Commit Graph
83 Commits
Author SHA1 Message Date
Debarshi Ray e6ef81877e teams/cloud/container: Don't explicitly install p11-kit for Toolbx
The p11-kit RPM is neither explicitly mentioned in the list of default
RPMs on Fedora Silverblue and Workstation [1], nor was it explicitly
installed by the Container/Dockerfile equivalent of the fedora-toolbox
OCI images [2].

The Container/Dockerfile listed p11-kit as one of the RPMs that had to
be reinstalled, because it was inherited from the fedora base image, and
had its documentation and translations stripped out.  The reinstallation
would be skipped if for some reason it was no longer part of the fedora
base image.

This was misinterpreted when creating the Kickstart equivalent of the
fedora-toolbox OCI images [3] and that's how it ended up in the KIWI
description.

In reality, p11-kit gets pulled in as a dependency of ca-certificates,
gnutls, etc. and that's sufficient.

Fallout from d27e4c3f6c

[1] https://pagure.io/fedora-comps/

[2] https://src.fedoraproject.org/container/fedora-toolbox

[3] fedora-kickstarts commit 48e2c3b5598de32f
    https://pagure.io/fedora-kickstarts/c/48e2c3b5598de32f
    https://pagure.io/fedora-kickstarts/pull-request/964
    https://pagure.io/releng/issue/11399

https://pagure.io/fedora-kiwi-descriptions/pull-request/189
2025-05-28 15:31:39 +02:00
Jeremy Cline bbb0824283 wsl: Add wget to the default package set
Although we include curl, some folks expect wget. Also, one of the more
common uses of WSL is in combination with VS Code, and its setup script
on remote hosts uses wget.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-05-15 11:31:42 -04:00
Troy Dawson fb1c568fea Add WSL to ELN
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2025-05-01 02:57:18 +00:00
Janne Grunau 66b87054e8 grub2: Enable bls for all non-live images
This became necessary with 10.0.13 / after merging
https://github.com/OSInside/kiwi/pull/2535 but doesn't seem to
noticeable effects besides miisin "GRUB_ENABLE_BLSCFG=true" in
/etc/default/grub.
2025-04-29 22:36:27 +02:00
Jan Pazdziora 3589fa143a teams/cloud/container: Explicitly add shadow-utils.
Fixes https://pagure.io/fedora-kiwi-descriptions/issue/169,
https://bugzilla.redhat.com/show_bug.cgi?id=2355948.
2025-03-29 19:35:28 +01:00
Davide Cavalca e3a079f93f teams/asahi: add dbus-glib
This is needed for XUL-based applications to work (for example, Zotero).

Signed-off-by: Davide Cavalca <dcavalca@fedoraproject.org>
2025-03-28 15:25:45 -07:00
Simon de Vlieger 14689b3737 toolbox: include policycoreutils
It can be useful to have access to `setfiles` inside a `toolbx`
container. Especially when using them as bootstrap roots to setup
other trees.

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-03-23 21:11:18 +01:00
Zbigniew Jędrzejewski-SzmekandSimon de Vlieger 364b0b8f62 Drop /usr/local/sbin:/usr/sbin from $PATH
If $PATH is not set, we get the default from crun [1]:
  PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
This is not useful, because in the image, /bin, /sbin, /usr/sbin are all
symlinks. /usr/local/sbin does not exist.

When /usr/sbin is a symlink to /usr/bin, and we use have a $PATH with
/usr/sbin before /usr/bin, various tools will discover /usr/sbin/foo when
looking for 'foo' [2], which is confusing and ugly.

[1] https://github.com/containers/crun/blob/a980c89665bb488ff206e47e9083f75b48528714/src/libcrun/container.c#L183
[2] https://src.fedoraproject.org/rpms/setup/pull-request/18#comment-253719

Co-authored-by: Simon de Vlieger <cmdr@supakeen.com>
2025-03-19 14:50:50 +01:00
Allan 01b5342bb5 Phosh updates 2025-03-12 08:21:40 +00:00
Miro Hrončok 3fe7a48178 Block pypy3.10 from Python Classroom Lab
We have pypy3.11.
pypy3.9 was retired.

