feat(rust): implement a new software service in Rust

.editorconfig

@@ -7,3 +7,11 @@ root = true
 [*.sh]
 indent_style = space
 indent_size = 2
+
+[*.{c,h,cxx,hxx}]
+indent_style = space
+indent_size = 2
+tab_width = 8
+
+[Makefile]
+indent_style = tab

.github/workflows/ci-rust.yml

@@ -72,28 +72,42 @@ jobs:
     timeout-minutes: 20
     runs-on: ubuntu-latest
 
-    defaults:
-      run:
-        working-directory: ./rust
+    container:
+      image: registry.opensuse.org/opensuse/tumbleweed:latest
+      options: --security-opt seccomp=unconfined
 
     steps:
 
+    - name: Configure and refresh repositories
+      # disable unused repositories to have faster refresh
+      run: zypper modifyrepo -d repo-non-oss repo-openh264 repo-update && ( zypper ref || zypper ref || zypper ref )
+
+    - name: Install required packages
+      run: zypper --non-interactive install
+        clang-devel
+        libzypp-devel
+        gcc-c++
+        git
+        libopenssl-3-devel
+        make
+        openssl-3
+        pam-devel
+        rustup
+
+    - name: Configure git
+      run:  git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
     - name: Git Checkout
       uses: actions/checkout@v4
 
+    - name: Install Rust toolchains
+      run: rustup toolchain install stable
+
     - name: Rust toolchain
       run: |
         rustup show
         cargo --version
 
-    - name: Install packages
-      run: |
-        sudo apt-get update
-        sudo apt-get -y install libclang-18-dev libpam0g-dev
-
-    - name: Installed packages
-      run: apt list --installed
-
     - name: Rust cache
       uses: actions/cache@v4
       with:
@@ -104,44 +118,68 @@ jobs:
 
     - name: Run clippy linter
       run: cargo clippy
+      working-directory: ./rust
 
   tests:
     # the default timeout is 6 hours, that's too much if the job gets stuck
     timeout-minutes: 30
     runs-on: ubuntu-latest
+
+    container:
+      image: registry.opensuse.org/opensuse/tumbleweed:latest
+      options: --security-opt seccomp=unconfined
+
     env:
       COVERAGE: 1
 
-    defaults:
-      run:
-        working-directory: ./rust
-
     steps:
 
+    - name: Configure and refresh repositories
+      # disable unused repositories to have faster refresh
+      run: zypper modifyrepo -d repo-non-oss repo-openh264 repo-update && ( zypper ref || zypper ref || zypper ref )
+
+    - name: Install required packages
+      run: zypper --non-interactive install
+        clang-devel
+        dbus-1-daemon
+        libzypp-devel
+        gcc-c++
+        git
+        glibc-locale
+        golang-github-google-jsonnet
+        jq
+        libopenssl-3-devel
+        make
+        openssl-3
+        pam-devel
+        python-langtable-data
+        python3-openapi_spec_validator
+        rustup
+        timezone
+        xkeyboard-config
+
+    - name: Configure git
+      run:  git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
     - name: Git Checkout
       uses: actions/checkout@v4
 
+    - name: Install Rust toolchains
+      run: rustup toolchain install stable
+
     - name: Rust toolchain
       run: |
         rustup show
         cargo --version
 
-    - name: Install packages
-      run: |
-        sudo apt-get update
-        sudo apt-get -y install libclang-18-dev libpam0g-dev python3-langtable jsonnet
-
     - name: Prepare for tests
       run: |
-        # the langtable data location is different in SUSE/openSUSE, create a symlink
-        sudo mkdir -p /usr/share/langtable
-        sudo ln -s /usr/lib/python3/dist-packages/langtable/data /usr/share/langtable/data
         # create the /etc/agama.d/locales file with list of locales
-        sudo mkdir /etc/agama.d
-        sudo bash -c 'ls -1 -d /usr/share/i18n/locales/* | sed -e "s#/usr/share/i18n/locales/##" >/etc/agama.d/locales'
+        mkdir -p /etc/agama.d
+        ls -1 -d /usr/lib/locale/*.utf8 | sed -e "s#/usr/lib/locale/##" -e "s#utf8#UTF-8#" >/etc/agama.d/locales
 
     - name: Installed packages
-      run: apt list --installed
+      run: rpm -qa
 
     - name: Rust cache
       id: cache-tests
@@ -157,13 +195,15 @@ jobs:
       # this avoids refreshing the crates index and saves few seconds
       if: steps.cache-tests.outputs.cache-hit != 'true'
       run: cargo install cargo-tarpaulin
+      working-directory: ./rust
 
     - name: Run the tests
       # Compile into the ./target-coverage directory because tarpaulin uses special compilation
       # flags, to avoid reusing the previous builds it always starts from scratch.
       # The --skip-clean skips the cleanup and allows using the cached results.
       # See https://github.com/xd009642/tarpaulin/discussions/772
       run: cargo tarpaulin --workspace --all-targets --doc --engine llvm --out xml --target-dir target-coverage --skip-clean -- --nocapture
+      working-directory: ./rust
       env:
         # use the "stable" tool chain (installed by default) instead of the "nightly" default in tarpaulin
         RUSTC_BOOTSTRAP: 1
@@ -198,38 +238,41 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
 
