Paul Whalen
44f52cc33e
F-44: Update for stable
...
Generated-by: Claude Code
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-04-24 11:34:33 -04:00
Paul Whalen
943a248a2e
Remove ignition from packages list
...
Since [1], the ignition-edge subpackage requires ignition, so it's no
longer needed to require ignition explicitly here.
[1] https://src.fedoraproject.org/rpms/ignition/c/3ccce9fe2c0462f4a17923937933ab9c26db0aa5?branch=f44
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-03-12 10:12:45 -04:00
Paul Whalen
fd5242392c
fix: drop sshd-authorized-keys workaround
...
Openssh config snippet now shipped with ignition.
See: https://src.fedoraproject.org/rpms/ignition/pull-request/143
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-26 15:05:07 -05:00
Paul Whalen
750f789070
fix: restore SSH key management for Ignition
...
Configures OpenSSH to read keys from ~/.ssh/authorized_keys.d/* in
addition to authorized_keys, restoring functionality lost when
ssh-key-dir was removed.
Uses 90- prefix to ensure crypto policies and security configs are
applied before user keys are sourced.
Follows the same approach as CoreOS:
https://github.com/coreos/fedora-coreos-config/pull/3885
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 16:43:34 -05:00
Paul Whalen
718f50a22c
fix: add systemd-pam to fix rootless podman
...
In Fedora 44 systemd changed systemd-pam to recommends and it
was dropped from the compose.
See: https://github.com/fedora-iot/iot-distro/issues/127
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-10 15:53:02 -05:00
Paul Whalen
be50458d4c
Setup for F-44 branched
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-06 11:27:00 -05:00
Paul Whalen
fc7be03512
fix: drop ssh-key-dir
...
Package has been deprecated in F44.
See: https://github.com/coreos/ssh-key-dir/issues/188
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-04 11:07:52 -05:00
Paul Whalen
cc96761b13
IoT: Update rawhide for F-44
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-08-11 14:25:38 -04:00
Paul Whalen
c7f2ffe7cb
Default root config to mount sysroot as read only
...
See: https://github.com/fedora-iot/iot-distro/issues/81
https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0/ostree.yaml
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-03-17 13:19:32 -04:00
465d88c040
Add a justfile with common commands
2025-03-07 13:50:20 +01:00
ce81f37ea5
ci: Add a script to help validate manifest syntax
2025-03-07 13:50:20 +01:00
e4bd292f1a
Whitespace & indentation cleanup
2025-03-07 13:50:19 +01:00
6b92bbcbbc
Remove fedora-bootc-base
...
Now moved to https://github.com/fedora-iot/fedora-iot-bootc
2025-03-07 13:50:10 +01:00
Paul Whalen
2fda060e85
Remove grub2-workaround
...
Remove grub2-workaround, bug has been fixed.
See: https://bugzilla.redhat.com/show_bug.cgi?id=2305291
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-03-06 14:02:39 -05:00
6529ca201d
iot: drop kernel-tools
...
It too should be layered, not included in the base image.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2025-02-28 17:09:28 +00:00
Paul Whalen
c739a8c05a
Enable composefs by default
...
See: https://pagure.io/workstation-ostree-config/pull-request/591
https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
https://fedoraproject.org/wiki/Changes/ComposefsAtomicDesktops
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-27 11:02:20 -05:00
Paul Whalen
a6e7212b56
Migrate systems to a static GRUB config
...
See: https://pagure.io/workstation-ostree-config/pull-request/591
https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
https://fedoraproject.org/wiki/Changes/ComposefsAtomicDesktops
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-27 10:58:35 -05:00
Paul Whalen
b3fd2930a9
Disable ima in ostree due to ongoing compose issues
...
See: https://bugzilla.redhat.com/show_bug.cgi?id=2346265
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-24 10:43:18 -05:00
ce25ead8e5
drop policycoreutils-python-utils in base
...
The policycoreutils-python-utils pulls in a bunch of extra
SELinux utils which aren't used in day to day, it pulls in
a bunch of python packages, it can easily be layered and
isn't generally needed.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2025-02-19 15:34:27 +00:00
Paul Whalen
17d9d31eb8
Drop parsec no longer supported upstream
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-19 15:17:54 +00:00
Paul Whalen
b799fe0c9d
Remove Zezere and enable systemd-firstboot
...
Remove Zezere and enable systemd-firstboot for local configuration.
See: https://fedoraproject.org/wiki/Changes/Retire_Zezere
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-19 15:17:42 +00:00
625d763195
Replace basesystem with filesystem
...
