add: beginnings of um nothing bootc

.github/workflows/bootc.yaml

@@ -0,0 +1,60 @@
+# SPDX-FileCopyrightText: 2025 Cappy Ishihara <@cappy@fyralabs.com>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+name: Build bootc images
+permissions:
+  contents: read
+  packages: write
+  id-token: write
+on:
+  schedule:
+    - cron: "0 4 * * *" # every day at 4am UTC
+  workflow_dispatch:
+  push:
+
+jobs:
+  # temporarily disable to test iso builds faster
+  build:
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    strategy:
+      fail-fast: false
+      matrix:
+        variant: # add new shade variants here
+          - name: nothing
+            image: ghcr.io/ultramarine-linux/shade/nothing
+          # - name: cinnamon
+          #   image: ghcr.io/ultramarine-linux/shade/cinnamon
+          # - name: sway
+          #   image: ghcr.io/ultramarine-linux/shade/sway
+    uses: ./.github/workflows/reusable-build-variant.yaml
+    with:
+      variant_name: ${{ matrix.variant.name }}
+      variant_image: ${{ matrix.variant.image }}
+    secrets: inherit
+
+  iso:
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    strategy:
+      fail-fast: false
+      matrix:
+        variant: # add new shade variants here
+          - name: nothing
+            image: ghcr.io/ultramarine-linux/shade/nothing
+          # - name: cinnamon
+          #   image: ghcr.io/ultramarine-linux/shade/cinnamon
+          # - name: sway
+          #   image: ghcr.io/ultramarine-linux/shade/sway
+    needs: build # wait for build job to complete before running iso job
+    uses: ./.github/workflows/build-iso.yaml
+    with:
+      variant_name: ${{ matrix.variant.name }}
+      variant_image: ${{ matrix.variant.image }}
+      image_tag: ${{ needs.build.outputs.image_tag }} # output from reusable-build-variant.yaml's manifest job
+    secrets: inherit

.github/workflows/build-iso.yaml

@@ -0,0 +1,110 @@
+# SPDX-FileCopyrightText: 2025 Its-J <@jonah@fyralabs.com>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+name: Build ISO images with katsu
+
+on:
+  # schedule:
+  #   - cron: "0 4 * * *" # every day at 4am UTC
+  workflow_call:
+    inputs:
+      variant_name:
+        description: Variant name used to locate the build context
+        required: true
+        type: string
+      variant_image:
+        description: Full image repository to build and push
+        required: true
+        type: string
+      image_tag:
+        description: Tag of the image to build
+        required: true
+        type: string
+
+# Cancel in-progress builds when a new run is queued
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  build-iso:
+    strategy:
+      fail-fast: false
+      matrix:
+        arch: [x86_64, aarch64]
+        variant:
+          - name: nothing
+            image: ghcr.io/ultramarine-linux/nothing-bootc:${{ github.ref_name || 'main' }}
+
+    name: Build ISO images with katsu
+    runs-on: ${{ contains(matrix.arch, 'aarch64') && 'ubuntu-24.04-arm' || 'ubuntu-24.04' }}
+
+    container:
+      image: ghcr.io/fyralabs/katsu:main
+      options: --privileged --security-opt seccomp=unconfined -v /usr:/hostusr -v /:/hostfs
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+
+      - name: Clean up space before build
+        run: |
+          df -h
+          # Wipe stuff in our host /usr to make some space
+
+          # We don't need the android SDK
+          rm -rf /hostusr/local/lib/android
+          # We're a Rust shop, not a Haskell shop
+          rm -rf /hostusr/local/.ghcup
+          rm -rf /hostfs/opt/ghc
+          # We don't even use .NET
+          rm -rf /hostusr/share/dotnet
+          # We don't need CodeQL in this action
+          rm -rf /hostfs/opt/hostedtoolcache/CodeQL
+
+
+          echo "After cleanup:"
+          df -h
+
+      - name: Login to GitHub Container Registry
+        env:
+          registry: ghcr.io
+        shell: bash
+        run: |
+          echo "${{ secrets.GITHUB_TOKEN }}" | sudo podman login -u "${{ github.actor }}" --password-stdin "$registry"
+
+      - name: Build live ISO with Katsu
+        run: |
+          # set -x prints all commands to terminal
+          set -x
+
+          echo "debug: variant_image: ${{ inputs.variant_image }}"
+          echo "debug: image_tag: ${{ inputs.image_tag }}"
+
+          # make output directory and copy katsu manifest template there
+          mkdir -p output/
+          cp -r katsu-template/ output/katsu-live/
+
+          # replace %BASE_IMAGE with the actual image name in bootc-live.yaml manifest
+          # %BASE_IMAGE needs to look something like ghcr.io/ultramarine-linux/shade/nothing:sha-acc8f20
+          # ghcr.io/ultramarine-linux/shade/nothing is the variant_image and :main is the tag
+          IMAGE_NAME=${{ inputs.variant_image }}:${{ inputs.image_tag }}
+
+          echo "debug: IMAGE_NAME=${IMAGE_NAME}"
+
+          sed -i "s|%BASE_IMAGE%|${IMAGE_NAME}|g" output/katsu-live/bootc-live.yaml # makes katsu manifest
+
+          # build the live ISO using katsu with the generated manifest
+          katsu -o iso output/katsu-live/bootc-live.yaml
+
+          # rename the built ISO to include variant name and architecture
+          mv out.iso ./${{ inputs.variant_name }}-${{ matrix.arch }}.iso
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: iso-artifact-${{ github.run_id }}-${{ inputs.variant_name }}-${{ matrix.arch }}
+          path: ./*.iso
+          archive: false
+          compression-level: 0