This commit is contained in:
Brandon Lester 2024-11-07 16:15:29 -08:00
commit aa4c034297
20 changed files with 1587 additions and 0 deletions

7
50-redhat.conf Normal file
View file

@ -0,0 +1,7 @@
# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
kernel.kptr_restrict = 1
# Source route verification
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.*.rp_filter = 1
-net.ipv4.conf.all.rp_filter

11
85-display-manager.preset Normal file
View file

@ -0,0 +1,11 @@
# We enable all display managers by default. Since only one can
# actually be enabled at the same time the one which is installed
# first wins
enable gdm.service
enable lightdm.service
enable slim.service
enable lxdm.service
enable sddm.service
enable kdm.service
enable xdm.service

30
90-default-user.preset Normal file
View file

@ -0,0 +1,30 @@
# Enable the D-Bus service (including its socket for socket activation)
# unconditionally. It is used throughout Fedora and required on all machines.
# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable dbus.socket
enable dbus-broker.service
# Socket-activated pipewire service for individual user sessions
# https://bugzilla.redhat.com/show_bug.cgi?id=1592434
enable pipewire.socket
# Enable the PipeWire PulseAudio compatibility socket interface
# https://bugzilla.redhat.com/show_bug.cgi?id=1904239
# https://bugzilla.redhat.com/show_bug.cgi?id=1907906
# https://fedoraproject.org/wiki/Changes/DefaultPipeWire
enable pipewire-pulse.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1976006
enable pipewire-media-session.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1979419
enable wireplumber.service
# Enable the session agent for snaps
# https://bugzilla.redhat.com/show_bug.cgi?id=1734371
enable snapd.session-agent.socket
# https://src.fedoraproject.org/rpms/fedora-release/pull-request/80
enable obex.service
enable grub-boot-success.timer
enable pulseaudio.socket