See https://src.fedoraproject.org/rpms/filesystem/c/3f741bf2a89c9e1bb685943c41fd298e6683dd50?branch=rawhide
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-02-07 09:34:26 -08:00
Paul Whalen
d6ec8e0b0e
IoT: Update rawhide for F-43
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-04 15:29:24 -05:00
djach7
c611d4da96
Adds bootupd update to boot process
...
Updates bootupd.yaml to enable bootupctl-update upon system boot. This allows bootupd to work as expected on Fedora IoT raw image systems, with all expected components installed.
Signed-off-by: djach7 <djachimo@redhat.com>
2024-12-16 16:42:00 -05:00
David Jachimowicz
91539fbf82
Update fedora-iot-base.yaml to sync with osbuild iot-commit
...
Adds ssh-key-dir and ignition-edge packages to base yaml. ssh-key-dir is needed to transfer ssh keys to the iot system during boot
and ignition-edge is needed to allow ssh-key-dir to work properly.
Explicitly adds fedora-iot-config package. Was previously pulled in as a requirement, added for clarity.
Adds fdo-owner-cli package to increase FDO functionality.
These changes should help bring the package list more in line with the osbuild iot-commit, as well as rectifying issue 70 and issue 49 (relating to ssh key login and home directory creation on iot systems).
Issue 70: https://github.com/fedora-iot/iot-distro/issues/70
Issue 49: https://github.com/fedora-iot/iot-distro/issues/49
Signed-off-by: djach7 <djachimo@redhat.com>
2024-11-19 12:09:25 -05:00
Paul Whalen
597796c53f
Add iot base bootc image
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-09-25 08:57:05 -04:00
176b0add79
drop dnsmasq
...
Not sure why it was included, I suspect it was once used
for container networking.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2024-09-20 15:28:56 +01:00
Paul Whalen
36ab3daaf0
fedora-iot-base: Add workaround for issue with newer GRUB2
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-09-03 09:38:53 -04:00
1a898a7337
bootupd: add some contextual comments
...
Signed-off-by: Micah Abbott <miabbott@redhat.com>
2024-08-28 13:54:39 -04:00
Paul Whalen
023d15b50f
IoT: Update rawhide for F-42
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-08-12 15:26:49 -04:00
Paul Whalen
985a450f7c
F41: Add dnf5 to packages
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-07-15 13:39:36 -04:00
Paul Whalen
c1ecf382b8
F41: add bootc to packages
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-05-03 10:49:13 -04:00
Paul Whalen
1314f2a3f2
F41: Adjust repo to use mirrors
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-16 13:43:24 -04:00
Paul Whalen
8329945ded
F41: Add base bootc container
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-15 11:47:11 -04:00
Paul Whalen
187a596a33
F41: enable fdo-client-linuxapp.service
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-12 08:48:50 -04:00
b908de5dc7
add passt userspace network for podmn5 requirements
...
It seems podman5 has changed the rootless container network
stack to passt so add this into our compose alongside the
exisitng slirp4netns while we find out how the migration
works so we can document it.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2024-03-19 14:13:26 +00:00
Paul Whalen
4ef41ffa05
f41: enable bootupd
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-21 15:46:40 -05:00
Paul Whalen
ede36f3a2c
Drop podman-plugins package
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-14 16:53:30 -05:00
Paul Whalen
efa4770938
IoT: Update rawhide for F-41
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-13 13:06:27 -05:00
Paul Whalen
20661a3bb1
Add fedora-iot-config service to presets
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-12 10:31:25 -05:00
Paul Whalen
ff8dab07b1
Drop passwd, now provided by shadow-utils
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-08 09:56:34 -05:00
Paul Whalen
0fdf7b3424
Revert adding bootupd for now.
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-01 10:06:05 -05:00
Paul Whalen
6cb006c96f
Add bootupd, minor clean up
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-01-30 15:19:39 -05:00
Paul Whalen
eef364fa51
Convert json to yaml
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-01-26 20:16:47 -05:00
Paul Whalen
6b0bb8dcf6
Add min-free-space-percent to fix compose failure
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-12-05 16:25:59 -05:00
Paul Whalen
d085d6d819
Undo rpm scripts enabling units, use only systemd presets
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-11-27 15:30:29 -05:00
efc8d5c336
Enable IMA signatures
...
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-11-08 13:13:27 +00:00
f1fdb7a4d9
Add criu-libs as criu doesn't pull it in
...
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-10-25 16:38:48 +01:00
Paul Whalen
d6a3afca84
IoT: Update rawhide for F-40
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-08-14 13:50:42 -04:00
1349eef26a
Add a missing dep from copy/paste
...
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-26 20:27:35 +01:00
