File Leap-Micro.kiwi of Package Leap-Micro

<?xml version="1.0" encoding="utf-8"?>
<!-- OBS-Profiles: @BUILD_FLAVOR@ -->
<!-- OBS-Milestone: %current_milestone -->
<!-- OBS-BcntSyncTag: Leap-Micro -->
<image schemaversion="7.5" name="openSUSE-Leap-Micro" displayname="openSUSE Leap Micro">
    <description type="system">
        <author>openSUSE</author>
        <contact>crc@suse.com</contact>
        <specification>openSUSE Leap Micro</specification>
    </description>
    <profiles>
        <!-- Profiles used as dependencies of actual image profiles -->
        <!-- Flavors -->
        <profile name="full" description="openSUSE Leap Micro as KVM and Container host"/>
        <profile name="container-host" description="openSUSE Leap Micro as Container host"/>
        <profile name="ecs_anywhere" description="Amazon ECS Anywhere support"/>
        <!-- Platforms - support profiles -->
        <profile name="bootloader" description="Bootloader files for x86_64 and aarch64"/>
        <profile name="self_install" description="Self Installing ISO media"/>
        <!-- Platforms -->
        <profile name="x86" description="Raw disk for x86_64 - uEFI" arch="x86_64">
            <requires profile="bootloader"/>
        </profile>
        <profile name="x86-self_install" description="Raw disk for x86_64 - uEFI" arch="x86_64">
            <requires profile="bootloader"/>
        </profile>
        <!-- Images (flavor + platform) -->
        <profile name="Default" description="openSUSE Leap Micro with Podman and KVM as raw image with uEFI boot" arch="x86_64">
            <requires profile="full"/>
            <requires profile="x86"/>
        </profile>
        <profile name="Base" description="openSUSE Leap Micro with Podman as raw image with uEFI boot" arch="x86_64">
            <requires profile="container-host"/>
            <requires profile="x86"/>
        </profile>
        <profile name="Default-SelfInstall" description="openSUSE Leap Micro with Podman and KVM as raw image with uEFI boot - SelfInstall" arch="x86_64">
            <requires profile="full"/>
            <requires profile="x86-self_install"/>
            <requires profile="self_install"/>
        </profile>
        <profile name="Base-SelfInstall" description="openSUSE Leap Micro with Podman as raw image with uEFI boot - SelfInstall" arch="x86_64">
            <requires profile="container-host"/>
            <requires profile="x86-self_install"/>
            <requires profile="self_install"/>
        </profile>
    </profiles>

    <preferences profiles="x86-encrypted,x86-rt-encrypted">
        <version>6.1</version>
        <packagemanager>zypper</packagemanager>
        <bootsplash-theme>openSUSE</bootsplash-theme>
        <bootloader-theme>openSUSE</bootloader-theme>
        <rpm-excludedocs>true</rpm-excludedocs>
        <locale>en_US</locale>
        <type
            image="oem"
            initrd_system="dracut"
            filesystem="btrfs"
            firmware="uefi"
            kernelcmdline="console=ttyS0,115200 console=tty0 security=selinux selinux=1 quiet systemd.show_status=1 net.ifnames=0"
            bootpartition="false"
            bootkernel="custom"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="true"
            btrfs_quota_groups="true"
            luks_version="luks2"
            luks="1234"
	    luks_randomize="false"
	    luks_pbkdf="pbkdf2"
        >
            <luksformat>
                <option name="--cipher" value="aes-xts-plain64"/>
            </luksformat>
            <bootloader name="grub2" console="gfxterm" use_disk_password="true" />
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <!-- on tmpfs jsc#SMO-2                <volume name="tmp"/> -->
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/grub2/i386-pc"/>
                <volume name="boot/grub2/x86_64-efi" mountpoint="boot/grub2/x86_64-efi"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
            <size unit="G">4</size>
        </type>
    </preferences>
  
