tilo-development-assembly-cache-aarch64-v1 (fa631a7021d359636ffe5f3765e7b025664c9786de1139836db3ce09b0a65018)
Published 2026-09-19 07:01:52 +00:00 by qos-ci
Installation
docker pull code.tilo.so/tilo/tilo-development-assembly-cache-aarch64-v1:fa631a7021d359636ffe5f3765e7b025664c9786de1139836db3ce09b0a65018sha256:0fdd6e6f445b83f6b2bda6d03db52073211290ab8a2c2134accbc4dc1a51cc8dImage layers
| ostree export of commit 812e11ff953af307485ca278bf3de893e32a7d7ac8cc42bd806ff42f2165ed88 |
| kernel-core-7.1.5-201.fc44.aarch64 |
| python3-botocore-1.43.52-1.fc44.noarch |
| nvidia-gpu-firmware-20260622-1.fc44.noarch |
| kernel-modules-7.1.5-201.fc44.aarch64 |
| kernel-modules-core-7.1.5-201.fc44.aarch64 |
| linux-firmware-20260622-1.fc44.noarch |
| python3-libs-3.14.6-1.fc44.aarch64 |
| podman-5:5.8.4-1.fc44.aarch64 |
| atheros-firmware-20260622-1.fc44.noarch |
| rpm-6.0.2-1.fc44.aarch64 |
| libicu-77.1-3.fc44.aarch64 |
| mt7xxx-firmware-20260622-1.fc44.noarch |
| qemu-user-static-mips-2:10.2.2-1.fc44.aarch64 |
| amd-gpu-firmware-20260622-1.fc44.noarch |
| skopeo-1:1.22.2-2.fc44.aarch64 |
| glibc-gconv-extra-2.43-7.fc44.aarch64 |
| bootc-1.16.4-1.fc44.aarch64 |
| glib2-2.88.2-1.fc44.aarch64 |
| qemu-user-static-xtensa-2:10.2.2-1.fc44.aarch64 |
| systemd-259.8-1.fc44.aarch64 |
| qemu-user-static-ppc-2:10.2.2-1.fc44.aarch64 |
| qemu-user-static-aarch64-2:10.2.2-1.fc44.aarch64 |
| systemd-udev-259.8-1.fc44.aarch64 |
| qemu-user-static-sparc-2:10.2.2-1.fc44.aarch64 |
| rpm-ostree-2026.2-1.fc44.aarch64 |
| intel-gpu-firmware-20260622-1.fc44.noarch |
| file-libs-5.46-10.fc44.aarch64 |
| toolbox-0.3-4.fc44.aarch64 |
| fwupd-2.1.7-1.fc44.aarch64 |
| samba-client-libs-2:4.24.4-1.fc44.aarch64 |
| qemu-user-static-riscv-2:10.2.2-1.fc44.aarch64 |
| qemu-user-static-arm-2:10.2.2-1.fc44.aarch64 |
| coreutils-common-9.10-4.fc44.aarch64 |
| NetworkManager-libnm-1:1.56.1-2.fc44.aarch64 |
| hwdata-0.409-1.fc44.noarch |
| python3-libdnf5-5.4.2.1-1.fc44.aarch64 |
| 161 components |
| systemd-resolved-259.8-1.fc44.aarch64 |
| vim-minimal-2:9.2.843-1.fc44.aarch64 and systemd-shared-259.8-1.fc44.aarch64 and systemd-libs-259.8-1.fc44.aarch64 and systemd-pam-259.8-1.fc44.aarch64 and python3-boto3-1.43.52-1.fc44.noarch |
| 13 components |
| qemu-user-static-sh4-2:10.2.2-1.fc44.aarch64 and qemu-user-static-hexagon-2:10.2.2-1.fc44.aarch64 and glibc-2.43-7.fc44.aarch64 |
| 13 components |
| 13 components |
| 13 components |
| 6 components |
| 13 components |
| 13 components |
| 9 components |
| 10 components |
| 13 components |
| 13 components |
| 13 components |
| 13 components |
| 13 components |
| 13 components |
| 13 components |
| python-pip-wheel-26.0.1-2.fc44.noarch |
| 26 components |
| 26 components |
| 17 components |
| 26 components |
| 26 components |
| initramfs (kernel 7.1.5-201.fc44.aarch64) and rpmostree-unpackaged-content |
| Reserved for new packages |
| COPY file:951dea92e1dd6f3d7a9575c9e70fb051434bcc2490cd9737a90caf89c4f035fb in /usr/libexec/tilo/finalize-rpmdb |clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo mesa-dri-drivers mesa-vulkan-drivers libglvnd-egl at-spi2-core google-noto-sans-fonts plymouth plymouth-plugin-script plymouth-scripts && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| COPY dir:038d7c2433bf5316e84343ea759a70f5b6f4d9ff62ce3e16e25cfef27f39d8f9 in /usr/share/plymouth/themes/tilo/ |clamp-mtime=1789753377 |
| COPY multi:0d808b7054b55cd5b310083b5df2474c0dd7218d93a02dea6afe1a6b3f7f6de5 in /usr/local/bin/ |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo pipewire pipewire-pulseaudio pipewire-utils wireplumber libcanberra-gtk3 sound-theme-freedesktop && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo gstreamer1 gstreamer1-plugins-base gstreamer1-plugins-good gstreamer1-plugins-bad-free gstreamer1-plugin-libav gstreamer1-plugin-openh264 ffmpeg-free yt-dlp python3 python3-dbus-next python3-gobject && dnf clean all && ${FINALIZE_RPMDB} && gst-inspect-1.0 openh264enc >/dev/null && gst-inspect-1.0 h264parse >/dev/null && gst-inspect-1.0 rtph264pay >/dev/null && gst-inspect-1.0 rtponviftimestamp >/dev/null && gst-inspect-1.0 rtpstreampay >/dev/null && yt-dlp --version >/dev/null|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo greetd greetd-tuigreet fprintd fprintd-pam polkit && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo bubblewrap flatpak xdg-dbus-proxy distrobox cups cups-ipptool podman foot wl-clipboard NetworkManager NetworkManager-wifi wireless-regdb ModemManager fwupd fuse3 cage && dnf clean all && ${FINALIZE_RPMDB} && ln -sfn ../run/NetworkManager/resolv.conf /etc/resolv.conf && installed="$(rpm -qa --qf '%{NAME}\n')" && printf '%s\n' "$installed" | awk '/^systemd-(coredump|networkd|resolved)$/' | xargs -r dnf --disablerepo='*' remove -y && test "$(readlink /etc/resolv.conf)" = ../run/NetworkManager/resolv.conf && installed="$(rpm -qa --qf '%{NAME}\n')" && ! printf '%s\n' "$installed" | grep -Eq '^systemd-(coredump|networkd|resolved)$' && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo xdg-desktop-portal && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo chrony zram-generator glibc-langpack-en firewalld bluez power-profiles-daemon && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo hunspell hunspell-en hunspell-de hunspell-es hunspell-fr hunspell-it hunspell-nl hunspell-pl hunspell-pt hunspell-ru && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo cups cups-ipptool && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c grep -q '^video:' /etc/group || echo "video:x:39:greetd" >> /etc/group; grep -q '^input:' /etc/group || echo "input:x:104:greetd" >> /etc/group; sed -i 's/^video:x:39:$/video:x:39:greetd/' /etc/group; sed -i 's/^input:x:104:$/input:x:104:greetd/' /etc/group; grep -q '^video:x:39:.*greetd' /etc/group; grep -q '^input:x:104:.*greetd' /etc/group|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo adwaita-sans-fonts google-noto-sans-fonts google-noto-sans-mono-fonts google-noto-serif-fonts google-noto-color-emoji-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols-2-fonts google-noto-sans-math-fonts google-noto-sans-cjk-fonts google-noto-sans-arabic-fonts google-noto-sans-hebrew-fonts google-noto-sans-devanagari-fonts google-noto-sans-bengali-fonts google-noto-sans-thai-fonts && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo wayland-devel libxkbcommon-devel libinput-devel && rpm -e --nodeps wayland-devel libxkbcommon-devel libinput-devel && installed="$(rpm -qa --qf '%{NAME}\n')" && printf '%s\n' "$installed" | awk '/^(pkgconf-pkg-config|pkgconf|pkgconf-m4|libpkgconf)$/' | xargs -r rpm -e --nodeps && installed="$(rpm -qa --qf '%{NAME}\n')" && ! printf '%s\n' "$installed" | grep -Eq '^(wayland-devel|libxkbcommon-devel|libinput-devel|pkgconf-pkg-config|pkgconf|pkgconf-m4|libpkgconf)$' && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| COPY dir:771f7a950b9ce56a04a14da1160c26d69796806c15c99e73117015ba41f3c86e in / |clamp-mtime=1789753377 |
| COPY multi:94dbc79d7ed5a1e823061e7c33b7cbc50eb5bb470fb08ccc2c5e9e48de65a81b in /usr/lib/systemd/user/ |clamp-mtime=1789753377 |
| COPY multi:42bc7a89cf6bd81026627a72d2d161a7fb775d4b3d200e8090fdc4df571faaf3 in /usr/lib/systemd/system/ |clamp-mtime=1789753377 |
| COPY file:7f1048a4ff72d87745883d9d2646ed3cc608512aa02c772a766a1a8c6ade19df in /usr/libexec/tilo-relay-firstboot |clamp-mtime=1789753377 |
| COPY file:7e55d08bdf4b0e9933a3439cfb15199236194bc1684e7546b6833e4c05734533 in /usr/share/polkit-1/actions/org.tilo.home-peer.policy |clamp-mtime=1789753377 |
| COPY multi:3350c00d4fb3efd686ffdb1760b835700c4664c73a278ee0f87d9b07b35b6d09 in /etc/polkit-1/rules.d/ |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c chmod 0755 /usr/bin/tilo-relay /usr/bin/tilo-relay-admin /usr/bin/tilo-enroll /usr/libexec/tilo-home-peer-control /usr/libexec/tilo-relay-firstboot|clamp-mtime=1789753377 |
| COPY file:c6616376fbfe7e5344e88a270c22dec675974877e20ab3efbe7809f1618656a3 in /usr/libexec/tilo-fluxcast |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=external-assets,source=/,target=/tilo-assets,ro install -D -m 0644 /tilo-assets/doubletake-ae06722-LICENSE /usr/share/licenses/tilo-doubletake/LICENSE && install -D -m 0644 /tilo-assets/fluxcast-a74f39f-LICENSE /usr/share/licenses/tilo-fluxcast/LICENSE|clamp-mtime=1789753377 |
| COPY file:abf03d4b3e5799fd2aeaeea5a54170dacf1b1f1caffba2bae6f5d9c96db6e801 in /usr/share/dbus-1/system.d/zz-tilo-projector-wifi-direct.conf |clamp-mtime=1789753377 |
| COPY multi:03405a20f043bc0c276e6262c7d24fd368145f9804a5261110892bf395858611 in /usr/lib/systemd/user/ |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c chmod 755 /usr/bin/shell /usr/bin/fs /usr/bin/terminal /usr/bin/file-explorer /usr/bin/tilo-greeter /usr/bin/tilo-installer /usr/bin/tilo-launcher /usr/bin/tilo-runtime-bundle /usr/bin/tilo-install /usr/bin/tilo-pkg /usr/libexec/tilo-cli-shim /usr/libexec/tilo-unlock-helper /usr/libexec/tilo-ush /usr/libexec/tilo-projector /usr/libexec/tilo-doubletake /usr/libexec/tilo-doubletake-test-receiver /usr/libexec/tilo-fluxcast && { [ ! -e /usr/bin/browser ] || chmod 755 /usr/bin/browser; } && /usr/libexec/tilo-doubletake -h >/dev/null && /usr/libexec/tilo-fluxcast --help >/dev/null|clamp-mtime=1789753377 |
| COPY file:d077c5e9661d6fa3747060e2bd9f3febb76b507d99a617729e64dc20678fdc72 in /usr/libexec/tilo/airplay-encrypted-session-test.sh |clamp-mtime=1789753377 |
| COPY file:967478d4531ad79084a74c7d52b2ad45cfbc63502deb7cf55e616327745cb678 in /usr/libexec/tilo/projection-boot-check.sh |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c chmod 0755 /usr/libexec/tilo/airplay-encrypted-session-test.sh /usr/libexec/tilo/projection-boot-check.sh|clamp-mtime=1789753377 |
