Merge pull request #822 from openSUSE/split_products

Split products

.github/workflows/ci-integration-tests.yml

@@ -122,8 +122,8 @@ jobs:
  run: podman exec agama bash -c "cd /checkout; ./setup-service.sh"
 
  - name: Set a testing Agama configuration
- # copy a simplified ALP config file, it skips the product selection at the beginning
- run: podman exec agama bash -c "cp /checkout/playwright/config/agama.yaml /checkout/service/etc/agama.yaml"
+ # use just one product, it skips the product selection at the beginning
+ run: podman exec agama bash -c "rm /checkout/products.d/{leap16,ALP-Dolomite}.yaml"
 
  - name: Show NetworkManager log
  run: podman exec agama journalctl -u NetworkManager

.github/workflows/obs-staging-products.yml

@@ -0,0 +1,19 @@
+name: Submit agama-products
+
+on:
+ # runs on pushes targeting the default branch
+ push:
+ branches:
+ - master
+ paths:
+ # run only when a Rust source is changed
+ - products.d/**
+
+jobs:
+ update_staging:
+ uses: ./.github/workflows/obs-staging-shared.yml
+ # pass all secrets
+ secrets: inherit
+ with:
+ project_name: systemsmanagement:Agama:Staging
+ package_name: agama-products-opensuse

products.d/ALP-Dolomite.yaml

@@ -0,0 +1,103 @@
+id: ALP-Dolomite
+name: SUSE ALP Dolomite
+description: 'SUSE ALP Dolomite is a minimum immutable OS core, focused on
+ security to provide the bare minimum to run workloads and services as
+ containers or virtual machines.'
+software:
+ installation_repositories:
+ - url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/x86_64/product/
+ archs: x86_64
+ - url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/aarch64/product/
+ archs: aarch64
+ - url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/s390x/product/
+ archs: s390
+ - url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/ppc64le/product/
+ archs: ppc
+
+ mandatory_patterns:
+ - alp_base_zypper
+ - alp_cockpit
+ - alp_hardware
+ optional_patterns: null # no optional pattern shared
+ mandatory_packages:
+ - package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
+ - package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
+ archs: aarch64, x86_64
+ - package: libtss2-tcti-device0
+ - package: ppc64-diag # Needed for hardware-based installations
+ archs: ppc64
+ optional_packages: null
+ base_product: ALP-Dolomite
+
+security:
+ tpm_luks_open: true
+ lsm: selinux
+ available_lsms:
+ # apparmor:
+ # patterns:
+ # - apparmor
+ selinux:
+ patterns:
+ - alp_selinux
+ policy: enforcing
+ none:
+ patterns: null
+
+storage:
+ space_policy: delete
+ encryption:
+ method: luks2
+ pbkd_function: pbkdf2
+ volumes:
+ - "/"
+ volume_templates:
+ - mount_path: "/"
+ filesystem: btrfs
+ btrfs:
+ snapshots: true
+ read_only: true
+ default_subvolume: "@"
+ subvolumes:
+ - path: root
+ - path: home
+ - path: opt
+ - path: srv
+ - path: boot/writable
+ - path: usr/local
+ - path: var
+ copy_on_write: false
+ # Architecture specific subvolume
+ - path: boot/grub2/arm64-efi
+ archs: aarch64
+ - path: boot/grub2/i386-pc
+ archs: x86_64
+ - path: boot/grub2/powerpc-ieee1275
+ archs: ppc,!board_powernv
+ - path: boot/grub2/s390x-emu
+ archs: s390
+ - path: boot/grub2/x86_64-efi
+ archs: x86_64
+ size:
+ auto: true
+ outline:
+ required: true
+ filesystems:
+ - btrfs
+ snapshots_configurable: false
+ auto_size:
+ base_min: 5 GiB
+ base_max: 25 GiB
+ max_fallback_for:
+ - "/var"
+ - mount_path: "/var"
+ filesystem: btrfs
+ mount_options:
+ - "x-initrd.mount"
+ - "nodatacow"
+ size:
+ auto: false
+ min: 5 GiB
+ outline:
+ required: false
+ filesystems:
+ - btrfs

products.d/agama-products-opensuse.changes

@@ -0,0 +1,5 @@
+-------------------------------------------------------------------
+Mon Oct 30 14:38:51 UTC 2023 - Josef Reidinger <jreidinger@suse.com>
+
+- Initial split of products (gh#openSUSE/agama#602,
+ gh#openSUSE/agama#822)

