Microshift bootc image

.github/workflows/build-images.yaml

@@ -43,6 +43,10 @@ jobs:
             dockerfile: controller/deploy/operator/bundle.Dockerfile
             context: controller/deploy/operator
             generate_bundle: true
+          - image_name: jumpstarter-dev/microshift/bootc
+            dockerfile: controller/deploy/microshift-bootc/Containerfile
+            context: controller
+            generate_installer: true
           # Python images (use repo root context for .git access needed by hatch-vcs)
           - image_name: jumpstarter-dev/jumpstarter
             label: jumpstarter
@@ -117,6 +121,18 @@ jobs:
         run: make bundle VERSION=${{ env.VERSION }}
         working-directory: controller/deploy/operator
 
+      - name: Set up Go
+        if: ${{ matrix.generate_installer && steps.check.outputs.skip != 'true' }}
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: controller/deploy/operator/go.mod
+
+      - name: Build operator installer manifest
+        if: ${{ matrix.generate_installer && steps.check.outputs.skip != 'true' }}
+        run: |
+          IMG="${{ env.QUAY_ORG }}/jumpstarter-operator:${{ env.VERSION }}"
+          make -C controller/deploy/operator build-installer IMG="${IMG}"
+
       - name: Set image tags
         if: ${{ env.PUSH == 'true' && steps.check.outputs.skip != 'true' }}
         id: set-tags

controller/deploy/microshift-bootc/Containerfile

@@ -0,0 +1,46 @@
+FROM ghcr.io/microshift-io/microshift:4.21.0_gbc8e20c07_4.21.0_okd_scos.ec.14
+# Install dependencies for config-svc
+RUN dnf install -y epel-release && \
+    dnf install -y python3 iproute python3-flask python3-pip && \
+    pip3 install python-pam && \
+    dnf clean all
+
+# Install MicroShift manifests
+RUN mkdir -p /etc/microshift/manifests.d/002-jumpstarter
+COPY deploy/microshift-bootc/kustomization.yaml       /etc/microshift/manifests.d/002-jumpstarter/kustomization.yaml
+COPY deploy/operator/dist/install.yaml                /etc/microshift/manifests.d/002-jumpstarter/install-operator.yaml
+
+# Configure firewalld to open required ports
+# Use firewall-offline-cmd since firewalld is not running during build
+RUN firewall-offline-cmd --add-service=http && \
+    firewall-offline-cmd --add-service=https && \
+    firewall-offline-cmd --add-port=8880/tcp
+
+# Set root password
+RUN echo "root:jumpstarter" | chpasswd
+
+# Set hostname, we need something stable for microshift
+RUN echo "js-community" > /etc/hostname
+
+# Install config-svc application
+RUN mkdir -p /usr/local/lib/config-svc
+
+# Copy Python modules and templates
+COPY deploy/microshift-bootc/config-svc/*.py /usr/local/lib/config-svc/
+COPY deploy/microshift-bootc/config-svc/templates/ /usr/local/lib/config-svc/templates/
+
+# Create wrapper script to run the application
+RUN echo '#!/bin/bash' > /usr/local/bin/config-svc && \
+    echo 'cd /usr/local/lib/config-svc' >> /usr/local/bin/config-svc && \
+    echo 'exec /usr/bin/python3 app.py "$@"' >> /usr/local/bin/config-svc && \
+    chmod +x /usr/local/bin/config-svc
+
+# Install banner update script
+COPY deploy/microshift-bootc/config-svc/update-banner.sh /usr/local/bin/update-banner.sh
+RUN chmod +x /usr/local/bin/update-banner.sh
+
+# Install systemd services
+COPY deploy/microshift-bootc/config-svc/config-svc.service /etc/systemd/system/config-svc.service
+COPY deploy/microshift-bootc/config-svc/update-banner.service /etc/systemd/system/update-banner.service
+RUN systemctl enable config-svc.service update-banner.service
+

