manifest-rhel-8.6.yaml

# Manifest for RHCOS based on RHEL 8.6

rojig:
  license: MIT
  name: rhcos
  summary: OpenShift 4

variables:
  osversion: "rhel-8.6"

# Include manifests common to all RHEL and CentOS Stream versions
include:
  - common.yaml

# Starting from here, everything should be specific to RHCOS based on RHEL 8.6

ostree-layers:
  # Temporary logrotate service and timer units
  - overlay/15rhcos-logrotate
  - overlay/15rhcos-rhel8-workarounds
  - overlay/25rhcos-azure-udev

# See "Notes about repositories" in `docs/development.md`
repos:
  - rhel-8.6-baseos
  - rhel-8.6-appstream
  - rhel-8.6-fast-datapath
  - rhel-8.6-server-ose-4.13

# https://bugzilla.redhat.com/show_bug.cgi?id=1938928
rpmdb: bdb

# We include hours/minutes to avoid version number reuse
automatic-version-prefix: "413.86.<date:%Y%m%d%H%M>"
# This ensures we're semver-compatible which OpenShift wants
automatic-version-suffix: "-"
# Keep this is sync with the version in postprocess
mutate-os-release: "4.13"

postprocess:
  - |
     #!/usr/bin/env bash
     set -xeo pipefail

     # Tweak /usr/lib/os-release
     grep -v "OSTREE_VERSION" /etc/os-release > /usr/lib/os-release.rhel
     OCP_RELEASE="4.13"
     (
     . /etc/os-release
     cat > /usr/lib/os-release <<EOF
     NAME="${NAME} CoreOS"
     ID="rhcos"
     ID_LIKE="rhel fedora"
     VERSION="${OSTREE_VERSION}"
     VERSION_ID="${OCP_RELEASE}"
     PLATFORM_ID="${PLATFORM_ID}"
     PRETTY_NAME="${NAME} CoreOS ${OSTREE_VERSION} (Ootpa)"
     ANSI_COLOR="${ANSI_COLOR}"
     CPE_NAME="cpe:/o:redhat:enterprise_linux:8::coreos"
     HOME_URL="${HOME_URL}"
     DOCUMENTATION_URL="https://docs.openshift.com/container-platform/${OCP_RELEASE}/"
     BUG_REPORT_URL="https://access.redhat.com/labs/rhir/"
     REDHAT_BUGZILLA_PRODUCT="OpenShift Container Platform"
     REDHAT_BUGZILLA_PRODUCT_VERSION="${OCP_RELEASE}"
     REDHAT_SUPPORT_PRODUCT="OpenShift Container Platform"
     REDHAT_SUPPORT_PRODUCT_VERSION="${OCP_RELEASE}"
     OPENSHIFT_VERSION="${OCP_RELEASE}"
     RHEL_VERSION="${VERSION_ID}"
     OSTREE_VERSION="${OSTREE_VERSION}"
     EOF
     )
     rm -f /etc/os-release
     ln -s ../usr/lib/os-release /etc/os-release

     # Tweak /etc/system-release, /etc/system-release-cpe & /etc/redhat-release
     (
     . /etc/os-release
     cat > /usr/lib/system-release-cpe <<EOF
     ${CPE_NAME}
     EOF
     cat > /usr/lib/system-release <<EOF
     ${NAME} release ${VERSION_ID}
     EOF
     rm -f /etc/system-release-cpe /etc/system-release /etc/redhat-release
     ln -s /usr/lib/system-release-cpe /etc/system-release-cpe
     ln -s /usr/lib/system-release /etc/system-release
     ln -s /usr/lib/system-release /etc/redhat-release
     )

     # Tweak /usr/lib/issue
     cat > /usr/lib/issue <<EOF
     \S \S{VERSION_ID}
     EOF
     rm -f /etc/issue /etc/issue.net
     ln -s /usr/lib/issue /etc/issue
     ln -s /usr/lib/issue /etc/issue.net

     # Let's have a non-boring motd, just like CL (although theirs is more subdued
     # nowadays compared to early versions with ASCII art).  One thing we do here
     # is add --- as a "separator"; the idea is that any "dynamic" information should
     # be below that.
     # See: https://projects.engineering.redhat.com/browse/COREOS-1029
     . /etc/os-release
     cat > /etc/motd <<EOF
     Red Hat Enterprise Linux CoreOS $VERSION
       Part of OpenShift ${OPENSHIFT_VERSION}, RHCOS is a Kubernetes native operating system
       managed by the Machine Config Operator (\`clusteroperator/machine-config\`).

     WARNING: Direct SSH access to machines is not recommended; instead,
     make configuration changes via \`machineconfig\` objects:
       https://docs.openshift.com/container-platform/${OPENSHIFT_VERSION}/architecture/architecture-rhcos.html

     ---
     EOF
  # Collection of workarounds specific to RHEL 8.6 based RHCOS
  - |
     #!/usr/bin/env bash
     set -xeo pipefail

     # Ensure that /etc/issue.d exists for console-login-helper-messages
     # This can be removed once we rebase to RHEL 9
     install -d -m 0755 /etc/issue.d
  - |
     #!/usr/bin/env bash
     set -xeuo pipefail

     # Enable tmp-on-tmpfs by default because we don't want to have things
     # leak across reboots, it increases alignment with FCOS, and also fixes
     # the Live ISO.  First, verify that RHEL is still disabling.
     grep -q '# RHEL-only: Disable /tmp on tmpfs' /usr/lib/systemd/system/basic.target
     echo '# RHCOS-only: we follow the Fedora/upstream default' >> /usr/lib/systemd/system/basic.target
     echo 'Wants=tmp.mount' >> /usr/lib/systemd/system/basic.target
  # Stop shipping a baked initiator name in the image; this should be generated
  # at runtime. We have a service which does this
  # (coreos-generate-iscsi-initiatorname.service) until it's done properly
  # upstream (see https://bugzilla.redhat.com/show_bug.cgi?id=1493296).
  - |
     #!/usr/bin/env bash
     set -xeuo pipefail

     # NB: we don't use -f here so we break when this is no longer needed
     rm -v /etc/iscsi/initiatorname.iscsi

# Packages that are only in RHCOS and not in SCOS or that have special
# constraints that do not apply to SCOS
packages:
 # We include the generic release package and tweak the os-release info in a
 # post-proces script
 - redhat-release
 # RHEL7 compatibility
 - compat-openssl10
 # SCOS package name does not include a version number
 - openvswitch2.17
 # https://github.com/openshift/os/issues/1036
 - libsemanage-2.9-8.el8

# Packages pinned to specific repos in RHCOS
repo-packages:
  # we want the one shipping in RHEL, not the equivalently versioned one in RHAOS
  - repo: rhel-8.6-appstream
    packages:
      - nss-altfiles
  - repo: rhel-8.6-server-ose-4.13
    packages:
      # Starting with 4.11, we are working with the Containers team to build
      # certain container-tools RPMs in the RHAOS branches for RHCOS + RHEL
      # worker nodes.
      - conmon
      - container-selinux
      - containernetworking-plugins
      - containers-common
      - criu
      - crun
      - fuse-overlayfs
      - podman
      - runc
      - skopeo
      - slirp4netns
      - toolbox

modules:
  enable:
    # qemu-guest-agent
    - virt:rhel