Commit graph

14 commits

Author SHA1 Message Date
renner
3ef1256cd3
feat: timestamp all files with epoch 0 (#3028)
* feat: timestamp all files with epoch 0

We have been using this chunkah feature [1] to put non-rpm content like
the brew tarball in dedicated layers, we didn't actually save any
bandwith on downloads with this as the copying sets the file
modification and access time. Which makes it non-reproducible and every
single update would re-download everything not in RPMs.

This should make updates smaller especially noticeable on daily/multiple
daily image builds. I'm not sure how much of a positive effect this is
gonna have on the stable weekly images as the brew tarball is refreshed
weekly. Things like the wallpapers should at least no longer be
downloaded when they haven't changed. There are still some files we
could do but I think it's mostly not worth it.

xref: https://github.com/ublue-os/aurora/issues/2579

[1] https://github.com/coreos/chunkah#customizing-the-layers

* typo

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>

---------

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>
2026-10-16 07:11:44 +00:00
renner
b2d6f3cfb3
refactor: simplify checking for enabled 3rd party repos (#2931)
* refactor: simplify checking for enabled 3rd party repos

We are generally no longer doing the dnf enable/disable dance (except
for the nvidia install script) because we are vendoring the .repo files
which simplifies things a bit.

Also I think that the move to checking what is allowed instead of
checking what is not allowed makes more sense anyway.

resolves: https://github.com/ublue-os/aurora/issues/2854

[1] 1e4d10b9ac/build_files/nvidia/nvidia-install.sh

* get openh264 from negativo

Our base image [1] can't legally include this from fedora-cisco-openh264
repo. Comparing the spec files for Fedora [2] and Negativo [3], they
seem to be built with the same build flags, so they should not have any
differing functionality. The fedora-cisco-openh264 repo is currently
enabled (which is not the case for F44 images) because our repo
validation script broke due to the move to /usr [4].

We are already shipping various other codecs on the system, including
mesa, they get more irrelevant each day but we should have this.

I don't know why exactly but for some reason we now have a stray
/var/log/dnf5.log which makes bootc container lint fail.

[1] 54e811f17a/common.yaml (L144)
[2] cd15228484/f/openh264.spec
[3] dfac89f533/openh264.spec
[4] https://fedoraproject.org/wiki/Changes/RelocateRpmRepoConfigsToUsr
2026-09-27 05:34:43 +00:00
renner
499ae9c512
chore: remove ZFS (#2918) 2026-09-25 15:05:12 +00:00
renner
20574d5e9c
feat: vendor package repo configurations (#2851)
We can get rid of the copr-helper wrapper script as we are no longer
enabling and then disabling the repo, which is explained in [1] as we
are configuring them to be off by default and then very purposefully
enabling it for that one dnf transaction where we actually need it
enabled.

The files in yum.repos.d were copied from my local /usr/etc directory.

[1] https://github.com/ublue-os/aurora/issues/1115
2026-09-12 16:02:11 +00:00
renner
14900734d0
refactor: repurpose build.sh as build preparation (#2701)
* refactor: repurpose build.sh as build preparation

It currently does too many things, let's split it up. This needs to be
done as we want to move away from a system that copies (also overrides)
files from fedora RPMs and then may remove said rpms, resulting in
removing our changes, which of course defeats the entire point.

A disadvantage this has is that we need to be more mindful and
disciplined of when things are needed during the build. Currently we
actually do not need any system_files we copy in the stage where we are
installing packages/have network access.

If we do at some point we will probably either inline files in
build-prep.sh or have a 2nd directory with files strictly needed for the
build.

This is why we can copy all the files to the system after that, just
before systemd units get activated, initramfs gets generated, general
things we can do offline after we have installed packages are done.

Resolves: https://github.com/ublue-os/aurora/issues/2687

* remove useless comment

* same treatment for DX

* remove unused DX specific version logic

We don't use this, we have branches now.

* move sysctl before docker install
2026-08-09 19:11:44 +00:00
renner
6365a13e88
feat: rename build_files to build_scripts (#2691)
This is more accurately describing what it actually is.

Assisted-by: GNU sed 4.9
2026-08-09 05:58:24 +00:00
renner
aa7471f615
feat: delete /run leftovers from the image (#2619)
* feat: delete /run leftovers from the image

This is to make bootc container lint happy.

We should probably make warnings fatal so we fix new offenders.

Related: https://github.com/bootc-dev/bootc/pull/2051

* chore: remove unused rm

No idea why this is here, probably some super old leftover.

* do dx specific things as well
2026-07-26 03:27:44 +00:00
renner
e6d0774432
chore: misc cleanup (#2382)
* chore: simplify container pinning for common brew

This is just less complex and fully uses image-versions.yml

* make akmods_flavor a separate recipe

Helps in further splitting up the big monolith that is the build recipe.

* set right just group

* set full name for alpine image
2026-06-13 16:17:24 +00:00
renner
a361fd3718
fix(ci): add commit hash as org.opencontainers.image.revision label (#2340)
This label was previously created by the hhd/legacy-rechunker instead of
on the image build process. We are now using the build-chunked-oci and
in the near future chunkah which do not mess with the labels.

Our changelogs script expects this label to be present in order for the
commits since last release to show up.

fixes: https://github.com/ublue-os/aurora/issues/2338
2026-06-07 16:15:54 +00:00
Dylan M. Taylor
7c5cd133e9
chore: bump Fedora to 44 (#1994)
* chore: bump Fedora to 44

* chore: simplify Containerfile.in ARG defaults
2026-04-03 21:34:39 +02:00
inffy
447b35d187
chore: update image versions and add new nvdia sync from main (#1993)
* update image versions and add new nvdia sync

* permission fix
2026-04-03 12:50:54 +02:00
renner
aabd4a7e67
fix: clear out content in /{var,tmp} (#1864)
fixup of https://github.com/ublue-os/aurora/pull/1846

/tmp wasn't supposed to be in the RUN statement, this only hid those
files from `bootc container lint`, they still make it into the final
image. We basically don't care about anything else in /var other than
cache.
2026-03-10 13:00:29 +00:00
renner
9a52918f6d
fix: don't leak /{run,tmp} into the final image (#1846)
Got exposed with bootc 1.13

See: d5c6515e23
2026-03-06 17:28:19 +00:00
renner
22d21c197c
feat(ci): use CPP preprocessor for akmods (#1799) 2026-02-27 19:51:50 +02:00