Add support for product modes

products.d/agama-products.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Jan 28 11:01:02 UTC 2026 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
+
+- Define "standard" and "immutable" modes for SLES (jsc#PED-14307).
+
 -------------------------------------------------------------------
 Fri Jan  9 14:44:00 UTC 2026 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
 

products.d/kalpa.yaml

@@ -92,7 +92,7 @@ software:
   mandatory_packages:
     - NetworkManager
     - openSUSE-repos-MicroOS
-  optional_packages: null
+  optional_packages: []
   base_product: Kalpa
 
 security:

products.d/leap_160.yaml

@@ -90,7 +90,7 @@ software:
     - NetworkManager
     - openSUSE-repos-Leap
     - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
-  optional_packages: null
+  optional_packages: []
   base_product: Leap
 
 security:

products.d/leap_micro_62.yaml

@@ -55,7 +55,7 @@ software:
     - wpa_supplicant
     - opensuse-migration-tool
 
-  optional_packages: null
+  optional_packages: []
   base_product: Leap-Micro
 
 security:

products.d/microos.yaml

@@ -146,7 +146,7 @@ software:
   mandatory_packages:
     - NetworkManager
     - openSUSE-repos-MicroOS
-  optional_packages: null
+  optional_packages: []
   base_product: MicroOS
 
 security:

products.d/sles_161.yaml

@@ -106,9 +106,8 @@ software:
       archs: ppc
 
   mandatory_patterns:
-    - enhanced_base
     - bootloader
-  optional_patterns: null # no optional pattern shared
+  optional_patterns: [] # no optional pattern shared
   user_patterns:
     - cockpit
     - sles_sap_minimal_sap
@@ -138,7 +137,7 @@ software:
     # bsc#1241224, bsc#1224868 avoid probe DHCP over all ethernet devices and ignore carrier
     - NetworkManager-config-server
     - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
-  optional_packages: null
+  optional_packages: []
   base_product: SLES
 
 security:
@@ -150,92 +149,161 @@ security:
     none:
       patterns: null
 
-storage:
-  space_policy: delete
-  volumes:
-    - "/"
-    - "swap"
-  volume_templates:
-    - mount_path: "/"
-      filesystem: btrfs
-      btrfs:
-        snapshots: true
-        read_only: false
-        default_subvolume: "@"
-        subvolumes:
-          - path: home
-          - path: opt
-          - path: root
-          - path: srv
-          - path: usr/local
-          # Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
-          - path: var
-            copy_on_write: false
-          # Architecture specific subvolumes
-          - path: boot/grub2/arm64-efi
-            archs: aarch64
-          - path: boot/grub2/arm-efi
-            archs: arm
-          - path: boot/grub2/i386-pc
-            archs: x86_64
-          - path: boot/grub2/powerpc-ieee1275
-            archs: ppc,!board_powernv
-          - path: boot/grub2/s390x-emu
-            archs: s390
-          - path: boot/grub2/x86_64-efi
-            archs: x86_64
-          - path: boot/grub2/riscv64-efi
-            archs: riscv64
-      size:
-        auto: true
-      outline:
-        required: true
-        filesystems:
-          - btrfs
-          - ext2
-          - ext3
-          - ext4
-          - xfs
-        auto_size:
-          base_min: 5 GiB
-          base_max: 15 GiB
-          snapshots_increment: 150%
-          max_fallback_for:
-            - "/home"
-        snapshots_configurable: true
-    - mount_path: "swap"
-      filesystem: swap
-      size:
-        min: 1 GiB
-        max: 2 GiB
-      outline:
-        required: false
-        filesystems:
-          - swap
-    - mount_path: "/home"
-      filesystem: xfs
-      size:
-        auto: false
-        min: 5 GiB
-        max: unlimited
-      outline:
-        required: false
-        filesystems:
-          - btrfs
-          - ext2
-          - ext3
-          - ext4
-          - xfs
-    - filesystem: xfs
-      size:
-        auto: false
-        min: 512 MiB
-      outline:
-        required: false
-        filesystems:
-          - btrfs
-          - ext2
-          - ext3
-          - ext4
-          - xfs
-          - vfat
+modes:
+  - id: standard
+    name: Standard
+    description: Standard system
+
+    software:
+      mandatory_patterns:
+        - enhanced_base
+
+    storage:
+      space_policy: delete
+      volumes:
+        - "/"
+        - "swap"
+      volume_templates:
+        - mount_path: "/"
+          filesystem: btrfs
+          btrfs:
+            snapshots: true
+            read_only: false
+            default_subvolume: "@"
+            subvolumes:
+              - path: home
+              - path: opt
+              - path: root
+              - path: srv
+              - path: usr/local
+              # Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
+              - path: var
+                copy_on_write: false
+              # Architecture specific subvolumes
+              - path: boot/grub2/arm64-efi
+                archs: aarch64
+              - path: boot/grub2/arm-efi
+                archs: arm
+              - path: boot/grub2/i386-pc
+                archs: x86_64
+              - path: boot/grub2/powerpc-ieee1275
+                archs: ppc,!board_powernv
+              - path: boot/grub2/s390x-emu
+                archs: s390
+              - path: boot/grub2/x86_64-efi
+                archs: x86_64
+              - path: boot/grub2/riscv64-efi
+                archs: riscv64
+          size:
+            auto: true
+          outline:
+            required: true
+            filesystems:
+              - btrfs
+              - ext2
+              - ext3
+              - ext4
+              - xfs
+            auto_size:
+              base_min: 5 GiB
+              base_max: 15 GiB
+              snapshots_increment: 150%
+              max_fallback_for:
+                - "/home"
+            snapshots_configurable: true
+        - mount_path: "swap"
+          filesystem: swap
+          size:
+            min: 1 GiB
+            max: 2 GiB
+          outline:
+            required: false
+            filesystems:
+              - swap
+        - mount_path: "/home"
+          filesystem: xfs
+          size:
+            auto: false
+            min: 5 GiB
+            max: unlimited
+          outline:
+            required: false
+            filesystems:
+              - btrfs
+              - ext2
+              - ext3
+              - ext4
+              - xfs
+        - filesystem: xfs
+          size:
+            auto: false
+            min: 512 MiB
+          outline:
+            required: false
+            filesystems:
+              - btrfs
+              - ext2
+              - ext3
+              - ext4
+              - xfs
+              - vfat
+
+  - id: immutable
+    name: Immutable
+    description: Immutable system with atomic updates
+
+    software:
+      mandatory_patterns:
+        - transactional_base
+
+    storage:
+      space_policy: delete
+      volumes:
+        - "/"
+        - "/var"
+      volume_templates:
+        - mount_path: "/"
+          filesystem: btrfs
+          btrfs:
+            snapshots: true
+            read_only: true
+            default_subvolume: "@"
+            subvolumes:
+              - path: home
+              - path: opt
+              - path: root
+              - path: srv
+              - path: usr/local
+              - path: boot/writable
+              # Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
+              - path: var
+                copy_on_write: false
+              # Architecture specific subvolumes
+              - path: boot/grub2/arm64-efi
+                archs: aarch64
+              - path: boot/grub2/x86_64-efi
+                archs: x86_64
+          size:
+            auto: true
+          outline:
+            required: true
+            snapshots_configurable: false
+            filesystems:
+              - btrfs
+            auto_size:
+              base_min: 5 GiB
+              base_max: 25 GiB
+              max_fallback_for:
+                - "/var"
+        - mount_path: "/var"
+          filesystem: btrfs
+          mount_options:
+            - "x-initrd.mount"
+            - "nodatacow"
+          size:
+            auto: false
+            min: 5 GiB
+          outline:
+            required: false
+            filesystems:
+              - btrfs