-    defaults:
-      run:
-        working-directory: ./rust
+    container:
+      image: registry.opensuse.org/opensuse/tumbleweed:latest
 
     steps:
 
+    - name: Configure and refresh repositories
+      # disable unused repositories to have faster refresh
+      run: zypper modifyrepo -d repo-non-oss repo-openh264 repo-update && ( zypper ref || zypper ref || zypper ref )
+
+    - name: Install required packages
+      run: zypper --non-interactive install
+        clang-devel
+        gcc-c++
+        git
+        libopenssl-3-devel
+        libzypp-devel
+        make
+        openssl-3
+        pam-devel
+        python3-openapi_spec_validator
+        rustup
+
     - name: Git Checkout
       uses: actions/checkout@v4
 
+    - name: Install Rust toolchains
+      run: rustup toolchain install stable
+
     - name: Rust toolchain
       run: |
         rustup show
         cargo --version
 
-    - name: Configure system
-      # disable updating initramfs (the system is not booted again)
-      # disable updating man db (to save some time)
-      run: |
-        sudo sed -i "s/yes/no/g" /etc/initramfs-tools/update-initramfs.conf
-        sudo rm -f /var/lib/man-db/auto-update
-
-    - name: Install packages
-      run: |
-        sudo apt-get update
-        sudo apt-get -y install libclang-18-dev libpam0g-dev
-        # uninstall the python3-jsonschema package, openapi-spec-validator wants
-        # to install a newer version which would conflict with that
-        sudo apt-get purge python3-jsonschema
-        sudo pip install openapi-spec-validator
-
     - name: Installed packages
-      run: apt list --installed
+      run: rpm -qa
 
     - name: Rust cache
       uses: actions/cache@v4
@@ -241,6 +284,8 @@ jobs:
 
     - name: Generate the OpenAPI specification
       run: cargo xtask openapi
+      working-directory: ./rust
 
     - name: Validate the OpenAPI specification
       run: openapi-spec-validator out/openapi/*
+      working-directory: ./rust

.gitignore

@@ -4,6 +4,8 @@
 /*.pot
 *.mo
 *.bz2
+*.o
+*.a
 # Do NOT ignore .github: for git this is a no-op
 # but it helps ripgrep (rg) which would otherwise ignore dotfiles and dotdirs
 !/.github/

live/src/agama-installer.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Sep 30 14:54:18 UTC 2025 - Ladislav Slezák <lslezak@suse.com>
+
+- Fixed creating the /LiveOS/.packages.json.gz file in SLE builds
+  (gh#agama-project/agama#2771)
+
 -------------------------------------------------------------------
 Tue Sep 16 07:21:28 UTC 2025 - Josef Reidinger <jreidinger@suse.com>
 

live/src/fix_bootconfig

@@ -82,7 +82,8 @@ if [ -n "\$target_dir" ]; then
   # array and also for formatting the final JSON output
   rpm --root "\$mount_dir2" -qa --queryformat \\
     '\\{"name":"%{NAME}","version":"%{VERSION}","release":"%{RELEASE}","arch":"%{ARCH}"\\}' \\
-    | jq -s 'sort_by(.name|ascii_downcase)' | gzip > "\$target_dir/LiveOS/.packages.json.gz"
+    | chroot "\$mount_dir2" /usr/bin/jq -s 'sort_by(.name|ascii_downcase)' \\
+    | gzip > "\$target_dir/LiveOS/.packages.json.gz"
 
   # copy the build info file if present
   if [ -f "\$mount_dir2"/var/log/build/info ]; then

products.d/agama-products.changes

@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon Sep 29 04:56:47 UTC 2025 - Lubos Kocman <lubos.kocman@suse.com>
+
+- Update patterns and packages Leap Micro 6.2
+  Fixes install issues of Leap Micro 6.2 (boo#1250435)
+- Explicitly add opensuse-migration-tool
+
+
 -------------------------------------------------------------------
 Fri Sep 12 14:30:16 UTC 2025 - Ladislav Slezák <lslezak@suse.com>
 

products.d/leap_micro_62.yaml

@@ -25,8 +25,7 @@ software:
   mandatory_patterns:
     - cockpit
     - base
-    - transactional
-    - traditional
+    - base_transactional
     - hardware
     - selinux
 
@@ -44,8 +43,18 @@ software:
     - sssd_ldap
 
   mandatory_packages:
+    - firewalld
+    - kernel-firmware-all
+    - kernel-default-extra
+    - libpwquality-tools
+    - lzop
     - NetworkManager
     - openSUSE-repos-LeapMicro
+    - suseconnect-ng
+    - systemd-default-settings-branding-SLE-Micro
+    - wpa_supplicant
+    - opensuse-migration-tool
+
   optional_packages: null
   base_product: Leap-Micro
 

products.d/tumbleweed.yaml

@@ -137,6 +137,8 @@ software:
     - apparmor
   mandatory_packages:
     - NetworkManager
+    # TODO: dynamically propose kernel in agama code
+    - kernel-default
     - openSUSE-repos-Tumbleweed
     - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
   optional_packages: null