From 5716e37f7da8bfe5288bfff728a4f2235ab32db7 Mon Sep 17 00:00:00 2001 From: veilor-org Date: Tue, 5 May 2026 02:52:22 +0100 Subject: [PATCH] v0.5.28 (cont): drop updates repo from generated install ks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Anaconda's transaction died at "Configuring man-db.x86_64" in both v0.5.26 and v0.5.27 VM tests, reliably, days apart, against a freshly populated package cache. Same failure pattern, same package, with nothing in the visible error other than "The transaction process has ended with errors..". Pattern matches the same Fedora `updates` repo issue that the CI build kickstart already worked around by stripping the `updates` line entirely (`.github/workflows/build-iso.yml` line ~109). The installer-generated kickstart was adding the line back and re-introducing the bug for every user install. This commit aligns the install-time ks with the build-time ks: only the base `releases` repo is consumed by anaconda. Users who want updates run `dnf upgrade` post-install (or the v0.6 `veilor-update` wrapper). Trade-off: first-boot package versions are frozen to the Fedora 43 release date instead of including post-release updates. Acceptable — the alternative is "install reliably fails" which makes any freshness conversation moot. Verified locally: `bash -n` passes, ks template still well-formed. End-to-end re-validation goes through the next CI ISO + VM test run. --- overlay/usr/local/bin/veilor-installer | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/overlay/usr/local/bin/veilor-installer b/overlay/usr/local/bin/veilor-installer index 770a364..ddbe238 100644 --- a/overlay/usr/local/bin/veilor-installer +++ b/overlay/usr/local/bin/veilor-installer @@ -368,7 +368,17 @@ generate_ks() { # DO NOT commit this file — secrets inline. url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64" repo --name=fedora --baseurl="https://download.fedoraproject.org/pub/fedora/linux/releases/43/Everything/x86_64/os/" --install -repo --name=updates --baseurl="https://download.fedoraproject.org/pub/fedora/linux/updates/43/Everything/x86_64/" --install +# `updates` repo intentionally NOT added. Fedora's update stream pushes +# package versions whose %posttrans scriptlets sometimes fail under +# anaconda's `--cmdline` mode — most reliably reproduced as `man-db` +# failing during "Configuring man-db.x86_64", which dumps the whole +# transaction with no recoverable error message and prints "An error +# occurred during the transaction: The transaction process has ended +# with errors..". Reproduced in v0.5.26 + v0.5.27 VM tests against +# fresh installs days apart, so it is not a Fedora-mirrors-down blip. +# CI build kickstart already strips this line for the same reason +# (build-iso.yml line ~109). Users who want to update post-install run +# `dnf upgrade` or the v0.6 `veilor-update` wrapper. keyboard --xlayouts='us' lang __LOCALE__