469
90-default.preset Normal file
View file

@ -0,0 +1,469 @@
# See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/
# for the Fedora policy.
# On Fedora we deviate from some upstream defaults
disable systemd-timesyncd.service
disable systemd-networkd.service
disable systemd-networkd-wait-online.service
# We want to update systemd-boot from packaging scriptlets after updates.
disable systemd-boot-update.service
# https://fedoraproject.org/wiki/Changes/EnableSystemdOomd
enable systemd-oomd.service
# These presets were last validated en-masse on 2015-09-09
# https://fedorahosted.org/fesco/ticket/1472
# System stuff
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable dbus.socket
enable dbus-broker.service
enable sshd.service
# Locally-running services
enable atd.*
enable crond.*
enable rpcbind.*
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/636
enable chronyd.service
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
# https://bugzilla.redhat.com/show_bug.cgi?id=1455704
enable NetworkManager.service
enable NetworkManager-wait-online.service
enable NetworkManager-dispatcher.service
enable ModemManager.service
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1311
enable auditd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2258520
enable audit-rules.service
# Locally-running service
enable restorecond.service
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1166
enable bluetooth.*
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable avahi-daemon.*
# Default configuration is locally-running only
# CUPS is now socket-activatable for local use-cases, so don't enable cups.service
# https://pagure.io/fesco/issue/1701
enable cups.socket
enable cups.path
# RHEL-37762: We need the full service enabled to act as a print server
enable cups.service
# The various syslog implementations
enable rsyslog.*
enable syslog-ng.*
enable sysklogd.*
# Network facing
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable firewalld.service
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/2627
# Virtualization driver specific daemons. Start by default at boot for VM
# autostart, but shutdown after 2 mins and socket activated thereafter
enable virtqemud.service
enable virtxend.service
enable virtlxcd.service
enable virtvboxd.service
# Sockets for the services listed above, to support socket activation
# after the initial timeout
enable virtqemud.socket
enable virtqemud-ro.socket
enable virtqemud-admin.socket
enable virtxend.socket
enable virtxend-ro.socket
enable virtxend-admin.socket
enable virtlxcd.socket
enable virtlxcd-ro.socket
enable virtlxcd-admin.socket
enable virtvboxd.socket
enable virtvboxd-ro.socket
enable virtvboxd-admin.socket
# Compatibility with libvirtd sockets for old clients (socket activated
# only when required). Note that the -tcp and -tls sockets are kept disabled
# by default, as they require additional configuration before they can work
enable virtproxyd.socket
enable virtproxyd-ro.socket
enable virtproxyd-admin.socket
# Secondary drivers providing supporting functionality to main virtualization
# drivers (socket activated only when required)
enable virtinterfaced.socket
enable virtinterfaced-ro.socket
enable virtinterfaced-admin.socket
enable virtnetworkd.socket
enable virtnetworkd-ro.socket
enable virtnetworkd-admin.socket
enable virtnodedevd.socket
enable virtnodedevd-ro.socket
enable virtnodedevd-admin.socket
enable virtnwfilterd.socket
enable virtnwfilterd-ro.socket
enable virtnwfilterd-admin.socket
enable virtsecretd.socket
enable virtsecretd-ro.socket
enable virtsecretd-admin.socket
enable virtstoraged.socket
enable virtstoraged-ro.socket
enable virtstoraged-admin.socket
# Non-driver support services (socket activated only when required, no
# read-only socket)
enable virtlogd.socket
enable virtlogd-admin.socket
enable virtlockd.socket
enable virtlockd-admin.socket
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable xinetd.service
# Storage
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/391
enable multipathd.service
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/876
enable libstoragemgmt.service
# Approved by FESCo - https://pagure.io/fesco/issue/2386
enable iscsid.socket
enable iscsiuio.socket
# Approved by FESCo - https://pagure.io/fesco/issue/2943
enable iscsi-starter.service
# iSCSI support for early-boot
# https://bugzilla.redhat.com/show_bug.cgi?id=1930470
enable iscsi-onboot.service
# Locally-running services
enable lvm2-monitor.*
enable lvm2-lvmetad.*
enable dm-event.*
enable dmraid-activation.service
# https://bugzilla.redhat.com/show_bug.cgi?id=855372
enable mdmonitor.service
enable mdmonitor-takeover.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1817491
enable raid-check.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=876237
enable spice-vdagentd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=885406
enable qemu-guest-agent.service
# https://bugzilla.redhat.com/show_bug.cgi?id=928726
enable dnf-makecache.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1995495
enable rpm-ostree-countme.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=957135
enable vmtoolsd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=976315
enable dkms.service
# https://bugzilla.redhat.com/show_bug.cgi?id=961878
enable ipmi.service
enable ipmievd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1039351
enable x509watch.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1060754
enable dnssec-triggerd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1095353
enable uuidd.socket
# Hardware
# Locally-running service
enable gpm.*
# https://bugzilla.redhat.com/show_bug.cgi?id=1066421
enable gpsd.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1141607
enable x2gocleansessions.service
# https://issues.redhat.com/browse/RHEL-35582
enable tuned.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1215641
enable unbound-anchor.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1222495
enable lvm2-lvmpolld.*
# https://fedoraproject.org/wiki/Changes/UEFISecureBootBlacklistUpdates
enable dbxtool.service
# Locally-running services
enable irqbalance.service
enable lm_sensors.service
enable mcelog.*
enable smartd.service
enable pcscd.socket
enable rngd.service
# Other stuff
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/937
# Note: abrt-ccpp.service is excluded in favor of systemd-coredump.
enable abrtd.service
enable abrt-journal-core.service
enable abrt-oops.service
enable abrt-xorg.service
enable abrt-vmcore.service
# Locally-running services
enable kdump.service
enable ksm.service
enable ksmtuned.service
enable rootfs-resize.service
enable sysstat.service
enable sysstat-collect.timer
enable sysstat-summary.timer
enable uuidd.service
enable xendomains.service
enable xenstored.service
enable xenconsoled.service
# Desktop stuff
# Locally-running services
enable accounts-daemon.service
