Commit Graph
58 Commits
Author SHA1 Message Date
gunnar 70d3d2e400 added Containerfile.splitter 2026-06-10 19:00:10 +02:00
gunnar 7032e8a7f8 switch to buildah/chunkah 2026-06-10 18:56:30 +02:00
gunnar 57ebd49232 next try cosign no.4 2026-06-06 23:49:21 +02:00
gunnar 92bebe93b8 next try cosign 2026-06-06 22:18:25 +02:00
gunnar 2c282fdb3c next try cosign 2026-06-06 22:07:10 +02:00
gunnar 2b29406dc4 next try cosign 2026-06-06 21:54:34 +02:00
gunnar aa896c668f cosign back to legacy 2026-06-06 21:47:51 +02:00
gunnar 8f5cebb3ea changed skopeo caching 2026-06-06 19:16:35 +02:00
gunnar 8b9ce4b100 upgraded API-version for Skopeo 2026-06-06 19:01:44 +02:00
gunnar d9fba0088d upgraded API-version for Skopeo 2026-06-06 18:46:55 +02:00
gunnar 23b49e5515 switched to push by skopeo for OCI 2026-06-06 18:38:13 +02:00
gunnar 68c3b5f7a3 switched to push by skopeo for OCI 2026-06-06 18:25:16 +02:00
gunnar aac4127b26 experimenatl feature=1 2026-06-06 17:33:42 +02:00
gunnar 1a2aa6087d experimenatl feature=1 2026-06-06 17:21:18 +02:00
gunnar 7115bc8b2f typo fixed 2026-06-06 17:15:15 +02:00
gunnar fa349dad2f changed signing method 2026-06-06 17:08:20 +02:00
gunnar b8d2f4b2fe changed signing method 2026-06-06 16:55:51 +02:00
gunnar 4ebd6abbda fix typo 2026-06-06 11:37:09 +02:00
gunnar 8d8b714fbb fix typo 2026-06-06 11:24:59 +02:00
gunnar 0859168fc9 fix typo 2026-06-06 11:13:49 +02:00
gunnar 303792dde2 fix typo 2026-06-06 11:04:43 +02:00
gunnar 18b597392a another cosign fix 2026-06-06 11:03:14 +02:00
gunnar 64a904b3ab another cosign fix 2026-06-06 10:41:54 +02:00
gunnar da531d668f switched to cosign legacy mode 2026-06-06 10:01:33 +02:00
gunnar 0da16e8fb4 corrected cosign experimental flag 2026-06-06 09:45:29 +02:00
gunnar 04680f788e corrected parameter for signing-method 2026-06-06 09:37:48 +02:00
gunnar 5460907c9b changed signing-method 2026-06-06 09:11:38 +02:00
gunnar 12eb3f0f7f fixing passwort for cosign 2026-06-05 23:41:32 +02:00
gunnar 458a930b3b installing dependencies for cosign 2026-06-05 23:30:50 +02:00
gunnar 45c576461b fixed metadata-images 2026-06-05 23:20:52 +02:00
gunnar 11081887b4 fixed separators 2026-06-05 22:52:57 +02:00
gunnar ab11860ae3 registry secret 2026-06-05 22:42:17 +02:00
gunnar fdcbd4acf6 removed rechunk an switched to docker build 2026-06-05 22:23:45 +02:00
gunnar 290dc69d81 last try podman 2026-06-05 20:27:47 +02:00
gunnar e414033965 set podman variables 2026-06-05 20:22:06 +02:00
gunnar fc722fe8f8 back to podman but privileged 2026-06-05 20:15:48 +02:00
gunnar 3d9ef293a7 refactored chunkah 2026-06-05 19:09:11 +02:00
gunnar 70210fed47 changed from podman to docker 2026-06-05 19:00:58 +02:00
gunnar bcce5cea5b next try 3 2026-06-05 18:55:53 +02:00
gunnar 808264b0ad next try 2026-06-05 18:50:35 +02:00
gunnar 2031488202 next try 2026-06-05 18:43:44 +02:00
gunnar 7648f88e94 ci: finalize manual podman build pipeline for fluffy-pancake 2026-06-05 18:38:41 +02:00
gunnar 7ca5a3d68a ci: finalize manual podman build pipeline for fluffy-pancake 2026-06-05 18:31:31 +02:00
gunnar b17af542be podman build
Validate Renovate Config / validate (push) Successful in 1m22s
Renovate / Run Renovate (push) Failing after 30s
2026-06-05 18:21:49 +02:00
gunnarandopencode 20e1692ba0 fix: remove root-owned overlay path from buildah cache
The /var/lib/containers/storage/overlay directory is owned by root
(from the container-storage-action BTRFS mount). The actions/cache
post-cleanup step cannot remove it as the runner user, causing EACCES
warnings.