controller/deploy/microshift-bootc/Makefile

@@ -0,0 +1,202 @@
+.PHONY: help build bootc-build bootc-build-multi push bootc-push bootc-push-multi bootc-run bootc-stop bootc-sh bootc-rm build-image build-iso build-all build-all-multi push-all push-all-multi download-centos-iso build-ks-iso upload-ks-iso
+
+# Default image tags
+BOOTC_IMG ?= quay.io/jumpstarter-dev/microshift/bootc:latest
+
+# Kickstart ISO configuration (set ARCH=aarch64 for ARM builds)
+ARCH ?= $(shell uname -m)
+VERSION_TAG ?= latest
+KS_ISO_DIR = output/ksiso
+CENTOS_ISO_FILENAME = CentOS-Stream-10-latest-$(ARCH)-boot.iso
+CENTOS_ISO = $(KS_ISO_DIR)/$(CENTOS_ISO_FILENAME)
+CENTOS_ISO_URL = https://mirrors.centos.org/mirrorlist?path=/10-stream/BaseOS/$(ARCH)/iso/$(CENTOS_ISO_FILENAME)&redirect=1&protocol=https
+KS_ISO = $(KS_ISO_DIR)/cs10-js-$(ARCH)-$(VERSION_TAG).iso
+
+
+help: ## Display this help
+	@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n  make \033[36m<target>\033[0m\n"} /^[a-zA-Z_0-9-]+:.*?##/ { printf "  \033[36m%-20s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)
+
+##@ Build
+
+build: bootc-build ## Build bootc image (default target)
+
+bootc-build: ## Build the bootc image with MicroShift
+	@echo "Building bootc image: $(BOOTC_IMG): building as root to be on the container storage from root"
+	sudo podman build -t $(BOOTC_IMG) -f Containerfile ../..
+
+bootc-build-multi: ## Build the bootc image for multiple architectures (amd64, arm64)
+	@echo "Building multiarch bootc image: $(BOOTC_IMG)"
+	@echo "This will build for linux/amd64 and linux/arm64"
+	@# Remove existing manifest if it exists
+	-podman manifest rm $(BOOTC_IMG) 2>/dev/null || true
+	@# Create a new manifest
+	podman manifest create $(BOOTC_IMG)
+	@# Build for amd64
+	@echo "Building for linux/amd64..."
+	podman build --platform linux/amd64 -t $(BOOTC_IMG)-amd64 -f Containerfile ../..
+	@# Build for arm64
+	@echo "Building for linux/arm64..."
+	podman build --platform linux/arm64 -t $(BOOTC_IMG)-arm64 -f Containerfile ../..
+	@# Add both images to the manifest
+	podman manifest add $(BOOTC_IMG) $(BOOTC_IMG)-amd64
+	podman manifest add $(BOOTC_IMG) $(BOOTC_IMG)-arm64
+	@echo "Multiarch manifest created successfully!"
+	@echo "To inspect: podman manifest inspect $(BOOTC_IMG)"
+	@echo "To push: make bootc-push-multi"
+
+output/qcow2/disk.qcow2: ## Build a bootable QCOW2 image from the bootc image
+	@echo "Building QCOW2 image from: $(BOOTC_IMG)"a
+	@echo "Running bootc-image-builder..."
+	@mkdir -p output
+	sudo podman run \
+		--rm \
+		-it \
+		--privileged \
+		--pull=newer \
+		--security-opt label=type:unconfined_t \
+		-v ./config.toml:/config.toml:ro \
+		-v ./output:/output \
+		-v /var/lib/containers/storage:/var/lib/containers/storage \
+		quay.io/centos-bootc/bootc-image-builder:latest \
+		--type qcow2 \
+		-v \
+		$(BOOTC_IMG)
+	@echo "QCOW2 image built successfully in ./output/"
+
+output/iso/disk.iso: ## Build a bootable ISO image from the bootc image
+	@echo "Building ISO image from: $(BOOTC_IMG)"
+	@echo "Running bootc-image-builder..."
+	@mkdir -p output
+	sudo podman run \
+		--rm \
+		-it \
+		--privileged \
+		--pull=newer \
+		--security-opt label=type:unconfined_t \
+		-v ./config.toml:/config.toml:ro \
+		-v ./output:/output \
+		-v /var/lib/containers/storage:/var/lib/containers/storage \
+		quay.io/centos-bootc/bootc-image-builder:latest \
+		--type iso \
+		-v \
+		$(BOOTC_IMG)
+	@echo "ISO image built successfully in ./output/"
+
+build-image: bootc-build ## Build the bootc based qcow2 image
+	@echo "Building image: output/qcow2/disk.qcow2"
+	@echo "Cleaning up any existing LVM resources to avoid conflicts..."
+	-sudo vgs --noheadings -o vg_name,vg_uuid | grep myvg1 | while read vg uuid; do sudo vgremove -f --select vg_uuid=$$uuid 2>/dev/null || true; done
+	-sudo losetup -D 2>/dev/null || true
+	sudo rm -f output/qcow2/disk.qcow2
+	make output/qcow2/disk.qcow2
+	@echo "Image built successfully in ./output/"
+
+build-iso: bootc-build ## Build the bootc based ISO image
+	@echo "Building ISO image: output/iso/disk.iso"
+	@echo "Cleaning up any existing LVM resources to avoid conflicts..."