enable rtkit-daemon.service
enable upower.service
enable udisks2.service
enable polkit.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1187072
enable timedatex.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1231745
enable mlocate-updatedb.timer
# https://src.fedoraproject.org/rpms/fedora-release/pull-request/204
enable plocate-updatedb.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1218999
enable sa-update.timer
# Hyper-V guest support daemons
# https://bugzilla.redhat.com/show_bug.cgi?id=1279322
enable vmtoolsd.service
# mcelog is a utility that collects and decodes Machine Check Exception data
# on x86-32 and x86-64 systems.
# https://bugzilla.redhat.com/show_bug.cgi?id=1302179
enable mcelog.service
# OPAL-prd is a utility specific to ppc64le systems
# It is the "OPAL Processor Recovery Diagnostics Daemon"
# https://bugzilla.redhat.com/show_bug.cgi?id=1312018
enable opal-prd.service
# lircd is the Linux Infrared Control daemon
# Starting with version 0.9.4, it requires no manual configuration
# https://bugzilla.redhat.com/show_bug.cgi?id=1340061
enable lircd.socket
# IPSec management
# https://bugzilla.redhat.com/show_bug.cgi?id=1276285
enable pluto.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1367932
# Automatically refresh installed snaps
enable snapd.refresh.timer
# Socket activated daemon to manage snaps
enable snapd.socket
# Support for dual-GPU systems
# https://bugzilla.redhat.com/show_bug.cgi?id=1389762
enable switcheroo-control.service
# Support for the DRBD link-cleaning service
# https://bugzilla.redhat.com/show_bug.cgi?id=1399387
enable drbdlinksclean.service
# Enable the System Security Services Daemon
# https://bugzilla.redhat.com/show_bug.cgi?id=1427649
enable sssd.service
# Enable ostree-remount on ostree-based systems
# (Does nothing on non-ostree systems)
# https://bugzilla.redhat.com/show_bug.cgi?id=1451458
enable ostree-remount.service
# Enable Performance Co-Pilot services
# https://bugzilla.redhat.com/show_bug.cgi?id=1472350
enable pmcd.service
enable pmlogger.service
enable pmie.service
# Enable SSSD Kerberos Credential Cache Server
# https://bugzilla.redhat.com/show_bug.cgi?id=1475999
enable sssd-kcm.socket
# sssd-secrets.socket was previously enabled, but as of
# SSSD 2.0 it is not longer needed
# https://bugzilla.redhat.com/show_bug.cgi?id=1615584
# A mechanism to transfer state between the initramfs and the real
# system. Obsolete since /run was introduced, but still used by some
# services.
# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
enable import-state.service
# An initscripts mechanism for readonly root
# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
enable readonly-root.service
# Ensure that any installed kmods are built for the currently-running
# kernel at boot
# https://bugzilla.redhat.com/show_bug.cgi?id=1518258
enable akmods.service
# virtualbox-guest-additions service, yet another virtual-machine guest
# integration agent, this is a locally-running service, Note this has a
# "ConditionVirtualization=|oracle" so it will only run under VirtualBox
# https://bugzilla.redhat.com/show_bug.cgi?id=1534595
enable vboxservice.service
# Mark the system for SELinux autorelabel when appropriate
# https://bugzilla.redhat.com/show_bug.cgi?id=1589720
enable selinux-autorelabel-mark.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1623901
enable cpi.service
# Initialize persistent devices on s390x
enable device_cio_free.service
# Enable the stratis daemon for managing stratis storage
# https://bugzilla.redhat.com/show_bug.cgi?id=1630514
enable stratisd.service
# Enable a service to finalize staged OSTree changes at shutdown
# https://bugzilla.redhat.com/show_bug.cgi?id=1639372
enable ostree-finalize-staged.path
# Enable the Docker daemon socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1655602
enable docker.socket
# Enable the service for adding Fedora OCI repos to flatpak
# https://bugzilla.redhat.com/show_bug.cgi?id=1696225
enable flatpak-add-fedora-repos.service
# Run fstrim weekly on filesystems listed in fstab
enable fstrim.timer
# oneshot to generate kata VM appliance at host bootup
# for the booted kernel
enable kata-osbuilder-generate.service
# Enable rotation of system log files
# https://bugzilla.redhat.com/show_bug.cgi?id=1655153#c4
enable logrotate.timer
# Enable regular update of SpamAssassin data files
# https://bugzilla.redhat.com/show_bug.cgi?id=1651002
enable sa-update.timer
# Enable service to automatically rebuild the RPM database
# on startup when /var/lib/rpm/.rebuilddb exists
# https://bugzilla.redhat.com/show_bug.cgi?id=1826658
enable rpmdb-rebuild.service
# Enable service to automatically migrate the RPM database to /usr
# on startup when /var/lib/rpm/.migratedb exists
# https://bugzilla.redhat.com/show_bug.cgi?id=2044061
enable rpmdb-migrate.service
# Support services for Google Cloud
# Approved by FESCo: https://pagure.io/fesco/issue/2578
enable google-guest-agent.service
enable google-startup-scripts.service
enable google-shutdown-scripts.service
# Support service for Azure
# Approved by FESCo: https://pagure.io/fesco/issue/2849
enable waagent.service
# Certbot (Let's Encrypt)
# https://bugzilla.redhat.com/show_bug.cgi?id=1940211
enable certbot-renew.timer
# enable thermald by default for desktops
# https://pagure.io/fedora-workstation/issue/71
enable thermald.service
# enable uresourced by default for desktops
# https://pagure.io/fesco/issue/2457
enable uresourced.service
# enable power-profiles-daemon
# https://pagure.io/fedora-workstation/issue/191
enable power-profiles-daemon.service
# Enable clevis-luks-askpass.path
# https://bugzilla.redhat.com/show_bug.cgi?id=2101719
enable clevis-luks-askpass.path
# Enable livesys services for live media
# https://bugzilla.redhat.com/show_bug.cgi?id=2148790
enable livesys.service
enable livesys-late.service
# Enable Waydroid
# https://bugzilla.redhat.com/show_bug.cgi?id=2157810
enable waydroid-container.service
# Enable nmstate to apply network configuration from /etc/nmstate/*.yml
# https://github.com/coreos/fedora-coreos-tracker/issues/1175
# https://github.com/coreos/fedora-coreos-config/pull/2269
enable nmstate.service
# Enable nfs-client.target
# https://bugzilla.redhat.com/show_bug.cgi?id=2218006
enable nfs-client.target
# Enable cloud-init services
# https://bugzilla.redhat.com/show_bug.cgi?id=2233948
enable cloud-config.service
enable cloud-final.service
enable cloud-init.service
enable cloud-init-local.service
# Enable kernel-bootcfg-boot-successful.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2239607
enable kernel-bootcfg-boot-successful.service
# Enable pd-mapper service for Thinkpad X13s
# https://bugzilla.redhat.com/show_bug.cgi?id=2255318
enable pd-mapper.service
# The Cockpit web-based system management console
enable cockpit.socket
# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
enable fwupd-refresh.timer

