File groups.yml of Package 000package-groups

# 'OUTPUT' is not a group, this defines the entry point for the solver.
# there is an entry for every group file that needs to be written out.
# the name of it needs to exist as package group as well and the solver
# will take the instructions in this group and the included ones
# (that's why sle_minimal is included to get minimal instructions)
# and solve the packages in it (one by one next to 'silents' and 'locks')
# and then at the end remove packages in the 'excludes'.
# excludes are not package groups but solved module groups
OUTPUT:
  - suse_microos:
      recommends: false
      includes:
      - filesystems
      - supplements
      - kernel
      - base
    
  - suse_microos_extras:
      default-support: unsupported
      recommends: false
      includes:
      - base: support
      excludes:
      - suse_microos

suse_microos:
    - Leap-Micro-release
    - openSUSE-repos-LeapMicro # code-o-o#leap/features/91
    - systemd-presets-branding-SMO
    # don't interfere with crony
    - ntp: [locked]
    - distribution-logos-SLE: [locked]
    - release-notes-sle-micro: [locked]
    - raspberrypi-firmware-extra: [aarch64]  # bsc 1130015
    - raspberrypi-firmware-extra-pi4: [aarch64]  # bsc 1130015
    - raspberrypi-firmware-config-camera: [aarch64]  # bsc 1130015
    - u-boot-rpiarm64: [aarch64]  # bsc 1130015, jsc SLE-7276 / bsc 1164080
    - u-boot-rpiarm64-doc: [aarch64]  # jsc SLE-7276 / bsc 1164080
    # needed for PowerPC
    - opal-utils: [ppc64le] # bsc#1206842
    - servicelog: [ppc64le] # bsc#1206842
    - libservicelog: [ppc64le] # bsc#1206842
    - ppc64-diag: [ppc64le] # bsc#1206842
    - lsvpd: [ppc64le] # bsc#1206842
    - ServiceReport: [ppc64le] # bsc#1206842
    - secvarctl: [ppc64le] # bsc#1206842
    - podman-docker # needed for docker compatibility
    - docker-compose
    - nerdctl
    - salt-master
    - salt-minion
    - openssh-server-config-rootlogin
    - cockpit-machines
    - cockpit-podman
    - xauth # needed for remote GUI
    # needed for baremetal FDE
    - libtss2-tcti-device0
      # not available yet on ppc64le nor s390x
    - fde-tools: [x86_64,aarch64]
    # needed for virtualization deployement tool
    - python3-pvirsh
    # needed for confidential computing
    - libvirt-client-qemu
    - sevctl
    # allow to debug selinux
    - setroubleshoot-server
    # needed for managing VM
    - python311-lxml
    - cracklib-dict-small
    - systemd-experimental
    - accountsservice
    - systemd-portable
    - patch
    - skopeo
    - gio-branding-openSUSE
    - libgio-2_0-0
    - libglib-2_0-0

base:
    # silent means it's always added for solving too
    #    - Leap-Micro-release: [silent]
    - Leap-Micro-release
    - patterns-base-base
    - patterns-base-transactional
    - patterns-micro-defaults
    - patterns-base-hardware
    - patterns-container-runtime_podman
    - patterns-container-runtime_docker
    - patterns-base-salt_minion
    - patterns-base-kvm_host
    - patterns-base-selinux
    - patterns-base-cockpit
    - patterns-base-sssd-ldap #  jsc#SMO-54
    - grub2 #  Initial package for SLE 15
    # No elemental for micro
    #- elemental: [aarch64,x86_64] #jsc#SMO-303; this package requires everything else, pattern not needed (it caused some confusions)
    - grub2-branding-openSUSE: [x86_64,aarch64,ppc64le] #  Initial package
    - grub2-i386-pc: [x86_64] #  TBD Initial package for SLE 15
    - grub2-snapper-plugin #  Initial package for SLE 15
#    - grub2-systemd-sleep-plugin #  Initial package for SLE 15
    - grub2-x86_64-efi: [x86_64] #  Initial package for SLE 15
    - grub2-s390x-emu: [s390x] #  dependency:grub2
    - grub2-powerpc-ieee1275: [ppc64le] #  dependency:grub2
    - grub2-arm64-efi: [aarch64]  #  dependency:shim
    - grub2-x86_64-xen: [x86_64] #  Initial package for SLE 15
    - shim: [x86_64,aarch64]
    - firewalld
    - suseconnect-ng
    - systemd-default-settings-branding-SLE-Micro
    - glibc-locale-base # (bsc#1176114)
    - openSUSE-build-key # bsc#1187469
    - distribution-logos-openSUSE-LeapMicro
    - distribution-logos-openSUSE-Leap: [locked]
    - openSUSE-repos-LeapMicro # code-o-o#leap/features/91
    - system-group-wheel # bsc#1214132
    - system-user-mail # bsc#1214132; TODO: check whether to add these to a pattern instead
    - system-user-bin # bsc#1214132
    - system-user-uuidd # bsc#1214132
    - lzop
    - libzypp
    - zypper

