Merge branch 'live' into bluebuildsigning

RoyalOughtness · Jan 11, 2025 · c20d836 · c20d836
2 parents a1ad50e + 79225f1
commit c20d836
Showing 1 changed file with 43 additions and 0 deletions.
diff --git a/docs/example.butane b/docs/example.butane
@@ -0,0 +1,43 @@
+variant: fcos
+version: 1.5.0
+passwd:
+  users:
+    - name: core
+      groups:
+        - wheel
+      password_hash: $y$j9T$mefBCJbp/a49aSkTT4hpE1$6BXtrIuV8856t4A9r/R1GW4aR9eKXxsmB8FXt56Hx70 # 'secureblue'
+      ssh_authorized_keys:
+        - ssh-ed25519 <key>
+storage:
+  files:
+    - path: /opt/install_secureblue.sh
+      contents:
+        source: https://raw.githubusercontent.com/secureblue/secureblue/refs/heads/live/files/system/usr/share/secureblue/install_secureblue.sh
+        verification:
+          hash: sha256-d4ba5bfb556e9d1e3789a02fab2ab2f871033cc6b1712945cdfb9ce4375eafe5
+      mode: 0755
+    - path: /opt/run_install_secureblue.sh
+      contents:
+        inline: |
+          sudo systemctl disable --now zincati.service 2>/dev/null
+          sudo systemctl stop rpm-ostreed-automatic.timer rpm-ostreed-automatic.service 2>/dev/null
+          if [ ! -f /opt/install_secureblue.sh ]; then
+            echo "Error: install_secureblue.sh was not downloaded."
+          else
+            sudo /opt/install_secureblue.sh
+            if [ $? != 0 ]; then
+              echo "Error: Secureblue installer failed."
+            else
+              sed -i "/\/opt\/run_install_secureblue.sh/d" /var/home/core/.bash_profile
+              sudo rm -f /opt/*install_secureblue.sh
+              echo "Automatically rebooting in 5 seconds..."
+              sleep 5
+              sudo systemctl reboot
+            fi
+          fi
+      mode: 0755
+    - path: /var/home/core/.bash_profile
+      overwrite: false
+      append:
+      - inline: |
+          /opt/run_install_secureblue.sh