ubuntu.yml

---
image:
  distribution: ubuntu
  release: noble
  architecture: amd64
  name: "{{ image.distribution }}-{{ image.release }}-{{ image.variant }}-{{ image.serial }}"
  description: "Ubuntu {{ image.release }} ({{ image.variant }}-{{ image.serial }})"
  variant: default

source:
  downloader: debootstrap
  url: http://archive.ubuntu.com/ubuntu
  variant: minbase

mappings:
  architecture_map: debian

targets:
  incus:
    vm:
      filesystem: ext4
      size: 34359738368 # 32 GiB

packages:
  manager: apt
  cleanup: true
  update: true
  repositories:
  - name: sources.list
    url: |-
      deb http://archive.ubuntu.com/ubuntu {{ image.release }} main restricted universe multiverse
      deb http://archive.ubuntu.com/ubuntu {{ image.release }}-updates main restricted universe multiverse
      deb http://security.ubuntu.com/ubuntu {{ image.release }}-security main restricted universe multiverse
  sets:
  - packages:
    - bash-completion
    - bind9-host
    - bind9-dnsutils
    - cloud-init
    - curl
    - diffutils
    - file
    - fuse3
    - gnupg2
    - iputils-ping
    - language-pack-en
    - less
    - lsb-release
    - lsof
    - netbase
    - netplan.io
    - netcat-openbsd
    - nftables
    - strace
    - sudo
    - systemd
    - systemd-sysv
    - ufw
    - uidmap
    - udev
    - unzip
    - vim
    - wget
    action: install

  - packages:
    - apparmor
    - apparmor-profiles
    - chrony
    - cloud-guest-utils
    - grub-efi-amd64-signed
    - linux-image-virtual
    - shim-signed
    action: install
    types:
    - vm

  - packages:
    - unattended-upgrades
    - networkd-dispatcher
    - os-prober
    - packagekit
    action: remove

actions:
  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux
      systemd-machine-id-setup
    types:
    - vm

  # Manage systemd-resolved
  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux
      umount -l /etc/resolv.conf || true
      rm /etc/resolv.conf
      ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf

  # Configure timezone
  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux
      ln -sfn /usr/share/zoneinfo/Etc/UTC /etc/localtime
      echo "Etc/UTC" > /etc/timezone

  # Default systemd units to enable
  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux
      systemctl enable systemd-networkd systemd-resolved cloud-init ufw

  # Additionnal units to manage for VMs
  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux
      systemctl enable chrony
    types:
    - vm

  - trigger: post-packages
    action: |-
      #!/bin/sh
      set -eux
      # Make sure the locale is built and functional
      locale-gen en_US.UTF-8
      update-locale LANG=en_US.UTF-8
      # Cleanup underlying /run
      mount -o bind / /mnt
      rm -rf /mnt/run/*
      umount /mnt
      # Cleanup temporary shadow paths
      rm /etc/*-

  # Source: https://github.com/lxc/lxc-ci/blob/main/images/ubuntu.yaml#L709
  - trigger: post-files
    action: |-
      #!/bin/sh
      set -eux
      TARGET="x86_64"
      update-grub
      grub-install --uefi-secure-boot --target="${TARGET}-efi" --no-nvram --removable
      grub-install --uefi-secure-boot --target="${TARGET}-efi" --no-nvram
      update-grub  
      sed -i "s#root=[^ ]*#root=${DISTROBUILDER_ROOT_UUID}#g" /boot/grub/grub.cfg
      # Re-generate initramfs
      update-initramfs -u -k all
    types:
    - vm

files:
  - name: fstab
    generator: fstab
    types:
    - vm

  - path: /etc/fstab
    generator: dump
    types:
    - container

  - path: /etc/machine-id
    generator: dump
  
  - path: /var/lib/dbus/machine-id
    generator: remove
  
  - path: /etc/hostname
    generator: hostname
  
  - path: /etc/hosts
    generator: hosts

  - path: /etc/resolvconf/resolv.conf.d/original
    generator: remove

  - path: /etc/resolvconf/resolv.conf.d/tail
    generator: remove

  - name: meta-data
    generator: cloud-init

  - name: network-config
    generator: cloud-init

  - name: user-data
    generator: cloud-init

  - name: incus-agent
    generator: incus-agent
    types:
    - vm

  - path: /etc/default/grub.d/50-incus.cfg
    generator: dump
    content: |-
      GRUB_RECORDFAIL_TIMEOUT=0
      GRUB_TIMEOUT=0
      GRUB_CMDLINE_LINUX_DEFAULT="${GRUB_CMDLINE_LINUX_DEFAULT} console=tty1 console=ttyS0"
      GRUB_TERMINAL=console
    types:
    - vm

  # Fix behavior where initramfs will search for an non-existing swap partition on boot (the kernel will take more than 30sec to boot...)
  # Caused by building images on a machine with swap (i.e Incus host)
  - path: /etc/initramfs-tools/conf.d/resume
    generator: dump
    content: |-
      RESUME=none
    types:
    - vm

  # Disable automatic service start after deb package install
  - path: /usr/sbin/policy-rc.d
    generator: dump
    mode: 755
    content: |-
      #!/bin/sh
      exit 101

  - path: /etc/sysctl.d/10-silence-audit.conf
    source: config/sysctl/10-silence-audit.conf
    generator: copy
    uid: 0
    gid: 0
    mode: 0644
    types:
    - vm

  - path: /etc/udev/rules.d/80-iosched.rules
    source: config/udev/80-iosched.rules
    generator: copy
    uid: 0
    gid: 0
    mode: 0644
    types:
    - vm

  - path: /etc/udev/rules.d/80-cpu-hotplug.rules
    source: config/udev/80-cpu-hotplug.rules
    generator: copy
    uid: 0
    gid: 0
    mode: 0644
    types:
    - vm

  - path: /etc/netplan/10-default.yaml
    source: config/netplan/container.yaml
    generator: copy
    uid: 0
    gid: 0
    mode: 0644
    types:
    - container

  - path: /etc/netplan/10-default.yaml
    source: config/netplan/vm.yaml
    generator: copy
    uid: 0
    gid: 0
    mode: 0644
    types:
    - vm

  - path: /etc/systemd/resolved.conf
    source: config/systemd/resolved.conf
    generator: copy
    uid: 0
    gid: 0
    mode: 0644

  - path: /etc/systemd/journald.conf
    source: config/systemd/journald.conf
    generator: copy
    uid: 0
    gid: 0
    mode: 0644
  
  - path: /etc/chrony/chrony.conf
    source: config/chrony/chrony.conf
    generator: copy
    uid: 0
    gid: 0
    mode: 0644
    types:
    - vm

  - path: /etc/cloud/cloud.cfg
    source: config/cloud-init/ubuntu.cfg
    generator: copy
    uid: 0
    gid: 0
    mode: 0644