ks: hardcode releasever=43, add --install on updates repo, add updates-testing — base ships outdated selinux-policy

This commit is contained in:
veilor 2026-04-30 10:07:58 +01:00
parent e965b148f5
commit 31c1af4aec

View file

@ -3,8 +3,14 @@
# Build with livemedia-creator inside build/Containerfile. # Build with livemedia-creator inside build/Containerfile.
# ── Install source ── # ── Install source ──
url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch" # Hard-code version (not $releasever) because lorax doesn't expand
repo --name=updates --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch" # inside kickstart `url`/`repo` directives. Updates repo critical:
# base Fedora 43 ships selinux-policy 42.12 with pcre2-10.47-built
# file_contexts.bin, which fails chroot %triggerin against host's
# libselinux (built against pcre2 10.46). 43.7 in updates is rebuilt.
url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
repo --name=updates --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f43&arch=x86_64" --install
repo --name=updates-testing --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f43&arch=x86_64" --cost=1500
# ── Locale / keyboard / time (template — adjust per build) ── # ── Locale / keyboard / time (template — adjust per build) ──
keyboard --xlayouts='us' keyboard --xlayouts='us'