-base.conf << 'EOF'
|
cat > /usr/lib/dracut/dracut.conf.d/20-bootc-base.conf << 'EOF'
|
||||||
# We want a generic image; hostonly makes no sense as part of a server side build
|
# We want a generic image; hostonly makes no sense as part of a server side build
|
||||||
hostonly=no
|
hostonly=no
|
||||||
add_dracutmodules+=" kernel-modules dracut-systemd systemd-initrd base ostree "
|
dracutmodules+=" kernel-modules dracut-systemd systemd-initrd base ostree "
|
||||||
EOF
|
EOF
|
||||||
cat > /usr/lib/dracut/dracut.conf.d/22-bootc-generic.conf << 'EOF'
|
cat > /usr/lib/dracut/dracut.conf.d/22-bootc-generic.conf << 'EOF'
|
||||||
# Extra modules that we want by default that are known to exist in the kernel
|
# Extra modules that we want by default that are known to exist in the kernel
|
||||||
add_dracutmodules+=" virtiofs "
|
dracutmodules+=" virtiofs "
|
||||||
EOF
|
EOF
|
||||||
cat > /usr/lib/dracut/dracut.conf.d/49-bootc-tpm2-tss.conf << 'EOF'
|
cat > /usr/lib/dracut/dracut.conf.d/49-bootc-tpm2-tss.conf << 'EOF'
|
||||||
# We want this for systemd-cryptsetup tpm2 locking
|
# We want this for systemd-cryptsetup tpm2 locking
|
||||||
add_dracutmodules+=" systemd-cryptsetup tpm2-tss "
|
dracutmodules+=" tpm2-tss "
|
||||||
EOF
|
EOF
|
||||||
@@ -50,7 +50,6 @@ remove-from-packages:
|
|||||||
|
|
||||||
include:
|
include:
|
||||||
- bootc.yaml
|
- bootc.yaml
|
||||||
- bootupd.yaml
|
|
||||||
- ostree.yaml
|
- ostree.yaml
|
||||||
- initramfs.yaml
|
- initramfs.yaml
|
||||||
- autoupdates.yaml
|
- autoupdates.yaml
|
||||||
@@ -66,3 +65,8 @@ packages:
|
|||||||
- container-selinux
|
- container-selinux
|
||||||
# Needed for tpm2 bound luks
|
# Needed for tpm2 bound luks
|
||||||
- tpm2-tools
|
- tpm2-tools
|
||||||
|
|
||||||
|
# See https://github.com/coreos/bootupd
|
||||||
|
arch-include:
|
||||||
|
x86_64: bootupd.yaml
|
||||||
|
aarch64: bootupd.yaml
|
||||||
@@ -3,18 +3,15 @@ set -eu
|
|||||||
|
|
||||||
backing_device=$(findmnt -vno SOURCE /sysroot)
|
backing_device=$(findmnt -vno SOURCE /sysroot)
|
||||||
echo "Backing device: ${backing_device}"
|
echo "Backing device: ${backing_device}"
|
||||||
|
|
||||||
# Handling devicemapper targets is a whole other thing
|
|
||||||
case $backing_device in
|
|
||||||
/dev/mapper/*) echo "Not growing $backing_device"; exit 0 ;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
syspath=/sys/class/block/$(basename "${backing_device}")
|
syspath=/sys/class/block/$(basename "${backing_device}")
|
||||||
if ! test -d "${syspath}"; then
|
if ! test -d "${syspath}"; then
|
||||||
echo "failed to find backing device ${syspath}"; exit 1
|
echo "failed to find backing device ${syspath}"; exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# Handling devicemapper targets is a whole other thing
|
||||||
|
case $backing_device in
|
||||||
|
/dev/mapper/*) "Not growing $backing_device"; exit 0 ;;
|
||||||
|
esac
|
||||||
|
|
||||||
# Note that we expect that the rootfs is on a partition
|
# Note that we expect that the rootfs is on a partition
|
||||||
partition=$(cat "${syspath}"/partition)
|
partition=$(cat "${syspath}"/partition)
|
||||||
|
|||||||
@@ -4,5 +4,5 @@ postprocess:
|
|||||||
#!/usr/bin/env bash
|
#!/usr/bin/env bash
|
||||||
mkdir -p /usr/lib/dracut/dracut.conf.d
|
mkdir -p /usr/lib/dracut/dracut.conf.d
|
||||||
cat > /usr/lib/dracut/dracut.conf.d/30-bootc-tier-1.conf << 'EOF'
|
cat > /usr/lib/dracut/dracut.conf.d/30-bootc-tier-1.conf << 'EOF'
|
||||||
add_dracutmodules+=" lvm crypt fips "
|
dracutmodules+=" lvm crypt "
|
||||||
EOF
|
EOF
|
||||||
Reference in new issue
Block a user