products:
  ALP:
    name: SUSE Adaptable Linux Platform Host OS
    description: 'The Adaptable Linux Platform (ALP), the next generation of Linux,
      allow users to focus on their workloads while abstracting from the hardware
      and the application layer.'
  Tumbleweed:
    name: openSUSE Tumbleweed
    description: 'The Tumbleweed distribution is a pure rolling release version
      of openSUSE containing the latest "stable" versions of all software
      instead of relying on rigid periodic release cycles. The project does
      this for users that want the newest stable software.'
  Leap Micro:
    name: openSUSE Leap Micro 5.3
    description: 'Leap Micro is an ultra-reliable, lightweight operating system
      built for containerized and virtualized workloads. This community version
      is based on SUSE Linux Enterprise Micro, which leverages the enterprise
      hardened security and compliance components of SUSE Linux Enterprise.'
  Leap:
    name: openSUSE Leap 15.4
    description: 'Leap uses source from SUSE Linux Enterprise (SLE), which
      gives Leap a level of stability unmatched by other Linux distributions,
      and combines that with community developments to give users, developers
      and sysadmins the best stable Linux experience available.'

web:
  ssl: null
  ssl_cert: null
  ssl_key: null

Tumbleweed:
  software:
    installation_repositories:
      - https://download.opensuse.org/tumbleweed/repo/oss/
      - https://download.opensuse.org/tumbleweed/repo/non-oss/
      - https://download.opensuse.org/update/tumbleweed/
    mandatory_patterns:
      - enhanced_base # only pattern that is shared among all roles on TW
    optional_patterns: null # no optional pattern shared
    mandatory_packages: null
    optional_packages: null
    base_product: openSUSE

  security:
    lsm: apparmor
    available_lsms:
      apparmor:
        patterns:
          - apparmor
      selinux:
        patterns:
          - selinux
        policy: permissive
      none:
        patterns: null

  storage:
    volumes:
    - mount_point: "/"
      fs_type: btrfs
      desired_size: 10 GiB
      min_size: 5 GiB
      max_size: unlimited
      weight: 30

      # There must always be a root
      proposed_configurable: false

      snapshots: true
      snapshots_percentage: 250
      snapshots_configurable: true
      # Disable snapshots if there is not enough room
      disable_order: 3

      btrfs_default_subvolume: "@"
      subvolumes:
      - path: home
      - path: opt
      - path: root
      - path: srv
      - path: usr/local
      # Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
      - path: var
        copy_on_write: false

      # Architecture specific subvolumes
      - path: boot/grub2/arm64-efi
        archs: aarch64
      - path: boot/grub2/arm-efi
        archs: arm
      - path: boot/grub2/i386-pc
        archs: x86_64
      - path: boot/grub2/powerpc-ieee1275
        archs: ppc,!board_powernv
      - path: boot/grub2/s390x-emu
        archs: s390
      - path: boot/grub2/x86_64-efi
        archs: x86_64
      - path: boot/grub2/riscv64-efi
        archs: riscv64

    - mount_point: "/home"
      fs_type: xfs
      desired_size: 40 GiB
      min_size: 10 GiB
      max_size: unlimited
      weight: 60

      proposed: false
      proposed_configurable: true
      disable_order: 1

    - mount_point: "swap"
      fs_type: swap
      desired_size: 2 GiB
      min_size: 1 GiB
      max_size: 2 GiB
      weight: 10

      adjust_by_ram: false
      adjust_by_ram_configurable: true

      proposed_configurable: true
      disable_order: 2

ALP:
  software:
    installation_repositories:
      - https://download.opensuse.org/repositories/SUSE:/ALP/standard/
    mandatory_patterns:
      - alp_base
      - alp_base_zypper
      - alp_cockpit
      - alp-container_runtime
    optional_patterns: null # no optional pattern shared
    mandatory_packages: null
    optional_packages: null
    base_product: ALP

  security:
    lsm: selinux
    available_lsms:
      # apparmor:
      #   patterns:
      #     - apparmor
      selinux:
        patterns:
          - alp_selinux
        policy: permissive
      none:
        patterns: null

  storage:
    volumes:
      - mount_point: "/"
        fs_type: btrfs
        desired_size: 20 GiB
        min_size: 5 GiB
        max_size: 20 GiB
        fs_types:
          - btrfs
        weight: 20
        snapshots: true
        snapshots_configurable: false
        proposed_configurable: false
        btrfs_default_subvolume: "@"
        btrfs_read_only: true
        subvolumes:
        - path: root
        - path: home
        - path: opt
        - path: srv
        - path: boot/writable
        - path: usr/local
        - path: boot/grub2/arm64-efi
          archs: aarch64
        - path: boot/grub2/i386-pc
          archs: x86_64
        - path: boot/grub2/powerpc-ieee1275
          archs: ppc,!board_powernv
        - path: boot/grub2/s390x-emu
          archs: s390
        - path: boot/grub2/x86_64-efi
          archs: x86_64
        - path: var
          copy_on_write: false