| COPY dir:faac9b5e0b7c0889b1d329169389c02df74a8f230c995f15a6c2d63e86137122 in / |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo libepoxy libsoup3 enchant2 hyphen woff2 lcms2 openjpeg2 libavif libwebp libgcrypt libtasn1 libsecret atk at-spi2-atk libmanette libxslt && dnf clean all && ${FINALIZE_RPMDB} && ldconfig && gst-inspect-1.0 h264parse >/dev/null && gst-inspect-1.0 hlssink2 >/dev/null && gst-inspect-1.0 pulsesrc >/dev/null && gst-inspect-1.0 avenc_aac >/dev/null && gst-inspect-1.0 aacparse >/dev/null|clamp-mtime=1789753377 |
| COPY dir:92b0b95109145594b8f45d3382d01ccb74837b5aeba4a08325ce710c6cdb4d74 in /usr/lib/tilo-runtime/ |clamp-mtime=1789753377 |
| COPY file:9eb60a9255b0f7dbfe66a552b1277c2a60a8d79287e4333cfc0024106a42389d in /usr/share/tilo/runtime-bundle-publisher.hex |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c mkdir -p /etc/tilo && cat /usr/share/tilo/runtime-bundle-publisher.hex > /etc/tilo/runtime-bundle-trusted-publishers.txt|clamp-mtime=1789753377 |
| COPY dir:938d556f17d2238e7a4d08347acfbba23c4db0eb544c8d0c2089e7561cd0a426 in /usr/share/tilo-apps/ |clamp-mtime=1789753377 |
| COPY file:b44b5291bc3a8f9f8d24bfa84aceecdb5264edd09fa1e88aec3a7fd3e7f97977 in /usr/share/tilo/app-publisher.hex |clamp-mtime=1789753377 |
| COPY file:ab51fe493847183019e24af4d6dcea2514474c625f6c61f41a007c6b3d799c11 in /etc/profile.d/tilo-apps.sh |clamp-mtime=1789753377 |
| COPY multi:fa0271ecd14a0da6c7ac3b115c750562fc8875b654f52f6ed2a9fc739b4c261b in /usr/lib/systemd/system/ |clamp-mtime=1789753377 |
| COPY file:06f13e9ae7aaf92aac246159c47bf9a7269465276219d6da024465fe287e2054 in /usr/lib/systemd/system/systemd-tpm2-setup.service.d/10-tilo-live-installer.conf |clamp-mtime=1789753377 |
| COPY file:c907d4469fd59f88da128058de100756f2386d98be1bb475a6416a97fcaeaf76 in /usr/lib/systemd/system/systemd-tpm2-setup-early.service.d/10-tilo-live-installer.conf |clamp-mtime=1789753377 |
| COPY file:b7ce912dbf471260cd552fbc86fc8335f77761720cccf91ff522112fb90f7f0d in /usr/share/tilo/fs-capabilities.json |clamp-mtime=1789753377 |
| COPY multi:883b3596ffbb13861073506a186e9372872ff87e12a6c7e164b62d4c909283b1 in /usr/share/wayland-sessions/ |clamp-mtime=1789753377 |
| COPY multi:11da3a6900d969317e169490a13bd0a570be99b13978c7ac32a6b2300bdc2e47 in /usr/libexec/ |clamp-mtime=1789753377 |
| COPY file:21ac83af942bc3fffa01b86da3f84a129dac7367db9ee5315794b29f1c772efd in /usr/lib/systemd/user/tilo-graphical-session.target |clamp-mtime=1789753377 |
| COPY file:ff11ef8f8a655389efd6770f31b126e30ff9aa060892bed3035f2f78067a8071 in /etc/tilo/desktop.toml |clamp-mtime=1789753377 |
| COPY file:083018c210e27a281da5207c487310149f2213b86a6d4faa0f3bbc50a69770b5 in /etc/greetd/config.toml |clamp-mtime=1789753377 |
| COPY multi:93cd83ebdadd8c643ce08c2bd7650e1149eeefeb42df71d0c8fd9f4c37a5654d in /etc/pam.d/ |clamp-mtime=1789753377 |
| COPY multi:e78213d3f3fa7713c8c866c612fa829a2648846efed4f7c4f78644937e3c907e in /usr/lib/udev/rules.d/ |clamp-mtime=1789753377 |
| COPY file:1358cd34dd7fb108718fdfabcb1871d76489fc5c3dc88fbeb6b6f7bedf444725 in /usr/lib/systemd/system/systemd-growfs-root.service.d/10-tilo-composefs.conf |clamp-mtime=1789753377 |
| COPY file:269c52712d6a206ac32644112cdea0042ddd84f4d454f3b0d9f99908f664930d in /usr/lib/tmpfiles.d/tilo.conf |clamp-mtime=1789753377 |
| COPY file:b17bc362210b8a97ee9b6223066d8c3b97e5bae561c0796538223f6d2eb2ba1f in /usr/lib/user-tmpfiles.d/tilo-model-manager.conf |clamp-mtime=1789753377 |
| COPY multi:c26f305ec89abc4ed4c5ae9e855fae0596c0914aeb3726012827929e9444f695 in /usr/lib/sysusers.d/ |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c systemd-sysusers /usr/lib/sysusers.d/tilo-identity.conf && systemd-sysusers /usr/lib/sysusers.d/tilo-local-model.conf|clamp-mtime=1789753377 |
| COPY file:d4f3498ce04b67f4cd76458e257d1fcfb9c3641e81a1d25fddf3da01081aeb06 in /usr/lib/systemd/user/tilo-identity.service |clamp-mtime=1789753377 |
| COPY file:33bbeedc30c5032135a820d2c7c9f6da61ca4e6813454f91e235746d6c8daf4d in /usr/share/xdg-desktop-portal/portals/tilo.portal |clamp-mtime=1789753377 |
| COPY file:409581bce7b9bda2d55f107bb09daba4b8f2b7923da4d64e824ed43a665cbf35 in /usr/lib/systemd/user/shell-peer-sync.service |clamp-mtime=1789753377 |
| COPY file:2ba8ebbcbc7957bff75502645bd7e0334bb38edf63293ec8b577232dc718aa7d in /etc/systemd/zram-generator.conf |clamp-mtime=1789753377 |
| COPY file:823c7dfa44277e94a7b1bd9b56aadc2e8a2d90abda40457428b7af0b91c9f8ac in /etc/locale.conf |clamp-mtime=1789753377 |
| COPY file:8cbfb4865e508481fb2fbc52be05d3475867405a7198b18bcbc94368711ccfdb in /etc/chrony.conf |clamp-mtime=1789753377 |
