From 552f6d5fb5c62aa5b6da01ee8266731f33af14e1 Mon Sep 17 00:00:00 2001
From: Vadim Rutkovsky <vrutkovs@redhat.com>
Date: Wed, 16 Sep 2020 12:45:48 +0200
Subject: [PATCH] firstboot: disable existing repos before pivot

On FCOS boot OS extensions are being installed, so in order to use
only shipped RPMs and avoid pulling in updates from public repos existing
repos need to be disabled
---
 .../_base/units/machine-config-daemon-firstboot.service.yaml    | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/templates/common/_base/units/machine-config-daemon-firstboot.service.yaml b/templates/common/_base/units/machine-config-daemon-firstboot.service.yaml
index 5d5e1b3ffb..7851d983a3 100644
--- a/templates/common/_base/units/machine-config-daemon-firstboot.service.yaml
+++ b/templates/common/_base/units/machine-config-daemon-firstboot.service.yaml
@@ -14,6 +14,8 @@ contents: |
   [Service]
   Type=oneshot
   RemainAfterExit=yes
+  # Disable existing repos (if any) so that OS extensions would use embedded RPMs only
+  ExecStartPre=-/usr/bin/sh -c "sed -i 's/enabled=1/enabled=0/' /etc/yum.repos.d/*.repo"
   ExecStart=/run/bin/machine-config-daemon firstboot-complete-machineconfig
 
   {{if .Proxy -}}