Co-Authored-By: opencode <opencode@opencode.ai>
2026-06-01 18:12:30 +02:00
gunnar d9b5367f76 fix: replace non-functional systemd presets with explicit systemctl enable
Presets only apply during package installation, not when files are
COPY'd into the image. This caused libvirtd, podman.socket,
bootc-fetch-apply-updates.timer, and flatpak-preinstall.service
to remain disabled on first boot.
2026-05-31 18:11:43 +02:00
gunnar 6acee4ce1f feat: support manual builds from feature branches
- build.yml: determine image tag from branch (main=stable, other=test-<branch>)
- build.yml: allow push on workflow_dispatch from any branch
- build.yml: only sign images from main branch
- build-installer-iso.yml: add image_tag input (default: stable)
2026-05-31 15:19:23 +02:00
gunnar 08601d3099 fix: add ostree.bootable label to image metadata 2026-05-30 18:17:04 +02:00
gunnar afb889603d fix: add ostree.bootable label to chunkah rechunk args 2026-05-30 18:03:09 +02:00
gunnar 126bc28aa8 fix: tag rechunked image with all metadata tags for push to GHCR 2026-05-30 17:37:24 +02:00
gunnar 3542e0f53f fix: use workspace as build context so FROM oci-archive can find out.ociarchive 2026-05-30 17:17:14 +02:00
gunnar ca4040515a fix: use local context for chunkah rechunk to fix missing out.ociarchive 2026-05-30 16:55:27 +02:00
gunnar a957c96fa1 chore: repo cleanup - pin actions, fix typos, improve gitignore
- build.yml: pin push-to-registry to SHA
- build-installer-iso.yml: pin checkout/upload-artifact to SHA,
  replace hardcoded registry with env vars, add env block
- Justfile: fix 'Virtal' typo (10x), fix shfmt error msg,
  quote $file in check/fix recipes
- .gitignore: add *.iso, *.qcow2, *.raw, .env, *.log
- iso/config.toml: remove leading space
- Containerfile: remove non-existent /tmp/build from cleanup
- build/50-prepare-flatpak-for-bazaar.sh: add executable permission
- build/README.md: update to reflect current script names
2026-05-30 16:33:41 +02:00
gunnar d89f20e931 chore: use push-to-registry digest output, remove skopeo inspect 2026-05-30 16:19:03 +02:00
gunnar 9b6424ec7c fix: replace Skopeo push with redhat-actions/push-to-registry
Avoids double compression (chunkah zstd + Skopeo zstd:chunked).
push-to-registry handles auth and multi-tag push natively.
2026-05-30 16:14:30 +02:00
gunnar 5ba492a8fd fix: add --compressed to chunkah args and clean buildah cache before rechunk
chunkah OCI archive (6.7 GiB uncompressed) did not fit on runner alongside
original image. --compressed uses zstd compression, reducing archive to ~3-4GB.
Also cleans buildah cache before rechunk to free additional space.
2026-05-30 16:12:12 +02:00
gunnar bc3f0180e2 fix: remove sudo from rechunk step to match rootless buildah storage 2026-05-30 16:02:50 +02:00
gunnar 94460a999d fix: Update-Skript, Containerfile-Optimierungen und chunkah-Rechunking
- notify-bootc-user.sh: D-Bus-Umgebung korrekt fuer Systemd-Service,
  jq-basierter Staging-Check (.status.staged != null), Guard Clauses,
  -Variable entfernt
- Containerfile: COPY --chmod=755 fuer Skript-Permissions
- build/20-multimedia.sh: Redundantes dnf5 clean all entfernt
- build/30-virt.sh: dnf5 autoremove und Cleanup entfernt
- build/40-remove-packages.sh: || true entfernt (Fehler sichtbar machen)
- build/50-prepare-flatpak-for-bazaar.sh: curl -f --retry 3 hinzugefuegt
- build.yml: chunkah Rechunk-Step fuer content-based Layers (Delta-Updates),
  Cache-Key erweitert (scripts/**), continue-on-error entfernt
- build-installer-iso.yml: concurrency-Block hinzugefuegt
2026-05-30 15:42:14 +02:00