wip: ci: run in kubernetes

ci/Jenkinsfile

@@ -11,9 +11,20 @@ pipeline {
         disableConcurrentBuilds()
     }
 
+    parameters {
+        booleanParam \
+            name: 'Clean',
+            description: 'Clean the workspace and perform a full rebuild'
+    }
+
     stages {
         stage('Build') {
             steps {
+                script {
+                    if (params.Clean) {
+                        sh 'rm -rf _build'
+                    }
+                }
                 copyArtifacts \
                     filter: 'aarch64/mqttdpms',
                     projectName: '../mqttdpms/master',
@@ -30,10 +41,8 @@ pipeline {
                 }
             }
             steps {
-                container('publish') {
-                    sshagent(['jenkins-pxe']) {
-                        sh 'make publish'
-                    }
+                sshagent(['jenkins-pxe']) {
+                    sh 'make publish'
                 }
             }
         }

ci/podTemplate.yaml

@@ -22,9 +22,6 @@ spec:
     securityContext:
       readOnlyRootFilesystem: true
       runAsUser: 1000
-    volumeMounts:
-    - name: tmp
-      mountPath: /tmp
   volumes:
   - name: tmp
     emptyDir:

mkrootfs.sh

@@ -5,7 +5,7 @@ set -e
 srcdir="$(dirname "$0")"
 destdir="$(mkdir -p "$1" && readlink -e "$1")"
 dest=basementhud.squashfs
-releasever=37
+releasever=35
 
 mkdir -p "${destdir}"
 
@@ -28,7 +28,6 @@ dnf --installroot "${destdir}" install -y \
     nbd \
     openbox \
     openssh-server \
-    openssl1.1 \
     rsyslog \
     systemd \
     xinit \
@@ -74,8 +73,6 @@ chroot "${destdir}" systemctl disable \
     systemd-homed \
     systemd-userdbd
 ln -sf /run/resolv.conf "${destdir}"/etc/resolv.conf
-grep -lR pam_sss "${destdir}"/etc/pam.d \
-    | xargs sed -i /pam_sss/d
 
 umask 0022
 mksquashfs "${destdir}" "${destdir}/boot/${dest}" \

overlay/etc/systemd/system/xinit@.service

@@ -4,15 +4,13 @@ Wants=network-online.target
 After=network-online.target
 Wants=time-set.target
 After=time-set.target
-After=getty@tty1.service
-Conflicts=getty@tty1.service
 
 [Service]
 Type=simple
 User=%I
 WorkingDirectory=~
 PAMName=xinit
-TTYPath=/dev/tty1
+TTYPath=/dev/tty7
 StandardInput=tty
 StandardOutput=journal
 StandardError=journal

overlay/etc/systemd/user/firefox-marionette.service

@@ -4,7 +4,4 @@ Requires=firefox-marionette.socket
 Requires=firefox.service
 
 [Service]
-ExecStart=/usr/lib/systemd/systemd-socket-proxyd \
-    --connections-max=1 \
-    --exit-idle-time=10s \
-    127.0.0.1:2828
+ExecStart=/usr/lib/systemd/systemd-socket-proxyd 127.0.0.1:2828