Bug 1897166

Summary: [RFE] Support custom partitioning in images created by Composer
Product: Red Hat Enterprise Linux 8 Reporter: jcastran
Component: osbuild-composerAssignee: Image Builder team <osbuilders>
Status: CLOSED NEXTRELEASE QA Contact: Release Test Team <release-test-team-automation>
Severity: high Docs Contact:
Priority: high    
Version: 8.3CC: abjoshi, akoutsou, dwysocha, elpereir, ldelouw, myllynen, obudai, ossantos, sbarcomb, tgunders
Target Milestone: rcKeywords: FutureFeature
Target Release: 8.0Flags: pm-rhel: mirror+
Hardware: All   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-08-31 12:33:54 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description jcastran 2020-11-12 13:40:34 UTC
What is the nature and description of the request?
Requesting the ability to customize partitions for images built by composer/osbuild

Why does we need this? (List the business requirements here)
The default/static paritition layout does not meet the requirements for every customers environments. The ability to customize the partitions would help customers to create images that better suit their needs.

List any affected packages or components.
osbuild

Comment 3 Marko Myllynen 2021-11-15 10:17:58 UTC
There is now some support for this in RHEL 8.5, see the upstream blueprint reference:

https://www.osbuild.org/guides/blueprint-reference/blueprint-reference.html

This is a good start however in some cases such as to meet the requirements of security compliance standards more fine-grained support would still be needed. For instance, it should be possible to specify /var/log and /var/log/audit separately and perhaps even set mount options like nodev or noexec when building security standard compliant images.

Thanks.

Comment 4 Marko Myllynen 2021-11-15 10:22:43 UTC
Please disregard the above comment, /var/log/audit should be supported already as per bug 2001891. I will doublecheck things again locally and file a new BZ if still an issue. Sorry for the noise and thank you.

Comment 13 Ondřej Budai 2022-08-31 12:33:54 UTC
customizing /boot will be supported from 8.7/9.1. As this bug is getting quite messy without a clear scope, and actually a lot of features were implemented in 8.6, 8.7, 9.0 and 9.1 releases, I'm closing this bug. If you have any more RFEs for filesystem customizations, please open new bugs. Ideally one bug per a feature. Thanks!