From 01fcc74831b3aa46644f7942867a5c8a910a2242 Mon Sep 17 00:00:00 2001
From: Binu Jose Philip <binujp@gmail.com>
Date: Mon, 13 Jul 2026 15:02:40 +0000
Subject: [PATCH] feat(images): add minimal-os image definition

Add a minimal OS VM image with:
- Stripped-down package selection based on AZL3 minimal-packages
- Two build profiles (minimal-os / minimal-os-dev) for repo selection
- UEFI boot with GRUB2 BLS, ext4 rootfs, 5G VHD-fixed output
- aarch64 and x86_64 architecture support
- Registration in images.toml with static-image-checks test suite

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 base/images/images.toml                |  28 +++++
 base/images/minimal-os/minimal-os.kiwi | 144 +++++++++++++++++++++++++
 2 files changed, 172 insertions(+)
 create mode 100644 base/images/minimal-os/minimal-os.kiwi

diff --git a/base/images/images.toml b/base/images/images.toml
index 80fa42129f0..1406942d952 100644
--- a/base/images/images.toml
+++ b/base/images/images.toml
@@ -65,6 +65,34 @@ container = false
 systemd = true
 runtime-package-management = true
 
+# ---- minimal-os --------------------------------------------------------
+
+[images.minimal-os]
+description = "Minimal OS Image"
+definition = { type = "kiwi", path = "minimal-os/minimal-os.kiwi", profile = "minimal-os" }
+tests.test-suites = [
+  { name = "static-image-checks" },
+]
+
+[images.minimal-os.capabilities]
+machine-bootable = true
+container = false
+systemd = true
+runtime-package-management = true
+
+[images.minimal-os-dev]
+description = "Minimal OS Image (dev)"
+definition = { type = "kiwi", path = "minimal-os/minimal-os.kiwi", profile = "minimal-os-dev" }
+tests.test-suites = [
+  { name = "static-image-checks" },
+]
+
+[images.minimal-os-dev.capabilities]
+machine-bootable = true
+container = false
+systemd = true
+runtime-package-management = true
+
 # ---- container-base (core profile) -------------------------------------
 [images.container-base]
 description = "Container Base Image"
diff --git a/base/images/minimal-os/minimal-os.kiwi b/base/images/minimal-os/minimal-os.kiwi
new file mode 100644
index 00000000000..8865d6c35ce
--- /dev/null
+++ b/base/images/minimal-os/minimal-os.kiwi
@@ -0,0 +1,144 @@
+<?xml version="1.0" encoding="utf-8"?>
+<?xml-model href="https://raw.githubusercontent.com/OSInside/kiwi/refs/tags/v10.2.33/kiwi/schema/kiwi.rng" type="application/xml"?>
+<image schemaversion="8.3" name="azl4-minimal-os">
+    <description type="system">
+        <author>Azure Linux</author>
+        <contact>azurelinux@microsoft.com</contact>
+        <specification>Azure Linux Minimal OS Image</specification>
+    </description>
+    <!--
+        Build profiles: select "minimal-os" or "minimal-os-dev" to ship
+        azurelinux-repos or azurelinux-repos-dev respectively. That controls
+        which package repository the image uses at runtime.
+    -->
+    <profiles>
+        <profile name="minimal-os"     description="Ships azurelinux-repos (runtime → PMC beta)" import="false" />
+        <profile name="minimal-os-dev" description="Ships azurelinux-repos-dev (runtime → azl4-dev)" import="false" />
+    </profiles>
+    <preferences arch="x86_64">
+        <version>0.1</version>
+        <packagemanager>dnf5</packagemanager>
+        <locale>en_US</locale>
+        <keytable>us</keytable>
+        <timezone>UTC</timezone>
+        <release-version>4.0</release-version>
+        <type
+            image="oem"
+            format="vhd-fixed"
+            formatoptions="force_size"
+            initrd_system="dracut"
+            filesystem="ext4"
+            fscreateoptions="-m 1"
+            kernelcmdline="console=ttyS0 earlyprintk=ttyS0 rd.shell=0"
+            firmware="uefi"
+            overlayroot="false"
+            eficsm="false"
+            bootpartition="false"
+            efipartsize="200"
+            rootfs_label="azurelinux">
