Paul Whalen
643fdb99ef
Update gpgkey path to /usr/share/pki/rpm-gpg/ for F45 GPG key relocation
...
See: https://discussion.fedoraproject.org/t/f45-change-proposal-relocate-rpm-repo-configs-to-usr-selfcontained/188916
Assisted-by: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-08-17 14:58:56 -04:00
Paul Whalen
18d373bf14
Branch Fedora IoT 45 from rawhide
2026-08-12 10:17:54 -04:00
Paul Whalen
63d2e9c3f5
Update workstation-ostree-config references to Forge
...
- bootupd.yaml: Update comment URL to atomic-desktops/config on Forge
- treecompose-post.sh: Update comment URL to atomic-desktops/config on Forge
Assisted-by: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-07-28 16:15:56 -04:00
Kenneth Giusti
3738d4889f
fix: use kmscon as default VT console
...
The kernel console fbcon has been replaced with the userspace console
kmscon in Fedora 45.
See: https://github.com/fedora-iot/iot-distro/issues/137
Signed-off-by: Kenneth Giusti <kgiusti@redhat.com>
2026-06-15 12:56:47 -04:00
ce42103746
Remove ignition package
...
Since [1], the ignition-edge subpackage requires ignition, so it's no
longer needed to require ignition explicitly here.
[1] https://src.fedoraproject.org/rpms/ignition/c/3ccce9fe2c0462f4a17923937933ab9c26db0aa5?branch=rawhide
2026-03-12 09:46:51 +01:00
Paul Whalen
e49d841a84
fix: drop sshd-authorized-keys workaround
...
Openssh config snippet now shipped with ignition.
See: https://src.fedoraproject.org/rpms/ignition/pull-request/143
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-26 15:07:19 -05:00
Paul Whalen
1b3ede31d9
fix: use 90- prefix for authorized-keys-file.conf
...
Updates the config file numbering to ensure crypto policies(40)
and security configs(50) are applied before user keys are sourced.
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 17:04:31 -05:00
Paul Whalen
7a121ed5e7
fix: do not create etc/ssh/sshd_config.d
...
Do not create etc/ssh/sshd_config.d, it should already exist and is
owned by openssh-clients and systemd.
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 15:52:24 -05:00
Paul Whalen
e0898e8a38
fix: restore SSH key management for Ignition
...
Configures OpenSSH to read keys from ~/.ssh/authorized_keys.d/* in
addition to authorized_keys, restoring functionality lost when
ssh-key-dir was removed.
Follows the same approach as CoreOS:
https://github.com/coreos/fedora-coreos-config/pull/3885
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 15:36:39 -05:00
Paul Whalen
240bff70e7
fix: add systemd-pam to fix rootless podman
...
In Fedora 44 systemd changed systemd-pam to recommends and it
was dropped from the compose.
See: https://github.com/fedora-iot/iot-distro/issues/127
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-10 15:44:02 -05:00
Paul Whalen
dccd3a2e18
IoT: Update rawhide for F-45
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-06 11:22:08 -05:00
Paul Whalen
fc7be03512
fix: drop ssh-key-dir
...
Package has been deprecated in F44.
See: https://github.com/coreos/ssh-key-dir/issues/188
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-04 11:07:52 -05:00
Paul Whalen
cc96761b13
IoT: Update rawhide for F-44
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-08-11 14:25:38 -04:00
Paul Whalen
c7f2ffe7cb
Default root config to mount sysroot as read only
...
See: https://github.com/fedora-iot/iot-distro/issues/81
https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0/ostree.yaml
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-03-17 13:19:32 -04:00
465d88c040
Add a justfile with common commands
2025-03-07 13:50:20 +01:00
ce81f37ea5
ci: Add a script to help validate manifest syntax
2025-03-07 13:50:20 +01:00
e4bd292f1a
Whitespace & indentation cleanup
2025-03-07 13:50:19 +01:00
6b92bbcbbc
Remove fedora-bootc-base
...
Now moved to https://github.com/fedora-iot/fedora-iot-bootc
2025-03-07 13:50:10 +01:00
Paul Whalen
2fda060e85
Remove grub2-workaround
...
Remove grub2-workaround, bug has been fixed.
See: https://bugzilla.redhat.com/show_bug.cgi?id=2305291
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-03-06 14:02:39 -05:00
6529ca201d
iot: drop kernel-tools
...
It too should be layered, not included in the base image.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2025-02-28 17:09:28 +00:00
Paul Whalen
c739a8c05a
Enable composefs by default
...
See: https://pagure.io/workstation-ostree-config/pull-request/591
https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
https://fedoraproject.org/wiki/Changes/ComposefsAtomicDesktops
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-27 11:02:20 -05:00
Paul Whalen
a6e7212b56
Migrate systems to a static GRUB config
...
See: https://pagure.io/workstation-ostree-config/pull-request/591
https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
https://fedoraproject.org/wiki/Changes/ComposefsAtomicDesktops
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-27 10:58:35 -05:00
Paul Whalen
b3fd2930a9
Disable ima in ostree due to ongoing compose issues
...
