mirror of
https://gitlab.com/fedora/bootc/base-images.git
synced 2026-11-05 04:18:30 +00:00
Joseph Marrero Corchado
17e44957df
The stale trust store after an update is a property of the ostree /etc merge, not of the standard content set. minimal already ships ca-certificates (a hard dependency of openssl-libs), update-ca-trust and systemd-update-done.service, so it has the same problem and everything the unit needs. Moving the unit to minimal makes minimal-plus, standard, ELN and IoT inherit it, and gives the image-based variants built on minimal-plus (CoreOS, Atomic Desktops) a path to a shared fix. The unit is unchanged. Its conditions already skip containers, images without update-ca-trust, boots where /etc is current, and images that carry coreos-update-ca-trust.service. The rootfs check now runs in every tier instead of only in standard. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Vcy8XfBfUtxbEWMu62CiF6 |
||
|---|---|---|
| .. | ||
| atomic-update-ca-trust | ||
| bootc-fetch-apply-updates | ||
| bootupd | ||
| etc-group | ||
| fedora-only | ||
| no-iptables-legacy | ||
| root-mode | ||
| rpmdb | ||
| tmpfiles-konflux-buildinfo | ||
| var | ||