staging:
    -  staging-build-key

kernel:
    - kernel-default
    - kernel-default-base: [x86_64,aarch64]
    - kernel-default-extra: [x86_64,aarch64]
    - kernel-rt: [x86_64]
    # TODO: yast needs this. confirm where it comes from any why it's not in
    # the base pattern.
    - kexec-tools
    # installed in uefi mode
    - mokutil: [x86_64,aarch64]

filesystems:
    - dosfstools
    - e2fsprogs
    - btrfsprogs
    - squashfs
    - xfsprogs

supplements:
    - velociraptor-client
    - kernel-firmware-all
    - bluez-firmware
    - ipw-firmware
    - open-vm-tools: [x86_64]
    - hyper-v: [x86_64,aarch64]
    - ucode-amd: [x86_64]
    - ucode-intel: [x86_64]
    - bcache-tools
    - cryptsetup
    - glibc-locale
    - iscsiuio
    - lvm2
    - multipath-tools
    - nvme-cli
    - open-iscsi
    - nfs-client
    - less
    - wpa_supplicant
    - dracut-kiwi-lib
    - dracut-kiwi-oem-repart
    - gptfdisk
    - growpart
    - growpart-generator
    - ignition
    - combustion
    - mdadm
    - attr
    - docker
    - runc
      # MERGED INTO DOCKER    - docker-libnetwork
    - release-notes-leap-micro
    - policycoreutils-python-utils # bsc#1183165
    - fdo-client # jsc#SLE-22946
    - fdo-client-devel # jsc#SLE-22946
    - selinux-policy-devel # requested by security team
    - policycoreutils-devel # jsc#SMO-48, requested by security team
    - sysstat
    - numactl
    - numad
    - systemd-journal-remote #jsc#SMO-52
    - ethtool # jsc#SMO-55
    - patterns-base-fips # FIPS
    - aide # STIG
    - audit-audispd-plugins # STIG
    - pam_pkcs11 # STIG
    - mozilla-nss-tools # STIG
    - pcsc-ccid # STIG
    - pcsc-lite # STIG
    - pcsc-tools # STIG
    - opensc # STIG
    - coolkey # STIG
    - cifs-utils # jsc#SMO-43
    - cpupower # jsc#SMO-43
    - jq # jsc#SMO-43
    - socat # jsc#SMO-43
    - afterburn: [aarch64,x86_64] # jsc#SMO-69
    - afterburn-dracut: [aarch64,x86_64] # jsc#SMO-69
      # NOT FOUND    - rpm-ndb # jsc#SMO-69
# removed due to bsc#268591
#    - amazon-ssm-agent: [x86_64] # jsc#SMO-38
#    - amazon-ecs-init: [x86_64] # jsc#SMO-38
    - aws-cli: [x86_64] # bsc#1197611
#    - yast2-schema-micro # jsc#SLE-18820
    - ca-certificates-mozilla ##### SL Micro for Rancher begin
    - bash-completion
    - conntrack-tools
    - hdparm
    - lshw
    - lsscsi
    - pciutils
    - qemu-guest-agent
    - strace
    - dracut-kiwi-oem-dump
    - avahi
    - libavahi-core7
    - libdaemon0
    - nss-mdns
      # NOT FOUND    - pciutils-ids
    - syslinux: [x86_64]
    - sysvinit-tools # left-over of python-azure-agent dependenies, kept to be safe
    - zstd ##### SL Micro for Rancher end
    - qemu-hw-usb-redirect # jsc#SMO-78
    - qemu-hw-display-virtio-vga # jsc#SMO-78
    - qemu-hw-display-virtio-gpu # jsc#SMO-78
    - qemu-hw-display-qxl # jsc#SMO-78
    - tukitd # to be later required by the cockpit transactional-update module
    - virt-install # bsc#1196887
    - qemu-chardev-spice # jsc#SMO-78 (also needed for cockpit-machine / virt-install)
    - python311-tornado # jsc#SMO-82
    - python311-simplejson # jsc#SMO-82
    - python311-pycurl # jsc#SMO-82
    - raspberrypi-firmware: [aarch64] # jsc#SMO-105
    - raspberrypi-firmware-config: [aarch64] # jsc#SMO-105
    - raspberrypi-firmware-dt: [aarch64] # jsc#SMO-105
    - u-boot-rpiarm64: [aarch64] # jsc#SMO-105
