| Age | Commit message (Collapse) | Author |
|
The p11-kit RPM is neither explicitly mentioned in the list of default
RPMs on Fedora Silverblue and Workstation [1], nor was it explicitly
installed by the Container/Dockerfile equivalent of the fedora-toolbox
OCI images [2].
The Container/Dockerfile listed p11-kit as one of the RPMs that had to
be reinstalled, because it was inherited from the fedora base image, and
had its documentation and translations stripped out. The reinstallation
would be skipped if for some reason it was no longer part of the fedora
base image.
This was misinterpreted when creating the Kickstart equivalent of the
fedora-toolbox OCI images [3] and that's how it ended up in the KIWI
description.
In reality, p11-kit gets pulled in as a dependency of ca-certificates,
gnutls, etc. and that's sufficient.
Fallout from d27e4c3f6c3e13bcefe9d1d904386794140d8a91
[1] https://pagure.io/fedora-comps/
[2] https://src.fedoraproject.org/container/fedora-toolbox
[3] fedora-kickstarts commit 48e2c3b5598de32f
https://pagure.io/fedora-kickstarts/c/48e2c3b5598de32f
https://pagure.io/fedora-kickstarts/pull-request/964
https://pagure.io/releng/issue/11399
https://pagure.io/fedora-kiwi-descriptions/pull-request/189
|
|
Although we include curl, some folks expect wget. Also, one of the more
common uses of WSL is in combination with VS Code, and its setup script
on remote hosts uses wget.
Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
|
|
Signed-off-by: Troy Dawson <tdawson@redhat.com>
|
|
This should improve the experience by having separate clickable
links for each test matrix item and see the pass/fail more early.
Also make Testing Farm scale better as it uses separate TF requests
for testing.
Signed-off-by: Miroslav Vadkerti <mvadkert@redhat.com>
|
|
This ensures that the menu does not pop up for the first boot on
variants that leverage boot success tracking.
|
|
This became necessary with 10.0.13 / after merging
https://github.com/OSInside/kiwi/pull/2535 but doesn't seem to
noticeable effects besides miisin "GRUB_ENABLE_BLSCFG=true" in
/etc/default/grub.
|
|
menu_auto_hide=1 is required for the boot_success provided by Fedora's
grub2 package. This will fall back to the previous kernel and show the
usually hidden grub menu when booting fails.
This makes it unnecessary to override the timeout_style and using a
reduced timeout of 1 second for disk images.
|
|
This drastically reduces the content included in the embedded ESP
for live media, and avoids weird side-effects caused by extra EFI
binaries being present.
|
|
This package only exists on x86 architectures.
Fixes: 06ef485a89eeb552ab84c322ddbb622e65772c20
|
|
We do not need the full livecd-tools on the SoaS image, only the
scripts needed to put the ISO on a USB stick with persistence.
|
|
This ensures that the initial-setup system is present on the image,
which is required for disk image builds.
|
|
|
|
This is not exhaustive, but does get users into the right environment
to build images. We also indicate that this is only tested on Fedora Linux.
|
|
Fixes https://pagure.io/fedora-kiwi-descriptions/issue/169,
https://bugzilla.redhat.com/show_bug.cgi?id=2355948.
|
|
This is needed for XUL-based applications to work (for example, Zotero).
Signed-off-by: Davide Cavalca <dcavalca@fedoraproject.org>
|
|
It can be useful to have access to `setfiles` inside a `toolbx`
container. Especially when using them as bootstrap roots to setup
other trees.
Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
|
|
This ensures that the FEX image build does not fail.
|
|
When the kiwibuild_extra_args variable is not defined, we do not
want it to fail with "unbound variable" error.
Fixes: efc71e6d8629f0e3b5bd2541650266d632a2fe68
|
|
The ldconfig cache generator runs on first boot and attempts to
read the whole image into memory, which eats gigabytes of RAM and
slows the boot down by half a minute. This is unnecessary for
images being booted unmodified.
Thus, create the necessary dot files to inhibit their runs.
|
|
level 8 LZMA compression"
This did not help anything and it makes image builds slower.
This reverts commit b57a77e5717e31914faddf5c258d74a0db5e988f.
|
|
This simplifies supporting one-off custom actions without having to
define options in the helper script all the time.
|
|
If $PATH is not set, we get the default from crun [1]:
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
This is not useful, because in the image, /bin, /sbin, /usr/sbin are all
symlinks. /usr/local/sbin does not exist.
When /usr/sbin is a symlink to /usr/bin, and we use have a $PATH with
/usr/sbin before /usr/bin, various tools will discover /usr/sbin/foo when
looking for 'foo' [2], which is confusing and ugly.