| COPY multi:0e7421f4b0251a386d8c0348a84d4552f5b9fccc93ed65f3ac62a7662e8a4569 in /usr/share/doc/tilo/ |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo systemd-boot-unsigned && rpm -qa | grep -E '^(shim-(x64|aa64)|grub2-)' | xargs -r rpm -e --nodeps && rpm -e --nodeps bootupd && rm -rf /usr/lib/bootupd /usr/lib/ostree-boot && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo systemd-ukify && python3 /usr/local/bin/make-plymouth-assets.py /usr/share/plymouth/themes/tilo && plymouth-set-default-theme tilo && test "$(plymouth-set-default-theme)" = tilo && dnf --disablerepo='*' remove -y systemd-ukify python3-pillow && installed="$(rpm -qa --qf '%{NAME}\n')" && printf '%s\n' "$installed" | awk '/^(systemd-ukify|openssl|sbsigntools|efitools|mokutil|pesign|nss-tools|gnutls-utils|git|git-core|openvpn|NetworkManager-openvpn|openssh-server)$/' | xargs -r dnf --disablerepo='*' remove -y && installed="$(rpm -qa --qf '%{NAME}\n')" && ! printf '%s\n' "$installed" | grep -Eq '^(python3-pillow|systemd-ukify|openssl|sbsigntools|efitools|mokutil|pesign|nss-tools|gnutls-utils|git|git-core|openvpn|NetworkManager-openvpn|openssh-server)$' && rpm -q openssh openssh-clients && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| COPY file:3d4640bae33eaaed423bb23e66dc192a79ba618c8e8fcb4ed6d6fb6f16d03a30 in /usr/lib/bootc/install/40-tilo.toml |clamp-mtime=1789753377 |
| COPY multi:2b84a455fc3ded7f7053f8e1a62d9f11ed39d435550f01852ad15bf3f357006a in /usr/lib/bootc/kargs.d/ |clamp-mtime=1789753377 |
| COPY multi:b1a7e934ed0d8f7f6673d74677eedc065c3c862302b658acbb422b0668c98fcf in /usr/libexec/ |clamp-mtime=1789753377 |
| COPY file:e91f2c41aa7573cf37f2800bd287f20c77948b9b1381ca41a3d88f8f21520793 in /usr/libexec/tilo-secureboot |clamp-mtime=1789753377 |
| COPY multi:c2d211bd8382ac62f0ac39c315ac69748d1270ba1acbb74f330d2296c4601877 in /usr/libexec/ |clamp-mtime=1789753377 |
| COPY multi:8e1935b4ff466adf5e60b26ad49cd7e892d97a0b512f7846fa5c10a8baa1d8c9 in /usr/lib/systemd/system/ |clamp-mtime=1789753377 |
| |1 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb /bin/sh -c chmod 0755 /usr/libexec/tilo-secureboot && systemctl enable tilo-secureboot-sign.timer tilo-secureboot-sign.path tilo-secureboot-sign-shutdown.service|clamp-mtime=1789753377 |
| COPY file:4b58b138d50817030c89ff6534b850c2cd2f234ad850593724268ec360d5de26 in /usr/lib/sysctl.d/60-tilo-hardening.conf |clamp-mtime=1789753377 |
| COPY file:2e7f578a2894016c0580e52788106e7815e370ca5beb6323e96572bafe98f9c2 in /usr/lib/sysctl.d/70-tilo-performance.conf |clamp-mtime=1789753377 |
| COPY multi:367df853b55d5ea8a734187d1045ca16cf74550fbf895151a7f07bc75e62d6a2 in /usr/lib/tilo/ |clamp-mtime=1789753377 |
| COPY multi:be63a2c1b3ea6e0d3ae977493b37dcd3b034c291b33a81012f700980fa6a3efe in /usr/lib/systemd/system/ |clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION|clamp-mtime=1789753377 |
| |2 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 /bin/sh -c case "${TILO_GENERATION}" in ''|*[!0-9]*) echo "TILO_GENERATION must be a decimal integer; got '${TILO_GENERATION}'." >&2; echo "It is the generation this image carries: +1 per published image, sealed" >&2; echo "onto the UKI command line. os/dev/build-image.sh resolves it from the" >&2; echo "published series; pass TILO_GENERATION=<N> to build one by hand." >&2; exit 1 ;; esac && install -d -m 0755 /usr/lib/tilo && printf '%s\n' "${TILO_GENERATION}" > /usr/lib/tilo/generation && printf '# Written by the image build from the TILO_GENERATION build argument.\nkargs = ["tilo.generation=%s"]\n' "${TILO_GENERATION}" > /usr/lib/bootc/kargs.d/02-generation.toml && echo "generation ${TILO_GENERATION}: sealed via kargs.d, readable at /usr/lib/tilo/generation"|clamp-mtime=1789753377 |
| |2 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo tpm2-tools && dnf clean all && ${FINALIZE_RPMDB} && rm -rf /var/cache/dnf /var/log/dnf* /var/lib/dnf|clamp-mtime=1789753377 |
| COPY dir:4dfcd598b22c44d2bc2010fe6c5b43c12d9085006041f06ebfdb166769155c3e in / |clamp-mtime=1789753377 |
| |2 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 /bin/sh -c chmod 0755 /usr/libexec/tilo-rollback-common /usr/libexec/tilo-rollback-confirm /usr/libexec/tilo-rollback-initrd-unlock /usr/libexec/tilo-root-discover /usr/lib/systemd/system-generators/tilo-rollback-unlock-generator /usr/lib/systemd/system-generators/tilo-root-generator /usr/lib/dracut/modules.d/91tilo-rollback/module-setup.sh /usr/libexec/tilo-rollback-harden /usr/libexec/tilo-rollback-boot-check && install -d -m 0755 /usr/share/tilo/pcr-predictions|clamp-mtime=1789753377 |
| COPY dir:3e62c6a26d4914ed16593c99f67cb5b785683ba96e46f5feaaafddced2170499 in / |clamp-mtime=1789753377 |
| |2 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo dnf install -y --setopt=reposdir=/repo compiler-rt && scudo="$(find /usr/lib /usr/lib64 -name 'libclang_rt.scudo_standalone.so' 2>/dev/null | head -1)" && test -n "$scudo" && install -D -m 0755 "$scudo" /usr/lib/tilo/libclang_rt.scudo_standalone.so && rpm -e --nodeps compiler-rt clang-resource-filesystem && ! rpm -q compiler-rt clang-resource-filesystem >/dev/null 2>&1 && test -s /usr/lib/tilo/libclang_rt.scudo_standalone.so && dnf clean all && ${FINALIZE_RPMDB} && scudo=/usr/lib/tilo/libclang_rt.scudo_standalone.so && mkdir -p /usr/lib/systemd/system/fs.service.d && printf '[Service]\n# Hardened userspace allocator; path resolved at image build.\nEnvironment=LD_PRELOAD=%s\n# Hardware shadow stacks. The ELF marking alone does not enable them.