2022-10-19 13:10:15 +02:00
|
|
|
[Distribution]
|
|
|
|
Distribution=fedora
|
2022-11-17 12:12:00 +01:00
|
|
|
Release=37
|
2022-10-19 13:10:15 +02:00
|
|
|
|
|
|
|
[Output]
|
|
|
|
Format=gpt_squashfs
|
|
|
|
ManifestFormat=json,changelog
|
|
|
|
Bootable=yes
|
2023-01-04 17:48:27 +01:00
|
|
|
KernelCommandLine=mitigations=auto,nosmt preempt=full loglevel=8
|
2022-10-19 13:10:15 +02:00
|
|
|
WithUnifiedKernelImages=yes
|
|
|
|
Verity=yes
|
|
|
|
CompressFs=zstd
|
|
|
|
SplitArtifacts=yes
|
|
|
|
# Enable Secure Boot with own PKI
|
|
|
|
SecureBoot=yes
|
|
|
|
SecureBootKey=pki/db.key
|
|
|
|
SecureBootCertificate=pki/db.crt
|
|
|
|
# TODO: Wait for systemd 252 to bring systemd-measure
|
|
|
|
# Measure=yes
|
2022-11-16 15:45:10 +01:00
|
|
|
ImageId=constellation
|
|
|
|
Output=image.raw
|
2022-10-19 13:10:15 +02:00
|
|
|
|
|
|
|
[Host]
|
|
|
|
QemuHeadless=yes
|