Commit Graph
117 Commits
Author SHA1 Message Date
Neal Gompa ae61e8d9a4 Add initial definitions for the Security lab
These are ported over from fedora-kickstarts with some small
cleanups.
2025-12-14 21:35:12 -05:00
Neal Gompa b9190c491e Add initial definitions for the Games lab
These are ported over from fedora-kickstarts with some small
cleanups.
2025-12-14 21:15:17 -05:00
Neal Gompa e29d4d2f8f Add initial definitions for the Design Suite lab
These are ported over from fedora-kickstarts with some small
cleanups.
2025-12-14 19:43:53 -05:00
Neal Gompa 9125ea449b Add initial definitions for the Astronomy lab
These are ported over from fedora-kickstarts with some small
cleanups.
2025-12-14 19:08:10 -05:00
Neal Gompa eef6b9ffb4 Revert "teams/lxde: Do not request nonexistent fedora-release-lxde"
This now exists as of fedora-release-44-0.9.

This reverts commit b6d7ae177d.
2025-12-12 10:22:18 -05:00
Yaakov Selkowitz e8b830ab4d teams/eln: Replace Anaconda Initial Setup with Plasma Setup
https://pagure.io/fedora-kiwi-descriptions/c/1e74928eb0719b1cb3548434a58d9ffd0c4d21fd
https://pagure.io/fedora-comps/pull-request/1206
2025-12-09 21:15:47 -05:00
Neal Gompa edebd133af teams/cloud: Drop /boot partition and use a Btrfs subvolume for /boot
This lets us free up the space allocated for the partition and gives
us dynamically allocated space for boot data like we have with the
rest of the operating system.

We do not do this for s390x because zipl does not support it.

Reference: https://fedoraproject.org/wiki/Changes/BtrfsBootForCloud
2025-12-09 13:50:44 -05:00
Neal Gompa b6d7ae177d teams/lxde: Do not request nonexistent fedora-release-lxde
The Fedora LXDE spin does not have a fedora-release variant,
so the image build fails when trying to request one.

This is an error in fedora-release and will (hopefully) be eventually
fixed. For now, disable the block requesting it so we can restore it
later.
2025-12-08 10:56:07 -05:00
jackyzy823 4ae0a2eca3 teams/eln/container: create dotfiles under root folder with systemd-tmpfiles
Since`rootfiles` now uses systemd-tmpfiles to install dotfiles under
root folder instead of copying.
2025-11-27 22:03:08 +08:00
jackyzy823 0996328b7c teams/cloud/container: create dotfiles under root folder with systemd-tmpfiles
Since`rootfiles` now uses systemd-tmpfiles to install dotfiles under
root folder instead of copying.
2025-11-27 22:02:13 +08:00
Janne Grunau 37ddbeda1a teams/asahi: FEX: Drop mostly redundant wine.i686
Wine in Fedora 43 is built with WoW64 which supports running 32-bit
Windows applications with 64-bit wine build.
While this might cause regressions in some corner cases it reduces the
image size considerably. The xz compressed erofs image shrank from
~1090MB to ~933MB.
2025-11-26 19:03:15 +01:00
Janne Grunau a0d515be1a teams/asahi: FEX: Drop llvm/clang-18 packages
Those are no longer needed. The system mesa contains fully functioning
asahi OpenGL/Vulkan drivers so there is no need to provide older
llvm-libs and clang-libs for mesa overlays.
2025-11-26 08:48:23 +01:00
Troy Dawson 4b37ae198d Add core to ELN Desktop Common
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-10-31 07:38:43 -07:00
Troy Dawson 916745f452 ELN GNOME - Use groups instead of environment
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-10-28 10:09:41 -07:00
Neal Gompa a6a0df3b3a Raise the size of the boot partition to 2G for ELN images
With the increase in content in initramfs, a long-overdue raise
of the default size for /boot is warranted.

Reference: https://fedoraproject.org/wiki/Changes/2GbootPartition
2025-10-06 10:18:49 -04:00
Neal Gompa 6c3b674a92 Raise the size of the boot partition to 2G for Fedora images
With the increase in content in initramfs, a long-overdue raise
of the default size for /boot is warranted.

