Compare commits

..

6 commits

Author SHA1 Message Date
Paul Whalen
44f52cc33e F-44: Update for stable
Generated-by: Claude Code
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-04-24 11:34:33 -04:00
Paul Whalen
943a248a2e Remove ignition from packages list
Since [1], the ignition-edge subpackage requires ignition, so it's no
longer needed to require ignition explicitly here.

[1] https://src.fedoraproject.org/rpms/ignition/c/3ccce9fe2c0462f4a17923937933ab9c26db0aa5?branch=f44

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-03-12 10:12:45 -04:00
Paul Whalen
fd5242392c fix: drop sshd-authorized-keys workaround
Openssh config snippet now shipped with ignition.

See: https://src.fedoraproject.org/rpms/ignition/pull-request/143

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-26 15:05:07 -05:00
Paul Whalen
750f789070 fix: restore SSH key management for Ignition
Configures OpenSSH to read keys from ~/.ssh/authorized_keys.d/* in
addition to authorized_keys, restoring functionality lost when
ssh-key-dir was removed.

Uses 90- prefix to ensure crypto policies and security configs are
applied before user keys are sourced.

Follows the same approach as CoreOS:
https://github.com/coreos/fedora-coreos-config/pull/3885

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-24 16:43:34 -05:00
Paul Whalen
718f50a22c fix: add systemd-pam to fix rootless podman
In Fedora 44 systemd changed systemd-pam to recommends and it
was dropped from the compose.

See: https://github.com/fedora-iot/iot-distro/issues/127

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-10 15:53:02 -05:00
Paul Whalen
be50458d4c Setup for F-44 branched
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2026-02-06 11:27:00 -05:00
9 changed files with 18 additions and 19 deletions

View file

@ -1,5 +1,5 @@
# KEEP THIS IN SYNC WITH https://github.com/coreos/fedora-coreos-config/blob/testing-devel/manifests/bootupd.yaml
# See also: https://forge.fedoraproject.org/atomic-desktops/config/src/branch/main/bootupd.yaml
# See also: https://pagure.io/workstation-ostree-config/blob/main/f/bootupd.yaml
#
# Integration with https://github.com/coreos/bootupd
packages:

View file

@ -10,9 +10,9 @@ os_pretty_name = Fedora IoT
tree_name = docker-host
tree_file = %(os_name)s-%(tree_name)s.json
arch = x86_64
release = f46
ref = %(os_name)s/rawhide/%(arch)s/%(tree_name)s
yum_baseurl = http://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/%(arch)s/os/
release = f44
ref = %(os_name)s/stable/%(arch)s/%(tree_name)s
yum_baseurl = http://dl.fedoraproject.org/pub/fedora/linux/releases/44/Everything/%(arch)s/os/
# lorax_additional_repos = http://127.0.0.1/fedora-iot/local-overrides
lorax_include_packages = fedora-productimg-iot
docker_os_name = fedora

View file

@ -1,12 +1,12 @@
[fedora-46]
name=Fedora 46 - $basearch
[fedora-44]
name=Fedora 44 - $basearch
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/46/Everything/$basearch/os/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-46&arch=$basearch
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/44/Everything/$basearch/os/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=$basearch
enabled=1
#metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///usr/share/pki/rpm-gpg/RPM-GPG-KEY-fedora-46-$basearch
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-44-$basearch
skip_if_unavailable=False

View file

@ -4,14 +4,14 @@ include:
- composefs.yaml
# Read only sysroot
- sysroot-ro.yaml
ref: fedora/rawhide/${basearch}/iot
ref: fedora/stable/${basearch}/iot
repos: []
selinux: true
tmp-is-dir: true
recommends: false
documentation: false
automatic_version_prefix: '46'
mutate-os-release: '46'
automatic_version_prefix: '44'
mutate-os-release: '44'
initramfs-args:
- "--no-hostonly"
- "--add"
@ -130,7 +130,6 @@ packages:
- iwlwifi-mvm-firmware
- kernel
- keyutils
- kmscon
- less
- libsss_sudo
- linux-firmware

View file

@ -1,2 +1,2 @@
include: fedora-iot-base.yaml
ref: fedora/rawhide/${basearch}/updates/iot
ref: fedora/stable/${basearch}/updates/iot

View file

@ -1,2 +1,2 @@
include: fedora-iot-base.yaml
ref: fedora/rawhide/${basearch}/testing/iot
ref: fedora/stable/${basearch}/testing/iot

View file

@ -1,5 +1,5 @@
include: fedora-iot-base.yaml
ref: fedora/rawhide/${basearch}/iot
ref: fedora/stable/${basearch}/iot
repos:
- fedora-46
- fedora-44

View file

@ -87,7 +87,7 @@ compose-legacy variant=default_variant:
${CMD} compose tree ${ARGS} \
--add-metadata-string="version=${variant_pretty} ${version}.${buildid}" \
"${variant}.yaml" \
"${variant}-ostree.yaml" \
|& tee "logs/${variant}_${version}_${buildid}.${timestamp}.log"
if [[ ${EUID} -ne 0 ]]; then

View file

@ -18,7 +18,7 @@ done
# Remove loader directory causing issues in Anaconda in unified core mode
# Will be obsolete once we start using bootupd
# See - https://forge.fedoraproject.org/atomic-desktops/config/pulls/344
# See - https://pagure.io/workstation-ostree-config/pull-request/344
rm -rf /usr/lib/ostree-boot/loader
# Undo RPM scripts enabling units; we want the presets to be canonical