Drop coreos-base/misc-files - #4230
Draft
krnowak wants to merge 12 commits into
Draft
Conversation
…sc-files Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
…base/misc-files Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
…c-files Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
…c-files Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
…to baselayout Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
…install Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
There was a problem hiding this comment.
Pull request overview
Removes coreos-base/misc-files by relocating its per-package tweaks into coreos/config/env/*, moving the “core” account setup into dedicated acct-{user,group}/core packages, and keeping only the OEM-migration file lists as coreos-base/old-oem-files.
Changes:
- Drop
coreos-base/misc-filesand remove its USE-flag wiring from the profile. - Re-home audit/SELinux/openssh/ntp/bash adjustments into per-package env hooks and add the Kubernetes compatibility symlink to
sys-apps/baselayout. - Introduce
acct-user/core,acct-group/core, andcoreos-base/old-oem-files, and updatecoreos-base/coreosdependencies accordingly.
Reviewed changes
Copilot reviewed 27 out of 37 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild | Add Kubernetes write-redirect symlink and keepdir to baselayout install. |
| sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.6.8-r24.ebuild | Add versioned baselayout ebuild containing the same Kubernetes symlink logic. |
| sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use | Remove coreos-base/misc-files USE-flag selection. |
| sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-process/audit | Move audit rules + compat links into audit env hook. |
| sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-libs/libsemanage | Add compat links + placeholder file for semanage.conf. |
| sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/policycoreutils | Keep SELinux policy path/symlink hack and add tmpfiles entry for /var/lib/selinux symlink. |
| sdk_container/src/third_party/coreos-overlay/coreos/config/env/sec-policy/selinux-base | Add SELinux compat links + placeholder files for old reference paths. |
| sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-misc/openssh | Move ssh/sshd config snippets, compat symlinks, and socket drop-in into openssh env hook. |
| sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-misc/ntp | Move ntp.conf provisioning and systemd drop-ins into ntp env hook. |
| sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-shells/bash | Move bash/skel compat symlinks and bashrc.d snippet into bash env hook. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/old-oem-files-0.ebuild | New package carrying OEM migration file lists (previously in misc-files). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/metadata.xml | Metadata stub for new package. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/vmware | Add VMware OEM migration file list. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/qemu | (Empty in diff) OEM marker/list file for qemu. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/packet | Add Packet OEM migration file list. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/openstack | Add OpenStack OEM migration file list. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/gce | Add GCE OEM migration file list. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/digitalocean | Add DigitalOcean OEM migration file list. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/azure | Add Azure OEM migration file list. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/old-oem-files/files/oems/ami | Add AMI OEM migration file list. |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/misc-files-0-r9.ebuild | Remove misc-files ebuild (functionality migrated elsewhere). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/selinux/10-var-lib-selinux.conf | Remove tmpfiles snippet (now generated in policycoreutils env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/openssh/no-trigger-limit-burst.conf | Remove socket drop-in file (now generated in openssh env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/openssh/50-flatcar-sshd.conf | Remove sshd snippet file (now generated in openssh env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/openssh/50-flatcar-ssh.conf | Remove ssh client snippet file (now generated in openssh env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/ntp/ntpd-always-restart.conf | Remove ntpd drop-in file (now generated in ntp env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/ntp/ntp.conf | Remove ntp.conf file (now generated in ntp env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/ntp/ntp-environment.conf | Remove ntp env drop-in file (now generated in ntp env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/bash/99-flatcar-bcc.bash | Remove bashrc.d snippet file (now generated in bash env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/audit/99-default.rules | Remove audit rule file (now generated in audit env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/audit/80-selinux.rules | Remove audit rule file (now generated in audit env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/misc-files/files/audit/00-clear.rules | Remove audit rule file (now generated in audit env hook). |
| sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild | Switch dependency from misc-files to old-oem-files; add acct-group/core and acct-user/core deps. |
| sdk_container/src/third_party/coreos-overlay/acct-user/core/metadata.xml | Metadata stub for new core user package. |
| sdk_container/src/third_party/coreos-overlay/acct-user/core/core-0.ebuild | Add core user package and tmpfiles-based home symlink setup. |
| sdk_container/src/third_party/coreos-overlay/acct-group/core/metadata.xml | Metadata stub for new core group package. |
| sdk_container/src/third_party/coreos-overlay/acct-group/core/core-0.ebuild | Add core group package with enforced GID 500. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| ( | ||
| insopts -m 0644 | ||
| unit_dir=$(systemd_get_systemunitdir) | ||
| insinto "${unit_dir}/ntpd.service.d" |
Comment on lines
+11
to
+12
| insinto /usr/share/flatcar/etc/audit/rules.d/ | ||
| newins - 00-clear.rules 80-selinux.rules 99-default.rules |
Comment on lines
+55
to
+59
| target=${CORE_BASH_SYMLINKS["${name}"]} | ||
| link="/home/core/${name}" | ||
| dosym -r "${target}" "${link}" | ||
| fowners --no-dereference core:core "${link}" | ||
| done |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The contents of this package were:
CI: TODO
No changelog entry, this is not a user-visible change.