No description
Find a file
Tom Gundersen fca588d4b5 stages/rpm: make GPG signature verification opt-in
The content hash of each RPM is already verified, so verifying
signatures again is not necessary if the manifest generation is trusted,
and verifying signatures does not help if the manifest generation is
not.

Let us follow what DNF does and default to not verify signatures, but in
order to preserve features already in use we still allow opting in to
verifying signatures as before on a per RPM basis.

This will make it possible to install unsigned RPMs, or a mixed of
signed and unsigned RPMs.

Signed-off-by: Tom Gundersen <teg@jklm.no>
2020-06-03 16:36:00 +02:00
.github/workflows Remove RPM builds in GitHub Workflows 2020-05-22 09:00:01 -05:00
assemblers modules: fix format-strings without interpolation 2020-05-29 11:07:44 +02:00
docs cli: drop --build-env argument 2020-05-07 19:52:33 +02:00
osbuild meta: also validate the schema for sources 2020-06-02 09:50:14 +02:00
runners modules: drop osbuild symlink 2020-05-04 12:32:25 +02:00
samples assemblers/ostree.commit: support archiving 2020-05-20 14:47:40 +02:00
schemas schema/osbuild1.json: convert to draft4 standard 2020-05-12 22:00:38 +02:00
schutzbot CI: Store RPMs by SHA 2020-06-01 15:54:50 +02:00
sources sources/dnf: add documentation and schema 2020-06-02 09:50:14 +02:00
stages stages/rpm: make GPG signature verification opt-in 2020-06-03 16:36:00 +02:00
test test/osbuild: check the schema of sources 2020-06-02 09:50:14 +02:00
tools test: add F32 manifests and a manifest-preprocessor 2020-05-20 18:54:38 +02:00
.editorconfig editorconfig: add one matching current style 2019-12-13 18:15:08 +01:00
.gitignore .gitignore: remove old ignored directory 2020-03-06 11:57:17 +01:00
.pylintrc pylint: disable too-many-arguments rule 2019-07-24 12:55:48 +02:00
.travis.yml ci: move test_boot to github-actions 2020-05-13 22:00:27 +02:00
LICENSE Revert "Fill in the license template" 2019-11-18 12:23:10 +01:00
Makefile test: add F32 manifests and a manifest-preprocessor 2020-05-20 18:54:38 +02:00
NEWS.md news: fix minor typos 2020-05-29 11:07:29 +02:00
osbuild.spec 15 2020-05-20 21:44:58 +02:00
README.md docs: refactor README 2020-03-02 21:34:09 +01:00
requirements.txt osbuild: add meta module for metadata information 2020-05-06 15:42:23 +02:00
setup.py 15 2020-05-20 21:44:58 +02:00
tree-diff tools/tree-diff: strip NULL character from selinux xattr 2019-10-08 21:39:35 +02:00

OSBuild

Build-Pipelines for Operating System Artifacts

OSBuild is a pipeline-based build system for operating system artifacts. It defines a universal pipeline description and a build system to execute them, producing artifacts like operating system images, working towards an image build pipeline that is more comprehensible, reproducible, and extendable.

See the osbuild(1) man-page for details on how to run osbuild, the definition of the pipeline description, and more.

Project

Requirements

The requirements for this project are:

  • python >= 3.7
  • systemd-nspawn >= 244

Additionally, the built-in stages require:

  • bash >= 5.0
  • coreutils >= 8.31
  • curl >= 7.68
  • qemu-img >= 4.2.0
  • rpm >= 4.15
  • tar >= 1.32
  • util-linux >= 235

At build-time, the following software is required:

  • python-docutils >= 0.13
  • pkg-config >= 0.29

Build

The standard python package system is used. Consult upstream documentation for detailed help. In most situations the following commands are sufficient to build and install from source:

python setup.py build
python setup.py install --skip-build --root=/

The man-pages require python-docutils and can be built via:

rst2man docs/<input-file>.rst <output-file>

Repository:

License:

  • Apache-2.0
  • See LICENSE file for details.