8 Commits

Include renames

Author	SHA1	Message	Date
MisthiosandClaude Opus 5.5	4f71d350fa	fedora-intune: fix boot issues, add Himmelblau variant ... Fixes found by building and inspecting the image: - Select the Intune authselect profile with-altfiles. Without it system users in /usr/lib/passwd (gdm, pipewire, mdatp) do not resolve and the login screen never starts. The build now fails if gdm does not resolve. - Ship /opt as a plain directory (opt-usrlocal: root). Defender installs to /opt/microsoft/mdatp and keeps state in /var/opt/microsoft/mdatp; with the default /opt -> /var/opt symlink those were the same read-only directory. rpm-ostree still relocates /opt content to /usr/lib/opt, so finalize.d/60-opt-links links it back (only for images where /opt is a directory; fedora-cosmic/remote are unaffected). - Run Defender's %post on first boot (mdatp-firstboot.service): in a compose /var is read-only and the machine GUID/state must not be shared. mdatp.service waits for it. New image fedora-intune-himmelblau: the same workstation with Entra ID sign-in through Himmelblau (Community Nightly packages), which joins the device at the first sign-in and enrolls it in Intune (apply_policy) instead of the Microsoft Intune app. Workstation, Edge and Defender manifests move to images/shared so both images use them; build.sh copies images/shared/*.yaml and CI builds both images in one matrix job. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-10-19 11:06:50 +00:00
Misthios	172948822a	fedora-remote: fix GDM greeter so headless RDP renders ... The minimal base (recommends off) was missing session infrastructure and one maintained service actively broke the greeter, so RDP clients saw only a white screen: - add dbus-daemon: gdm-wayland-session runs it for the greeter session bus - add systemd-pam: pam_systemd starts the per-user systemd manager - nsswitch: shadow must include systemd so pam_unix can resolve GDM 50's dynamic gdm-greeter user (Fedora 44 ships 'files systemd') - mask uresourced: its resource tuning makes user@<uid>.service fail with 'Failed to spawn executor', leaving no systemd user bus for gnome-session	2026-09-30 19:00:29 +02:00
Misthios	5bea16bc01	refactor: share common files between images; trim fedora-remote for a VM ... - Move Kanidm/flatpak/finalize.d/sshd files to images/shared/{files,repos} and have build.sh overlay them for every image. - fedora-remote: aggressive hardware trim (no firmware, no kernel-modules-extra, no non-QEMU guest agents), keep + enable qemu-guest-agent (Proxmox). - Fixes the missing package-list (release step) for fedora-remote.	2026-09-27 22:44:10 +02:00
Misthios	bc542f14b2	refactor: upstream-based multi-image pipeline, add fedora-cosmic ... Build fedora-cosmic from the upstream Fedora manifests in fedora/ostree/ci-test (44 and rawhide) with custom overlays: - remove firefox from the base system - add token2-fido-bridge + PC/SC smartcard stack and uhid - install per-user Flatpaks on first login via a systemd user unit Replace the legacy builder/changelog scripts with: - build.sh: rpm-ostree compose image (upstream overlay or standalone) - release.sh: package changelog published as Gitea releases CI moves to the job-v2 runner with a build matrix, cosign signing and release publishing. Drop the legacy asahi-cosmic/shared/base images, builder.sh, changelog.sh, Containerfile and changelogs/.	2026-09-21 15:11:26 +02:00
Misthios	857b3429b1	ci: rework build	2026-02-27 15:10:52 +00:00
Misthios	ac08df1901	initial asahi-cosmic setup	2026-02-21 23:38:38 +01:00
Misthios	5c1a7ad9a5	CI: initial hardcoded ci	2026-02-21 18:49:36 +01:00
Misthios	08fc14eab5	initial commit	2026-02-21 15:57:20 +01:00