+            <bootloader name="grub2" bls="true" console="serial" timeout="1" />
+            <size unit="G">5</size>
+            <oemconfig>
+                <oem-resize>false</oem-resize>
+            </oemconfig>
+        </type>
+    </preferences>
+
+    <preferences arch="aarch64">
+        <version>0.1</version>
+        <packagemanager>dnf5</packagemanager>
+        <locale>en_US</locale>
+        <keytable>us</keytable>
+        <timezone>UTC</timezone>
+        <release-version>4.0</release-version>
+        <type
+            image="oem"
+            format="vhd-fixed"
+            formatoptions="force_size"
+            initrd_system="dracut"
+            filesystem="ext4"
+            fscreateoptions="-m 1"
+            kernelcmdline="console=ttyAMA0 earlyprintk=ttyAMA0 rd.shell=0"
+            firmware="uefi"
+            overlayroot="false"
+            eficsm="false"
+            bootpartition="false"
+            efipartsize="200"
+            rootfs_label="azurelinux">
+            <bootloader name="grub2" bls="true" console="serial" timeout="1" />
+            <size unit="G">5</size>
+            <oemconfig>
+                <oem-resize>false</oem-resize>
+            </oemconfig>
+        </type>
+    </preferences>
+
+    <!--
+        Single build-time repository (azl4-dev) for both variants —
+        koji overrides this for distro builds; for local builds this
+        is the only blob currently populated for AZL4. The variant
+        only affects which `azurelinux-repos*` package ships, NOT
+        where build-time RPMs come from.
+    -->
+    <repository type="rpm-md" alias="azurelinux-base">
+        <source
+            path="https://packages.microsoft.com/azurelinux/4.0/beta/base/$basearch" />
+    </repository>
+
+    <packages type="image">
+        <package name="azurelinux-release" />
+        <package name="bash" />
+        <package name="ca-certificates" />
+        <package name="dbus" />
+        <package name="dnf5" />
+        <package name="e2fsprogs" />
+        <package name="grub2" />
+        <package name="glibc-langpack-en" />
+        <package name="iproute" />
+        <package name="iputils" />
+        <package name="irqbalance" />
+        <package name="kernel" />
+        <package name="ncurses-libs" />
+        <package name="openssl" />
+        <package name="rpm" />
+        <package name="shadow-utils" />
+        <package name="sudo" />
+        <package name="systemd" />
+        <package name="systemd-networkd" />
+        <package name="systemd-resolved" />
+        <package name="systemd-udev" />
+        <package name="util-linux" />
+        <package name="zlib" />
+    </packages>
+
+    <!--
+        Variant-scoped repos package: governs the .repo files written
+        into /etc/yum.repos.d/ in the built image (runtime). The two
+        packages conflict, so they're separated into per-variant
+        sections rather than relying on the variant's bootstrap section.
+    -->
+    <packages type="image" profiles="minimal-os-dev">
+        <package name="azurelinux-repos-dev" />
+    </packages>
+    <packages type="image" profiles="minimal-os">
+        <package name="azurelinux-repos" />
+    </packages>
+
+    <packages type="bootstrap">
+        <package name="azurelinux-release" />
+        <package name="filesystem" />
+        <package name="grub2-efi-x64-modules" arch="x86_64" />
+        <package name="grub2-efi-x64" arch="x86_64" />
+        <package name="grub2-efi-aa64-modules" arch="aarch64" />
+        <package name="grub2-efi-aa64" arch="aarch64" />
+        <package name="shim" arch="x86_64" />
+        <package name="shim" arch="aarch64" />
+    </packages>
+
+    <packages type="bootstrap" profiles="minimal-os-dev">
+        <package name="azurelinux-repos-dev" />
+    </packages>
+    <packages type="bootstrap" profiles="minimal-os">
+        <package name="azurelinux-repos" />
+    </packages>
+</image>