Commit Graph

126 Commits

Author SHA1 Message Date
Benjamin Sherman
d128e253fc docs: update SecureBoot to include zfs
Relates: #16
2024-01-06 14:50:01 -06:00
Benjamin Sherman
6d7dc9eadc Merge pull request #107 from ublue-os/sign-nvidia
feat: add package with secure boot public signing key
2023-12-30 18:09:30 -06:00
Benjamin Sherman
e2c3195f61 docs: add SecureBoot info to README 2023-12-30 18:06:10 -06:00
Benjamin Sherman
210a6a33dd feat: add package with secure boot public signing key
Add the new package from `ucore-kmods` which includes the signing key.
This enables a user to import the signing key as a MOK using:

sudo mokutil --import /etc/pki/akmods/certs/akmods-ublue.der

Closes #82
2023-12-30 17:57:48 -06:00
dependabot[bot]
22c9131984 chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (#104)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-20 16:30:12 -06:00
Benjamin Sherman
e56ae7cd87 Merge pull request #105 from ublue-os/zfs-depmod
fix: run depmod after installing ZFS RPMs
2023-12-20 11:48:53 -06:00
Benjamin Sherman
f95763315c docs: reflect zfs 2.2 change 2023-12-20 11:33:11 -06:00
Benjamin Sherman
9846f74357 fix: run depmod after installing ZFS RPMs
With zfs 2.1.x, depmod ran automatically. Though unclear why, it no longer
seems to occur when installing zfs 2.2.x RPMs in a container build (it does
still work automatically on a non image-based Fedora system).

Manually running depmod, as in this commit, ensures the 2.2.x kmods load
as expected.
2023-12-20 11:32:10 -06:00
Benjamin Sherman
3adfd6c902 fix: enable ublue-nvctk-cdi by default for nvidia images (#103) 2023-12-11 10:17:16 -06:00
Benjamin Sherman
3f3876e509 chore: longer retry to mitigate occasional issues with github installs (#99) 2023-11-20 15:42:28 -06:00
dependabot[bot]
7ce6f35cc6 chore(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#98)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-20 12:50:31 -06:00
dependabot[bot]
9a109992e0 chore(deps): bump ASzc/change-string-case-action from 5 to 6 (#96)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-12 14:28:48 -06:00
Benjamin Sherman
c1243056f4 feat: add generic fcos build with nvidia (#95) 2023-10-19 11:41:32 -05:00
Benjamin Sherman
ee9297e231 chore(ci): add a job to use for check of full success (#94) 2023-10-18 20:39:20 -05:00
Benjamin Sherman
6eebffe94e feat: primary ucore image now has most features (#93) 2023-10-18 19:53:16 -05:00
Benjamin Sherman
776928c15e fix: add service to reload podman network on firewalld changes (#91) 2023-10-17 14:48:41 -05:00
Benjamin Sherman
b0c2e183b1 chore: this stanza was duplicated (#89) 2023-10-17 13:34:08 -05:00
Benjamin Sherman
a1267cb284 chore: ci workflow tweaks (#85) 2023-10-06 16:03:25 -05:00
Benjamin Sherman
d59eec6208 docs: tweak zfs upstream link (#84) 2023-10-06 15:09:40 -05:00
Benjamin Sherman
fde1950fff docs: correct toolkit typo 2023-10-05 23:04:38 -05:00
Benjamin Sherman
56b1a0f80c feat: add nvidia builds to ucore (#66)
it's about time
2023-10-05 22:08:00 -05:00
Benjamin Sherman
efc6ba4dad refactor: main and hci now follow common patterns (#81)
moves all system installed files to '/usr' including systemd units

use common packages.sh to install from packages.json in standard manner

incidentally fixes mergerfs not getting installed due to typo in github-release-install.sh
2023-10-05 09:37:53 -05:00
Benjamin Sherman
afc151fc29 refactor: ensure packages.json override/replace works (#80) 2023-10-03 22:41:39 -05:00
Benjamin Sherman
9200b0c4b7 docs: add snapraid to README (#77) 2023-09-22 21:07:03 -05:00
Benjamin Sherman
544f4ee362 feat: add snapraid (#76) 2023-09-22 21:03:47 -05:00
Benjamin Sherman
b9d20cd096 feat: add udev rules for 2.5G realtek usb (#75) 2023-09-19 20:37:57 -05:00
dependabot[bot]
0779f2c545 chore(deps): bump docker/metadata-action from 4 to 5 (#73)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 10:59:20 +02:00
dependabot[bot]
9b32a55d9f chore(deps): bump docker/login-action from 2 to 3 (#74)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 10:59:00 +02:00
Benjamin Sherman
ecbd139323 feat: add intel wifi firmware (#72)
Had a user bring this up in Discord chat. It seemed odd to me that Atheros wifi would work out of the box but not Intel.

