@@ -106,13 +106,23 @@ sed "s|REPLACE_COPR_PROJECT|${PACKIT_COPR_PROJECT}|; s|REPLACE_TEST_OS|${REPLACE
106
106
107
107
# Configure continerfile
108
108
greenprint " Create $TEST_OS installation Containerfile"
109
- tee " $INSTALL_CONTAINERFILE " > /dev/null << EOF
109
+ tee " $INSTALL_CONTAINERFILE " > /dev/null << REALEOF
110
110
FROM "$TIER1_IMAGE_URL "
111
111
COPY bootc.repo /etc/yum.repos.d/
112
112
COPY domain.crt /etc/pki/ca-trust/source/anchors/
113
113
RUN dnf -y update bootc && \
114
114
update-ca-trust
115
+ RUN cat <<EOF >> /usr/lib/bootc/install/00-mitigations.toml
116
+ [install.filesystem.root]
117
+ type = "xfs"
118
+ [install]
119
+ kargs = ["mitigations=on", "nosmt"]
115
120
EOF
121
+ RUN mkdir -p /usr/lib/bootc/kargs.d
122
+ RUN cat <<EOF >> /usr/lib/bootc/kargs.d/01-console.toml
123
+ kargs = ["systemd.unified_cgroup_hierarchy=0","console=ttyS0","panic=0"]
124
+ EOF
125
+ REALEOF
116
126
117
127
case " $TEST_CASE " in
118
128
" to-existing-root" )
@@ -244,15 +254,20 @@ ansible-playbook -v \
244
254
-e test_os=" $TEST_OS " \
245
255
-e bootc_image=" $TEST_IMAGE_URL " \
246
256
-e image_label_version_id=" $REDHAT_VERSION_ID " \
257
+ -e kargs=" mitigations=on,nosmt,systemd.unified_cgroup_hierarchy=0,console=ttyS0,panic=0" \
247
258
playbooks/check-system.yaml
248
259
249
260
# Prepare upgrade containerfile
250
261
greenprint " Create upgrade Containerfile"
251
- tee " $UPGRADE_CONTAINERFILE " > /dev/null << EOF
262
+ tee " $UPGRADE_CONTAINERFILE " > /dev/null << REALEOF
252
263
FROM "$TEST_IMAGE_URL "
253
264
RUN dnf -y install wget && \
254
265
dnf -y clean all
266
+ RUN rm /usr/lib/bootc/kargs.d/01-console.toml
267
+ RUN cat <<EOF >> /usr/lib/bootc/kargs.d/01-console.toml
268
+ kargs = ["systemd.unified_cgroup_hierarchy=1","console=ttyS","panic=0"]
255
269
EOF
270
+ REALEOF
256
271
257
272
# Build upgrade container image and push to locay registry
258
273
greenprint " Build $TEST_OS upgrade container image"
@@ -284,6 +299,7 @@ ansible-playbook -v \
284
299
-e bootc_image=" $BOOTC_IMAGE " \
285
300
-e image_label_version_id=" $REDHAT_VERSION_ID " \
286
301
-e upgrade=" true" \
302
+ -e kargs=" systemd.unified_cgroup_hierarchy=1,console=ttyS,panic=0" \
287
303
playbooks/check-system.yaml
288
304
289
305
# bootc rollback test
0 commit comments