[1] https://github.com/containers/crun/blob/a980c89665bb488ff206e47e9083f75b48528714/src/libcrun/container.c#L183
[2] https://src.fedoraproject.org/rpms/setup/pull-request/18#comment-253719
Co-authored-by: Simon de Vlieger <cmdr@supakeen.com>
|
|
compression
It seems the larger chunk size seems to slow the start of images in
low memory environments due to the ldconfig cache generator unit
eating gigabytes of memory from mapping the chunks into memory.
Attempt to work around this by lowering the chunk size while raising
the compression level to attempt to maintain image sizes.
|
|
|
|
Signed-off-by: Ryan Brue <ryanbrue.dev@gmail.com>
|
|
Signed-off-by: Ryan Brue <ryanbrue.dev@gmail.com>
|
|
See: https://fedoraproject.org/wiki/Changes/AtomicDesktopsNoPpc64le
|
|
We have pypy3.11.
pypy3.9 was retired.
See https://bugzilla.redhat.com/2348737
|
|
The initramfs is built after config.sh is run anyway.
|
|
The Xfce polkit agent configuration was missed in the initial port
from the kickstarts.
|
|
Some of this was already present in livesys-scripts and the rest
was migrated.
|
|
This group is currently not available for any other architectures.
|
|
This is principally to avoid confusion as the DesktopCommon profile
is defined in one place and used across the board.
No functional changes.
|
|
The Fedora Python Classroom Lab moved to kiwi with Fedora Linux 42.
|
|
|
|
This was accidentally left off when it shouldn't be.
|
|
Fedora KDE Plasma Desktop is now an Edition, and KDE Mobile is the
Fedora KDE Plasma Mobile Spin.
|
|
The Raspberry Pi 3 does not recognize a FAT filesystem marked with
the 0xef type, so until we drop support for this device, hack the
partition manually to use a legacy FAT filesystem partition type.
|
|
Now that we have a lot more stuff installed in the ESP, we need
the ESP to be bigger. This matches the size used for the desktop
disk variants.
|
|
It is hard to ensure that hardware support packages are pulled in
universally when it's splintered across different variant profiles.
To fix this and ensure Server benefits from this, unify everything
into a common profile and make everything require it.
|
|
U-Boot does not support XFS and this causes significant issues
when trying to boot Fedora Server on single board computers.
Resolve this by using ext4 here, as all U-Boot variants generally
support this.
|
|
Enki is nice and advanced, but it also crashes when you try to use
some basic functionality, so let's put back a simpler app that works.
|
|
Turns out that different boards needs different values, so
hardcoding a specific one here is not a good idea. Luckily,
Linux can usually figure things out on its own and automatically
provide a working serial console.
Signed-off-by: Andrea Bolognani <abologna@redhat.com>
|
|
This switches from SquashFS to EROFS using LZMA compression
with a 1M chunksize and fragement dedpulication for inodes enabled.
This attempts to match the defaults for SquashFS in kiwi and provides
a good balance for image compression and creation time.
Note that "-Ededupe" is not used because it is not multi-threaded and
is currently extremely slow.
|
|
Of the profiles that are currently listed, only LiveInstall
actually exists. Use BootCore instead, which all profiles derive
from. In most cases we'll end up locking the root user as part
of config.sh anyway.
Signed-off-by: Andrea Bolognani <abologna@redhat.com>
|
|
This renames the minimal profile to "tiny", it's useful to have a
profile that builds quickly and provides a small artifact. However, the
minimal name mirrors the Fedora Minimal spin name and might confuse
people building images about what they're actually building.
The Tiny descriptions do not replicate the Fedora Minimal spin.
Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
|
|
Reference: https://fedoraproject.org/wiki/Changes/FEX
|
|
This is a tiny package (250kB) that seems to be a relatively common
dependency (it just provides error codes and some common helpers, used
by stuff other than gpg itself).
|
|
We decided we don't need two packages like this. See
https://src.fedoraproject.org/rpms/filesystem/c/3f741bf2a89c9e1bb685943c41fd298e6683dd50?branch=rawhide
Signed-off-by: Adam Williamson <awilliam@redhat.com>
|
|
Most of the changes are self-explanatory and just follow what's
already happening for existing architectures.
Two things are worth pointing out:
* we need to use shim-unsigned instead of shim-signed because
riscv64 is not fully integrated into Fedora yet and so we
can't do Secure Boot signing for the time being;
* we use ext4 as bootfilesystem since in most cases the
underlying firmware is going to be U-Boot, which needs to be
able to load the board's DTB from /boot and doesn't support
XFS.
Signed-off-by: David Abdurachmanov <davidlt@rivosinc.com>
|