diff options
| author | tranch <tranch.xiao@gmail.com> | 2026-07-29 08:23:02 +0800 |
|---|---|---|
| committer | tranch <tranch.xiao@gmail.com> | 2026-07-29 08:23:02 +0800 |
| commit | a00715659960496be8753aa2adc5ec4ec7afbbf1 (patch) | |
| tree | 4edbb382fdd216de806a6384bd37d9a44d2800cd /installer/build.sh | |
| parent | 13e8465b802802657d10f935bbfc7dae3aa5286b (diff) | |
| download | AeroCore-OS-a00715659960496be8753aa2adc5ec4ec7afbbf1.tar.gz AeroCore-OS-a00715659960496be8753aa2adc5ec4ec7afbbf1.zip | |
Fix installer update origin
Rewrite installed bootc origins to the configured signed registry
reference.
Diffstat (limited to 'installer/build.sh')
| -rwxr-xr-x | installer/build.sh | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/installer/build.sh b/installer/build.sh index 0cc1b8a..3093dcc 100755 --- a/installer/build.sh +++ b/installer/build.sh @@ -6,6 +6,9 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" BASE_IMAGE=${BASE_IMAGE:?} INSTALL_IMAGE_PAYLOAD=${INSTALL_IMAGE_PAYLOAD:?} INSTALL_IMAGE_PAYLOAD_ARCHIVE=${INSTALL_IMAGE_PAYLOAD_ARCHIVE:-} +INSTALL_IMAGE_TAG=${INSTALL_IMAGE_TAG:?} +OSTREE_IMAGE_REF=${OSTREE_IMAGE_REF:?} +ostree_origin_ref="${OSTREE_IMAGE_REF}:${INSTALL_IMAGE_TAG}" # The installer is a live KDE environment. Keep the installed system payload # separate: it is the AeroCore image, while BASE_IMAGE provides the live UI. @@ -124,6 +127,14 @@ df -h /var/tmp \${target_tmp} ostreecontainer --url=${INSTALL_IMAGE_PAYLOAD} --transport=containers-storage --no-signature-verification +# The local containers-storage deployment is intentionally unverified because +# the payload is loaded from an OCI archive. Point future bootc updates at the +# signed registry reference configured for the image instead. +%post --erroronfail --log=/tmp/aerocore-origin.log +set -eux +sed -i 's|container-image-reference=.*|container-image-reference=${ostree_origin_ref}|' /ostree/deploy/default/deploy/*.origin +%end + %post --nochroot --log=/tmp/aerocore-hostname.log set -eux target_root= |