initial asahi-cosmic setup

images/shared/base.yaml

@@ -161,11 +161,40 @@ postprocess:
     rm -rf /etc/systemd/user/*
     systemctl --user --global preset-all
 
+#Selected ownership fixes for files in /etc & /var owned by a dynamic UID/GID
+# See: https://gitlab.com/fedora/ostree/sig/-/issues/90
+  - |
+    #!/bin/bash
+    set -xeuo pipefail
 
+    cat > /usr/lib/tmpfiles.d/90-atomic-desktops-ownership-fixes.conf << 'EOF'
+    Z /var/lib/passim - passim passim
+    Z /var/log/passim - passim passim
+    Z /etc/colord/    - colord colord
+    EOF
 
+  #Enable Compose FS
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
 
+    cat >> /usr/lib/ostree/prepare-root.conf << 'EOF'
+    [composefs]
+    enabled = yes
+    EOF
+     
+  #Sysroot read-only
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+
+    install -dm 0755 -o 0 -g 0 /usr/lib/ostree
+    cat >> /usr/lib/ostree/prepare-root.conf << 'EOF'
+    [sysroot]
+    readonly = true
+    EOF 
 packages:
- - kernel
+
  # systemd. Also name systemd-pam because it was dropped to a recommends
  # but we still want it for handling user logins/sessions.
  - systemd systemd-pam
@@ -176,21 +205,4 @@ packages:
  - xfsprogs e2fsprogs dosfstools
  - bootupd
 
-packages-x86_64:
- - grub2 grub2-efi-x64 efibootmgr shim
- - microcode_ctl
-
-exclude-packages:
- - kernel-debug-core
-
- # The grub bits are mainly designed for desktops, and IMO haven't seen
-  # enough testing in concert with ostree. At some point we'll flesh out
-  # the full plan in https://github.com/coreos/fedora-coreos-tracker/issues/47
-
-remove-from-packages:
-- [grub2-tools, /etc/grub.d/08_fallback_counting,
-                  /etc/grub.d/10_reset_boot_success,
-                  /etc/grub.d/12_menu_auto_hide,
-                  /usr/lib/systemd/.*]
-