forks/archiso/configs/releng/airootfs/etc, branch custom_config

Fix networkd drop-in configuration path

2025-07-24T22:47:06Z

configs: Adapt enabled systemd services to changes in cloud-init 24.3

2024-10-28T15:13:30Z

Adapt enabled services in both baseline and releng profiles to cope with changes in cloud-init 24.3. Related-to: https://gitlab.archlinux.org/archlinux/packaging/packages/cloud-init/-/issues/3 Related-to: https://github.com/canonical/cloud-init/pull/5489 Fixes: https://gitlab.archlinux.org/archlinux/archiso/-/issues/236 Signed-off-by: David Runge

configs/releng/airootfs/etc/mkinitcpio.conf.d/archiso.conf: use xz -9e

2024-05-18T09:06:03Z

Use higher compression for the initramfs. Now that mkinitcpio moves the compressed kernel modules and firmware files to the early uncompressed initramfs, we can compress the main initramfs image slightly more without it increasing the built time too much. This will increase the memory required for decompression from 9 MiB to 65 MiB (assuming the kernel's decompressor works the same as the xz tool), but that should not be an issue for any system targeting Arch. This reduces the initramfs size by ~250 KiB, which will save ~500 KiB for the whole ISO.

configs/releng/: use mkinitcpio's microcode hook instead of external microcode images

2024-04-19T07:53:42Z

This simplifies boot loader configuration, but custom PXE setups will be forced to update theirs. Implements https://gitlab.archlinux.org/archlinux/archiso/-/issues/226

configs/*/airootfs/etc/systemd/network/: add RequiredForOnline=routable

2023-12-09T10:40:59Z

By default systemd-networkd-wait-online.service considers a network connection to be "online" when it has reached the "degraded" state (see networkctl(1) for the definitions). Since "degraded" does not ensure there's a routable address, let's change the connection's requirement to "routable" instead. This gives a better chance that the network really is online when network-online.target is reached.

Use pcsclite for communicating with OpenPGP smartcards

2023-08-29T18:13:32Z

As opgpcard uses pcsclite and gnupg is able to use it as well, switch away from using gnupg's internal ccid driver.

/etc/ssh/sshd_config.d/10-archiso.conf: keep only the modified options

2023-08-26T07:54:26Z

The only changes we make to the default are to enable root login via a password. While `PasswordAuthentication yes` is the default, let's set it explicitly to avoid potential issues in the future.

Move custom sshd_config to /etc/ssh/sshd_config.d/

2023-08-26T07:54:26Z

openssh 9.4p1-2 changed /etc/ssh/sshd_config to add support for drop-in files in /etc/ssh/sshd_config.d/. Using drop-in files avoids needing to keep up with changes to the default /etc/ssh/sshd_config.

Set IPv6PrivacyExtensions=yes in global systemd-netorkd configuration

2023-08-11T08:40:14Z

Since systemd 245, IPv6PrivacyExtensions can be set not just per connection, but also globally for all connection with a configuration file in /etc/systemd/network.conf.d/.

configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use tmpfs with noswap option

2023-08-05T13:00:28Z

Since tmpfs has a `noswap` option, use it instead of ramfs. Unlike ramfs, tmpfs has a limit to its size. This reverts commit 09b0428128700f37bd465eb54c6e45f69c17617d ("configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfs").