5 Commits

Include renames

Author	SHA1	Message	Date
Misthios	7693e22b08	fedora-cosmic: allow seeding the Kanidm unixd token from a CI secret ... build.sh writes KANIDM_UNIXD_TOKEN to /etc/kanidm/unixd_token (0600) when the secret is set, via a generated add-files include. Without the secret the image is built unchanged and the token must be provisioned on the host.	2026-09-21 19:24:15 +02:00
Misthios	693d9a8147	fedora-cosmic: add OBS network:idm repo for Kanidm packages ... Kanidm is not in the Fedora repos; it ships from the openSUSE OBS network:idm project. Add per-distro repo files (Fedora_44 / Fedora_Rawhide) and teach build.sh to overlay repos/<distro>/*.repo.	2026-09-21 17:59:27 +02:00
Misthios	0a05b2a6bc	fedora-cosmic: drop hardware/VM packages not needed on the target host ... Trim NVIDIA, Intel GPU/audio/platform, other wireless vendors and VM guest packages from the cloned upstream manifests, and block linux-firmware's recommends of them via a generated exclude list. Keeps amd-gpu-firmware, amd-ucode-firmware, iwlwifi-mvm-firmware (AX200) and alsa-sof-firmware.	2026-09-21 17:17:14 +02:00
Misthios	0433b1850e	fedora-cosmic: enable token2-fido-bridge repo in treefile	2026-09-21 15:58:55 +02:00
Misthios	bc542f14b2	refactor: upstream-based multi-image pipeline, add fedora-cosmic ... Build fedora-cosmic from the upstream Fedora manifests in fedora/ostree/ci-test (44 and rawhide) with custom overlays: - remove firefox from the base system - add token2-fido-bridge + PC/SC smartcard stack and uhid - install per-user Flatpaks on first login via a systemd user unit Replace the legacy builder/changelog scripts with: - build.sh: rpm-ostree compose image (upstream overlay or standalone) - release.sh: package changelog published as Gitea releases CI moves to the job-v2 runner with a build matrix, cosign signing and release publishing. Drop the legacy asahi-cosmic/shared/base images, builder.sh, changelog.sh, Containerfile and changelogs/.	2026-09-21 15:11:26 +02:00