mkosi: Update to latest

The Bootable= option was removed and mkosi installs less packages
by default now, so let's adapt our configs to those changes.
This commit is contained in:
Daan De Meyer 2023-04-12 17:27:06 +02:00 committed by Luca Boccassi
parent 96ead603b8
commit fde55f3a32
9 changed files with 33 additions and 5 deletions

View File

@ -73,7 +73,7 @@ jobs:
steps: steps:
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
- uses: systemd/mkosi@ee7f2950a25fdaaa7027937c5d9f3df6761e9fd9 - uses: systemd/mkosi@779484101987048b820b07a6111bcb0e8d5ebc1d
- name: Configure - name: Configure
run: | run: |
@ -92,6 +92,9 @@ jobs:
systemd.journald.max_level_console=debug systemd.journald.max_level_console=debug
# udev's debug log output is very verbose, so up it to info in CI. # udev's debug log output is very verbose, so up it to info in CI.
udev.log_level=info udev.log_level=info
[Host]
ExtraSearchPaths=!*
EOF EOF
- name: Generate secure boot key - name: Generate secure boot key

View File

@ -1,7 +1,6 @@
# SPDX-License-Identifier: LGPL-2.1-or-later # SPDX-License-Identifier: LGPL-2.1-or-later
[Output] [Output]
Bootable=yes
# Prevent ASAN warnings when building the image and ship the real ASAN options prefixed with MKOSI_. # Prevent ASAN warnings when building the image and ship the real ASAN options prefixed with MKOSI_.
Environment=ASAN_OPTIONS=verify_asan_link_order=false Environment=ASAN_OPTIONS=verify_asan_link_order=false
MKOSI_ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1 MKOSI_ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1
@ -19,6 +18,7 @@ Packages=
diffutils diffutils
dnsmasq dnsmasq
dosfstools dosfstools
dracut
e2fsprogs e2fsprogs
findutils findutils
gcc # For sanitizer libraries gcc # For sanitizer libraries
@ -36,7 +36,9 @@ Packages=
qrencode qrencode
sed sed
strace strace
systemd
tree tree
udev
util-linux util-linux
valgrind valgrind
wireguard-tools wireguard-tools

View File

@ -8,6 +8,7 @@ Distribution=arch
[Content] [Content]
Packages= Packages=
alsa-lib alsa-lib
base
btrfs-progs btrfs-progs
compsize compsize
dhcp dhcp
@ -22,9 +23,11 @@ Packages=
libmnl libmnl
libpwquality libpwquality
libxkbcommon libxkbcommon
linux
man-db man-db
numactl numactl
openbsd-netcat openbsd-netcat
openssh
polkit polkit
popt popt
python-pefile python-pefile

View File

@ -20,6 +20,7 @@ Packages=
gnutls gnutls
iproute iproute
iproute-tc iproute-tc
kernel
kernel-modules-extra kernel-modules-extra
libasan libasan
libbpf libbpf
@ -33,6 +34,7 @@ Packages=
libxkbcommon libxkbcommon
netcat netcat
numactl-libs numactl-libs
openssh-server
p11-kit p11-kit
pam pam
passwd passwd
@ -42,6 +44,7 @@ Packages=
python3-docutils python3-docutils
quota quota
tpm2-tss tpm2-tss
util-linux
vim-common vim-common
BuildPackages= BuildPackages=

View File

@ -10,6 +10,8 @@ Release=testing
Packages= Packages=
btrfs-progs btrfs-progs
cryptsetup-bin cryptsetup-bin
dbus
default-dbus-session-bus
f2fs-tools f2fs-tools
fdisk fdisk
fuse fuse
@ -34,7 +36,9 @@ Packages=
libpwquality1 libpwquality1
libqrencode4 libqrencode4
libtss2-dev # Use the -dev package to avoid churn in updating version numbers libtss2-dev # Use the -dev package to avoid churn in updating version numbers
linux-image-cloud-amd64
netcat-openbsd netcat-openbsd
openssh-server
passwd passwd
policykit-1 policykit-1
procps procps
@ -42,6 +46,7 @@ Packages=
python3-psutil python3-psutil
python3-pytest python3-pytest
quota quota
systemd-sysv
xxd xxd
BuildPackages= BuildPackages=

View File

@ -21,6 +21,7 @@ Packages=
gnutls gnutls
iproute iproute
iproute-tc iproute-tc
kernel
libasan libasan
libbpf libbpf
libcap-ng libcap-ng
@ -34,6 +35,7 @@ Packages=
libxkbcommon libxkbcommon
netcat netcat
numactl-libs numactl-libs
openssh-server
pam pam
passwd passwd
polkit polkit
@ -44,6 +46,7 @@ Packages=
python3dist(pytest) python3dist(pytest)
quota quota
tpm2-tss tpm2-tss
util-linux
vim-common vim-common
BuildPackages= BuildPackages=

View File

@ -15,6 +15,7 @@ Packages=
gcc # Provides libasan/libubsan gcc # Provides libasan/libubsan
glibc-32bit glibc-32bit
glibc-locale-base glibc-locale-base
kernel-default
libasound2 libasound2
libbpf1 libbpf1
libcap-ng-utils libcap-ng-utils
@ -36,6 +37,7 @@ Packages=
libqrencode4 libqrencode4
libseccomp2 libseccomp2
libxkbcommon0 libxkbcommon0
openssh-server
pam pam
python3-pefile python3-pefile
python3-psutil python3-psutil

View File

@ -5,12 +5,14 @@ Distribution=ubuntu
[Distribution] [Distribution]
Release=jammy Release=jammy
Repositories=main,universe Repositories=universe
[Content] [Content]
Packages= Packages=
btrfs-progs btrfs-progs
cryptsetup-bin cryptsetup-bin
dbus
default-dbus-session-bus
f2fs-tools f2fs-tools
fdisk fdisk
fuse fuse
@ -36,7 +38,9 @@ Packages=
libtss2-dev # Use the -dev package to avoid churn in updating version numbers libtss2-dev # Use the -dev package to avoid churn in updating version numbers
linux-tools-common linux-tools-common
linux-tools-generic linux-tools-generic
linux-virtual
netcat-openbsd netcat-openbsd
openssh-server
passwd passwd
policykit-1 policykit-1
procps procps
@ -44,6 +48,7 @@ Packages=
python3-psutil python3-psutil
python3-pytest python3-pytest
quota quota
systemd-sysv
xxd xxd
BuildPackages= BuildPackages=

View File

@ -47,8 +47,10 @@ EOF
systemctl mask systemd-hwdb-update.service systemctl mask systemd-hwdb-update.service
fi fi
# Make sure dnsmasq.service doesn't start on boot on Debian/Ubuntu. # Make sure dnsmasq doesn't start on boot on Debian/Ubuntu.
rm -f /etc/systemd/system/multi-user.target.wants/dnsmasq.service systemctl disable dnsmasq
# Make sure sshd doesn't start on Opensuse.
echo "disable sshd.service" > /usr/lib/systemd/system-preset/00-mkosi.preset
if [ -n "$IMAGE_ID" ] ; then if [ -n "$IMAGE_ID" ] ; then
sed -n \ sed -n \