# This must be a v1 manifest!

mpp-vars:
  arch: x86_64
  release: 40
  releasever: f$release
  module_platform_id: platform:$releasever
  snapshot: '20240514'
  updates: '20240626'
  ref: fedora/$arch/osbuild
  isolabel: Fedora-$release-X86_64
  repos:
    - id: default
      baseurl: https://rpmrepo.osbuild.org/v2/mirror/public/$releasever/$releasever-$arch-fedora-$snapshot/
    - id: updates
      baseurl: https://rpmrepo.osbuild.org/v2/mirror/public/$releasever/$releasever-$arch-updates-released-$updates/
  gpgkeys:
    - "-----BEGIN PGP PUBLIC KEY BLOCK-----\n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\n4DM7VidB4PLrMFQMaf0LpjpC2DM=\n=wOl2\n-----END PGP PUBLIC KEY BLOCK-----\n"

pipeline:
  build:
    runner:
      mpp-format-string: org.osbuild.fedora{release}
    pipeline:
      stages:
      - name: org.osbuild.rpm
        options:
          mpp-depsolve:
            architecture: $arch
            module-platform-id: $module_platform_id
            repos:
              mpp-eval: repos
            packages:
              - binutils
              - btrfs-progs
              - cryptsetup
              - dnf
              - dosfstools
              - e2fsprogs
              - gdisk
              - grub2-pc
              - policycoreutils
              - python3-iniparse
              - python3-toml
              - python3-yaml
              - qemu-img
              - rpm-ostree
              - systemd
              - tar
              - xfsprogs
              - xz
              - lvm2
              - selinux-policy-targeted
              - genisoimage
              - isomd5sum
              - xorriso
              - syslinux
              - skopeo
              - lorax-templates-generic
              - syslinux-nonlinux
              - squashfs-tools
              - grub2-pc-modules
              - grub2-tools
              - grub2-efi-x64
              - shim-x64
              - efibootmgr
              - grub2-tools-minimal
              - grub2-tools-extra
              - grub2-tools-efi
              - grub2-efi-x64
              - grub2-efi-x64-cdboot
              - shim-ia32
              - grub2-efi-ia32-cdboot
              - zstd
              - openscap-utils
          gpgkeys:
            mpp-eval: gpgkeys
          exclude:
            docs: true
      - name: org.osbuild.selinux
        options:
          file_contexts: etc/selinux/targeted/contexts/files/file_contexts
          labels:
            /usr/bin/cp: system_u:object_r:install_exec_t:s0
            /usr/bin/tar: system_u:object_r:install_exec_t:s0
  stages:
    - name: org.osbuild.rpm
      options:
        mpp-depsolve:
          architecture: $arch
          module-platform-id: $module_platform_id
          repos:
            mpp-eval: repos
          packages:
            - filesystem
            - selinux-policy-targeted
        gpgkeys:
          mpp-eval: gpgkeys
        exclude:
          docs: true
    - name: org.osbuild.selinux
      options:
        file_contexts: etc/selinux/targeted/contexts/files/file_contexts