particle-os/debian-bootc-base-images
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

bootc-base-imagectl: add --sysusers

Browse source 
This allows users to opt out of the hardcoded passwd/group files we
carry here in favour of making sysusers entries canonical.

This is especially useful with the `--add-dir` option, which allows
injecting user-owned sysusers entries to e.g. define more users or to
fixate normally floating UIDs from packages.

This uses the new `sysusers` knob in rpm-ostree. For more details, see:
https://github.com/coreos/rpm-ostree/pull/5427
This commit is contained in:
Jonathan Lebon 2025-07-14 12:13:08 -04:00
parent c7b5f9e54a
commit 8545b42242
No known key found for this signature in database
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
bootc-base-imagectl
View file

@ -48,6 +48,10 @@ def run_build_rootfs(args):
override_manifest['ostree-layers'].append(f'overlay/{base}')
if args.no_docs:
override_manifest['documentation'] = False
if args.sysusers:
override_manifest['sysusers'] = 'compose-forced'
override_manifest['check-passwd'] = {'type': 'none'}
override_manifest['check-groups'] = {'type': 'none'}
tmp_manifest = None
if override_manifest:
@ -148,6 +152,7 @@ if __name__ == "__main__":
build_rootfs.add_argument("--cachedir", help="Cache repo metadata and RPMs in specified directory", action='store', default='')
build_rootfs.add_argument("--add-dir", help='Copy dir contents into the target', action='append', default=[], metavar='DIR')
build_rootfs.add_argument("--no-docs", help="Don't install documentation", action='store_true')
build_rootfs.add_argument("--sysusers", help="Run systemd-sysusers instead of injecting hardcoded passwd/group entries", action='store_true')
build_rootfs.add_argument("source_root", help="Path to the source root directory used for dnf configuration (default=/)", nargs='?', default='/')
build_rootfs.add_argument("target", help="Path to the target root directory that will be generated.")
build_rootfs.set_defaults(func=run_build_rootfs)