kairos/kairos-agent
1
0
Fork 0
mirror of https://github.com/kairos-io/kairos-agent.git synced 2025-10-22 12:27:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

lock: Secure boot (#140)

Browse Source 
* ⬆️ Bump repositories

* ✨ Support Secure boot

Point to internal repositories with artifacts to boot with UEFI

* ⬆️ Bump repositories

* ⬆️ Bump repositories
This commit is contained in:
Ettore Di Giacinto
2022-09-22 14:59:01 +02:00
committed by Itxaka
parent b880a0c471
commit 3c504dd19c
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
Earthfile
View File

@@ -23,6 +23,7 @@ END
ARG COSIGN_EXPERIMENTAL=0 ARG COSIGN_EXPERIMENTAL=0
ARG CGO_ENABLED=0 ARG CGO_ENABLED=0
ARG ELEMENTAL_IMAGE=quay.io/costoolkit/elemental-cli:v0.0.15-8a78e6b ARG ELEMENTAL_IMAGE=quay.io/costoolkit/elemental-cli:v0.0.15-8a78e6b
ARG OSBUILDER_IMAGE=quay.io/kairos/osbuilder-tools
ARG GOLINT_VERSION=1.47.3 ARG GOLINT_VERSION=1.47.3
ARG GO_VERSION=1.18 ARG GO_VERSION=1.18
@@ -174,6 +175,12 @@ framework:
cloud-config/rootfs cloud-config/rootfs
END END
RUN /usr/bin/luet install -y --system-target /framework system/shim system/grub2-efi
# Replace elemental from kairos repo
# TODO: consume toolkit from kairos and drop this workaround
RUN /usr/bin/luet install --force --system-target /framework -y system/elemental-cli
RUN /usr/bin/luet cleanup --system-target /framework RUN /usr/bin/luet cleanup --system-target /framework
COPY overlay/files /framework COPY overlay/files /framework
RUN rm -rf /framework/var/luet RUN rm -rf /framework/var/luet
@@ -259,23 +266,17 @@ docker-rootfs:
FROM +docker FROM +docker
SAVE ARTIFACT /. rootfs SAVE ARTIFACT /. rootfs
elemental:
ARG ELEMENTAL_IMAGE
FROM ${ELEMENTAL_IMAGE}
SAVE ARTIFACT /usr/bin/elemental elemental
iso: iso:
ARG ELEMENTAL_IMAGE ARG OSBUILDER_IMAGE
ARG ISO_NAME=${OS_ID} ARG ISO_NAME=${OS_ID}
ARG IMG=docker:$IMAGE ARG IMG=docker:$IMAGE
ARG overlay=overlay/files-iso ARG overlay=overlay/files-iso
ARG TOOLKIT_REPOSITORY=quay.io/costoolkit/releases-teal FROM $OSBUILDER_IMAGE
FROM $ELEMENTAL_IMAGE
RUN zypper in -y jq docker RUN zypper in -y jq docker
WORKDIR /build WORKDIR /build
COPY . ./ COPY . ./
WITH DOCKER --allow-privileged --load $IMAGE=(+docker) WITH DOCKER --allow-privileged --load $IMAGE=(+docker)
RUN elemental --repo $TOOLKIT_REPOSITORY --name $ISO_NAME --debug build-iso --date=false --local --overlay-iso /build/${overlay} $IMAGE --output /build/ RUN /entrypoint.sh --name $ISO_NAME --debug build-iso --date=false --local --overlay-iso /build/${overlay} $IMAGE --output /build/
END END
# See: https://github.com/rancher/elemental-cli/issues/228 # See: https://github.com/rancher/elemental-cli/issues/228
RUN sha256sum $ISO_NAME.iso > $ISO_NAME.iso.sha256 RUN sha256sum $ISO_NAME.iso > $ISO_NAME.iso.sha256