+	-sudo vgs --noheadings -o vg_name,vg_uuid | grep myvg1 | while read vg uuid; do sudo vgremove -f --select vg_uuid=$$uuid 2>/dev/null || true; done
+	-sudo losetup -D 2>/dev/null || true
+	sudo rm -f output/iso/disk.iso
+	make output/iso/disk.iso
+	@echo "ISO image built successfully in ./output/"
+
+##@ Kickstart ISO
+
+$(CENTOS_ISO):
+	@mkdir -p $(KS_ISO_DIR)
+	@echo "Downloading CentOS Stream 10 DVD ISO for $(ARCH)..."
+	curl -L -C - -o "$@.partial" "$(CENTOS_ISO_URL)"
+	mv "$@.partial" "$@"
+
+download-centos-iso: $(CENTOS_ISO) ## Download CentOS Stream 10 ISO (set ARCH=aarch64 for ARM)
+
+build-ks-iso: $(CENTOS_ISO) ## Build a kickstart ISO from CentOS Stream 10 (set ARCH=aarch64 for ARM)
+	@echo "Building kickstart ISO for $(ARCH): $(KS_ISO) (needs sudo to run mkksiso)"
+	sudo mkksiso kickstart.ks $(CENTOS_ISO) $(KS_ISO)
+	@echo "Kickstart ISO built successfully: $(KS_ISO)"
+
+upload-ks-iso: ## Upload kickstart ISO to gofile.io and print download URL
+	@test -f "$(KS_ISO)" || { echo "Error: $(KS_ISO) not found. Run 'make build-ks-iso' first."; exit 1; }
+	@echo "Uploading $(KS_ISO) to gofile.io..."
+	@SERVER=$$(curl -s https://api.gofile.io/servers | jq -r '.data.servers[0].name') && \
+	RESPONSE=$$(curl -F "file=@$(KS_ISO)" "https://$${SERVER}.gofile.io/uploadFile") && \
+	URL=$$(echo "$$RESPONSE" | jq -r '.data.downloadPage') && \
+	if [ "$$URL" = "null" ] || [ -z "$$URL" ]; then \
+		echo "Upload failed:"; \
+		echo "$$RESPONSE" | jq .; \
+		exit 1; \
+	fi && \
+	echo "" && \
+	echo "Upload complete!" && \
+	echo "Download URL: $$URL"
+
+##@ Push
+
+push: bootc-push ## Push bootc image to registry
+
+bootc-push: ## Push the bootc image to registry
+	@echo "Pushing bootc image: $(BOOTC_IMG)"
+	sudo podman push $(BOOTC_IMG)
+
+bootc-push-multi: ## Push the multiarch manifest to registry
+	@echo "Pushing multiarch manifest: $(BOOTC_IMG)"
+	@echo "This will push the manifest list with amd64 and arm64 images"
+	podman manifest push $(BOOTC_IMG) $(BOOTC_IMG)
+	@echo "Multiarch manifest pushed successfully!"
+	@echo "Images available for linux/amd64 and linux/arm64"
+
+##@ Development
+
+build-all: bootc-build ## Build bootc image
+
+build-all-multi: bootc-build-multi ## Build multiarch bootc image
+
+push-all: bootc-push ## Push bootc image to registry
+
+push-all-multi: bootc-push-multi ## Push multiarch bootc image to registry
+
+bootc-run: ## Run MicroShift in a bootc container
+	@echo "Running MicroShift container with image: $(BOOTC_IMG)"
+	@BOOTC_IMG=$(BOOTC_IMG) sudo -E ./run-microshift.sh
+
+bootc-stop: ## Stop the running MicroShift container
+	@echo "Stopping MicroShift container..."
+	-sudo podman stop jumpstarter-microshift-okd
+
+bootc-rm: bootc-stop ## Remove the MicroShift container
+	@echo "Removing MicroShift container..."
+	-sudo podman rm -f jumpstarter-microshift-okd
+	@echo "Cleaning up LVM resources..."
+	-sudo vgremove -f myvg1 2>/dev/null || true
+	-sudo losetup -d $$(sudo losetup -j /var/lib/microshift-okd/lvmdisk.image | cut -d: -f1) 2>/dev/null || true
+	@echo "LVM cleanup complete"
+
+bootc-sh: ## Open a shell in the running MicroShift container
+	@echo "Opening shell in MicroShift container..."
+	sudo podman exec -it jumpstarter-microshift-okd /bin/bash -l
+
+bootc-reload-app: ## Reload the config service app without rebuilding (dev mode)
+	@echo "Reloading config-svc app..."
+	@echo "Copying Python modules..."
+	@for file in config-svc/*.py; do \
+		sudo podman cp $$file jumpstarter-microshift-okd:/usr/local/lib/config-svc/; \
+	done
+	@echo "Copying templates..."
+	@for file in config-svc/templates/*; do \
+		sudo podman cp $$file jumpstarter-microshift-okd:/usr/local/lib/config-svc/templates/; \
+	done
+	sudo podman exec jumpstarter-microshift-okd systemctl restart config-svc
+	@echo "Config service reloaded successfully!"
+
+clean: ## Clean up local images and build artifacts
+	@echo "Removing local images..."
+	-sudo podman rmi $(BOOTC_IMG)
+	@echo "Removing QCOW2 output..."
+	-sudo rm -rf output/qcow2/disk.qcow2
+	@echo "Removing ISO output..."
+	-sudo rm -rf output/iso/disk.iso
+	@echo "Removing kickstart ISO output..."
+	-rm -rf $(KS_ISO_DIR)
+	@echo "Removing LVM disk image..."
+	-sudo rm -f /var/lib/microshift-okd/lvmdisk.image
+