products.d/agama-products-opensuse.spec

@@ -0,0 +1,66 @@
+#
+# spec file for package agama-products-opensuse
+#
+# Copyright (c) 2023 SUSE LINUX GmbH, Nuernberg, Germany.
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
+#
+
+Name: agama-products-opensuse
+# This will be set by osc services, that will run after this.
+Version: 0
+Release: 0
+Summary: Definition of openSUSE products for the Agama installer
+License: GPL-2.0-only
+Url: https://github.com/opensuse/agama
+BuildArch: noarch
+Source0: tumbleweed.yaml
+Source1: ALP-Dolomite.yaml
+Source2: leap16.yaml
+
+%description
+Products definition for Agama installer. This one is for opensuse products.
+
+%package -n agama-products-ALP-Dolomite
+# This will be set by osc services, that will run after this.
+Version: 0
+Release: 0
+Summary: Definition of Dolomite product for the Agama installer
+License: GPL-2.0-only
+Url: https://github.com/opensuse/agama
+BuildArch: noarch
+
+%description -n agama-products-ALP-Dolomite
+Products definition for Agama installer. This one is for ALP Dolomite product.
+
+%prep
+
+%build
+
+%install
+install -D -d -m 0755 %{buildroot}%{_datadir}/agama/products.d
+install -m 0644 %{SOURCE0} %{buildroot}%{_datadir}/agama/products.d
+install -m 0644 %{SOURCE1} %{buildroot}%{_datadir}/agama/products.d
+install -m 0644 %{SOURCE2} %{buildroot}%{_datadir}/agama/products.d
+
+%files
+%dir %{_datadir}/agama
+%dir %{_datadir}/agama/products.d
+%{_datadir}/agama/products.d/tumbleweed.yaml
+%{_datadir}/agama/products.d/leap16.yaml
+
+%files -n agama-products-ALP-Dolomite
+%dir %{_datadir}/agama
+%dir %{_datadir}/agama/products.d
+%{_datadir}/agama/products.d/ALP-Dolomite.yaml
+
+%changelog

products.d/leap16.yaml

@@ -0,0 +1,91 @@
+id: Leap16
+name: openSUSE Leap 16.0
+archs: x86_64,aarch64
+description: '[Experimental project] openSUSE Leap 16 is built on top of the next generation Adaptable Linux Platform (ALP) from SUSE.'
+software:
+ installation_repositories:
+ - url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-x86_64-Media1/
+ archs: x86_64
+ - url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-aarch64-Media1/
+ archs: aarch64
+ mandatory_patterns:
+ - alp_base
+ - alp_base_zypper
+ - alp_cockpit
+ - alp-container_runtime
+ - alp_defaults
+ optional_patterns: null # no optional pattern shared
+ mandatory_packages:
+ - package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
+ - package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
+ archs: aarch64, x86_64
+ - package: libtss2-tcti-device0
+ optional_packages: null
+ base_product: Leap16
+
+security:
+ tpm_luks_open: true
+ lsm: selinux
+ available_lsms:
+ # apparmor:
+ # patterns:
+ # - apparmor
+ selinux:
+ patterns:
+ - alp_selinux
+ policy: enforcing
+ none:
+ patterns: null
+
+storage:
+ space_policy: delete
+ encryption:
+ method: luks2
+ pbkd_function: pbkdf2
+ volumes:
+ - "/"
+ volume_templates:
+ - mount_path: "/"
+ filesystem: btrfs
+ btrfs:
+ snapshots: true
+ read_only: true
+ default_subvolume: "@"
+ subvolumes:
+ - path: root
+ - path: home
+ - path: opt
+ - path: srv
+ - path: boot/writable
+ - path: usr/local
+ - path: boot/grub2/arm64-efi
+ archs: aarch64
+ - path: boot/grub2/i386-pc
+ archs: x86_64
+ - path: boot/grub2/powerpc-ieee1275
+ archs: ppc,!board_powernv
+ - path: boot/grub2/s390x-emu
+ archs: s390
+ - path: boot/grub2/x86_64-efi
+ archs: x86_64
+ - path: var
+ copy_on_write: false
+ size:
+ auto: false
+ min: 5 GiB
+ outline:
+ required: true
+ filesystems:
+ - btrfs
+ snapshots_configurable: false
+ - filesystem: xfs
+ size:
+ auto: false
+ outline:
+ required: false
+ filesystems:
+ - btrfs
+ - ext2
+ - ext3
+ - ext4
+ - xfs