constellation/image/base/mkosi.conf

[Distribution]
Distribution=fedora
Release=40
RepositoryKeyFetch=yes

[Output]
Format=tar
CompressOutput=false
Seed=b04a9a33-4559-4af4-8b38-9249cf933229

[Content]
SourceDateEpoch=0
Bootable=no
Packages=systemd
         systemd-boot
         dbus
         udev
         util-linux
         kernel
         kernel-core
         kernel-modules

# nvme / disk / udev tools
Packages=nvme-cli
         ec2-utils
         WALinuxAgent-udev
         google-compute-engine-guest-configs-udev # google_nvme_id
         device-mapper
         cryptsetup

# Containers
Packages=containerd
         containernetworking-plugins
         iptables-nft
         ethtool
         socat
         iproute-tc
         conntrack-tools
         podman

# Network
Packages=iproute
         dbus
         systemd-networkd
         systemd-resolved

# measured / secure boot
Packages=e2fsprogs
         sbsigntools
         efitools
         mokutil
         tpm2-tools

# selinux
Packages=selinux-policy
         selinux-policy-targeted

# tools
Packages=passwd
         nano
         nano-default-editor
         vim
         curl
         wget

RemoveFiles=/var/log
RemoveFiles=/var/cache
RemoveFiles=/etc/pki/ca-trust/extracted/java/cacerts
            /var/cache/ldconfig/aux-cache
RemoveFiles=/etc/issue
RemoveFiles=/etc/issue.net
image: base layer 2023-09-11 09:51:42 -04:00			`[Distribution]`
			`Distribution=fedora`
image: update to Fedora 40 (#3104) * deps: upgrade OS to Fedora 40 * image: measure uki sections uname and sbat for systemd >= 254 * deps: update mainline kernel for Fedora 40 * image: update kernel to 6.6.30 * image: update upload docs --------- Co-authored-by: Malte Poll <1780588+malt3@users.noreply.github.com> 2024-05-16 03:10:09 -04:00			`Release=40`
image: update mkosi to 24.3 (#3342) * flake: format * image: update mkosi to 24.3 This updates mkosi to a next-version of v24.3, which is now available in nixpkgs. This removes the non-hermetic `uidmap` dependency, which is a great advantage. It will also be less of an effort to upgrade to v25 going forward. Changes required are keeping `/var/cache` around (which is reproducible for our images, so no problem), as mkosi needs files from it in the build process. mkosi now additionally requires an explicit option to fetch the signing keys for the package repositories from the internet. A hack was required to satisfy the Bazel package, which should probably be solved properly at some point. 2024-09-09 05:18:51 -04:00			`RepositoryKeyFetch=yes`
image: base layer 2023-09-11 09:51:42 -04:00
			`[Output]`
			`Format=tar`
nix: update flake and use mkosi with sorted cpio 2023-12-11 07:49:10 -05:00			`CompressOutput=false`
image: move mkosi settings into their actual sections (#2471) mkosi now warns about what settings are defined in what sections. Soon, the config parsing might fail when settings are in the wrong sections. 2023-10-17 06:44:19 -04:00			`Seed=b04a9a33-4559-4af4-8b38-9249cf933229`
image: base layer 2023-09-11 09:51:42 -04:00
			`[Content]`
image: move mkosi settings into their actual sections (#2471) mkosi now warns about what settings are defined in what sections. Soon, the config parsing might fail when settings are in the wrong sections. 2023-10-17 06:44:19 -04:00			`SourceDateEpoch=0`
image: base layer 2023-09-11 09:51:42 -04:00			`Bootable=no`
			`Packages=systemd`
			`systemd-boot`
			`dbus`
			`udev`
			`util-linux`
image: update mkosi and use package directory feature 2024-02-16 07:10:46 -05:00			`kernel`
			`kernel-core`
			`kernel-modules`
image: base layer 2023-09-11 09:51:42 -04:00
			`# nvme / disk / udev tools`
			`Packages=nvme-cli`
			`ec2-utils`
			`WALinuxAgent-udev`
			`google-compute-engine-guest-configs-udev # google_nvme_id`
			`device-mapper`
			`cryptsetup`

			`# Containers`
			`Packages=containerd`
			`containernetworking-plugins`
			`iptables-nft`
			`ethtool`
			`socat`
			`iproute-tc`
			`conntrack-tools`
			`podman`

			`# Network`
			`Packages=iproute`
			`dbus`
			`systemd-networkd`
			`systemd-resolved`

			`# measured / secure boot`
			`Packages=e2fsprogs`
			`sbsigntools`
			`efitools`
			`mokutil`
			`tpm2-tools`

			`# selinux`
			`Packages=selinux-policy`
			`selinux-policy-targeted`

			`# tools`
			`Packages=passwd`
			`nano`
			`nano-default-editor`
			`vim`
			`curl`
			`wget`

			`RemoveFiles=/var/log`
			`RemoveFiles=/var/cache`
			`RemoveFiles=/etc/pki/ca-trust/extracted/java/cacerts`
			`/var/cache/ldconfig/aux-cache`
			`RemoveFiles=/etc/issue`
			`RemoveFiles=/etc/issue.net`