No description
Find a file
Ondřej Budai 973639d372 distro/rhel84: use a random uuid for XFS partition
Imagine this situation: You have a RHEL system booted from an image produced
by osbuild-composer. On this system, you want to use osbuild-composer to
create another image of RHEL.

However, there's currently something funny with partitions:

All RHEL images built by osbuild-composer contain a root xfs partition. The
interesting bit is that they all share the same xfs partition UUID. This might
sound like a good thing for reproducibility but it has a quirk.

The issue appears when osbuild runs the qemu assembler: it needs to mount all
partitions of the future image to copy the OS tree into it.

Imagine that osbuild-composer is running on a system booted from an imaged
produced by osbuild-composer. This means that its root xfs partition has this
uuid:

efe8afea-c0a8-45dc-8e6e-499279f6fa5d

When osbuild-composer builds an image on this system, it runs osbuild that
runs the qemu assembler at some point. As I said previously, it will mount
all partitions of the future image. That means that it will also try to
mount the root xfs partition with this uuid:

efe8afea-c0a8-45dc-8e6e-499279f6fa5d

Do you remember this one? Yeah, it's the same one as before. However, the xfs
kernel driver doesn't like that. It contains a global table[1] of all xfs
partitions that forbids to mount 2 xfs partitions with the same uuid.

I mean... uuids are meant to be unique, right?

This commit changes the way we build RHEL 8.4 images: Each one now has a
unique uuid. It's now literally a unique universally unique identifier. haha

[1]: a349e4c659/fs/xfs/xfs_mount.c (L51)
2020-12-15 16:43:39 +01:00
.github .github: switch to ubuntu-20.04 2020-11-19 11:58:56 +01:00
cmd distro/rhel84: use a random uuid for XFS partition 2020-12-15 16:43:39 +01:00
distribution composer: do not require the weldr socket 2020-11-17 17:01:18 +00:00
docs Add diagrams for other API layers (cloud and koji) 2020-08-10 19:47:39 +02:00
image-types 📦 Use raw image format for AWS 2020-07-02 13:11:11 -05:00
internal distro/rhel84: use a random uuid for XFS partition 2020-12-15 16:43:39 +01:00
repositories tree-wide: drop f31 support 2020-10-21 09:04:13 +02:00
schutzbot tests: move the libvirt test logic out of Jenkinsfile 2020-12-02 08:44:33 +01:00
test distro/rhel84: use a random uuid for XFS partition 2020-12-15 16:43:39 +01:00
tools tests: move the libvirt test logic out of Jenkinsfile 2020-12-02 08:44:33 +01:00
vendor upload/koji: use the new API of kolo/xmlrpc by default 2020-10-14 16:44:26 +02:00
.gitignore .gitignore: ignore vscode state 2020-11-11 18:16:42 +01:00
.golangci.yml ci/lint: add integration tag 2020-03-17 20:36:58 +01:00
codecov.yml codevoc: fix threshold 2020-05-17 10:12:06 +02:00
CONTRIBUTING.md rcm: drop sub-package 2020-07-17 19:13:15 +01:00
DEPLOYING.md Add DEPLOYING.md 2020-10-20 15:43:30 +02:00
dnf-json dnf-json: don't initialize dnf plugins 2020-08-23 16:08:25 +02:00
go.mod upload/koji: use the new API of kolo/xmlrpc by default 2020-10-14 16:44:26 +02:00
go.sum upload/koji: use the new API of kolo/xmlrpc by default 2020-10-14 16:44:26 +02:00
HACKING.md HACKING.md: improve link 2020-10-20 15:43:30 +02:00
krb5.conf upload/koji: add support for GSSAPI/Kerberos auth 2020-08-27 17:29:57 +01:00
LICENSE Revert "Fill in the license template" 2019-11-15 15:26:51 +01:00
Makefile Makefile: define commit on make (s)rpm 2020-11-17 08:56:17 +00:00
NEWS.md 25 2020-11-19 14:48:50 +01:00
osbuild-composer.spec spec: build & install osbuild-composer(7) man-page 2020-12-09 15:12:39 +01:00
README.md bump minimal Go version to 1.13 2020-08-25 10:42:21 +02:00
Schutzfile Schutzfile: bump koji-osbuild reverse dependency 2020-12-01 12:31:59 +01:00

OSBuild Composer

Operating System Image Composition Services

The composer project is a set of HTTP services for composing operating system images. It builds on the pipeline execution engine of osbuild and defines its own class of images that it supports building.

Multiple APIs are available to access a composer service. This includes support for the lorax-composer API, and as such can serve as drop-in replacement for lorax-composer.

You can control a composer instance either directly via the provided APIs, or through higher-level user-interfaces from external projects. This, for instance, includes a Cockpit Module or using the composer-cli command-line tool.

Project

About

Composer is a middleman between the workhorses from osbuild and the user-interfaces like cockpit-composer, composer-cli, or others. It defines a set of high-level image compositions that it supports building. Builds of these compositions can be requested via the different APIs of Composer, which will then translate the requests into pipeline-descriptions for osbuild. The pipeline output is then either provided back to the user, or uploaded to a user specified target.

The following image visualizes the overall architecture of the OSBuild infrastructure and the place that Composer takes:

overview

Consult the osbuild-composer(7) man-page for an introduction into composer, information on running your own composer instance, as well as details on the provided infrastructure and services.

Requirements

The requirements for this project are:

  • osbuild >= 11
  • systemd >= 244

At build-time, the following software is required:

  • go >= 1.13
  • python-docutils >= 0.13

Build

The standard go package system is used. Consult upstream documentation for detailed help. In most situations the following commands are sufficient to build and install from source:

mkdir build
go build -o build ./...

The man-pages require python-docutils and can be built via:

make man

Repository:

Pull request gating

Each pull request against osbuild-composer starts a series of automated tests. Tests run via GitHub Actions and Jenkins. Each push to the pull request will launch theses tests automatically.

Jenkins only tests pull requests from members of the osbuild organization in GitHub. A member of the osbuild organization must say ok to test in a pull request comment to approve testing. Anyone can ask for testing to run by saying the bot's favorite word, schutzbot, in a pull request comment. Testing will begin shortly after the comment is posted.

Test results in Jenkins are available by clicking the Details link on the right side of the Schutzbot check in the pull request page.

License:

  • Apache-2.0
  • See LICENSE file for details.