mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-09-20 00:06:21 +00:00
1a141c3972
For reproducibility reasons, the final OS image does not ship the rpm database in sqlite format. For supply chain security and license compliance reasons, we want to keep the rpm database of os images as a detached build artifact. We now ship a reproducible, human readable manifest of installed rpms in the image under "/usr/share/constellation/packagemanifest" and upload the full rpm database as a build artifact (rpmdb.tar).
67 lines
1.2 KiB
Plaintext
67 lines
1.2 KiB
Plaintext
[Distribution]
|
|
Distribution=fedora
|
|
Release=38
|
|
|
|
[Output]
|
|
Format=tar
|
|
Seed=b04a9a33-4559-4af4-8b38-9249cf933229
|
|
|
|
[Content]
|
|
SourceDateEpoch=0
|
|
Bootable=no
|
|
Packages=systemd
|
|
systemd-boot
|
|
dbus
|
|
udev
|
|
util-linux
|
|
|
|
# nvme / disk / udev tools
|
|
Packages=nvme-cli
|
|
ec2-utils
|
|
WALinuxAgent-udev
|
|
google-compute-engine-guest-configs-udev # google_nvme_id
|
|
device-mapper
|
|
cryptsetup
|
|
|
|
# Containers
|
|
Packages=containerd
|
|
containernetworking-plugins
|
|
iptables-nft
|
|
ethtool
|
|
socat
|
|
iproute-tc
|
|
conntrack-tools
|
|
podman
|
|
|
|
# Network
|
|
Packages=iproute
|
|
dbus
|
|
systemd-networkd
|
|
systemd-resolved
|
|
|
|
# measured / secure boot
|
|
Packages=e2fsprogs
|
|
sbsigntools
|
|
efitools
|
|
mokutil
|
|
tpm2-tools
|
|
|
|
# selinux
|
|
Packages=selinux-policy
|
|
selinux-policy-targeted
|
|
|
|
# tools
|
|
Packages=passwd
|
|
nano
|
|
nano-default-editor
|
|
vim
|
|
curl
|
|
wget
|
|
|
|
RemoveFiles=/var/log
|
|
RemoveFiles=/var/cache
|
|
RemoveFiles=/etc/pki/ca-trust/extracted/java/cacerts
|
|
/var/cache/ldconfig/aux-cache
|
|
RemoveFiles=/etc/issue
|
|
RemoveFiles=/etc/issue.net
|