    <preferences profiles="x86,x86-rt">
        <version>6.1</version>
        <packagemanager>zypper</packagemanager>
        <bootsplash-theme>openSUSE</bootsplash-theme>
        <bootloader-theme>openSUSE</bootloader-theme>
        <rpm-excludedocs>true</rpm-excludedocs>
        <locale>en_US</locale>
        <type
            image="oem"
            initrd_system="dracut"
            filesystem="btrfs"
            firmware="uefi"
            kernelcmdline="console=ttyS0,115200 console=tty0 security=selinux selinux=1 quiet systemd.show_status=1 net.ifnames=0"
            bootpartition="false"
            bootkernel="custom"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="true"
            btrfs_quota_groups="true"
        >
    	    <bootloader name="grub2" console="gfxterm" timeout="3"/>
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <!-- on tmpfs jsc#SMO-2                <volume name="tmp"/> -->
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/grub2/i386-pc"/>
                <volume name="boot/grub2/x86_64-efi" mountpoint="boot/grub2/x86_64-efi"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
        </type>
    </preferences>

    <preferences profiles="x86-self_install,x86-rt-self_install">
        <version>6.1</version>
        <packagemanager>zypper</packagemanager>
        <bootsplash-theme>openSUSE</bootsplash-theme>
        <bootloader-theme>openSUSE</bootloader-theme>
        <rpm-excludedocs>true</rpm-excludedocs>
        <locale>en_US</locale>
        <type
            image="oem"
            initrd_system="dracut"
            installiso="true"
            installpxe="true"
            filesystem="btrfs"
            installboot="install"
            install_continue_on_timeout="false"
            firmware="uefi"
            kernelcmdline="console=ttyS0,115200 console=tty0 security=selinux selinux=1 quiet systemd.show_status=1 net.ifnames=0"
            bootpartition="false"
            bootkernel="custom"
            devicepersistency="by-uuid"
            btrfs_root_is_snapshot="true"
            btrfs_root_is_readonly_snapshot="true"
            btrfs_quota_groups="true"
        >
            <bootloader name="grub2" console="gfxterm" timeout="3" />
            <systemdisk>
                <volume name="home"/>
                <volume name="root"/>
                <!-- on tmpfs jsc#SMO-2                <volume name="tmp"/> -->
                <volume name="opt"/>
                <volume name="srv"/>
                <volume name="boot/grub2/i386-pc"/>
                <volume name="boot/grub2/x86_64-efi" mountpoint="boot/grub2/x86_64-efi"/>
                <volume name="boot/writable"/>
                <volume name="usr/local"/>
                <volume name="var" copy_on_write="false"/>
            </systemdisk>
        </type>
    </preferences>

   <repository type="rpm-md" >
        <source path='obsrepositories:/'/>
    </repository>

    <packages type="image" profiles="full">
        <namedCollection name="base_transactional"/>
        <package name="patterns-base-transactional"/>
        <namedCollection name="salt_minion"/>
	<package name="patterns-base-salt_minion"/>
        <namedCollection name="kvm_host"/>
	<package name="patterns-base-kvm_host"/>
	<package name="lzop"/>
        <namedCollection name="container_runtime_podman"/>
        <package name="patterns-container-runtime_podman"/> 
        <namedCollection name="cockpit"/>
        <package name="patterns-base-cockpit"/>
        <namedCollection name="selinux"/>
        <package name="patterns-base-selinux"/>
        <package name="suseconnect-ng"/>
        <package name="Leap-Micro-release"/>
        <package name="grub2-branding-openSUSE" arch="x86_64,aarch64"/>
        <package name="systemd-default-settings-branding-SLE-Micro"/>
        <package name="firewalld"/>
        <package name="wpa_supplicant" arch="x86_64,aarch64"/>
	<package name="libpwquality-tools"/>
    </packages>

