Skip to content

Add a section about hardening image at build time using kiwi - #1264

Merged
diconico07 merged 1 commit into
suse-edge:mainfrom
diconico07:add-hardening-docs
Oct 16, 2026
Merged

diconico07 merged 1 commit into
suse-edge:mainfrom
diconico07:add-hardening-docs

Conversation

@diconico07

Copy link
Copy Markdown
Contributor

Details how to build a hardened image using kiwi, the example tailoring file is taken from Sylva Image building with some light adaptation.

@diconico07
diconico07 requested a review from Kristian-ZH October 6, 2026 12:39
hardys
hardys previously approved these changes Oct 7, 2026

@hardys hardys left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm - thanks!

I wonder if we should consider adding the configuration described here to the kiwi builder container in future so that less copying and copy/paste configuration is needed but this seems OK as a starting point.

@diconico07

Copy link
Copy Markdown
Contributor Author

I wondered the same, but IIRC we are taking those verbatim from the SL Micro build process, so any modification would make maintenance harder (unless we find a way to get those modifications to happen in the "upstream" build files).

@hardys

hardys commented Oct 9, 2026

Copy link
Copy Markdown
Contributor

I wondered the same, but IIRC we are taking those verbatim from the SL Micro build process, so any modification would make maintenance harder (unless we find a way to get those modifications to happen in the "upstream" build files).

Perhaps we could consider a patching/sed workflow in the image build, but not blocking on that - this seems fine as a first step and we can consider if we can make the process easier in a future iteration

Comment thread docs/en/guides/kiwi-builder-images.adoc
Kristian-ZH
Kristian-ZH previously approved these changes Oct 15, 2026
Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>
@diconico07
diconico07 dismissed stale reviews from Kristian-ZH and hardys via 5b3b9cc October 15, 2026 09:19
@diconico07
diconico07 merged commit 599b48a into suse-edge:main Oct 16, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants