mirror of
https://github.com/morgan9e/systemd
synced 2026-04-15 00:47:10 +09:00
2fe49e8a4c
* 10544812b3 Don't fix up vmlinuz locations if not required * 9baf551923 Reduce amount of packages in default image * 9e1a2f18b8 Add support for assert sections * c7c6e2c0b1 ubuntu: Switch to devel as the default release * 0822deb69c Improve logging when we can not extract kernel version from filename * 1fd7ef3db7 Do not build default initrd if Initrds= is specified * 611c8b46c8 Don't unconditionally sync when PackageCacheDirectory=/var * ab37f24d38 README: add link to OBS docs for mkosi builds * 02bf256ebb completion: add reuse ignore comments * 10ccb0b04f Make sure not all subimages depend on default-initrd subimage * 442e1ce0f1 mkosi-tools: systemd-boot-tools is now available for all arches * 307fc1dba3 action: make it work when used as a submodule * c37a55f91b config: serialize dataclass instances in our JSONEncoder * f26cb34155 log: set terminal window title in complete_step while mkosi runs * 280c78e681 Make sure inherited settings are applied for the default initrd * ae4f2fd718 Fix typo * 5644f3e83e build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 * 7d7b26b8c9 build(deps): bump actions/checkout from 4.2.2 to 5.0.0 * e805253447 postmarketos: implement is_kernel_package * dd51d2e019 postmarketos: provide missing i386-vars.fd * e23e6de66b Do not relabel files when building extension image * ab05ead5eb Bump various systemd version checks to 258 * 382cc8b450 preset: drop systemd-networkd-wait-online.service * 477b6b2ed5 mkosi-initrd: install systemd-container in network profile * 1d167c0b53 mkosi-initrd: add 89-ethernet.network for network profile * b1e81dec3a mkosi-initrd: Install libseccomp explicitly * 3c431a141c opensuse: repository non-oss-debug is invalid * 62ab363149 ci: add an s390x build job for additional coverage * 62765f2d07 mailmap: deduplicate Daan * 47f963f40b Revert "ci: Disable PPC jobs temporarily" * 6a48f83dda dnf: Always specify --best again * 3702368616 sandbox: Make all relative paths absolute during argparsing * a587af0bf7 dnf: Fix /var package cache directory check in package_subdirs() * 56cdbc25b5 Always use repository metadata from /var package cache directory * 669d4418a3 Add note on Encrypt=yes to Passphrase= docs * caa129edae Drop BuildSourcesEphemeral=yes from default image config * 7edca63478 Add devicetree-auto support for UKI * 6cb1649074 Don't add ncdu for ppc64-le on Fedora * e019d2d2a6 ci: Disable PPC jobs temporarily
159 lines
3.6 KiB
Plaintext
159 lines
3.6 KiB
Plaintext
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
|
|
[Config]
|
|
MinimumVersion=commit:10544812b35a668d4aac9834c78ee8166e99bc78
|
|
Dependencies=
|
|
exitrd
|
|
initrd
|
|
minimal-base
|
|
minimal-0
|
|
minimal-1
|
|
|
|
PassEnvironment=
|
|
NO_SYNC
|
|
NO_BUILD
|
|
WIPE
|
|
SANITIZERS
|
|
CC
|
|
CXX
|
|
CFLAGS
|
|
CPPFLAGS
|
|
CXXFLAGS
|
|
LDFLAGS
|
|
LLVM
|
|
MESON_VERBOSE
|
|
MESON_OPTIONS
|
|
SYSEXT
|
|
WITH_DEBUG
|
|
ASAN_OPTIONS
|
|
