shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-12-22 17:35:35 +03:00
Code
4fd9ed3e41
systemd/mkosi.conf

44 lines
1.8 KiB
Plaintext
Raw Normal View History

Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 18:05:06 +03:00
# SPDX-License-Identifier: LGPL-2.1-or-later
Update to mkosi v19 - Use mkosi.images/ instead of mkosi.presets/ - Use the .chroot suffix to run scripts in the image - Use BuildSources= match for the kernel build - Move 10-systemd.conf to mkosi.conf and rely on mkosi.local.conf for local configuration
2023-11-28 20:38:22 +03:00
[Config]
Images=system
Build distribution packages in mkosi Instead of running meson install and hoping for the best, let's build distribution packages from the downstream packaging specs. This gets us the following: - Vastly simplified mkosi scripts since we don't need a separate initrd image anymore but can just reuse the default mkosi initrd. - Almost everything can move to the base image as its not the basis anymore for the initrd and as such we don't need to care about the size anymore. - The systemd packages that get pulled in as dependencies of other packages get properly uninstalled and replaced with our packages that we built instead of just installing on top of an existing systemd installation with no guarantee that everything from that previous installation was removed. - Much better testing coverage as what we're testing is much closer to what will actually be deployed in distributions. - Immediate feedback if something we change breaks distribution packaging - We get integration with the distribution for free as we'll automatically use the proper directories and such instead of having to hack this into a mkosi build script. - ...
2024-01-26 00:48:55 +03:00
MinimumVersion=21
mkosi: Only build system preset by default Let's not build all presets by default, but only the system preset. Also, let's only make the system preset depend on the initrd preset if we're building a bootable disk image. This means that if we build the system image as a cpio, uki or directory, the initrd preset will be skipped as it's not necessary, making the build a little faster.
2023-09-09 11:20:01 +03:00
Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 18:05:06 +03:00
[Output]
mkosi: Allow the output directory to be overridden For integration tests it would be preferable to operate on a copy so tests can be run in parallel and avoid interfering.
2023-12-05 21:06:40 +03:00
@OutputDirectory=mkosi.output
mkosi: Allow users to configure the build and cache directory
2024-03-05 21:41:50 +03:00
@BuildDirectory=mkosi.builddir
@CacheDirectory=mkosi.cache
mkosi: Move settings to right sections
2023-07-14 15:52:58 +03:00
[Content]
mkosi: Move more logic to the postinst script Let's move stuff that only applies to the final image to the postinst script. Let's also move out some of the static files to mkosi.extra/ instead of hardcoding them in scripts.
2023-02-21 17:09:38 +03:00
# Prevent ASAN warnings when building the image and ship the real ASAN options prefixed with MKOSI_.
mkosi: Changes to allow booting with sanitizers in mkosi - Extra memory because ASAN needs it - The environment variables to make the sanitizers more useful - LD_PRELOAD because the ASAN DSO needs to be the first in the list - The sanitizer library packages - Disable syscall filters because they interfere with ASAN - Disable systemd-hwdb-update because it's super slow when systemd-hwdb is built with sanitizers - Take the value for meson's b_sanitize option from the SANITIZERS environment variable
2022-07-15 03:26:52 +03:00
Environment=ASAN_OPTIONS=verify_asan_link_order=false
mkosi: Move more logic to the postinst script Let's move stuff that only applies to the final image to the postinst script. Let's also move out some of the static files to mkosi.extra/ instead of hardcoding them in scripts.
2023-02-21 17:09:38 +03:00
MKOSI_ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1
MKOSI_UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1
Build distribution packages in mkosi Instead of running meson install and hoping for the best, let's build distribution packages from the downstream packaging specs. This gets us the following: - Vastly simplified mkosi scripts since we don't need a separate initrd image anymore but can just reuse the default mkosi initrd. - Almost everything can move to the base image as its not the basis anymore for the initrd and as such we don't need to care about the size anymore. - The systemd packages that get pulled in as dependencies of other packages get properly uninstalled and replaced with our packages that we built instead of just installing on top of an existing systemd installation with no guarantee that everything from that previous installation was removed. - Much better testing coverage as what we're testing is much closer to what will actually be deployed in distributions. - Immediate feedback if something we change breaks distribution packaging - We get integration with the distribution for free as we'll automatically use the proper directories and such instead of having to hack this into a mkosi build script. - ...
2024-01-26 00:48:55 +03:00
@SELinuxRelabel=no
mkosi: Add BuildSourcesEphemeral=yes Required to make sure that any changes packaging specs make to the source files are thrown away after the build so they don't mess with the source tree.
2024-03-08 21:12:16 +03:00
BuildSourcesEphemeral=yes
Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 18:05:06 +03:00
[Host]
mkosi: Update to latest Configuration now takes priority over CLI options so we have to configure the defaults for settings that we want to allow overriding from the CLI. We also explicitly set some other settings so that they can't be overridden from the CLI anymore. For example the base and initrd image should never be made bootable so we set Bootable=no explicitly for both.
