mirrors/systemd
0
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-23 10:13:34 +08:00
Code Issues Packages Projects Releases Wiki Activity
f6793bbcf0
systemd/mkosi.conf

151 lines
3.8 KiB
Plaintext
Raw Normal View History

Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 23:05:06 +08:00
# SPDX-License-Identifier: LGPL-2.1-or-later
Update to mkosi v19 - Use mkosi.images/ instead of mkosi.presets/ - Use the .chroot suffix to run scripts in the image - Use BuildSources= match for the kernel build - Move 10-systemd.conf to mkosi.conf and rely on mkosi.local.conf for local configuration
2023-11-29 01:38:22 +08:00
[Config]
mkosi: bump mkosi MinimumVersion dbff64ddf06f64ab94bd314df27d6c089b75de52 bumped the hash to a commit after 24.3, so let's tell the users that 25~devel is the minimum required.
2024-09-20 22:14:08 +08:00
MinimumVersion=25~devel
mkosi: Introduce build image We want the exitrd image to be built with the latest systemd as well. As the exitrd image is built as part of mkosi.images, and all subimages are built before the main image, this implies the packages must be built as a subimage in mkosi.images/ as well. So we introduce the build image and move all logic related to building distribution packages there. This also has the nice side effect of slimming down the main image as the build dependencies are not installed into the main image anymore. It also makes sure the packages are built in a "clean" chroot without any of the other packages which we install in the main image available.
2024-07-12 21:33:49 +08:00
Dependencies=
exitrd
mkosi: Build initrd as a subimage Let's make things a little more consistent and build the initrd explicitly as a subimage as well instead of relying on mkosi building it as part of the main image build. We drop the opensuse initrd postinst script as we don't use erofs by default anymore. We can always reintroduce it again later if needed.
2024-07-16 18:07:38 +08:00
initrd
mkosi: Introduce build image We want the exitrd image to be built with the latest systemd as well. As the exitrd image is built as part of mkosi.images, and all subimages are built before the main image, this implies the packages must be built as a subimage in mkosi.images/ as well. So we introduce the build image and move all logic related to building distribution packages there. This also has the nice side effect of slimming down the main image as the build dependencies are not installed into the main image anymore. It also makes sure the packages are built in a "clean" chroot without any of the other packages which we install in the main image available.
2024-07-12 21:33:49 +08:00
minimal-base
minimal-0
minimal-1
PassEnvironment=
NO_BUILD
NO_SYNC
WIPE
SANITIZERS
CFLAGS
LDFLAGS
LLVM
MESON_VERBOSE
MESON_OPTIONS
SYSEXT
WITH_DEBUG
mkosi: Pass ASAN_OPTIONS to subimages systemd built with sanitizers is installed in subimages and tools might get invoked in postinstall scripts so we have to disable ASAN in the subimages as well during the image build.
2024-10-02 17:27:09 +08:00
ASAN_OPTIONS
mkosi: Only build system preset by default Let's not build all presets by default, but only the system preset. Also, let's only make the system preset depend on the initrd preset if we're building a bootable disk image. This means that if we build the system image as a cpio, uki or directory, the initrd preset will be skipped as it's not necessary, making the build a little faster.
2023-09-09 16:20:01 +08:00
Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 23:05:06 +08:00
[Output]
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
RepartDirectories=mkosi.repart
OutputDirectory=build/mkosi.output
mkosi: Fix sections for settings Upstream we moved settings around a bit to different sections, let's adapt to those changes in the systemd repo.
2024-10-04 20:22:35 +08:00
[Build]
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
BuildDirectory=build/mkosi.builddir
CacheDirectory=build/mkosi.cache
mkosi: Fix sections for settings Upstream we moved settings around a bit to different sections, let's adapt to those changes in the systemd repo.
2024-10-04 20:22:35 +08:00
BuildSourcesEphemeral=yes
Incremental=yes
mkosi: Move settings to right sections
2023-07-14 20:52:58 +08:00
mkosi: Update to latest
2024-10-04 20:22:27 +08:00
[Validation]
Rework TEST-86-MULTI-PROFILE-UKI Now that mkosi supports generating UKI profiles, let's make use of that to generate the UKI profiles required for the test instead of doing it within the test itself.
2024-10-04 22:46:16 +08:00
SignExpectedPcr=yes
mkosi: Update to latest
2024-10-04 20:22:27 +08:00
mkosi: Move settings to right sections
2023-07-14 20:52:58 +08:00
[Content]
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
ExtraTrees=
mkosi.crt:/usr/lib/verity.d/mkosi.crt # sysext verification key
mkosi.leak-sanitizer-suppressions:/usr/lib/systemd/leak-sanitizer-suppressions
mkosi.coredump-journal-storage.conf:/usr/lib/systemd/coredump.conf.d/10-coredump-journal-storage.conf
mkosi: Introduce build image We want the exitrd image to be built with the latest systemd as well. As the exitrd image is built as part of mkosi.images, and all subimages are built before the main image, this implies the packages must be built as a subimage in mkosi.images/ as well. So we introduce the build image and move all logic related to building distribution packages there. This also has the nice side effect of slimming down the main image as the build dependencies are not installed into the main image anymore. It also makes sure the packages are built in a "clean" chroot without any of the other packages which we install in the main image available.
