rhel-8.6.yaml

arch-include:
  x86_64:
    - kernel-rhel-86.yaml
  ppc64le:
    - kernel-rhel-86.yaml
  aarch64:
    - kernel-rhel-86.yaml
  s390x:
    # Temporarily use RHEL 8.5 Kernel for s390x, until RHEL 8.6 gets a new kernel (Build 370+)
    # See: https://bugzilla.redhat.com/show_bug.cgi?id=2047242
    - kernel-rhel-85.yaml

# Layers specific to RHCOS
ostree-layers:
  # Temporary logrotate service and timer units
  - overlay/15rhcos-logrotate

# See README.md
# and https://github.com/openshift/release/blob/master/core-services/release-controller/README.md#rpm-mirrors
repos:
  - rhel-85-baseos
  - rhel-8-baseos
  - rhel-8-appstream
  - rhel-8-fast-datapath
  - rhel-8-server-ose

# https://bugzilla.redhat.com/show_bug.cgi?id=1938928
rpmdb: bdb

# We include hours/minutes to avoid version number reuse
automatic-version-prefix: "411.86.<date:%Y%m%d%H%M>"
# This ensures we're semver-compatible which OpenShift wants
automatic-version-suffix: "-"
# Keep this is sync with the version in postprocess
mutate-os-release: "4.11"

postprocess:
  - |
     #!/usr/bin/env bash
     set -xeo pipefail

     # Tweak /usr/lib/os-release
     grep -v "OSTREE_VERSION" /etc/os-release > /usr/lib/os-release.rhel
     OCP_RELEASE="4.11"
     (
     . /etc/os-release
     cat > /usr/lib/os-release <<EOF
     NAME="${NAME} CoreOS"
     ID="rhcos"
     ID_LIKE="rhel fedora"
     VERSION="${OSTREE_VERSION}"
     VERSION_ID="${OCP_RELEASE}"
     PLATFORM_ID="${PLATFORM_ID}"
     PRETTY_NAME="${NAME} CoreOS ${OSTREE_VERSION} (Ootpa)"
     ANSI_COLOR="${ANSI_COLOR}"
     CPE_NAME="cpe:/o:redhat:enterprise_linux:8::coreos"
     HOME_URL="${HOME_URL}"
     DOCUMENTATION_URL="https://docs.openshift.com/container-platform/${OCP_RELEASE}/"
     BUG_REPORT_URL="https://bugzilla.redhat.com/"
     REDHAT_BUGZILLA_PRODUCT="OpenShift Container Platform"
     REDHAT_BUGZILLA_PRODUCT_VERSION="${OCP_RELEASE}"
     REDHAT_SUPPORT_PRODUCT="OpenShift Container Platform"
     REDHAT_SUPPORT_PRODUCT_VERSION="${OCP_RELEASE}"
     OPENSHIFT_VERSION="${OCP_RELEASE}"
     RHEL_VERSION="${VERSION_ID}"
     OSTREE_VERSION="${OSTREE_VERSION}"
     EOF
     )

     # Tweak /etc/system-release, /etc/system-release-cpe & /etc/redhat-release
     (
     . /etc/os-release
     cat > /etc/system-release-cpe <<EOF
     ${CPE_NAME}
     EOF
     cat > /usr/lib/redhat-release <<EOF
     ${NAME} release ${VERSION_ID}
     EOF
     rm -f /etc/system-release /etc/redhat-release
     ln -s /usr/lib/system-release /etc/system-release
     ln -s /usr/lib/system-release /etc/redhat-release
     )

     # Tweak /usr/lib/issue
     cat > /usr/lib/issue <<EOF
     \S \S{VERSION_ID}
     EOF
     rm -f /etc/issue /etc/issue.net
     ln -s /usr/lib/issue /etc/issue
     ln -s /usr/lib/issue /etc/issue.net

     # Let's have a non-boring motd, just like CL (although theirs is more subdued
     # nowadays compared to early versions with ASCII art).  One thing we do here
     # is add --- as a "separator"; the idea is that any "dynamic" information should
     # be below that.
     # See: https://projects.engineering.redhat.com/browse/COREOS-1029
     . /etc/os-release
     cat > /etc/motd <<EOF
     Red Hat Enterprise Linux CoreOS $VERSION
       Part of OpenShift ${OPENSHIFT_VERSION}, RHCOS is a Kubernetes native operating system
       managed by the Machine Config Operator (\`clusteroperator/machine-config\`).

