Commit Graph
101 Commits
Author SHA1 Message Date
Troy Dawson ca228d742a Add ELN GNOME and KDE Live images
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-09-29 09:24:24 -07:00
Neal Gompa 35da5b9e14 teams/server: aarch64: Set 16 MiB starting offset for ServerDisk partitions
This ensures that there's empty space for arm-image-installer to
inject firmware blobs into images as part of preparing to install
for various single board computers.
2025-09-28 13:12:11 -04:00
Yaakov Selkowitz 197907e6c3 eln: fix toolbox package list
nss-mdns is not included in RHEL, and mesa-vulkan-drivers is x86_64 only.
2025-09-17 23:46:54 -04:00
Troy Dawson 7a04379de6 Build ELN Toolbox
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-09-12 08:34:35 -07:00
Jeremy Cline d38b42b6e3 eln/wsl: drop the SELinux packages from the ELN WSL image
WSL does not support SELinux, so at best it's pointless to install. This
also actively breaks WSL 1 users, although I don't think we should
suggest that we support that, and if the policy on the builder doesn't
match the target things break during the build.

It also reduced the build time from ~80 seconds to ~70 seconds for me,
so that's nice.

See: 39b379f7d ("wsl: drop the SELinux packages from the WSL base image")
Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-08-28 14:59:00 -04:00
Jeremy Cline 39b379f7d9 wsl: drop the SELinux packages from the WSL base image
WSL does not support SELinux, so at best it's pointless to install. This
also actively breaks WSL 1 users, although I don't think we should
suggest that we support that, and if the policy on the builder doesn't
match the target things break during the build.

It also reduced the build time from ~80 seconds to ~70 seconds for me,
so that's nice.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-08-28 13:33:42 -04:00
Neal Gompa b58277390d teams/{kde,lxqt,workstation}: Drop redundant anaconda-webui entries
The anaconda-webui package is now installed by default for live
media, so these are no longer necessary.
2025-07-31 01:04:41 -04:00
Katerina Koukiou f41248567c teams/lxqt: Use web-based Anaconda UI by default for LXQT 2025-07-24 08:23:38 +02:00
Adam Williamson 9b8a851b7d Reapply "teams/kde: Use web-based Anaconda UI by default for KDE"
This reverts commit 24c4fc39c2.
With a PR we can run the tests on openQA staging, identify any
problems with the change, and extend the tests to cover the
additional screens that show up with KDE.
2025-07-08 21:08:37 +00:00
Adam Williamson 24c4fc39c2 Revert "teams/kde: Use web-based Anaconda UI by default for KDE"
This reverts commit e4d801674c.
openQA has not yet been prepared for this change and it is
causing all updates to fail gating. We need to prepare the tests
before merging this.
2025-06-23 21:33:19 +01:00
Katerina Koukiou e4d801674c teams/kde: Use web-based Anaconda UI by default for KDE
While the Web UI is still missing two features outlined in the Change Proposal [1], enabling it
early will help identify additional issues and improve integration. The missing features are:

- Date/Time Configuration Screen (currently implemented by GIS in Workstation)
- Configurable Browser Support (currently hardcoded to Firefox)

[1] https://fedoraproject.org/wiki/Changes/AnacondaWebUIforFedoraSpins#Detailed_Description
2025-06-23 10:52:53 +02:00
Clement Verna 8300bcdaa1 Add gawk to the containers base
Fixes https://github.com/fedora-cloud/docker-brew-fedora/issues/119

Signed-off-by: Clement Verna <cverna@tutatnota.com>
2025-06-16 20:48:11 +02:00
Troy Dawson 6e1239589b Add wsl-setup to ELN WSL
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-05-30 02:53:59 +00:00
Jeremy Cline 5c2fc05a28 ELN: Adjust aarch64 images to use the correct serial console
The serial device name on Arm is ttyAMA, not ttyS. This splits the
configuration for ELN images based on the architecture and adjusts the
kernel command line.

Note that prior to this change, aarch64 would still output kernel logs
to the ttyAMA0 console (on Azure, at least) due to the ACPI SPCR table.
On aarch64 the console in this table, if it's present, is _always_
configured as the kernel's default console. However, systemd logs would
not be sent to the serial console because it seems it was honoring the
kernel command line configuration which had ttyS0 as the default.

Note: this is the exact same change as 4979662a547e ("Cloud: Adjust
aarch64 images to use the correct serial console"), if you're reverting
this, you probably want to also revert that one.

