#imagebuilder — Public Fediverse posts

Been poking at clusterctl and trying to get it to work on Proxmox for a while, with not much luck. The first VM provisions, gets online, and then seems to get stuck somewhere.

It most likely is an issue with my template, since I added support for Rocky Linux 10 to the image-builder repo locally, including validate- and build- targets. The template builds fine, and clones fine, but then stalls.

In the interest of moving forward, maybe I just use some Terraform and Ansible to deploy/provision k8s VMs in a repeatable manner.

#homelab #proxmox #kubernetes #infrastructure #capmox #imagebuilder #terraform

Been poking at clusterctl and trying to get it to work on Proxmox for a while, with not much luck. The first VM provisions, gets online, and then seems to get stuck somewhere.

It most likely is an issue with my template, since I added support for Rocky Linux 10 to the image-builder repo locally, including validate- and build- targets. The template builds fine, and clones fine, but then stalls.

In the interest of moving forward, maybe I just use some Terraform and Ansible to deploy/provision k8s VMs in a repeatable manner.

#homelab #proxmox #kubernetes #infrastructure #capmox #imagebuilder #terraform

Been poking at clusterctl and trying to get it to work on Proxmox for a while, with not much luck. The first VM provisions, gets online, and then seems to get stuck somewhere.

It most likely is an issue with my template, since I added support for Rocky Linux 10 to the image-builder repo locally, including validate- and build- targets. The template builds fine, and clones fine, but then stalls.

In the interest of moving forward, maybe I just use some Terraform and Ansible to deploy/provision k8s VMs in a repeatable manner.

#homelab #proxmox #kubernetes #infrastructure #capmox #imagebuilder #terraform

Been poking at clusterctl and trying to get it to work on Proxmox for a while, with not much luck. The first VM provisions, gets online, and then seems to get stuck somewhere.

It most likely is an issue with my template, since I added support for Rocky Linux 10 to the image-builder repo locally, including validate- and build- targets. The template builds fine, and clones fine, but then stalls.

In the interest of moving forward, maybe I just use some Terraform and Ansible to deploy/provision k8s VMs in a repeatable manner.

#homelab #proxmox #kubernetes #infrastructure #capmox #imagebuilder #terraform

Been poking at clusterctl and trying to get it to work on Proxmox for a while, with not much luck. The first VM provisions, gets online, and then seems to get stuck somewhere.

It most likely is an issue with my template, since I added support for Rocky Linux 10 to the image-builder repo locally, including validate- and build- targets. The template builds fine, and clones fine, but then stalls.

In the interest of moving forward, maybe I just use some Terraform and Ansible to deploy/provision k8s VMs in a repeatable manner.

#homelab #proxmox #kubernetes #infrastructure #capmox #imagebuilder #terraform

🇬🇧 𝗕𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗼𝘄𝗻 𝗔𝘁𝘁𝗲𝗻𝗱𝗲𝗱 𝗦𝘆𝘀𝘂𝗽𝗴𝗿𝗮𝗱𝗲 𝘀𝗲𝗿𝘃𝗲𝗿 𝗳𝗼𝗿 𝗮𝗻 𝗢𝗽𝗲𝗻𝗪𝗿𝘁 𝗿𝗼𝘂𝘁𝗲𝗿