View file

@ -0,0 +1 @@
disable *

8
EULA Normal file
View file

@ -0,0 +1,8 @@
Oreon 10 EULA
Oreon 10 comes with no guarantees or warranties of any sorts,
either written or implied.
The Distribution is released as GPLv2. Individual packages in the
distribution come with their own licences. A copy of the GPLv2 license
is included with the distribution media.

339
LICENSE Normal file
View file

@ -0,0 +1,339 @@
GNU GENERAL PUBLIC LICENSE
Version 2, June 1991
Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
Preamble
The licenses for most software are designed to take away your
freedom to share and change it. By contrast, the GNU General Public
License is intended to guarantee your freedom to share and change free
software--to make sure the software is free for all its users. This
General Public License applies to most of the Free Software
Foundation's software and to any other program whose authors commit to
using it. (Some other Free Software Foundation software is covered by
the GNU Lesser General Public License instead.) You can apply it to
your programs, too.
When we speak of free software, we are referring to freedom, not
price. Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
this service if you wish), that you receive source code or can get it
if you want it, that you can change the software or use pieces of it
in new free programs; and that you know you can do these things.
To protect your rights, we need to make restrictions that forbid
anyone to deny you these rights or to ask you to surrender the rights.
These restrictions translate to certain responsibilities for you if you
distribute copies of the software, or if you modify it.
For example, if you distribute copies of such a program, whether
gratis or for a fee, you must give the recipients all the rights that
you have. You must make sure that they, too, receive or can get the
source code. And you must show them these terms so they know their
rights.
We protect your rights with two steps: (1) copyright the software, and
(2) offer you this license which gives you legal permission to copy,
distribute and/or modify the software.
Also, for each author's protection and ours, we want to make certain
that everyone understands that there is no warranty for this free
software. If the software is modified by someone else and passed on, we
want its recipients to know that what they have is not the original, so
that any problems introduced by others will not reflect on the original
authors' reputations.
Finally, any free program is threatened constantly by software
patents. We wish to avoid the danger that redistributors of a free
program will individually obtain patent licenses, in effect making the
program proprietary. To prevent this, we have made it clear that any
patent must be licensed for everyone's free use or not licensed at all.
The precise terms and conditions for copying, distribution and
modification follow.
GNU GENERAL PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. This License applies to any program or other work which contains
a notice placed by the copyright holder saying it may be distributed
under the terms of this General Public License. The "Program", below,
refers to any such program or work, and a "work based on the Program"
means either the Program or any derivative work under copyright law:
that is to say, a work containing the Program or a portion of it,
either verbatim or with modifications and/or translated into another
language. (Hereinafter, translation is included without limitation in
the term "modification".) Each licensee is addressed as "you".
Activities other than copying, distribution and modification are not
covered by this License; they are outside its scope. The act of
running the Program is not restricted, and the output from the Program
is covered only if its contents constitute a work based on the
Program (independent of having been made by running the Program).
Whether that is true depends on what the Program does.
1. You may copy and distribute verbatim copies of the Program's
source code as you receive it, in any medium, provided that you
conspicuously and appropriately publish on each copy an appropriate
copyright notice and disclaimer of warranty; keep intact all the
notices that refer to this License and to the absence of any warranty;
and give any other recipients of the Program a copy of this License
along with the Program.
You may charge a fee for the physical act of transferring a copy, and
you may at your option offer warranty protection in exchange for a fee.
2. You may modify your copy or copies of the Program or any portion
of it, thus forming a work based on the Program, and copy and
distribute such modifications or work under the terms of Section 1
above, provided that you also meet all of these conditions:
a) You must cause the modified files to carry prominent notices
stating that you changed the files and the date of any change.
b) You must cause any work that you distribute or publish, that in
whole or in part contains or is derived from the Program or any
part thereof, to be licensed as a whole at no charge to all third
parties under the terms of this License.
c) If the modified program normally reads commands interactively
when run, you must cause it, when started running for such
interactive use in the most ordinary way, to print or display an
announcement including an appropriate copyright notice and a
notice that there is no warranty (or else, saying that you provide
a warranty) and that users may redistribute the program under
these conditions, and telling the user how to view a copy of this
License. (Exception: if the Program itself is interactive but
does not normally print such an announcement, your work based on
the Program is not required to print an announcement.)
These requirements apply to the modified work as a whole. If
identifiable sections of that work are not derived from the Program,
and can be reasonably considered independent and separate works in
themselves, then this License, and its terms, do not apply to those
sections when you distribute them as separate works. But when you
distribute the same sections as part of a whole which is a work based
on the Program, the distribution of the whole must be on the terms of
this License, whose permissions for other licensees extend to the
entire whole, and thus to each and every part regardless of who wrote it.
Thus, it is not the intent of this section to claim rights or contest
your rights to work written entirely by you; rather, the intent is to
exercise the right to control the distribution of derivative or
collective works based on the Program.
In addition, mere aggregation of another work not based on the Program
with the Program (or with a work based on the Program) on a volume of
a storage or distribution medium does not bring the other work under
the scope of this License.
3. You may copy and distribute the Program (or a work based on it,
under Section 2) in object code or executable form under the terms of
Sections 1 and 2 above provided that you also do one of the following:
a) Accompany it with the complete corresponding machine-readable
source code, which must be distributed under the terms of Sections
1 and 2 above on a medium customarily used for software interchange; or,
b) Accompany it with a written offer, valid for at least three
years, to give any third party, for a charge no more than your
cost of physically performing source distribution, a complete
machine-readable copy of the corresponding source code, to be
distributed under the terms of Sections 1 and 2 above on a medium
customarily used for software interchange; or,
c) Accompany it with the information you received as to the offer
to distribute corresponding source code. (This alternative is
allowed only for noncommercial distribution and only if you
received the program in object code or executable form with such
an offer, in accord with Subsection b above.)
The source code for a work means the preferred form of the work for
making modifications to it. For an executable work, complete source
code means all the source code for all modules it contains, plus any
associated interface definition files, plus the scripts used to
control compilation and installation of the executable. However, as a
special exception, the source code distributed need not include
anything that is normally distributed (in either source or binary
form) with the major components (compiler, kernel, and so on) of the
operating system on which the executable runs, unless that component
itself accompanies the executable.
If distribution of executable or object code is made by offering
access to copy from a designated place, then offering equivalent
access to copy the source code from the same place counts as
distribution of the source code, even though third parties are not
compelled to copy the source along with the object code.
4. You may not copy, modify, sublicense, or distribute the Program
except as expressly provided under this License. Any attempt
otherwise to copy, modify, sublicense or distribute the Program is
void, and will automatically terminate your rights under this License.
However, parties who have received copies, or rights, from you under
this License will not have their licenses terminated so long as such
parties remain in full compliance.
5. You are not required to accept this License, since you have not
signed it. However, nothing else grants you permission to modify or
distribute the Program or its derivative works. These actions are
prohibited by law if you do not accept this License. Therefore, by
modifying or distributing the Program (or any work based on the
Program), you indicate your acceptance of this License to do so, and
all its terms and conditions for copying, distributing or modifying
the Program or works based on it.
6. Each time you redistribute the Program (or any work based on the
Program), the recipient automatically receives a license from the
original licensor to copy, distribute or modify the Program subject to
these terms and conditions. You may not impose any further
restrictions on the recipients' exercise of the rights granted herein.
You are not responsible for enforcing compliance by third parties to
this License.
7. If, as a consequence of a court judgment or allegation of patent
infringement or for any other reason (not limited to patent issues),
conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
excuse you from the conditions of this License. If you cannot
distribute so as to satisfy simultaneously your obligations under this
License and any other pertinent obligations, then as a consequence you
may not distribute the Program at all. For example, if a patent
license would not permit royalty-free redistribution of the Program by
all those who receive copies directly or indirectly through you, then
the only way you could satisfy both it and this License would be to
refrain entirely from distribution of the Program.
If any portion of this section is held invalid or unenforceable under
any particular circumstance, the balance of the section is intended to
apply and the section as a whole is intended to apply in other
circumstances.
It is not the purpose of this section to induce you to infringe any
patents or other property right claims or to contest validity of any
such claims; this section has the sole purpose of protecting the
integrity of the free software distribution system, which is
implemented by public license practices. Many people have made
generous contributions to the wide range of software distributed
through that system in reliance on consistent application of that
system; it is up to the author/donor to decide if he or she is willing
to distribute software through any other system and a licensee cannot
impose that choice.
This section is intended to make thoroughly clear what is believed to
be a consequence of the rest of this License.
8. If the distribution and/or use of the Program is restricted in
certain countries either by patents or by copyrighted interfaces, the
original copyright holder who places the Program under this License
may add an explicit geographical distribution limitation excluding
those countries, so that distribution is permitted only in or among
countries not thus excluded. In such case, this License incorporates
the limitation as if written in the body of this License.
9. The Free Software Foundation may publish revised and/or new versions
of the General Public License from time to time. Such new versions will
be similar in spirit to the present version, but may differ in detail to
address new problems or concerns.
Each version is given a distinguishing version number. If the Program
specifies a version number of this License which applies to it and "any
later version", you have the option of following the terms and conditions
either of that version or of any later version published by the Free
Software Foundation. If the Program does not specify a version number of
this License, you may choose any version ever published by the Free Software
Foundation.
10. If you wish to incorporate parts of the Program into other free
programs whose distribution conditions are different, write to the author
to ask for permission. For software which is copyrighted by the Free
Software Foundation, write to the Free Software Foundation; we sometimes
make exceptions for this. Our decision will be guided by the two goals
of preserving the free status of all derivatives of our free software and
of promoting the sharing and reuse of software generally.
NO WARRANTY
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
REPAIR OR CORRECTION.
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
END OF TERMS AND CONDITIONS
How to Apply These Terms to Your New Programs
If you develop a new program, and you want it to be of the greatest
possible use to the public, the best way to achieve this is to make it
free software which everyone can redistribute and change under these terms.
To do so, attach the following notices to the program. It is safest
to attach them to the start of each source file to most effectively
convey the exclusion of warranty; and each file should have at least
the "copyright" line and a pointer to where the full notice is found.
<one line to give the program's name and a brief idea of what it does.>
Copyright (C) <year> <name of author>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License along
with this program; if not, write to the Free Software Foundation, Inc.,
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
Also add information on how to contact you by electronic and paper mail.
If the program is interactive, make it output a short notice like this
when it starts in an interactive mode:
Gnomovision version 69, Copyright (C) year name of author
Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
The hypothetical commands `show w' and `show c' should show the appropriate
parts of the General Public License. Of course, the commands you use may
be called something other than `show w' and `show c'; they could even be
mouse-clicks or menu items--whatever suits your program.
You should also get your employer (if you work as a programmer) or your
school, if any, to sign a "copyright disclaimer" for the program, if
necessary. Here is a sample; alter the names:
Yoyodyne, Inc., hereby disclaims all copyright interest in the program
`Gnomovision' (which makes passes at compilers) written by James Hacker.
<signature of Ty Coon>, 1 April 1989
Ty Coon, President of Vice
This General Public License does not permit incorporating your program into
proprietary programs. If your program is a subroutine library, you may
consider it more useful to permit linking proprietary applications with the
library. If this is what you want to do, use the GNU Lesser General
Public License instead of this License.

