os-image-composer/image-templates/emt3-x86_64-emf-raw.yml at main · open-edge-platform/os-image-composer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
# AI-searchable metadata for template discovery
metadata:
  description: "Edge Microvisor Toolkit 3 Edge Multifunction (EMF) raw image for edge multifunction deployments without real-time requirements"
  use_cases:
    - "edge multifunction"
    - "industrial edge"
    - "non-realtime edge"
    - "edge workloads"
  keywords:
    - emf
    - edge
    - multifunction
    - industrial
    - emt3
    - microvisor
    - raw

image:
  name: emt3-x86_64-minimal-emf
  version: "1.0.0"

target:
  os: edge-microvisor-toolkit # Target OS name
  dist: emt3 # Target OS distribution
  arch: x86_64 # Target OS architecture
  imageType: raw # Image type, valid value: [raw, iso].

disk:
  name: edge-non-rt # 1:1 mapping to the systemConfigs name
  artifacts:
    -
      type: raw  # image file format, valid value [raw, vhd, vhdx, qcow2, vmdk, vdi]
      compression: gz # image compression format (optional)
  size: 4GiB # 4G, 4GB, 4096 MiB also valid. (Required for raw)
  partitionTableType: gpt # Partition table type, valid value: [gpt, mbr]
  partitions: # Required for raw, optional for ISO, not needed for rootfs.
    - id: boot
      type: esp
      flags:
        - esp
        - boot
      start: 1MiB
      end: 384MiB
      fsType: fat32
      mountPoint: /boot/efi
      mountOptions: umask=0077

    - id: rootfs
      type: linux-root-amd64
      start: 384MiB
      end: 3584MiB
      fsType: ext4
      mountPoint: /
      mountOptions: defaults

    - id: edge_persistent
      type: linux
      start: 3584MiB
      end: "0"  # use the rest of the disk space
      fsType: ext4
      mountPoint: /opt


systemConfig:

  additionalFiles:
    - local: ../additionalfiles/layout.env
      final: /etc/layout.env

  name: edge-non-rt
  description: Default yml configuration for raw image

  immutability:
    enabled: false # default is true
    # To enable Secure Boot, provide the actual file paths for your environment below and uncomment the relevant lines.
    # secureBootDBKey: "<SECURE_BOOT_DB_KEY_PATH>"
    # secureBootDBCrt: "<SECURE_BOOT_DB_CRT_PATH>"
    # secureBootDBCer: "<SECURE_BOOT_DB_CER_PATH>"

    # Package Configuration
  packages:
    # Additional packages beyond the base system

    # ssh server
    - openssh-server

    # virtualization host
    - qemu-kvm

    # agent packages
    - hardware-discovery-agent
    - cluster-agent
    - node-agent
    - platform-observability-agent
    - platform-telemetry-agent
    - platform-update-agent
    - in-band-manageability
    - reporting-agent

    # tinker tools
    - gptfdisk
    - cloud-init
    - cloud-utils-growpart
    - tpm2-tools
    - lvm2
    - netplan
    - efibootmgr
    - unzip
    - rsyslog
    - tpm2-initramfs-tool
    - veritysetup
    - python3-pyserial

    # persistent mount
    - rsync

    # selinux full
    - selinux-policy
    - selinux-policy-devel
    - policycoreutils-python-utils
    - checkpolicy
    - secilc
    - setools-console

    # intel gpu base
    #- kernel-drivers-gpu
    - linux-firmware-i915
    - linux-firmware-ice
    - intel-npu-firmware

    # intel wireless
    - linux-firmware-iwlwifi
    - wireless-regdb

    # os update
    - os-update

    # vpro amt
    - platform-manageability-agent
    - rpc
    - intel-lms

    # docker
    - moby-engine
    - docker-cli
    - docker-compose

    # emf packages
    - tpm-cryptsetup
    - persistent-mount

  # Kernel Configuration
  kernel:
    version: "6.12"
    cmdline: "root=/dev/mapper/rootfs_verity console=ttyS0,115200 console=tty0 loglevel=7 sysctl.vm.overcommit_memory=1 sysctl.kernel.panic=10 sysctl.kernel.panic_on_oops=1 sysctl.fs.inotify.max_user_instances=8192 rd.parallel=1 rd.shell=0 rd.timeout=200 rd.emergency=reboot i915.force_probe=*"