𝖥𝗋𝗎𝗌𝗍𝗋𝖺𝗍𝖾𝖽 𝖻𝗒 𝖮𝗉𝖾𝗇𝖶𝗋𝗍 𝗌𝖾𝗋𝗏𝖾𝗋 𝗈𝗏𝖾𝗋𝗅𝗈𝖺𝖽𝗌 𝖺𝗇𝖽 𝗅𝗈𝗇𝗀 𝗊𝗎𝖾𝗎𝖾𝗌? 𝖣𝗂𝗌𝖼𝗈𝗏𝖾𝗋 𝗁𝗈𝗐 𝗍𝗈 𝖻𝗎𝗂𝗅𝖽 𝗒𝗈𝗎𝗋 𝗈𝗐𝗇 𝗅𝗈𝖼𝖺𝗅 𝖠𝗍𝗍𝖾𝗇𝖽𝖾𝖽 𝖲𝗒𝗌𝗎𝗉𝗀𝗋𝖺𝖽𝖾 (𝖠𝖲𝖴) 𝗌𝖾𝗋𝗏𝖾𝗋 𝗎𝗌𝗂𝗇𝗀 𝖣𝗈𝖼𝗄𝖾𝗋 𝖺𝗇𝖽 𝖯𝗈𝖽𝗆𝖺𝗇. 𝖫𝖾𝖺𝗋𝗇 𝗍𝗈 𝖻𝗒𝗉𝖺𝗌𝗌 𝗉𝗎𝖻𝗅𝗂𝖼 𝗐𝖺𝗂𝗍𝗂𝗇𝗀 𝗍𝗂𝗆𝖾𝗌, 𝖼𝗈𝗆𝗉𝗂𝗅𝖾 𝖼𝗎𝗌𝗍𝗈𝗆 𝗋𝗈𝗎𝗍𝖾𝗋 𝖿𝗂𝗋𝗆𝗐𝖺𝗋𝖾 𝗂𝗇 𝗆𝗂𝗇𝗎𝗍𝖾𝗌, 𝖺𝗇𝖽 𝗋𝖾𝗀𝖺𝗂𝗇 𝖼𝗈𝗇𝗍𝗋𝗈𝗅 𝗇𝗈𝗐.

https://dariusz.wieckiewicz.org/en/building-your-own-asu-openwrt/

#OpenWrt
#Networking
#Sysupgrade
#AttendedSysupgrade
#RouterUpdate
#FirmwareUpdate
#UbuntuServer
#ImageBuilder

🇬🇧 𝗕𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗼𝘄𝗻 𝗔𝘁𝘁𝗲𝗻𝗱𝗲𝗱 𝗦𝘆𝘀𝘂𝗽𝗴𝗿𝗮𝗱𝗲 𝘀𝗲𝗿𝘃𝗲𝗿 𝗳𝗼𝗿 𝗮𝗻 𝗢𝗽𝗲𝗻𝗪𝗿𝘁 𝗿𝗼𝘂𝘁𝗲𝗿

𝖥𝗋𝗎𝗌𝗍𝗋𝖺𝗍𝖾𝖽 𝖻𝗒 𝖮𝗉𝖾𝗇𝖶𝗋𝗍 𝗌𝖾𝗋𝗏𝖾𝗋 𝗈𝗏𝖾𝗋𝗅𝗈𝖺𝖽𝗌 𝖺𝗇𝖽 𝗅𝗈𝗇𝗀 𝗊𝗎𝖾𝗎𝖾𝗌? 𝖣𝗂𝗌𝖼𝗈𝗏𝖾𝗋 𝗁𝗈𝗐 𝗍𝗈 𝖻𝗎𝗂𝗅𝖽 𝗒𝗈𝗎𝗋 𝗈𝗐𝗇 𝗅𝗈𝖼𝖺𝗅 𝖠𝗍𝗍𝖾𝗇𝖽𝖾𝖽 𝖲𝗒𝗌𝗎𝗉𝗀𝗋𝖺𝖽𝖾 (𝖠𝖲𝖴) 𝗌𝖾𝗋𝗏𝖾𝗋 𝗎𝗌𝗂𝗇𝗀 𝖣𝗈𝖼𝗄𝖾𝗋 𝖺𝗇𝖽 𝖯𝗈𝖽𝗆𝖺𝗇. 𝖫𝖾𝖺𝗋𝗇 𝗍𝗈 𝖻𝗒𝗉𝖺𝗌𝗌 𝗉𝗎𝖻𝗅𝗂𝖼 𝗐𝖺𝗂𝗍𝗂𝗇𝗀 𝗍𝗂𝗆𝖾𝗌, 𝖼𝗈𝗆𝗉𝗂𝗅𝖾 𝖼𝗎𝗌𝗍𝗈𝗆 𝗋𝗈𝗎𝗍𝖾𝗋 𝖿𝗂𝗋𝗆𝗐𝖺𝗋𝖾 𝗂𝗇 𝗆𝗂𝗇𝗎𝗍𝖾𝗌, 𝖺𝗇𝖽 𝗋𝖾𝗀𝖺𝗂𝗇 𝖼𝗈𝗇𝗍𝗋𝗈𝗅 𝗇𝗈𝗐.

