57c82a00d0
Require "checksum" option for each repository, which contains the checksum of the `repodata/repomd.xml` file. This file (indirectly) contains checksums for all packages. Verify that the metadata dnf downloaded to install packages matches that checksum. This way, this stage will give an error when a reposiory changed between putting together the pipeline and running it.
76 lines
1.8 KiB
JSON
76 lines
1.8 KiB
JSON
{
|
|
"name": "base-qcow2",
|
|
"stages": [
|
|
{
|
|
"name": "org.osbuild.dnf",
|
|
"options": {
|
|
"releasever": "30",
|
|
"basearch": "x86_64",
|
|
"install_weak_deps": true,
|
|
"repos": {
|
|
"fedora": {
|
|
"metalink": "https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch",
|
|
"gpgkey": "F1D8 EC98 F241 AAF2 0DF6 9420 EF3C 111F CFC6 59B9",
|
|
"checksum": "sha256:9f596e18f585bee30ac41c11fb11a83ed6b11d5b341c1cb56ca4015d7717cb97"
|
|
}
|
|
},
|
|
"packages": [
|
|
"@Core",
|
|
"chrony",
|
|
"kernel",
|
|
"selinux-policy-targeted",
|
|
"grub2-pc",
|
|
"spice-vdagent",
|
|
"qemu-guest-agent",
|
|
"xen-libs",
|
|
"langpacks-en"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"name": "org.osbuild.locale",
|
|
"options": {
|
|
"language": "en_US"
|
|
}
|
|
},
|
|
{
|
|
"name": "org.osbuild.fstab",
|
|
"options": {
|
|
"filesystems": [
|
|
{
|
|
"uuid": "76a22bf4-f153-4541-b6c7-0332c0dfaeac",
|
|
"vfs_type": "ext4",
|
|
"path": "/",
|
|
"freq": "1",
|
|
"passno": "1"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"name": "org.osbuild.grub2",
|
|
"options": {
|
|
"root_fs_uuid": "76a22bf4-f153-4541-b6c7-0332c0dfaeac",
|
|
"kernel_opts": "ro biosdevname=0 net.ifnames=0"
|
|
}
|
|
},
|
|
{
|
|
"name": "org.osbuild.selinux",
|
|
"options": {
|
|
"file_contexts": "etc/selinux/targeted/contexts/files/file_contexts"
|
|
}
|
|
},
|
|
{
|
|
"name": "org.osbuild.fix-bls"
|
|
}
|
|
],
|
|
"assembler":
|
|
{
|
|
"name": "org.osbuild.qcow2",
|
|
"options": {
|
|
"filename": "base.qcow2",
|
|
"root_fs_uuid": "76a22bf4-f153-4541-b6c7-0332c0dfaeac",
|
|
"size": 3221225472
|
|
}
|
|
}
|
|
}
|