Reference: https://fedoraproject.org/wiki/Changes/2GbootPartition
2025-10-06 10:18:44 -04:00
Troy Dawson ca228d742a Add ELN GNOME and KDE Live images
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-09-29 09:24:24 -07:00
Neal Gompa 35da5b9e14 teams/server: aarch64: Set 16 MiB starting offset for ServerDisk partitions
This ensures that there's empty space for arm-image-installer to
inject firmware blobs into images as part of preparing to install
for various single board computers.
2025-09-28 13:12:11 -04:00
Yaakov Selkowitz 197907e6c3 eln: fix toolbox package list
nss-mdns is not included in RHEL, and mesa-vulkan-drivers is x86_64 only.
2025-09-17 23:46:54 -04:00
Troy Dawson 7a04379de6 Build ELN Toolbox
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-09-12 08:34:35 -07:00
Jeremy Cline d38b42b6e3 eln/wsl: drop the SELinux packages from the ELN WSL image
WSL does not support SELinux, so at best it's pointless to install. This
also actively breaks WSL 1 users, although I don't think we should
suggest that we support that, and if the policy on the builder doesn't
match the target things break during the build.

It also reduced the build time from ~80 seconds to ~70 seconds for me,
so that's nice.

See: 39b379f7d ("wsl: drop the SELinux packages from the WSL base image")
Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-08-28 14:59:00 -04:00
Jeremy Cline 39b379f7d9 wsl: drop the SELinux packages from the WSL base image
WSL does not support SELinux, so at best it's pointless to install. This
also actively breaks WSL 1 users, although I don't think we should
suggest that we support that, and if the policy on the builder doesn't
match the target things break during the build.

It also reduced the build time from ~80 seconds to ~70 seconds for me,
so that's nice.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-08-28 13:33:42 -04:00
Neal Gompa b58277390d teams/{kde,lxqt,workstation}: Drop redundant anaconda-webui entries
The anaconda-webui package is now installed by default for live
media, so these are no longer necessary.
2025-07-31 01:04:41 -04:00
Katerina Koukiou f41248567c teams/lxqt: Use web-based Anaconda UI by default for LXQT 2025-07-24 08:23:38 +02:00
Adam Williamson 9b8a851b7d Reapply "teams/kde: Use web-based Anaconda UI by default for KDE"
This reverts commit 24c4fc39c2.
With a PR we can run the tests on openQA staging, identify any
problems with the change, and extend the tests to cover the
additional screens that show up with KDE.
2025-07-08 21:08:37 +00:00
Adam Williamson 24c4fc39c2 Revert "teams/kde: Use web-based Anaconda UI by default for KDE"
This reverts commit e4d801674c.
openQA has not yet been prepared for this change and it is
causing all updates to fail gating. We need to prepare the tests
before merging this.
2025-06-23 21:33:19 +01:00
Katerina Koukiou e4d801674c teams/kde: Use web-based Anaconda UI by default for KDE
While the Web UI is still missing two features outlined in the Change Proposal [1], enabling it
early will help identify additional issues and improve integration. The missing features are:

- Date/Time Configuration Screen (currently implemented by GIS in Workstation)
- Configurable Browser Support (currently hardcoded to Firefox)

[1] https://fedoraproject.org/wiki/Changes/AnacondaWebUIforFedoraSpins#Detailed_Description
2025-06-23 10:52:53 +02:00
Clement Verna 8300bcdaa1 Add gawk to the containers base
Fixes https://github.com/fedora-cloud/docker-brew-fedora/issues/119

Signed-off-by: Clement Verna <cverna@tutatnota.com>
2025-06-16 20:48:11 +02:00
Troy Dawson 6e1239589b Add wsl-setup to ELN WSL
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-05-30 02:53:59 +00:00
Jeremy Cline 5c2fc05a28 ELN: Adjust aarch64 images to use the correct serial console
The serial device name on Arm is ttyAMA, not ttyS. This splits the
configuration for ELN images based on the architecture and adjusts the
kernel command line.

Note that prior to this change, aarch64 would still output kernel logs
to the ttyAMA0 console (on Azure, at least) due to the ACPI SPCR table.
On aarch64 the console in this table, if it's present, is _always_
configured as the kernel's default console. However, systemd logs would
not be sent to the serial console because it seems it was honoring the
kernel command line configuration which had ttyS0 as the default.