https://dariusz.wieckiewicz.org/en/building-your-own-asu-openwrt/

#OpenWrt
#Networking
#Sysupgrade
#AttendedSysupgrade
#RouterUpdate
#FirmwareUpdate
#UbuntuServer
#ImageBuilder

🇬🇧 𝗕𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗼𝘄𝗻 𝗔𝘁𝘁𝗲𝗻𝗱𝗲𝗱 𝗦𝘆𝘀𝘂𝗽𝗴𝗿𝗮𝗱𝗲 𝘀𝗲𝗿𝘃𝗲𝗿 𝗳𝗼𝗿 𝗮𝗻 𝗢𝗽𝗲𝗻𝗪𝗿𝘁 𝗿𝗼𝘂𝘁𝗲𝗿

𝖥𝗋𝗎𝗌𝗍𝗋𝖺𝗍𝖾𝖽 𝖻𝗒 𝖮𝗉𝖾𝗇𝖶𝗋𝗍 𝗌𝖾𝗋𝗏𝖾𝗋 𝗈𝗏𝖾𝗋𝗅𝗈𝖺𝖽𝗌 𝖺𝗇𝖽 𝗅𝗈𝗇𝗀 𝗊𝗎𝖾𝗎𝖾𝗌? 𝖣𝗂𝗌𝖼𝗈𝗏𝖾𝗋 𝗁𝗈𝗐 𝗍𝗈 𝖻𝗎𝗂𝗅𝖽 𝗒𝗈𝗎𝗋 𝗈𝗐𝗇 𝗅𝗈𝖼𝖺𝗅 𝖠𝗍𝗍𝖾𝗇𝖽𝖾𝖽 𝖲𝗒𝗌𝗎𝗉𝗀𝗋𝖺𝖽𝖾 (𝖠𝖲𝖴) 𝗌𝖾𝗋𝗏𝖾𝗋 𝗎𝗌𝗂𝗇𝗀 𝖣𝗈𝖼𝗄𝖾𝗋 𝖺𝗇𝖽 𝖯𝗈𝖽𝗆𝖺𝗇. 𝖫𝖾𝖺𝗋𝗇 𝗍𝗈 𝖻𝗒𝗉𝖺𝗌𝗌 𝗉𝗎𝖻𝗅𝗂𝖼 𝗐𝖺𝗂𝗍𝗂𝗇𝗀 𝗍𝗂𝗆𝖾𝗌, 𝖼𝗈𝗆𝗉𝗂𝗅𝖾 𝖼𝗎𝗌𝗍𝗈𝗆 𝗋𝗈𝗎𝗍𝖾𝗋 𝖿𝗂𝗋𝗆𝗐𝖺𝗋𝖾 𝗂𝗇 𝗆𝗂𝗇𝗎𝗍𝖾𝗌, 𝖺𝗇𝖽 𝗋𝖾𝗀𝖺𝗂𝗇 𝖼𝗈𝗇𝗍𝗋𝗈𝗅 𝗇𝗈𝗐.

https://dariusz.wieckiewicz.org/en/building-your-own-asu-openwrt/

#OpenWrt
#Networking
#Sysupgrade
#AttendedSysupgrade
#RouterUpdate
#FirmwareUpdate
#UbuntuServer
#ImageBuilder