See https://bugzilla.redhat.com/2348737
2025-03-06 19:55:37 +01:00
Neal Gompa fcdcd34d50 components/boot, teams/server: Add partitioning hack for the Raspberry Pi 3
The Raspberry Pi 3 does not recognize a FAT filesystem marked with
the 0xef type, so until we drop support for this device, hack the
partition manually to use a legacy FAT filesystem partition type.
2025-02-20 14:46:28 -05:00
Neal Gompa 5844c5c608 teams/server: Bump the ESP size to 500 MB
Now that we have a lot more stuff installed in the ESP, we need
the ESP to be bigger. This matches the size used for the desktop
disk variants.
2025-02-20 14:15:26 -05:00
Neal Gompa ada197be81 components, teams/server: Use a common profile for hardware support
It is hard to ensure that hardware support packages are pulled in
universally when it's splintered across different variant profiles.

To fix this and ensure Server benefits from this, unify everything
into a common profile and make everything require it.
2025-02-20 14:15:26 -05:00
Neal Gompa 2cb33874d1 teams/server: Use ext4 for /boot for the AArch64 host disk image
U-Boot does not support XFS and this causes significant issues
when trying to boot Fedora Server on single board computers.

Resolve this by using ext4 here, as all U-Boot variants generally
support this.
2025-02-20 07:55:35 -05:00
Andrea Bolognani 7bbf6475e8 server: Remove console=ttyS0 from riscv64 images
Turns out that different boards needs different values, so
hardcoding a specific one here is not a good idea. Luckily,
Linux can usually figure things out on its own and automatically
provide a working serial console.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2025-02-19 19:15:14 +01:00
Simon de Vlieger 32a5d56825 naming: rename minimal -> tiny
This renames the minimal profile to "tiny", it's useful to have a
profile that builds quickly and provides a small artifact. However, the
minimal name mirrors the Fedora Minimal spin name and might confuse
people building images about what they're actually building.

The Tiny descriptions do not replicate the Fedora Minimal spin.

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-02-18 13:08:03 +00:00
Asahi Lina 737d8274e0 teams/asahi: Add libgpg-error
This is a tiny package (250kB) that seems to be a relatively common
dependency (it just provides error codes and some common helpers, used
by stuff other than gpg itself).
2025-02-09 18:50:43 +09:00
David Abdurachmanov b5d377d912 Initial riscv64 support
Most of the changes are self-explanatory and just follow what's
already happening for existing architectures.

Two things are worth pointing out:

  * we need to use shim-unsigned instead of shim-signed because
    riscv64 is not fully integrated into Fedora yet and so we
    can't do Secure Boot signing for the time being;

  * we use ext4 as bootfilesystem since in most cases the
    underlying firmware is going to be U-Boot, which needs to be
    able to load the board's DTB from /boot and doesn't support
    XFS.

Signed-off-by: David Abdurachmanov <davidlt@rivosinc.com>
2025-02-07 15:06:22 +01:00
Jeremy Cline 4b4a83b33f Add a WSL definition and config snippets
This introduces the beginnings of an image definition for Windows
Subsystem for Linux (WSL).

The package list is based on the core and standard grouplists. Some
packages, like the kernel, dracut, and so on, are omitted as they are
unnecessary. Others, like audit, don't work in the environment. Finally,
many packages are omitted since I thought "people probably won't want
that", so the package list is completely up for debate. This is just a
reasonable starting point that works.

Build/test instructions:

To build the tarball:

  $ ./kiwi-build --image-profile=WSL-Base --image-type=tbz --output-dir=./build/

Get it to a Windows host with WSL installed. To boot it with cgroupsv2,
add the following to `.wslconfig` in the Windows host home folder:

[wsl2]
kernelCommandLine=systemd.unified_cgroup_hierarchhy=1 cgroup_no_v1=all

This assumes the latest WSL release is installed, at least version 2.4.4:

  $ wsl --install --from-file .\path\to\the\fedora.tar.xz

Alternatively, if you're using something prior to version 2.4.4:

  $ wsl --import --version=2 Fedora C:\path\to\storage\Fedora\ .\path\to\the\fedora.tar.xz

Finally, run it with:

  $ wsl -d Fedora

If you are using 2.4.4+, you will be prompted for a username and then
dropped into an interactive shell with that user and passwordless sudo
access.

