Migrate to mkosi + sysupdate by jumpyvi · Pull Request #809 · elementary/os

jumpyvi · 2026-07-22T18:58:28Z

Migrate to mkosi and sysupdate

I got basic boot, missing a few package update to be able to check the full experience with Resolute.

Fixes elementary/settings-daemon#167
Fixes #717
Fixes #724

Add post-boot configuration for NetworkManager

Mask firstboot

nikodunk · 2026-07-22T23:17:29Z

This is more elegant than #808, and builds out the mkosi/sysupdate method from #793 that fully supports ubuntu already. In comparison to my bootc suggestion, this:

Build: mkosi build --profile=sysupdate Create disk image (currently .raw but could be a fake .iso).
Install: rsync mkosi.output/elementary.raw https://r2.cloudflarestorage.com/installer/x86.iso Copy the image to the download link, so users can download it and write to a USB drive. Live boot session would need to copy this image to disk. Installer would need to be adapted.
Update: rsync mkosi.output/* https://r2.cloudflarestorage.com/updates Push image to any static host so all existing ElementaryOS installs can run updatectl update (settings app would need to be adapted). This checks a static folder at ie. updates.elementary.io (currently set to 10.0.2.2:7676 for testing), downloads anything newer than the currently-booted IMAGE_VERSION, drops it into the inactive A/B slot, and reboots into it on next boot. Even over major versions like 8=>9=>10.

nikodunk · 2026-07-23T17:42:47Z

@danirabbit what's the best way to land this? This PR currently replaces the old stuff, but I'm guessing some the 8.1 stable jobs might be run in parallel with the 9.0 sysupdate jobs until 8.1 reaches EOL?

Edit: My proposal, not speaking for @jumpyvi here:

When ready to merge, make current os/main branch into archive and keep running the 8.1 stable jobs off of that archive branch.
This becomes main, and starts building the sysupdate isos and updates.

nikodunk · 2026-07-23T18:14:02Z

OK so going back on my above suggestions, how about we keep sysupdate on a branch, and add a 4th job on a sysupdate branch then:

daily-8.1 (main branch)
daily-9.0 (main branch)
stable-8.1 (main branch)
image-9.0 (sysupdate branch this can be a manual kick-off, and not advertised until there's delta updates?)

jumpyvi · 2026-07-23T18:25:52Z

* image-9.0 (sysupdate branch this can be a manual kick-off, and not advertised until there's delta updates?)

We don't know when/if systemd will choose to implement this.

idk if there is any other solutions

systemd/systemd#28227

lewisgoddard · 2026-07-24T11:02:31Z

For S3 compatible storage I would recommend Cloudflare R2. We already use Cloudflare and there is no bandwidth billing there, only storage and action costs.

nikodunk · 2026-07-24T12:51:03Z

Thank you! Looks like we were holding it wrong: cost won’t be a problem at $0.60 for 10,000 users downloading a 4gb image once a week on Cloudflare R2 (50 gb, 4 writes per mo, 70% egress, 40,000 reads per mo) - thank you @lewisgoddard .

OK so maybe @jumpyvi we don't optimize for transmission size yet for now then, and optimize for deltas later as sysupdate matures - other projects will have this problem too.

* re-add sysupdate jobs * make only monthly image. * make monthly * update scripts * done * merge * revert * fix typo, PR feedback on build * add date to raw * better update file matching * update sha * update upload.py for cloudflare R2

nikodunk · 2026-07-25T00:25:56Z

@jumpyvi got updates working (hosted on a temporary CDN), @jumpyvi has also booted the .raw off of a usb stick (I don't have one that's big enough).

Finally, an initial job has been added @danirabbit - edited upload.py to upload to Cloudflare R2

….feature Co-authored-by: Danielle Foré <danielle@elementary.io>

danirabbit

I think I'm happy to move this to testing. Just waiting on re-review from @ryonakano I think :)

ryonakano · 2026-09-08T22:35:26Z

Sorry for my late review, I will take a look at this again when getting back home today.

ryonakano

I'm sorry for my late review. Leaving a few nitpicking comments and questions, otherwise LGTM.

