Fix/image hardening #8

2026-09-23T17:09:45Z

lukas commented

2026-09-23 17:09:45 +00:00

Sounds good to me

lukas added 3 commits 2026-09-23 17:09:45 +00:00

ci: build images only on release tags, not on every push to main 41eb18cc70

A full build of both editions takes ~25 min on the fedora:host runner
(run 237: 10:46-11:10), too costly to repeat on every push to main.
build-image.yaml now triggers only on v*.*.* tags; the tag path already
publishes the image and kickstart as a release, so the main-only
upload-artifact step is dropped. Recipes are still linted and validated
on every push by ci.yml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

core/locale: set the console keymap too (--vckeymap=ch-fr) 6931039809

Only --xlayouts was set, so images got no /etc/vconsole.conf and the text
console used a US keymap. On the headless edition that is the login
prompt: a password typed in ch-fr during Initial Setup did not match
what the US-keymap tty login produced. Found testing the
phyllomeos-headless image from CI run 237 under wonder-vm.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

core/network: generic default hostname instead of phyllome-alpha

ci / cook (push) Successful in 10s

Details

ci / cook (pull_request) Successful in 9s

Details

c611bbf2c2

phyllome-alpha is the name of one specific deployed machine; baking it
into every image gives each new install a name that collides with it on
the LAN. Default to a generic 'phyllomeos', renamed per machine after
install.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

lukas merged commit 6d521930f4 into main

2026-09-23 17:10:08 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: roots/phyllomeos#8