329 lines
9.3 KiB
YAML
329 lines
9.3 KiB
YAML
products:
|
|
ALP-Dolomite:
|
|
name: SUSE ALP Dolomite
|
|
description: 'SUSE ALP Dolomite is a minimum immutable OS core, focused on
|
|
security to provide the bare minimum to run workloads and services as
|
|
containers or virtual machines.'
|
|
Tumbleweed:
|
|
name: openSUSE Tumbleweed
|
|
description: 'The Tumbleweed distribution is a pure rolling release version
|
|
of openSUSE containing the latest "stable" versions of all software
|
|
instead of relying on rigid periodic release cycles. The project does
|
|
this for users that want the newest stable software.'
|
|
Leap16:
|
|
name: openSUSE Leap 16.0
|
|
archs: x86_64,aarch64
|
|
description: '[Experimental project] openSUSE Leap 16 is built on top of the next generation Adaptable Linux Platform (ALP) from SUSE.'
|
|
|
|
web:
|
|
ssl: null
|
|
ssl_cert: null
|
|
ssl_key: null
|
|
|
|
ALP-Dolomite:
|
|
software:
|
|
installation_repositories:
|
|
- url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/x86_64/product/
|
|
archs: x86_64
|
|
- url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/aarch64/product/
|
|
archs: aarch64
|
|
- url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/s390x/product/
|
|
archs: s390
|
|
- url: https://updates.suse.com/SUSE/Products/ALP-Dolomite/1.0/ppc64le/product/
|
|
archs: ppc
|
|
|
|
mandatory_patterns:
|
|
- alp_base_zypper
|
|
- alp_cockpit
|
|
- alp_hardware
|
|
optional_patterns: null # no optional pattern shared
|
|
mandatory_packages:
|
|
- package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
|
|
- package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
|
|
archs: aarch64, x86_64
|
|
- package: libtss2-tcti-device0
|
|
- package: ppc64-diag # Needed for hardware-based installations
|
|
archs: ppc64
|
|
optional_packages: null
|
|
base_product: ALP-Dolomite
|
|
|
|
security:
|
|
tpm_luks_open: true
|
|
lsm: selinux
|
|
available_lsms:
|
|
# apparmor:
|
|
# patterns:
|
|
# - apparmor
|
|
selinux:
|
|
patterns:
|
|
- alp_selinux
|
|
policy: enforcing
|
|
none:
|
|
patterns: null
|
|
|
|
storage:
|
|
space_policy: delete
|
|
encryption:
|
|
method: luks2
|
|
pbkd_function: pbkdf2
|
|
volumes:
|
|
- "/"
|
|
volume_templates:
|
|
- mount_path: "/"
|
|
filesystem: btrfs
|
|
btrfs:
|
|
snapshots: true
|
|
read_only: true
|
|
default_subvolume: "@"
|
|
subvolumes:
|
|
- path: root
|
|
- path: home
|
|
- path: opt
|
|
- path: srv
|
|
- path: boot/writable
|
|
- path: usr/local
|
|
- path: boot/grub2/arm64-efi
|
|
archs: aarch64
|
|
- path: boot/grub2/i386-pc
|
|
archs: x86_64
|
|
- path: boot/grub2/powerpc-ieee1275
|
|
archs: ppc,!board_powernv
|
|
- path: boot/grub2/s390x-emu
|
|
archs: s390
|
|
- path: boot/grub2/x86_64-efi
|
|
archs: x86_64
|
|
- path: var
|
|
copy_on_write: false
|
|
size:
|
|
auto: false
|
|
min: 5 GiB
|
|
outline:
|
|
required: true
|
|
filesystems:
|
|
- btrfs
|
|
snapshots_configurable: false
|
|
|
|
Tumbleweed:
|
|
software:
|
|
installation_repositories:
|
|
- url: https://download.opensuse.org/tumbleweed/repo/oss/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/ports/aarch64/tumbleweed/repo/oss/
|
|
archs: aarch64
|
|
- url: https://download.opensuse.org/ports/zsystems/tumbleweed/repo/oss/
|
|
archs: s390
|
|
- url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/oss/
|
|
archs: ppc
|
|
- url: https://download.opensuse.org/tumbleweed/repo/non-oss/
|
|
archs: x86_64
|
|
# aarch64 does not have non-oss ports. Keep eye if it change
|
|
- url: https://download.opensuse.org/ports/zsystems/tumbleweed/repo/non-oss/
|
|
archs: s390
|
|
- url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/non-oss/
|
|
archs: ppc
|
|
- url: https://download.opensuse.org/update/tumbleweed/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/ports/aarch64/update/tumbleweed/
|
|
archs: aarch64
|
|
- url: https://download.opensuse.org/ports/zsystems/update/tumbleweed/
|
|
archs: s390
|
|
- url: https://download.opensuse.org/ports/ppc/tumbleweed/repo/oss/
|
|
archs: ppc
|
|
mandatory_patterns:
|
|
- enhanced_base # only pattern that is shared among all roles on TW
