chore: remove ISO files and workflows (#1643)
* remove copy iso files step * remove iso files from repo * remove iso build workflow
This commit is contained in:
inffy
GitHub
parent
5cbe891567
commit
baed872b31
4 changed files with 0 additions and 295 deletions
|
|
@ -1,129 +0,0 @@
|
|||
---
|
||||
name: Build ISOs (Live with Webui)
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
pull_request:
|
||||
paths:
|
||||
- ".github/workflows/reusable-build-iso-anaconda-webui.yml"
|
||||
- "iso_files/configure_iso_anaconda-webui.sh"
|
||||
schedule:
|
||||
- cron: "0 2 1 * *" # First day of each month at 2:00 AM UTC
|
||||
|
||||
env:
|
||||
IMAGE_REGISTRY: "ghcr.io/${{ github.repository_owner }}"
|
||||
IMAGE_NAME: "aurora"
|
||||
|
||||
concurrency:
|
||||
group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
|
||||
cancel-in-progress: true
|
||||
|
||||
jobs:
|
||||
build:
|
||||
name: Build ISOs
|
||||
runs-on: ${{ matrix.platform == 'amd64' && 'ubuntu-24.04' }}
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
platform: [amd64]
|
||||
flavor: ["main", "nvidia-open"]
|
||||
image_version: ["stable"]
|
||||
include:
|
||||
- platform: amd64
|
||||
flavor: "main"
|
||||
image_version: stable
|
||||
permissions:
|
||||
contents: read
|
||||
packages: read
|
||||
id-token: write
|
||||
|
||||
steps:
|
||||
- name: Maximize build space
|
||||
if: matrix.platform != 'arm64'
|
||||
uses: ublue-os/remove-unwanted-software@695eb75bc387dbcd9685a8e72d23439d8686cba6 # v10
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
||||
|
||||
- name: Checkout common repo
|
||||
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
||||
with:
|
||||
repository: get-aurora-dev/common
|
||||
path: common
|
||||
|
||||
- name: Setup Just
|
||||
uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3
|
||||
|
||||
- name: Check Just Syntax
|
||||
shell: bash
|
||||
run: |
|
||||
just check
|
||||
|
||||
- name: Format image ref
|
||||
id: image_ref
|
||||
env:
|
||||
FLAVOR: ${{ matrix.flavor }}
|
||||
run: |
|
||||
set -eoux pipefail
|
||||
image_name=$(just image_name "aurora" "${{ matrix.image_version}}" "${{ matrix.flavor}}")
|
||||
image_ref="${IMAGE_REGISTRY}/${image_name}"
|
||||
KARGS="NONE"
|
||||
echo "image_ref=$image_ref" >> "${GITHUB_OUTPUT}"
|
||||
echo "artifact_format="$image_name-${{ matrix.image_version }}-webui-$(uname -m)"" >> "${GITHUB_OUTPUT}"
|
||||
echo "kargs=$KARGS" >> "${GITHUB_OUTPUT}"
|
||||
|
||||
- name: Generate titanoboa-compatible file list
|
||||
id: flatpak_list
|
||||
run: |
|
||||
set -eoux pipefail
|
||||
FILE_LIST="$(mktemp)"
|
||||
cat common/system_files/shared/usr/share/ublue-os/homebrew/system-flatpaks.Brewfile | grep -v '#' | grep -F -e "flatpak" | sed 's/flatpak //' | tr -d '"' | tee "${FILE_LIST}"
|
||||
echo "file_list_path=${FILE_LIST}" | tee "${GITHUB_OUTPUT}"
|
||||
|
||||
- name: Build ISO
|
||||
id: build
|
||||
uses: ublue-os/titanoboa@main