Leap:
  software:
    installation_repositories:
      # TODO: support somehow $releasever in URL
      - https://download.opensuse.org/distribution/leap/15.4/repo/oss/
      - https://download.opensuse.org/distribution/leap/15.4/repo/non-oss/
      - https://download.opensuse.org/update/leap/15.4/oss/
      - https://download.opensuse.org/update/leap/15.4/non-oss/
      - https://download.opensuse.org/update/leap/15.4/sle/
      - https://download.opensuse.org/update/leap/15.4/backports/
    mandatory_patterns:
      - enhanced_base # For now lets pick some minimal one
    optional_patterns: null # no optional pattern shared
    mandatory_packages: null
    optional_packages: null
    base_product: Leap

  security:
    # TODO: check if skelcd for Leap 15.4 is correct as code is using lsm in globals, but skelcd contain selinux only
    lsm: apparmor
    available_lsms:
      apparmor:
        patterns:
          - apparmor
      selinux:
        patterns:
          - selinux
        policy: disabled
      none:
        patterns: null

  storage:
    volumes:
    - mount_point: "/"
      fs_type: btrfs
      desired_size: 10 GiB
      min_size: 5 GiB
      max_size: unlimited
      weight: 30

      # There must always be a root
      proposed_configurable: false

      snapshots: true
      snapshots_percentage: 250
      snapshots_configurable: true
      # Disable snapshots if there is not enough room
      disable_order: 3

      btrfs_default_subvolume: "@"
      subvolumes:
      - path: home
      - path: opt
      - path: root
      - path: srv
      - path: usr/local
      # Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
      - path: var
        copy_on_write: false

      # Architecture specific subvolumes
      - path: boot/grub2/arm64-efi
        archs: aarch64
      - path: boot/grub2/i386-pc
        archs: x86_64
      - path: boot/grub2/powerpc-ieee1275
        archs: ppc,!board_powernv
      - path: boot/grub2/s390x-emu
        archs: s390
      - path: boot/grub2/x86_64-efi
        archs: x86_64

    - mount_point: "/home"
      fs_type: xfs
      desired_size: 40 GiB
      min_size: 10 GiB
      max_size: unlimited
      weight: 60

      proposed: false
      proposed_configurable: true
      disable_order: 1

    - mount_point: "swap"
      fs_type: swap
      desired_size: 2 GiB
      min_size: 1 GiB
      max_size: 2 GiB
      weight: 10

      adjust_by_ram: false
      adjust_by_ram_configurable: true

      proposed_configurable: true
      disable_order: 2


Leap Micro:
  software:
    installation_repositories:
      - https://download.opensuse.org/distribution/leap-micro/5.3/product/repo/Leap-Micro-5.3-x86_64-Media/
    mandatory_patterns:
      - microos-base
      - microos-hardware
      - microos-bootloader
      - microos-defaults
      - microos-basesystem
    optional_patterns: null # no optional pattern shared
    mandatory_packages: null
    optional_packages: null
    base_product: Leap-Micro

  security:
    lsm: selinux
    available_lsms:
      selinux:
        patterns:
          - microos-selinux
        policy: enforcing
      none:
        patterns: null

  storage:
    volumes:
      - mount_point: "/"
        fs_type: btrfs
        desired_size: 20 GiB
        min_size: 5 GiB
        max_size: 20 GiB
        fs_types:
          - btrfs
        weight: 20
        snapshots: true
        snapshots_configurable: false
        proposed_configurable: false
        btrfs_default_subvolume: "@"
        btrfs_read_only: true
        subvolumes:
        - path: root
        - path: home
        - path: opt
        - path: srv
        - path: root
        - path: boot/writable
        - path: usr/local
        - path: boot/grub2/arm64-efi
          archs: aarch64
        - path: boot/grub2/i386-pc
          archs: x86_64
        - path: boot/grub2/powerpc-ieee1275
          archs: ppc,!board_powernv
        - path: boot/grub2/s390x-emu
          archs: s390
        - path: boot/grub2/x86_64-efi
          archs: x86_64
      - mount_point: "/var"
        fs_type: btrfs
        fs_types:
          - btrfs
        desired_size: 19 GiB
        min_size: 5 GiB
        max_size: unlimited
        weight: 40
        snapshots: false
        snapshots_configurable: false
        disable_order: 1
        fallback_for_desired_size: "/"
        fallback_for_max_size: "/"
        fallback_for_weight: "/"