366 lines
11 KiB
YAML
366 lines
11 KiB
YAML
products:
|
|
ALP-Bedrock:
|
|
name: SUSE ALP Bedrock
|
|
description: 'SUSE ALP Bedrock is a flexible, secure, customizable and
|
|
modular Server allowing an enterprise to run a variety of services,
|
|
workloads and application in a compartmentalized form. Based on an
|
|
immutable root filesystem, security has been built into it from the ground.'
|
|
ALP-Micro:
|
|
name: SUSE ALP Micro
|
|
description: 'SUSE ALP Micro is a minimum immutable OS core, focused on
|
|
security to provide the bare minimum to run workloads and services as
|
|
containers or virtual machines.'
|
|
Tumbleweed:
|
|
name: openSUSE Tumbleweed
|
|
description: 'The Tumbleweed distribution is a pure rolling release version
|
|
of openSUSE containing the latest "stable" versions of all software
|
|
instead of relying on rigid periodic release cycles. The project does
|
|
this for users that want the newest stable software.'
|
|
Leap16:
|
|
name: openSUSE Leap 16.0
|
|
archs: x86_64,aarch64
|
|
description: '[Experimental project] openSUSE Leap 16 is built on top of the next generation Adaptable Linux Platform (ALP) from SUSE.'
|
|
|
|
web:
|
|
ssl: null
|
|
ssl_cert: null
|
|
ssl_key: null
|
|
|
|
Tumbleweed:
|
|
software:
|
|
installation_repositories:
|
|
- url: https://download.opensuse.org/tumbleweed/repo/oss/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/ports/aarch64/tumbleweed/repo/oss/
|
|
archs: aarch64
|
|
- url: https://download.opensuse.org/ports/zsystems/tumbleweed/repo/oss/
|
|
archs: s390
|
|
- url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/oss/
|
|
archs: ppc
|
|
- url: https://download.opensuse.org/tumbleweed/repo/non-oss/
|
|
archs: x86_64
|
|
# aarch64 does not have non-oss ports. Keep eye if it change
|
|
- url: https://download.opensuse.org/ports/zsystems/tumbleweed/repo/non-oss/
|
|
archs: s390
|
|
- url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/non-oss/
|
|
archs: ppc
|
|
- url: https://download.opensuse.org/update/tumbleweed/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/ports/aarch64/update/tumbleweed/
|
|
archs: aarch64
|
|
- url: https://download.opensuse.org/ports/zsystems/update/tumbleweed/
|
|
archs: s390
|
|
- url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/oss/
|
|
archs: ppc
|
|
mandatory_patterns:
|
|
- enhanced_base # only pattern that is shared among all roles on TW
|
|
optional_patterns: null # no optional pattern shared
|
|
mandatory_packages:
|
|
- NetworkManager
|
|
optional_packages: null
|
|
base_product: openSUSE
|
|
|
|
security:
|
|
lsm: apparmor
|
|
available_lsms:
|
|
apparmor:
|
|
patterns:
|
|
- apparmor
|
|
selinux:
|
|
patterns:
|
|
- selinux
|
|
policy: permissive
|
|
none:
|
|
patterns: null
|
|
|
|
storage:
|
|
volumes:
|
|
- mount_point: "/"
|
|
fs_type: btrfs
|
|
desired_size: 10 GiB
|
|
min_size: 5 GiB
|
|
max_size: unlimited
|
|
weight: 30
|
|
|
|
# There must always be a root
|
|
proposed_configurable: false
|
|
|
|
snapshots: true
|
|
snapshots_percentage: 250
|
|
snapshots_configurable: true
|
|
# Disable snapshots if there is not enough room
|
|
disable_order: 3
|
|
|
|
btrfs_default_subvolume: "@"
|
|
subvolumes:
|
|
- path: home
|
|
- path: opt
|
|
- path: root
|
|
- path: srv
|
|
- path: usr/local
|
|
# Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