29
RPM-GPG-KEY-Oreon-10 Normal file
View file

@ -0,0 +1,29 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGaP6O8BEACvg8IlAxGayV8zOi9Ex+Pd8lrj2BrBzloG8ri84ORp9o8ojq7l
ykKmIElHe11cQD2Lf/a4lcQQ4Ec3baiD786X6K2eVSlBEAnZMzfjDg8R63SfsBuu
8Yk+lUyqlBrDnSDYaPruOAzLIz2r82ikIC1jDbipZsMFPFHPI4/hayyWxJ3oGxRe
0mbtYLB9ElEKngt+/hfo7JLklakbznyIRuVEF3VrZb91XC6r/idqfJoNyBXSKidj
z0IwqOhgkLUk84rzltDo3AzwGqusd7PEuhOmqinOhp0hMdXsztD4TVyhw82iXu/O
onOAObZTZYfM6Z8btmDqkoo0aT+oPPCuZ3yC/caU9dhvCSXET/CGoXc3hL55u9PV
qmcVm/mwvuEImEAvxVc0/dBzEUk+FwW8KsaN3HoUKrC4/NqgmaQz8/42np7u2j+B
OOJ4hAckNEdWd8rB86CYN00sdxnvLBsp8V3IwEqXLhGOoBsagy61Z8hKCM+siOGn
xmbbybgaLOs+DPlxt9LrtgLJHODwmD96oysUPJuA0lv8KMiSpId0tSpp9Wn/wHBG
kRgxGYfzQu7WRvRZqQaleft1JTXXOjNzPur0RkJyb3yFwAoxpePyo/WrupM41OHW
58cEqdC6riCnJcS4U84RLj+hwvufBVB7areQ75sETnKeyozZW+P16E1t/wARAQAB
tChBbG1hTGludXggT1MgMTAgPHBhY2thZ2VyQGFsbWFsaW51eC5vcmc+iQJMBBMB
CgA2FiEE7m23uY9b9e3Z2g3l3uXBHMKh5XIFAmaP6O8CGwMECwkIBwQVCgkIBRYC
AwEAAh4FAheAAAoJEN7lwRzCoeVy32AP/A2+KI+JhmsxnactSptkAWGyAAf1YBWW
Js2sc9OJdKj7uIkzszCx7c7VIVeF/VLijIYpM/zwUgir5S5SimzQmY+FumwbKIml
K5RBsoSog22i7Edho0MLa1pa6qvnKS0nkl9DEcu8EbMUhucWbxGnCG/22EEMTrY+
Si1IZNkDGtlBHHBKMC+STbqqTxtdy4tAd2NYwWh3sBIh6PF7T4NLRAugu7PZQr5K
amS4z2lV3ebshGjieA0Zoznwh0AXgN0gZ/0pC/LXI25gcgtrvkCyL8Fe0AyZUMd8
UvZXaRSsm3SkCUIlGjPrvuItn1D7tHmqVSCDKXDM2TqjfiRm1JF+2OFCBNvGz19V
LxWd/Gf+0qw0dtKxRMKzGh0mxXY40hjtmYZulrPxhG5itNDjStovgrevM1HBsXs9
ikrkOGQ0pFcqizTn4ZKAmMozEMuIuV89Vof2bBCg7pHT1FmXVdAaYJxb6a7A/CgN
qHjoh8AxBiGw/Q2NM4YJlUVhHqqd+/lUG3WJqACNEnqSlZkYQ3HqNNaKhHVbD4mN
q/g6v+f8aWWDZDsI6IAfbJUB+KPEnIvQJQleWuHrq7kcUMhEq3dwBMIoTVEHhUUr
RQKToSEM1rN7PcanaXQM2gy141dS7tFLxhapG8ug75LkIUnEOpPMtUjvrU1ZELGq
36vVHBB+dTDg
=tJCw
-----END PGP PUBLIC KEY BLOCK-----

BIN
alsecureboot001.cer Normal file

Binary file not shown.

30
oreon-appstream.repo Normal file
View file

@ -0,0 +1,30 @@
[appstream]
name=Oreon $releasever - AppStream
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/appstream
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/AppStream/$basearch/os/
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[appstream-debuginfo]
name=Oreon $releasever - AppStream - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/appstream-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/AppStream/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[appstream-source]
name=Oreon $releasever - AppStream - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/appstream-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/AppStream/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

51
oreon-baseos.repo Normal file
View file

@ -0,0 +1,51 @@
[baseos]
name=Oreon $releasever - BaseOS
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/baseos
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/BaseOS/$basearch/os/
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[oreon-mainstream]
name=Oreon - Mainstream
baseurl=https://packages.boostyconnect.com/oreon-10/$basearch/
enabled=1
countme=1
repo_gpgcheck=0
type=rpm
gpgcheck=0
[oreon10-kde]
name=KDE Plasma for Oreon
baseurl=https://download.copr.fedorainfracloud.org/results/brandonlester/oreon10-kde/centos-stream-$releasever-$basearch/
type=rpm-md
skip_if_unavailable=True
gpgcheck=1
gpgkey=https://download.copr.fedorainfracloud.org/results/brandonlester/oreon10-kde/pubkey.gpg
repo_gpgcheck=0
enabled=1
enabled_metadata=1
[baseos-debuginfo]
name=Oreon $releasever - BaseOS - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/baseos-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/BaseOS/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[baseos-source]
name=Oreon $releasever - BaseOS - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/baseos-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/BaseOS/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

30
oreon-crb.repo Normal file
View file

@ -0,0 +1,30 @@
[crb]
name=Oreon $releasever - CRB
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/crb
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/CRB/$basearch/os/
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[crb-debuginfo]
name=Oreon $releasever - CRB - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/crb-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/CRB/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[crb-source]
name=Oreon $releasever - CRB - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/crb-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/CRB/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

30
oreon-extras-common.repo Normal file
View file

@ -0,0 +1,30 @@
[extras-common]
name=Oreon $releasever - Extras packages
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/extras-common
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/extras-common/$basearch/os/
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[extras-common-debuginfo]
name=Oreon $releasever - Extras packages - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/extras-common-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/extras-common/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[extras-common-source]
name=Oreon $releasever - Extras packages - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/extras-common-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/extras-common/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

View file

@ -0,0 +1,30 @@
[highavailability]
name=Oreon $releasever - HighAvailability
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/highavailability
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/HighAvailability/$basearch/os/
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[highavailability-debuginfo]
name=Oreon $releasever - HighAvailability - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/highavailability-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/HighAvailability/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[highavailability-source]
name=Oreon $releasever - HighAvailability - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/highavailability-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/HighAvailability/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

30
oreon-nfv.repo Normal file
View file

@ -0,0 +1,30 @@
[nfv]
name=Oreon $releasever - NFV
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/nfv
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/NFV/$basearch/os/
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[nfv-debuginfo]
name=Oreon $releasever - NFV - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/nfv-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/NFV/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[nfv-source]
name=Oreon $releasever - NFV - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/nfv-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/NFV/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

