Compare commits

...
Sign in to create a new pull request.

11 commits

Author SHA1 Message Date
Paul Whalen
87eaa6a42b Update gpgkey path in fedora-46.repo, drop unused fedora-45.repo
Update gpgkey path in fedora-46.repo from /etc/pki/rpm-gpg/ to
/usr/share/pki/rpm-gpg/ for the F45 GPG key relocation.

See: https://discussion.fedoraproject.org/t/f45-change-proposal-relocate-rpm-repo-configs-to-usr-selfcontained/188916

Remove fedora-45.repo from main (rawhide) - it belongs on f45-branch.

Assisted-by: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-08-17 14:41:53 -04:00
Paul Whalen
f570c87de9 Bump rawhide to Fedora 46 2026-08-12 10:17:54 -04:00
Paul Whalen
63d2e9c3f5 Update workstation-ostree-config references to Forge
- bootupd.yaml: Update comment URL to atomic-desktops/config on Forge
- treecompose-post.sh: Update comment URL to atomic-desktops/config on Forge

Assisted-by: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-07-28 16:15:56 -04:00
Kenneth Giusti
3738d4889f
fix: use kmscon as default VT console
The kernel console fbcon has been replaced with the userspace console
kmscon in Fedora 45.

See: https://github.com/fedora-iot/iot-distro/issues/137

Signed-off-by: Kenneth Giusti <kgiusti@redhat.com>
2026-06-15 12:56:47 -04:00
ce42103746
Remove ignition package
Since [1], the ignition-edge subpackage requires ignition, so it's no
longer needed to require ignition explicitly here.

[1] https://src.fedoraproject.org/rpms/ignition/c/3ccce9fe2c0462f4a17923937933ab9c26db0aa5?branch=rawhide
2026-03-12 09:46:51 +01:00
Paul Whalen
e49d841a84 fix: drop sshd-authorized-keys workaround
Openssh config snippet now shipped with ignition.

See: https://src.fedoraproject.org/rpms/ignition/pull-request/143

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-26 15:07:19 -05:00
Paul Whalen
1b3ede31d9 fix: use 90- prefix for authorized-keys-file.conf
Updates the config file numbering to ensure crypto policies(40)
and security configs(50) are applied before user keys are sourced.

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 17:04:31 -05:00
Paul Whalen
7a121ed5e7 fix: do not create etc/ssh/sshd_config.d
Do not create etc/ssh/sshd_config.d, it should already exist and is
owned by openssh-clients and systemd.

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 15:52:24 -05:00
Paul Whalen
e0898e8a38 fix: restore SSH key management for Ignition
Configures OpenSSH to read keys from ~/.ssh/authorized_keys.d/* in
addition to authorized_keys, restoring functionality lost when
ssh-key-dir was removed.

Follows the same approach as CoreOS:
https://github.com/coreos/fedora-coreos-config/pull/3885

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 15:36:39 -05:00
Paul Whalen
240bff70e7 fix: add systemd-pam to fix rootless podman
In Fedora 44 systemd changed systemd-pam to recommends and it
was dropped from the compose.

See: https://github.com/fedora-iot/iot-distro/issues/127

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-10 15:44:02 -05:00
Paul Whalen
dccd3a2e18 IoT: Update rawhide for F-45
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-06 11:22:08 -05:00
7 changed files with 15 additions and 14 deletions

View file

@ -1,5 +1,5 @@
# KEEP THIS IN SYNC WITH https://github.com/coreos/fedora-coreos-config/blob/testing-devel/manifests/bootupd.yaml
# See also: https://pagure.io/workstation-ostree-config/blob/main/f/bootupd.yaml
# See also: https://forge.fedoraproject.org/atomic-desktops/config/src/branch/main/bootupd.yaml
#
# Integration with https://github.com/coreos/bootupd
packages:

View file

@ -10,7 +10,7 @@ os_pretty_name = Fedora IoT
tree_name = docker-host
tree_file = %(os_name)s-%(tree_name)s.json
arch = x86_64
release = f44
release = f46
ref = %(os_name)s/rawhide/%(arch)s/%(tree_name)s
yum_baseurl = http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/%(arch)s/os/
# lorax_additional_repos = http://127.0.0.1/fedora-iot/local-overrides

View file

@ -1,12 +1,12 @@
[fedora-44]
name=Fedora 44 - $basearch
[fedora-46]
name=Fedora 46 - $basearch
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/44/Everything/$basearch/os/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=$basearch
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/46/Everything/$basearch/os/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-46&arch=$basearch
enabled=1
#metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-44-$basearch
gpgkey=file:///usr/share/pki/rpm-gpg/RPM-GPG-KEY-fedora-46-$basearch
skip_if_unavailable=False

View file

@ -1,4 +1,4 @@
include:
include:
- bootupd.yaml
# Enable composefs
- composefs.yaml
@ -10,8 +10,8 @@ selinux: true
tmp-is-dir: true
recommends: false
documentation: false
automatic_version_prefix: '44'
mutate-os-release: '44'
automatic_version_prefix: '46'
mutate-os-release: '46'
initramfs-args:
- "--no-hostonly"
- "--add"
@ -122,7 +122,6 @@ packages:
- greenboot-default-health-checks
- gzip
- hostname
- ignition
- ignition-edge
- ima-evm-utils
- iproute
@ -131,6 +130,7 @@ packages:
- iwlwifi-mvm-firmware
- kernel
- keyutils
- kmscon
- less
- libsss_sudo
- linux-firmware
@ -163,6 +163,7 @@ packages:
- sssd-client
- sudo
- systemd
- systemd-pam
- systemd-resolved
- tar
- tmux

View file

@ -2,4 +2,4 @@ include: fedora-iot-base.yaml
ref: fedora/rawhide/${basearch}/iot
repos:
- fedora-44
- fedora-46

View file

@ -87,7 +87,7 @@ compose-legacy variant=default_variant:
${CMD} compose tree ${ARGS} \
--add-metadata-string="version=${variant_pretty} ${version}.${buildid}" \
"${variant}-ostree.yaml" \
"${variant}.yaml" \
|& tee "logs/${variant}_${version}_${buildid}.${timestamp}.log"
if [[ ${EUID} -ne 0 ]]; then

View file

@ -18,7 +18,7 @@ done
# Remove loader directory causing issues in Anaconda in unified core mode
# Will be obsolete once we start using bootupd
# See - https://pagure.io/workstation-ostree-config/pull-request/344
# See - https://forge.fedoraproject.org/atomic-desktops/config/pulls/344
rm -rf /usr/lib/ostree-boot/loader
# Undo RPM scripts enabling units; we want the presets to be canonical