mkosi for test image builds (#4539)

Torxed · 0xdeadd · web-flow · commit af2120c0e94a · 2026-05-23T13:49:54.000+02:00
Added a `mkosi` profile as well as organized test tooling a bit.

---------

Co-authored-by: 0xdeadd &lt;clintdotphillips@gmail.com&gt;
diff --git a/.github/workflows/iso-build.yaml b/.github/workflows/iso-build.yaml
@@ -32,7 +32,7 @@ jobs:
       - run: cat /etc/os-release
       - run: pacman-key --init
       - run: pacman --noconfirm -Sy archlinux-keyring
-      - run: ./build_iso.sh
+      - run: ./test_tooling/mkarchiso/build_iso.sh
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: Arch Live ISO
diff --git a/.github/workflows/uki-build.yaml b/.github/workflows/uki-build.yaml
@@ -0,0 +1,40 @@
+# This workflow will build an Arch Linux UKI file with the commit on it
+
+name: Build Arch UKI with ArchInstall Commit
+
+on:
+  push:
+    branches:
+      - master
+      - main # In case we adopt this convention in the future
+  pull_request:
+    paths-ignore:
+      - 'docs/**'
+      - '**.editorconfig'
+      - '**.gitignore'
+      - '**.md'
+      - 'LICENSE'
+      - 'PKGBUILD'
+  release:
+    types:
+      - created
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: archlinux/archlinux:latest
+      options: --privileged
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - run: pwd
+      - run: find .
+      - run: cat /etc/os-release
+      - run: pacman-key --init
+      - run: pacman --noconfirm -Sy archlinux-keyring
+      - run: pacman --noconfirm -Sy mkosi
+      - run: (cd test_tooling/mkosi/ && mkosi build -B)
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: Arch Live UKI
+          path: test_tooling/mkosi/mkosi.output/*.efi
diff --git a/.gitignore b/.gitignore
@@ -41,3 +41,7 @@ requirements.txt
 /cmd_output.txt
 node_modules/
 uv.lock
+test_tooling/mkosi/mkosi.output/*image*
+test_tooling/mkosi/mkosi.cache/**
+test_tooling/mkosi/mkosi.tools/**
+test_tooling/mkosi/mkosi.tools.manifest
diff --git a/pyproject.toml b/pyproject.toml
@@ -69,7 +69,10 @@ archinstall = "archinstall"
 [tool.mypy]
 python_version = "3.14"
 files = "."
-exclude = "^build/"
+exclude = [
+    "^build/",
+    "^test_tooling/",
+]
 disallow_any_explicit = false
 disallow_any_expr = false
 disallow_any_unimported = true
diff --git a/test_tooling/mkarchiso/build_iso.sh b/test_tooling/mkarchiso/build_iso.sh
diff --git a/test_tooling/mkosi/README.md b/test_tooling/mkosi/README.md
@@ -0,0 +1,12 @@
+# To build
+
+    mkosi build -B
+
+# To run
+
+    mkosi qemu \
+        --drive=archinstall_small:25G \
+        -- \
+        -device nvme,serial=archinstall_small,drive=archinstall_small
+
+*note: in order to boot the installation, we need to disable UKI being added to -kernel. I don't know of a way to do this yet, unless we tinker with mkosi/qemu.py - https://github.com/Torxed/mkosi/commit/6f3c20802bd73f88b672cc96ef0db1e542084316 - in which case we could do: `mkosi qemu --drive=archinstall_small:25G -- -device nvme,serial=archinstall_small,drive=archinstall_small,bootindex=0 -kernel none` but it still won't boot properly.*
diff --git a/test_tooling/mkosi/mkosi.cache/.gitkeep b/test_tooling/mkosi/mkosi.cache/.gitkeep
diff --git a/test_tooling/mkosi/mkosi.conf b/test_tooling/mkosi/mkosi.conf
@@ -0,0 +1,50 @@
+[Distribution]
+Distribution=arch
+# LocalMirror=file:///var/lib/localmirror
+
+[Output]
+Format=uki
+# Format=disk
+
+[Include]
+Include=mkosi-vm
+
+[Validation]
+SecureBoot=false
+SecureBootAutoEnroll=false
+Sign=false
+# Signing artifacts (hashsums etc) using a GPG key:
+# Key=D4B58E897A929F2E
+# Signing secure boot using PIV on yubikey:
+# SecureBoot=true
+# SecureBootKey=pkcs11:
+# SecureBootCertificate=secureboot.crt
+
+[Content]
+Packages=
+         pacman
+         archlinux-keyring
+         amd-ucode
+         intel-ucode
+#         tpm2-tss
+#         libfido2
+#         libp11-kit
+WithDocs=false
+RootPassword=toor
+Timezone=Europe/Stockholm
+Keymap=sv-latin1
+InitrdProfiles=network
+
+[Config]
+Profiles=archinstall
+
+[Build]
+Incremental=true
+ToolsTree=default
+ToolsTreeProfiles=devel,misc,package-manager,runtime,gui
+WithNetwork=yes
+
+[Runtime]
+Console=gui
+CPUs=4
+RAM=8G