    - bcm43xx-firmware: [aarch64] # jsc#SMO-105
    - wireless-tools # bsc#1199084 
    - jeos-firstboot # jsc#SMO-88
    - NetworkManager # jsc#SMO-84
    - ModemManager # jsc#SMO-84
    - NetworkManager-cloud-setup # jsc#SMO-200, bsc#1204549
    - NetworkManager-tui # jsc#SMO-200
    - NetworkManager-wwan # jsc#SMO-200, bsc#1205529
    - NetworkManager-bluetooth # jsc#SMO-200
    - NetworkManager-pppoe # jsc#SMO-200
    - cockpit-networkmanager # listed explicitly due to pattern's depependency being conditional 
    - cni-plugin-dnsname # jsc#SMO-63
    - restorecond # jsc#SMO-127
    - cloud-init # jsc#SMO-305
    - regionServiceClientConfigEC2: [x86_64,aarch64] # jsc#SMO-110
    - regionServiceClientConfigGCE: [x86_64,aarch64]  # jsc#SMO-110
    - regionServiceClientConfigAzure: [x86_64,aarch64]  # jsc#SMO-110
    - cloud-regionsrv-client: [x86_64,aarch64]  # jsc#SMO-110
# FIXME when migrated away from netconfig
#    - cloud-netconfig-gce: [x86_64,aarch64] # jsc#SMO-110
#    - cloud-netconfig-ec2: [x86_64,aarch64] # jsc#SMO-110
#    - cloud-netconfig-azure: [x86_64,aarch64] # jsc#SMO-110
    - cloud-regionsrv-client-addon-azure: [x86_64,aarch64] # jsc#SMO-110
    - cloud-regionsrv-client-plugin-azure: [x86_64,aarch64] # jsc#SMO-110
    - cloud-regionsrv-client-plugin-ec2: [x86_64,aarch64] # jsc#SMO-110
    - cloud-regionsrv-client-plugin-gce: [x86_64,aarch64] # jsc#SMO-110
    - kubevirt-virtctl: [x86_64] # jsc#SMO-140
    - kubevirt-manifests: [x86_64] # jsc#SMO-140
    - containerized-data-importer-manifests: [x86_64] # jsc#SMO-140
    - haproxy # jsc#SMO-124
    - keepalived # jsc#SMO-124
    - drbd # jsc#SMO-124
    - drbd-utils # jsc#SMO-124
    - drbd-kmp-default # jsc#SMO-124
    - canutils # jsc#SMO-149
    - supportutils-plugin-suse-public-cloud  # Added based on check between Micro 5.5 and ALP, jsc#SMO-216
    - git  # Added based on check between Micro 5.5 and ALP, jsc#SMO-247
    - fwupd # jsc#SMO-213
    - fwupd-efi #  jsc#SMO-213
    - liblttng-ctl0  # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
    - liblttng-ust1  # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
    - liblttng-ust-ctl5  # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
    - liblttng-ust-python-agent1  # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
    - lttng-modules  # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
    - lttng-tools  # Added based on check between Micro 5.5 and ALP, jsc#SMO-267
    - nvidia-open-driver-G06-signed-kmp-default   # Added based on check between Micro 5.5 and ALP, jsc#SMO-274
    - kernel-firmware-nvidia-gspx-G06  # Added based on check between Micro 5.5 and ALP, jsc#SMO-274
    - wireless-regdb   # Added based on check between Micro 5.5 and ALP, bsc#1215153
    - netcat-openbsd # bsc#1202554
    - linuxptp # jsc#SMO-176
    - rust-keylime # jsc#SMO-179
    - traceroute # from Micro for Rancher
    - tuned # jsc#SMO-189
    - rt-tests # jsc#SMO-206
    - tpm-tools # requests by partners
    - trousers
    - mcelog: [x86_64]
    - usbutils
    - ipmitool
    - acpica: [x86_64,aarch64]
      #* tboot: [x86_64] - not yet in the code base
    - ledmon # jsc#PED-3975
    - accel-config # jsc#PED-4562
    - dpdk # jsc#PED-7145
    - openvswitch # jsc#PED-7145
      # end of requests by partners
    - libatomic1 # needed by SAP
    - man # bsc#1218539
    - podman-remote # bsc#1224050

