File _service:obs_scm:kiwi-1731679109.a7fdd8f72.obscpio of Package test-image-MicroOS

Overview Repositories Revisions Requests Users Attributes Meta

File _service:obs_scm:kiwi-1731679109.a7fdd8f72.obscpio of Package test-image-MicroOS (Revision 7800711225fe7d953edde5cd793352b5)

Currently displaying revision 7800711225fe7d953edde5cd793352b5 , Show latest

07070100000000000081A40000000000000000000000016737538500001F03000000000000000000000000000000000000002900000000kiwi-1731679109.a7fdd8f72/appliance.kiwi<?xml version="1.0" encoding="utf-8"?>

<image schemaversion="7.5" name="kiwi-test-image-MicroOS">
    <description type="system">
        <author>Marcus Schäfer</author>
        <contact>marcus.schaefer@suse.com</contact>
        <specification>MicroOS disk test build for IBM Secure Execution</specification>
    </description>
    <profiles>
        <profile name="SUSE-Infra" description="MicroOS Confidental Compute Encrypted"/>
        <profile name="IBM-Cloud" description="MicroOS Confidental Compute Encrypted For IBM Cloud Regions"/>
    </profiles>
    <preferences>
        <version>16.0.0</version>
        <packagemanager>zypper</packagemanager>
        <bootloader-theme>openSUSE</bootloader-theme>
        <rpm-excludedocs>true</rpm-excludedocs>
        <locale>en_US</locale>
    </preferences>
    <preferences profiles="IBM-Cloud">
        <type
            image="oem"
            luks="random"
            luks_pbkdf="pbkdf2"
            luks_version="luks2"
            filesystem="btrfs"
            kernelcmdline="systemd.show_status=yes console=ttyS0,115200 console=tty0 net.ifnames=0 \$ignition_firstboot ignition.platform.id=qemu swiotlb=262144"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="true"
            btrfs_root_is_subvolume="true"
            btrfs_quota_groups="true"
            bootpartition="true"
            bootfilesystem="ext3"
            format="qcow2"
        >
            <luksformat>
                <option name="--cipher" value="aes-xts-plain64"/>
                <option name="--key-size" value="256"/>
            </luksformat>
            <oemconfig>
                <oem-unattended>true</oem-unattended>
                <oem-resize>true</oem-resize>
            </oemconfig>
            <bootloader name="zipl" timeout="10">
                <securelinux>
                    <hkd_cert name="/var/lib/se-certs/HKD-3932-02967D8.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-3932-02967F8.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-3932-0296878.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-8562-024B858.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-8562-024B868.crt"/>
                    <hkd_cert name="/var/lib/se-certs/HKD-8562-024B878.crt"/>
                    <hkd_ca_cert name="/var/lib/se-certs/DigiCertCA.crt"/>
                    <hkd_sign_cert name="/var/lib/se-certs/ibm-z-host-key-signing-gen2.crt"/>
                    <hkd_revocation_list name="/var/lib/se-certs/ibm-z-host-key-gen2.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedRootG4.crl"/>
                </securelinux>
            </bootloader>
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
            <size unit="G">2</size>
        </type>
    </preferences>
    <preferences profiles="SUSE-Infra">
        <type
            image="oem"
            luks="random"
            luks_pbkdf="pbkdf2"
            luks_version="luks2"
            filesystem="btrfs"
            kernelcmdline="systemd.show_status=yes console=ttyS0,115200 console=tty0 net.ifnames=0 \$ignition_firstboot ignition.platform.id=qemu swiotlb=262144"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="true"
            btrfs_root_is_subvolume="true"
            btrfs_quota_groups="true"
            bootpartition="true"
            bootfilesystem="ext3"
            format="qcow2"
        >
