mirror of
https://gitlab.com/fedora/bootc/base-images.git
synced 2026-11-05 04:18:30 +00:00
The stale trust store after an update is a property of the ostree /etc merge, not of the standard content set. minimal already ships ca-certificates (a hard dependency of openssl-libs), update-ca-trust and systemd-update-done.service, so it has the same problem and everything the unit needs. Moving the unit to minimal makes minimal-plus, standard, ELN and IoT inherit it, and gives the image-based variants built on minimal-plus (CoreOS, Atomic Desktops) a path to a shared fix. The unit is unchanged. Its conditions already skip containers, images without update-ca-trust, boots where /etc is current, and images that carry coreos-update-ca-trust.service. The rootfs check now runs in every tier instead of only in standard. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Vcy8XfBfUtxbEWMu62CiF6 |
||
|---|---|---|
| .. | ||
| cases | ||
| Dockerfile | ||
| README.md | ||
| run | ||
rootfs tests
This is a set of scripts that sanity check the target rootfs in a read-only fashion.
To run the tests:
podman build --from localhost/fedora-bootc:latest -t localhost/test-bootc .
podman rmi localhost/test-bootc:latest # Clean up any created images