[Draft] Migrate to mkosi + sysupdate

.github/workflows/daily-9.0.yml → .github/workflows/monthly-image-9.0.yml

@@ -1,11 +1,11 @@
-name: Daily OS 9
+name: Monthly Image-based OS 9
 
 on:
   push:
     branches:
       - main
   schedule:
-    - cron: "0 0 * * *"
+    - cron: "0 0 1 * *"
   workflow_dispatch: {}
 
 jobs:
@@ -30,6 +30,10 @@ jobs:
     - name: Clone build scripts
       uses: actions/checkout@v7
 
-    - name: Build and upload daily .iso
+    - name: Build
       run: |
-        ./workflows.sh etc/terraform-daily-9.0-azure-${{ matrix.arch }}.conf "${{ secrets.key }}" "${{ secrets.secret }}" "${{ secrets.endpoint }}" "${{ secrets.bucket }}"
+        ./build.sh etc/terraform-daily-9.0-azure-${{ matrix.arch }}.conf
+
+    - name: Upload
+      run: |
+        ./upload.sh "${{ secrets.key }}" "${{ secrets.secret }}" "${{ secrets.endpoint }}" "${{ secrets.bucket }}" "${{ secrets.install_bucket }}"

.gitignore

@@ -1,5 +1,19 @@
-.DS_Store
-tmp
-artifacts
-builds
-*~
+cosign.key
+**/cosign.key
+cache
+_build_*
+output
+_build-*/**
+*.img
+*.raw
+mkosi.local/
+mkosi.local.conf
+mkosi.output/
+mkosi.cache/
+mkosi.tools/
+mkosi.tools.manifest
+mkosi.key
+mkosi.crt
+mkosi.version
+mkosi.rootpw
+.mkosi-private

Justfile

@@ -0,0 +1,42 @@
+alias serve := start-sysupdate-server
+
+default:
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    just build-sysupdate
+
+lazy-spin:
+    just _gen_keys
+    just build-sysupdate
+
+build-sysupdate:
+    mkosi build --debug --force --profile=sysupdate && \
+    just sign-repo
+
+# resize:
+#     qemu-img resize ./mkosi.output/Elementary_x86-64.raw +40G
+
+_gen_keys:
+    mkosi genkey || true
+
+
+clean:
+    mkosi clean
+    sudo rm -r mkosi.tools/ mkosi.cache/
+
+start-sysupdate-server:
+    #!/usr/bin/env bash
+    just sign-repo && \
+    python -m http.server -d mkosi.output 7676
+
+sign-repo:
+    #!/usr/bin/env bash
+    cd mkosi.output
+    echo "Repo will not be signed, use verify=no."
+    echo "Generating SHA256..."
+    sha256sum Elementary_*_x86-64.usr-x86-64-verity-sig.*.raw \
+          Elementary_*_x86-64.usr-x86-64-verity.*.raw \
+          Elementary_*_x86-64.usr-x86-64.*.raw \
+          Elementary_*_x86-64.efi \
+          > SHA256SUMS
+    cd ..