            <luksformat>
                <option name="--cipher" value="aes-xts-plain64"/>
                <option name="--key-size" value="256"/>
            </luksformat>
            <oemconfig>
                <oem-unattended>true</oem-unattended>
                <oem-resize>true</oem-resize>
            </oemconfig>
            <bootloader name="zipl" timeout="10">
                <securelinux>
                    <hkd_cert name="/var/lib/se-certs/HKD-8561-02688E8.crt.20241112"/>
                    <hkd_ca_cert name="/var/lib/se-certs/DigiCertCA.crt"/>
                    <hkd_sign_cert name="/var/lib/se-certs/ibm-z-host-key-signing.crt"/>
                    <hkd_revocation_list name="/var/lib/se-certs/ibm-z-host-key.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl"/>
                    <hkd_revocation_list name="/var/lib/se-certs/DigiCertTrustedRootG4.crl"/>
                </securelinux>
            </bootloader>
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
            <size unit="G">2</size>
        </type>
    </preferences>
    <users>
        <user password="$1$wYJUgpM5$RXMMeASDc035eX.NbYWFl0" home="/root" name="root" groups="root"/>
    </users>
    <repository type="rpm-md">
        <source path="obsrepositories:/"/>
    </repository>
    <packages type="image" profiles="IBM-Cloud">
        <package name="cloud-se-host-certificates"/>
        <package name="cloud-init"/>
        <package name="cloud-init-config-suse"/>
    </packages>
    <packages type="image" profiles="SUSE-Infra">
        <package name="suse-se-host-certificates"/>
    </packages>
    <packages type="image">
        <package name="ibm-se-certificates"/>
        <package name="ibm-se-revocation-lists"/>
        <package name="patterns-base-bootloader"/>
        <package name="kernel-default"/>
        <package name="ignition-dracut"/>
        <package name="combustion"/>
        <package name="btrfsmaintenance"/>
        <package name="btrfsprogs"/>
        <package name="microos-tools"/>
        <package name="sudo"/>
        <package name="s390-tools"/>
        <package name="qemu-guest-agent"/>
        <package name="dracut-kiwi-oem-repart"/>
        <package name="shadow"/>
        <package name="snapper"/>
        <package name="snapper-zypp-plugin"/>
        <package name="firewalld"/>
        <package name="microos-tools"/>
        <package name="health-checker-plugins-MicroOS"/>
        <package name="squashfs"/>
        <package name="openSUSE-repos-Tumbleweed"/>
        <package name="wicked"/>
        <package name="wicked-service"/>
        <package name="openssh-server"/>
        <package name="openssh"/>
        <package name="iproute2"/>
        <package name="less"/>
        <package name="chrony"/>
        <package name="curl"/>
    </packages>
    <packages type="bootstrap">
        <package name="gawk"/>
        <package name="grep"/> 
        <package name="gzip"/>
        <package name="udev"/>
        <package name="xz"/>
        <package name="shadow"/>
        <package name="filesystem"/>
        <package name="coreutils"/>
        <package name="openssl"/>
        <package name="glibc-locale-base"/>
        <package name="ca-certificates"/>
        <package name="ca-certificates-mozilla"/>
        <package name="MicroOS-release-dvd"/>
        <package name="systemd-presets-branding-MicroOS"/>
        <package name="diffutils"/>
    </packages>
    <packages type="image" profiles="Encrypted">
        <package name="cryptsetup"/>
    </packages>
</image>
07070100000001000081A400000000000000000000000167375385000008AE000000000000000000000000000000000000002400000000kiwi-1731679109.a7fdd8f72/config.sh#!/bin/bash
# shellcheck disable=SC1091
set -euxo pipefail

declare kiwi_iname=${kiwi_iname}
declare kiwi_profiles=${kiwi_profiles}

echo "Configure image: [${kiwi_iname}]-[${kiwi_profiles}]..."