\nEnvironment=GLIBC_TUNABLES=glibc.cpu.hwcaps=SHSTK\n' "$scudo" > /usr/lib/systemd/system/fs.service.d/10-hardened-malloc.conf && echo "scudo wired: $scudo"|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| |3 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/repo test "$(uname -m)" = "$TILO_WINDOWS_ARCH" && case "$(uname -m)" in x86_64) vm_firmware=edk2-ovmf; windows_packages='wine wine-dxvk' ;; aarch64) vm_firmware=edk2-aarch64; windows_packages='glibc libgcc libstdc++ libglvnd-glx libglvnd-opengl libglvnd-egl qt6-qtbase qt6-qtbase-gui qt6-qtdeclarative alsa-lib libdrm libwayland-client vulkan-loader' ;; *) echo 'unsupported Windows VM firmware architecture' >&2; exit 1 ;; esac && dnf install -y --setopt=reposdir=/repo $windows_packages gamescope qemu-kvm libvirt-client libvirt-daemon-kvm libvirt-daemon-config-nwfilter swtpm swtpm-tools "$vm_firmware" freerdp xwayland-satellite virt-viewer xorriso genisoimage udftools && dnf clean all && ${FINALIZE_RPMDB}|clamp-mtime=1789753377 |
| COPY dir:696f459615c2f85e9c91ded7c9a734c1466df1cc8ff7dc5ea453740fdc389004 in /usr/ |clamp-mtime=1789753377 |
| |3 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c --network=none --mount=type=bind,source=os/dev/windows_provider.py,target=/tilo-windows-provider.py,ro python3 /tilo-windows-provider.py host --manifest /usr/share/tilo/windows/provider.json:sha256:29fb324d74a85e9e2e7b39a60ed80d5e0a84dcddf13955da12f6482dbab65ce0|clamp-mtime=1789753377 |
| COPY file:e33b58babf4bdf41c6c129ed91a0a55319d20a4f00ae8168a91949c04279da7d in /usr/share/virtio-win/virtio-win.iso |clamp-mtime=1789753377 |
| COPY file:a21e19b547c2dc50b0620ae1d009eb96cf7cef1900b4a6e04b51ee1f8733b7ab in /usr/share/virtio-win/installer/virtio-win-guest-tools.exe |clamp-mtime=1789753377 |
| COPY file:f3d6935a80b96e0a508325694353d241c3c985295be45e1e3e0dfd5d2468b800 in /usr/libexec/tilo-umu-run |clamp-mtime=1789753377 |
| COPY file:9462cf18f3727cc8f6469aa48c105ddb9aec5fc8eacc80f07457f8e1fc933638 in /usr/libexec/umu_run.py |clamp-mtime=1789753377 |
| COPY dir:57829a65f7b7c8f807e2d62145465438cd7adbf41ea7d3f0ee0525ebb8448bcd in /usr/lib/tilo/windows-runners/proton/ |clamp-mtime=1789753377 |
| COPY dir:b7d1d41532940be2eb1379d6e2543dcc793ed7d40ebabfc175d72bf6bfd3cb6f in /usr/lib/tilo/windows-runners/steam-runtime/ |clamp-mtime=1789753377 |
| COPY dir:686a60caa0c54bd2f6d09affeb147a3e99a2f51670c5587dd08ed3c108f62c00 in /usr/share/tilo/windows/catalogues/ |clamp-mtime=1789753377 |
| COPY multi:6f03217ed197c06a7bdb9cb59137a7e6a5f60f5014f3f3df524df1b1d3395ce2 in /usr/share/tilo/windows/ |clamp-mtime=1789753377 |
| COPY multi:07469382f95b6d14430332c2349408da81aa5bb6d6ed0b589555cb3c6b0db20a in /usr/libexec/ |clamp-mtime=1789753377 |
| COPY multi:110b8deef81d007ce33022f33369becdbcc8155198bd27477a7dc3e4ece1dbf3 in /usr/libexec/ |clamp-mtime=1789753377 |
| COPY dir:2e9500a71e4b9be46aa35feea894420f048c56a1e88b0b487ec268ac19c7a99a in /usr/share/tilo/windows/ |clamp-mtime=1789753377 |
| COPY file:ea6731269e0a280b428ea356e1dc931d289a75ec583a8a04332bbef78b9d4e25 in /usr/share/polkit-1/actions/org.tilo.windows.policy |clamp-mtime=1789753377 |
| COPY file:1d767197740ae3644db550a921a50747c43665eda403adb94aad9fd31b5f0f27 in /etc/polkit-1/rules.d/49-tilo-windows.rules |clamp-mtime=1789753377 |
| COPY multi:8f1e9789073efc31712ebcc1a2ecc0c518c1de4b618f6e7c4240d08fc09aa24c in /usr/lib/systemd/system/ |clamp-mtime=1789753377 |
| COPY multi:90e0d4ae6a47943b1b23e1deeea402c32836c1b5dafe7746a19ff6db3ee03d8c in /usr/share/doc/tilo/ |clamp-mtime=1789753377 |
| |3 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c chmod 0755 /usr/libexec/tilo-windows-vm-network /usr/libexec/tilo-windows-provision /usr/libexec/tilo-windows-owner /usr/libexec/tilo-windows-recovery-console /usr/libexec/tilo-windows-vm-control /usr/libexec/tilo-windows-rail && systemctl enable tilo-windows-vm-egress-reaper.timer|clamp-mtime=1789753377 |
| COPY file:866bbd436335e6f7e71659531ab646aa0f5f91bd26d4ccea9c2541c6f8265d7b in /usr/share/tilo/selinux/tilo-base.cil |clamp-mtime=1789753377 |
| COPY file:9cdaca384937b82a9272c294f086c491ce7fac1ed5f275ecb78054085c7b5909 in /usr/lib/systemd/system/fs.service.d/20-selinux.conf |clamp-mtime=1789753377 |
| |3 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c cp -a /etc/selinux/targeted /var/tmp/tilo-sestore && rm -rf /etc/selinux/targeted && mv /var/tmp/tilo-sestore /etc/selinux/targeted && rm -rf /etc/selinux/targeted/tmp && find /usr/share/selinux/packages -type f \( -name '*.pp' -o -name '*.pp.bz2' \) -print | sort | while IFS= read -r policy; do semodule -n -s targeted -X 200 -i "$policy" || exit 1; done && semodule -i /usr/share/tilo/selinux/tilo-base.cil && semodule -s targeted -lfull > /var/tmp/tilo-active-selinux-modules && find /usr/share/selinux/packages -type f \( -name '*.pp' -o -name '*.pp.bz2' \) -print | sort | while IFS= read -r policy; do module="$(basename "$policy")"; module="${module%.bz2}"; module="${module%.pp}"; awk -v module="$module" '$1 == "200" && $2 == module { found=1 } END { exit !found }' /var/tmp/tilo-active-selinux-modules || exit 1; done && semodule -s targeted -lfull | grep -Eq '^400[[:space:]]+tilo-base[[:space:]]' && rm -f /var/tmp/tilo-active-selinux-modules && restorecon -v /usr/lib/systemd/user/tilo-graphical-session.target && echo "all packaged add-on and tilo-base SELinux modules loaded"|clamp-mtime=1789753377 |
