ci: Bump FCOS config commit to F43

The previous pinned commit (0661e4ed) targets Fedora 42 whose repos
have been decommissioned and now return 404, breaking compose tests.

Update to 93218582 which targets Fedora 43.

Also fix issues exposed by the fedora-bootc submodule update which
no longer provides the full OS package set or treefile keys:
- Add rpm-ostree and kernel to the compose test package set
- Inject treefile keys needed by compose tests (boot-location,
  tmp-is-dir, machineid-compat, rpmdb, opt-usrlocal, etc.)
- Use setdefault() for add-commit-metadata in test-basic-unified.sh

These were previously provided by the fedora-bootc submodule tier
manifests which have been stripped down for the bootc-native build
flow.

Author: jmarrero

tests/compose.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 
 # freeze on a specific commit for tests for reproducibility and since it should
 # always work to target older treefiles
-FEDORA_COREOS_CONFIG_COMMIT=0661e4edc55d4f5293ba463c9dec0471b84d05d4
+FEDORA_COREOS_CONFIG_COMMIT=932185829a451812a6f627f7937f49fe3bf952be
 
 dn=$(cd "$(dirname "$0")" && pwd)
 topsrcdir=$(cd "$dn/.." && pwd)
@@ -50,13 +50,32 @@ if [ ! -d compose-cache ]; then
   # default; we'll want it to test `install-langs`. This also means that we have
   # to add updates-archive to the repo list.
   # Also neuter OSTree layers; we don't re-implement cosa's auto-layering sugar
-  curl -Lf --retry 3 -O https://src.fedoraproject.org/rpms/fedora-repos/raw/f44/f/fedora-updates-archive.repo
+  curl -Lf --retry 3 -O https://src.fedoraproject.org/rpms/fedora-repos/raw/f43/f/fedora-updates-archive.repo
   python3 -c '
 import sys, json
 y = json.load(sys.stdin)
 y["repos"] += ["updates-archive"]
-y["packages"] += ["glibc-all-langpacks"]
+y["packages"] += ["glibc-all-langpacks", "rpm-ostree"]
 y["ostree-layers"] = []
+# The fedora-bootc submodule no longer provides these treefile keys
+# that are needed by compose tests. Inject them as test infrastructure.
+y.setdefault("packages", [])
+if "kernel" not in y["packages"]:
+    y["packages"] += ["kernel"]
+y.setdefault("ref", "fedora/x86_64/coreos/testing-devel")
+y.setdefault("boot-location", "modules")
+y.setdefault("tmp-is-dir", True)
+y.setdefault("machineid-compat", False)
+y.setdefault("default-target", "multi-user.target")
+y.setdefault("rpmdb", "sqlite")
+y.setdefault("opt-usrlocal", "var")
+y.setdefault("add-commit-metadata", {})
+y.setdefault("check-passwd", {"type": "none"})
+y.setdefault("check-groups", {"type": "none"})
+y.setdefault("automatic-version-prefix", "43.<date:%Y%m%d>.dev")
+y.setdefault("mutate-os-release", "43")
+if "exclude-packages" not in y:
+    y["exclude-packages"] = ["kernel-debug-core"]
 json.dump(y, sys.stdout)' < manifest.json > manifest.json.new
   mv manifest.json{.new,}
   popd # config

tests/compose/libbasic-test.sh

@@ -23,9 +23,10 @@ ostree --repo=${repo} ls ${treeref} /usr/etc/passwd > passwd.txt
 assert_file_has_content_literal passwd.txt '00644 '
 
 ostree --repo=${repo} ls ${treeref} /usr/etc/shadow > shadow.txt
-assert_file_has_content_literal shadow.txt '00000 '
+# shadow-utils >= 4.17 uses mode 0400; older versions use 0000
+assert_file_has_content shadow.txt '00[04]00 '
 ostree --repo=${repo} ls ${treeref} /usr/etc/gshadow > gshadow.txt
-assert_file_has_content_literal gshadow.txt '00000 '
+assert_file_has_content gshadow.txt '00[04]00 '
 
 ostree --repo=${repo} cat ${treeref} /usr/etc/default/useradd > useradd.txt
 assert_file_has_content_literal useradd.txt HOME=/var/home

tests/compose/test-basic-unified.sh

@@ -75,8 +75,8 @@ treefile_pyedit "del tf['base-refspec']"
 echo "ok cannot use derivation for composes yet"
 
 
-treefile_pyedit "tf['add-commit-metadata']['foobar'] = 'bazboo'"
-treefile_pyedit "tf['add-commit-metadata']['overrideme'] = 'old var'"
+treefile_pyedit "tf.setdefault('add-commit-metadata', {})['foobar'] = 'bazboo'"
+treefile_pyedit "tf.setdefault('add-commit-metadata', {})['overrideme'] = 'old var'"
 
 # Test metadata json with objects, arrays, numbers
 cat > metadata.json <<EOF

tests/compose/test-installroot.sh

@@ -6,7 +6,7 @@ dn=$(cd "$(dirname "$0")" && pwd)
 . "${dn}/libcomposetest.sh"
 
 # This is used to test postprocessing with treefile vs not
-treefile_set "boot-location" '"new"'
+treefile_set "boot-location" '"modules"'
 # On by default now:
 # treefile_set "ignore-devices" 'True'