|
|
- path: var
|
|
copy_on_write: false
|
|
|
|
# Architecture specific subvolumes
|
|
- path: boot/grub2/arm64-efi
|
|
archs: aarch64
|
|
- path: boot/grub2/arm-efi
|
|
archs: arm
|
|
- path: boot/grub2/i386-pc
|
|
archs: x86_64
|
|
- path: boot/grub2/powerpc-ieee1275
|
|
archs: ppc,!board_powernv
|
|
- path: boot/grub2/s390x-emu
|
|
archs: s390
|
|
- path: boot/grub2/x86_64-efi
|
|
archs: x86_64
|
|
- path: boot/grub2/riscv64-efi
|
|
archs: riscv64
|
|
|
|
- mount_point: "/home"
|
|
fs_type: xfs
|
|
desired_size: 40 GiB
|
|
min_size: 10 GiB
|
|
max_size: unlimited
|
|
weight: 60
|
|
|
|
proposed: false
|
|
proposed_configurable: true
|
|
disable_order: 1
|
|
|
|
- mount_point: "swap"
|
|
fs_type: swap
|
|
desired_size: 2 GiB
|
|
min_size: 1 GiB
|
|
max_size: 2 GiB
|
|
weight: 10
|
|
|
|
adjust_by_ram: false
|
|
adjust_by_ram_configurable: true
|
|
|
|
proposed_configurable: true
|
|
disable_order: 2
|
|
|
|
ALP-Bedrock:
|
|
software:
|
|
installation_repositories:
|
|
- url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Bedrock:/0.1/images/repo/ALP-Bedrock-0.1-x86_64-Media1/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Bedrock:/0.1/images/repo/ALP-Bedrock-0.1-aarch64-Media1/
|
|
archs: aarch64
|
|
- url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Bedrock:/0.1/images/repo/ALP-Bedrock-0.1-s390x-Media1/
|
|
archs: s390
|
|
|
|
mandatory_patterns:
|
|
- alp-bedrock-base
|
|
- alp-bedrock-cockpit
|
|
- alp-bedrock-hardware
|
|
- alp-bedrock-container_runtime
|
|
optional_patterns: null # no optional pattern shared
|
|
mandatory_packages:
|
|
- package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
|
|
- package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily (aarch64, x86_64 specific)
|
|
archs: aarch64, x86_64
|
|
- package: libtss2-tcti-device0 # Same than fde-tools
|
|
optional_packages: null
|
|
base_product: ALP-Bedrock
|
|
|
|
security:
|
|
tpm_luks_open: true
|
|
lsm: selinux
|
|
available_lsms:
|
|
# apparmor:
|
|
# patterns:
|
|
# - apparmor
|
|
selinux:
|
|
patterns:
|
|
- alp-bedrock-selinux
|
|
policy: enforcing
|
|
none:
|
|
patterns: null
|
|
|
|
storage:
|
|
encryption:
|
|
method: luks2
|
|
pbkdf: pbkdf2
|
|
volumes:
|
|
- mount_point: "/"
|
|
fs_type: btrfs
|
|
desired_size: 20 GiB
|
|
min_size: 5 GiB
|
|
fs_types:
|
|
- btrfs
|
|
weight: 20
|
|
snapshots: true
|
|
snapshots_configurable: false
|
|
proposed_configurable: false
|
|
btrfs_default_subvolume: "@"
|
|
btrfs_read_only: true
|
|
subvolumes:
|
|
- path: root
|
|
- path: home
|
|
- path: opt
|
|
- path: srv
|
|
- path: boot/writable
|
|
- path: usr/local
|
|
- path: boot/grub2/arm64-efi
|
|
archs: aarch64
|
|
- path: boot/grub2/i386-pc
|
|
archs: x86_64
|
|
- path: boot/grub2/powerpc-ieee1275
|
|
archs: ppc,!board_powernv
|
|
- path: boot/grub2/s390x-emu
|
|
archs: s390
|
|
- path: boot/grub2/x86_64-efi
|
|
archs: x86_64
|
|
- path: var
|
|
copy_on_write: false
|
|
|
|
ALP-Micro:
|
|
software:
|
|
installation_repositories:
|
|
- url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Micro:/0.1/images/repo/ALP-Micro-0.1-x86_64-Media1/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Micro:/0.1/images/repo/ALP-Micro-0.1-aarch64-Media1/
|
|
archs: aarch64
|
|
- url: https://download.opensuse.org/repositories/SUSE:/ALP:/Products:/Micro:/0.1/images/repo/ALP-Micro-0.1-s390x-Media1/
