system-configuration.yaml

# These are packages that are related to configuring parts of the system.
# It is intended to be kept generic so that it may be shared downstream with
# RHCOS.

packages:
  # Manage and load rules in the audit subsystem in the kernel
  # https://github.com/coreos/fedora-coreos-tracker/issues/1362
  - audit
  # Configuring SSH keys, cloud provider check-in, etc
  - afterburn afterburn-dracut
  # NTP support
  - chrony
  # Installing CoreOS itself
  - coreos-installer coreos-installer-bootinfra
  # Storage configuration/management
  ## cloud-utils-growpart - For growing root partition
  - cifs-utils
  - cloud-utils-growpart
  - device-mapper-multipath
  - iscsi-initiator-utils
  - mdadm
  - sg3_utils
  # User configuration
  - shadow-utils
  - acl
  # There are things that write outside of the journal still (such as the
  # classic wtmp, etc.). auditd also writes outside the journal but it has its
  # own log rotation.
  # Anything package layered will also tend to expect files dropped in
  # /etc/logrotate.d to work. Really, this is a legacy thing, but if we don't
  # have it then people's disks will slowly fill up with logs.
  - logrotate
  # Boost starving threads
  # https://github.com/coreos/fedora-coreos-tracker/issues/753
  - stalld

conditional-include:
  # numad is not available for s390x
  - if: basearch != "s390x"
    include:
      packages:
        # https://github.com/coreos/fedora-coreos-tracker/issues/2096
        # numad: Daemon that provides placement advice for efficient use of CPUs and memory on systems with NUMA topology.
        # numactl: Control NUMA policy for processes or shared memory
        - numad
        - numactl

postprocess:
  # Mask systemd-repart. Ignition is responsible for partition setup on first
  # boot and does not use systemd-repart currently. See also
  # https://github.com/coreos/fedora-coreos-tracker/issues/570
  - |
    #!/usr/bin/bash
    set -eux -o pipefail
    systemctl mask systemd-repart.service