🇬🇧 𝗕𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗼𝘄𝗻 𝗔𝘁𝘁𝗲𝗻𝗱𝗲𝗱 𝗦𝘆𝘀𝘂𝗽𝗴𝗿𝗮𝗱𝗲 𝘀𝗲𝗿𝘃𝗲𝗿 𝗳𝗼𝗿 𝗮𝗻 𝗢𝗽𝗲𝗻𝗪𝗿𝘁 𝗿𝗼𝘂𝘁𝗲𝗿

𝖥𝗋𝗎𝗌𝗍𝗋𝖺𝗍𝖾𝖽 𝖻𝗒 𝖮𝗉𝖾𝗇𝖶𝗋𝗍 𝗌𝖾𝗋𝗏𝖾𝗋 𝗈𝗏𝖾𝗋𝗅𝗈𝖺𝖽𝗌 𝖺𝗇𝖽 𝗅𝗈𝗇𝗀 𝗊𝗎𝖾𝗎𝖾𝗌? 𝖣𝗂𝗌𝖼𝗈𝗏𝖾𝗋 𝗁𝗈𝗐 𝗍𝗈 𝖻𝗎𝗂𝗅𝖽 𝗒𝗈𝗎𝗋 𝗈𝗐𝗇 𝗅𝗈𝖼𝖺𝗅 𝖠𝗍𝗍𝖾𝗇𝖽𝖾𝖽 𝖲𝗒𝗌𝗎𝗉𝗀𝗋𝖺𝖽𝖾 (𝖠𝖲𝖴) 𝗌𝖾𝗋𝗏𝖾𝗋 𝗎𝗌𝗂𝗇𝗀 𝖣𝗈𝖼𝗄𝖾𝗋 𝖺𝗇𝖽 𝖯𝗈𝖽𝗆𝖺𝗇. 𝖫𝖾𝖺𝗋𝗇 𝗍𝗈 𝖻𝗒𝗉𝖺𝗌𝗌 𝗉𝗎𝖻𝗅𝗂𝖼 𝗐𝖺𝗂𝗍𝗂𝗇𝗀 𝗍𝗂𝗆𝖾𝗌, 𝖼𝗈𝗆𝗉𝗂𝗅𝖾 𝖼𝗎𝗌𝗍𝗈𝗆 𝗋𝗈𝗎𝗍𝖾𝗋 𝖿𝗂𝗋𝗆𝗐𝖺𝗋𝖾 𝗂𝗇 𝗆𝗂𝗇𝗎𝗍𝖾𝗌, 𝖺𝗇𝖽 𝗋𝖾𝗀𝖺𝗂𝗇 𝖼𝗈𝗇𝗍𝗋𝗈𝗅 𝗇𝗈𝗐.

https://dariusz.wieckiewicz.org/en/building-your-own-asu-openwrt/

#OpenWrt
#Networking
#Sysupgrade
#AttendedSysupgrade
#RouterUpdate
#FirmwareUpdate
#UbuntuServer
#ImageBuilder

Собираем OpenWRT прошивку и ImageBuilder для нестандартного оборудования на основе dts

Привет Хабр! Меня зовут Алексей и я занимаюсь беспроводными технологиями. Не так давно я рассказывал, как собрать прошивку OpenWRT без image builder . В этой статье мы повысим планку и попробуем собрать и прошивку, и image builder для модели роутера с частичной поддержкой OpenWRT. Под частичной поддержкой я понимаю то, что для данной конкретной модели роутера поддержки нет, но она есть для платформы. Экспериментировать я буду с реальным устройством - это Wi-Fi 7 роутер, полученный от китайского производителя. Вместе с роутером производитель предоставил нам необходимую документацию и DTS файл. Заранее хочу предупредить, что производитель просил не раскрывать название модели и не тиражировать его DTS файл. Поэтому часть информации на скриншотах я заблюрирую.

https://habr.com/ru/articles/969396/

#wifi_роутер #openwrt #imagebuilder #dts

Linux on ARM Snapdragon processor netbooks?

Easy all-devices-on-board-working install is only a matter of short time now :linux:

A work in progress: to free Samsung Galaxy Book Go's (such as NP345XLA models) to work with Linux "The Freedom OS".

There's a DEBIAN LINUX image for starters! Login with these credentials after a successful live-boot:

User= linux
Pass= changeme

The touchpad won't work yet (nor the WiFi). Are you a dev? Able to help with this effort?

DL the image & burn it to a USB-stick with for example Etcher => https://github.com/hexdump0815/imagebuilder/releases/tag/230308-01

#ARM #Linux #netbook #laptop #Snapdragon #Samsung #Galaxy #GO #development #Debian #GitHub #imagebuilder #HexDump @hexdump

I'm using "image builder" on #RockyLinux to experiment with some different homelab things. The "Create Blueprint" web UI (through cockpit) is refreshing every 15 seconds and kicking back to start of the process. Maddening! My browser if Firefox.

#redhat #homelab #ImageBuilder #linux

@almalinux I can't wait to share my talk on #imageBuilder and #kernelCare!

Updated AWS::ImageBuilder::InfrastructureConfiguration

Use the Placement property to configure the physical hardware where instances that Image Builder launches during image creation will run.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html #imagebuilder #cloudformation

Awesome! So glad to see that #btrfs subvolume/compression support landed in #ImageBuilder! 🎉

https://github.com/osbuild/osbuild/pull/1312

I wrote a blog post a while back about shipping @fedora cloud images to Oracle Cloud Infrastructure (OCI), but now there are docs for doing this with RHEL and Image Builder! 👏

#oracle #cloud #imagebuilder #rhel #redhat

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/composing_a_customized_rhel_system_image/index#proc_pushing-customized-images-to-oracle-cloud-infrastructure_creating-cloud-images-with-composer

Conclusion #2 - the followup. After seeing this in RHEL 8.8 as well I joined the #ImageBuilder Matrix channel and got to chat with the smart people.

https://github.com/osbuild/osbuild-composer/issues/3475

The #RHEL team wants to know: how do YOU build out new systems? Do you use #imageBuilder? Pre-built #VMs? From Scratch? #sysadmin

RT @andreaturno: Are you looking to build better @RHEL golden images? Visit our #EnableSysAdmin blog to see how @ITGuyEric is using #ImageBuilder in his homelab to create and update his #RHEL systems https://t.co/vRVPFbHjok

Oh! It's been a while since I commented on #RedHat #ImageBuilder / #osbuild :D Let's correct that.

It's absolute awesome how you can set an #OpenSCAP profile directly in the blueprint. It's also completely useless :) It always performs both an evaluation and remediation step, with no option to turn the remediation off, or to supply a tailored profile with added or excluded tests.

I can't imagine many images being built that don't have some form of post-processing, so running remediation beforehand is either just unwanted or worse, changes things that shouldn't be changed.

Now, I do really mean that the intention is awesome. I just think there weren't too many actual users offering input :) So, this is mine - please take it as constructive criticism.

@fossrob @jorge A default RHEL RPM OSTree image would be interesting, but I feel a bit unlikely. These kinds of images have very specific deployment cases, and Red Hat would rather leave that up to the customer to decide. This is what #RHEL for #edge is.

That being said, you can take advantage of this today by creating your own OSTree images for RHEL and derivatives using #ImageBuilder! You can then host the cuts yourself or push them into something like #Foreman to do it for you.

... aaaand conclusion:

1) Copy contents of the #redhat 8.7 DVD to disk
2) Remove dbxtool from BaseOS/repodata xml files.
3) Recalculate sha256 hashes in repomd

uh oh, turns out shim-x64 really wants dbxtool and at this point fwupd is for some reason excluded. There might be a better solution but I'm quite tired with this problem and so:

4) Remove dbxtool as requirement from shim-x64 (since we know fwupd is going to get us the binaries anyway)
5) Recalculate sha256 sums again

Done. I can now build images.