suse_microos_extras:
  - tboot # jsc#PED-4562
  - mcelog # jsc#PED-4562
  - gcc # jsc#PED-4562
  - make # jsc#PED-4562
  - automake # jsc#PED-4562
  - autoconf # jsc#PED-4562
  - systemd-devel # jsc#PED-4562
  - stress-ng # jsc#PED-4562
  - bonnie # jsc#PED-7056
  - fwts # jsc#PED-7056
  - iperf # jsc#PED-7056
  - nmap # jsc#PED-7056
  - crash # bsc#1208935
  - kubevirt-tests # bsc#1219636
  - libjson-c-devel # bsc#1214638


# packages in here are blocked from required on medium by means of
# telling the solver to forbid using them. A lighter form is to
# add packages to unneeded.yml - this just protocols the decision
# not to put them in any module *at this point*.
UNWANTED:
  - systemd-presets-branding-SLE
  - systemd-default-settings-branding-SLE
  - distribution-logos-SLE
  # distribution-logos-openSUSE-LeapMicro is preferred
  - distribution-logos-openSUSE-Leap
  - registries-conf-suse # we want -default instead. -suse doesn't have openSUSE registry
  - release-notes-sle-micro
  - grub2-branding-SLE
  - gio-branding-SLE
  # systemd-presets-branding-ALP-transactional
  - systemd-presets-branding-Elemental
  # systemd-presets-branding-SLE-Micro
  - NetworkManager-branding-SLE
   
  - dummy-release
  - unified-installer-release
  - kubic-locale-archive (bsc#1176114)
  - busybox-findutils #bsc#1202331
  - busybox-grep
  - busybox-gzip
  - busybox-sed
  - busybox-util-linux
  - busybox-xz

  - os-update # not compatible with transactional-update
  - sysconfig-netconfig # SLE15 stuff

  # stuff below inherited from SLE15-SP2
  - chrony-pool-openSUSE # bsc#1156884 / jsc#SLE-11424
  - sendmail # fate#313023
  - ntfsprogs-extra # not safe
  - libfbclient-devel # jsc#SLE-11695
  - libfbclient2 # jsc#SLE-11695

  - reiserfs # FATE#323394

  # glusterfs packages, not wanted by PM
  - libglusterfs0

  # upstream
  - gdm-branding-upstream
  - gfxboot-branding-upstream
  - gio-branding-upstream
  - gnome-menus-branding-upstream
  - grub2-branding-upstream
  - gtk2-branding-upstream
  - gtk3-branding-upstream
  - NetworkManager-branding-upstream
  - PackageKit-branding-upstream
  - MozillaFirefox-branding-upstream
  - icewm-config-upstream # bsc#1063272

  # unwanted JREs
  - java-1_7_0-bootstrap-headless
  - java-9-openjdk-headless

  - slecompliance # bsc#1158969

  - golang-github-prometheus-prometheus # rejected jsc#ECO-1659

  # dnf
  - PackageKit-backend-dnf # jsc#SLE-11804
  - hawkey-man # jsc#SLE-11804
  - libdnf-devel # jsc#SLE-11804
  - libdnf2 # jsc#SLE-11804
  - libmodulemd-devel # jsc#SLE-11804
  - libmodulemd2 # jsc#SLE-11804
  - librepo-devel # jsc#SLE-11804
  - librepo0 # jsc#SLE-11804
  - libzck-devel # jsc#SLE-11804
  - modulemd-validator # jsc#SLE-11804
  - python3-hawkey # jsc#SLE-11804
  - python3-libdnf # jsc#SLE-11804
  - python3-libmodulemd # jsc#SLE-11804
  - python3-librepo # jsc#SLE-11804
  - typelib-1_0-Modulemd-2_0 # jsc#SLE-11804
  - zchunk # jsc#SLE-11804

openSUSE Build Service is sponsored by