Skip to content

Commit

Permalink
Change platform in dnf-automatic rules
Browse files Browse the repository at this point in the history
In RHEL Image Mode the automatic updates can't be performed using
dnf-automatic but instead the automatic updates are done by updating to
a new container image version. The automatic updates are handled by the
bootc-fetch-apply-updates.timer and corresponding
bootc-fetch-apply-updates.service. Therefore, the dnf-automatic rules
don't make sense in this environment and we will make them not
applicable there.
  • Loading branch information
jan-cerny committed Nov 7, 2024
1 parent 6bca498 commit 18df859
Show file tree
Hide file tree
Showing 4 changed files with 8 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,8 @@ references:
ospp: FMT_SMF_EXT.1
srg: SRG-OS-000805-GPOS-00260

platform: not bootc

ocil_clause: 'apply_updates is not set to yes'

ocil: |-
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ references:
nist: SI-2(5),CM-6(a),SI-2(c)
srg: SRG-OS-000191-GPOS-00080

platform: not bootc

ocil_clause: 'the upgrade_type is not set to security'

ocil: |-
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ ocil_clause: 'the package is not installed'

ocil: '{{{ ocil_package(package="dnf-automatic") }}}'

platform: not bootc

template:
name: package_installed
vars:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,8 @@ ocil_clause: 'the dnf-automatic.timer is not enabled'

ocil: "{{{ ocil_timer_enabled(timer='dnf-automatic') }}}"

platform: not bootc

template:
name: timer_enabled
vars:
Expand Down

0 comments on commit 18df859

Please sign in to comment.