| |3 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c systemctl enable greetd.service && systemctl enable tilo-device-key-init.service && systemctl set-default graphical.target && systemctl enable tilo-growfs-sysroot.timer && systemctl enable tilo-fs-start.timer fs-identity.path && systemctl enable tilo-system-extension-dispatcher.socket && systemctl enable tilo-system-extension-boot-pack-status.timer && systemctl enable tilo-system-extension-boot-pack-stage.path && systemctl --global enable tilo-identity.service && systemctl --global enable tilo-models.socket && systemctl --global enable tilo-model-gateway.socket && systemctl --global enable tilo-app-host.socket && systemctl --global enable tilo-ush.socket && systemctl --global enable tilo-fs-recipient.socket && systemctl --global enable pipewire.socket pipewire-pulse.socket wireplumber.service && systemctl enable cups.socket && systemctl enable chronyd.service && systemctl enable firewalld.service && systemctl enable tilo-hidepid.service && systemctl enable tilo-security-audit.timer && systemctl enable tilo-rollback-harden.timer && systemctl enable tilo-rollback-confirm.timer && systemctl enable tilo-boot-entries.timer tilo-boot-health.service && systemctl enable bootc-fetch-apply-updates.timer && systemctl enable NetworkManager.service|clamp-mtime=1789753377 |
| |3 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c for u in NetworkManager-wait-online.service systemd-networkd-wait-online.service systemd-network-generator.service systemd-timesyncd.service systemd-coredump.socket systemd-coredump@.service systemd-binfmt.service systemd-pstore.service systemd-pcrlock-file-system.service systemd-pcrlock-firmware-code.service systemd-pcrlock-firmware-config.service systemd-pcrlock-machine-id.service systemd-pcrlock-make-policy.service systemd-pcrlock-secureboot-authority.service systemd-pcrlock-secureboot-policy.service man-db-cache-update.timer man-db-cache-update.service systemd-update-utmp.service ; do systemctl mask "$u" || true; done|clamp-mtime=1789753377 |
| |3 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c firewall-offline-cmd --set-default-zone=FedoraWorkstation|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_PUBLIC_TRUST_MODE TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_PUBLIC_TRUST_MANIFEST_SHA256 TILO_PUBLIC_TRUST_MODE TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_PUBLIC_TRUST_MANIFEST_SHA256 TILO_PUBLIC_TRUST_MODE TILO_TARGET_IMGREF TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY TILO_PUBLIC_TRUST_MANIFEST_SHA256 TILO_PUBLIC_TRUST_MODE TILO_TARGET_IMGREF TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| COPY dir:30bdf6a79c82914ff8c738b2f54944407da0e00613f30975936175b56867a659 in /run/tilo-public-trust/ |clamp-mtime=1789753377 |
| COPY multi:5e0539852cf971aab229d595ae471c17851f97ff126752de38be03bb6010b1cc in /run/tilo-official-trust/ |clamp-mtime=1789753377 |
| COPY multi:baff2b8fc9a4b094821acbaa0c0d55d23d7a663b9e5303524bbadb8cb605eac6 in /run/tilo-trust-tools/ |clamp-mtime=1789753377 |
| COPY file:efce833932422bafafefe887819644856dab8fcb5a4c8e3be4a25d823f3f08a9 in /etc/containers/policy.json |clamp-mtime=1789753377 |
| COPY file:08ce5daf94c2cf2bf7200b306945896666621760b59bea350b9b8bb9a4ac86d5 in /etc/containers/registries.d/code.podesta.ai.yaml |clamp-mtime=1789753377 |
| |7 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY=99b2769737c88f780edf5d03d61dd8f1c3e727aa371f464d9fde973d86d104fd TILO_PUBLIC_TRUST_MANIFEST_SHA256=442c683287fc93f0dfbb99037dc5d885f3f8eaa8e3b01eadad7aff7b0deaede3 TILO_PUBLIC_TRUST_MODE=development TILO_TARGET_IMGREF=code.podesta.ai/qos/tilo-development:provisional-ca33fae89a24-aarch64 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c --mount=type=bind,from=public-trust-tools,source=/usr/bin/openssl,target=/run/tilo-build-tools/openssl,ro PATH="/run/tilo-build-tools:$PATH" python3 /run/tilo-trust-tools/install-public-trust.py --source /run/tilo-public-trust --official /run/tilo-official-trust --destination /usr/share/tilo --mode "$TILO_PUBLIC_TRUST_MODE" --manifest-sha256 "$TILO_PUBLIC_TRUST_MANIFEST_SHA256" --registry-owner "$TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY" --target-ref "$TILO_TARGET_IMGREF" --image-root / && rm -rf /run/tilo-public-trust /run/tilo-official-trust /run/tilo-trust-tools|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_HARDWARE_PROFILE TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY TILO_PUBLIC_TRUST_MANIFEST_SHA256 TILO_PUBLIC_TRUST_MODE