    <packages type="image" profiles="x86-encrypted,x86-rt-encrypted">
        <!-- full disk encryption stuff -->
        <package name="device-mapper"/>
        <package name="cryptsetup"/>
        <package name="system-user-tss"/>
        <package name="libtss2-fapi1"/>
        <package name="libtss2-tcti-device0"/>
        <package name="tpm2.0-tools"/>
        <package name="tpm2-0-tss"/>
        <package name="fde-firstboot"/>
    </packages>

    <packages type="image" profiles="container-host">
        <namedCollection name="base_transactional"/>
        <package name="patterns-base-transactional"/>
        <namedCollection name="container_runtime_podman"/>
        <package name="patterns-container-runtime_podman"/>
        <namedCollection name="selinux"/>
        <package name="patterns-base-selinux"/>
        <package name="suseconnect-ng"/>
        <package name="Leap-Micro-release"/>
        <package name="grub2-branding-openSUSE" arch="x86_64,aarch64"/>
        <package name="systemd-default-settings-branding-SLE-Micro"/>
        <package name="firewalld"/>
	<package name="libpwquality-tools"/>
    </packages>

    <packages type="image" profiles="ecs_anywhere">
        <package name="amazon-ssm-agent"/>
        <package name="amazon-ecs-init"/>
        <package name="aws-cli"/>
        <package name="docker"/>
    </packages>

    <!-- Ignition / Combustion everywhere, cloud-init only in selected images
    <packages type="image" profiles="aarch64-self_install,rpi,s390-dasd,s390-fba,s390-kvm,x86,x86-encrypted,x86-legacy,x86-rt,x86-rt-encrypted,x86-rt-self_install,x86-self_install"> -->
    <packages type="image">
        <package name="ignition"/>
        <package name="combustion &gt;= 1.2"/> <!-- New firstboot mechanism -->
        <package name="openSUSE-repos"/> <!-- New default repo definitions for LeapMicro 6.X -->
        <package name="opensuse-migration-tool"/> <!-- For easier upgrades in between releases -->
	<package name="jeos-firstboot"/>
    </packages>

    <packages type="image" profiles="x86-qcow,x86-vmware,x86-vagrant,aarch64-qcow">
        <package name="cloud-init"/>
        <package name="cloud-init-config-suse"/>
    </packages>

    <packages type="image">
        <namedCollection name="base_transactional"/>
        <package name="patterns-base-transactional"/>
        <namedCollection name="hardware"/>
        <package name="patterns-base-hardware"/>
        <package name="grub2"/>
        <package name="glibc-locale-base"/>
        <package name="ca-certificates"/>
	<package name="Leap-Micro-release"/>
        <package name="systemd-default-settings-branding-SLE-Micro"/>
        <package name="firewalld"/>
	<package name="NetworkManager-tui"/>
        <package name="growpart-generator"/>
        <package name="openSUSE-build-key"/>
        <!-- for debugging -->
        <package name="less"/>
        <package name="vim-small"/>

        <namedCollection name="micro_defaults"/>
        <package name="patterns-micro-defaults"/>
        <package name="NetworkManager"/>
        <package name="NetworkManager-branding-openSUSE"/>
	<package name="ModemManager"/>
	<!-- FIXME does not build without control file which is obsolete
	<package name="live-add-yast-repos"/> -->
	<package name="parted"/> <!-- seems missing to deploy the image -->
    </packages>