372
oreon-release.spec Normal file
View file

@ -0,0 +1,372 @@
%global distro Oreon
%define release_name 10 Core 'Foxy'
%global major 10
%global minor 0
%global dist .el10
Name: oreon-release
Version: %{major}.%{minor}
Release: 1%{?dist}.0
Summary: %{distro} release files
License: GPL-2.0-or-later
URL: https://oreonproject.org/oreon-10
Provides: centos-release = %{version}-%{release}
Provides: centos-stream-release = %{version}-%{release}
Provides: oreon-release = %{version}-%{release}
# When running a compose for ELN, we want to make sure that we pull in the
# correct templates when lorax is installed. This Suggests: will clue
# libdnf to use this set of templates instead of lorax-templates-generic.
Suggests: lorax-templates-almalinux
# Required for a lorax run (to generate install media)
Requires: oreon-repos = %{version}-%{release}
Provides: centos-release-eula
Provides: redhat-release-eula
# required by epel-release
Provides: redhat-release = %{version}-%{release}
# required by dnf
# https://github.com/rpm-software-management/dnf/blob/4.2.23/dnf/const.py.in#L26
Provides: system-release = %{version}-%{release}
Provides: system-release(releasever) = %{major}
Conflicts: system-release
# required by libdnf
# https://github.com/rpm-software-management/libdnf/blob/0.48.0/libdnf/module/ModulePackage.cpp#L472
Provides: base-module(platform:el%{major})
Source200: EULA
Source201: LICENSE
Source300: 85-display-manager.preset
Source301: 90-default.preset
Source302: 90-default-user.preset
Source303: 99-default-disable.preset
Source304: 50-redhat.conf
Source400: alsecureboot001.cer
Source500: oreon-appstream.repo
Source501: oreon-baseos.repo
Source502: oreon-crb.repo
Source503: oreon-extras-common.repo
Source504: oreon-highavailability.repo
Source505: oreon-resilientstorage.repo
Source506: oreon-sap.repo
Source507: oreon-saphana.repo
# Only for x86_64
Source510: oreon-nfv.repo
Source511: oreon-rt.repo
Source600: RPM-GPG-KEY-Oreon-10
%package -n oreon-sb-certs
Summary: %{distro} public secureboot certificates
Group: System Environment/Base
Provides: system-sb-certs = %{version}-%{release}
Provides: redhat-sb-certs = %{version}-%{release}
Provides: centos-sb-certs = %{version}-%{release}
Provides: oreon-sb-certs = %{version}-%{release}
%package -n oreon-repos
Summary: %{distro} package repositories
Requires: oreon-release = %{version}-%{release}
Requires: oreon-gpg-keys = %{version}-%{release}
# Required by CentOS SIGs release packages
Provides: centos-stream-repos = %{version}-%{release}
%package -n oreon-gpg-keys
Summary: %{distro} RPM keys
# Required by CentOS SIGs release packages
Provides: centos-gpg-keys = %{version}-%{release}
%description
%{distro} release files.
%description -n oreon-sb-certs
%{distro} secureboot certificates
%description -n oreon-repos
This package provides the package repository files for %{distro}.
%description -n oreon-gpg-keys
This package provides the RPM signature keys for %{distro}.
%install
# copy license and contributors doc here for %%license and %%doc macros
mkdir -p ./docs
cp %{SOURCE201} ./docs
# create /etc/system-release and /etc/redhat-release
install -d -m 0755 %{buildroot}%{_sysconfdir}
echo "%{distro} release %{major} (%{release_name})" > %{buildroot}%{_sysconfdir}/oreon-release
ln -s oreon-release %{buildroot}%{_sysconfdir}/system-release
ln -s oreon-release %{buildroot}%{_sysconfdir}/redhat-release
# -------------------------------------------------------------------------
# Definitions for /etc/os-release and for macros in macros.dist. These
# macros are useful for spec files where distribution-specific identifiers
# are used to customize packages.
# Name of vendor / name of distribution. Typically used to identify where
# the binary comes from in --help or --version messages of programs.
# Examples: gdb.spec, clang.spec
%global dist_vendor Oreon by BoostyConnect Technologies
%global dist_name %{distro}
# URL of the homepage of the distribution
# Example: gstreamer1-plugins-base.spec
%global dist_home_url https://oreonproject.org/
# Bugzilla / bug reporting URLs shown to users.
# Examples: gcc.spec
%global dist_bug_report_url https://forums.oreonproject.org/
# debuginfod server, as used in elfutils.spec.
# %global dist_debuginfod_url https://debuginfod.centos.org/
# -------------------------------------------------------------------------
# Create the os-release file
install -d -m 0755 %{buildroot}%{_prefix}/lib
cat > %{buildroot}%{_prefix}/lib/os-release << EOF
NAME="Oreon"
VERSION="10"
ID="oreon"
ID_LIKE="rhel centos fedora"
VERSION_ID="10"
PLATFORM_ID="platform:el10"
PRETTY_NAME="Oreon 10 Core (Early Preview Build 2024.11)"
ANSI_COLOR="0;34"
LOGO="fedora-logo-icon"
CPE_NAME="cpe:/o:oreon:oreon:%{major}::baseos"
HOME_URL="%{dist_home_url}"
DOCUMENTATION_URL="https://oreonproject.org/help"
VENDOR_NAME="Oreon"
VENDOR_URL="https://oreonproject.org"
BUG_REPORT_URL="%{dist_bug_report_url}"
OREON_MANTISBT_PROJECT="Oreon-%{major}"
OREON_MANTISBT_PROJECT_VERSION="%{major}"
REDHAT_SUPPORT_PRODUCT="Oreon"
REDHAT_SUPPORT_PRODUCT_VERSION="%{major}"
EOF
# Should be added to os-release in the future
# SUPPORT_END=%{eol_date}
# Create the symlink for /etc/os-release
ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
# write cpe to /etc/system/release-cpe
echo "cpe:/o:oreon:oreon:%{major}::baseos" > %{buildroot}%{_sysconfdir}/system-release-cpe
# create /etc/issue, /etc/issue.net and /etc/issue.d
echo '\S' > %{buildroot}%{_sysconfdir}/issue
echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
cp %{buildroot}%{_sysconfdir}/issue{,.net}
echo >> %{buildroot}%{_sysconfdir}/issue
mkdir -p %{buildroot}%{_sysconfdir}/issue.d
# set up the dist tag macros
mkdir -p %{buildroot}%{_rpmmacrodir}
cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
# dist macros.
%%__bootstrap ~bootstrap
%%oreon_ver %{major}
%%oreon %{major}
%%centos_ver %{major}
%%centos %{major}
%%rhel %{major}
%%el%{major} 1
%%distcore .el%{major}
%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}%%{distcore}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
%%dist_vendor %{dist_vendor}
%%dist_name %{dist_name}
%%dist_home_url %{dist_home_url}
%%dist_bug_report_url %{dist_bug_report_url}
EOF
# use unbranded datadir
install -d -m 0755 %{buildroot}%{_datadir}/oreon-release
ln -s oreon-release %{buildroot}%{_datadir}/redhat-release
install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/oreon-release/
# copy systemd presets
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset
install -p -m 0644 %{SOURCE300} %{buildroot}%{_prefix}/lib/systemd/system-preset/
install -p -m 0644 %{SOURCE301} %{buildroot}%{_prefix}/lib/systemd/system-preset/
install -p -m 0644 %{SOURCE302} %{buildroot}%{_prefix}/lib/systemd/user-preset/
# installing the same file for both system and user presets to set the same behavior for both
install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/system-preset/
install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/user-preset/
# copy sysctl presets
mkdir -p %{buildroot}/%{_prefix}/lib/sysctl.d/
install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
# Create stub yum repos
mkdir %{buildroot}%{_sysconfdir}/yum.repos.d
touch %{buildroot}%{_sysconfdir}/yum.repos.d/redhat.repo
# Copy secureboot certificates
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
# Install aarch64 certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
# Install x86_64 certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
# Install ppc64le certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
# Install s390x certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
# Link x86_64 certs
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-x86_64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-x86_64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-x86_64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
# Link aarch64 certs
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
# Link ppc64le certs
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-ppc64le.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
# Link s390x certs
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-s390x.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-s390x.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
# copy yum repos
install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
install -p -m 0644 %{SOURCE500} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE501} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE502} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE503} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE504} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE505} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE506} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE507} %{buildroot}%{_sysconfdir}/yum.repos.d/
# RT and NFV are only for x86_64
%ifarch x86_64
install -p -m 0644 %{SOURCE510} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE511} %{buildroot}%{_sysconfdir}/yum.repos.d/
%endif
%if %{with beta}
install -p -m 0644 %{SOURCE512} %{buildroot}%{_sysconfdir}/yum.repos.d/
%endif
# Replace basearch to x86_64_v2
%ifarch x86_64_v2
sed -i "s/\$basearch/x86_64_v2/g" %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
sed -i '/^mirrorlist=/ s|$|?arch=x86_64_v2|g' %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
%endif
# dnf variables
install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
# copy GPG keys
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
install -p -m 0644 %{SOURCE600} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
# These variables should be set in the build environment to change rpm names
mkdir -p %{buildroot}%{_sysconfdir}/rpm
%ifarch x86_64_v2
echo '%%_target_platform x86_64-%%{_vendor}-%%{_target_os}%%{?_gnu}' >> %{buildroot}%{_sysconfdir}/rpm/macros.x86_64_v2
echo '%%x86_64_v2 1' >> %{buildroot}%{_sysconfdir}/rpm/macros.x86_64_v2
%endif
%files
%license docs/LICENSE
%{_sysconfdir}/redhat-release
%{_sysconfdir}/system-release
%{_sysconfdir}/oreon-release
%config(noreplace) %{_sysconfdir}/os-release
%config %{_sysconfdir}/system-release-cpe
%config(noreplace) %{_sysconfdir}/issue
%config(noreplace) %{_sysconfdir}/issue.net
%dir %{_sysconfdir}/issue.d
%dir %{_sysconfdir}/yum.repos.d
%ghost %{_sysconfdir}/yum.repos.d/redhat.repo
%{_rpmmacrodir}/macros.dist
%{_datadir}/redhat-release
%{_datadir}/oreon-release
%{_prefix}/lib/os-release
%{_prefix}/lib/systemd/system-preset/*
%{_prefix}/lib/systemd/user-preset/*
%{_prefix}/lib/sysctl.d/50-redhat.conf
%ifarch x86_64_v2
%config(noreplace) %{_sysconfdir}/rpm/macros.x86_64_v2
%endif
%files -n oreon-sb-certs
# Note to future packagers:
# resetting the symlinks in /etc/pki/sb-certs on upgrade is the intended behavior here
%dir %{_sysconfdir}/pki/sb-certs
%dir %{_datadir}/pki/sb-certs/
%{_sysconfdir}/pki/sb-certs/*.cer
%{_datadir}/pki/sb-certs/*.cer
%files -n oreon-repos
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-appstream.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-baseos.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-crb.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-extras-common.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-highavailability.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-resilientstorage.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-sap.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-saphana.repo
%ifarch x86_64
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-nfv.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-rt.repo
%endif
%if %{with beta}
%config(noreplace) %{_sysconfdir}/yum.repos.d/oreon-beta.repo
%endif
%config(noreplace) %{_sysconfdir}/dnf/vars/stream
%files -n oreon-gpg-keys
%{_sysconfdir}/pki/rpm-gpg
%changelog
* Fri Oct 25 2024 Brandon Lester <blester@oreonproject.org> - 10.0-1.0
- Prepare for Oreon 10

