From 92246699134d988edda66e51fecd2451cf1578b6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Tue, 19 Nov 2024 15:40:29 +0100
Subject: [PATCH] cockpit: Add initial sysext

---
 .../containers-fedora-coreos-next.yml         | 32 +++++++++++++++++++
 .../workflows/sysexts-fedora-coreos-next.yml  |  8 +++++
 README.md                                     |  1 +
 cockpit/Containerfile                         | 12 +++++++
 cockpit/justfile                              | 18 +++++++++++
 5 files changed, 71 insertions(+)
 create mode 100644 cockpit/Containerfile
 create mode 100644 cockpit/justfile

diff --git a/.github/workflows/containers-fedora-coreos-next.yml b/.github/workflows/containers-fedora-coreos-next.yml
index 4a009fb..2fb7508 100644
--- a/.github/workflows/containers-fedora-coreos-next.yml
+++ b/.github/workflows/containers-fedora-coreos-next.yml
@@ -50,6 +50,19 @@ jobs:
             --from
             ${{ env.IMAGE }}:${{ env.RELEASE }}
 
+      - name: "Build container: cockpit"
+        uses: redhat-actions/buildah-build@v2
+        with:
+          context: 'cockpit'
+          image: ${{ env.DESTINATION }}
+          tags: ${{ env.RELEASE }}.cockpit
+          containerfiles: 'cockpit/Containerfile'
+          layers: false
+          oci: true
+          extra-args:
+            --from
+            ${{ env.IMAGE }}:${{ env.RELEASE }}
+
       - name: "Build container: compsize"
         uses: redhat-actions/buildah-build@v2
         with:
@@ -313,6 +326,25 @@ jobs:
           COSIGN_EXPERIMENTAL: false
           COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
 
+      - name: "Push container: cockpit"
+        uses: redhat-actions/push-to-registry@v2
+        id: push-cockpit
+        if: (github.event_name == 'push' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main'
+        with:
+          username: ${{ secrets.BOT_USERNAME }}
+          password: ${{ secrets.BOT_SECRET }}
+          image: ${{ env.DESTINATION }}
+          registry: ${{ env.REGISTRY }}
+          tags: ${{ env.RELEASE }}.cockpit
+
+      - name: "Sign container: cockpit"
+        if: (github.event_name == 'push' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main'
+        run: |
+          cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ env.REGISTRY }}/${{ env.DESTINATION }}@${{ steps.push-cockpit.outputs.digest }}
+        env:
+          COSIGN_EXPERIMENTAL: false
+          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
+
       - name: "Push container: compsize"
         uses: redhat-actions/push-to-registry@v2
         id: push-compsize
diff --git a/.github/workflows/sysexts-fedora-coreos-next.yml b/.github/workflows/sysexts-fedora-coreos-next.yml
index a1fc5e4..9f87427 100644
--- a/.github/workflows/sysexts-fedora-coreos-next.yml
+++ b/.github/workflows/sysexts-fedora-coreos-next.yml
@@ -63,6 +63,14 @@ jobs:
           just build ${IMAGE}
           mv "${SYSEXT}"*".raw" "../artifacts/"
 
+      - name: "Build sysext: cockpit"
+        env:
+          SYSEXT: cockpit
+        run: |
+          cd "${SYSEXT}"
+          just build ${IMAGE}
+          mv "${SYSEXT}"*".raw" "../artifacts/"
+
       - name: "Build sysext: compsize"
         env:
           SYSEXT: compsize
diff --git a/README.md b/README.md
index c1e08c0..02dd40a 100644
--- a/README.md
+++ b/README.md
@@ -69,6 +69,7 @@ included.
 |-|-|
 | btop | `btop` and `rocm-smi` dependency for AMD GPU support |
 | chromium | Alternative to the Flatpak which has known issues |
+| cockpit | (work in progress) |
 | compsize | |
 | distrobox | |
 | fuse2 | The `fuse` tools and library, version 2, for AppImage compatibility |
diff --git a/cockpit/Containerfile b/cockpit/Containerfile
new file mode 100644
index 0000000..c20c855
--- /dev/null
+++ b/cockpit/Containerfile
@@ -0,0 +1,12 @@
+FROM baseimage
+
+RUN dnf install -y \
+    cockpit-files \
+    cockpit-networkmanager \
+    cockpit-ostree \
+    cockpit-podman \
+    cockpit-storaged \
+    cockpit-system \
+    cockpit-ws \
+    && \
+    dnf clean all
diff --git a/cockpit/justfile b/cockpit/justfile
new file mode 100644
index 0000000..b8e087c
--- /dev/null
+++ b/cockpit/justfile
@@ -0,0 +1,18 @@
+name := "cockpit"
+packages := "
+cockpit-files
+cockpit-networkmanager
+cockpit-ostree
+cockpit-podman
+cockpit-selinux
+cockpit-storaged
+cockpit-system
+cockpit-ws
+"
+base_images := "
+quay.io/fedora/fedora-coreos:next
+"
+
+import '../sysext.just'
+
+all: default