There's a Truman Show-esque suspicion in the team that we are the only ones in the world using Red Hat #Imagebuilder, looking at all the weird issues we constantly run into ... ;)

I'm sure you've been eagerly awaiting the next #redhat #imagebuilder / #osbuild story :D

$ composer-cli blueprints depsolve <name>

No issues.

$ composer-cli compose start <name> <image>

ERROR! DepsolveError:
...
- package fwupd obsoletes dbxtool
- conflicting requests

Yes. We all know fwupd has replaced dbxtool. Now please let me build?

(I have not found a solution to this yet - recall that osbuild uses its own dnf-resolve python code. Yes I've been hacking around in it with success)

(Sort of documenting my hickups with the #redhat #imagebuilder here - it's not to be seen as just pointing out errors. I will bug report)

I'm in CET, UTC+1. When I push a blueprint into the system and then use 'composer-cli blueprints changes' the timestamps shown for when the blueprints were pushed indicates being in UTC ('Z' at the end) but they are in local time.

Screws up my "did you forget to push the latest blueprint before building" script atm ;)

Alright, next surprise with #RedHat #ImageBuilder / #osbuild :) We're on Red Hat 8.6, using the DVD as repo. When trying to install Node-JS through the blueprint we kept getting 10.24, even though 16.14 is clearly there when looking at the files. Changing 'version' just meant it couldn't find the package.

Oh. That's right. To get 16.14 we need to use 'module' with yum / dnf. Without it they will also only find 10.24. So how do we do that in the blueprint then?

You could assume that would be [[modules]] - but you'd be wrong. Modules and Packages work exactly the same (as documented).

The solution is ... [[groups]] :)

[[groups]]
name = "nodejs:16"

Quote from wldr-client github:

"groups is a TOML list, so each group needs to be listed separately, like packages but with no version number."

If you say so ;) The above solution is verified working.

well well well

With no other changes made to the blueprint, building a qcow2 instead of vmdk and then directly converting the qcow2 to vmdk worked.

So at this moment I would wager that there's an issue in Red Hat 8.6 osbuild / image builder when it comes to generating vmdk type filesystems.

#redhat #ImageBuilder #osbuild

I'm sure it's #RedHat #ImageBuilder that's awesome and it's me that's confused but omg it does really feel like it's the other way around ...

Cannot mount sysroot you say? Bad superblock? Yeah well ... can't really write anything else in those [[customizations.filesystem]] now can I :/

Book the next episode of the Office of the IT Guy: June 9th at 7PM Eastern! I'll be live for a terminal session. We'll be using #ImageBuilder to create a @[email protected] 9 golden image. With a standard template, we'll be able to get into more exciting topics: https://youtu.be/ovV3FikXA0E

I am really excited to be hanging out with the @[email protected] User Group #RHUG next week to talk about #ImageBuilder! If you want to catch some of the latest content, go register for the live event on Tuesday the 29th starting at 2PM EDT!
https://red.ht/3twfReP

Candy Land (longplay) for PC

https://youtu.be/oy7Mw7mSCCY?si=EUWn5hbxkc-uucm1

#CandyLand #PC #Windows #Windows95 #Windows98 #BoardGame #BoardVideoGame #Longplay #HasbroInteractive #Hasbro #ImageBuilderSoftware #ImageBuilder

Candy Land (longplay) for PC

https://youtu.be/oy7Mw7mSCCY?si=EUWn5hbxkc-uucm1

#CandyLand #PC #Windows #Windows95 #Windows98 #BoardGame #BoardVideoGame #Longplay #HasbroInteractive #Hasbro #ImageBuilderSoftware #ImageBuilder

Linux on ARM Snapdragon processor netbooks?

