Greetings, I created a PR for cosmic variant. It should add the ublue-os:config files to the cosmic

Greetings, I created a PR for cosmic variant. It should add the ublue-os:config files to the cosmic image. Hope it works. Can someone start the build process, please?

MM2 @antheas Data points for rechunking: My bluefin image is roughly 1 GB smaller...

RoyalOughtness•8/10/24, 6:54 PM

woah, this is big

RoyalOughtness•8/10/24, 6:54 PM

rechunking is eventually coming to all ublue images I'm hoping?

M2•8/10/24, 6:54 PM

yeah. Trying to find the bugs

MM2 yeah. Trying to find the bugs

RoyalOughtness•8/10/24, 6:54 PM

good stuff

RoyalOughtness•8/10/24, 6:55 PM

also, can I get a review on https://github.com/ublue-os/config/pull/297

GitHub

feat: add optional pin for luks tpm2 unlock just command by qoijjj ...

Thank you for contributing to the Universal Blue project!
Please read the Contributor's Guide before submitting a pull request.

RoyalOughtness•8/10/24, 6:55 PM

pretty small PR

MM2 My bazzite image went from 13.9 GB to 12.4 GB

Kyle Gospo•8/10/24, 6:56 PM

Smaller updates too, The absolute minimum was previously 2 GB

RoyalOughtness•8/10/24, 6:56 PM

also, that command desperately needs a check to warn users not to use this on faulTPM vulnerable cpus

Kyle Gospo•8/10/24, 6:56 PM

And I just had a 400 MB update on testing

IIvo Greetings, I created a PR for cosmic variant. It should add the ublue-os:config ...

M2•8/10/24, 7:04 PM

It should already have config. It builds from our main images

RoyalOughtness•8/10/24, 7:06 PM

please review: https://github.com/ublue-os/config/pull/313

RoyalOughtness•8/10/24, 7:06 PM

this is much higher priority than the other one

RoyalOughtness•8/10/24, 7:06 PM

the vast majority of amd cpu users shouldn't be using tpm whatsoever

MM2 It should already have config. It builds from our main images

IvoOP•8/10/24, 7:11 PM

The current cosmic image only includes one udev rule. I edited the PR. This should include all other udev rules from ublue-os:config.

MM2 It should already have config. It builds from our main images

RoyalOughtness•8/10/24, 7:13 PM

it's missing the policy file in /usr/share/containers/policy.json

maybe it just hasn't pulled this commit in yet?

https://github.com/ublue-os/config/commit/bfd1b6836006ef2c83c2dd3949f6e8d04bc0354d

GitHub

fix: Move policy.json back to /usr/etc temporarily while issues are...

…orked out (#311)

RoyalOughtness•8/10/24, 7:14 PM

:thonk:

IvoOP•8/10/24, 7:16 PM

It is also missing a bunch of udev rules. Only one is included.

IvoOP•8/10/24, 7:16 PM

Interesting. The official guide is outdated. The readme of ublue-os:config describes two ways to add the udev files. Both do not build. I am closing my PR.

IvoOP•8/10/24, 7:17 PM

Multiple files from ublue-os:config seem to be missing in the cosmic image.

Robert•8/10/24, 7:44 PM

This is probably due to storing files in /usr/etc in ublue-os/main and using the rechunk action in cosmic

RRobert This is probably due to storing files in /usr/etc in ublue-os/main and using the...

fiftydinar•8/10/24, 7:45 PM

I have only android udev rule (which I add manually)...
So I can confirm this issue

RRobert This is probably due to storing files in /usr/etc in ublue-os/main and using the...

antheas•8/10/24, 7:46 PM

0.8.1 fixed that

fiftydinar•8/10/24, 7:47 PM

My bad, forgot that udev rules are placed in /usr/lib//usr/lib/

IIvo Interesting. The official guide is outdated. The readme of ublue-os:config descr...

fiftydinar•8/10/24, 7:49 PM

they are located in /usr/lib/udev/rules.d//usr/lib/udev/rules.d/

fiftydinar•8/10/24, 7:49 PM

Check if those rules are present there
.

fiftydinar•8/10/24, 7:50 PM

But the original issue is that cosmic images don't have policy.jsonpolicy.json somehow

Ffiftydinar Check if those rules are present there .

IvoOP•8/10/24, 7:51 PM

Can confirm. RUles are present at location.

Robert•8/10/24, 7:54 PM

So it is just files that should end up in /etc that are missing?

antheas•8/10/24, 7:56 PM

Check permissions

antheas•8/10/24, 7:56 PM

Nothing should be missing

IvoOP•8/10/24, 7:58 PM

downstream issue is that at secureblue the comsic image variant does not build anymore because policy.json is missing. We suspected that ublue-os:config is not included. Currently it looks like the cosmic variant does not included this commit https://github.com/ublue-os/config/commit/bfd1b6836006ef2c83c2dd3949f6e8d04bc0354d

GitHub

fix: Move policy.json back to /usr/etc temporarily while issues are...

…orked out (#311)

IvoOP•8/10/24, 8:01 PM

Chasing the issue took us to down the rabbit hole of my PR and one Issue report.

RRoyalOughtness it's missing the policy file in /usr/share/containers/policy.json maybe it just...

Kyle Gospo•8/10/24, 9:25 PM

Prior to this commit config failed to build

Kyle Gospo•8/10/24, 9:26 PM

So everyone should have policy unless config was never included

Kyle Gospo•8/10/24, 9:26 PM

Since the previous successful build matches this

KKyle Gospo So everyone should have policy unless config was never included

RoyalOughtness•8/10/24, 9:41 PM

strange, the secureblue cosmic build wasn't failing a few days ago

RoyalOughtness•8/10/24, 9:41 PM

so something changed

antheas•8/10/24, 9:42 PM

@M2 @Kyle Gospo differences in initramfs

antheas•8/10/24, 9:42 PM

message.txt11.48KB

antheas•8/10/24, 9:42 PM

in two random versions

antheas•8/10/24, 9:42 PM

with the same kernel

antheas•8/10/24, 9:43 PM

lsinitrd --unpack 6.9.4-201.2.initramfs.img lsinitrd --unpack 6.9.4-201.2.initramfs.img to unpack

antheas•8/10/24, 9:43 PM

sudo diff --brief --recursive --no-dereference 1 2sudo diff --brief --recursive --no-dereference 1 2 to compare

M2•8/10/24, 9:59 PM

I think the modules are biting us somehow

M2•8/10/24, 10:01 PM

Looks like packages other than the kernel are updating

antheas•8/10/24, 10:01 PM

if you have fast internet

antheas•8/10/24, 10:01 PM

sudo podman mount $(sudo podman create ghcr.io/ublue-os/bazzite-deck:40-20240616) sudo podman mount $(sudo podman create ghcr.io/ublue-os/bazzite-deck:40-20240616)

antheas•8/10/24, 10:01 PM

you can pull 2 testing builds from the same day

antheas•8/10/24, 10:01 PM

and check if the initramfs is the same

antheas•8/10/24, 10:01 PM

although i think

Greetings, I created a PR for cosmic variant. It should add the ublue-os:config files to the cosmic

Similar Threads