If you're using an older version, you need to do:

  $ wsl -d Fedora -u root
  # /usr/libexec/wsl/oobe.sh

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-01-31 10:52:54 -05:00
Neal Gompa 90f4f3a820 Add Fedora Scientific variants
This is ported over from the kickstart definitions.
2025-01-27 19:38:49 -05:00
Andrea Bolognani b81b830770 server: Set bootloader timeout to 3s and show menu
While cloud images can usually be booted without any issues and
for workstation installs we want a visually polished experience,
in the case of server installs on real hardware it is generally
expected to have convenient access to the bootloader menu for
troubleshooting purposes.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2025-01-27 14:36:05 +01:00
Yaakov Selkowitz 9fed79138a teams/eln/container: Install standalone sysusers for base containers
This avoids a dependency on the full systemd package for non-init
containers.
2025-01-23 18:46:23 -05:00
Neal Gompa a74ebe5098 Add Minimal disk image
This is an example that can be used for creating small disk images
to verify that the basics work.
2025-01-22 19:58:08 +00:00
Neal Gompa 1f35331b84 teams/cloud/container: Install standalone sysusers for base containers
This avoids a dependency on the full systemd package for non-init
containers.
2025-01-22 13:01:27 -05:00
Neal Gompa 01b6f436c2 Add Python Classroom Lab variant
This is a port over from the kickstart definitions.
2025-01-14 12:30:13 -05:00
Neal Gompa fe9f770c85 teams/workstation: Use web-based Anaconda UI by default for live media
Reference: https://fedoraproject.org/wiki/Changes/AnacondaWebUIforFedoraWorkstation
2025-01-13 11:47:38 -05:00
Neal Gompa e69c665481 teams/asahi: FEX: Switch SDL2 for sdl2-compat
Reference: https://fedoraproject.org/wiki/Changes/SDL2onSDL3
2025-01-13 08:37:54 -05:00
Neal Gompa 7f04952a02 Add COSMIC spin variants
Reference: https://fedoraproject.org/wiki/Changes/FedoraCOSMIC
2025-01-10 15:11:08 -05:00
Neal Gompa 1f496fc743 components: Introduce a BaseCommon profile
This is where the lowest level common denominator configuration
goes for most images go.
2024-12-13 10:18:06 -05:00
Asahi Lina bb3a746dda teams/asahi: FEX: Add xim support for GTK2/3
We're currently shipping GTK2/3 libs in the rootfs. While we're doing
that, let's also install XIM support, which actually works through X11
passthrough with muvm. This should generally make legacy GTK x86_64
apps have input method support the old-fashioned way.

Modern apps should use the Wayland input method protocol stuff, which is
already built into GTK3/GTK4 and should not require any extra shared
libraries for FEX. For muvm, that will work once we have Wayland
passthrough.
2024-12-09 23:53:30 +09:00
Neal Gompa 649ac3e121 teams/server: Split out ServerDisk aarch64 profile to force MBR
Many of the older supported AArch64 systems (particularly single
board computers) require a legacy MBR (Master Boot Record) type
partitioning to successfully boot.
2024-11-26 06:40:06 -05:00
Adam Williamson 4943dc58a8 Fix a line ordering error in lxde.xml
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-11-23 15:02:47 -08:00
Neal Gompa 6816c7d501 teams: Add install disk profiles for all desktop teams
KDE and MiracleWM teams already have it, so this just fills it in
for the rest of them.
2024-11-23 16:41:30 -05:00
Asahi Lina 2efe56a38f teams/asahi: FEX: Clean up some redundant FEX packages
ibus: This is an input method, which is a user choice. It doesn't make
sense to ship some input method libs and not others. These libs
typically communicate with the main IM daemon over UNIX sockets, so this
won't work anyway without additional work. (This might cause some
spurious errors as the guest tries to load the nonexistent IM, but we
can ignore them since it wouldn't work anyway).

xdg-desktop-portal: This is just data and executables, no libraries, so
it makes no sense for FEX.

glibc-langpack-en, kbd-misc: Only needed for kiwi, add a comment

zenity: Used by Steam but it's just a binary, so this should be an
aarch64 dependency, not run emulated.

llvm 14 & 15: I don't think there's a good reason to ship these? Any
reasonable binary-packaged app shouldn't be depending on specific LLVM
versions like this. Let's keep llvm18 & 19 since 18 is used by our Mesa
builds.

sudo & rsync: Binaries only (and sudo doesn't even work, neither under
emulation nor plain in muvm).

