Publish redhat-coreos config sources

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "fedora-coreos-config"]
+	path = fedora-coreos-config
+	url = https://github.com/coreos/fedora-coreos-config

README.md

@@ -1,11 +1,9 @@
-Please see https://github.com/openshift/installer to install
-an OpenShift cluster which uses Red Hat CoreOS.
+This repository is the "config" repository used to build
+RHEL CoreOS using [coreos-assembler](https://github.com/coreos/coreos-assembler/).
 
-This repository provides a place to report issues about Red Hat CoreOS, in
-addition to [the Bugzilla product](https://bugzilla.redhat.com/enter_bug.cgi?product=OpenShift%20Container%20Platform&component=RHCOS).
+There was a previous git repository inside the Red Hat
+firewall never published.  The history of that repository
+is entangled with various private things and is omitted.
 
-For more information (RHT internal): https://url.corp.redhat.com/redhat-coreos
-
-You may also be interested in [Fedora CoreOS](https://coreos.fedoraproject.org/)
-and the [coreos-assembler](https://github.com/coreos/coreos-assembler/) project
-for example.
+Going forward, this repository will be canonical; more
+to come.

group

@@ -0,0 +1,46 @@
+root:x:0:
+bin:x:1:
+daemon:x:2:
+sys:x:3:
+adm:x:4:
+tty:x:5:
+disk:x:6:
+lp:x:7:
+mem:x:8:
+kmem:x:9:
+wheel:x:10:
+cdrom:x:11:
+mail:x:12:
+man:x:15:
+sudo:x:16:
+dialout:x:18:
+floppy:x:19:
+games:x:20:
+tape:x:30:
+video:x:39:
+ftp:x:50:
+lock:x:54:
+audio:x:63:
+nobody:x:99:
+users:x:100:
+utmp:x:22:
+utempter:x:35:
+ssh_keys:x:999:
+systemd-journal:x:190:
+dbus:x:81:
+polkitd:x:998:
+etcd:x:997:
+dip:x:40:
+cgred:x:996:
+tss:x:59:
+avahi-autoipd:x:170:
+rpc:x:32:
+sssd:x:993:
+dockerroot:x:986:
+rpcuser:x:29:
+nfsnobody:x:65534:
+kube:x:994:
+sshd:x:74:
+chrony:x:992:
+openvswitch:x:800:
+hugetlbfs:x:801:

image.yaml

@@ -0,0 +1,17 @@
+# See https://github.com/coreos/coreos-assembler/pull/298
+size: 16
+
+# Enable LUKS root volume
+# Disabled due to https://gitlab.cee.redhat.com/coreos/redhat-coreos/merge_requests/632
+luks_rootfs: "yes"
+# This pairs with the above so we can easily detect in the initrd
+extra-kargs:
+  - rhcos.root=crypt_rootfs
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1830280
+  - random.trust_cpu=on
+# https://bugzilla.redhat.com/show_bug.cgi?id=1812276
+squashfs-compression: gzip
+
+# Disable networking by default on firstboot. We can drop this once cosa stops
+# defaulting to `ip=dhcp,dhcp6 rd.neednet=1` when it doesn't see this key.
+ignition-network-kcmdline: []

kola-denylist.yaml

@@ -0,0 +1,19 @@
+# This file documents currently known-to-fail kola tests. It is consumed by
+# coreos-assembler to automatically skip some tests. For more information,
+# see: https://github.com/coreos/coreos-assembler/pull/866.
+- pattern: fips.enable*
+  tracker: https://bugzilla.redhat.com/show_bug.cgi?id=1782026
+  arches:
+   - s390x
+- pattern: crio.base
+  tracker: https://github.com/kubernetes/kubernetes/issues/87325
+  arches:
+   - s390x
+   - ppc64le
+# for s390x by-partlabel can't be used and even if that is avoided by using part-uuid, still depends on the cpi fix below
+- pattern: ext.config.var-mount
+  tracker: https://github.com/ibm-s390-tools/s390-tools/pull/82
+  arches:
+   - s390x
+- pattern: coreos.ignition.journald-log
+  tracker: https://github.com/coreos/coreos-assembler/issues/1173