TILO_TARGET_IMGREF TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_HARDWARE_PROFILE TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY TILO_PUBLIC_TRUST_MANIFEST_SHA256 TILO_PUBLIC_TRUST_MODE TILO_TARGET_IMGREF TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| |8 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_HARDWARE_PROFILE=lenovo-83ed TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY=99b2769737c88f780edf5d03d61dd8f1c3e727aa371f464d9fde973d86d104fd TILO_PUBLIC_TRUST_MANIFEST_SHA256=442c683287fc93f0dfbb99037dc5d885f3f8eaa8e3b01eadad7aff7b0deaede3 TILO_PUBLIC_TRUST_MODE=development TILO_TARGET_IMGREF=code.podesta.ai/qos/tilo-development:provisional-ca33fae89a24-aarch64 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c --mount=type=bind,from=rpms,source=/repo,target=/frozen-repo --mount=type=bind,from=kernel-rpms,source=/repo,target=/qkernel-repo --mount=type=bind,source=os/hardware/firmware,target=/run/tilo-hardware-firmware --mount=type=bind,source=os/dev/prepare-hardware-profile.py,target=/run/tilo-prepare-hardware-profile.py --mount=type=bind,source=os/dev/hardware_profile.py,target=/run/hardware_profile.py --mount=type=bind,source=os/hardware/profiles,target=/run/tilo-hardware-profiles set -eux; mkdir -p /etc/tilo-swap.d; printf '[frozen]\nname=frozen\nbaseurl=file:///frozen-repo\ngpgcheck=0\nenabled=1\n' > /etc/tilo-swap.d/frozen.repo; printf '[tilo-kernel]\nname=tilo-kernel\nbaseurl=file:///qkernel-repo\ngpgcheck=0\nenabled=1\n' > /etc/tilo-swap.d/tilo-kernel.repo; dnf swap -y --setopt=reposdir=/etc/tilo-swap.d --nogpgcheck --allowerasing kernel-core tilo-kernel-core; rm -rf /etc/tilo-swap.d; kver=""; n=0; for d in /usr/lib/modules/*/; do k="$(basename "$d")"; if [ -f "$d/vmlinuz" ] || [ -f "/boot/vmlinuz-$k" ]; then kver="$k"; n=$((n+1)); fi; done; if [ "$n" -ne 1 ]; then echo "expected exactly one kernel image after the kernel swap, found $n" >&2; ls -la /usr/lib/modules/ /boot >&2 || true; exit 1; fi; if [ -f "/boot/vmlinuz-$kver" ] && [ ! -f "/usr/lib/modules/$kver/vmlinuz" ]; then mv "/boot/vmlinuz-$kver" "/usr/lib/modules/$kver/vmlinuz"; fi; test -f "/usr/lib/modules/$kver/vmlinuz"; for d in /usr/lib/modules/*; do [ "$d" = "/usr/lib/modules/$kver" ] || rm -rf "$d"; done; install -Dm0644 /run/hardware_profile.py /usr/lib/tilo/hardware_profile.py; python3 /run/tilo-prepare-hardware-profile.py --profile "$TILO_HARDWARE_PROFILE" --root / --kernel-version "$kver" --profiles-dir /run/tilo-hardware-profiles --firmware-dir "/run/tilo-hardware-firmware/$TILO_HARDWARE_PROFILE" --target-update-ref "$TILO_TARGET_IMGREF"; find "/usr/lib/modules/$kver" -type f -path '*/fs/ext4/ext4.ko*' -print -quit | grep -q . || { echo 'signed Ext4 rescue module is missing' >&2; exit 1; }; find "/usr/lib/modules/$kver" -type f -path '*/fs/xfs/xfs.ko*' -print -quit | grep -q . || { echo 'signed XFS rescue module is missing' >&2; exit 1; }; dracut --force --reproducible --compress zstd -v --kver "$kver" --omit "network network-legacy network-manager nfs iscsi nvmf nbd fcoe fcoe-uefi nbde clevis clevis-pin-null clevis-pin-sss clevis-pin-tang clevis-pin-tpm2 crypt-ssh" --omit-drivers "ext4 xfs" --add "crypt systemd-cryptsetup tpm2-tss plymouth tilo-rollback" "/usr/lib/modules/$kver/initramfs.img" > /tmp/dracut.log 2>&1 || { cat /tmp/dracut.log >&2; exit 1; }; test -s "/usr/lib/modules/$kver/initramfs.img"; mkdir -p /usr/lib/tilo; sed -n 's/.*Including module: \([a-z0-9_-]*\).*/\1/p' /tmp/dracut.log | sort -u > /usr/lib/tilo/initramfs-modules.txt; printf '%s\n' ext4 xfs > /usr/lib/tilo/initramfs-omitted-drivers.txt; for m in crypt systemd-cryptsetup tpm2-tss plymouth tilo-rollback; do grep -qx "$m" /usr/lib/tilo/initramfs-modules.txt || { echo "dracut did not include the $m module; an encrypted root could not be opened" >&2; cat /usr/lib/tilo/initramfs-modules.txt >&2; exit 1; }; done; for m in network network-legacy network-manager nfs iscsi nvmf nbd fcoe fcoe-uefi nbde clevis clevis-pin-null clevis-pin-sss clevis-pin-tang clevis-pin-tpm2 crypt-ssh; do ! grep -qx "$m" /usr/lib/tilo/initramfs-modules.txt || { echo "unsupported initramfs module $m was included" >&2; exit 1; }; done; rm -f /tmp/dracut.log; rm -f /boot/vmlinuz-* /boot/initramfs-* /boot/System.map-* /boot/config-*; dnf clean all && ${FINALIZE_RPMDB}:sha256:20bb3e84235bb15c50f4703c47579af4a01731d8a97ec5945e5b055fb47abf17:sha256:00fb92f60e648d1142078df822e3348efdedab92e31e96a6730495dd188f0f35:sha256:e4c5c2c041a47342384b0e892041c1f46d92b75be80c25b1760fb565ba3bc037:sha256:0c3ffc241d33e4511af329319025683cd87ccb37b0b68ef472915812d278788d|clamp-mtime=1789753377 |
