Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 8 additions & 4 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,10 +12,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
`systemd-nspawn` and some packages build utilities in restricted sandboxes.
- Add AppArmor profile for `fatbuildrd` to run `mkosi` in unconfined sandboxes
without transition to default `unprivileged_userns` profile.
- conf: Add `img_create_use_sysusersd` boolean parameter in `[format:*]` section
to control if _fatbuildr_ system user is created with `sysusers.d`
configuration file during image creation or with raw seeds of `/etc/passwd`,
`/etc/group` and `/etc/gshadow`.
- Add support to build opensuse OSI images (#222).
- conf:
- Add `img_create_use_sysusersd` boolean parameter in `[format:*]` section
to control if _fatbuildr_ system user is created with `sysusers.d`
configuration file during image creation or with raw seeds of `/etc/passwd`,
`/etc/group` and `/etc/gshadow`.
- Add `zypper` and `distribution-gpg-keys` in OSI image to support building
openSUSE.
- pkgs: Install and enable AppArmor profile for `u-nspawn` on systems that
support this LSM.
- docs:
Expand Down
2 changes: 2 additions & 0 deletions conf/images/osi.mkosi
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ Packages=
diffutils
cpio
debootstrap
distribution-gpg-keys
systemd-udev
systemd-container
systemd-ukify
Expand All @@ -32,4 +33,5 @@ Packages=
edk2-ovmf
sbsigntools
man-db
zypper
PostInstallationScripts=/usr/share/fatbuildr/images/scripts/osi-postinstall.sh