live/EFI/redhat/grub.cfg

@@ -0,0 +1,33 @@
+# Note this file mostly matches the grub.cfg file from within the
+# efiboot.img on the Fedora Server DVD iso. Diff this file with that
+# file in the future to pick up changes.
+#
+# One diff to note is we use linux and initrd instead of linuxefi and
+# initrdefi. We do this because it works and allows us to use this same
+# file on other architecutres. https://github.com/coreos/fedora-coreos-config/issues/63
+#
+# This file gets embedded into the efiboot.img
+set default="1"
+
+function load_video {
+  insmod efi_gop
+  insmod efi_uga
+  insmod video_bochs
+  insmod video_cirrus
+  insmod all_video
+}
+
+load_video
+set gfxpayload=keep
+insmod gzio
+insmod part_gpt
+insmod ext2
+
+set timeout=5
+### END /etc/grub.d/00_header ###
+
+### BEGIN /etc/grub.d/10_linux ###
+menuentry 'RHEL CoreOS (Live)' --class fedora --class gnu-linux --class gnu --class os {
+	linux /images/pxeboot/vmlinuz @@KERNEL-ARGS@@ ignition.firstboot ignition.platform.id=metal
+	initrd /images/pxeboot/initrd.img /images/ignition.img
+}

live/README-devel.md

@@ -0,0 +1,13 @@
+These files will be copied to the target live ISO
+via the CoreOS Assembler buildextend-live call. It
+picks up all files in the coreos/fedora-coreos-config/live/
+directory and copies them to the base of the ISO. 
+
+Files currently copied are:
+
+- isolinux/boot.msg
+- isolinux/isolinux.cfg
+
+Files that get copied into efiboot.img in the ISO:
+
+- EFI/grub.cfg 

live/isolinux/boot.msg

@@ -0,0 +1,5 @@
+
+splash.lss
+
+ -  Press the 01<ENTER>07 key to boot.
+

live/isolinux/isolinux.cfg

@@ -0,0 +1,74 @@
+# Note this file mostly matches the isolinux.cfg file from the Fedora 
+# Server DVD iso. Diff this file with that file in the future to pick up
+# changes.
+serial 0
+default vesamenu.c32
+# timeout in units of 1/10s. 50 == 5 seconds
+timeout 50
+
+display boot.msg
+
+# Clear the screen when exiting the menu, instead of leaving the menu displayed.
+# For vesamenu, this means the graphical background is still displayed without
+# the menu itself for as long as the screen remains in graphics mode.
+menu clear
+menu background splash.png
+menu title RHEL CoreOS
+menu vshift 8
+menu rows 18
+menu margin 8
+#menu hidden
+menu helpmsgrow 15
+menu tabmsgrow 13
+
+# Border Area
+menu color border * #00000000 #00000000 none
+
+# Selected item
+menu color sel 0 #ffffffff #00000000 none
+
+# Title bar
+menu color title 0 #ff7ba3d0 #00000000 none
+
+# Press [Tab] message
+menu color tabmsg 0 #ff3a6496 #00000000 none
+
+# Unselected menu item
+menu color unsel 0 #84b8ffff #00000000 none
+
+# Selected hotkey
+menu color hotsel 0 #84b8ffff #00000000 none
+
+# Unselected hotkey
+menu color hotkey 0 #ffffffff #00000000 none
+
+# Help text
+menu color help 0 #ffffffff #00000000 none
+
+# A scrollbar of some type? Not sure.
+menu color scrollbar 0 #ffffffff #ff355594 none
+
+# Timeout msg
+menu color timeout 0 #ffffffff #00000000 none
+menu color timeout_msg 0 #ffffffff #00000000 none
+
+# Command prompt text
+menu color cmdmark 0 #84b8ffff #00000000 none
+menu color cmdline 0 #ffffffff #00000000 none
+
+# Do not display the actual menu unless the user presses a key. All that is displayed is a timeout message.
+
+menu tabmsg Press Tab for full configuration options on menu items.
+
+menu separator # insert an empty line
+menu separator # insert an empty line
+
+label linux
+  menu label ^RHEL CoreOS (Live)
+  menu default
+  kernel /images/pxeboot/vmlinuz
+  append initrd=/images/pxeboot/initrd.img,/images/ignition.img @@KERNEL-ARGS@@ ignition.firstboot ignition.platform.id=metal
+
+menu separator # insert an empty line
+
+menu end

live/zipl.prm

@@ -0,0 +1 @@
+@@KERNEL-ARGS@@ ignition.firstboot ignition.platform.id=metal