     WARNING: Direct SSH access to machines is not recommended; instead,
     make configuration changes via \`machineconfig\` objects:
       https://docs.openshift.com/container-platform/${OPENSHIFT_VERSION}/architecture/architecture-rhcos.html

     ---
     EOF
  # Collection of RHCOS specific workarounds
  - |
     #!/usr/bin/env bash
     set -xeo pipefail

     # Ensure that /etc/issue.d exists for console-login-helper-messages
     # This can be removed once we rebase to RHEL 9
     install -d -m 0755 /etc/issue.d
  - |
     #!/usr/bin/env bash
     set -xeuo pipefail

     # Enable tmp-on-tmpfs by default because we don't want to have things
     # leak across reboots, it increases alignment with FCOS, and also fixes
     # the Live ISO.  First, verify that RHEL is still disabling.
     grep -q '# RHEL-only: Disable /tmp on tmpfs' /usr/lib/systemd/system/basic.target
     echo '# RHCOS-only: we follow the Fedora/upstream default' >> /usr/lib/systemd/system/basic.target
     echo 'Wants=tmp.mount' >> /usr/lib/systemd/system/basic.target
  # Stop shipping a baked initiator name in the image; this should be generated
  # at runtime. We have a service which does this
  # (coreos-generate-iscsi-initiatorname.service) until it's done properly
  # upstream (see https://bugzilla.redhat.com/show_bug.cgi?id=1493296).
  - |
     #!/usr/bin/env bash
     set -xeuo pipefail

     # NB: we don't use -f here so we break when this is no longer needed
     rm -v /etc/iscsi/initiatorname.iscsi
  - |
     #!/usr/bin/env bash
     set -xeo pipefail

     # TEMPORARY: Remove `ipmi-si` in /usr/lib/modules-load.d/fwupd-redfish.conf until fix is landed to RHEL 8.6
     # Fixed version is fwupd-1.7.4-1.el8
     # See https://github.com/openshift/os/issues/749
     #     https://bugzilla.redhat.com/show_bug.cgi?id=2037294
     #     https://github.com/fwupd/fwupd/pull/4162
     [ ! -f /usr/lib/modules-load.d/fwupd-redfish.conf ] && exit 0
     grep -q ipmi-si /usr/lib/modules-load.d/fwupd-redfish.conf || exit 100
     sed -i '/ipmi-si/d' /usr/lib/modules-load.d/fwupd-redfish.conf

# Packages that are only in RHCOS and not in SCOS or that have special
# constraints that do not apply to SCOS
packages:
 # We include the generic release package and tweak the os-release info in a
 # post-proces script
 - redhat-release
 # RHEL7 compatibility
 - compat-openssl10
 # SCOS package name does not include a version number
 - openvswitch2.16
 # FIXME?
 - tpm2-tools

# Packages pinned to specific repos in RHCOS
repo-packages:
  - repo: rhel-85-baseos
    packages:
      - sssd
  # we always want the kernel from BaseOS
  # Temporarily use RHEL 8.5 Kernel for s390x, until RHEL 8.6 gets a new kernel (Build 370+)
  # See: https://bugzilla.redhat.com/show_bug.cgi?id=2047242
  # - repo: rhel-8-baseos
  #   packages:
  #     - kernel
  # we want the one shipping in RHEL, not the equivalently versioned one in RHAOS
  - repo: rhel-8-appstream
    packages:
      - nss-altfiles
  - repo: rhel-8-server-ose
    packages:
      # eventually, we want the one from the container-tools module, but we're
      # not there yet
      - toolbox
      # These are the only container stack packages we don't get from modularity
      # nor from base RHEL for various reasons. See:
      # https://github.com/openshift/os/pull/681#issuecomment-1022443830
      #
      # newer than what is included in RHEL 8.4.Z EUS, but addresses some BZs
      # that customers were encountering
      - container-selinux
      # newer than what is included in RHEL 8.4.Z EUS, because the k8s folks
      # wanted to start testing with 1.x versions of crun
      - crun
      # slightly newer than what is included in RHEL 8.4.Z EUS, because we had
      # previously shipped a newer version in OCP/RHCOS 4.9 and had to preserve
      # the upgrade path
      - runc
      # Need an updated skopeo for https://github.com/containers/skopeo/pull/1476
      # for coreos layering work
      - containers-common
      - skopeo

modules:
  enable:
    # podman stack; see https://github.com/openshift/os/pull/681#issuecomment-1022443830
    - container-tools:rhel8
    # qemu-guest-agent
    - virt:rhel