Add support for openSUSE distribution

* configurations for basic openSUSE Tumbleweed image.
* Add new sub-image "initrd" to control the initrd content.
  * Un-blacklist the erofs for openSUSE image.
  * Add systemd-experimental for missing pcrlock files
* openSUSE obs profile

Signed-off-by: val4oss <val4oss@pm.me>

Author: val4oss

mkosi.conf.d/opensuse/mkosi.conf

@@ -0,0 +1,68 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+
+[Match]
+Distribution=opensuse
+
+[Distribution]
+Release=tumbleweed
+
+[Config]
+Dependencies=initrd
+
+[Content]
+Initrds=%O/initrd
+Packages=
+        bpftool
+        # SSL CA needed for zypper
+        ca-certificates
+        ca-certificates-mozilla
+        cryptsetup
+        distribution-gpg-keys
+        git-core
+        iproute2
+        iputils
+        kernel-default
+        kernel-firmware-all
+        libcap-ng-utils
+        libfido2-1
+        # Needed for TPM2 tools
+        libtss2-tcti-device0
+        man
+        openssh
+        openssh-clients
+        openssh-server
+        patterns-base-base
+        pam
+        pam_pwquality
+        pcsc-lite
+        pcsc-ccid
+        perf
+        polkit
+        procps
+        python3
+        rpm
+        sbsigntools
+        sdbootutil
+        shadow
+        systemd-boot
+        systemd-container
+        systemd-experimental
+        systemd-networkd
+        systemd-resolved
+        systemd-ukify
+        transactional-update
+        tpm2.0-tools
+        tpm2-0-tss
+        veritysetup
+        vim-small
+        wget2
+        xz
+        zram-generator
+        zypper
+
+VolatilePackages=
+        systemd-boot
+        systemd-container
+        systemd-networkd
+        systemd-resolved
+        systemd-ukify

mkosi.images/initrd/mkosi.conf

@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+
+[Include]
+Include=mkosi-initrd

mkosi.images/initrd/mkosi.conf.d/opensuse/mkosi.conf

@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+
+[Match]
+Distribution=opensuse
+
+[Content]
+# Main pcrlock files has been move from experimental to udev package but some
+# needed files are still in systemd-experimental:
+# - /usr/lib/systemd/system/systemd-pcrlock-file-system.service
+# - /usr/lib/systemd/system/systemd-pcrlock-firmware-code.service
+# - /usr/lib/systemd/system/systemd-pcrlock-firmware-config.service
+Packages=
+    systemd-experimental

mkosi.images/initrd/mkosi.conf.d/opensuse/mkosi.postinst

@@ -0,0 +1,6 @@
+#!/bin/bash
+# SPDX-License-Identifier: LGPL-2.1-or-later
+
+# By default erofs is blacklisted in openSUSE and UKIs use erofs for the usrfs
+# we need to remove the blacklist to be able to mount erofs usrfs
+ln -sf /dev/null "$BUILDROOT/usr/lib/modprobe.d/60-blacklist_fs-erofs.conf"

mkosi.profiles/obs/mkosi.conf.d/opensuse-tools.conf

@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+
+[Match]
+ToolsTreeDistribution=opensuse
+ToolsTreeRelease=tumbleweed
+
+[Build]
+ToolsTreeSandboxTrees=opensuse.repo:/etc/zypp/repos.d/systemd.repo

mkosi.profiles/obs/mkosi.conf.d/opensuse.conf

@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+
+[Match]
+Distribution=opensuse
+Release=tumbleweed
+
+[Build]
+SandboxTrees=opensuse.repo:/etc/zypp/repos.d/systemd.repo

mkosi.profiles/obs/opensuse.repo

@@ -0,0 +1,7 @@
+[system_systemd]
+name=system:systemd Project (openSUSE_Tumbleweed)
+type=rpm-md
+baseurl=https://download.opensuse.org/repositories/system:/systemd/openSUSE_Tumbleweed/
+gpgcheck=0
+gpgkey=https://download.opensuse.org/repositories/system:/systemd/openSUSE_Tumbleweed/repodata/repomd.xml.key
+enabled=1