images: Add Fedora ELN bootc

[martinpitt]

This introduces an image which uses bootc for deploying OCI container images as OS.

The initial installation is a bit tricky as it requires converting a container image to a bootable qcow2 image. That happens with https://github.com/osbuild/bootc-image-builder which is very demanding: It needs both /dev/kvm and a --privileged container, so the only place where we can run this is in a VM on our own CI.

https://issues.redhat.com/browse/COCKPIT-1108

• image-refresh fedora-eln-bootc

[cockpituous]

image-refresh fedora-eln-bootc done: https://github.com/cockpit-project/bots/commits/image-refresh-fedora-eln-bootc-20240403-170843

[cockpituous]

Success. Log: https://cockpit-logs.us-east-1.linodeobjects.com/image-refresh-fedora-eln-bootc-88ea47d3-20240403-165119/log.html

[martinpitt]

osbuild/bootc-image-builder#321 got fixed, so we can get rid of that expensive "local registry" hack 🎉 But starter-kit doesn't work yet, this needs some further adjustments.

[martinpitt]

I have a bigger stumbling block: On this image, running cockpit/ws fails:

# podman container runlabel RUN cockpit/ws -- --no-tls
Error: netavark: unable to append rule '! -d 224.0.0.0/4 -j MASQUERADE' to table 'nat': code: 4, msg: Warning: Extension MASQUERADE revision 0 not supported, missing kernel module?
iptables v1.8.10 (nf_tables):  RULE_APPEND failed (No such file or directory): rule in chain NETAVARK-1D8721804F16F

On our fedora-coreos image, net/netfilter/xt_MASQUERADE.ko.xz is shipped in kernel-modules-core-6.7.9-200.fc39.x86_64. But on ELN, kernel-modules-core-6.9.0-0.rc2.23.eln136.x86_64 does not contain this module, just some net/netfilter/nft_masq.ko.xz. So this is somewhere between an ELN kernel and a podman bug. I filed it as https://bugzilla.redhat.com/show_bug.cgi?id=2273078 .

As that seems difficult to work around, and perhaps ELN is a bit too far off "sanity" territory, I'll consider building c9s instead tomorrow.

I pushed the (otherwise working) ELN commit as 528f6d9 , so that we get it archived in GitHub for the future.

[martinpitt]

Ah, needs to be filed from origin anyway. Closing then, then we have that whole PR as an archive.