Co-authored-by: Ryo Nakano <ryonakaknock3@gmail.com>

ryonakano

Thanks for the fix, leaving tiny EOF comments.

ryonakano

Sorry, I have some additional comments.

ryonakano · 2026-09-12T00:14:39Z

+          name: Extension release ${{ steps.get_date.outputs.RELEASE_DATE }} (${{ inputs.build_type }}) for ${ARCH}
+          files: |
+            mkosi.output/ext/ext-*.raw.zst
+            mkosi.output/ext/SHA256SUMS


Missing EOF newline

ryonakano · 2026-09-12T00:14:53Z

+    uses: ./.github/workflows/reusable-release.yml
+    with:
+      build_type: daily
+    secrets: inherit


Missing EOF newline

ryonakano · 2026-09-12T00:14:58Z

+    uses: ./.github/workflows/reusable-release.yml
+    with:
+      build_type: stable
+    secrets: inherit


Missing EOF newline

ryonakano · 2026-09-12T00:15:15Z

@@ -0,0 +1 @@
+#placeholder for real public key


Missing EOF newline

ryonakano · 2026-09-12T00:15:43Z

-Configure the channel (stable, daily) in the configuration file (`etc/terraform-amd64.conf` or `etc/terraform-arm64.conf` based on your host architecture), then run:
+```bash
+just genkey
+just do-release


Suggested change

just do-release

just do-daily

ryonakano · 2026-09-12T02:08:30Z

-More information about the concepts behind `live-build` and the technical decisions made to arrive at this set of tools to build an .iso can be found [on the wiki](https://github.com/elementary/os/wiki/Building-iso-Images).
+## Minimum specs
+- UEFI
+- ~8gb usb stick


Suggested change

- ~8gb usb stick

- 8 GB of USB flash drive

ryonakano · 2026-09-12T02:08:49Z

+## Minimum specs
+- UEFI
+- ~8gb usb stick
+- Gnome Boxes >=51 (for VM only)


Suggested change

- Gnome Boxes >=51 (for VM only)

- GNOME Boxes >=51 (for VM only)

ryonakano · 2026-09-12T02:10:08Z

+- UEFI
+- ~8gb usb stick
+- Gnome Boxes >=51 (for VM only)
+- 70gb destination disk, 4gb ram (less should be possible, but not tested)


Suggested change

- 70gb destination disk, 4gb ram (less should be possible, but not tested)

- 64 GB of destination disk

- 4 GB of system memory (RAM)

I can install with 64 GB.

ryonakano · 2026-09-12T02:10:34Z

+just genkey
+just do-release
+```
+Create install media with [Fedora Media Writer](https://flathub.org/en/apps/org.fedoraproject.MediaWriter) or [Impression](flathub.org/en/apps/io.gitlab.adhami3310.Impression), or boot with Gnome Boxes (>=51). Then, in demo mode, install via script:


Suggested change

Create install media with [Fedora Media Writer](https://flathub.org/en/apps/org.fedoraproject.MediaWriter) or [Impression](flathub.org/en/apps/io.gitlab.adhami3310.Impression), or boot with Gnome Boxes (>=51). Then, in demo mode, install via script:

Create install media with [Fedora Media Writer](https://flathub.org/en/apps/org.fedoraproject.MediaWriter) or [Impression](flathub.org/en/apps/io.gitlab.adhami3310.Impression), or boot with GNOME Boxes (>=51). Then, in demo mode, install via script:

ryonakano · 2026-09-12T02:22:49Z


-More information about the concepts behind `live-build` and the technical decisions made to arrive at this set of tools to build an .iso can be found [on the wiki](https://github.com/elementary/os/wiki/Building-iso-Images).
+## Minimum specs
+- UEFI


Suggested change

- UEFI

- UEFI with secure boot disabled

feat: Transfer old repo

1aceede

danirabbit added this to OS 9 Jul 22, 2026

danirabbit moved this to In progress in OS 9 Jul 22, 2026

nikodunk and others added 4 commits July 22, 2026 12:18

Add post-boot configuration for NetworkManager

4142d3c

Merge pull request #3 from nikodunk/patch-1

16c8783

Add post-boot configuration for NetworkManager

Mask firstboot

bdee221

Merge pull request #5 from jumpyvi/disable-firstboot

b210a04

Mask firstboot

JumpyVi added 3 commits July 22, 2026 19:41

feat: Switch to systemd-boot and remove UKI profiles, fix #6

cbde144

feat: Add swap (zram)

5c91da4

Add tools for testing updates locally

e3bb0b8

nikodunk reviewed Jul 23, 2026

View reviewed changes

Comment thread mkosi.profiles/sysupdate/mkosi.extra/usr/lib/sysupdate.d/10-usr-verity-sig.transfer Outdated

This comment was marked as resolved.

Sign in to view

This comment was marked as outdated.

Sign in to view

This comment was marked as resolved.

Sign in to view

JumpyVi and others added 3 commits July 24, 2026 14:17

feat: Full upgrade support

e423488

Update readme (#8)

1b78f39

Re-add build & upload jobs (#7)

80dd71f

* re-add sysupdate jobs * make only monthly image. * make monthly * update scripts * done * merge * revert * fix typo, PR feedback on build * add date to raw * better update file matching * update sha * update upload.py for cloudflare R2

This comment was marked as outdated.

