Skip to content

Instantly share code, notes, and snippets.

@runcom
Last active November 2, 2023 10:08
Show Gist options
  • Save runcom/33dae8ac89e599e8fb6ca907367dfcf8 to your computer and use it in GitHub Desktop.
Save runcom/33dae8ac89e599e8fb6ca907367dfcf8 to your computer and use it in GitHub Desktop.
include:
- centos-tier-1-stream9.yaml
# Configuration for the initramfs
postprocess:
- |
#!/usr/bin/env bash
mkdir -p /usr/lib/systemd/system-preset
cat > /usr/lib/systemd/system-preset/80-iot.preset << 'EOF'
# greenboot generic health checking framework
enable greenboot-grub2-set-counter.service
enable greenboot-grub2-set-success.service
enable greenboot-healthcheck.service
enable greenboot-rpm-ostree-grub2-check-fallback.service
enable greenboot-status.service
enable greenboot-task-runner.service
enable redboot-auto-reboot.service
enable redboot-task-runner.service
# PARSEC services
enable parsec.service
enable dbus-parsec.service
# zezere_ignition provides first-boot provisioning and configuration
enable zezere_ignition.timer
enable ignition-firstboot-complete.service
enable coreos-ignition-write-issues.service
enable fdo-client-linuxapp.service
enable NetworkManager.service
enable firewalld.service
EOF
mkdir -p /usr/lib/dracut/dracut.conf.d
cat > /usr/lib/dracut/dracut.conf.d/01-edge-base.conf << 'EOF'
dracutmodules+=" systemd-ask-password ignition ignition-edge network-manager network url-lib clevis clevis-pin-null crypt lvm fido2 udev-rules fs-lib uefi-lib "
EOF
packages:
- redhat-release
- fdo-owner-cli
- ignition
- ignition-edge
- ssh-key-dir
- grub2
- grub2-efi-x64
- efibootmgr
- shim-x64
- microcode_ctl
- iwl1000-firmware
- iwl100-firmware
- iwl105-firmware
- iwl135-firmware
- iwl2000-firmware
- iwl2030-firmware
- iwl3160-firmware
- iwl5000-firmware
- iwl5150-firmware
- iwl6050-firmware
- iwl7260-firmware
- glibc
- rpm
- rpm-ostree
- glibc-minimal-langpack
- nss-altfiles
- dracut-config-generic
- dracut-network
- basesystem
- bash
- platform-python
- shadow-utils
- chrony
- setup
- shadow-utils
- sudo
- systemd
- coreutils
- util-linux
- curl
- vim-minimal
- polkit
- lvm2
- cryptsetup
- pinentry
- e2fsprogs
- dosfstools
- keyutils
- gnupg2
- attr
- xz
- gzip
- firewalld
- iptables
- NetworkManager
- NetworkManager-wifi
- NetworkManager-wwan
- wpa_supplicant
- dnsmasq
- traceroute
- hostname
- iproute
- iputils
- procps-ng
- #rootfiles
- passwd
- policycoreutils
- policycoreutils-python-utils
- setools-console
- less
- tar
- rsync
- usbguard
- bash-completion
- tmux
- ima-evm-utils
- audit
- podman
- containernetworking-plugins
- container-selinux
- skopeo
- criu
- slirp4netns
- fuse-overlayfs
- clevis
- clevis-dracut
- clevis-luks
- greenboot
- greenboot-default-health-checks
- fdo-client
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment