Initial commit

config.ini

@@ -0,0 +1,20 @@
+[DEFAULT]
+
+outputdir   = /home/david/checkout/atomic-workstation
+# workdir     = os.getcwd()
+# srcdir      = os.path.join(os.path.dirname(sys.argv[0], '..')
+# rpmostree_cache_dir = %(workdir)s/%(release)s/cache
+ostree_repo = %(outputdir)s/repo
+os_name     = fedora-atomic-workstation
+os_pretty_name = Fedora Atomic Workstation
+tree_name   = foo-host
+tree_file   = %(os_name)s-%(tree_name)s.json
+arch        = x86_64
+release     = rawhide
+ref         = %(os_name)s/%(release)s/%(arch)s/%(tree_name)s
+# Force use of a closeish and fastish HTTP mirror, so that the HTTP proxy works
+yum_baseurl = http://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/fedora/linux/development/rawhide/%(arch)s/os/
+yum_baseurl = http://dl.fedoraproject.org/pub/fedora/linux//development/rawhide/%(arch)s/os/
+# lorax_additional_repos = http://127.0.0.1/fedora-atomic/local-overrides
+lorax_include_packages = fedora-productimg-atomic
+docker_os_name = fedora

fedora-atomic-workstation-foo-host.json

@@ -0,0 +1,166 @@
+{
+    "ref": "fedora-atomic-workstation/rawhide/x86_64/foo-host",
+
+    "repos": ["fedora-rawhide"],
+
+    "selinux": true,
+
+    "documentation": true,
+
+    "automatic_version_prefix": "23",
+
+    "initramfs-args": ["--no-hostonly", "--add", "iscsi"],
+
+    "install-langs": ["en_US"],
+
+    "postprocess-script": "treecompose-post.sh",
+
+    "etc-group-members": ["wheel"],
+
+    "ignore-removed-users": ["root"],
+    "ignore-removed-groups": ["root"],
+    "check-passwd": { "type": "file", "filename": "passwd" },
+    "check-groups": { "type": "file", "filename": "group" },
+
+    "packages": ["control-center",
+		 "dconf",
+		 "mesa-dri-drivers",
+		 "xorg-x11-drv-ati",
+		 "xorg-x11-drv-evdev",
+		 "xorg-x11-drv-fbdev",
+		 "xorg-x11-drv-intel",
+		 "xorg-x11-drv-nouveau",
+		 "xorg-x11-drv-qxl",
+		 "xorg-x11-drv-synaptics",
+		 "xorg-x11-drv-vesa",
+		 "xorg-x11-server-Xorg",
+		 "xorg-x11-xauth",
+		 "xorg-x11-xinit",
+		 "pulseaudio-module-x11",
+		 "at-spi2-atk",
+		 "at-spi2-core",
+		 "avahi",
+		 "baobab",
+		 "caribou",
+		 "caribou-gtk2-module",
+		 "caribou-gtk3-module",
+		 "cheese",
+		 "control-center",
+		 "dconf",
+		 "evince",
+		 "evince-djvu",
+		 "evince-nautilus",
+		 "file-roller",
+		 "file-roller-nautilus",
+		 "fprintd-pam",
+		 "gdm",
+		 "gedit",
+		 "glib-networking",
+		 "gnome-backgrounds",
+		 "gnome-bluetooth",
+		 "gnome-calculator",
+		 "gnome-characters",
+		 "gnome-classic-session",
+		 "gnome-clocks",
+		 "gnome-color-manager",
+		 "gnome-contacts",
+		 "gnome-disk-utility",
+		 "gnome-documents",
+		 "gnome-font-viewer",
+		 "gnome-getting-started-docs",
+		 "gnome-initial-setup",
+		 "gnome-logs",
+		 "gnome-maps",
+		 "gnome-screenshot",
+		 "gnome-session-wayland-session",
+		 "gnome-session-xsession",
+		 "gnome-settings-daemon",
+		 "gnome-shell",
+		 "gnome-software",
+		 "gnome-system-monitor",
+		 "gnome-terminal",
+		 "gnome-themes-standard",
+		 "gnome-user-docs",
+		 "gnome-user-share",
+		 "gnome-weather",
+		 "gvfs-afc",
+		 "gvfs-afp",
+		 "gvfs-archive",
+		 "gvfs-fuse",
+		 "gvfs-goa",
+		 "gvfs-gphoto2",
+		 "gvfs-mtp",
+		 "gvfs-smb",
+		 "libcanberra-gtk2",
+		 "libcanberra-gtk3",
+		 "libproxy-mozjs",
+		 "librsvg2",
+		 "libsane-hpaio",
+		 "ModemManager",
+		 "mousetweaks",
+		 "nautilus",
+		 "nautilus-sendto",
+		 "NetworkManager-adsl",
+		 "NetworkManager-openconnect",
+		 "NetworkManager-openvpn-gnome",
+		 "NetworkManager-pptp-gnome",
+		 "NetworkManager-vpnc-gnome",
+		 "orca",
+		 "PackageKit-command-not-found",
+		 "PackageKit-gtk3-module",
+		 "polkit",
+		 "rygel",
+		 "sane-backends-drivers-scanners",
+		 "seahorse",
+		 "sushi",
+		 "totem",
+		 "totem-nautilus",
+		 "vinagre",
+		 "xdg-user-dirs-gtk",
+		 "yelp",
+		 "xdg-app",
+		 "glibc", "nss-altfiles", "shadow-utils",
+		 "fedora-release",
+		 "dracut-config-generic", "kernel",
+		 "dracut-network",
+		 "dracut-live",
+		 "rpm-ostree", "lvm2",
+		 "cryptsetup",
+		 "authconfig",
+		 "btrfs-progs", "e2fsprogs", "xfsprogs",
+		 "grub2", "grub2-efi", "ostree-grub2",
+		 "efibootmgr", "shim",
+		 "gnupg2",
+		 "basesystem",
+		 "python",
+		 "bash",
+		 "xz", "gzip", "bzip2",
+		 "coreutils",
+		 "which",
+		 "nfs-utils",
+		 "curl",
+		 "iptables-services",
+		 "NetworkManager",
+		 "hostname", "initscripts", "iproute", "iputils", "less",
+		 "sos",
+		 "openssh-clients", "openssh-server", "passwd", "plymouth",
+		 "policycoreutils", "procps-ng", "rootfiles", "rpm",
+		 "selinux-policy-targeted", "setup", "shadow-utils",
+		 "sudo", "systemd", "util-linux", "vim-minimal",
+		 "less",
+		 "tar",
+		 "rsync",
+		 "bash-completion",
+		 "tmux", "screen",
+		 "strace", "lsof", "tcpdump", "nmap-ncat",
+		 "policycoreutils-python",
+		 "policycoreutils-python-utils",
+		 "setools-console",
+		 "audit",
+		 "etcd",
+		 "iscsi-initiator-utils",
+		 "oddjob-mkhomedir",
+		 "atomic-devmode"],
+
+    "default_target": "multi-user.target"
+}

fedora-rawhide.repo

@@ -0,0 +1,7 @@
+[fedora-rawhide]
+name=Fedora rawhide $basearch
+baseurl=http://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/fedora/linux/development/rawhide/$basearch/os/
+mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=rawhide&arch=$basearch
+enabled=0
+gpgcheck=0
+metadata_expire=1d

group

@@ -0,0 +1,50 @@
+root:x:0:
+bin:x:1:
+daemon:x:2:
+sys:x:3:
+adm:x:4:
+tty:x:5:
+disk:x:6:
+lp:x:7:
+mem:x:8:
+kmem:x:9:
+wheel:x:10:
+cdrom:x:11:
+mail:x:12:
+man:x:15:
+dialout:x:18:
+floppy:x:19:
+games:x:20:
+tape:x:30:
+video:x:39:
+ftp:x:50:
+lock:x:54:
+audio:x:63:
+nobody:x:99:
+users:x:100:
+utmp:x:22:
+utempter:x:35:
+ssh_keys:x:999:
+systemd-journal:x:190:
+dbus:x:81:
+polkitd:x:998:
+etcd:x:997:
+dip:x:40:
+cgred:x:996:
+tss:x:59:
+avahi-autoipd:x:170:
+rpc:x:32:
+sssd:x:993:
+dockerroot:x:986:
+rpcuser:x:29:
+nfsnobody:x:65534:
+kube:x:994:
+sshd:x:74:
+chrony:x:992:
+tcpdump:x:72:
+input:x:995:
+systemd-timesync:x:991:
+systemd-network:x:990:
+systemd-resolve:x:989:
+systemd-bus-proxy:x:988:
+cockpit-ws:x:987:

passwd

@@ -0,0 +1,32 @@
+root:x:0:0:root:/root:/bin/bash
+bin:x:1:1:bin:/bin:/sbin/nologin
+daemon:x:2:2:daemon:/sbin:/sbin/nologin
+adm:x:3:4:adm:/var/adm:/sbin/nologin
+lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
+sync:x:5:0:sync:/sbin:/bin/sync
+shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
+halt:x:7:0:halt:/sbin:/sbin/halt
+mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
+operator:x:11:0:operator:/root:/sbin/nologin
+games:x:12:100:games:/usr/games:/sbin/nologin
+ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
+nobody:x:99:99:Nobody:/:/sbin/nologin
+dbus:x:81:81:System message bus:/:/sbin/nologin
+polkitd:x:999:998:User for polkitd:/:/sbin/nologin
+etcd:x:998:997:etcd user:/var/lib/etcd:/sbin/nologin
+tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/sbin/nologin
+avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/sbin/nologin
+rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin
+sssd:x:995:993:User for sssd:/:/sbin/nologin
+dockerroot:x:997:986:Docker User:/var/lib/docker:/sbin/nologin
+rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
+nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
+kube:x:996:994:Kubernetes user:/:/sbin/nologin
+sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
+chrony:x:994:992::/var/lib/chrony:/sbin/nologin
+tcpdump:x:72:72::/:/sbin/nologin
+systemd-timesync:x:993:991:systemd Time Synchronization:/:/sbin/nologin
+systemd-network:x:991:990:systemd Network Management:/:/sbin/nologin
+systemd-resolve:x:990:989:systemd Resolver:/:/sbin/nologin
+systemd-bus-proxy:x:989:988:systemd Bus Proxy:/:/sbin/nologin
+cockpit-ws:x:988:987:User for cockpit-ws:/:/sbin/nologin

treecompose-post.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+set -e
+
+# See: https://bugzilla.redhat.com/show_bug.cgi?id=1051816
+KEEPLANG=en_US
+find /usr/share/locale -mindepth  1 -maxdepth 1 -type d -not -name "${KEEPLANG}" -exec rm -rf {} +
+localedef --list-archive | grep -a -v ^"${KEEPLANG}" | xargs localedef --delete-from-archive
+mv -f /usr/lib/locale/locale-archive /usr/lib/locale/locale-archive.tmpl
+build-locale-archive