From 33586dbc80c3b2139954711e0b3c08bef5b6ffc9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicolas=20Mass=C3=A9?= <nmasse@redhat.com>
Date: Fri, 29 Aug 2025 14:28:44 -0400
Subject: [PATCH] initial commit

---
 .gitignore                                    |  2 +
 generic/Containerfile                         | 23 ++++++++++
 generic/env.sh                                |  1 +
 generic/root/etc/vconsole.conf                |  2 +
 .../usr/lib/bootc/kargs.d/00-console.toml     |  2 +
 scripts/build.sh                              | 43 +++++++++++++++++++
 6 files changed, 73 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 generic/Containerfile
 create mode 100644 generic/env.sh
 create mode 100644 generic/root/etc/vconsole.conf
 create mode 100644 generic/root/usr/lib/bootc/kargs.d/00-console.toml
 create mode 100755 scripts/build.sh

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..734ca33
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+auth.json
+signing-key.*
diff --git a/generic/Containerfile b/generic/Containerfile
new file mode 100644
index 0000000..f055071
--- /dev/null
+++ b/generic/Containerfile
@@ -0,0 +1,23 @@
+FROM registry.redhat.io/rhel9/rhel-bootc:9.6
+
+ARG ADMIN_USERNAME=demo \
+    ADMIN_PASSWORD=redhat
+
+RUN <<EOF
+set -Eeuo pipefail
+
+dnf config-manager --enable ansible-automation-platform-2.5-for-rhel-9-$(arch)-rpms
+dnf install -y mkpasswd podman skopeo flightctl-agent
+
+if [ -n "$ADMIN_USERNAME" ]; then
+  useradd -m -G wheel -p "$(echo -n "$ADMIN_PASSWORD" | mkpasswd -m bcrypt --stdin)" "$ADMIN_USERNAME"
+fi
+EOF
+
+ADD --chown=root:root root /
+
+RUN <<EOF
+set -Eeuo pipefail
+systemctl enable flightctl-agent.service
+systemctl mask bootc-fetch-apply-updates.timer
+EOF
diff --git a/generic/env.sh b/generic/env.sh
new file mode 100644
index 0000000..f6bcac6
--- /dev/null
+++ b/generic/env.sh
@@ -0,0 +1 @@
+TARGET_IMAGE="edge-registry.itix.fr/demo-edge-retail/generic:latest"
diff --git a/generic/root/etc/vconsole.conf b/generic/root/etc/vconsole.conf
new file mode 100644
index 0000000..f40c504
--- /dev/null
+++ b/generic/root/etc/vconsole.conf
@@ -0,0 +1,2 @@
+KEYMAP="fr-oss"
+FONT="eurlatgr"
diff --git a/generic/root/usr/lib/bootc/kargs.d/00-console.toml b/generic/root/usr/lib/bootc/kargs.d/00-console.toml
new file mode 100644
index 0000000..f28b5cc
--- /dev/null
+++ b/generic/root/usr/lib/bootc/kargs.d/00-console.toml
@@ -0,0 +1,2 @@
+kargs = ["console=tty0", "console=ttyS0"]
+match-architectures = ["x86_64"]
diff --git a/scripts/build.sh b/scripts/build.sh
new file mode 100755
index 0000000..d2b797e
--- /dev/null
+++ b/scripts/build.sh
@@ -0,0 +1,43 @@
+#!/bin/bash
+
+set -Eeuo pipefail
+
+if [[ "$UID" -ne 0 ]]; then
+  echo "This command must be run as root!"
+  exit 1
+fi
+
+. "$PWD/env.sh"
+
+OCI_REGISTRY="${TARGET_IMAGE%%/*}"
+SCRIPT_DIR="$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+
+if [ ! -f "$PROJECT_DIR/signing-key.pass" ]; then
+  openssl rand -base64 30 > "$PROJECT_DIR/signing-key.pass"
+  chmod 600 "$PROJECT_DIR/signing-key.pass"
+fi
+
+if [ ! -f "$PROJECT_DIR/signing-key.pub" ]; then
+  skopeo generate-sigstore-key --output-prefix "$PROJECT_DIR/signing-key" --passphrase-file "$PROJECT_DIR/signing-key.pass"
+fi
+
+if [ ! -f "/etc/containers/registries.d/${OCI_REGISTRY}.yaml" ]; then
+  tee "/etc/containers/registries.d/${OCI_REGISTRY}.yaml" > /dev/null <<EOF
+docker:
+  ${OCI_REGISTRY}:
+    use-sigstore-attachments: true
+EOF
+fi
+
+export REGISTRY_AUTH_FILE="$PROJECT_DIR/auth.json"
+if [ ! -f "$REGISTRY_AUTH_FILE" ]; then
+  echo "Please enter your credentials for ${OCI_REGISTRY}:"
+  podman login "${OCI_REGISTRY}"
+
+  echo "Please enter your credentials for registry.redhat.io:"
+  podman login registry.redhat.io
+fi
+
+podman build -t "${TARGET_IMAGE}" .
+podman push --sign-by-sigstore-private-key "$PROJECT_DIR/signing-key.private" --sign-passphrase-file "$PROJECT_DIR/signing-key.pass" "${TARGET_IMAGE}"