Skip to content

fedora: update cloud_kernel_options#1953

Merged
achilleas-k merged 2 commits into
osbuild:mainfrom
croissanne:kernel-args-fedora
Oct 16, 2025
Merged

fedora: update cloud_kernel_options#1953
achilleas-k merged 2 commits into
osbuild:mainfrom
croissanne:kernel-args-fedora

Conversation

@croissanne

Copy link
Copy Markdown
Member
fedora: turn off systemd.firstboot for cloud images

Systemd 256 added a new feature which interactively queries on the
console for a user name and password if no regular user exists [1]. For
obvious reasons this is not ideal in cloud or server environments.

Fedora updated its kiwi descriptions for this reason, let's do the same
here [2].

[1]: https://github.com/systemd/systemd/commit/3ccadbce3358ba1db7ce5fa3f8dd17c627ffd93b
[2]: https://pagure.io/fedora-kiwi-descriptions/c/47dd0aa7615d847c06627007873b3d7e09bcd441

fedora: copy cloud_kernel_options from fedora

Let's just use the same kernel arguments as the official images [1].

[1]: https://pagure.io/fedora-kiwi-descriptions/blob/a6a0df3b3ac4a40bc434591467c30b4e42d254ce/f/teams/cloud/cloud.xml

@croissanne croissanne requested a review from a team as a code owner October 15, 2025 12:22
@croissanne croissanne requested review from achilleas-k, bcl, lzap, mvo5 and supakeen and removed request for mvo5 October 15, 2025 12:22
Systemd 256 added a new feature which interactively queries on the
console for a user name and password if no regular user exists [1]. For
obvious reasons this is not ideal in cloud or server environments.

Fedora updated its kiwi descriptions for this reason, let's do the same
here [2].

[1]: systemd/systemd@3ccadbc
[2]: https://pagure.io/fedora-kiwi-descriptions/c/47dd0aa7615d847c06627007873b3d7e09bcd441
@supakeen

supakeen commented Oct 15, 2025

Copy link
Copy Markdown
Member
fedora: turn off systemd.firstboot for cloud images

Systemd 256 added a new feature which interactively queries on the
console for a user name and password if no regular user exists [1]. For
obvious reasons this is not ideal in cloud or server environments.

Fedora updated its kiwi descriptions for this reason, let's do the same
here [2].

[1]: https://github.com/systemd/systemd/commit/3ccadbce3358ba1db7ce5fa3f8dd17c627ffd93b
[2]: https://pagure.io/fedora-kiwi-descriptions/c/47dd0aa7615d847c06627007873b3d7e09bcd441
fedora: copy cloud_kernel_options from fedora

Let's just use the same kernel arguments as the official images [1].

[1]: https://pagure.io/fedora-kiwi-descriptions/blob/a6a0df3b3ac4a40bc434591467c30b4e42d254ce/f/teams/cloud/cloud.xml

This is fine; though we already block systemd-firstboot in other ways (just like kiwi) and our images currently don't trigger it.

Note also that in theory our images are actually Fedora Server images (hence the server- prefix) being created with the Cloud Package set. This should be aligned sometime (I have a local branch somewhere).


Overall, OK since it doesn't affect any actual deliverables to Fedora but I should really spend some time cleaning up and checking these definitions for parity fully.

@achilleas-k

Copy link
Copy Markdown
Member

This is fine; though we already block systemd-firstboot in other ways (just like kiwi) and our images currently don't trigger it.

How do we block it currently? Because we (Sanne and I) both saw this happen in the AWS image when setting up the runners for Fedora 43 and I reproduced it with a local build.

@achilleas-k achilleas-k left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!! LGTM

@achilleas-k achilleas-k added this pull request to the merge queue Oct 16, 2025
@supakeen

Copy link
Copy Markdown
Member

This is fine; though we already block systemd-firstboot in other ways (just like kiwi) and our images currently don't trigger it.

How do we block it currently? Because we (Sanne and I) both saw this happen in the AWS image when setting up the runners for Fedora 43 and I reproduced it with a local build.

We write an empty /etc/machine-id which means ConditionFirstboot isn't met; systemd-firstboot has this in its service file.

