steps:
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
- - uses: systemd/mkosi@ee7f2950a25fdaaa7027937c5d9f3df6761e9fd9
+ - uses: systemd/mkosi@779484101987048b820b07a6111bcb0e8d5ebc1d
- name: Configure
run: |
systemd.journald.max_level_console=debug
# udev's debug log output is very verbose, so up it to info in CI.
udev.log_level=info
+
+ [Host]
+ ExtraSearchPaths=!*
EOF
- name: Generate secure boot key
# SPDX-License-Identifier: LGPL-2.1-or-later
[Output]
-Bootable=yes
# Prevent ASAN warnings when building the image and ship the real ASAN options prefixed with MKOSI_.
Environment=ASAN_OPTIONS=verify_asan_link_order=false
MKOSI_ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1
diffutils
dnsmasq
dosfstools
+ dracut
e2fsprogs
findutils
gcc # For sanitizer libraries
qrencode
sed
strace
+ systemd
tree
+ udev
util-linux
valgrind
wireguard-tools
[Content]
Packages=
alsa-lib
+ base
btrfs-progs
compsize
dhcp
libmnl
libpwquality
libxkbcommon
+ linux
man-db
numactl
openbsd-netcat
+ openssh
polkit
popt
python-pefile
gnutls
iproute
iproute-tc
+ kernel
kernel-modules-extra
libasan
libbpf
libxkbcommon
netcat
numactl-libs
+ openssh-server
p11-kit
pam
passwd
python3-docutils
quota
tpm2-tss
+ util-linux
vim-common
BuildPackages=
Packages=
btrfs-progs
cryptsetup-bin
+ dbus
+ default-dbus-session-bus
f2fs-tools
fdisk
fuse
libpwquality1
libqrencode4
libtss2-dev # Use the -dev package to avoid churn in updating version numbers
+ linux-image-cloud-amd64
netcat-openbsd
+ openssh-server
passwd
policykit-1
procps
python3-psutil
python3-pytest
quota
+ systemd-sysv
xxd
BuildPackages=
gnutls
iproute
iproute-tc
+ kernel
libasan
libbpf
libcap-ng
libxkbcommon
netcat
numactl-libs
+ openssh-server
pam
passwd
polkit
python3dist(pytest)
quota
tpm2-tss
+ util-linux
vim-common
BuildPackages=
gcc # Provides libasan/libubsan
glibc-32bit
glibc-locale-base
+ kernel-default
libasound2
libbpf1
libcap-ng-utils
libqrencode4
libseccomp2
libxkbcommon0
+ openssh-server
pam
python3-pefile
python3-psutil
[Distribution]
Release=jammy
-Repositories=main,universe
+Repositories=universe
[Content]
Packages=
btrfs-progs
cryptsetup-bin
+ dbus
+ default-dbus-session-bus
f2fs-tools
fdisk
fuse
libtss2-dev # Use the -dev package to avoid churn in updating version numbers
linux-tools-common
linux-tools-generic
+ linux-virtual
netcat-openbsd
+ openssh-server
passwd
policykit-1
procps
python3-psutil
python3-pytest
quota
+ systemd-sysv
xxd
BuildPackages=
systemctl mask systemd-hwdb-update.service
fi
-# Make sure dnsmasq.service doesn't start on boot on Debian/Ubuntu.
-rm -f /etc/systemd/system/multi-user.target.wants/dnsmasq.service
+# Make sure dnsmasq doesn't start on boot on Debian/Ubuntu.
+systemctl disable dnsmasq
+# Make sure sshd doesn't start on Opensuse.
+echo "disable sshd.service" > /usr/lib/systemd/system-preset/00-mkosi.preset
if [ -n "$IMAGE_ID" ] ; then
sed -n \