variant: fcos
version: 1.4.0
passwd:
  users:
    - name: core
      ssh_authorized_keys:
        - YOUR_SSH_PUB_KEY_HERE
      password_hash: YOUR_GOOD_PASSWORD_HASH_HERE
      groups:
        - docker
storage:
  directories:
    - path: /etc/rosenvold-core-autorebase
      mode: 0754
systemd:
  units:
    - name: rosenvold-core-unsigned-autorebase.service
      enabled: true
      contents: |
        [Unit]
        Description=rosenvold-core autorebase to unsigned OCI and reboot
        ConditionPathExists=!/etc/rosenvold-core-autorebase/unverified
        ConditionPathExists=!/etc/rosenvold-core-autorebase/signed
        After=network-online.target
        Wants=network-online.target
        [Service]
        Type=oneshot
        StandardOutput=journal+console
        ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-unverified-registry:ghcr.io/rosenvold-technology/rosenvold-core:stable
        ExecStart=/usr/bin/touch /etc/rosenvold-core-autorebase/unverified
        ExecStart=/usr/bin/systemctl disable rosenvold-core-unsigned-autorebase.service
        ExecStart=/usr/bin/systemctl reboot
        [Install]
        WantedBy=multi-user.target
    - name: rosenvold-core-signed-autorebase.service
      enabled: true
      contents: |
        [Unit]
        Description=rosenvold-core autorebase to signed OCI and reboot
        ConditionPathExists=/etc/rosenvold-core-autorebase/unverified
        ConditionPathExists=!/etc/rosenvold-core-autorebase/signed
        After=network-online.target
        Wants=network-online.target
        [Service]
        Type=oneshot
        StandardOutput=journal+console
        ExecStart=/usr/bin/rpm-ostree rebase --bypass-driver ostree-image-signed:docker://ghcr.io/rosenvold-technology/rosenvold-core:stable
        ExecStart=/usr/bin/touch /etc/rosenvold-core-autorebase/signed
        ExecStart=/usr/bin/systemctl disable rosenvold-core-signed-autorebase.service
        ExecStart=/usr/bin/systemctl reboot
        [Install]
        WantedBy=multi-user.target