@supakeen

Copy link
Copy Markdown
Member

This is fine; though we already block systemd-firstboot in other ways (just like kiwi) and our images currently don't trigger it.

How do we block it currently? Because we (Sanne and I) both saw this happen in the AWS image when setting up the runners for Fedora 43 and I reproduced it with a local build.

We write an empty /etc/machine-id which means ConditionFirstboot isn't met; systemd-firstboot has this in its service file.

Got the wires in my head crossed; we actually write uninitialized which does meet ConditionFirstboot; we then override it to write an empty file in the IoT and Minimal images.

Merged via the queue into osbuild:main with commit 9ff35eb Oct 16, 2025
23 checks passed
@croissanne croissanne deleted the kernel-args-fedora branch October 16, 2025 12:45
croissanne added a commit to croissanne/osbuild-composer that referenced this pull request Oct 21, 2025
Changes with 0.205.0
----------------
  - Convert the test config map to a config list (osbuild/image-builder#1900)
    - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
  - Repos: Add definitions for AlmaLinux 9.7, 9.8, 10.1 and 10.2 (osbuild/image-builder#1926)
    - Author: Eduard Abdullin, Reviewers: Achilleas Koutsou, Brian C. Lane, Simon de Vlieger
  - Support uploading to OpenStack (osbuild/image-builder#1921)
    - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
  - disk: make addPartitionsForBootMode() arch specific (osbuild/image-builder#1928)
    - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
  - distro: add ova image type for bootc [HMS-9503] (osbuild/image-builder#1938)
    - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - fedora/minimal: drop uuids in partition tables (osbuild/image-builder#1932)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt

Changes with 0.206.0
----------------
  - Update osbuild dependency commit ID to latest (osbuild/image-builder#1945)
    - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - deps: bump blueprint to 1.16.0 (osbuild/image-builder#1952)
    - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
  - fedora: Drop tigervnc on F42 and later (osbuild/image-builder#1942)
    - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
  - fedora: document root kickstart (osbuild/image-builder#1936)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
  - fedora: rawhide is 44 (osbuild/image-builder#1943)
    - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
  - many: lorax template split (HMS-9524) (osbuild/image-builder#1949)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

Changes with 0.207.0
----------------
  - Enable fedora 43 unit testing (osbuild/image-builder#1954)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - fedora: update cloud_kernel_options (osbuild/image-builder#1953)
    - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - test/data/repos/rhel-10.2: fix copy & paste error (osbuild/image-builder#1956)
    - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

Changes with 0.208.0
----------------
  - Schutzfile: switch CI runner to Fedora 42 (osbuild/image-builder#1955)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - Support uploading to IBM Cloud (osbuild/image-builder#1924)
    - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - pkg/osbuild: generate osbuild result from status scanner entries (osbuild/image-builder#1941)
    - Author: Sanne Raymaekers, Reviewers: Nobody
croissanne added a commit to croissanne/osbuild-composer that referenced this pull request Oct 21, 2025
Changes with 0.205.0
----------------
  - Convert the test config map to a config list (osbuild/image-builder#1900)
    - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
  - Repos: Add definitions for AlmaLinux 9.7, 9.8, 10.1 and 10.2 (osbuild/image-builder#1926)
    - Author: Eduard Abdullin, Reviewers: Achilleas Koutsou, Brian C. Lane, Simon de Vlieger
  - Support uploading to OpenStack (osbuild/image-builder#1921)
    - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
  - disk: make addPartitionsForBootMode() arch specific (osbuild/image-builder#1928)
    - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
  - distro: add ova image type for bootc [HMS-9503] (osbuild/image-builder#1938)
    - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - fedora/minimal: drop uuids in partition tables (osbuild/image-builder#1932)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt

Changes with 0.206.0
----------------
  - Update osbuild dependency commit ID to latest (osbuild/image-builder#1945)
    - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - deps: bump blueprint to 1.16.0 (osbuild/image-builder#1952)
    - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
  - fedora: Drop tigervnc on F42 and later (osbuild/image-builder#1942)
    - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
  - fedora: document root kickstart (osbuild/image-builder#1936)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
  - fedora: rawhide is 44 (osbuild/image-builder#1943)
    - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
  - many: lorax template split (HMS-9524) (osbuild/image-builder#1949)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