Also see: https://pagure.io/cloud-sig/issue/394
Also see: https://bugzilla.redhat.com/show_bug.cgi?id=1661288

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-05-29 16:17:08 -04:00
Jeremy Cline 56a4d1ed1a Cloud: Adjust aarch64 images to use the correct serial console
The serial device name on Arm is ttyAMA, not ttyS. This splits the
configuration for Cloud images based on the architecture and adjusts the
kernel command line.

Note that prior to this change, aarch64 would still output kernel logs
to the ttyAMA0 console (on Azure, at least) due to the ACPI SPCR table.
On aarch64 the console in this table, if it's present, is _always_
configured as the kernel's default console. However, systemd logs would
not be sent to the serial console because it seems it was honoring the
kernel command line configuration which had ttyS0 as the default.

Also see: https://pagure.io/cloud-sig/issue/394
Also see: https://bugzilla.redhat.com/show_bug.cgi?id=1661288

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-05-29 16:17:06 -04:00
Neal Gompa 92729675dd teams/eln/wsl: Use native "wsl" image type
This introduces extra validation for WSL image creation to ensure
the result is usable.
2025-05-29 10:13:19 -04:00
Neal Gompa 887dbe204b teams/cloud/wsl: Use native "wsl" image type
This introduces extra validation for WSL image creation to ensure
the result is usable.
2025-05-29 10:13:19 -04:00
Debarshi Ray 2abcb7b777 teams/cloud/container: Add p11-kit-client to Toolbx
This will be used by toolbox(1) to ensure that the certificates from
certificate authorities (or CAs) that are available inside a Toolbx
container are kept synchronized with the host operating system [1].  Any
program that uses PKCS #11 to access CA certificates should see the same
ones both inside the container and on the host.

This is the same approach taken by Flatpak [2].

[1] https://github.com/containers/toolbox/issues/626

[2] Flatpak commit 66b2ff40f7caf3a7
    https://github.com/flatpak/flatpak/commit/66b2ff40f7caf3a7
    https://github.com/flatpak/flatpak/pull/1757
    https://github.com/p11-glue/p11-kit/issues/68

https://pagure.io/fedora-kiwi-descriptions/pull-request/189
2025-05-28 15:31:43 +02:00
Debarshi Ray e6ef81877e teams/cloud/container: Don't explicitly install p11-kit for Toolbx
The p11-kit RPM is neither explicitly mentioned in the list of default
RPMs on Fedora Silverblue and Workstation [1], nor was it explicitly
installed by the Container/Dockerfile equivalent of the fedora-toolbox
OCI images [2].

The Container/Dockerfile listed p11-kit as one of the RPMs that had to
be reinstalled, because it was inherited from the fedora base image, and
had its documentation and translations stripped out.  The reinstallation
would be skipped if for some reason it was no longer part of the fedora
base image.

This was misinterpreted when creating the Kickstart equivalent of the
fedora-toolbox OCI images [3] and that's how it ended up in the KIWI
description.

In reality, p11-kit gets pulled in as a dependency of ca-certificates,
gnutls, etc. and that's sufficient.

Fallout from d27e4c3f6c

[1] https://pagure.io/fedora-comps/

[2] https://src.fedoraproject.org/container/fedora-toolbox

[3] fedora-kickstarts commit 48e2c3b5598de32f
    https://pagure.io/fedora-kickstarts/c/48e2c3b5598de32f
    https://pagure.io/fedora-kickstarts/pull-request/964
    https://pagure.io/releng/issue/11399

https://pagure.io/fedora-kiwi-descriptions/pull-request/189
2025-05-28 15:31:39 +02:00
Jeremy Cline bbb0824283 wsl: Add wget to the default package set
Although we include curl, some folks expect wget. Also, one of the more
common uses of WSL is in combination with VS Code, and its setup script
on remote hosts uses wget.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-05-15 11:31:42 -04:00
Troy Dawson fb1c568fea Add WSL to ELN
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-05-01 02:57:18 +00:00
Janne Grunau 66b87054e8 grub2: Enable bls for all non-live images
This became necessary with 10.0.13 / after merging
https://github.com/OSInside/kiwi/pull/2535 but doesn't seem to
noticeable effects besides miisin "GRUB_ENABLE_BLSCFG=true" in
/etc/default/grub.
2025-04-29 22:36:27 +02:00
Jan Pazdziora 3589fa143a teams/cloud/container: Explicitly add shadow-utils.
Fixes https://pagure.io/fedora-kiwi-descriptions/issue/169,
https://bugzilla.redhat.com/show_bug.cgi?id=2355948.
2025-03-29 19:35:28 +01:00
Davide Cavalca e3a079f93f teams/asahi: add dbus-glib
This is needed for XUL-based applications to work (for example, Zotero).