|
|
optional_patterns: null # no optional pattern shared
|
|
mandatory_packages:
|
|
- NetworkManager
|
|
optional_packages: null
|
|
base_product: openSUSE
|
|
|
|
security:
|
|
lsm: apparmor
|
|
available_lsms:
|
|
apparmor:
|
|
patterns:
|
|
- apparmor
|
|
selinux:
|
|
patterns:
|
|
- selinux
|
|
policy: permissive
|
|
none:
|
|
patterns: null
|
|
|
|
storage:
|
|
space_policy: delete
|
|
volumes:
|
|
- "/"
|
|
- "swap"
|
|
volume_templates:
|
|
- mount_path: "/"
|
|
filesystem: btrfs
|
|
btrfs:
|
|
snapshots: true
|
|
read_only: false
|
|
default_subvolume: "@"
|
|
subvolumes:
|
|
- path: home
|
|
- path: opt
|
|
- path: root
|
|
- path: srv
|
|
- path: usr/local
|
|
# Unified var subvolume - https://lists.opensuse.org/opensuse-packaging/2017-11/msg00017.html
|
|
- path: var
|
|
copy_on_write: false
|
|
# Architecture specific subvolumes
|
|
- path: boot/grub2/arm64-efi
|
|
archs: aarch64
|
|
- path: boot/grub2/arm-efi
|
|
archs: arm
|
|
- path: boot/grub2/i386-pc
|
|
archs: x86_64
|
|
- path: boot/grub2/powerpc-ieee1275
|
|
archs: ppc,!board_powernv
|
|
- path: boot/grub2/s390x-emu
|
|
archs: s390
|
|
- path: boot/grub2/x86_64-efi
|
|
archs: x86_64
|
|
- path: boot/grub2/riscv64-efi
|
|
archs: riscv64
|
|
size:
|
|
auto: true
|
|
outline:
|
|
required: true
|
|
filesystems:
|
|
- btrfs
|
|
- ext2
|
|
- ext3
|
|
- ext4
|
|
- xfs
|
|
auto_size:
|
|
base_min: 5 GiB
|
|
base_max: 15 GiB
|
|
snapshots_increment: 250%
|
|
max_fallback_for:
|
|
- "/home"
|
|
snapshots_configurable: true
|
|
- mount_path: "swap"
|
|
filesystem: swap
|
|
size:
|
|
auto: false
|
|
min: 1 GiB
|
|
max: 2 GiB
|
|
outline:
|
|
required: false
|
|
filesystems:
|
|
- swap
|
|
- mount_path: "/home"
|
|
filesystem: xfs
|
|
size:
|
|
auto: false
|
|
min: 10 GiB
|
|
max: unlimited
|
|
outline:
|
|
required: false
|
|
filesystems:
|
|
- btrfs
|
|
- ext2
|
|
- ext3
|
|
- ext4
|
|
- xfs
|
|
- filesystem: xfs
|
|
size:
|
|
auto: false
|
|
outline:
|
|
required: false
|
|
filesystems:
|
|
- btrfs
|
|
- ext2
|
|
- ext3
|
|
- ext4
|
|
- xfs
|
|
|
|
Leap16:
|
|
software:
|
|
installation_repositories:
|
|
- url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-x86_64-Media1/
|
|
archs: x86_64
|
|
- url: https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0/images/repo/Leap-16.0-aarch64-Media1/
|
|
archs: aarch64
|
|
mandatory_patterns:
|
|
- alp_base
|
|
- alp_base_zypper
|
|
- alp_cockpit
|
|
- alp-container_runtime
|
|
- alp_defaults
|
|
optional_patterns: null # no optional pattern shared
|
|
mandatory_packages:
|
|
- package: device-mapper # Apparently needed if devices at /dev/mapper are used at boot (eg. FDE)
|
|
- package: fde-tools # Needed for FDE with TPM, hardcoded here temporarily
|
|
archs: aarch64, x86_64
|
|
- package: libtss2-tcti-device0
|
|
optional_packages: null
|
|
base_product: Leap16
|
|
|
|
security:
|
|
tpm_luks_open: true
|
|
lsm: selinux
|
|
available_lsms:
|
|
# apparmor:
|
|
# patterns:
|
|
# - apparmor
|
|
selinux:
|
|
patterns:
|
|
- alp_selinux
|
|
policy: enforcing
|
|
none:
|
|
patterns: null
|
|
|
|
storage:
|
|
space_policy: delete
|
|
encryption:
|
|
method: luks2
|
|
pbkd_function: pbkdf2
|
|
volumes:
|
|
- "/"
|
|
volume_templates:
|
|
- mount_path: "/"
|
|
filesystem: btrfs
|
|
btrfs:
|
|
snapshots: true
|
|
read_only: true
|
|
default_subvolume: "@"
|
|
subvolumes:
|
|
- path: root
|
|
- path: home
|
|
- path: opt
|
|
- path: srv
|
|
- path: boot/writable
|
|
- path: usr/local
|
|
- path: boot/grub2/arm64-efi
|
|
archs: aarch64
|
|
- path: boot/grub2/i386-pc
|
|
archs: x86_64
|
|
- path: boot/grub2/powerpc-ieee1275
|
|
archs: ppc,!board_powernv
|
|
- path: boot/grub2/s390x-emu
|
|
archs: s390
|
|
- path: boot/grub2/x86_64-efi
|
|
archs: x86_64
|
|
- path: var
|
|
copy_on_write: false
|
|
size:
|
|
auto: false
|
|
min: 5 GiB
|
|
outline:
|
|
required: true
|
|
filesystems:
|
|
- btrfs
|
|
snapshots_configurable: false
|
|
- filesystem: xfs
|
|
size:
|
|
auto: false
|
|
outline:
|
|
required: false
|
|
filesystems:
|
|
- btrfs
|
|
- ext2
|
|
- ext3
|
|
- ext4
|
|
- xfs
|