File _service:obs_scm:appliance.kiwi of Package test-image-MicroOS

Overview Repositories Revisions Requests Users Attributes Meta

File _service:obs_scm:appliance.kiwi of Package test-image-MicroOS (Revision 75a45c751d2672bba74296a1e94726b3)

Currently displaying revision 75a45c751d2672bba74296a1e94726b3 , Show latest

<?xml version="1.0" encoding="utf-8"?>

<image schemaversion="7.5" name="kiwi-test-image-MicroOS">
    <description type="system">
        <author>Marcus Schäfer</author>
        <contact>marcus.schaefer@suse.com</contact>
        <specification>MicroOS disk test build for IBM Secure Execution</specification>
    </description>
    <profiles>
        <profile name="SUSE-Infra" description="MicroOS Confidental Compute Encrypted"/>
        <profile name="IBM-Cloud-Secure-Execution-z16" description="MicroOS Confidental Compute Encrypted For IBM Cloud Regions Z16"/>
        <profile name="IBM-Cloud-Secure-Execution-z15" description="MicroOS Confidental Compute Encrypted For IBM Cloud Regions Z15"/>
        <profile name="IBM-Cloud-Standard" description="MicroOS Standard for IBM Cloud Regions"/>
    </profiles>
    <preferences>
        <version>16.0.0</version>
        <packagemanager>zypper</packagemanager>
        <bootloader-theme>openSUSE</bootloader-theme>
        <rpm-excludedocs>true</rpm-excludedocs>
        <locale>en_US</locale>
    </preferences>
    <preferences profiles="IBM-Cloud-Standard">
        <type
            image="oem"
            luks="random"
            luks_pbkdf="pbkdf2"
            luks_version="luks2"
            filesystem="btrfs"
            kernelcmdline="systemd.show_status=yes console=ttyS0,115200 console=tty0 net.ifnames=0 \$ignition_firstboot ignition.platform.id=qemu rd.debug"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="false"
            btrfs_root_is_subvolume="true"
            btrfs_quota_groups="true"
            bootpartition="true"
            bootfilesystem="ext3"
            format="qcow2"
        >
            <luksformat>
                <option name="--cipher" value="aes-xts-plain64"/>
                <option name="--key-size" value="256"/>
            </luksformat>
            <oemconfig>
                <oem-unattended>true</oem-unattended>
                <oem-resize>true</oem-resize>
            </oemconfig>
            <bootloader name="zipl" timeout="10"/>
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
            <size unit="G">2</size>
        </type>
    </preferences>
    <preferences profiles="IBM-Cloud-Secure-Execution-z15">
        <type
            image="oem"
            luks="random"
            luks_pbkdf="pbkdf2"
            luks_version="luks2"
            filesystem="btrfs"
            kernelcmdline="systemd.show_status=yes console=ttyS0,115200 console=tty0 net.ifnames=0 \$ignition_firstboot ignition.platform.id=qemu swiotlb=262144 rd.debug"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="false"
            btrfs_root_is_subvolume="true"
            btrfs_quota_groups="true"
            bootpartition="true"
            bootfilesystem="ext3"
            format="qcow2"
        >
            <luksformat>
                <option name="--cipher" value="aes-xts-plain64"/>
                <option name="--key-size" value="256"/>
            </luksformat>
            <oemconfig>
                <oem-unattended>true</oem-unattended>
                <oem-resize>true</oem-resize>
            </oemconfig>
            <bootloader name="zipl" timeout="10">
                <securelinux>
                    
                    <hkd_cert name="/var/lib/se-certs/HKD-8562-024B858.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-8562-024B868.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-8562-024B878.crt"/>
                    <hkd_sign_cert name="/var/lib/se-certs/ibm-z-host-key-signing.crt"/>
                    <hkd_ca_cert name="/var/lib/se-certs/DigiCertCA.crt"/>
                    <hkd_revocation_list name="/var/lib/se-certs/ibm-z-host-key.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/ibm-z-host-key-gen2.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedRootG4.crl"/>
                </securelinux>
            </bootloader>
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
            <size unit="G">2</size>
        </type>
    </preferences>
    <preferences profiles="IBM-Cloud-Secure-Execution-z16">
        <type
            image="oem"
            luks="random"
            luks_pbkdf="pbkdf2"
            luks_version="luks2"
            filesystem="btrfs"
            kernelcmdline="systemd.show_status=yes console=ttyS0,115200 console=tty0 net.ifnames=0 \$ignition_firstboot ignition.platform.id=qemu swiotlb=262144 rd.debug"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="false"
            btrfs_root_is_subvolume="true"
            btrfs_quota_groups="true"
            bootpartition="true"
            bootfilesystem="ext3"
            format="qcow2"
        >
            <luksformat>
                <option name="--cipher" value="aes-xts-plain64"/>
                <option name="--key-size" value="256"/>
            </luksformat>
            <oemconfig>
                <oem-unattended>true</oem-unattended>
                <oem-resize>true</oem-resize>
            </oemconfig>
            <bootloader name="zipl" timeout="10">
                <securelinux>
                    