diff --git a/test_tooling/mkosi/mkosi.extra/etc/systemd/network/20-ethernet.network b/test_tooling/mkosi/mkosi.extra/etc/systemd/network/20-ethernet.network
@@ -0,0 +1,24 @@
+[Match]
+# Matching with "Type=ether" causes issues with containers because it also matches virtual Ethernet interfaces (veth*).
+# See https://bugs.archlinux.org/task/70892
+# Instead match by globbing the network interface name.
+Name=en*
+Name=eth*
+
+[Link]
+RequiredForOnline=routable
+
+[Network]
+DHCP=yes
+MulticastDNS=yes
+
+# systemd-networkd does not set per-interface-type default route metrics
+# https://github.com/systemd/systemd/issues/17698
+# Explicitly set route metric, so that Ethernet is preferred over Wi-Fi and Wi-Fi is preferred over mobile broadband.
+# Use values from NetworkManager. From nm_device_get_route_metric_default in
+# https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/main/src/core/devices/nm-device.c
+[DHCPv4]
+RouteMetric=100
+
+[IPv6AcceptRA]
+RouteMetric=100
diff --git a/test_tooling/mkosi/mkosi.extra/etc/systemd/system/getty@tty1.service.d/autologin.conf b/test_tooling/mkosi/mkosi.extra/etc/systemd/system/getty@tty1.service.d/autologin.conf
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=-/usr/bin/agetty --noreset --noclear --autologin root - ${TERM}
diff --git a/test_tooling/mkosi/mkosi.extra/root/.profile b/test_tooling/mkosi/mkosi.extra/root/.profile
@@ -0,0 +1,5 @@
+cd archinstall-git
+rm -rf dist
+
+uv build --no-build-isolation --wheel
+uv pip install dist/*.whl --break-system-packages --system --no-build --no-deps
diff --git a/test_tooling/mkosi/mkosi.extra/usr/lib/systemd/system-preset/5-archinstall.preset b/test_tooling/mkosi/mkosi.extra/usr/lib/systemd/system-preset/5-archinstall.preset
@@ -0,0 +1 @@
+enable systemd-networkd.service
diff --git a/test_tooling/mkosi/mkosi.output/.gitkeep b/test_tooling/mkosi/mkosi.output/.gitkeep
diff --git a/test_tooling/mkosi/mkosi.postinst.chroot b/test_tooling/mkosi/mkosi.postinst.chroot
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+git clone https://github.com/archlinux/archinstall.git /root/archinstall-git
+(cd /root/archinstall-git && git checkout master)
+
+# TODO: Set geo-mirrors statically instead
+curl -s "https://archlinux.org/mirrorlist/?country=SE&protocol=https&use_mirror_status=on" | sed -e 's/^#Server/Server/' -e '/^#/d' | rankmirrors -n 5 - > /etc/pacman.d/mirrorlist
+
+pacman-key --init
+pacman-key --populate archlinux
diff --git a/test_tooling/mkosi/mkosi.profiles/archinstall b/test_tooling/mkosi/mkosi.profiles/archinstall
@@ -0,0 +1,56 @@
+[Content]
+Packages=
+	acpid
+	intel-media-driver
+	linux-firmware
+	linux-firmware-intel
+	ca-certificates-mozilla
+	ca-certificates-utils
+	nano
+	gvfs
+	noto-fonts
+	cantarell-fonts
+	ttf-dejavu
+	polkit
+	bash
+	bzip2
+	coreutils
+	file
+	filesystem
+	findutils
+	gawk
+	gcc-libs
+	gettext
+	glibc
+	grep
+	gzip
+	iproute2
+	iputils
+	licenses
+	pciutils
+	procps-ng
+	psmisc
+	sed
+	tar
+	linux
+	diffutils
+	less
+	strace
+	util-linux
+	xz
+	pacman-contrib
+	gcc
+	git
+	pkgconfig
+	python
+	python-pip
+	python-uv
+	python-setuptools
+	python-pyparted
+	python-pydantic
+	python-textual
+	dosfstools
+	btrfs-progs
+	arch-install-scripts
+WithDocs=false
+KernelCommandLine=quiet splash
diff --git a/test_tooling/mkosi/mkosi.version b/test_tooling/mkosi/mkosi.version
@@ -0,0 +1 @@
+13
diff --git a/test_tooling/qemu/README.md b/test_tooling/qemu/README.md
@@ -0,0 +1,18 @@
+# Qemu helper
+
+Can be used with the `mkosi` test tooling
+
+After `mkosi -B build` has been executed, run the following:
+
+    python test_tooling/qemu/qemu.py \
+        --uki ./test_tooling/mkosi/mkosi.output/image_13.efi \
+        --harddrive ~/test.qcow2:15G \
+        --harddrive ~/test_large.qcow2:25G
+
+And install using `archinstall`, after the machine has been shutdown, run:
+
+    python test_tooling/qemu/qemu.py \
+        --harddrive ~/test.qcow2:15G \
+        --harddrive ~/test_large.qcow2:25G
+
+As this will boot EFI mode with just the harddrives to verify the installation.
diff --git a/test_tooling/qemu/qemu.py b/test_tooling/qemu/qemu.py

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+[Service]`
	`2`	`+ExecStart=`
	`3`	`+ExecStart=-/usr/bin/agetty --noreset --noclear --autologin root - ${TERM}`