humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

muse-workover

Browse Source
This commit is contained in:
humocs-man
2026-09-05 14:56:19 +02:00
parent fd328b024e
commit 1d340945c1
9 changed files with 68 additions and 133 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Containerfile
+12 -5
View File
@@ -72,12 +72,19 @@ RUN --mount=type=bind,from=build-ctx,source=/build/50-prepare-flatpak-for-bazaar
# CONFIGURATION LAYER (Der "saubere" Teil)
###############################################################################
# 1. Kopiere die Filesystem-Fixes (tmpfiles.d)
COPY configs/bootc-fix.conf /etc/tmpfiles.d/
# 1. Kopiere die Filesystem-Fixes (tmpfiles.d, Vendor-Default)
COPY configs/bootc-fix.conf /usr/lib/tmpfiles.d/bootc-fix.conf
# 2. Kopiere die Systemd-Overrides (Update-Timer und -Service)
COPY configs/bootc-timer-override.conf /etc/systemd/system/bootc-fetch-apply-updates.timer.d/override.conf
COPY configs/bootc-override.conf /etc/systemd/system/bootc-fetch-apply-updates.service.d/override.conf
# 1b. Container-Policy (Default aus /usr/etc, kein Host-Override nötig)
# sigstoreSigned-Pflicht für eigenes Image, Public-Registries explizit erlaubt
COPY configs/containers/policy.json /usr/etc/containers/policy.json
COPY cosign.pub /usr/etc/pki/containers/cosign.pub
RUN chmod 0644 /usr/etc/containers/policy.json /usr/etc/pki/containers/cosign.pub && \
python3 -m json.tool /usr/etc/containers/policy.json > /dev/null
# 2. Kopiere die Systemd-Overrides als Vendor-Drop-ins (kein /etc/-Override im Image)
COPY configs/bootc-timer-override.conf /usr/lib/systemd/system/bootc-fetch-apply-updates.timer.d/override.conf
COPY configs/bootc-override.conf /usr/lib/systemd/system/bootc-fetch-apply-updates.service.d/override.conf
# 3. Kopiere das Benachrichtigungs-Skript
COPY --chmod=755 scripts/notify-bootc-user.sh /usr/bin/