base-images/tests/rootfs
Joseph Marrero Corchado 17e44957df minimal: Move CA trust regeneration down from standard
The stale trust store after an update is a property of the ostree /etc
merge, not of the standard content set. minimal already ships
ca-certificates (a hard dependency of openssl-libs), update-ca-trust and
systemd-update-done.service, so it has the same problem and everything
the unit needs. Moving the unit to minimal makes minimal-plus, standard,
ELN and IoT inherit it, and gives the image-based variants built on
minimal-plus (CoreOS, Atomic Desktops) a path to a shared fix.

The unit is unchanged. Its conditions already skip containers, images
without update-ca-trust, boots where /etc is current, and images that
carry coreos-update-ca-trust.service.

The rootfs check now runs in every tier instead of only in standard.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Vcy8XfBfUtxbEWMu62CiF6
2026-10-31 16:44:10 -04:00
..
cases minimal: Move CA trust regeneration down from standard 2026-10-31 16:44:10 -04:00
Dockerfile tests: simplify to use just the built bootc image 2025-05-06 16:37:47 -04:00
README.md tests/rootfs/README: document how to run the tests 2025-05-06 16:50:20 -04:00
run Use rpmdb-normalize, add rootfs tests 2025-02-28 09:14:45 -05:00

rootfs tests

This is a set of scripts that sanity check the target rootfs in a read-only fashion.

To run the tests:

podman build --from localhost/fedora-bootc:latest -t localhost/test-bootc .
podman rmi localhost/test-bootc:latest # Clean up any created images