Merge branch 'main' into chore/add-vscode-mcp-config

Author: arodage

.coverage-threshold

@@ -1 +1 @@
-65.9
+66.3

.github/workflows/gitleak-scan.yml

@@ -4,6 +4,8 @@ on: [pull_request, push, workflow_dispatch]
 permissions:
   contents: read
   pull-requests: read
+  security-events: write
+  actions: read
 
 jobs:
   gitleaks:
@@ -17,6 +19,6 @@ jobs:
         with:
           scan-scope: "all"
           source: "./"
-          config_path: "./ci/gitleaks_baselines/os-image-composer-gitleaks.csv"
-          report_format: "csv"
+          config_path: "./ci/gitleaks_baselines/os-image-composer-gitleaks.sarif"
+          report_format: "sarif"
           redact: "true"

README.md

@@ -20,6 +20,7 @@ combinations. The table below lists the OS and architecture combinations that ar
 | Red Hat Compatible Distro | rcd10 | x86_64 |
 | Wind River eLxr | elxr12 | x86_64 |
 | Ubuntu | ubuntu24 | x86_64 |
+| Ubuntu | ubuntu26 | x86_64 |
 
 ## Quick Start
 

config/osv/ubuntu/ubuntu26/chrootenvconfigs/chrootenv_aarch64.yml

@@ -0,0 +1,30 @@
+essential:
+  - dpkg
+  - apt
+  - debianutils
+  - init-system-helpers
+  - dash
+  - mount
+  - sysvinit-utils
+  - gzip
+  - bash
+  - util-linux
+  - tar
+  - base-files
+  - base-passwd
+  - sed
+  - bsdutils
+  - coreutils
+  - findutils
+  - grep
+  - login
+  - perl-base
+  - diffutils
+  - libc-bin
+  - hostname
+  - ncurses-bin
+  - ncurses-base
+
+packages:
+  - mmdebstrap
+  - grub-efi-arm64-bin

config/osv/ubuntu/ubuntu26/chrootenvconfigs/chrootenv_x86_64.yml

@@ -0,0 +1,31 @@
+essential:
+  - dpkg
+  - apt
+  - debianutils
+  - init-system-helpers
+  - dash
+  - mount
+  - sysvinit-utils
+  - gzip
+  - bash
+  - util-linux
+  - tar
+  - base-files
+  - base-passwd
+  - sed
+  - bsdutils
+  - coreutils
+  - findutils
+  - grep
+  - login
+  - perl-base
+  - diffutils
+  - libc-bin
+  - hostname
+  - ncurses-bin
+  - ncurses-base
+
+packages:
+  - mmdebstrap
+  - grub-pc-bin
+  - grub-efi-amd64-bin

config/osv/ubuntu/ubuntu26/chrootenvconfigs/local.list

@@ -0,0 +1 @@
+deb [trusted=yes] file:///cdrom/cache-repo stable main

config/osv/ubuntu/ubuntu26/config.yml

@@ -0,0 +1,15 @@
+# Canonical Ubuntu 26.04 LTS OS Configuration
+# This file defines architecture-specific build configurations for Canonical Ubuntu 26.04 LTS
+
+x86_64:
+  dist: ubuntu26                                    # Distribution identifier
+  arch: x86_64                                      # Target architecture
+  pkgType: deb                                      # Package management system
+  chrootenvConfigFile: chrootenvconfigs/chrootenv_x86_64.yml  # Path to chrootenv config
+  releaseVersion: "26.04"                           # Distribution release version
+aarch64:
+  dist: ubuntu26                                    # Distribution identifier
+  arch: aarch64                                      # Target architecture
+  pkgType: deb                                      # Package management system
+  chrootenvConfigFile: chrootenvconfigs/chrootenv_aarch64.yml  # Path to chrootenv config
+  releaseVersion: "26.04"                           # Distribution release version

config/osv/ubuntu/ubuntu26/imageconfigs/additionalfiles/dhcp.network

@@ -0,0 +1,10 @@
+[Match]
+Name=en*
+
+[Network]
+DHCP=yes
+IPv6AcceptRA=no
+
+[DHCPv4]
+SendRelease=false
+ClientIdentifier=mac

config/osv/ubuntu/ubuntu26/imageconfigs/additionalfiles/getty@.service

@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to tty1 but allow other choices
+[Install]
+Alias=getty.target.wants/getty@tty1.service

config/osv/ubuntu/ubuntu26/imageconfigs/additionalfiles/serial-getty@.service

@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to ttyS0 but allow other choices
+[Install]
+Alias=getty.target.wants/serial-getty@ttyS0.service