Note: this is the exact same change as 4979662a547e ("Cloud: Adjust
aarch64 images to use the correct serial console"), if you're reverting
this, you probably want to also revert that one.

Also see: https://pagure.io/cloud-sig/issue/394
Also see: https://bugzilla.redhat.com/show_bug.cgi?id=1661288

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-05-29 16:17:08 -04:00
Jeremy Cline 56a4d1ed1a Cloud: Adjust aarch64 images to use the correct serial console
The serial device name on Arm is ttyAMA, not ttyS. This splits the
configuration for Cloud images based on the architecture and adjusts the
kernel command line.

Note that prior to this change, aarch64 would still output kernel logs
to the ttyAMA0 console (on Azure, at least) due to the ACPI SPCR table.
On aarch64 the console in this table, if it's present, is _always_
configured as the kernel's default console. However, systemd logs would
not be sent to the serial console because it seems it was honoring the
kernel command line configuration which had ttyS0 as the default.

Also see: https://pagure.io/cloud-sig/issue/394
Also see: https://bugzilla.redhat.com/show_bug.cgi?id=1661288

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-05-29 16:17:06 -04:00
Neal Gompa 92729675dd teams/eln/wsl: Use native "wsl" image type
This introduces extra validation for WSL image creation to ensure
the result is usable.
2025-05-29 10:13:19 -04:00
Neal Gompa 887dbe204b teams/cloud/wsl: Use native "wsl" image type
This introduces extra validation for WSL image creation to ensure
the result is usable.
2025-05-29 10:13:19 -04:00
Debarshi Ray 2abcb7b777 teams/cloud/container: Add p11-kit-client to Toolbx
This will be used by toolbox(1) to ensure that the certificates from
certificate authorities (or CAs) that are available inside a Toolbx
container are kept synchronized with the host operating system [1].  Any
program that uses PKCS #11 to access CA certificates should see the same
ones both inside the container and on the host.

This is the same approach taken by Flatpak [2].

[1] https://github.com/containers/toolbox/issues/626

[2] Flatpak commit 66b2ff40f7caf3a7
    https://github.com/flatpak/flatpak/commit/66b2ff40f7caf3a7
    https://github.com/flatpak/flatpak/pull/1757
    https://github.com/p11-glue/p11-kit/issues/68

https://pagure.io/fedora-kiwi-descriptions/pull-request/189
2025-05-28 15:31:43 +02:00
Debarshi Ray e6ef81877e teams/cloud/container: Don't explicitly install p11-kit for Toolbx
The p11-kit RPM is neither explicitly mentioned in the list of default
RPMs on Fedora Silverblue and Workstation [1], nor was it explicitly
installed by the Container/Dockerfile equivalent of the fedora-toolbox
OCI images [2].

The Container/Dockerfile listed p11-kit as one of the RPMs that had to
be reinstalled, because it was inherited from the fedora base image, and
had its documentation and translations stripped out.  The reinstallation
would be skipped if for some reason it was no longer part of the fedora
base image.

This was misinterpreted when creating the Kickstart equivalent of the
fedora-toolbox OCI images [3] and that's how it ended up in the KIWI
description.

In reality, p11-kit gets pulled in as a dependency of ca-certificates,
gnutls, etc. and that's sufficient.

Fallout from d27e4c3f6c

[1] https://pagure.io/fedora-comps/

[2] https://src.fedoraproject.org/container/fedora-toolbox

[3] fedora-kickstarts commit 48e2c3b5598de32f
    https://pagure.io/fedora-kickstarts/c/48e2c3b5598de32f
    https://pagure.io/fedora-kickstarts/pull-request/964
    https://pagure.io/releng/issue/11399

