products:
  ALP-Bedrock:
    name: SUSE ALP Bedrock
    description: 'SUSE ALP Bedrock is a flexible, secure, customizable and
      modular Server allowing an enterprise to run a variety of services,
      workloads and application in a compartmentalized form. Based on an
      immutable root filesystem, security has been built into it from the ground.'
  ALP-Micro:
    name: SUSE ALP Micro
    description: 'SUSE ALP Micro is a minimum immutable OS core, focused on
      security to provide the bare minimum to run workloads and services as
      containers or virtual machines.'
  Tumbleweed:
    name: openSUSE Tumbleweed
    description: 'The Tumbleweed distribution is a pure rolling release version
      of openSUSE containing the latest "stable" versions of all software
      instead of relying on rigid periodic release cycles. The project does
      this for users that want the newest stable software.'
  Leap16:
    name: openSUSE Leap 16.0
    archs: x86_64,aarch64
    description: '[Experimental project] openSUSE Leap 16 is built on top of the next generation Adaptable Linux Platform (ALP) from SUSE.'

web:
  ssl: null
  ssl_cert: null
  ssl_key: null

Tumbleweed:
  software:
    installation_repositories:
      - url: https://download.opensuse.org/tumbleweed/repo/oss/
        archs: x86_64
      - url: https://download.opensuse.org/ports/aarch64/tumbleweed/repo/oss/
        archs: aarch64
      - url: https://download.opensuse.org/ports/zsystems/tumbleweed/repo/oss/
        archs: s390
      - url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/oss/
        archs: ppc
      - url: https://download.opensuse.org/tumbleweed/repo/non-oss/
        archs: x86_64
      # aarch64 does not have non-oss ports. Keep eye if it change
      - url: https://download.opensuse.org/ports/zsystems/tumbleweed/repo/non-oss/
        archs: s390
      - url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/non-oss/
        archs: ppc
      - url: https://download.opensuse.org/update/tumbleweed/
        archs: x86_64
      - url: https://download.opensuse.org/ports/aarch64/update/tumbleweed/
        archs: aarch64
      - url: https://download.opensuse.org/ports/zsystems/update/tumbleweed/
        archs: s390
      - url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/oss/
        archs: ppc
    mandatory_patterns:
      - enhanced_base # only pattern that is shared among all roles on TW
    optional_patterns: null # no optional pattern shared
    mandatory_packages:
      - NetworkManager
    optional_packages: null
    base_product: openSUSE

  security:
    lsm: apparmor
    available_lsms:
      apparmor:
        patterns:
          - apparmor
      selinux:
        patterns:
          - selinux
        policy: permissive
      none:
        patterns: null

  storage:
    volumes:
    - mount_point: "/"
      fs_type: btrfs
      desired_size: 10 GiB
      min_size: 5 GiB
      max_size: unlimited
      weight: 30

      # There must always be a root
      proposed_configurable: false

      snapshots: true
      snapshots_percentage: 250
      snapshots_configurable: true
      # Disable snapshots if there is not enough room
      disable_order: 3

      btrfs_default_subvolume: "@"
      subvolumes:
      - path: home
      - path: opt
      - path: root
      - path: srv
      - path: usr/local
      # Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
      - path: var
        copy_on_write: false

      # Architecture specific subvolumes
      - path: boot/grub2/arm64-efi
        archs: aarch64
      - path: boot/grub2/arm-efi
        archs: arm
      - path: boot/grub2/i386-pc
        archs: x86_64
      - path: boot/grub2/powerpc-ieee1275
        archs: ppc,!board_powernv
      - path: boot/grub2/s390x-emu
        archs: s390
      - path: boot/grub2/x86_64-efi
        archs: x86_64
      - path: boot/grub2/riscv64-efi
        archs: riscv64

    - mount_point: "/home"
      fs_type: xfs
      desired_size: 40 GiB
      min_size: 10 GiB
      max_size: unlimited
      weight: 60

      proposed: false
      proposed_configurable: true
      disable_order: 1

    - mount_point: "swap"
      fs_type: swap
      desired_size: 2 GiB
      min_size: 1 GiB
      max_size: 2 GiB
      weight: 10

      adjust_by_ram: false
      adjust_by_ram_configurable: true

      proposed_configurable: true
      disable_order: 2

ALP-Bedrock:
  software:
    installation_repositories:
      - url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Bedrock:/0.1/images/repo/ALP-Bedrock-0.1-x86_64-Media1/
        archs: x86_64
      - url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Bedrock:/0.1/images/repo/ALP-Bedrock-0.1-aarch64-Media1/
        archs: aarch64
      - url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Bedrock:/0.1/images/repo/ALP-Bedrock-0.1-s390x-Media1/
        archs: s390

    mandatory_patterns:
      - alp-bedrock-base
      - alp-bedrock-cockpit
      - alp-bedrock-hardware
      - alp-bedrock-container_runtime
    optional_patterns: null # no optional pattern shared
    mandatory_packages:
      - package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
      - package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily (aarch64, x86_64 specific)
        archs: aarch64, x86_64
      - package: libtss2-tcti-device0 # Same than fde-tools
    optional_packages: null
    base_product: ALP-Bedrock

