Skip to content

Conversation

@alexhulbert
Copy link
Member

@alexhulbert alexhulbert commented Dec 2, 2025

Addresses some review comments I left on the trunk/l2 branch

@alexhulbert alexhulbert marked this pull request as draft December 2, 2025 08:26
@alexhulbert alexhulbert changed the base branch from main to trunk/l2 December 2, 2025 08:27
@alexhulbert alexhulbert changed the title L2 leanup L2 Cleanup Dec 2, 2025
@alexhulbert alexhulbert marked this pull request as ready for review December 4, 2025 09:41
@alexhulbert
Copy link
Member Author

This is ready for testing/review now. It shouldn't alter the behavior of the image in any way

# build op-rbuilder

if [ -f "l2/_op_rbuilder/mkosi.extra/usr/bin/op-rbuilder" ]; then
if [ -f "$SRCDIR/l2/_op_rbuilder/mkosi.extra/usr/bin/op-rbuilder" ]; then
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

suggestion:

let's ditch all these if-elses whatsoever (they are no longer needed).

mkosi-chroot chmod 0750 /etc/vault-agent/gomplate
mkosi-chroot sh -c "chmod 0640 /etc/vault-agent/gomplate/*"

# Create /etc/sysconfig for vault-agent
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

suggestion:

this is not only for vault-agent, but for any systemd service that will need some secrets injected via env var.

Suggested change
# Create /etc/sysconfig for vault-agent
# Create /etc/sysconfig secrets injection

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants