mkosi.conf

   1 # SPDX-License-Identifier: LGPL-2.1-or-later
   2
   3 [Config]
   4 MinimumVersion=25
   5 Dependencies=
   6         exitrd
   7         initrd
   8         minimal-base
   9         minimal-0
  10         minimal-1
  11
  12 PassEnvironment=
  13         NO_BUILD
  14         NO_SYNC
  15         WIPE
  16         SANITIZERS
  17         CFLAGS
  18         LDFLAGS
  19         LLVM
  20         MESON_VERBOSE
  21         MESON_OPTIONS
  22         SYSEXT
  23         WITH_DEBUG
  24         ASAN_OPTIONS
  25         COVERAGE
  26         VCS_TAG
  27
  28 [Output]
  29 RepartDirectories=mkosi.repart
  30 OutputDirectory=build/mkosi.output
  31
  32 [Build]
  33 ToolsTree=default
  34 BuildDirectory=build/mkosi.builddir
  35 CacheDirectory=build/mkosi.cache
  36 BuildSourcesEphemeral=yes
  37 Incremental=yes
  38
  39 [Validation]
  40 SignExpectedPcr=yes
  41
  42 [Content]
  43 ExtraTrees=
  44         mkosi.extra.common
  45         mkosi.crt:/usr/lib/verity.d/mkosi.crt # sysext verification key
  46         %O/minimal-0.root-%a.raw:/usr/share/minimal_0.raw
  47         %O/minimal-0.root-%a-verity.raw:/usr/share/minimal_0.verity
  48         %O/minimal-0.root-%a-verity-sig.raw:/usr/share/minimal_0.verity.sig
  49         %O/minimal-1.root-%a.raw:/usr/share/minimal_1.raw
  50         %O/minimal-1.root-%a-verity.raw:/usr/share/minimal_1.verity
  51         %O/minimal-1.root-%a-verity-sig.raw:/usr/share/minimal_1.verity.sig
  52         %O/minimal-base:/usr/share/TEST-13-NSPAWN-container-template
  53         %O/exitrd:/exitrd
  54
  55 Initrds=%O/initrd
  56
  57 # Disable relabeling by default as it only matters for TEST-06-SELINUX, takes a non-trivial amount of time
  58 # and results in lots of errors when building images as a regular user.
  59 SELinuxRelabel=no
  60
  61 # Adding more kernel command line arguments is likely to hit the kernel command line limit (512 bytes) in
  62 # various scenarios. Consider adding support for a credential instead if possible and using that.
  63 KernelCommandLine=
  64         systemd.crash_shell
  65         systemd.log_level=debug,console:info
  66         systemd.log_ratelimit_kmsg=0
  67         # Disable the kernel's ratelimiting on userspace logging to kmsg.
  68         printk.devkmsg=on
  69         # Make sure /sysroot is mounted rw in the initrd.
  70         rw
  71         # Make sure no LSMs are enabled by default.
  72         selinux=0
  73         systemd.early_core_pattern=/core
  74         systemd.firstboot=no
  75         raid=noautodetect
  76         oops=panic
  77         panic=-1
  78         softlockup_panic=1
  79         # Disabled due to BTRFS issue, waiting for the fix to become available
  80         panic_on_warn=0
  81         psi=1
  82
  83 KernelModulesInitrdExclude=.*
  84 KernelModulesInitrdInclude=default
  85
  86 Packages=
  87         acl
  88         attr
  89         bash-completion
  90         binutils
  91         coreutils
  92         curl
  93         diffutils
  94         dnsmasq
  95         dosfstools
  96         e2fsprogs
  97         findutils
  98         gdb
  99         grep
 100         gzip
 101         jq
 102         kbd
 103         kexec-tools
 104         kmod
 105         less
 106         llvm
 107         lsof
 108         lvm2
 109         man
 110         mdadm
 111         mtools
 112         nano
 113         nftables
 114         nvme-cli
 115         opensc
 116         openssl
 117         p11-kit
 118         pciutils
 119         python3
 120         radvd
 121         rsync
 122         sed
 123         socat
 124         strace
 125         tar
 126         tmux
 127         tree
 128         util-linux
 129         valgrind
 130         which
 131         wireguard-tools
 132         xfsprogs
 133         zsh
 134         zstd
 135
 136 [Runtime]
 137 Credentials=
 138         journal.storage=persistent
 139         tty.serial.hvc0.agetty.autologin=root
 140         tty.serial.hvc0.login.noauth=yes
 141         tty.console.agetty.autologin=root
 142         tty.console.login.noauth=yes
 143 RuntimeBuildSources=yes
 144 RuntimeScratch=no
 145 CPUs=2
 146 TPM=yes
 147 VSock=yes
 148 KVM=yes
 149
 150 [Include]
 151 Include=%D/mkosi.sanitizers
 152         %D/mkosi.coverage