| |8 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_HARDWARE_PROFILE=lenovo-83ed TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY=99b2769737c88f780edf5d03d61dd8f1c3e727aa371f464d9fde973d86d104fd TILO_PUBLIC_TRUST_MANIFEST_SHA256=442c683287fc93f0dfbb99037dc5d885f3f8eaa8e3b01eadad7aff7b0deaede3 TILO_PUBLIC_TRUST_MODE=development TILO_TARGET_IMGREF=code.podesta.ai/qos/tilo-development:provisional-ca33fae89a24-aarch64 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c owner="$(rpm -qf /usr/bin/basename 2>&1 || true)" && case "$owner" in coreutils-*) echo "rpmdb file index intact: /usr/bin/basename -> $owner" ;; *) echo "rpmdb file index is corrupt: /usr/bin/basename -> $owner" >&2; exit 1 ;; esac && rpm --verifydb && rm -f /usr/lib/sysimage/rpm/rpmdb.sqlite-wal /usr/lib/sysimage/rpm/rpmdb.sqlite-shm && ( test ! -e /usr/lib/sysimage/rpm/rpmdb.sqlite-wal || { echo "rpmdb.sqlite-wal is in the image; see FINALIZE_RPMDB" >&2; exit 1; } ) && ( test ! -e /usr/lib/sysimage/rpm/rpmdb.sqlite-shm || { echo "rpmdb.sqlite-shm is in the image; see FINALIZE_RPMDB" >&2; exit 1; } )|clamp-mtime=1789753377 |
| COPY file:dedadef62134f7dd218ca1e3031b37bcd6bddc3434920a5360e651cc02a1d942 in /usr/libexec/tilo/boot-chain-test.sh |clamp-mtime=1789753377 |
| COPY file:20d431cfe1c7bb7f4af335791ea4f52793295e65d582791dc47aa2664a19fef4 in /usr/libexec/tilo/boot-performance-gate.sh |clamp-mtime=1789753377 |
| |8 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_HARDWARE_PROFILE=lenovo-83ed TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY=99b2769737c88f780edf5d03d61dd8f1c3e727aa371f464d9fde973d86d104fd TILO_PUBLIC_TRUST_MANIFEST_SHA256=442c683287fc93f0dfbb99037dc5d885f3f8eaa8e3b01eadad7aff7b0deaede3 TILO_PUBLIC_TRUST_MODE=development TILO_TARGET_IMGREF=code.podesta.ai/qos/tilo-development:provisional-ca33fae89a24-aarch64 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c chmod 0755 /usr/libexec/tilo/boot-chain-test.sh /usr/libexec/tilo/boot-performance-gate.sh && OS_ROOT=/ bash /usr/libexec/tilo/boot-chain-test.sh|clamp-mtime=1789753377 |
| ARG FINALIZE_RPMDB TILO_GENERATION TILO_HARDWARE_PROFILE TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY TILO_PUBLIC_TRUST_MANIFEST_SHA256 TILO_PUBLIC_TRUST_MODE TILO_TARGET_IMGREF TILO_WINDOWS_ARCH|clamp-mtime=1789753377 |
| |8 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_HARDWARE_PROFILE=lenovo-83ed TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY=99b2769737c88f780edf5d03d61dd8f1c3e727aa371f464d9fde973d86d104fd TILO_PUBLIC_TRUST_MANIFEST_SHA256=442c683287fc93f0dfbb99037dc5d885f3f8eaa8e3b01eadad7aff7b0deaede3 TILO_PUBLIC_TRUST_MODE=development TILO_TARGET_IMGREF=code.podesta.ai/qos/tilo-development:provisional-ca33fae89a24-aarch64 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c if ! printf '%s\n' "$TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY" | grep -Eq '^[0-9a-fA-F]{64}$' || [ "$TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY" = 0000000000000000000000000000000000000000000000000000000000000000 ]; then echo "TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY must be a non-placeholder 32-byte hex key" >&2; exit 1; fi && install -d -m 0755 /usr/share/tilo/trust && printf '%s\n' "$TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY" > /usr/share/tilo/trust/tilo-main-registry-owner.pub && chmod 0644 /usr/share/tilo/trust/tilo-main-registry-owner.pub|clamp-mtime=1789753377 |
| COPY file:254c4ae1f6428e729a27be74cf03612738a563e9af694e5df103800098c368ec in /usr/libexec/tilo/collaborative-files-image-contract.sh |clamp-mtime=1789753377 |
| COPY file:15e42d03d29239b7faa05d502fe893f1f29ba191ec1b488300ada1a567e4736f in /usr/libexec/tilo/files-atspi-smoke.sh |clamp-mtime=1789753377 |
| COPY file:d62a73fe7c521696e375203911f3c9aa183da074562b865455979d8635c2c8ef in /usr/libexec/tilo/native-atspi-smoke.sh |clamp-mtime=1789753377 |
| |8 FINALIZE_RPMDB=/usr/libexec/tilo/finalize-rpmdb TILO_GENERATION=1 TILO_HARDWARE_PROFILE=lenovo-83ed TILO_OFFICIAL_REGISTRY_OWNER_PUBKEY=99b2769737c88f780edf5d03d61dd8f1c3e727aa371f464d9fde973d86d104fd TILO_PUBLIC_TRUST_MANIFEST_SHA256=442c683287fc93f0dfbb99037dc5d885f3f8eaa8e3b01eadad7aff7b0deaede3 TILO_PUBLIC_TRUST_MODE=development TILO_TARGET_IMGREF=code.podesta.ai/qos/tilo-development:provisional-ca33fae89a24-aarch64 TILO_WINDOWS_ARCH=aarch64 /bin/sh -c chmod 0755 /usr/libexec/tilo/collaborative-files-image-contract.sh /usr/libexec/tilo/files-atspi-smoke.sh /usr/libexec/tilo/native-atspi-smoke.sh && OS_ROOT=/ /usr/libexec/tilo/collaborative-files-image-contract.sh image|clamp-mtime=1789753377 |
| COPY file:7d1205d4066632989deaaec0b004cc54f7a5fec3286d3474c240584b6548fbc1 in /usr/libexec/tilo/luks-enrolment-test.sh |clamp-mtime=1789753377 |
Labels
| Key | Value |
|---|---|
| containers.bootc | 1 |
| org.opencontainers.image.version | 44.20260731.0 |
| ostree.bootable | true |
| ostree.commit | 812e11ff953af307485ca278bf3de893e32a7d7ac8cc42bd806ff42f2165ed88 |
| ostree.final-diffid | sha256:12787d84fa137cd5649a9005efe98ec9d05ea46245fdc50aecb7dd007f2035b1 |
| ostree.linux | 7.1.5-201.fc44.aarch64 |
| rpmostree.inputhash | 3c4a06be480b6b712f6499aa828ae2ce89c6cf1524f790cf614b61a895d810f5 |
Details
2026-09-19 07:01:52 +00:00
Versions (11)
View all
Container
2
OCI / Docker
linux/arm64
5.3 GiB