fedora-linux-surface-pro-12in/kiwi-descriptions.git/teams/cloud/container.xml, branch rawhide

Container-Toolbox: mesa-va-drivers doesn't exist any more

2026-04-01T17:56:49Z

See https://src.fedoraproject.org/rpms/mesa/c/f747343d109d2b691d3abcf4649cd10ad42d6578?branch=rawhide . Signed-off-by: Adam Williamson

teams/cloud/container: Remove the legacy non-namespaced labels

2026-01-27T06:37:46Z

The discussion in https://discussion.fedoraproject.org/t/f44-change-proposal-containerimageslabels-selfcontained/179010 and opinions in https://pagure.io/fesco/issue/3543 suggested making a clear cut and removing the legacy labels as well. Reference: https://fedoraproject.org/wiki/Changes/ContainerImagesLabels

teams/cloud/container: Add standardized OCI labels

2026-01-26T21:21:47Z

Match the org.opencontainers.image.* labels to the https://specs.opencontainers.org/image-spec/annotations/. Reference: https://fedoraproject.org/wiki/Changes/ContainerImagesLabels Fixes https://pagure.io/fedora-kiwi-descriptions/issue/250.

teams/cloud/container: create dotfiles under root folder with systemd-tmpfiles

2025-11-27T14:02:13Z

Since`rootfiles` now uses systemd-tmpfiles to install dotfiles under root folder instead of copying.

Add gawk to the containers base

2025-06-16T18:48:11Z

Fixes https://github.com/fedora-cloud/docker-brew-fedora/issues/119 Signed-off-by: Clement Verna

teams/cloud/container: Add p11-kit-client to Toolbx

2025-05-28T13:31:43Z

This will be used by toolbox(1) to ensure that the certificates from certificate authorities (or CAs) that are available inside a Toolbx container are kept synchronized with the host operating system [1]. Any program that uses PKCS #11 to access CA certificates should see the same ones both inside the container and on the host. This is the same approach taken by Flatpak [2]. [1] https://github.com/containers/toolbox/issues/626 [2] Flatpak commit 66b2ff40f7caf3a7 https://github.com/flatpak/flatpak/commit/66b2ff40f7caf3a7 https://github.com/flatpak/flatpak/pull/1757 https://github.com/p11-glue/p11-kit/issues/68 https://pagure.io/fedora-kiwi-descriptions/pull-request/189

teams/cloud/container: Don't explicitly install p11-kit for Toolbx

2025-05-28T13:31:39Z

The p11-kit RPM is neither explicitly mentioned in the list of default RPMs on Fedora Silverblue and Workstation [1], nor was it explicitly installed by the Container/Dockerfile equivalent of the fedora-toolbox OCI images [2]. The Container/Dockerfile listed p11-kit as one of the RPMs that had to be reinstalled, because it was inherited from the fedora base image, and had its documentation and translations stripped out. The reinstallation would be skipped if for some reason it was no longer part of the fedora base image. This was misinterpreted when creating the Kickstart equivalent of the fedora-toolbox OCI images [3] and that's how it ended up in the KIWI description. In reality, p11-kit gets pulled in as a dependency of ca-certificates, gnutls, etc. and that's sufficient. Fallout from d27e4c3f6c3e13bcefe9d1d904386794140d8a91 [1] https://pagure.io/fedora-comps/ [2] https://src.fedoraproject.org/container/fedora-toolbox [3] fedora-kickstarts commit 48e2c3b5598de32f https://pagure.io/fedora-kickstarts/c/48e2c3b5598de32f https://pagure.io/fedora-kickstarts/pull-request/964 https://pagure.io/releng/issue/11399 https://pagure.io/fedora-kiwi-descriptions/pull-request/189

teams/cloud/container: Explicitly add shadow-utils.

2025-03-29T18:35:28Z

Fixes https://pagure.io/fedora-kiwi-descriptions/issue/169, https://bugzilla.redhat.com/show_bug.cgi?id=2355948.

toolbox: include `policycoreutils`

2025-03-23T20:11:18Z

It can be useful to have access to `setfiles` inside a `toolbx` container. Especially when using them as bootstrap roots to setup other trees. Signed-off-by: Simon de Vlieger

Drop /usr/local/sbin:/usr/sbin from $PATH

2025-03-19T13:50:50Z

If $PATH is not set, we get the default from crun [1]: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin This is not useful, because in the image, /bin, /sbin, /usr/sbin are all symlinks. /usr/local/sbin does not exist. When /usr/sbin is a symlink to /usr/bin, and we use have a $PATH with /usr/sbin before /usr/bin, various tools will discover /usr/sbin/foo when looking for 'foo' [2], which is confusing and ugly. [1] https://github.com/containers/crun/blob/a980c89665bb488ff206e47e9083f75b48528714/src/libcrun/container.c#L183 [2] https://src.fedoraproject.org/rpms/setup/pull-request/18#comment-253719 Co-authored-by: Simon de Vlieger