recipe.yml

name: Vanilla Core
id: core

stages:
- id: build
  base: ghcr.io/vanilla-os/pico:dev
  singlelayer: false
  labels:
    maintainer: Vanilla OS Contributors
  args:
    DEBIAN_FRONTEND: noninteractive
  runs:
    commands:
      - echo 'APT::Install-Recommends "1";' > /etc/apt/apt.conf.d/01norecommends

  modules:
  - name: mandb
    type: shell
    commands:
    - apt update
    - apt install -y man-db
    - mandb -c

  - name: packages-modules
    type: includes
    includes:
      - modules/00-vanilla-abroot.yml
      - modules/00-vanilla-base-files.yml
      - modules/00-vanilla-apx.yml
      - modules/00-vanilla-apx-stacks.yml
      - modules/01-kernel.yml
      - modules/03-fswarn.yml
      - modules/05-firmware.yml
      - modules/10-input-and-locale.yml
      - modules/20-ssh.yml
      - modules/30-utils.yml
      - modules/40-essentials.yml
      - modules/41-move-boot-scripts.yml
      - modules/50-fs.yml
      - modules/60-sound.yml
      - modules/70-compression.yml
      - modules/80-xdg.yml
      - modules/90-network.yml
      - modules/91-iptables.yml
      - modules/100-modules.yml
      - modules/110-fwupd.yml
      - modules/120-fingerprint.yml
      - modules/140-manpages.yml
      - modules/150-init-executable.yml
      - modules/998-podman-registry.yml
      - modules/999-replace-locale-gen.yml
      - modules/999-remove-grub-files.yml

  - name: zram-config
    type: shell
    commands:
      - echo -e "ALGO=lz4\nPERCENT=50" >> /etc/default/zramswap

  - name: fsguard-runtime-deps
    type: apt
    source:
      packages:
        - "minisign"
        - "squashfs-tools"
        - "python3"

  - name: cleanup1
    type: shell
    commands:
    - apt remove -y dpkg-dev build-essential
    - apt autoremove -y
    - apt clean

  - name: polkit-remember-auth
    type: shell
    commands:
    - sed -ie 's/auth_admin/auth_admin_keep/' /usr/share/polkit-1/actions/org.freedesktop.policykit.policy

  - name: fsguard
    type: fsguard
    FsGuardLocation: "/usr/sbin/FsGuard"
    GenerateKey: true
    FilelistPaths: ["/usr/bin"]
    modules:
      - name: minisign
        type: apt
        source:
          packages:
            - "minisign"

  - name: cleanup2
    type: shell
    commands:
      - rm /etc/ssh/ssh_host_*key*
      - rm -rf /var/cache/*
      - rm -rf /tmp/*
      - rm -rf /var/tmp/*
      - rm -rf /sources
      - mkdir -p /var/cache/apt/archives/partial