Operating System Images

Description

The operating system images are the upstream container images of Arch Linux (through Manjaro), Debian, Ubuntu, Fedora and CentOS Stream, each published per distribution release.

Overview

This role deploys nothing. Its meta/services.yml pins the image and release each distribution’s development environment boots from, keyed by the distribution id of meta/distros.yml, and utils/distros.py reads the workspace matrix from it. Because the pins live in a role’s meta/services.yml, the docker updater proposes new releases as pull requests and the image mirror and the vulnerability scan cover them like every other role image. follow: latest holds a pin to the release the latest tag points at, so Ubuntu moves between LTS releases only and Fedora skips rawhide. Arch stays rolling, and CentOS Stream tags carry no number the updater can order, so its next stream is a manual change.

Cosmos

The diagram places Operating System Images in the Infinito.Nexus cosmos: the components it deploys (capabilities), the central services it consumes (dependencies), and its outward reach (federation and bridged external networks).

flowchart LR
    subgraph role [sys-os 💻]
        svc_os["os"]
        svc_arch["arch"]
        svc_debian["debian"]
        svc_ubuntu["ubuntu"]
        svc_fedora["fedora"]
        svc_centos["centos"]
    end

Solid 1:1 edges are fixed relationships; dashed 0..1 edges are conditional (enabled only in matching deployments); red 0..0 edges are turned off in this role. Node markers show the role’s deploy modes (💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly turned off, and ⚙️ an Ansible role dependency declared in meta/main.yml.

Features

  • One image and version per distribution id of meta/distros.yml

  • Workspace test matrix rendered from these pins by utils/distros.py

  • New releases proposed as updater pull requests

  • follow: latest keeps Ubuntu on LTS releases and Fedora off rawhide

  • Images mirrored and scanned like every other role image

Credits

Implemented by Kevin Veen-Birkenbach. Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).