  security:
    tpm_luks_open: true
    lsm: selinux
    available_lsms:
      # apparmor:
      #   patterns:
      #     - apparmor
      selinux:
        patterns:
          - alp-bedrock-selinux
        policy: enforcing
      none:
        patterns: null

  storage:
    encryption:
      method: luks2
      pbkdf: pbkdf2
    volumes:
      - mount_point: "/"
        fs_type: btrfs
        desired_size: 20 GiB
        min_size: 5 GiB
        fs_types:
          - btrfs
        weight: 20
        snapshots: true
        snapshots_configurable: false
        proposed_configurable: false
        btrfs_default_subvolume: "@"
        btrfs_read_only: true
        subvolumes:
        - path: root
        - path: home
        - path: opt
        - path: srv
        - path: boot/writable
        - path: usr/local
        - path: boot/grub2/arm64-efi
          archs: aarch64
        - path: boot/grub2/i386-pc
          archs: x86_64
        - path: boot/grub2/powerpc-ieee1275
          archs: ppc,!board_powernv
        - path: boot/grub2/s390x-emu
          archs: s390
        - path: boot/grub2/x86_64-efi
          archs: x86_64
        - path: var
          copy_on_write: false

ALP-Micro:
  software:
    installation_repositories:
      - url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Micro:/0.1/images/repo/ALP-Micro-0.1-x86_64-Media1/
        archs: x86_64
      - url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Micro:/0.1/images/repo/ALP-Micro-0.1-aarch64-Media1/
        archs: aarch64
      - url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Micro:/0.1/images/repo/ALP-Micro-0.1-s390x-Media1/
        archs: s390

    mandatory_patterns:
      - alp-micro-base
      - alp-micro-cockpit
      - alp-micro-container_runtime
      - alp-micro-hardware
    optional_patterns: null # no optional pattern shared
    mandatory_packages:
      - package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
      - package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
        archs: aarch64, x86_64
      - package: libtss2-tcti-device0 # Same than fde-tools
    optional_packages: null
    base_product: ALP-Micro

  security:
    tpm_luks_open: true
    lsm: selinux
    available_lsms:
      # apparmor:
      #   patterns:
      #     - apparmor
      selinux:
        patterns:
          - alp-micro-selinux
        policy: enforcing
      none:
        patterns: null

  storage:
    encryption:
      method: luks2
      pbkdf: pbkdf2
    volumes:
      - mount_point: "/"
        fs_type: btrfs
        desired_size: 20 GiB
        min_size: 5 GiB
        fs_types:
          - btrfs
        weight: 20
        snapshots: true
        snapshots_configurable: false
        proposed_configurable: false
        btrfs_default_subvolume: "@"
        btrfs_read_only: true
        subvolumes:
        - path: root
        - path: home
        - path: opt
        - path: srv
        - path: boot/writable
        - path: usr/local
        - path: boot/grub2/arm64-efi
          archs: aarch64
        - path: boot/grub2/i386-pc
          archs: x86_64
        - path: boot/grub2/powerpc-ieee1275
          archs: ppc,!board_powernv
        - path: boot/grub2/s390x-emu
          archs: s390
        - path: boot/grub2/x86_64-efi
          archs: x86_64
        - path: var
          copy_on_write: false

Leap16:
  software:
    installation_repositories:
      - url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-x86_64-Media1/
        archs: x86_64
      - url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-aarch64-Media1/
        archs: aarch64
    mandatory_patterns:
      - alp_base
      - alp_base_zypper
      - alp_cockpit
      - alp-container_runtime
      - alp_defaults
    optional_patterns: null # no optional pattern shared
    mandatory_packages:
      - package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
      - package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
        archs: aarch64, x86_64
      - package: libtss2-tcti-device0 # Same than fde-tools
    optional_packages: null
    base_product: Leap16

  security:
    tpm_luks_open: true
    lsm: selinux
    available_lsms:
      # apparmor:
      #   patterns:
      #     - apparmor
      selinux:
        patterns:
          - alp_selinux
        policy: enforcing
      none:
        patterns: null

  storage:
    encryption:
      method: luks2
      pbkdf: pbkdf2
    volumes:
      - mount_point: "/"
        fs_type: btrfs
        desired_size: 20 GiB
        min_size: 5 GiB
        fs_types:
          - btrfs
        weight: 20
        snapshots: true
        snapshots_configurable: false
        proposed_configurable: false
        btrfs_default_subvolume: "@"
        btrfs_read_only: true
        subvolumes:
        - path: root
        - path: home
        - path: opt
        - path: srv
        - path: boot/writable
        - path: usr/local
        - path: boot/grub2/arm64-efi
          archs: aarch64
        - path: boot/grub2/i386-pc
          archs: x86_64
        - path: boot/grub2/powerpc-ieee1275
          archs: ppc,!board_powernv
        - path: boot/grub2/s390x-emu
          archs: s390
        - path: boot/grub2/x86_64-efi
          archs: x86_64
        - path: var
          copy_on_write: false