#======================================
# Setup Core Services
#--------------------------------------
for service in \
    sshd.service \
    wicked.service
do
    systemctl enable "${service}"
done

#======================================
# Setup Cloud Services
#--------------------------------------
for profile in ${kiwi_profiles//,/ }; do
    if [ "${profile}" = "IBM-Cloud" ]; then
        for service in \
            cloud-init-local.service \
            cloud-init.service \
            cloud-config.service \
            cloud-final.service \
            chronyd.service
        do
            systemctl enable "${service}"
        done
    fi
done

#=====================================
# Configure snapper
#-------------------------------------
if [ "${kiwi_btrfs_root_is_snapshot-false}" = 'true' ]; then
    echo "creating initial snapper config ..."
    cp /usr/share/snapper/config-templates/default /etc/snapper/configs/root
    baseUpdateSysConfig /etc/sysconfig/snapper SNAPPER_CONFIGS root
    # Adjust parameters
    sed -i'' 's/^TIMELINE_CREATE=.*$/TIMELINE_CREATE="no"/g' \
        /etc/snapper/configs/root
    sed -i'' 's/^NUMBER_LIMIT=.*$/NUMBER_LIMIT="2-10"/g' \
        /etc/snapper/configs/root
    sed -i'' 's/^NUMBER_LIMIT_IMPORTANT=.*$/NUMBER_LIMIT_IMPORTANT="4-10"/g' \
        /etc/snapper/configs/root
fi

# For image tests with an extra boot partition the
# kernel must not be a symlink to another area of
# the filesystem. Latest changes on SUSE changed the
# layout of the kernel which breaks every image with
# an extra boot partition
#
# All of the following is more than a hack and I
# don't like it all
#
# Complains and discussions about this please with
# the SUSE kernel team as we in kiwi can just live
# with the consequences of this change
#
pushd /

for file in /boot/* /boot/.*; do
    if [ -L "${file}" ];then
        link_target=$(readlink "${file}")
        if [[ ${link_target} =~ usr/lib/modules ]];then
            mv "${link_target}" "${file}"
        fi
    fi
done
07070100000002000041ED0000000000000000000000036737538500000000000000000000000000000000000000000000002300000000kiwi-1731679109.a7fdd8f72/root/etc07070100000003000041ED0000000000000000000000026737538500000000000000000000000000000000000000000000003100000000kiwi-1731679109.a7fdd8f72/root/etc/dracut.conf.d07070100000004000081A40000000000000000000000016737538500000023000000000000000000000000000000000000004100000000kiwi-1731679109.a7fdd8f72/root/etc/dracut.conf.d/oem_resize.confadd_dracutmodules+=" kiwi-repart "
07070100000005000081ED0000000000000000000000016737538500000151000000000000000000000000000000000000003000000000kiwi-1731679109.a7fdd8f72/root/etc/fstab.script#!/bin/sh
set -eux

/usr/sbin/setup-fstab-for-overlayfs
# If /var is on a different partition than /...
if [ "$(findmnt -snT / -o SOURCE)" != "$(findmnt -snT /var -o SOURCE)" ]; then
    # ... set options for autoexpanding /var
    gawk -i inplace '$2 == "/var" { $4 = $4",x-growpart.grow,x-systemd.growfs" } { print $0 }' /etc/fstab
fi
07070100000006000081ED0000000000000000000000016737538500000225000000000000000000000000000000000000001E00000000kiwi-1731679109.a7fdd8f72/run#!/bin/bash

qemu-system-s390x \
    -cpu host \
    -machine accel=kvm,usb=off \
    -object s390-pv-guest,id=pv0 \
    -machine confidential-guest-support=pv0 \
    -enable-kvm \
    -nodefaults \
    -name suse-cc \
    -nographic \
    -drive id=disk0,file="$1",format=qcow2,if=none,cache=writeback \
    -device virtio-blk,id=data0,drive=disk0,physical_block_size=512,logical_block_size=512 \
    -device virtio-serial-ccw \
    -device sclpconsole,chardev=console \
    -chardev stdio,id=console \
    -smp 4 \
    -m 4096 \
    -mem-prealloc
07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000B00000000TRAILER!!!25 blocks

Places

File _service:obs_scm:kiwi-1731679109.a7fdd8f72.obscpio of Package test-image-MicroOS (Revision 7800711225fe7d953edde5cd793352b5)

Places