2024-07-12 21:33:49 +08:00
%O/minimal-0.root-%a.raw:/usr/share/minimal_0.raw
%O/minimal-0.root-%a-verity.raw:/usr/share/minimal_0.verity
%O/minimal-0.root-%a-verity-sig.raw:/usr/share/minimal_0.verity.sig
%O/minimal-1.root-%a.raw:/usr/share/minimal_1.raw
%O/minimal-1.root-%a-verity.raw:/usr/share/minimal_1.verity
%O/minimal-1.root-%a-verity-sig.raw:/usr/share/minimal_1.verity.sig
%O/minimal-base:/usr/share/TEST-13-NSPAWN-container-template
%O/exitrd:/exitrd
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
mkosi: Build initrd as a subimage Let's make things a little more consistent and build the initrd explicitly as a subimage as well instead of relying on mkosi building it as part of the main image build. We drop the opensuse initrd postinst script as we don't use erofs by default anymore. We can always reintroduce it again later if needed.
2024-07-16 18:07:38 +08:00
Initrds=%O/initrd
TEST-06-SELINUX: Various fixes - Stop installing the policy in the initramfs as it's not really supported anyway (https://github.com/fedora-selinux/selinux-policy/issues/2221) - Stop relabeling on first boot and prefer to do it at image build time - Disable mkosi relabeling by default but enable it in CI - Build image as root in CI so the SELinux relabeling works properly
2024-07-09 18:26:11 +08:00
# Disable relabeling by default as it only matters for TEST-06-SELINUX, takes a non-trivial amount of time
# and results in lots of errors when building images as a regular user.
SELinuxRelabel=no
mkosi: Add note about kernel command line limit
2024-05-31 23:26:01 +08:00
# Adding more kernel command line arguments is likely to hit the kernel command line limit (512 bytes) in
# various scenarios. Consider adding support for a credential instead if possible and using that.
mkosi: Fix formatting All of our lists start on the next line, so let's make KernelCommandLine= fit that as well.
2024-07-18 18:47:51 +08:00
KernelCommandLine=
systemd.crash_shell
systemd.log_level=debug,console:info
systemd.log_ratelimit_kmsg=0
# Disable the kernel's ratelimiting on userspace logging to kmsg.
printk.devkmsg=on
# Make sure /sysroot is mounted rw in the initrd.
rw
# Lower the default device timeout so we get a shell earlier if the root device does
# not appear for some reason.
mkosi: Bump device timeout even more I still manage to hit it in some cases so let's bump again.
2024-07-23 20:16:23 +08:00
systemd.default_device_timeout_sec=90
mkosi: Fix formatting All of our lists start on the next line, so let's make KernelCommandLine= fit that as well.
2024-07-18 18:47:51 +08:00
# Make sure no LSMs are enabled by default.
selinux=0
systemd.early_core_pattern=/core
systemd.firstboot=no
raid=noautodetect
oops=panic
panic=-1
softlockup_panic=1
panic_on_warn=1
# These don't ship proper units with [Install] directives so we have to mask them instead.
systemd.mask=isc-dhcp-server.service
systemd.mask=mdmonitor.service
psi=1
mkosi: Build command line into the image This allows using systemd-vmspawn itself while still getting a decent experience.
2024-04-19 19:25:31 +08:00
mkosi: Include fewer modules in the initramfs Let's only use mkosi's default list of modules instead of all of them.
2024-06-06 00:22:22 +08:00
KernelModulesInitrdExclude=.*
KernelModulesInitrdInclude=default
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
Packages=
acl
attr
bash-completion
mkosi: Install binutils
2024-07-15 04:56:43 +08:00
binutils
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
coreutils
curl
diffutils
dnsmasq
dosfstools
e2fsprogs
findutils
gdb
grep
gzip
jq
kbd
kexec-tools
kmod
less
mkosi: Install llvm For llvm-symbolizer which is required to sanitize address sanitizer reports.
2024-08-09 03:48:34 +08:00
llvm
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
lvm2
man
mdadm
mtools
nano
nftables
nvme-cli
opensc
openssl
p11-kit
pciutils
python3
radvd
rsync
sed
socat
strace
tar
tmux
tree
util-linux
valgrind
which
wireguard-tools
xfsprogs
zsh
zstd
Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 23:05:06 +08:00
[Host]
mkosi: Switch to autologin via credentials Let's use the newly added credentials to only enable autologin for /dev/console (systemd-nspawn) and /dev/hvc0 (qemu) instead of enabling autologin for every tty.
2024-07-31 23:38:12 +08:00
Credentials=
journal.storage=persistent
tty.serial.hvc0.agetty.autologin=root
tty.serial.hvc0.login.noauth=yes
tty.console.agetty.autologin=root
tty.console.login.noauth=yes
mkosi: Adapt configuration to take into account configuration rework In https://github.com/systemd/mkosi/pull/2847, the '@' specifier is removed, CLI arguments take priority over configuration files again and the "main" image is defined at the top level instead of in mkosi.images/. Additionally, not every setting from the top level configuration is inherited by the images in mkosi.images/ anymore, only settings which make sense to be inherited are inherited. This commit gets rid of all the usages of '@', moves the "main" image configuration from mkosi.images/system to the top level and gets rid of various hacks we had in place to deal with quirks of the old configuration parsing logic. We also remove usages of Images= and --append as these options are removed by the mentioned PR.
2024-07-08 18:59:52 +08:00
RuntimeBuildSources=yes
RuntimeScratch=no
QemuSmp=2
QemuSwtpm=yes
QemuVsock=yes
QemuKvm=yes
Reference in New Issue Copy Permalink