Easy all-devices-on-board-working install is only a matter of short time now :linux:

A work in progress: to free Samsung Galaxy Book Go's (such as NP345XLA models) to work with Linux "The Freedom OS".

There's a DEBIAN LINUX image for starters! Login with these credentials after a successful live-boot:

User= linux
Pass= changeme

The touchpad won't work yet (nor the WiFi). Are you a dev? Able to help with this effort?

DL the image & burn it to a USB-stick with for example Etcher => https://github.com/hexdump0815/imagebuilder/releases/tag/230308-01

#ARM #Linux #netbook #laptop #Snapdragon #Samsung #Galaxy #GO #development #Debian #GitHub #imagebuilder #HexDump @hexdump

Linux on ARM Snapdragon processor netbooks?

Easy all-devices-on-board-working install is only a matter of short time now :linux:

A work in progress: to free Samsung Galaxy Book Go's (such as NP345XLA models) to work with Linux "The Freedom OS".

There's a DEBIAN LINUX image for starters! Login with these credentials after a successful live-boot:

User= linux
Pass= changeme

The touchpad won't work yet (nor the WiFi). Are you a dev? Able to help with this effort?

DL the image & burn it to a USB-stick with for example Etcher => https://github.com/hexdump0815/imagebuilder/releases/tag/230308-01

#ARM #Linux #netbook #laptop #Snapdragon #Samsung #Galaxy #GO #development #Debian #GitHub #imagebuilder #HexDump @hexdump

Oh! It's been a while since I commented on #RedHat #ImageBuilder / #osbuild :D Let's correct that.

It's absolute awesome how you can set an #OpenSCAP profile directly in the blueprint. It's also completely useless :) It always performs both an evaluation and remediation step, with no option to turn the remediation off, or to supply a tailored profile with added or excluded tests.

I can't imagine many images being built that don't have some form of post-processing, so running remediation beforehand is either just unwanted or worse, changes things that shouldn't be changed.

Now, I do really mean that the intention is awesome. I just think there weren't too many actual users offering input :) So, this is mine - please take it as constructive criticism.

Oh! It's been a while since I commented on #RedHat #ImageBuilder / #osbuild :D Let's correct that.

It's absolute awesome how you can set an #OpenSCAP profile directly in the blueprint. It's also completely useless :) It always performs both an evaluation and remediation step, with no option to turn the remediation off, or to supply a tailored profile with added or excluded tests.

I can't imagine many images being built that don't have some form of post-processing, so running remediation beforehand is either just unwanted or worse, changes things that shouldn't be changed.

Now, I do really mean that the intention is awesome. I just think there weren't too many actual users offering input :) So, this is mine - please take it as constructive criticism.

Oh! It's been a while since I commented on #RedHat #ImageBuilder / #osbuild :D Let's correct that.

It's absolute awesome how you can set an #OpenSCAP profile directly in the blueprint. It's also completely useless :) It always performs both an evaluation and remediation step, with no option to turn the remediation off, or to supply a tailored profile with added or excluded tests.

I can't imagine many images being built that don't have some form of post-processing, so running remediation beforehand is either just unwanted or worse, changes things that shouldn't be changed.

Now, I do really mean that the intention is awesome. I just think there weren't too many actual users offering input :) So, this is mine - please take it as constructive criticism.

Oh! It's been a while since I commented on #RedHat #ImageBuilder / #osbuild :D Let's correct that.

It's absolute awesome how you can set an #OpenSCAP profile directly in the blueprint. It's also completely useless :) It always performs both an evaluation and remediation step, with no option to turn the remediation off, or to supply a tailored profile with added or excluded tests.

I can't imagine many images being built that don't have some form of post-processing, so running remediation beforehand is either just unwanted or worse, changes things that shouldn't be changed.

Now, I do really mean that the intention is awesome. I just think there weren't too many actual users offering input :) So, this is mine - please take it as constructive criticism.