https://pagure.io/fedora-kiwi-descriptions/pull-request/189
2025-05-28 15:31:39 +02:00
Jeremy Cline bbb0824283 wsl: Add wget to the default package set
Although we include curl, some folks expect wget. Also, one of the more
common uses of WSL is in combination with VS Code, and its setup script
on remote hosts uses wget.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-05-15 11:31:42 -04:00
Troy Dawson fb1c568fea Add WSL to ELN
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-05-01 02:57:18 +00:00
Janne Grunau 66b87054e8 grub2: Enable bls for all non-live images
This became necessary with 10.0.13 / after merging
https://github.com/OSInside/kiwi/pull/2535 but doesn't seem to
noticeable effects besides miisin "GRUB_ENABLE_BLSCFG=true" in
/etc/default/grub.
2025-04-29 22:36:27 +02:00
Jan Pazdziora 3589fa143a teams/cloud/container: Explicitly add shadow-utils.
Fixes https://pagure.io/fedora-kiwi-descriptions/issue/169,
https://bugzilla.redhat.com/show_bug.cgi?id=2355948.
2025-03-29 19:35:28 +01:00
Davide Cavalca e3a079f93f teams/asahi: add dbus-glib
This is needed for XUL-based applications to work (for example, Zotero).

Signed-off-by: Davide Cavalca <dcavalca@fedoraproject.org>
2025-03-28 15:25:45 -07:00
Simon de Vlieger 14689b3737 toolbox: include policycoreutils
It can be useful to have access to `setfiles` inside a `toolbx`
container. Especially when using them as bootstrap roots to setup
other trees.

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-03-23 21:11:18 +01:00
Zbigniew Jędrzejewski-SzmekandSimon de Vlieger 364b0b8f62 Drop /usr/local/sbin:/usr/sbin from $PATH
If $PATH is not set, we get the default from crun [1]:
  PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
This is not useful, because in the image, /bin, /sbin, /usr/sbin are all
symlinks. /usr/local/sbin does not exist.

When /usr/sbin is a symlink to /usr/bin, and we use have a $PATH with
/usr/sbin before /usr/bin, various tools will discover /usr/sbin/foo when
looking for 'foo' [2], which is confusing and ugly.

[1] https://github.com/containers/crun/blob/a980c89665bb488ff206e47e9083f75b48528714/src/libcrun/container.c#L183
[2] https://src.fedoraproject.org/rpms/setup/pull-request/18#comment-253719

Co-authored-by: Simon de Vlieger <cmdr@supakeen.com>
2025-03-19 14:50:50 +01:00
Allan 01b5342bb5 Phosh updates 2025-03-12 08:21:40 +00:00
Miro Hrončok 3fe7a48178 Block pypy3.10 from Python Classroom Lab
We have pypy3.11.
pypy3.9 was retired.

See https://bugzilla.redhat.com/2348737
2025-03-06 19:55:37 +01:00
Neal Gompa fcdcd34d50 components/boot, teams/server: Add partitioning hack for the Raspberry Pi 3
The Raspberry Pi 3 does not recognize a FAT filesystem marked with
the 0xef type, so until we drop support for this device, hack the
partition manually to use a legacy FAT filesystem partition type.
2025-02-20 14:46:28 -05:00
Neal Gompa 5844c5c608 teams/server: Bump the ESP size to 500 MB
Now that we have a lot more stuff installed in the ESP, we need
the ESP to be bigger. This matches the size used for the desktop
disk variants.
2025-02-20 14:15:26 -05:00
Neal Gompa ada197be81 components, teams/server: Use a common profile for hardware support
It is hard to ensure that hardware support packages are pulled in
universally when it's splintered across different variant profiles.

To fix this and ensure Server benefits from this, unify everything
into a common profile and make everything require it.
2025-02-20 14:15:26 -05:00
Neal Gompa 2cb33874d1 teams/server: Use ext4 for /boot for the AArch64 host disk image
U-Boot does not support XFS and this causes significant issues
when trying to boot Fedora Server on single board computers.

Resolve this by using ext4 here, as all U-Boot variants generally
support this.
2025-02-20 07:55:35 -05:00
Andrea Bolognani 7bbf6475e8 server: Remove console=ttyS0 from riscv64 images
Turns out that different boards needs different values, so
hardcoding a specific one here is not a good idea. Luckily,
Linux can usually figure things out on its own and automatically
provide a working serial console.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2025-02-19 19:15:14 +01:00
Simon de Vlieger 32a5d56825 naming: rename minimal -> tiny
This renames the minimal profile to "tiny", it's useful to have a
profile that builds quickly and provides a small artifact. However, the
minimal name mirrors the Fedora Minimal spin name and might confuse
people building images about what they're actually building.

The Tiny descriptions do not replicate the Fedora Minimal spin.

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-02-18 13:08:03 +00:00