version: '2'
pipelines:
  - mpp-import-pipelines:
      path: ../manifests/fedora-vars.ipp.yaml
  - mpp-import-pipeline:
      path: ../manifests/fedora-build-v2.ipp.yaml
      id: build
    runner:
      mpp-format-string: org.osbuild.fedora{release}
  - name: tree
    build: name:build
    stages:
      - type: org.osbuild.mkdir
        options:
          paths:
            - path: /usr/share/osbuild/oscap
              parents: true
      - type: org.osbuild.oscap.autotailor
        options:
          filepath: /usr/share/osbuild/oscap/tailoring.xml
          config:
            datastream: /usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml
            profile_id: xccdf_org.ssgproject.content_profile_ospp
            tailored_profile_id: xccdf_org.ssgproject.content_profile_ospp_osbuild_tailoring
            selected:
              - partition_for_var_log
            unselected:
              - rpm_verify_hashes
              - rpm_verify_permissions
            overrides:
              - var: sshd_idle_timeout_value
                value: 600
              - var: var_account_disable_post_pw_expiration
                value: 100
