2022-10-19 07:10:15 -04:00
|
|
|
[Distribution]
|
|
|
|
|
Distribution=fedora
|
2022-11-17 06:12:00 -05:00
|
|
|
Release=37
|
2022-10-19 07:10:15 -04:00
|
|
|
|
|
|
|
|
[Output]
|
|
|
|
|
Format=gpt_squashfs
|
|
|
|
|
ManifestFormat=json,changelog
|
|
|
|
|
Bootable=yes
|
|
|
|
|
KernelCommandLine=mitigations=auto,nosmt preempt=full
|
|
|
|
|
WithUnifiedKernelImages=yes
|
|
|
|
|
Verity=yes
|
|
|
|
|
CompressFs=zstd
|
|
|
|
|
SplitArtifacts=yes
|
|
|
|
|
# Enable Secure Boot with own PKI
|
|
|
|
|
SecureBoot=yes
|
|
|
|
|
SecureBootKey=pki/db.key
|
|
|
|
|
SecureBootCertificate=pki/db.crt
|
|
|
|
|
# TODO: Wait for systemd 252 to bring systemd-measure
|
|
|
|
|
# Measure=yes
|
2022-11-16 09:45:10 -05:00
|
|
|
ImageId=constellation
|
|
|
|
|
Output=image.raw
|
2022-10-19 07:10:15 -04:00
|
|
|
|
|
|
|
|
[Host]
|
|
|
|
|
QemuHeadless=yes
|
