base-images/minimal/postprocess-conf.yaml
Colin Walters 8895ec92a2 Move kvm to /etc/group
Per https://issues.redhat.com/browse/RHEL-115278

Longer term of course we want to hard require systemd-sysusers
for this one instead.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-10-17 09:42:07 -04:00

38 lines
1 KiB
YAML

# This file configures things relevant to `rpm-ostree compose postprocess`.
# We want content lifecycled with the image
opt-usrlocal: "root"
# https://github.com/CentOS/centos-bootc/issues/167
machineid-compat: true
rpmdb: target
# We never want rpmdb.sqlite-shm as it's unreproducible
rpmdb-normalize: true
ignore-removed-users:
- root
ignore-removed-groups:
- root
# By default users and groups are injected to nss-altfiles
# which is immutable. This list moves a selected set
# to /etc/group instead, which is mutable per system
# and allows local users to become part of these groups.
etc-group-members:
- wheel
- systemd-journal
- tss # https://issues.redhat.com/browse/BIFROST-618
- kvm # https://issues.redhat.com/browse/RHEL-115278
- adm
conditional-include:
- if: passwd_mode == "full"
include: check-passwd.yaml
- if: passwd_mode == "nobody"
include: check-passwd-nobody.yaml
- if: passwd_mode == "none"
include:
check-passwd:
type: "none"
check-groups:
type: "none"