Changes with 0.207.0
----------------
  - Enable fedora 43 unit testing (osbuild/image-builder#1954)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - fedora: update cloud_kernel_options (osbuild/image-builder#1953)
    - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - test/data/repos/rhel-10.2: fix copy & paste error (osbuild/image-builder#1956)
    - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

Changes with 0.208.0
----------------
  - Schutzfile: switch CI runner to Fedora 42 (osbuild/image-builder#1955)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - Support uploading to IBM Cloud (osbuild/image-builder#1924)
    - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - pkg/osbuild: generate osbuild result from status scanner entries (osbuild/image-builder#1941)
    - Author: Sanne Raymaekers, Reviewers: Nobody
ondrejbudai pushed a commit to osbuild/osbuild-composer that referenced this pull request Oct 22, 2025
Changes with 0.205.0
----------------
  - Convert the test config map to a config list (osbuild/image-builder#1900)
    - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
  - Repos: Add definitions for AlmaLinux 9.7, 9.8, 10.1 and 10.2 (osbuild/image-builder#1926)
    - Author: Eduard Abdullin, Reviewers: Achilleas Koutsou, Brian C. Lane, Simon de Vlieger
  - Support uploading to OpenStack (osbuild/image-builder#1921)
    - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
  - disk: make addPartitionsForBootMode() arch specific (osbuild/image-builder#1928)
    - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
  - distro: add ova image type for bootc [HMS-9503] (osbuild/image-builder#1938)
    - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - fedora/minimal: drop uuids in partition tables (osbuild/image-builder#1932)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt

Changes with 0.206.0
----------------
  - Update osbuild dependency commit ID to latest (osbuild/image-builder#1945)
    - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - deps: bump blueprint to 1.16.0 (osbuild/image-builder#1952)
    - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
  - fedora: Drop tigervnc on F42 and later (osbuild/image-builder#1942)
    - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
  - fedora: document root kickstart (osbuild/image-builder#1936)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
  - fedora: rawhide is 44 (osbuild/image-builder#1943)
    - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
  - many: lorax template split (HMS-9524) (osbuild/image-builder#1949)
    - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

Changes with 0.207.0
----------------
  - Enable fedora 43 unit testing (osbuild/image-builder#1954)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - fedora: update cloud_kernel_options (osbuild/image-builder#1953)
    - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - test/data/repos/rhel-10.2: fix copy & paste error (osbuild/image-builder#1956)
    - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

Changes with 0.208.0
----------------
  - Schutzfile: switch CI runner to Fedora 42 (osbuild/image-builder#1955)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - Support uploading to IBM Cloud (osbuild/image-builder#1924)
    - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - pkg/osbuild: generate osbuild result from status scanner entries (osbuild/image-builder#1941)
    - Author: Sanne Raymaekers, Reviewers: Nobody
croissanne added a commit to croissanne/image-builder-cli that referenced this pull request Oct 22, 2025
Changes with 0.207.0
----------------
  - Enable fedora 43 unit testing (osbuild/image-builder#1954)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - fedora: update cloud_kernel_options (osbuild/image-builder#1953)
    - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - test/data/repos/rhel-10.2: fix copy & paste error (osbuild/image-builder#1956)
    - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

Changes with 0.208.0
----------------
  - Schutzfile: switch CI runner to Fedora 42 (osbuild/image-builder#1955)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - Support uploading to IBM Cloud (osbuild/image-builder#1924)
    - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - pkg/osbuild: generate osbuild result from status scanner entries (osbuild/image-builder#1941)
    - Author: Sanne Raymaekers, Reviewers: Nobody

Changes with 0.209.0
----------------
  - gitlab: run ostree manifest generation and builds only when needed (osbuild/image-builder#1961)
    - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
  - osbuild/osbuild-exec: extract building the osbuild cmd to helper (osbuild/image-builder#1963)
    - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
  - rhel10: add ism secret & top secret oscap profiles (HMS-9507) (osbuild/image-builder#1962)
    - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants