feat(live): add a kiwi variant which includes only the minimal software to run Agama (#2256)

## Problem

The PXE image is too big and it is not possible to use it on a system
with 2GiB of RAM. It must include a minimal desktop and a browser, which
takes quite some space.

However, in many situations the system can be installed remotely or
using the CLI. For those scenario, we should offer an smaller PXE image
that does not include the desktop stack.

## Solution

Split the main list of packages in two:

* Mandatory packages (basic system, kernel, Agama, etc.).
* Graphical stack (X.org, IceWM, etc.).

Additionally, the MINI image does not contain:

* GPU kernel drivers.
* Wi-Fi and Bluetooth drivers.

> [!WARNING]
> This PR conflicts with the switch to Wayland (#1868), but it can be
adapted later. The same approach still applies.

Author: imobachgs

live/Makefile

@@ -30,6 +30,11 @@ all: $(DESTDIR) $(COPY_FILES) $(DESTDIR)/config-cdroot.tar.xz $(DESTDIR)/root.ta
 clean:
 	rm -rf $(DESTDIR)/*
 
+# remove the destination directory completely (useful when changing OBS target as it also cleans
+# the .osc checkout directory)
+distclean:
+	rm -rf $(DESTDIR)
+
 $(DESTDIR):
 	mkdir -p $@
 

live/src/agama-installer.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Apr 10 05:20:55 UTC 2025 - Imobach Gonzalez Sosa <[email protected]>
+
+- Add a new SUSE_SLE_16_PXE_MINI that only includes the software
+  to use Agama remotely (jsc#PED-12152).
+
 -------------------------------------------------------------------
 Tue Apr  8 15:52:18 UTC 2025 - Josef Reidinger <[email protected]>
 

live/src/agama-installer.kiwi

@@ -16,6 +16,7 @@
         <!-- TODO: add SPx in the future -->
         <profile name="SUSE_SLE_16" description="SLE-based image" import="true" />
         <profile name="SUSE_SLE_16_PXE" description="SLE OEM image for remote installation" import="true" />
+        <profile name="SUSE_SLE_16_PXE_MINI" description="Minimal SLE OEM image for remote installation" import="true" />
         <profile name="openSUSE_PXE" description="openSUSE OEM image for remote installation" import="true" />
         <profile name="Leap_16.0_PXE" description="openSUSE Leap OEM image for remote installation" import="true" />
     </profiles>
@@ -46,7 +47,7 @@
             <bootloader name="custom" />
         </type>
     </preferences>
-    <preferences arch="ppc64le" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE">
+    <preferences arch="ppc64le" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE,SUSE_SLE_16_PXE_MINI">
         <!-- For some reason the compression results on ppc64le are not as good as on the other archs -->
         <type image="oem" filesystem="btrfs" fsmountoptions="compress=zstd:15" firmware="ofw" installpxe="true" installboot="install" kernelcmdline="rd.kiwi.ramdisk ramdisk_size=3174400">
             <bootloader name="grub2" console="serial" timeout="1"/>
@@ -60,7 +61,7 @@
             <size unit="M">3000</size>
         </type>
     </preferences>
-    <preferences arch="s390x" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE">
+    <preferences arch="s390x" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE,SUSE_SLE_16_PXE_MINI">
         <type image="oem" filesystem="btrfs" fsmountoptions="compress=zstd:15" installpxe="true" installboot="install" kernelcmdline="rd.kiwi.ramdisk ramdisk_size=2097152">
             <bootloader name="custom"/>
             <oemconfig>
@@ -73,7 +74,7 @@
             <size unit="M">1900</size>
         </type>
     </preferences>
-    <preferences arch="aarch64,x86_64" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE">
+    <preferences arch="aarch64,x86_64" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE,SUSE_SLE_16_PXE_MINI">
         <type image="oem" filesystem="btrfs" fsmountoptions="compress=zstd:15" firmware="uefi" installiso="true" installpxe="true" installboot="install" kernelcmdline="rd.kiwi.ramdisk ramdisk_size=2097152">
             <bootloader name="grub2" timeout="1"/>
             <oemconfig>
@@ -93,11 +94,14 @@
     <repository type="rpm-md">
         <source path="obsrepositories:/"/>
     </repository>
-    <packages type="image" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE">
+    <packages type="image" profiles="openSUSE_PXE,Leap_16.0_PXE,SUSE_SLE_16_PXE,SUSE_SLE_16_PXE_MINI">
+        <package name="NetworkManager-config-server"/>
         <package name="dracut-kiwi-oem-repart"/>
         <package name="dracut-kiwi-oem-dump"/>
         <archive name="root-PXE.tar.xz"/>
     </packages>
+
+    <!-- common set of packages (SSH-based and remote installation, etc.) -->
     <packages type="image">
         <package name="avahi"/>
         <package name="bind-utils"/>
@@ -113,10 +117,6 @@
         <package name="grub2-s390x-emu" arch="s390x" />
         <package name="grub2-powerpc-ieee1275" arch="ppc64le"/>
         <package name="syslinux" arch="x86_64"/>
-        <package name="fontconfig"/>
-        <package name="fonts-config"/>
-        <package name="adobe-sourcecodepro-fonts"/>
-        <package name="adobe-sourcehansans-jp-fonts"/>
         <package name="openssh"/>
         <package name="iproute2"/>
         <package name="less"/>
@@ -128,7 +128,6 @@
         <package name="kernel-firmware"/>
         <package name="adaptec-firmware"/>
         <package name="atmel-firmware"/>
-        <package name="bluez-firmware"/>
         <package name="ipw-firmware"/>
         <package name="mpt-firmware"/>
         <package name="zd1211-firmware"/>
@@ -138,30 +137,19 @@
         <package name="dracut-kiwi-live"/>
         <package name="blog" arch="s390x" />
         <package name="libblogger2" arch="s390x" />
-        <package name="xauth"/>
-        <package name="MozillaFirefox"/>
-        <package name="libpwquality-tools"/>
         <package name="NetworkManager"/>
         <package name="agama"/>
         <package name="agama-yast"/>
         <package name="agama-web-ui"/>
         <package name="agama-cli"/>
         <package name="agama-cli-bash-completion"/>
         <package name="agama-auto"/>
-        <package name="agama-integration-tests"/>
         <package name="rubygem(agama-yast)"/>
         <package name="rubygem(byebug)"/>
         <package name="microos-tools"/>
-        <package name="icewm-lite"/>
-        <package name="xinit"/>
-        <package name="xset"/>
-        <package name="xorg-x11-server"/>
-        <package name="xorg-x11-fonts-core"/>
-        <package name="xf86-input-libinput" />
         <package name="psmisc"/>
         <package name="joe"/>
         <package name="checkmedia"/>
-        <package name="spice-vdagent"/>
         <package name="libtss2-tcti-device0"/>
         <package name="jq"/>
         <package name="yast2-schema"/>
@@ -170,6 +158,26 @@
         <package name="aaa_base-extras"/>
         <archive name="root.tar.xz"/>
     </packages>
+
+    <!-- packages for local installation (desktop, browser, etc.) -->
+    <packages type="image" profiles="Leap_16.0,Leap_16.0_PXE,openSUSE,openSUSE_PXE,SUSE_SLE_16,SUSE_SLE_16_PXE">
+        <package name="bluez-firmware"/>
+        <package name="agama-integration-tests"/>
+        <package name="fontconfig"/>
+        <package name="fonts-config"/>
+        <package name="adobe-sourcecodepro-fonts"/>
+        <package name="adobe-sourcehansans-jp-fonts"/>
+        <package name="xauth"/>
+        <package name="MozillaFirefox"/>
+        <package name="icewm-lite"/>
+        <package name="xinit"/>
+        <package name="xset"/>
+        <package name="xorg-x11-server"/>
+        <package name="xorg-x11-fonts-core"/>
+        <package name="xf86-input-libinput" />
+        <package name="spice-vdagent"/>
+    </packages>
+
     <!-- additional packages for the Leap distributions -->
     <packages type="image" profiles="Leap_16.0,Leap_16.0_PXE">
         <package name="agama-products-opensuse"/>
@@ -178,9 +186,11 @@
         <package name="patterns-openSUSE-base"/>
         <package name="staging-build-key"/>
         <package name="openSUSE-build-key"/>
-        <package name="MozillaFirefox-branding-openSUSE"/>
         <package name="kernel-default-extra"/>
     </packages>
+    <packages type="image" profiles="Leap_16.0">
+        <package name="MozillaFirefox-branding-openSUSE"/>
+    </packages>
     <!-- additional packages for the openSUSE distributions -->
     <packages type="image" profiles="openSUSE,openSUSE_PXE">
         <package name="agama-products-opensuse"/>
@@ -189,22 +199,25 @@
         <package name="patterns-openSUSE-base"/>
         <package name="staging-build-key"/>
         <package name="openSUSE-build-key"/>
+    </packages>
+    <packages type="image" profiles="openSUSE">
         <package name="MozillaFirefox-branding-openSUSE"/>
     </packages>
     <!-- additional packages for the SLE distributions -->
-    <packages type="image" profiles="SUSE_SLE_16,SUSE_SLE_16_PXE">
+    <packages type="image" profiles="SUSE_SLE_16,SUSE_SLE_16_PXE,SUSE_SLE_16_PXE_MINI">
         <package name="agama-products-sle"/>
         <package name="grub2-branding-SLE" arch="aarch64,x86_64"/>
         <package name="patterns-base-base"/>
         <package name="suse-build-key"/>
+    </packages>
+    <packages type="image" profiles="SUSE_SLE_16,SUSE_SLE_16_PXE">
         <package name="MozillaFirefox-branding-SLE"/>
         <package name="kernel-default-extra"/>
     </packages>
     <packages type="bootstrap">
         <package name="udev"/>
         <package name="filesystem"/>
         <package name="glibc-locale"/>
-        <package name="cracklib-dict-full"/>
         <package name="ca-certificates"/>
         <package name="ca-certificates-mozilla"/>
     </packages>
@@ -215,7 +228,7 @@
         <package name="openSUSE-release"/>
         <package name="openSUSE-release-ftp"/>
     </packages>
-    <packages type="bootstrap" profiles="SUSE_SLE_16,SUSE_SLE_16_PXE">
+    <packages type="bootstrap" profiles="SUSE_SLE_16,SUSE_SLE_16_PXE,SUSE_SLE_16_PXE_MINI">
         <package name="SLES-release"/>
     </packages>
 </image>

live/src/config.sh

@@ -1,4 +1,4 @@
-#! /bin/bash
+#!/bin/bash
 
 set -ex
 
@@ -61,11 +61,16 @@ systemctl enable checkmedia.service
 systemctl enable qemu-guest-agent.service
 systemctl enable setup-systemd-proxy-env.path
 systemctl enable x11-autologin.service
-systemctl enable spice-vdagentd.service
+test -f  /usr/lib/systemd/system/spice-vdagentd.service && systemctl enable spice-vdagentd.service
 systemctl enable zramswap
 
-# default target
-systemctl set-default graphical.target
+# set the default target
+if [[ "$kiwi_profiles" == *MINI* ]]; then
+  # the MINI images do not include graphical environment
+  systemctl set-default multi-user.target
+else
+  systemctl set-default graphical.target
+fi
 
 # disable snapshot cleanup
 systemctl disable snapper-cleanup.timer
@@ -140,6 +145,33 @@ dd bs=1 count=1 seek=2G if=/dev/zero of=/var/lib/live_free_space
 
 ################################################################################
 # Reducing the used space
+#
+# Profile specific cleanup
+#
+
+# Extra cleanup for the MINI images
+if [[ "$kiwi_profiles" == *MINI* ]]; then
+  # remove the GPU drivers, not needed when running in text mode only,
+  # the related firmware is deleted by the script below
+  rm -rf /usr/lib/modules/*/kernel/drivers/gpu
+
+  # remove WiFi drivers
+  rm -rf /usr/lib/modules/*/kernel/drivers/net/wireless
+  # remove Bluetooth drivers
+  rm -rf /usr/lib/modules/*/kernel/drivers/bluetooth
+  rm -rf /usr/lib/modules/*/kernel/net/bluetooth
+fi
+
+# Remove the SUSEConnect CLI tool from the openSUSE images and the mini PXE image,
+# keep it in the SLE images, it might be useful for testing/debugging
+# (Agama uses libsuseconnect.so directly via the Ruby bindings and does not need the CLI,
+# registration in theory would be still possible even in the openSUSE images)
+if [[ "$kiwi_profiles" == *MINI* ]] || [[ "$kiwi_profiles" == *Leap* ]] || [[ "$kiwi_profiles" == *openSUSE* ]]; then
+  rm -f /usr/bin/suseconnect
+fi
+
+################################################################################
+# Generic cleanup in all images
 
 # Clean-up logs
 rm /var/log/zypper.log /var/log/zypp/history
@@ -207,7 +239,14 @@ if [ -n "$python" ]; then
 fi
 
 # remove OpenGL support
-rpm -qa | grep ^Mesa | xargs rpm -e --nodeps
+rpm -qa | grep ^Mesa | xargs --no-run-if-empty rpm -e --nodeps
+
+# remove unused SUSEConnect libzypp plugins
+rm -f /usr/lib/zypper/commands/zypper-migration
+rm -f /usr/lib/zypper/commands/zypper-search-packages
+
+# delete some FireFox audio codec support
+rm -f /usr/lib64/firefox/libmozavcodec.so
 
 # uninstall libyui-qt and libqt (pulled in by the YaST dependencies),
 # not present in SLES, do not fail if not installed
@@ -280,9 +319,12 @@ rpm -e --nodeps Mesa-gallium || true
 rm -rf /usr/lib*/libmfxhw*.so.* /usr/lib*/mfx/
 
 # the new, optional nvidia gsp firmware blobs are huge - ~ 70MB
-du -h -s /lib/firmware/nvidia
-find /lib/firmware/nvidia -name gsp | xargs -r rm -rf
-du -h -s /lib/firmware/nvidia
+if [ -e /lib/firmware/nvidia ]; then
+  du -h -s /lib/firmware/nvidia
+  find /lib/firmware/nvidia -name gsp | xargs -r rm -rf
+  du -h -s /lib/firmware/nvidia
+fi
+
 # The gems are unpackaged already, no need to store them twice
 du -h -s /usr/lib*/ruby/gems/*/cache/
 rm -rf /usr/lib*/ruby/gems/*/cache/