dbus: What we really need is the libs, so replace with that. dbus
probably won't do what we want inside the container, but for many use
cases dbus is not critical so it's okay for things to fail as long as
the libs are there.

spirv-tools-devel: Replace with spirv-tools-libs (dep)
glew-devel: Replace with libGLEW (dep)
2024-11-17 17:14:46 +00:00
Neal Gompa 400c842f0a Add Fedora Server generic guest and host image descriptions
This is loosely based on the Server kickstart and ELN descriptions.
This covers both the disk image for running on ARM hardware as well
as the VM image for running on various hypervisor platforms.
2024-11-13 18:30:06 +00:00
Asahi Lina b5ce3af2e2 Add missing SDL2 libs to rootfs
Besides the base lib, apps sometimes need the add-on ones.
2024-10-30 19:12:09 +09:00
Davide Cavalca 003ec5a583 Add some more missing libs to FEX rootfs 2024-10-06 08:32:44 -07:00
Asahi Lina 304fb73f74 Add missing libs to FEX rootfs
These are used by random i686/x86_64 software, particularly things
built with Qt (which usually ship Qt itself but not these).
2024-10-02 12:36:44 +02:00
Davide Cavalca 03aacd1818 Add FEX-RootFS definition
Add a new definition for a RootFS to be used by FEX (https://src.fedoraproject.org/rpms/fex-emu). This is based on the upstream manifest (https://github.com/FEX-Emu/RootFS/blob/main/Configs/Fedora_40.json).

Signed-off-by: Alyssa Rosenzweig <alyssa@rosenzweig.io>
2024-09-28 15:10:02 -07:00
Jeremy Cline 5fe8b10e98 Azure: include azure-vm-utils package in the image
This package is intended to be the place for Azure utilities along with
the various udev rules that currently live in the WALinuxAgent package.

At the moment it just contains the `azure-nvme-id` binary and udev rules
for providing symlinks in /dev/disk/azure/ for local, data, and
OS disks.
2024-09-25 08:52:25 -07:00
Neal Gompa 4a1dfbe178 Add initial configuration for MiracleWM spin
Reference: https://fedoraproject.org/wiki/Changes/FedoraMiracle
2024-08-22 11:20:22 -04:00
Stephen Gallagher 8af7cf6d8b Add cloud image support for ELN
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2024-08-22 10:20:33 -04:00
Stephen Gallagher 7f81d5bf32 Add ELN container
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2024-08-22 10:17:35 -04:00
Troy Dawson 40e3039216 Initial KDE Plasma Mobile Spin import
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2024-07-31 15:25:37 -07:00
Neal Gompa 3af429672c teams/kde: Rework to add disk image build
This adds a disk image build profile to produce Fedora KDE images.
Additionally, these profiles are now tested in CI.
2024-07-24 07:13:41 -04:00
Romain Geissler d16b188a4d Introduce a new "fedora-init" image, which is fedora + systemd.
This is similar to "ubi-init" on UBI/RHEL side.

Fixes BZ 2278884.
2024-07-01 07:58:26 +00:00
Pavel Raiskup 0f501932e7 Add dnf5-plugins into the generic container
[root@ba1ab1388008 /]# dnf5 install dnf5-plugins  --setopt=install_weak_deps=False
...
Total size of inbound packages is 2 MiB. Need to download 2 MiB.
After this operation 13 MiB will be used (install 13 MiB, remove 0 B).
...

Fixes: https://pagure.io/releng/issue/12105
Fixes: https://pagure.io/releng/issue/12106
2024-07-01 09:22:08 +02:00
Dan Horák dcc4f3c6f9 cloud: updates for s390x
updates for "virtual image" usable under KVM
- don't use 4k block size
- don't use CDL partitioning
- don't use DASD related kernel parameters
2024-06-03 15:36:44 +00:00
Dan Horák 7ba0ead9bd cloud: don't use 4k block size on ppc64le 2024-06-03 16:02:34 +02:00
Adam Williamson 47dd0aa761 Disable systemd-firstboot on Cloud images via cmdline (#2282195)
systemd 256 added a new feature which wants to create users on
boot if none exist yet:
https://github.com/systemd/systemd/commit/3ccadbce3358ba1db7ce5fa3f8dd17c627ffd93b
We don't want that, cloud-init handles this situation. So let's
disable it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-05-22 08:15:12 -07:00