See: https://bugzilla.redhat.com/show_bug.cgi?id=2346265
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-24 10:43:18 -05:00
ce25ead8e5
drop policycoreutils-python-utils in base
...
The policycoreutils-python-utils pulls in a bunch of extra
SELinux utils which aren't used in day to day, it pulls in
a bunch of python packages, it can easily be layered and
isn't generally needed.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2025-02-19 15:34:27 +00:00
Paul Whalen
17d9d31eb8
Drop parsec no longer supported upstream
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-19 15:17:54 +00:00
Paul Whalen
b799fe0c9d
Remove Zezere and enable systemd-firstboot
...
Remove Zezere and enable systemd-firstboot for local configuration.
See: https://fedoraproject.org/wiki/Changes/Retire_Zezere
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-19 15:17:42 +00:00
625d763195
Replace basesystem with filesystem
...
See https://src.fedoraproject.org/rpms/filesystem/c/3f741bf2a89c9e1bb685943c41fd298e6683dd50?branch=rawhide
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-02-07 09:34:26 -08:00
Paul Whalen
d6ec8e0b0e
IoT: Update rawhide for F-43
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-04 15:29:24 -05:00
djach7
c611d4da96
Adds bootupd update to boot process
...
Updates bootupd.yaml to enable bootupctl-update upon system boot. This allows bootupd to work as expected on Fedora IoT raw image systems, with all expected components installed.
Signed-off-by: djach7 <djachimo@redhat.com>
2024-12-16 16:42:00 -05:00
David Jachimowicz
91539fbf82
Update fedora-iot-base.yaml to sync with osbuild iot-commit
...
Adds ssh-key-dir and ignition-edge packages to base yaml. ssh-key-dir is needed to transfer ssh keys to the iot system during boot
and ignition-edge is needed to allow ssh-key-dir to work properly.
Explicitly adds fedora-iot-config package. Was previously pulled in as a requirement, added for clarity.
Adds fdo-owner-cli package to increase FDO functionality.
These changes should help bring the package list more in line with the osbuild iot-commit, as well as rectifying issue 70 and issue 49 (relating to ssh key login and home directory creation on iot systems).
Issue 70: https://github.com/fedora-iot/iot-distro/issues/70
Issue 49: https://github.com/fedora-iot/iot-distro/issues/49
Signed-off-by: djach7 <djachimo@redhat.com>
2024-11-19 12:09:25 -05:00
Paul Whalen
597796c53f
Add iot base bootc image
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-09-25 08:57:05 -04:00
176b0add79
drop dnsmasq
...
Not sure why it was included, I suspect it was once used
for container networking.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2024-09-20 15:28:56 +01:00
Paul Whalen
36ab3daaf0
fedora-iot-base: Add workaround for issue with newer GRUB2
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-09-03 09:38:53 -04:00
1a898a7337
bootupd: add some contextual comments
...
Signed-off-by: Micah Abbott <miabbott@redhat.com>
2024-08-28 13:54:39 -04:00
Paul Whalen
023d15b50f
IoT: Update rawhide for F-42
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-08-12 15:26:49 -04:00
Paul Whalen
985a450f7c
F41: Add dnf5 to packages
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-07-15 13:39:36 -04:00
Paul Whalen
c1ecf382b8
F41: add bootc to packages
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-05-03 10:49:13 -04:00
Paul Whalen
1314f2a3f2
F41: Adjust repo to use mirrors
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-16 13:43:24 -04:00
Paul Whalen
8329945ded
F41: Add base bootc container
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-15 11:47:11 -04:00
Paul Whalen
187a596a33
F41: enable fdo-client-linuxapp.service
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-12 08:48:50 -04:00
b908de5dc7
add passt userspace network for podmn5 requirements
...
It seems podman5 has changed the rootless container network
stack to passt so add this into our compose alongside the
exisitng slirp4netns while we find out how the migration
works so we can document it.
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2024-03-19 14:13:26 +00:00
Paul Whalen
4ef41ffa05
f41: enable bootupd
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-21 15:46:40 -05:00
Paul Whalen
ede36f3a2c
Drop podman-plugins package
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-14 16:53:30 -05:00
Paul Whalen
efa4770938
IoT: Update rawhide for F-41
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-13 13:06:27 -05:00
Paul Whalen
20661a3bb1
Add fedora-iot-config service to presets
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-12 10:31:25 -05:00
Paul Whalen
ff8dab07b1
Drop passwd, now provided by shadow-utils
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-08 09:56:34 -05:00
Paul Whalen
0fdf7b3424
Revert adding bootupd for now.
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-01 10:06:05 -05:00
Paul Whalen
6cb006c96f
Add bootupd, minor clean up
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-01-30 15:19:39 -05:00
Paul Whalen
eef364fa51
Convert json to yaml
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-01-26 20:16:47 -05:00
Paul Whalen
6b0bb8dcf6
Add min-free-space-percent to fix compose failure
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-12-05 16:25:59 -05:00
