4 Commits

Include renames

Author	SHA1	Message	Date
Misthios	a5c6170ac0	fedora-cosmic: pass Kanidm token via systemd credential ... kanidm-unixd runs with DynamicUser=yes, so it cannot read the root-only /etc/kanidm/unixd_token. With service_account_token_path set in /etc/kanidm/unixd the daemon failed with PermissionDenied and no Kanidm user resolved. Drop that setting and inject the token with LoadCredential + KANIDM_SERVICE_ACCOUNT_TOKEN_PATH through a generated drop-in. Verified in a QEMU VM: kanidm-unixd active, 'kanidm-unix status' online, 'getent passwd job' resolves.	2026-09-27 17:59:36 +02:00
Misthios	dd2bf634f1	fedora-cosmic: add Kanidm Unix authentication ... Install kanidm-unixd-clients/kanidm-clients, point /etc/kanidm/config at auth.plabble.org, configure unixd (TPM-backed cache, pam_allowed_login_groups), and set up PAM/nsswitch via an authselect custom profile (with a direct-file fallback). Enable kanidm-unixd{,-tasks} and make unconfined_service_t permissive until Kanidm ships an SELinux policy.	2026-09-21 17:57:32 +02:00
Misthios	de5b0f143a	ci: generate package list during compose via finalize.d ... Avoid mounting the built image with buildah (ran out of disk); the finalize.d hook records the rpm list next to the treefile and release.sh consumes it directly.	2026-09-21 17:35:17 +02:00
Misthios	bc542f14b2	refactor: upstream-based multi-image pipeline, add fedora-cosmic ... Build fedora-cosmic from the upstream Fedora manifests in fedora/ostree/ci-test (44 and rawhide) with custom overlays: - remove firefox from the base system - add token2-fido-bridge + PC/SC smartcard stack and uhid - install per-user Flatpaks on first login via a systemd user unit Replace the legacy builder/changelog scripts with: - build.sh: rpm-ostree compose image (upstream overlay or standalone) - release.sh: package changelog published as Gitea releases CI moves to the job-v2 runner with a build matrix, cosign signing and release publishing. Drop the legacy asahi-cosmic/shared/base images, builder.sh, changelog.sh, Containerfile and changelogs/.	2026-09-21 15:11:26 +02:00