Signed-off-by: Davide Cavalca <dcavalca@fedoraproject.org>
2025-03-28 15:25:45 -07:00
Simon de Vlieger 14689b3737 toolbox: include policycoreutils
It can be useful to have access to `setfiles` inside a `toolbx`
container. Especially when using them as bootstrap roots to setup
other trees.

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-03-23 21:11:18 +01:00
Zbigniew Jędrzejewski-SzmekandSimon de Vlieger 364b0b8f62 Drop /usr/local/sbin:/usr/sbin from $PATH
If $PATH is not set, we get the default from crun [1]:
  PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
This is not useful, because in the image, /bin, /sbin, /usr/sbin are all
symlinks. /usr/local/sbin does not exist.

When /usr/sbin is a symlink to /usr/bin, and we use have a $PATH with
/usr/sbin before /usr/bin, various tools will discover /usr/sbin/foo when
looking for 'foo' [2], which is confusing and ugly.

[1] https://github.com/containers/crun/blob/a980c89665bb488ff206e47e9083f75b48528714/src/libcrun/container.c#L183
[2] https://src.fedoraproject.org/rpms/setup/pull-request/18#comment-253719

Co-authored-by: Simon de Vlieger <cmdr@supakeen.com>
2025-03-19 14:50:50 +01:00
Allan 01b5342bb5 Phosh updates 2025-03-12 08:21:40 +00:00
Miro Hrončok 3fe7a48178 Block pypy3.10 from Python Classroom Lab
We have pypy3.11.
pypy3.9 was retired.

See https://bugzilla.redhat.com/2348737
2025-03-06 19:55:37 +01:00
Neal Gompa fcdcd34d50 components/boot, teams/server: Add partitioning hack for the Raspberry Pi 3
The Raspberry Pi 3 does not recognize a FAT filesystem marked with
the 0xef type, so until we drop support for this device, hack the
partition manually to use a legacy FAT filesystem partition type.
2025-02-20 14:46:28 -05:00
Neal Gompa 5844c5c608 teams/server: Bump the ESP size to 500 MB
Now that we have a lot more stuff installed in the ESP, we need
the ESP to be bigger. This matches the size used for the desktop
disk variants.
2025-02-20 14:15:26 -05:00
Neal Gompa ada197be81 components, teams/server: Use a common profile for hardware support
It is hard to ensure that hardware support packages are pulled in
universally when it's splintered across different variant profiles.

To fix this and ensure Server benefits from this, unify everything
into a common profile and make everything require it.
2025-02-20 14:15:26 -05:00
Neal Gompa 2cb33874d1 teams/server: Use ext4 for /boot for the AArch64 host disk image
U-Boot does not support XFS and this causes significant issues
when trying to boot Fedora Server on single board computers.

Resolve this by using ext4 here, as all U-Boot variants generally
support this.
2025-02-20 07:55:35 -05:00
Andrea Bolognani 7bbf6475e8 server: Remove console=ttyS0 from riscv64 images
Turns out that different boards needs different values, so
hardcoding a specific one here is not a good idea. Luckily,
Linux can usually figure things out on its own and automatically
provide a working serial console.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2025-02-19 19:15:14 +01:00
Simon de Vlieger 32a5d56825 naming: rename minimal -> tiny
This renames the minimal profile to "tiny", it's useful to have a
profile that builds quickly and provides a small artifact. However, the
minimal name mirrors the Fedora Minimal spin name and might confuse
people building images about what they're actually building.

The Tiny descriptions do not replicate the Fedora Minimal spin.

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-02-18 13:08:03 +00:00
Asahi Lina 737d8274e0 teams/asahi: Add libgpg-error
This is a tiny package (250kB) that seems to be a relatively common
dependency (it just provides error codes and some common helpers, used
by stuff other than gpg itself).
2025-02-09 18:50:43 +09:00
David Abdurachmanov b5d377d912 Initial riscv64 support
Most of the changes are self-explanatory and just follow what's
already happening for existing architectures.

Two things are worth pointing out:

  * we need to use shim-unsigned instead of shim-signed because
    riscv64 is not fully integrated into Fedora yet and so we
    can't do Secure Boot signing for the time being;

  * we use ext4 as bootfilesystem since in most cases the
    underlying firmware is going to be U-Boot, which needs to be
    able to load the board's DTB from /boot and doesn't support
    XFS.

Signed-off-by: David Abdurachmanov <davidlt@rivosinc.com>
2025-02-07 15:06:22 +01:00
Jeremy Cline 4b4a83b33f Add a WSL definition and config snippets
This introduces the beginnings of an image definition for Windows
Subsystem for Linux (WSL).

