| # debian.sh --arch 'amd64' out/ 'trixie' '@1789689600' |
| /bin/sh -c rm -f /etc/apt/apt.conf.d/docker-gzip-indexes /etc/apt/apt.conf.d/docker-no-languages |
| /bin/sh -c rm -f /var/log/apt/eipp.log.xz |
| /bin/sh -c --mount=type=cache,target=/var/cache/apt,sharing=locked --mount=type=cache,target=/var/lib/apt,sharing=locked --mount=type=tmpfs,target=/var/log --mount=type=tmpfs,target=/run apt update && apt install -y ca-certificates libarchive13 libcurl4-openssl-dev libzstd-dev libssl-dev pkg-config curl git build-essential meson libfuse3-dev liblzma-dev libarchive-dev libsoup2.4-dev e2fslibs-dev libext2fs-dev libgpgme-dev go-md2man autoconf automake libtool libseccomp-dev libcap-dev libglib2.0-dev bison flex equivs gobject-introspection ninja-build --no-install-recommends |
| /bin/sh -c --mount=type=cache,target=/var/cache/apt,sharing=locked --mount=type=cache,target=/var/lib/apt,sharing=locked --mount=type=tmpfs,target=/var/log --mount=type=tmpfs,target=/var/cache --mount=type=tmpfs,target=/run apt update && apt install -y systemd systemd-boot systemd-ukify systemd-timesyncd ca-certificates curl locales dracut dosfstools e2fsprogs fdisk firmware-linux-free git git-lfs gpg zstd libp11-kit0 rsync iproute2 iputils-ping systemd-resolved wpasupplicant skopeo podman openssh-server sudo vim btop |
| /bin/sh -c --mount=type=bind,from=ostree,src=/,dst=/mnt dpkg -i /mnt/libostree.deb && apt-mark hold libostree-1-1 |
| COPY dir:e57a0638146122e11371ea09c3ea6d28a4939fab4a6b28c1058d1cdf50d53d00 in / |
| COPY dir:3da208924bd6e560de910123d90883d95369a804a760ffc61a70c25d87ec3e8f in / |
| COPY dir:a77c2f463a57a9d3fc5bf2b208e1d45cabb800cb4479e20ab0a1e3971a1703b3 in / |
| COPY dir:bc2701ce4c29a71cb13512288e853f4ee21e6ed688c4297bdb595c92d3c6a70c in / |
| ARG BUILD_ID |
| |1 BUILD_ID=7615a18-dirty /bin/sh -c --mount=type=cache,target=/var/cache/apt,sharing=locked --mount=type=cache,target=/var/lib/apt,sharing=locked --mount=type=tmpfs,target=/var/log --mount=type=tmpfs,target=/var/cache --mount=type=tmpfs,target=/run --mount=type=bind,src=scripts/build,dst=/ctx/build /ctx/build:sha256:fc1ebc6bded02a8db6845d02c42923e68ff0ac34242591c09c28095323702969 |
| |1 BUILD_ID=7615a18-dirty /bin/sh -c echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && locale-gen && echo "LANG=en_US.UTF-8" > /etc/default/locale |
| |1 BUILD_ID=7615a18-dirty /bin/sh -c systemctl enable systemd-networkd.service systemd-networkd-wait-online.service systemd-resolved.service systemd-timesyncd.service |
| |1 BUILD_ID=7615a18-dirty /bin/sh -c /usr/libexec/bootc-finalize |
| LABEL containers.bootc=1 |
| |1 BUILD_ID=7615a18-dirty /bin/sh -c bootc container lint |
| /bin/sh -c --mount=type=tmpfs,target=/var/log --mount=type=tmpfs,target=/var/cache apt-get update && apt-get install -y --no-install-recommends linux-image-amd64 kexec-tools ethtool && apt-get clean && rm -rf /var/lib/apt/lists/* |
| COPY dir:ed50c348bd82223648bb673628551e5cd88ba37d1110e6b43016bafd98665d8d in / |
| /bin/sh -c set -eux; test "$(ls /usr/lib/modules | wc -l)" -eq 1 || { echo "expected one kernel in /usr/lib/modules, got: $(ls /usr/lib/modules)"; exit 1; }; kver=$(ls /usr/lib/modules); cp "/boot/vmlinuz-$kver" "/usr/lib/modules/$kver/vmlinuz"; /usr/libexec/build-initramfs; test -f "/usr/lib/modules/$kver/initramfs.img" || { echo "build-initramfs produced no initramfs for $kver"; exit 1; }; lsinitrd "/usr/lib/modules/$kver/initramfs.img" 2>/dev/null | grep -q 'modprobe.d/blacklist-dw_dmac.conf' || { echo "dw_dmac blacklist did NOT make it into the initramfs -- it would be"; echo "loaded before the real root exists and the Wyse 3040 would keep"; echo "hanging on reboot. Check the COPY runs before build-initramfs."; exit 1; }; rm -rf /boot/* |
| /bin/sh -c set -eux; command -v kexec >/dev/null || { echo "kexec missing"; exit 1; }; command -v ethtool >/dev/null || { echo "ethtool missing"; exit 1; }; test -f /usr/lib/systemd/network/50-wol.link; grep -q '^NamePolicy=' /usr/lib/systemd/network/50-wol.link || { echo "50-wol.link lacks NamePolicy; it would disable predictable interface names"; exit 1; } |
| /bin/sh -c set -eux; systemd-analyze cat-config systemd/system.conf > /tmp/merged.conf; grep -qx 'RuntimeWatchdogSec=60s' /tmp/merged.conf || { echo "RuntimeWatchdogSec not in effect:"; grep -i watchdog /tmp/merged.conf; exit 1; }; grep -qx 'RebootWatchdogSec=3min' /tmp/merged.conf || { echo "RebootWatchdogSec not in effect"; exit 1; }; rm -f /tmp/merged.conf |
| /bin/sh -c set -eux; systemd-analyze cat-config systemd/journald.conf > /tmp/journald-merged.conf; test "$(grep -c '^Storage=' /tmp/journald-merged.conf)" -ge 1; grep '^Storage=' /tmp/journald-merged.conf | tail -1 | grep -qx 'Storage=volatile' || { echo "journald storage is not volatile:"; grep '^Storage=' /tmp/journald-merged.conf; exit 1; }; grep -qx 'RuntimeMaxUse=32M' /tmp/journald-merged.conf || { echo "RuntimeMaxUse not in effect"; exit 1; }; rm -f /tmp/journald-merged.conf |
| /bin/sh -c bootc container lint |
