Add renovate.json

Containerfile

@@ -1,17 +1,14 @@
 FROM quay.io/fedora/fedora-bootc:44
 
 # Install ZFS
-# we want to keep ALL dnf downloaded packages in dnf cache,
-# this is not the default, hackily add it to the config,
-# assume there is not much in it. should be improved
-RUN echo 'keepcache=True' >> /etc/dnf/dnf.conf
+RUN dnf install -y kernel-devel-$(uname -r | awk -F'-' '{print $1}')
+RUN dnf install -y https://zfsonlinux.org/fedora/zfs-release-3-1$(rpm --eval "%{dist}").noarch.rpm
+RUN dnf install -y zfs
 
-# deps
-RUN --mount=type=cache,target=/var/cache/libdnf5 <<EOF
-# dnf install -y kernel-devel-$(uname -r | awk -F'-' '{print $1}')
-dnf install -y https://zfsonlinux.org/fedora/zfs-release-3-1$(rpm --eval "%{dist}").noarch.rpm
-dnf install -y zfs btop borgbackup
-dnf clean all && rm -rf /run/dnf && rm -rf /tmp/*
-EOF
+RUN useradd -m -d /var/home/backup backup
+RUN mkdir /backups && chown backup:backup /backups
+
+COPY --chown=root:root --chmod=600 id_ed25519.pub /root/.ssh/authorized_keys
+COPY --chown=backup:backup --chmod=600 id_ed25519.pub /var/home/backup/.ssh/authorized_keys
 
 RUN bootc container lint

commands.sh

@@ -3,28 +3,23 @@ TAG="latest"
 
 build() {
     # ABSOLUTELY DO NOT USE --squash, as ostree NEEDS the layers
-    sudo buildah build \
+    buildah build \
         -t ${REPO}:${TAG} \
         --pull \
         --layers \
         --format oci \
-        --network=host \
         .
 
     if [ $? -eq 0 ]; then
-        sudo buildah login gitea.wefers.page -u julian -p 278b81490079574229dce45b66b726d2ae7e83c0
-        sudo buildah push \
-            --compression-format zstd:chunked \
+        buildah login gitea.wefers.page -u julian -p 278b81490079574229dce45b66b726d2ae7e83c0
+        buildah push \
+            --compression-format zstd \
             "${REPO}:${TAG}"
     fi
 
 }
 
 mkImage() {
-    # set -euo
-    # echo "current partitions:"
-    # lsblk
-    # read -p "target USB stick device to write image to: /dev/" dev
     sudo podman run \
         --rm \
         -it \
@@ -38,12 +33,8 @@ mkImage() {
         -v /var/lib/containers/storage:/var/lib/containers/storage \
         quay.io/centos-bootc/bootc-image-builder:latest \
         --type anaconda-iso \
-        --use-librepo=true \
-        --rootfs ext4 \
+        --use-librepo=True \
         ${REPO}:${TAG}
-
-        # --in-vm \
-    # sudo dd if=output/bootiso/install.iso of=/dev/${dev} bs=4M
 }
 
 $1

config.toml

@@ -1,18 +1,3 @@
-[customizations]
-hostname = "backupserver"
-
-[[customizations.user]]
-name = "backup"
-description = "Default user account"
-password = "$6$CHO2$3rN8eviE2t50lmVyBYihTgVRHcaecmeCk31L..."
-key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGPAWtzq2/cuv+zPzdDSCe/5pc0HRCxmwFiI5Fu3sEok julian@local"
-home = "/srv/widget/"
-shell = "/usr/bin/bash"
-groups = ["widget", "users", "wheel"]
-uid = 1200
-gid = 1200
-expiredate = 12345
-
 [customizations.iso]
 volume_id = "JuliansBackupServer"
 application_id = "JuliansBackupServer"
@@ -25,20 +10,3 @@ publisher = "Julian"
 #     org.fedoraproject.Anaconda.Modules.Security
 # ]
 # disable = ["org.fedoraproject.Anaconda.Modules.Users"]
-
-[customizations.installer.kickstart]
-contents = """
-# Basic setup
-text
-lang en_US
-keyboard de
-timezone Europe/Berlin
-network --device=enp1s0 --bootproto=static --ip=192.168.178.3 --netmask=255.255.255.0 --gateway=192.168.178.1 --nameserver=1192.168.178.8
-
-# Here's where we reference the container image to install - notice the kickstart
-# has no `%packages` section!  What's being installed here is a container image.
-# ostreecontainer --url gitea.wefers.page/julian/backup-server:latest
-
-firewall --disabled
-services --enabled=sshd
-"""

renovate.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>julian/renovate-config"
+  ]
+}