particle-os/particle-os-modules
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
particle-os-modules/modules
History
fiftydinar 40cfcc6646
chore(signing): Switch fully from /usr/etc/ to /etc/ (#375) 
* chore(signing): Switch fully from `/usr/etc/` to `/etc/`

Fixes: #319

I only tested this in non-Universal Blue image. With & without rechunk.

Before:
```
[11:39:42 g.i/h/rechunk:v1.0.1] => WARNING: FOUND /usr/etc. MERGING TO ETC FOR COMPATIBILITY
[11:39:42 g.i/h/rechunk:v1.0.1] => EXPECT PERMISSIONS ISSUES ON THE MERGED PATHS
[11:39:42 g.i/h/rechunk:v1.0.1] => The following files from /usr/etc will be merged to /etc:
[11:39:42 g.i/h/rechunk:v1.0.1] => ./usr/etc
[11:39:42 g.i/h/rechunk:v1.0.1] => |-- containers
[11:39:42 g.i/h/rechunk:v1.0.1] => |   |-- policy.json
[11:39:42 g.i/h/rechunk:v1.0.1] => |   `-- registries.d
[11:39:42 g.i/h/rechunk:v1.0.1] => |       `-- gidro-os.yaml
[11:39:42 g.i/h/rechunk:v1.0.1] => `-- pki
[11:39:42 g.i/h/rechunk:v1.0.1] =>     `-- containers
[11:39:42 g.i/h/rechunk:v1.0.1] =>         `-- gidro-os.pub
[11:39:42 g.i/h/rechunk:v1.0.1] => 
[11:39:42 g.i/h/rechunk:v1.0.1] => 5 directories, 3 files
```

After:
```
[18:26:31 g.i/h/rechunk:v1.0.1] => WARNING: FOUND /usr/etc. MERGING TO ETC FOR COMPATIBILITY
[18:26:31 g.i/h/rechunk:v1.0.1] => EXPECT PERMISSIONS ISSUES ON THE MERGED PATHS
[18:26:31 g.i/h/rechunk:v1.0.1] => The following files from /usr/etc will be merged to /etc:
[18:26:31 g.i/h/rechunk:v1.0.1] => ./usr/etc
[18:26:31 g.i/h/rechunk:v1.0.1] => `-- pki
[18:26:31 g.i/h/rechunk:v1.0.1] =>     `-- containers
[18:26:31 g.i/h/rechunk:v1.0.1] =>         `-- gidro-os.pub
[18:26:31 g.i/h/rechunk:v1.0.1] => 
[18:26:31 g.i/h/rechunk:v1.0.1] => 3 directories, 1 file
```

Only thing remaining is to see if copying .pub keys to `/etc/` only will work, as it caused issues before. That would get rid of all files in `/usr/etc/`.

a8cac2adc9/template/templates/Containerfile.j2 (L26)

* fix(signing): Error-out on missing image cosign key

* chore(signing): More descriptive log about missing image key

* chore(signing): Copy `policy.json` to `/usr/etc/` in Universal Blue images
2024-12-08 22:53:08 +01:00
..
akmods feat(akmods): Add additional available akmod options to schema 2024-12-06 20:43:59 +01:00
bling chore(bling): Uninstall tainted RPMFusion repos also in negativo17 submodule 2024-12-08 16:58:56 +01:00
brew chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
chezmoi chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
default-flatpaks chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
files chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
fonts fix(fonts): Add necessary trailing newline, to ensure fonts are processed separately (#373) 2024-12-04 11:37:10 +01:00
gnome-extensions fix(gnome-extensions): support int install with schema validation 2024-12-06 19:36:30 +02:00
gschema-overrides chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
justfiles chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
rpm-ostree docs(rpm-ostree): Explain clearly usage of optfix 2024-12-08 16:51:31 +01:00
script chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
signing chore(signing): Switch fully from /usr/etc/ to /etc/ (#375) 2024-12-08 22:53:08 +01:00
systemd chore: Remove usage of yq in favor of jq (#369) 2024-12-02 19:02:13 +00:00
yafti fix(yafti): Forgot to set get_json_array pt. 2 2024-12-03 12:14:50 +01:00