mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-10-01 01:36:09 -04:00
1a141c3972
For reproducibility reasons, the final OS image does not ship the rpm database in sqlite format. For supply chain security and license compliance reasons, we want to keep the rpm database of os images as a detached build artifact. We now ship a reproducible, human readable manifest of installed rpms in the image under "/usr/share/constellation/packagemanifest" and upload the full rpm database as a build artifact (rpmdb.tar).
40 lines
856 B
Plaintext
40 lines
856 B
Plaintext
[Distribution]
|
|
Distribution=fedora
|
|
Release=38
|
|
|
|
[Output]
|
|
Format=cpio
|
|
Output=image
|
|
Seed=b04a9a33-4559-4af4-8b38-9249cf933229
|
|
|
|
[Content]
|
|
SourceDateEpoch=0
|
|
MakeInitrd=yes
|
|
Bootable=no
|
|
Packages=systemd
|
|
systemd-networkd
|
|
systemd-resolved
|
|
systemd-udev
|
|
dbus
|
|
util-linux
|
|
gzip
|
|
kmod
|
|
tpm2-tools
|
|
curl # for azure provision service
|
|
# nvme / disk / udev tools
|
|
Packages=udev
|
|
nvme-cli
|
|
ec2-utils
|
|
WALinuxAgent-udev
|
|
xxd
|
|
google-compute-engine-guest-configs-udev # google_nvme_id
|
|
device-mapper
|
|
cryptsetup
|
|
|
|
RemoveFiles=/var/log
|
|
RemoveFiles=/var/cache
|
|
RemoveFiles=/etc/pki/ca-trust/extracted/java/cacerts
|
|
/usr/lib/sysimage/libdnf5/transaction_history.sqlite*
|
|
/var/cache/ldconfig/aux-cache
|
|
CleanPackageMetadata=true
|