2023-09-01 14:58:16 +03:00
@Incremental=yes
Build distribution packages in mkosi Instead of running meson install and hoping for the best, let's build distribution packages from the downstream packaging specs. This gets us the following: - Vastly simplified mkosi scripts since we don't need a separate initrd image anymore but can just reuse the default mkosi initrd. - Almost everything can move to the base image as its not the basis anymore for the initrd and as such we don't need to care about the size anymore. - The systemd packages that get pulled in as dependencies of other packages get properly uninstalled and replaced with our packages that we built instead of just installing on top of an existing systemd installation with no guarantee that everything from that previous installation was removed. - Much better testing coverage as what we're testing is much closer to what will actually be deployed in distributions. - Immediate feedback if something we change breaks distribution packaging - We get integration with the distribution for free as we'll automatically use the proper directories and such instead of having to hack this into a mkosi build script. - ...
2024-01-26 00:48:55 +03:00
# TODO: Drop to 2G again once the next Noble kernel update ships and we can use linux-image-virtual.
@QemuMem=4G
mkosi: Update to latest We have to set the image runtime size explicitly now so that's it's grown a bit when we boot in nspawn or qemu.
2023-10-05 16:17:01 +03:00
@RuntimeSize=8G
mkosi: Build a directory image by default Both building and booting a directory image is much faster than building or booting a disk image so let's default to a directory image. In CI, we stick to a disk image to make sure that keeps working as well. The only extra dependency this introduces is virtiofsd which is packaged in all distributions except Debian stable. For users hacking on systemd on Debian stable, a disk image can be built by writing the following to mkosi.local.conf: ``` [Output] Format=disk ```
2023-12-07 21:52:41 +03:00
ToolsTreePackages=virtiofsd
mkosi: Enable some debugging options by default
2023-03-16 20:28:14 +03:00
KernelCommandLineExtra=systemd.crash_shell
systemd.log_level=debug
mkosi: Disable kmsg ratelimiting
2023-04-20 11:33:10 +03:00
systemd.log_ratelimit_kmsg=0
mkosi: Enable some debugging options by default
2023-03-16 20:28:14 +03:00
systemd.journald.forward_to_console
systemd.journald.max_level_console=warning
mkosi: Switch to use mkosi presets with prebuilt initrds Instead of building the initrds for the mkosi images with dracut, let's switch to using mkosi presets to build the initrd with mkosi as well. This commit splits up our single image build into three separate mkosi presets: 1. The "base" preset. This image contains systemd and all its runtime dependencies. The sole purpose of this image is to serve as a base image for the initrd and the final image. It's also responsible for building systemd from source with the build script. The results are installed into the base image. Note that we install the systemd and udev packages into this image as well to prevent package managers from overriding the systemd we built from source with the distro packaged systemd if it's pulled in as a dependency by another package from the initrd or final profiles. 2. The "initrd" preset. This image provides the initrd. It's trivial and does nothing more than packaging the base image up as a zstd compressed initramfs and adds /init and /etc/initrd-release symlinks to the image. 3. The "final" preset. This image builds on top of the base image and adds a kernel and extra packages that are useful for testing and debugging. We also split out the optional kernel build into a separate set of config files that are only included if a kernel to build is actually provided. Note that this commit doesn't really change anything about how mkosi is used. The commands remain the same, except that mkosi will now build all the presets in order. "mkosi summary" will show the summary of all the presets. "mkosi qemu, boot, shell" will always boot the final preset. With "-f", all presets will be built and the final one is booted. "-i" makes a cache of each preset. The only thing to keep in mind is that specifying config via the mkosi CLI will apply to each of the presets. e.g. any extra packages added with "-p" will be installed in both the initrd and the final image. To apply local configuration to a single preset, create a file 00-local.conf in mkosi.presets/<profile>/mkosi.conf.d and put all the preset specific configuration in there.
2023-04-25 17:04:49 +03:00
# Disable the kernel's ratelimiting on userspace logging to kmsg.
printk.devkmsg=on
mkosi: Package a erofs usr partition with signed verity Let's start moving towards a more involved partitioning setup to test our stuff more when using mkosi. The root partition is generated on boot with systemd-repart. CentOS supports neither erofs nor btrfs so we use squashfs and xfs instead. We also enable SecureBoot= locally for additional coverage. This and the use of verity means users need to run `mkosi genkey` once to generate the keys necessary to do secure boot and verity.
2023-05-08 17:06:41 +03:00
# Make sure /sysroot is mounted rw in the initrd.
rw
mkosi: Only lower device timeout instead of all timeouts We only really care about lowering the device timeout so we get to a shell faster when the root device doesn't appear so let's only lower that timeout instead of lowering all default timeouts.
2023-05-31 17:19:21 +03:00
# Lower the default device timeout so we get a shell earlier if the root device does
# not appear for some reason.
systemd.default_device_timeout_sec=10
mkosi: Enable more options We build with support for selinux/apparmor where applicable but disable them at runtime as even in permissive mode they're horribly broken.
2023-06-02 18:25:23 +03:00
# Make sure no LSMs are enabled by default.
apparmor=0
selinux=0
enforcing=0
mkosi: Set systemd.early_core_pattern=/core This makes sure we get pid1 coredumps during early boot.
2023-07-13 16:38:03 +03:00
systemd.early_core_pattern=/core
mkosi: use systemd.firstboot=no to turn of interactivity at boot Now that creds are processed even if systemd.firstboot=no is set, we can use it to disable the root pw prompt *and* the new homectl prompt at the same time, without breaking the creds stuff.
2023-11-30 20:41:53 +03:00
systemd.firstboot=no
Copy Permalink