products.d/sles_sap_161.yaml

@@ -129,7 +129,7 @@ software:
     # bsc#1241224, bsc#1224868 avoid probe DHCP over all ethernet devices and ignore carrier
     - NetworkManager-config-server
     - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
-  optional_packages: null
+  optional_packages: []
   base_product: SLES_SAP
 
 security:

products.d/slowroll.yaml

@@ -102,7 +102,7 @@ software:
     - NetworkManager
     - openSUSE-repos-Slowroll
     - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
-  optional_packages: null
+  optional_packages: []
   base_product: openSUSE
 
 security:

products.d/tumbleweed.yaml

@@ -136,7 +136,7 @@ software:
     - NetworkManager
     - openSUSE-repos-Tumbleweed
     - sudo-policy-wheel-auth-self # explicit wheel group policy to conform new auth model
-  optional_packages: null
+  optional_packages: []
   base_product: openSUSE
 
 security:

rust/agama-lib/share/profile.schema.json

@@ -244,16 +244,20 @@
             "Tumbleweed"
           ]
         },
+        "mode": {
+          "description": "The mode from the products.d/foo.yaml file",
+          "type": "string"
+        },
         "registrationCode": {
-          "title": "Product registration code",
+          "description": "Product registration code",
           "type": "string"
         },
         "registrationEmail": {
-          "title": "Product registration email",
+          "description": "Product registration email",
           "type": "string"
         },
         "registrationUrl": {
-          "title": "URL of the registration server",
+          "description": "URL of the registration server",
           "type": "string"
         },
         "addons": {

rust/agama-manager/src/lib.rs

@@ -61,6 +61,7 @@ mod test {
         let software = software::Config {
             product: Some(ProductConfig {
                 id: Some("SLES".to_string()),
+                mode: Some("standard".to_string()),
                 ..Default::default()
             }),
             ..Default::default()
@@ -106,6 +107,7 @@ mod test {
         let software = software::Config {
             product: Some(ProductConfig {
                 id: Some("SLES".to_string()),
+                mode: Some("standard".to_string()),
                 ..Default::default()
             }),
             ..Default::default()