|
|
archs: s390
|
|
|
|
mandatory_patterns:
|
|
- alp-micro-base
|
|
- alp-micro-cockpit
|
|
- alp-micro-container_runtime
|
|
- alp-micro-hardware
|
|
optional_patterns: null # no optional pattern shared
|
|
mandatory_packages:
|
|
- package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
|
|
- package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
|
|
archs: aarch64, x86_64
|
|
- package: libtss2-tcti-device0 # Same than fde-tools
|
|
optional_packages: null
|
|
base_product: ALP-Micro
|
|
|
|
security:
|
|
tpm_luks_open: true
|
|
lsm: selinux
|
|
available_lsms:
|
|
# apparmor:
|
|
# patterns:
|
|
# - apparmor
|
|
selinux:
|
|
patterns:
|
|
- alp-micro-selinux
|
|
policy: enforcing
|
|
none:
|
|
patterns: null
|
|
|
|
storage:
|
|
encryption:
|
|
method: luks2
|
|
pbkdf: pbkdf2
|
|
volumes:
|
|
- mount_point: "/"
|
|
fs_type: btrfs
|
|
desired_size: 20 GiB
|
|
min_size: 5 GiB
|
|
fs_types:
|
|
- btrfs
|
|
weight: 20
|
|
snapshots: true
|
|
snapshots_configurable: false
|
|
proposed_configurable: false
|
|
btrfs_default_subvolume: "@"
|
|
btrfs_read_only: true
|
|
subvolumes:
|
|
- path: root
|
|
- path: home
|
|
- path: opt
|
|
- path: srv
|
|
- path: boot/writable
|
|
- path: usr/local
|
|
- path: boot/grub2/arm64-efi
|
|
archs: aarch64
|
|
- path: boot/grub2/i386-pc
|
|
archs: x86_64
|
|
- path: boot/grub2/powerpc-ieee1275
|
|
archs: ppc,!board_powernv
|
|
- path: boot/grub2/s390x-emu
|
|
archs: s390
|
|
- path: boot/grub2/x86_64-efi
|
|
archs: x86_64
|
|
- path: var
|
|
copy_on_write: false
|
|
|
|
Leap16:
|
|
software:
|
|
installation_repositories:
|
|
- url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-x86_64-Media1/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-aarch64-Media1/
|
|
archs: aarch64
|
|
mandatory_patterns:
|
|
- alp_base
|
|
- alp_base_zypper
|
|
- alp_cockpit
|
|
- alp-container_runtime
|
|
- alp_defaults
|
|
optional_patterns: null # no optional pattern shared
|
|
mandatory_packages:
|
|
- package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
|
|
- package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
|
|
archs: aarch64, x86_64
|
|
- package: libtss2-tcti-device0 # Same than fde-tools
|
|
optional_packages: null
|
|
base_product: Leap16
|
|
|
|
security:
|
|
tpm_luks_open: true
|
|
lsm: selinux
|
|
available_lsms:
|
|
# apparmor:
|
|
# patterns:
|
|
# - apparmor
|
|
selinux:
|
|
patterns:
|
|
- alp_selinux
|
|
policy: enforcing
|
|
none:
|
|
patterns: null
|
|
|
|
storage:
|
|
encryption:
|
|
method: luks2
|
|
pbkdf: pbkdf2
|
|
volumes:
|
|
- mount_point: "/"
|
|
fs_type: btrfs
|
|
desired_size: 20 GiB
|
|
min_size: 5 GiB
|
|
fs_types:
|
|
- btrfs
|
|
weight: 20
|
|
snapshots: true
|
|
snapshots_configurable: false
|
|
proposed_configurable: false
|
|
btrfs_default_subvolume: "@"
|
|
btrfs_read_only: true
|
|
subvolumes:
|
|
- path: root
|
|
- path: home
|
|
- path: opt
|
|
- path: srv
|
|
- path: boot/writable
|
|
- path: usr/local
|
|
- path: boot/grub2/arm64-efi
|
|
archs: aarch64
|
|
- path: boot/grub2/i386-pc
|
|
archs: x86_64
|
|
- path: boot/grub2/powerpc-ieee1275
|
|
archs: ppc,!board_powernv
|
|
- path: boot/grub2/s390x-emu
|
|
archs: s390
|
|
- path: boot/grub2/x86_64-efi
|
|
archs: x86_64
|
|
- path: var
|
|
copy_on_write: false
|