veilor-org/veilor-os
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

ks: updates repo cost=500 vs base default 1000 — force latest selinux-policy + pcre2

Browse source
This commit is contained in:
veilor 2026-04-30 10:45:58 +01:00
parent 31c1af4aec
commit 10ee8d33e4
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
kickstart/veilor-os.ks
View file

@ -9,8 +9,9 @@
# file_contexts.bin, which fails chroot %triggerin against host's
# libselinux (built against pcre2 10.46). 43.7 in updates is rebuilt.
url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
repo --name=updates --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64" --install
repo --name=updates-testing --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f43&arch=x86_64" --cost=1500
# Updates cost=500 < base cost=1000 → dnf prefers updates (lower = higher priority).
# Pulls selinux-policy 43.7 + pcre2 10.47 (matched pair, no regex mismatch).
repo --name=updates --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64" --install --cost=500
# ── Locale / keyboard / time (template — adjust per build) ──
keyboard --xlayouts='us'
@ -62,6 +63,7 @@ grub2-efi-x64
shim-x64
efibootmgr
# core hardening tools
fail2ban
fail2ban-firewalld