Fix/image hardening #8

Merged
lukas merged 3 commits from fix/image-hardening into main 2026-09-23 17:10:08 +00:00
3 Commits
Author SHA1 Message Date
Lukas GreveandClaude Opus 5.5 c611bbf2c2 core/network: generic default hostname instead of phyllome-alpha
ci / cook (push) Successful in 10s
ci / cook (pull_request) Successful in 9s
phyllome-alpha is the name of one specific deployed machine; baking it
into every image gives each new install a name that collides with it on
the LAN. Default to a generic 'phyllomeos', renamed per machine after
install.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-23 13:43:00 +02:00
Lukas GreveandClaude Opus 5.5 6931039809 core/locale: set the console keymap too (--vckeymap=ch-fr)
Only --xlayouts was set, so images got no /etc/vconsole.conf and the text
console used a US keymap. On the headless edition that is the login
prompt: a password typed in ch-fr during Initial Setup did not match
what the US-keymap tty login produced. Found testing the
phyllomeos-headless image from CI run 237 under wonder-vm.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-23 13:43:00 +02:00
Lukas GreveandClaude Opus 5.5 41eb18cc70 ci: build images only on release tags, not on every push to main
A full build of both editions takes ~25 min on the fedora:host runner
(run 237: 10:46-11:10), too costly to repeat on every push to main.
build-image.yaml now triggers only on v*.*.* tags; the tag path already
publishes the image and kickstart as a release, so the main-only
upload-artifact step is dropped. Recipes are still linted and validated
on every push by ci.yml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-23 13:42:39 +02:00