5 commits

Author	SHA1	Message	Date
Dusty Mabe	986b59b5c1	minimal: drop exclude on iptables-legacy; add test ... In Fedora CoreOS we are still including iptables-legacy for now [1] and since you can't really overwrite an `exclude-packages` entry it means we can't update our git submodule. We are working to get away from using a git submodule [2], but I'd like to get ours updated in the mean time. [1] https://github.com/coreos/fedora-coreos-tracker/issues/1818 [2] https://github.com/coreos/fedora-coreos-tracker/issues/1861	2025-05-06 16:52:05 -04:00
Colin Walters	993845d2a2	Move the tss group to /etc so it can be mutated ... This works around two issues: - First, rpm switched to reading users/groups directly for its implementation of systemd-sysusers, which meant it no longer reads via nss, which breaks nss-altfiles. xref: https://github.com/rpm-software-management/rpm/pull/2503#issuecomment-1536435351 and below. - Second, even if that was fixed, `keylime` wants to add its user to the group, which can't be done when it's a system uid. Since nothing in the OS content is owned by this group, we can move underneath `/etc` by default. Signed-off-by: Colin Walters <walters@verbum.org>	2025-03-25 20:09:17 -04:00
Colin Walters	ccb2c22ecb	imagectl: Update mode for / if needed ... This works around https://github.com/coreos/rpm-ostree/pull/5322 so we can ship the fix faster. Signed-off-by: Colin Walters <walters@verbum.org>	2025-03-04 17:31:56 -05:00
Colin Walters	5d4936fd43	tests: Verify var/tmp ... Somehow this went missing in a local build. Signed-off-by: Colin Walters <walters@verbum.org>	2025-03-03 09:21:44 -05:00
Colin Walters	e89565789c	Use rpmdb-normalize, add rootfs tests ... I just saw the sqlite-shm corruption in https://gitlab.com/redhat/centos-stream/containers/bootc/-/merge_requests/437#note_2372766792 so let's just go ahead and turn on rpmdb_normalize which also aids the reproducibility of the rpmdb. While we're here let's also add a long overdue "unit test" for the rootfs. This operates as a container build that mounts the container-under-test as part of a multi-stage build. Signed-off-by: Colin Walters <walters@verbum.org>	2025-02-28 09:14:45 -05:00