|
||||
with:
|
||||
image-ref: ${{ steps.image_ref.outputs.image_ref }}:${{ matrix.image_version }}
|
||||
flatpaks-list: ${{ steps.flatpak_list.outputs.file_list_path }}
|
||||
hook-post-rootfs: ${{ github.workspace }}/iso_files/configure_iso_anaconda-webui.sh
|
||||
kargs: ${{ steps.image_ref.outputs.kargs }}
|
||||
|
||||
- name: Rename ISO
|
||||
id: rename
|
||||
env:
|
||||
OUTPUT_PATH: ${{ steps.build.outputs.iso-dest }}
|
||||
FLAVOR: ${{ matrix.flavor }}
|
||||
OUTPUT_NAME: ${{ steps.image_ref.outputs.artifact_format }}
|
||||
IMAGE_VERSION: ${{ matrix.image_version }}
|
||||
run: |
|
||||
set -x
|
||||
mkdir -p output
|
||||
OUTPUT_DIRECTORY="$(realpath output)"
|
||||
mv "${OUTPUT_PATH}" "${OUTPUT_DIRECTORY}/${OUTPUT_NAME}.iso"
|
||||
(cd "${OUTPUT_DIRECTORY}" && sha256sum "${OUTPUT_NAME}.iso" | tee "${OUTPUT_NAME}.iso-CHECKSUM")
|
||||
echo "output_directory=$OUTPUT_DIRECTORY" >> "${GITHUB_OUTPUT}"
|
||||
|
||||
- name: Upload to Job Artifacts
|
||||
if: github.event_name == 'pull_request'
|
||||
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
|
||||
with:
|
||||
name: ${{ steps.image_ref.outputs.artifact_format }}
|
||||
if-no-files-found: error
|
||||
path: ${{ steps.rename.outputs.output_directory }}
|
||||
|
||||
- name: Upload to CloudFlare
|
||||
if: contains(matrix.image_version, 'stable') && github.event_name != 'pull_request'
|
||||
shell: bash
|
||||
env:
|
||||
RCLONE_CONFIG_R2_TYPE: s3
|
||||
RCLONE_CONFIG_R2_PROVIDER: Cloudflare
|
||||
RCLONE_CONFIG_R2_ACCESS_KEY_ID: ${{ secrets.AURORA_R2_ACCESS_KEY_ID }}
|
||||
RCLONE_CONFIG_R2_SECRET_ACCESS_KEY: ${{ secrets.AURORA_R2_SECRET_ACCESS_KEY }}
|
||||
RCLONE_CONFIG_R2_REGION: auto
|
||||
RCLONE_CONFIG_R2_ENDPOINT: ${{ secrets.AURORA_R2_ENDPOINT }}
|
||||
SOURCE_DIR: ${{ steps.rename.outputs.output_directory }}
|
||||
run: |
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y rclone
|
||||
rclone copy "${SOURCE_DIR}" R2:aurora-dl
|
||||
|
|
@ -12,7 +12,6 @@ FROM ${BREW_IMAGE}@${BREW_IMAGE_SHA} AS brew
|
|||
|
||||
FROM scratch AS ctx
|
||||
COPY /build_files /build_files
|
||||
COPY /iso_files /iso_files
|
||||
|
||||
# https://github.com/get-aurora-dev/common
|
||||
COPY --from=common /logos /system_files/shared
|
||||
|
|
|
|||
|
|
@ -1,165 +0,0 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
set -eoux pipefail
|
||||
|
||||
IMAGE_INFO="$(cat /usr/share/ublue-os/image-info.json)"
|
||||
IMAGE_TAG="$(jq -c -r '."image-tag"' <<<"$IMAGE_INFO")"
|
||||
IMAGE_REF="$(jq -c -r '."image-ref"' <<<"$IMAGE_INFO")"
|
||||
IMAGE_REF="${IMAGE_REF##*://}"
|
||||
sbkey='https://github.com/ublue-os/akmods/raw/main/certs/public_key.der'
|
||||
|
||||
# Configure Live Environment
|
||||
## Remove packages from liveCD to save space
|
||||
dnf remove -y ublue-brew ublue-motd || true
|
||||
|
||||
glib-compile-schemas /usr/share/glib-2.0/schemas
|
||||
|
||||
systemctl disable rpm-ostree-countme.service
