mirror-coreos-fedora-coreos.../image.yaml

# Target disk size in GB.
# Make it at least 10G because we want the rootfs to be at least 8G:
# https://github.com/coreos/fedora-coreos-tracker/issues/586
size: 10

extra-kargs:
    # Disable SMT on systems vulnerable to MDS or any similar future issue.
    - mitigations=auto,nosmt
    # https://github.com/coreos/fedora-coreos-tracker/issues/292
    # https://fedoraproject.org/wiki/Changes/CGroupsV2
    - systemd.unified_cgroup_hierarchy=0

# Disable networking by default on firstboot. We can drop this once cosa stops
# defaulting to `ip=dhcp,dhcp6 rd.neednet=1` when it doesn't see this key.
ignition-network-kcmdline: []

# Optional remote by which to prefix the deployed OSTree ref
ostree-remote: fedora

# We want read-only /sysroot to protect from unintentional damage.
# https://github.com/ostreedev/ostree/issues/1265
sysroot-readonly: true

# After this, we plan to add support for the Ignition
# storage/filesystems sections.  (Although one can do
# that on boot as well)
image.yaml: bump virtual disk images to 10G Right now, our images are triggering the new 8G warning because the disk size itself is 8G, so the rootfs is less than that. Let's go to 10G so we meet our own standard. 2021-03-11 10:51:18 -09:00			`# Target disk size in GB.`
			`# Make it at least 10G because we want the rootfs to be at least 8G:`
			`# https://github.com/coreos/fedora-coreos-tracker/issues/586`
			`size: 10`
Add image.yaml Let's just support configuring the base disk size for now so that we say we do have some configuration. We need to abstract this for multiple reasons (we want to remove Anaconda, and even without removing Anaconda we want to do dual bios/UEFI and also potentially arch-specific code). Most people will probably be OK for now configuring the base ostree and the outer image size. This commit doesn't yet remove image.ks in order to support version skew, but we intend to shortly drop it. 2019-01-27 08:26:55 -09:00
Have the kernel conditionally disable SMT if vulnerable https://github.com/coreos/fedora-coreos-tracker/issues/181 2019-05-16 16:08:59 -08:00			`extra-kargs:`
			`# Disable SMT on systems vulnerable to MDS or any similar future issue.`
			`- mitigations=auto,nosmt`
image.yaml: add systemd.unified_cgroup_hierarchy=0 karg FCOS is likely to ship with CGroupsV1 to start, since most of the containerization ecosystem isn't yet ready for V2. Pass the `systemd.unified_cgroup_hierarchy=0` karg to enable this. This should at least allow podman Kola tests to pass. For more information, see: https://github.com/coreos/fedora-coreos-tracker/issues/292 2019-10-18 08:44:04 -08:00			`# https://github.com/coreos/fedora-coreos-tracker/issues/292`
			`# https://fedoraproject.org/wiki/Changes/CGroupsV2`
			`- systemd.unified_cgroup_hierarchy=0`
Have the kernel conditionally disable SMT if vulnerable https://github.com/coreos/fedora-coreos-tracker/issues/181 2019-05-16 16:08:59 -08:00
Move to conditional networking We have all the piece in place now to move to conditional networking. So let's drop the `rd.neednet=1` firstboot karg. Also don't enable coreos-liveiso-network-kargs.service on FCOS since it's no longer needed (i.e. the live ISO will now enable initrd networking as required given the embedded Ignition config). On RHCOS, we still need it for now until we move to spec3. Then we can remove the service and script completely. Fixes: https://github.com/coreos/fedora-coreos-tracker/issues/443 2020-07-14 13:35:19 -08:00			`# Disable networking by default on firstboot. We can drop this once cosa stops`
			# defaulting to `ip=dhcp,dhcp6 rd.neednet=1` when it doesn't see this key.
			`ignition-network-kcmdline: []`
image.yaml: add ostree-remote This is required for rpm-ostree to be able to fetch updates from the shipped unified repo remote. 2019-07-12 06:56:26 -08:00
			`# Optional remote by which to prefix the deployed OSTree ref`
			`ostree-remote: fedora`

image.yaml: enable sysroot-readonly We want to use the new read-only `/sysroot` feature of libostree. Opt-in to that to tell cosa we support it and want it. For more details, see: https://github.com/ostreedev/ostree/issues/1265 https://github.com/coreos/coreos-assembler/pull/1235 2020-03-16 08:15:58 -08:00			`# We want read-only /sysroot to protect from unintentional damage.`
			`# https://github.com/ostreedev/ostree/issues/1265`
			`sysroot-readonly: true`

Add image.yaml Let's just support configuring the base disk size for now so that we say we do have some configuration. We need to abstract this for multiple reasons (we want to remove Anaconda, and even without removing Anaconda we want to do dual bios/UEFI and also potentially arch-specific code). Most people will probably be OK for now configuring the base ostree and the outer image size. This commit doesn't yet remove image.ks in order to support version skew, but we intend to shortly drop it. 2019-01-27 08:26:55 -09:00			`# After this, we plan to add support for the Ignition`
			`# storage/filesystems sections. (Although one can do`
			`# that on boot as well)`
postprocess: Nuke everything in /etc/systemd/system This should really be done in rpm-ostree if `machineid-compat: false`: https://github.com/projectatomic/rpm-ostree/issues/1803 But for now let's do the quick hack here. The core problem is today the RPM scriptlets are enabling units, but for us Ignition+presets should be the canonical definition of things. This avoids having another source of truth. 2019-03-27 09:53:49 -08:00