The package list is based on the core and standard grouplists. Some
packages, like the kernel, dracut, and so on, are omitted as they are
unnecessary. Others, like audit, don't work in the environment. Finally,
many packages are omitted since I thought "people probably won't want
that", so the package list is completely up for debate. This is just a
reasonable starting point that works.

Build/test instructions:

To build the tarball:

  $ ./kiwi-build --image-profile=WSL-Base --image-type=tbz --output-dir=./build/

Get it to a Windows host with WSL installed. To boot it with cgroupsv2,
add the following to `.wslconfig` in the Windows host home folder:

[wsl2]
kernelCommandLine=systemd.unified_cgroup_hierarchhy=1 cgroup_no_v1=all

This assumes the latest WSL release is installed, at least version 2.4.4:

  $ wsl --install --from-file .\path\to\the\fedora.tar.xz

Alternatively, if you're using something prior to version 2.4.4:

  $ wsl --import --version=2 Fedora C:\path\to\storage\Fedora\ .\path\to\the\fedora.tar.xz

Finally, run it with:

  $ wsl -d Fedora

If you are using 2.4.4+, you will be prompted for a username and then
dropped into an interactive shell with that user and passwordless sudo
access.

If you're using an older version, you need to do:

  $ wsl -d Fedora -u root
  # /usr/libexec/wsl/oobe.sh

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-01-31 10:52:54 -05:00
Neal Gompa 90f4f3a820 Add Fedora Scientific variants
This is ported over from the kickstart definitions.
2025-01-27 19:38:49 -05:00
Andrea Bolognani b81b830770 server: Set bootloader timeout to 3s and show menu
While cloud images can usually be booted without any issues and
for workstation installs we want a visually polished experience,
in the case of server installs on real hardware it is generally
expected to have convenient access to the bootloader menu for
troubleshooting purposes.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2025-01-27 14:36:05 +01:00
Yaakov Selkowitz 9fed79138a teams/eln/container: Install standalone sysusers for base containers
This avoids a dependency on the full systemd package for non-init
containers.
2025-01-23 18:46:23 -05:00
Neal Gompa a74ebe5098 Add Minimal disk image
This is an example that can be used for creating small disk images
to verify that the basics work.
2025-01-22 19:58:08 +00:00
Neal Gompa 1f35331b84 teams/cloud/container: Install standalone sysusers for base containers
This avoids a dependency on the full systemd package for non-init
containers.
2025-01-22 13:01:27 -05:00
Neal Gompa 01b6f436c2 Add Python Classroom Lab variant
This is a port over from the kickstart definitions.
2025-01-14 12:30:13 -05:00
Neal Gompa fe9f770c85 teams/workstation: Use web-based Anaconda UI by default for live media
Reference: https://fedoraproject.org/wiki/Changes/AnacondaWebUIforFedoraWorkstation
2025-01-13 11:47:38 -05:00
Neal Gompa e69c665481 teams/asahi: FEX: Switch SDL2 for sdl2-compat
Reference: https://fedoraproject.org/wiki/Changes/SDL2onSDL3
2025-01-13 08:37:54 -05:00
Neal Gompa 7f04952a02 Add COSMIC spin variants
Reference: https://fedoraproject.org/wiki/Changes/FedoraCOSMIC
2025-01-10 15:11:08 -05:00
Neal Gompa 1f496fc743 components: Introduce a BaseCommon profile
This is where the lowest level common denominator configuration
goes for most images go.
2024-12-13 10:18:06 -05:00
Asahi Lina bb3a746dda teams/asahi: FEX: Add xim support for GTK2/3
We're currently shipping GTK2/3 libs in the rootfs. While we're doing
that, let's also install XIM support, which actually works through X11
passthrough with muvm. This should generally make legacy GTK x86_64
apps have input method support the old-fashioned way.

Modern apps should use the Wayland input method protocol stuff, which is
already built into GTK3/GTK4 and should not require any extra shared
libraries for FEX. For muvm, that will work once we have Wayland
passthrough.
2024-12-09 23:53:30 +09:00
Neal Gompa 649ac3e121 teams/server: Split out ServerDisk aarch64 profile to force MBR
Many of the older supported AArch64 systems (particularly single
board computers) require a legacy MBR (Master Boot Record) type
partitioning to successfully boot.
2024-11-26 06:40:06 -05:00
Adam Williamson 4943dc58a8 Fix a line ordering error in lxde.xml
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-11-23 15:02:47 -08:00