Commit graph

4 commits

Author SHA1 Message Date
c188a85beb kernel-install: Write layout=ostree to both install.conf and drop-in
Write the layout=ostree configuration to both /usr/lib/kernel/install.conf
and /usr/lib/kernel/install.conf.d/00-bootc-kernel-layout.conf
for defense-in-depth.

The drop-in ensures the setting persists when systemd-udev overwrites
install.conf during upgrades, while having both paths maintains
compatibility with any tooling that reads the original location.

The original install.conf path can be removed after a release cycle
of rpm-ostree, once all consumers are updated to use the drop-in and
have rpm-ostree changes.

Resolves: RHEL-128312
Assisted-by: OpenCode (Opus 4.5)
Signed-off-by: Joseph Marrero Corchado <jmarrero@redhat.com>
2026-01-13 10:05:24 -05:00
3e1e61277e kernel-install: Use drop-in config to preserve layout=ostree
When systemd is upgraded via `dnf upgrade`, the systemd-udev package
overwrites /usr/lib/kernel/install.conf with its default template,
removing the layout=ostree setting. This breaks rpm-ostree's
kernel-install integration in bootc container builds, causing:

- Initramfs to be generated in /boot/ instead of /lib/modules/<kver>/
- Old kernel directories to not be properly cleaned up
- bootc container lint failures

Per kernel-install(8), configuration in install.conf.d/ directories
is merged with install.conf. By placing the layout=ostree setting in
/usr/lib/kernel/install.conf.d/00-kernel-layout.conf, it will not be
overwritten when systemd-udev updates install.conf.

Closes: RHEL-128312
Assisted-by: OpenCode (Opus 4.5)
Signed-off-by: Joseph Marrero Corchado <jmarrero@redhat.com>
2026-01-12 09:34:54 -05:00
1bf50178bd minimal/kernel-install: set protect_running_kernel to False
https://dnf.readthedocs.io/en/latest/conf_ref.html#protect-running-kernel-label
uses uname to protect the running kernel, when both the
container and the host shared the same kernel version this
blocks removing the kernel or replacing it, since on ostree
systems we only support one kernel this prevents us from
installing kernel-rt for example.
2025-03-14 12:29:32 -04:00
Colin Walters
d1a21ed159 tier-0: Rename to minimal
The "tiers" nomenclature ended up being unhelpful since
we introduced "tier-x" which is between tier-0 and tier-1.

We also never exposed the tier naming outside of our source
code. In preparation for doing so, rename to tier-0 to
"minimal" which is a bit more descriptive.

Renaming the other images will follow.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-02-25 08:27:19 -05:00
Renamed from tier-0/kernel-install.yaml (Browse further)