                    <hkd_cert name="/var/lib/se-certs/HKD-3932-02967D8.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-3932-02967F8.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-3932-0296878.crt"/>
                    <hkd_sign_cert name="/var/lib/se-certs/ibm-z-host-key-signing-gen2.crt"/>
                    <hkd_ca_cert name="/var/lib/se-certs/DigiCertCA.crt"/>
                    <hkd_revocation_list name="/var/lib/se-certs/ibm-z-host-key.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/ibm-z-host-key-gen2.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedRootG4.crl"/>
                </securelinux>
            </bootloader>
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
            <size unit="G">2</size>
        </type>
    </preferences>
    <preferences profiles="SUSE-Infra">
        <type
            image="oem"
            luks="random"
            luks_pbkdf="pbkdf2"
            luks_version="luks2"
            filesystem="btrfs"
            kernelcmdline="systemd.show_status=yes console=ttyS0,115200 console=tty0 net.ifnames=0 \$ignition_firstboot ignition.platform.id=qemu swiotlb=262144 rd.debug"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="false"
            btrfs_root_is_subvolume="true"
            btrfs_quota_groups="true"
            bootpartition="true"
            bootfilesystem="ext3"
            format="qcow2"
        >
            <luksformat>
                <option name="--cipher" value="aes-xts-plain64"/>
                <option name="--key-size" value="256"/>
            </luksformat>
            <oemconfig>
                <oem-unattended>true</oem-unattended>
                <oem-resize>true</oem-resize>
            </oemconfig>
            <bootloader name="zipl" timeout="10">
                <securelinux>
                    <hkd_cert name="/var/lib/se-certs/HKD-8561-02688E8.crt.20241112"/>
                    <hkd_ca_cert name="/var/lib/se-certs/DigiCertCA.crt"/>
                    <hkd_sign_cert name="/var/lib/se-certs/ibm-z-host-key-signing.crt"/>
                    <hkd_revocation_list name="/var/lib/se-certs/ibm-z-host-key.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedRootG4.crl"/>
                </securelinux>
            </bootloader>
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
            <size unit="G">2</size>
        </type>
    </preferences>
    <users>
        <user password="$1$wYJUgpM5$RXMMeASDc035eX.NbYWFl0" home="/root" name="root" groups="root"/>
    </users>
    <repository type="rpm-md">
        <source path="obsrepositories:/"/>
    </repository>
    <packages type="image" profiles="IBM-Cloud-Secure-Execution-z15,IBM-Cloud-Secure-Execution-z16">
        <package name="ibm-se-certificates"/>
        <package name="ibm-se-revocation-lists"/>
        <package name="cloud-se-host-certificates"/>
        <package name="cloud-init"/>
        <package name="cloud-init-config-suse"/>
        <package name="systemd-network"/>
    </packages>
    <packages type="image" profiles="IBM-Cloud-Standard">
        <package name="cloud-init"/>
        <package name="cloud-init-config-suse"/>
        <package name="systemd-network"/>
    </packages>
    <packages type="image" profiles="SUSE-Infra">
        <package name="ibm-se-certificates"/>
        <package name="ibm-se-revocation-lists"/>
        <package name="suse-se-host-certificates"/>
        <package name="systemd-network"/>
    </packages>
    <packages type="image">
        <package name="patterns-base-bootloader"/>
        <package name="kernel-default"/>
        <package name="ignition-dracut"/>
        <package name="combustion"/>
        <package name="btrfsmaintenance"/>
        <package name="btrfsprogs"/>
        <package name="microos-tools"/>
        <package name="sudo"/>
        <package name="s390-tools"/>
        <package name="dracut-kiwi-oem-repart"/>
        <package name="shadow"/>
        <package name="snapper"/>
        <package name="snapper-zypp-plugin"/>
        <package name="firewalld"/>
        <package name="microos-tools"/>
        <package name="health-checker-plugins-MicroOS"/>
        <package name="squashfs"/>
        <package name="openSUSE-repos-Tumbleweed"/>
        <package name="openssh-server"/>
        <package name="openssh"/>
        <package name="iproute2"/>
        <package name="less"/>
        <package name="curl"/>
        <package name="cryptsetup"/>
        <package name="procps"/>
    </packages>
    <packages type="bootstrap">
        <package name="gawk"/>
        <package name="grep"/> 
        <package name="gzip"/>
        <package name="udev"/>
        <package name="xz"/>
        <package name="shadow"/>
        <package name="filesystem"/>
        <package name="coreutils"/>
        <package name="openssl"/>
        <package name="glibc-locale-base"/>
        <package name="ca-certificates"/>
        <package name="ca-certificates-mozilla"/>
        <package name="MicroOS-release-dvd"/>
        <package name="systemd-presets-branding-MicroOS"/>
        <package name="diffutils"/>
    </packages>
</image>

Places

File _service:obs_scm:appliance.kiwi of Package test-image-MicroOS (Revision 75a45c751d2672bba74296a1e94726b3)

Places