[isar-cip-core,v3,0/6] Make /home partition optional

Message

Quirin Gylstorff March 5, 2025, 10:27 a.m. UTC

From: Quirin Gylstorff <[e-mail]>

This series would move /home to the /var/home and provided an symbolic
link to /home. All home directories created during user generation are
stored in /usr/share and are copied via systemd.tmpfiles to the correct
partition.

This allows to delete all content of the /home directory if necessary.

This move could interfere with existing installation and is therefore
optional in isar-cip-core.

Changes v3:
 - add Kconfig entry
 - Add ci variable
 - fix description in kas file
 - reworded commit message

Changes v2:
 - make move of /home to /var opt-out
 - fix recipes versions
 - fix comments and typos
 - use WIC_HOME_PARTITION instead of HOME_PARTITION_CMD
 - remove postinst from move-homedir-var


Quirin Gylstorff (6):
  read-only-rootfs: Make IMMUTABLE_DATA_DIR configurable
  read-only-rootfs: add home partition with a variable
  add move-homedir-var package
  Move content of home to IMMUTABLE_DATA_DIR
  Add Kconfig option for separate home partition
  add ci variable for separate home partition

 .gitlab-ci.yml                                |  3 +++
 Kconfig                                       | 10 ++++++++
 classes/read-only-rootfs.bbclass              | 22 ++++++++++++++++--
 kas/opt/encrypt-all.yml                       |  2 +-
 kas/opt/separate-home-partition.yml           | 21 +++++++++++++++++
 .../files/immutable-rootfs.tmpfiles           |  2 --
 .../files/immutable-rootfs.tmpfiles.tmpl      |  2 ++
 ...-rootfs_0.1.bb => immutable-rootfs_0.2.bb} |  6 ++++-
 .../files/move-homedir-var.tmpfiles.tmpl      |  3 +++
 .../move-homedir-var/move-homedir-var_0.1.bb  | 23 +++++++++++++++++++
 ...ook_0.6.bb => initramfs-crypt-hook_0.7.bb} |  2 +-
 wic/bbb-efibootguard.wks.in                   |  4 ++--
 wic/hihope-rzg2m-efibootguard.wks.in          |  5 ++--
 wic/qemu-arm64-efibootguard-secureboot.wks.in |  4 ++--
 wic/qemu-arm64-efibootguard.wks.in            |  4 ++--
 wic/qemu-riscv64-efibootguard.wks.in          |  4 ++--
 wic/x86-uefi-efibootguard-secureboot.wks.in   |  4 ++--
 wic/x86-uefi-efibootguard.wks.in              |  4 ++--
 18 files changed, 103 insertions(+), 22 deletions(-)
 create mode 100644 kas/opt/separate-home-partition.yml
 delete mode 100644 recipes-core/immutable-rootfs/files/immutable-rootfs.tmpfiles
 create mode 100644 recipes-core/immutable-rootfs/files/immutable-rootfs.tmpfiles.tmpl
 rename recipes-core/immutable-rootfs/{immutable-rootfs_0.1.bb => immutable-rootfs_0.2.bb} (73%)
 create mode 100644 recipes-core/move-homedir-var/files/move-homedir-var.tmpfiles.tmpl
 create mode 100644 recipes-core/move-homedir-var/move-homedir-var_0.1.bb
 rename recipes-initramfs/initramfs-crypt-hook/{initramfs-crypt-hook_0.6.bb => initramfs-crypt-hook_0.7.bb} (98%)