/images/ubuntu-workerbee.yaml at master

# Copyright 2019-2024 distrobuilder developers
# Copyright 2025 Shota FUJI <pockawoooh@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# SPDX-License-Identifier: Apache-2.0
#
# distrobuilder image definition for general development task.
# This image is for projects using problematic tools such as aspect's Bazel rules
# that uses system tools with messed $PATH or tools not working without FHS.
#
# No development tool is installed at build time. Users are supposed to install
# Nix then apply ../#workerbee. Project specific softwares should be installed
# via Nix Flakes (devShell) or version manager tools (ASDF, mise.)

image:
  name: ubuntu-workerbee-x86_64
  distribution: ubuntu
  release: plucky
  description: |-
    Ubuntu {{ image.release }}
  architecture: x86_64

source:
  downloader: debootstrap
  same_as: gutsy
  url: http://archive.ubuntu.com/ubuntu
  keyserver: keyserver.ubuntu.com
  keys:
    - 0x790BC7277767219C42C86F933B4FE6ACC0B21F32
    - 0xf6ecb3762474eda9d21b7022871920d1991bc93c

targets:
  lxc:
    create_message: |-
      You just created an {{ image.description }} container.

      No default root or user password are set by LXC.
    config:
      - type: all
        before: 5
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/ubuntu.common.conf

      - type: user
        before: 5
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/ubuntu.userns.conf

      - type: all
        after: 4
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/common.conf

      - type: user
        after: 4
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/userns.conf

      - type: all
        content: |-
          lxc.arch = {{ image.architecture_personality }}

files:
  - path: /etc/hostname
    generator: hostname

  - path: /etc/hosts
    generator: hosts

  - path: /etc/resolvconf/resolv.conf.d/original
    generator: remove

  - path: /etc/resolvconf/resolv.conf.d/tail
    generator: remove

  - path: /etc/machine-id
    generator: dump

  - path: /etc/user/profile
    generator: copy
    source: /etc/profile

  - path: /var/lib/dbus/machine-id
    generator: remove

  - path: /etc/netplan/10-lxc.yaml
    generator: dump
    content: |-
      network:
        version: 2
        ethernets:
          eth0:
            dhcp4: true
            dhcp-identifier: mac
    releases:
      - bionic
      - eoan
      - focal
      - jammy
      - noble
      - oracular
      - plucky
    types:
      - container
    variants:
      - default

  - path: /etc/netplan/10-lxc.yaml
    generator: dump
    content: |-
      network:
        version: 2
        ethernets:
          enp5s0:
            dhcp4: true
            dhcp-identifier: mac
    releases:
      - bionic
      - eoan
      - focal
      - jammy
      - noble
      - oracular
      - plucky
    types:
      - vm
    variants:
      - default

  - name: meta-data
    generator: cloud-init
    variants:
      - cloud

  - name: network-config
    generator: cloud-init
    variants:
      - cloud

  - name: user-data
    generator: cloud-init
    variants:
      - cloud

  - name: vendor-data
    generator: cloud-init
    variants:
      - cloud

  - name: ext4
    generator: fstab
    types:
      - vm

  - name: incus-agent
    generator: incus-agent
    types:
      - vm

  - path: /etc/default/grub.d/50-incus.cfg
    generator: dump
    content: |-
      GRUB_RECORDFAIL_TIMEOUT=0
      GRUB_TIMEOUT=0
      GRUB_CMDLINE_LINUX_DEFAULT="${GRUB_CMDLINE_LINUX_DEFAULT} console=tty1 console=ttyS0"
      GRUB_TERMINAL=console
    types:
      - vm

  - path: /etc/sudoers.d/90-incus
    generator: dump
    mode: 0440
    content: |-
      # User rules for ubuntu
      ubuntu ALL=(ALL) NOPASSWD:ALL
    variants:
      - default

packages:
  manager: apt
  update: true
  cleanup: true
  sets:
    - packages:
        - fuse
        - language-pack-en
        - vim
        - fish
        - curl
      action: install

    - packages:
        - cloud-init
      action: install
      variants:
        - cloud

    - packages:
        - acpid
      action: install
      architectures:
        - amd64
        - arm64
      types:
        - vm

    - packages:
        - grub-efi-amd64-signed
        - shim-signed
      action: install
      architectures:
        - amd64
      types:
        - vm

    - packages:
        - grub-efi-arm64-signed
      action: install
      architectures:
        - arm64
      types:
        - vm

    - packages:
        - shim-signed
      action: install
      architectures:
        - arm64
      releases:
        - disco
        - eoan
        - focal
        - jammy
        - noble
        - oracular
        - plucky
      types:
        - vm

    - packages:
        - linux-virtual
      action: install
      releases:
        - bionic
        - eoan
        - focal
        - jammy
        - noble
        - oracular
        - plucky
      types:
        - vm

    - packages:
        - os-prober
      action: remove
      types:
        - vm

  repositories:
    - name: sources.list
      url: |-
        deb http://archive.ubuntu.com/ubuntu {{ image.release }} main restricted universe multiverse
        deb http://archive.ubuntu.com/ubuntu {{ image.release }}-updates main restricted universe multiverse
        deb http://security.ubuntu.com/ubuntu {{ image.release }}-security main restricted universe multiverse
      architectures:
        - amd64
        - i386

    - name: sources.list
      url: |-
        deb http://ports.ubuntu.com/ubuntu-ports {{ image.release }} main restricted universe multiverse
        deb http://ports.ubuntu.com/ubuntu-ports {{ image.release }}-updates main restricted universe multiverse
        deb http://ports.ubuntu.com/ubuntu-ports {{ image.release }}-security main restricted universe multiverse
      architectures:
        - armhf
        - arm64
        - powerpc
        - powerpc64
        - ppc64el
        - riscv64

actions:

  # Create default user account
  - trigger: post-update
    action: |-
      #!/bin/sh
      set -eux

      getent group sudo >/dev/null 2>&1 || groupadd --system sudo
      useradd --create-home -s /bin/fish -G sudo -U workerbee
    variants:
      - default

  # Enable systemd-networkd
  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux

      systemctl enable systemd-networkd
    releases:
      - bionic
      - eoan
      - focal
      - jammy
      - noble
      - oracular
      - plucky

  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux

      # Make sure the locale is built and functional
      locale-gen en_US.UTF-8
      update-locale LANG=en_US.UTF-8

      # Cleanup underlying /run
      mount -o bind / /mnt
      rm -rf /mnt/run/*
      umount /mnt

      # Cleanup temporary shadow paths
      rm /etc/*-

  - trigger: post-files
    action: |-
      #!/bin/sh
      set -eux

      TARGET="x86_64"
      [ "$(uname -m)" = "aarch64" ] && TARGET="arm64"

      update-grub
      grub-install --uefi-secure-boot --target="${TARGET}-efi" --no-nvram --removable
      update-grub
      sed -i "s#root=[^ ]*#root=${DISTROBUILDER_ROOT_UUID}#g" /boot/grub/grub.cfg
    types:
      - vm

mappings:
  architecture_map: debian