Sign in to view

jumpyvi and others added 2 commits July 27, 2026 12:10

Refactor image building (#10)

fc8ddf7

Use mkosi@26

702cf2e

jumpyvi and others added 6 commits September 2, 2026 10:39

Change workflow name to match elementary

eefbdbe

Update mkosi.images/sysupdate/mkosi.extra/usr/lib/sysupdate.d/ext-sdk…

41c9301

….feature Co-authored-by: Danielle Foré <danielle@elementary.io>

Remove reference to personal github

802c2a9

Quick fix tmpfile formating

cbd24b8

Switch to ext4

3e2046d

Fix previous push

f4e9acf

danirabbit approved these changes Sep 8, 2026

View reviewed changes

ryonakano reviewed Sep 9, 2026

View reviewed changes

jumpyvi and others added 13 commits September 9, 2026 16:48

Add space to etc.conf

e8adee9

Fix placeholders

2c6c08d

Update mkosi.images/base/mkosi.extra/usr/lib/tmpfiles.d/etc.conf

e2c5b47

Co-authored-by: Ryo Nakano <ryonakaknock3@gmail.com>

Add workspace

b876339

Update workflows

5a6675f

Switch away from ublue free disk to jlumbroso

38445b6

Fix arch mismatch in podman

1334b48

Fix typo

b0c20cc

Add arch in release name/tag

0037025

Split arch profiles

f6955c0

Fix package naming

18ef8a9

Add arch profiles to iso

e3e634c

Move grub-pc-bin to x86

af9d13b

ryonakano reviewed Sep 9, 2026

View reviewed changes

Comment thread mkosi.images/liveiso/mkosi.profiles/aarch64/mkosi.conf Outdated

Comment thread mkosi.images/liveiso/mkosi.profiles/x86-64/mkosi.conf Outdated

Comment thread mkosi.profiles/aarch64/mkosi.conf Outdated

Comment thread mkosi.profiles/x86-64/mkosi.conf Outdated

Add newlines

3859648

jumpyvi requested a review from ryonakano September 9, 2026 23:24

jumpyvi added 3 commits September 11, 2026 16:16

Add gpg signing support

845e8e1

Split stable and daily

66bf773

Add stable profile

fc01600

ryonakano mentioned this pull request Sep 12, 2026

installation: Review recommended system specification for sysupdate installation elementary/website#4157

Open

ryonakano reviewed Sep 12, 2026

View reviewed changes

		@@ -0,0 +1 @@
		#placeholder for real public key No newline at end of file

	- Gnome Boxes >=51 (for VM only)
	- GNOME Boxes >=51 (for VM only)

	- 70gb destination disk, 4gb ram (less should be possible, but not tested)
	- 64 GB of destination disk
	- 4 GB of system memory (RAM)

	Create install media with [Fedora Media Writer](https://flathub.org/en/apps/org.fedoraproject.MediaWriter) or [Impression](flathub.org/en/apps/io.gitlab.adhami3310.Impression), or boot with Gnome Boxes (>=51). Then, in demo mode, install via script:
	Create install media with [Fedora Media Writer](https://flathub.org/en/apps/org.fedoraproject.MediaWriter) or [Impression](flathub.org/en/apps/io.gitlab.adhami3310.Impression), or boot with GNOME Boxes (>=51). Then, in demo mode, install via script:

Uh oh!

Uh oh!

Conversation

jumpyvi commented Jul 22, 2026 • edited by ryonakano Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nikodunk commented Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nikodunk commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

This comment was marked as resolved.

This comment was marked as resolved.

This comment was marked as outdated.

nikodunk commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

jumpyvi commented Jul 23, 2026

Uh oh!

This comment was marked as resolved.

This comment was marked as resolved.

lewisgoddard commented Jul 24, 2026

Uh oh!

nikodunk commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nikodunk commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

This comment was marked as outdated.

danirabbit left a comment

Choose a reason for hiding this comment

Uh oh!

ryonakano commented Sep 8, 2026

Uh oh!

ryonakano left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ryonakano left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ryonakano left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

jumpyvi commented Jul 22, 2026 •

edited by ryonakano

Loading

nikodunk commented Jul 22, 2026 •

edited

Loading

nikodunk commented Jul 23, 2026 •

edited

Loading

nikodunk commented Jul 23, 2026 •

edited

Loading

nikodunk commented Jul 24, 2026 •

edited

Loading

nikodunk commented Jul 25, 2026 •

edited

Loading