    <packages type="image" profiles="bootloader">
        <package name="grub2-i386-pc" arch="x86_64"/>
        <package name="grub2-x86_64-efi" arch="x86_64"/>
        <package name="grub2-arm64-efi" arch="aarch64"/>
        <package name="grub2-s390x-emu" arch="s390x"/>
        <package name="grub2-powerpc-ieee1275" arch="ppc64le"/>
        <package name="grub2-branding-openSUSE" bootinclude="true" arch="x86_64,aarch64,ppc64le"/>
        <package name="grub2-snapper-plugin"/>
        <package name="shim" arch="x86_64,aarch64"/>
	<package name="mokutil" arch="x86_64,aarch64"/>
	<!-- obsoleted by kiwi-settings
	    <package name="kpartx" arch="s390x"/>--> <!-- previous releases picked it always, now kiwi picks partx instead -->
    </packages>
    <!-- rpi kernel-default-base does not provide all necessary drivers -->
    <packages type="image" profiles="rpi,aarch64-self_install,x86,x86-encrypted,x86-legacy,x86-self_install,x86-vmware,x86-vagrant,x86-qcow,aarch64-qcow,s390-kvm,s390-dasd,s390-fba,s390-fcp,ppc64le-512ss,ppc64le-4096ss,ppc64le-512ss-self_install,ppc64le-4096ss-self_install">
        <package name="kernel-default"/>
        <package name="kernel-firmware-all"/>
    </packages>
    <packages type="image" profiles="x86-rt,x86-rt-self_install,x86-rt-encrypted,aarch64-rt,aarch64-rt-self_install">
        <package name="kernel-rt"/>
        <package name="kernel-firmware-all"/>
	<!-- FIXME intentionally removed from ALP code stream
        <package name="cpuset"/> -->
    </packages>

    <!-- FCP is usually used multipathed. -->
    <packages type="image" profiles="s390-fcp">
        <package name="multipath-tools"/>
    </packages>
    <packages type="image" profiles="x86,x86-encrypted,x86-rt-encrypted,x86-self_install,x86-legacy,x86-vmware,x86-vagrant,x86-rt,x86-rt-self_install,x86-qcow,aarch64-qcow,rpi,aarch64-self_install,aarch64-rt,aarch64-rt-self_install,ppc64le-512ss,ppc64le-4096ss,ppc64le-512ss-self_install,ppc64le-4096ss-self_install">
        <package name="dracut-kiwi-oem-repart"/>
        <package name="dracut-kiwi-oem-dump"/>
    </packages>
    <packages type="image" profiles="rpi,aarch64-self_install,aarch64-rt,aarch64-rt-self_install">
        <package name="raspberrypi-firmware" arch="aarch64"/>
        <package name="raspberrypi-firmware-config" arch="aarch64"/>
        <package name="raspberrypi-firmware-dt" arch="aarch64"/>
        <package name="u-boot-rpiarm64" arch="aarch64"/>
        <package name="dracut-kiwi-oem-repart"/>
        <package name="bcm43xx-firmware"/>
        <package name="wireless-regdb"/>
        <package name="wireless-tools"/>
        <package name="wpa_supplicant"/>
        <package name="grub2-arm64-efi"/>
    </packages>
    <packages type="bootstrap">
        <package name="filesystem"/>
    </packages>

    <!-- bsc#1221936 -->
    <packages type="image" profiles="x86-vmware">
        <package name="open-vm-tools"/>
    </packages>

    <packages type="image" profiles="x86-vagrant">
        <package name="nfs-client"/>
    </packages>

    <!-- bsc#1221727-->
    <packages type="image" profiles="x86-qcow,aarch64-qcow">
        <package name="qemu-guest-agent"/>
    </packages>

    <!-- jsc#PED-8599 -->
    <packages type="image" profiles="Base,Base-encrypted,Base-RT,Base-RT-encrypted,Base-fba,Base-dasd,Base-fcp,Base-512,Base-4096,Default,Default-encrypted,Default-fba,Default-dasd,Default-fcp,Default-512,Default-4096">
        <package name="usbguard"/>
    </packages>

    <!-- jsc#PED-8788 -->
    <packages type="image" profiles="Base-RT,Base-RT-encrypted,x86-rt-encrypted,x86-rt,x86-rt-self_install,aarch64-rt,aarch64-rt-self_install">
        <package name="stalld"/>
    </packages>
</image>
openSUSE Build Service is sponsored by