COVERAGE
|
|
VCS_TAG
|
|
|
|
[Output]
|
|
RepartDirectories=mkosi.repart
|
|
OutputDirectory=../build/mkosi.output
|
|
|
|
[Build]
|
|
History=yes
|
|
ToolsTree=default
|
|
BuildDirectory=../build/mkosi.builddir
|
|
CacheDirectory=../build/mkosi.cache
|
|
Incremental=yes
|
|
WithTests=no
|
|
|
|
[Validation]
|
|
SignExpectedPcr=yes
|
|
SecureBoot=yes
|
|
SecureBootAutoEnroll=yes
|
|
|
|
[Content]
|
|
ExtraTrees=
|
|
mkosi.extra.common
|
|
mkosi.crt:/usr/lib/verity.d/mkosi.crt # sysext verification key
|
|
%O/minimal-0.root-%a.raw:/usr/share/minimal_0.raw
|
|
%O/minimal-0.root-%a-verity.raw:/usr/share/minimal_0.verity
|
|
%O/minimal-0.root-%a-verity-sig.raw:/usr/share/minimal_0.verity.sig
|
|
%O/minimal-1.root-%a.raw:/usr/share/minimal_1.raw
|
|
%O/minimal-1.root-%a-verity.raw:/usr/share/minimal_1.verity
|
|
%O/minimal-1.root-%a-verity-sig.raw:/usr/share/minimal_1.verity.sig
|
|
%O/minimal-base:/usr/share/TEST-13-NSPAWN-container-template
|
|
%O/exitrd:/exitrd
|
|
|
|
Initrds=%O/initrd
|
|
KernelInitrdModules=default
|
|
|
|
# Disable relabeling by default as it only matters for TEST-06-SELINUX, takes a non-trivial amount of time
|
|
# and results in lots of errors when building images as a regular user.
|
|
SELinuxRelabel=no
|
|
|
|
# Adding more kernel command line arguments is likely to hit the kernel command line limit (512 bytes) in
|
|
# various scenarios. Consider adding support for a credential instead if possible and using that.
|
|
KernelCommandLine=
|
|
systemd.crash_shell
|
|
systemd.log_level=debug,console:info
|
|
systemd.log_ratelimit_kmsg=0
|
|
# Disable the kernel's ratelimiting on userspace logging to kmsg.
|
|
printk.devkmsg=on
|
|
# Make sure /sysroot is mounted rw in the initrd.
|
|
rw
|
|
# Make sure no LSMs are enabled by default.
|
|
selinux=0
|
|
systemd.early_core_pattern=/core
|
|
systemd.firstboot=no
|
|
raid=noautodetect
|
|
oops=panic
|
|
panic=-1
|
|
softlockup_panic=1
|
|
panic_on_warn=1
|
|
psi=1
|
|
mitigations=off
|
|
|
|
Packages=
|
|
acl
|
|
attr
|
|
bash-completion
|
|
binutils
|
|
coreutils
|
|
curl
|
|
diffutils
|
|
dnsmasq
|
|
dosfstools
|
|
e2fsprogs
|
|
findutils
|
|
gdb
|
|
grep
|
|
gzip
|
|
jq
|
|
kbd
|
|
kexec-tools
|
|
kmod
|
|
less
|
|
llvm
|
|
lsof
|
|
lvm2
|
|
mdadm
|
|
mtools
|
|
nano
|
|
nftables
|
|
nvme-cli
|
|
opensc
|
|
openssl
|
|
p11-kit
|
|
pciutils
|
|
python3
|
|
radvd
|
|
rsync
|
|
sed
|
|
socat
|
|
strace
|
|
tar
|
|
tmux
|
|
tree
|
|
util-linux
|
|
valgrind
|
|
which
|
|
wireguard-tools
|
|
xfsprogs
|
|
zsh
|
|
zstd
|
|
|
|
[Runtime]
|
|
Credentials=
|
|
journal.storage=persistent
|
|
tty.serial.hvc0.agetty.autologin=root
|
|
tty.serial.hvc0.login.noauth=yes
|
|
tty.console.agetty.autologin=root
|
|
tty.console.login.noauth=yes
|
|
tty.virtual.tty1.agetty.autologin=root
|
|
tty.virtual.tty1.login.noauth=yes
|
|
RuntimeBuildSources=yes
|
|
RuntimeScratch=no
|
|
CPUs=2
|
|
TPM=yes
|
|
VSock=yes
|
|
KVM=yes
|
|
|
|
[Include]
|
|
Include=%D/mkosi/mkosi.sanitizers
|
|
%D/mkosi/mkosi.coverage
|