mirror-coreos-fedora-coreos.../buildroot-prep

#!/bin/bash
set -euo pipefail

# This script is called in the buildah path to modify the build environment
# before entering the shared build-rootfs script. Example use cases are to
# fast-track fixes or work around bugs.

arch=$(uname -m)
. /etc/os-release

# cachi2 is the repo Konflux injects when hermetic build is enabled and
# is self-sufficient to pull all the required RPMs.
if [ ! -f "/etc/yum.repos.d/cachi2.repo" ]; then
    cp /src/fedora-coreos-continuous.repo /etc/yum.repos.d
fi
# NOTE: try to remove anything that queries repos here once it's no longer
# needed so that we don't unnecessarily pay for repo metadata.

# make sure we have https://github.com/coreos/rpm-ostree/pull/5454
if ! rpm-ostree compose build-chunked-oci -h | grep -q -- --label; then
    sudo dnf update rpm-ostree -y --repo fedora-coreos-continuous --releasever "$VERSION_ID"
fi
Add concept of a `buildroot-prep` script We want to fast-track the backport of https://github.com/coreos/rpm-ostree/pull/5475 to unblock switch f44 and f43 over to the buildah path. Since this is likely not the first time we'll do this and likely not only for FCOS, add a new concept of an optional `buildroot-prep` script which can do $things like updating packages before entering build-rootfs. That specific script added here will not be automatically inherited by coreos/rhel-coreos-config. 2025-08-27 11:24:07 -08:00			`#!/bin/bash`
			`set -euo pipefail`

buildroot-prep: various enhancements Add a description of what this script is at the top-level. Switch to using the continuous repo for fast-tracking the rpm-ostree backport. Also backport https://gitlab.com/fedora/bootc/base-images/-/commit/35467bdbdcc01a8ad6b42c33c935ffe5c8c74395 since it seems like fedora-bootc container images have not been respun as quickly as we thought they'd be. 2025-08-28 13:23:18 -08:00			`# This script is called in the buildah path to modify the build environment`
			`# before entering the shared build-rootfs script. Example use cases are to`
			`# fast-track fixes or work around bugs.`

Add concept of a `buildroot-prep` script We want to fast-track the backport of https://github.com/coreos/rpm-ostree/pull/5475 to unblock switch f44 and f43 over to the buildah path. Since this is likely not the first time we'll do this and likely not only for FCOS, add a new concept of an optional `buildroot-prep` script which can do $things like updating packages before entering build-rootfs. That specific script added here will not be automatically inherited by coreos/rhel-coreos-config. 2025-08-27 11:24:07 -08:00			`arch=$(uname -m)`
			`. /etc/os-release`

hermetic: adapt build-rootfs and buildroot-prep In hermetic builds there is no access to the network. Detect this by looking for the `cachi2.repo` that is injected by konflux during the build. In this case we make sure to not use any of our own repo and rely on the repo created by hermeto. 2025-09-05 01:06:53 -08:00			`# cachi2 is the repo Konflux injects when hermetic build is enabled and`
			`# is self-sufficient to pull all the required RPMs.`
			`if [ ! -f "/etc/yum.repos.d/cachi2.repo" ]; then`
			`cp /src/fedora-coreos-continuous.repo /etc/yum.repos.d`
			`fi`
buildroot-prep: stop pinning rpm-ostree no f43+ We have new libselinux in cosa now so no longer need this. 2025-09-19 08:59:11 -08:00			`# NOTE: try to remove anything that queries repos here once it's no longer`
			`# needed so that we don't unnecessarily pay for repo metadata.`

			`# make sure we have https://github.com/coreos/rpm-ostree/pull/5454`
			`if ! rpm-ostree compose build-chunked-oci -h \| grep -q -- --label; then`
buildroot-prep: pin rpm-ostree to 2025.10 2025.11 (which is now in rawhide) suffers from an issue with SELinux labels. Let's "pin" in the container used as the buildroot here. See https://github.com/coreos/fedora-coreos-tracker/issues/2030 2025-09-17 15:08:28 -08:00			`sudo dnf update rpm-ostree -y --repo fedora-coreos-continuous --releasever "$VERSION_ID"`
			`fi`