manifest: Add bootupd for x86_64|aarch64 (socket disabled)

This converts the EFI update directory from (rpm-)ostree specific
layout to bootupd layout.  Required for both initial
provisioning with bootupd as well as later updates.

For now the `bootupd.socket` is disabled by default to further
discourage users from trying it until we've fully productized it.

This will be used by: coreos/coreos-assembler#1695

manifest-lock.x86_64.json

@@ -57,6 +57,9 @@
     "bind-utils": {
       "evra": "32:9.11.22-1.fc32.x86_64"
     },
+    "bootupd": {
+      "evra": "0.1.1-1.fc32.x86_64"
+    },
     "bsdtar": {
       "evra": "3.4.3-1.fc32.x86_64"
     },

manifests/bootupd.yaml

@@ -0,0 +1,11 @@
+# Integration with https://github.com/coreos/bootupd
+# xref https://github.com/coreos/fedora-coreos-tracker/issues/510
+packages:
+  - bootupd
+
+postprocess:
+  - |
+    #!/bin/bash
+    set -xeuo pipefail
+    # Transforms /usr/lib/ostree-boot into a bootupd-compatible update payload
+    /usr/bin/bootupctl backend generate-update-metadata /

manifests/fedora-coreos-base.yaml

@@ -172,3 +172,8 @@ packages-ppc64le:
   - irqbalance
 packages-aarch64:
   - irqbalance
+
+# See https://github.com/coreos/bootupd
+arch-include:
+  x86_64: bootupd.yaml
+  aarch64: bootupd.yaml

overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset

@@ -18,3 +18,5 @@ enable [email protected]
 enable zincati.service
 # Testing aid
 enable coreos-liveiso-success.service
+# See bootupd.yaml - not enabled by default right now
+# enable bootupd.socket

overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset

@@ -3,3 +3,4 @@ enable fedora-coreos-pinger.service
 # Provide information if no ignition is provided
 enable coreos-check-ignition-config.service
 enable coreos-check-ssh-keys.service
+

tests/kola/misc-ro

@@ -55,6 +55,18 @@ ok conditional initrd networking
 if ! test -f /usr/share/licenses/fedora-coreos-config/LICENSE; then
     fatal missing LICENSE
 fi
+ok LICENSE
+
+case "$(arch)" in
+    x86_64|aarch64)
+        if systemctl is-enabled bootupd.socket; then
+            fatal "Not expecting bootupd.socket to be enabled"
+        fi
+        systemctl start bootupd.socket
+        bootupctl status
+        echo ok bootupctl
+        ;;
+esac
 
 # check that no files are unlabeled
 unlabeled=$(find /var /etc -context '*:unlabeled_t:*')