|
||||
systemctl disable tailscaled.service
|
||||
systemctl disable bootloader-update.service
|
||||
systemctl disable brew-upgrade.timer
|
||||
systemctl disable brew-update.timer
|
||||
systemctl disable brew-setup.service
|
||||
systemctl disable rpm-ostreed-automatic.timer
|
||||
systemctl disable uupd.timer
|
||||
systemctl disable ublue-system-setup.service
|
||||
systemctl disable ublue-guest-user.service
|
||||
systemctl disable flatpak-preinstall.service
|
||||
systemctl --global disable ublue-flatpak-manager.service
|
||||
systemctl --global disable podman-auto-update.timer
|
||||
systemctl --global disable ublue-user-setup.service
|
||||
rm /usr/share/applications/system-update.desktop
|
||||
|
||||
# Configure Anaconda
|
||||
|
||||
# Install Anaconda WebUI
|
||||
SPECS=(
|
||||
"libblockdev-btrfs"
|
||||
"libblockdev-lvm"
|
||||
"libblockdev-dm"
|
||||
"anaconda-live"
|
||||
"anaconda-webui"
|
||||
"firefox"
|
||||
)
|
||||
dnf install -y "${SPECS[@]}"
|
||||
|
||||
# Anaconda Profile Detection
|
||||
|
||||
# Aurora
|
||||
tee /etc/anaconda/profile.d/aurora.conf <<'EOF'
|
||||
# Anaconda configuration file for Aurora Stable
|
||||
|
||||
[Profile]
|
||||
# Define the profile.
|
||||
profile_id = aurora
|
||||
|
||||
[Profile Detection]
|
||||
# Match os-release values
|
||||
os_id = aurora
|
||||
|
||||
[Network]
|
||||
default_on_boot = FIRST_WIRED_WITH_LINK
|
||||
|
||||
[Bootloader]
|
||||
efi_dir = fedora
|
||||
menu_auto_hide = True
|
||||
|
||||
[Storage]
|
||||
default_scheme = BTRFS
|
||||
btrfs_compression = zstd:1
|
||||
default_partitioning =
|
||||
/ (min 1 GiB, max 70 GiB)
|
||||
/home (min 500 MiB, free 50 GiB)
|
||||
/var (btrfs)
|
||||
|
||||
[User Interface]
|
||||
custom_stylesheet = /usr/share/anaconda/pixmaps/fedora.css
|
||||
hidden_spokes =
|
||||
NetworkSpoke
|
||||
PasswordSpoke
|
||||
hidden_webui_pages =
|
||||
root-password
|
||||
network
|
||||
EOF
|
||||
|
||||
# Add installer + docs + discourse to panel
|
||||
sed -i '/<entry name="launchers" type="StringList">/,/<\/entry>/ s/<default>[^<]*<\/default>/<default>preferred:\/\/browser,applications:org.gnome.Ptyxis.desktop,applications:io.github.kolunmi.Bazaar.desktop,preferred:\/\/filemanager,applications:Discourse.desktop,applications:documentation.desktop,applications:liveinst.desktop<\/default>/' /usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/config/main.xml
|
||||
|
||||
# add intaller to kickoff
|
||||
sed -i '2s/$/;liveinst.desktop/' /usr/share/kde-settings/kde-profile/default/xdg/kicker-extra-favoritesrc
|
||||
|
||||
# Configure
|
||||
. /etc/os-release
|
||||
echo "Aurora release $VERSION_ID ($VERSION_CODENAME)" >/etc/system-release
|
||||
|
||||
sed -i 's/ANACONDA_PRODUCTVERSION=.*/ANACONDA_PRODUCTVERSION=""/' /usr/{,s}bin/liveinst || true
|
||||
|
||||
desktop-file-edit --set-key=Icon --set-value=/usr/share/pixmaps/scope_installer.png /usr/share/applications/liveinst.desktop
|
||||
|
||||
# Scope Fetcher, used as the icon in plasma-welcome and as the app icon itself for the installer
|
||||
curl --retry 3 -Lo /usr/share/pixmaps/scope_installer.png https://raw.githubusercontent.com/ublue-os/aurora/refs/heads/main/iso_files/scope_installer.png
|
||||
|
||||
# Interactive Kickstart
|
||||
tee -a /usr/share/anaconda/interactive-defaults.ks <<EOF
|
||||
ostreecontainer --url=$IMAGE_REF:$IMAGE_TAG --transport=containers-storage --no-signature-verification
|
||||
%include /usr/share/anaconda/post-scripts/install-configure-upgrade.ks
|
||||
%include /usr/share/anaconda/post-scripts/disable-fedora-flatpak.ks
|
||||
%include /usr/share/anaconda/post-scripts/install-flatpaks.ks
|
||||
%include /usr/share/anaconda/post-scripts/secureboot-enroll-key.ks
|
||||
EOF
|
||||
|
||||
# Signed Images
|
||||
tee /usr/share/anaconda/post-scripts/install-configure-upgrade.ks <<EOF
|
||||
%post --erroronfail
|
||||
bootc switch --mutate-in-place --enforce-container-sigpolicy --transport registry $IMAGE_REF:$IMAGE_TAG
|
||||
%end
|
||||
EOF
|
||||
|
||||
# Disable Fedora Flatpak
|
||||
tee /usr/share/anaconda/post-scripts/disable-fedora-flatpak.ks <<'EOF'
|
||||
%post --erroronfail
|
||||
systemctl disable flatpak-add-fedora-repos.service
|
||||
%end
|
||||
EOF
|
||||
|
||||
# Install Flatpaks
|
||||
tee /usr/share/anaconda/post-scripts/install-flatpaks.ks <<'EOF'
|
||||
%post --erroronfail --nochroot
|
||||
deployment="$(ostree rev-parse --repo=/mnt/sysimage/ostree/repo ostree/0/1/0)"
|
||||
target="/mnt/sysimage/ostree/deploy/default/deploy/$deployment.0/var/lib/"
|
||||
mkdir -p "$target"
|
||||
rsync -aAXUHKP /var/lib/flatpak "$target"
|
||||
%end
|
||||
EOF
|
||||
|
||||
# Fetch the Secureboot Public Key
|
||||
curl --retry 15 -Lo /etc/sb_pubkey.der "$sbkey"
|
||||
|
||||
# Enroll Secureboot Key
|
||||
tee /usr/share/anaconda/post-scripts/secureboot-enroll-key.ks <<'EOF'
|
||||
%post --erroronfail --nochroot
|
||||
set -oue pipefail
|
||||
|
||||
readonly ENROLLMENT_PASSWORD="universalblue"
|
||||
readonly SECUREBOOT_KEY="/etc/sb_pubkey.der"
|
||||
|
||||
if [[ ! -d "/sys/firmware/efi" ]]; then
|
||||
echo "EFI mode not detected. Skipping key enrollment."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
if [[ ! -f "$SECUREBOOT_KEY" ]]; then
|
||||
echo "Secure boot key not provided: $SECUREBOOT_KEY"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
SYS_ID="$(cat /sys/devices/virtual/dmi/id/product_name)"
|
||||
if [[ ":Jupiter:Galileo:" =~ ":$SYS_ID:" ]]; then
|
||||
echo "Steam Deck hardware detected. Skipping key enrollment."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
mokutil --timeout -1 || :
|
||||
echo -e "$ENROLLMENT_PASSWORD\n$ENROLLMENT_PASSWORD" | mokutil --import "$SECUREBOOT_KEY" || :
|
||||
%end
|
||||
EOF
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 26 KiB |
Loading…
Reference in a new issue