View file

@ -0,0 +1,30 @@
[resilientstorage]
name=Oreon $releasever - ResilientStorage
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/resilientstorage
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/ResilientStorage/$basearch/os/
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[resilientstorage-debuginfo]
name=Oreon $releasever - ResilientStorage - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/resilientstorage-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/ResilientStorage/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[resilientstorage-source]
name=Oreon $releasever - ResilientStorage - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/resilientstorage-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/ResilientStorage/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

30
oreon-rt.repo Normal file
View file

@ -0,0 +1,30 @@
[rt]
name=Oreon $releasever - RT
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/rt
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/RT/$basearch/os/
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[rt-debuginfo]
name=Oreon $releasever - RT - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/rt-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/RT/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[rt-source]
name=Oreon $releasever - RT - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/rt-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/RT/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

30
oreon-sap.repo Normal file
View file

@ -0,0 +1,30 @@
[sap]
name=Oreon $releasever - SAP
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/sap
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/SAP/$basearch/os/
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[sap-debuginfo]
name=Oreon $releasever - SAP - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/sap-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/SAP/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[sap-source]
name=Oreon $releasever - SAP - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/sap-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/SAP/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0

30
oreon-saphana.repo Normal file
View file

@ -0,0 +1,30 @@
[saphana]
name=Oreon $releasever - SAPHANA
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/saphana
# baseurl=https://kitten.repo.almalinux.org/$releasever-kitten/SAPHANA/$basearch/os/
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=1
[saphana-debuginfo]
name=Oreon $releasever - SAPHANA - Debug
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/saphana-debug
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/SAPHANA/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0
[saphana-source]
name=Oreon $releasever - SAPHANA - Source
mirrorlist=https://kitten.mirrors.almalinux.org/mirrorlist/$releasever-kitten/saphana-source
# baseurl=https://kitten.vault.almalinux.org/$releasever-kitten/SAPHANA/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Oreon-10
metadata_expire=86400
enabled_metadata=0