Including in ucore-hci for hardware enablement, but not in ucore to keep with the theme of minimal base/VM image.
2023-09-14 18:45:15 -05:00
Benjamin Sherman
7b16e0432b feat: better define image goals (#71)
Updated README with better definitions:

ucore is more minimal for VM or BareMetal container host
ucore-hci is for hypervisor or storage host
As a result made a few changes:

moved a few storage packages to ucore-hci (duperemove, mergerfs)
only install sanoid deps when installing ZFS
2023-09-14 17:11:26 -05:00
dependabot[bot]
1c8861bfb4 chore(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#69)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-12 09:26:54 -05:00
dependabot[bot]
99ecf12dbe chore(deps): bump actions/checkout from 3 to 4 (#70)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-12 09:26:25 -05:00
Benjamin Sherman
74dc4bcb29 refactor: rpmfusion was added prematurely (#68) 2023-08-22 23:02:03 -05:00
Benjamin Sherman
c3f0803a7a refactor: reorganize build scripts add repos (#65) 2023-08-19 16:50:55 -05:00
Benjamin Sherman
8fc3d906a5 fix: fcos-zfs workflow now uses correct path (#63) 2023-08-10 09:54:25 -05:00
Benjamin Sherman
e3db65cede fix: improve handling of zfs tag for images (#62) 2023-08-09 23:58:35 -05:00
Benjamin Sherman
ab204e5add feat: create ucore builds with and without ZFS (#61) 2023-08-09 21:01:08 -05:00
Benjamin Sherman
62e0dffffe install ZFS from ucore-kmods (#60)
In addition to removing the ZFS RPM build from this repo to consume ZFS RPMs from `ucore-kmods` image, this PR starts building a stock `fedora-coreos` image with only ZFS added.
2023-08-09 14:38:53 -05:00
dependabot[bot]
d773fd8287 chore(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 (#58)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 16:43:51 -04:00
Benjamin Sherman
10830eed35 fix: ignore github prereleases for zfs (#57) 2023-07-03 09:59:20 -05:00
Jorge O. Castro
a9622781d1 Merge pull request #56 from ublue-os/dependabot/github_actions/sigstore/cosign-installer-3.1.0
chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0
2023-06-27 22:57:23 -04:00
dependabot[bot]
cd9d69575a chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.5 to 3.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.5...v3.1.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 20:02:04 +00:00
Benjamin Sherman
650f22beae docs: add note about zincati failures with OCI (#53) 2023-05-25 09:59:50 -05:00
dependabot[bot]
bcedb810b6 chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.5 (#52)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.3 to 3.0.5.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.3...v3.0.5)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 09:01:55 -05:00
Benjamin Sherman
b6621e9e93 feat: add vm guest packages (#51)
Add qemu-guest agent and open-vm-tools.

Verified that though enabled by default, on bare-metal, the conditions
for these services fail, so they aren't running in background.
2023-05-15 23:40:04 -05:00
Nitrousoxide
6e5679f3dd feat: replace cockpit.service with cockpit quadlet-like service (#50)
cat'd out quadlet generated service file and placed back in `/etc/systemd/system` with autoupdate label instead of using actual quadlet in `/etc/containers/systemd` allowing service to be disabled by default.
2023-05-15 23:26:36 -05:00
dependabot[bot]
bd5d753a89 chore(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 (#48)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 20:09:53 -05:00
Benjamin Sherman
56e6ce6003 chore(ci): turn on dependabot (#47) 2023-05-11 19:43:35 -05:00
Benjamin Sherman
8c781cf96f feat: add sanoid deps (#45) 2023-04-29 13:06:50 -05:00
Benjamin Sherman
638aca70dc docs: mention mergerfs in README (#44) 2023-04-29 10:39:20 -05:00