Upgrade the base AMI to Fedora 41

.pre-commit-config.yaml

@@ -200,6 +200,9 @@ repos:
           # It is also a good idea to go ahead and upgrade to version
           # 10 since version 9 is going EOL at the end of November:
           # https://endoflife.date/ansible
+          #
+          # This project uses community.general.ufw, which is packaged
+          # into ansible, so it requires this dependency.
           - ansible>=10,<11
           # ansible-core 2.16.3 through 2.16.6 suffer from the bug
           # discussed in ansible/ansible#82702, which breaks any

ami_arm64.pkr.hcl

@@ -15,7 +15,7 @@ source "amazon-ebs" "arm64" {
   region             = var.build_region
   region_kms_key_ids = var.region_kms_keys
   skip_create_ami    = var.skip_create_ami
-  source_ami         = data.amazon-ami.fedora_39_arm64.id
+  source_ami         = data.amazon-ami.fedora_41_arm64.id
   ssh_username       = "fedora"
   subnet_filter {
     filters = {
@@ -25,9 +25,9 @@ source "amazon-ebs" "arm64" {
   tags = {
     Application        = "FreeIPA server"
     Architecture       = "arm64"
-    Base_AMI_Name      = data.amazon-ami.fedora_39_arm64.name
+    Base_AMI_Name      = data.amazon-ami.fedora_41_arm64.name
     GitHub_Release_URL = var.release_url
-    OS_Version         = "Fedora 39"
+    OS_Version         = "Fedora 41"
     Pre_Release        = var.is_prerelease
     Release            = var.release_tag
     Team               = "VM Fusion - Development"

ami_x86_64.pkr.hcl

@@ -15,7 +15,7 @@ source "amazon-ebs" "x86_64" {
   region             = var.build_region
   region_kms_key_ids = var.region_kms_keys
   skip_create_ami    = var.skip_create_ami
-  source_ami         = data.amazon-ami.fedora_39_x86_64.id
+  source_ami         = data.amazon-ami.fedora_41_x86_64.id
   ssh_username       = "fedora"
   subnet_filter {
     filters = {
@@ -25,9 +25,9 @@ source "amazon-ebs" "x86_64" {
   tags = {
     Application        = "FreeIPA server"
     Architecture       = "x86_64"
-    Base_AMI_Name      = data.amazon-ami.fedora_39_x86_64.name
+    Base_AMI_Name      = data.amazon-ami.fedora_41_x86_64.name
     GitHub_Release_URL = var.release_url
-    OS_Version         = "Fedora 39"
+    OS_Version         = "Fedora 41"
     Pre_Release        = var.is_prerelease
     Release            = var.release_tag
     Team               = "VM Fusion - Development"

base_amis.pkr.hcl

@@ -1,7 +1,7 @@
-data "amazon-ami" "fedora_39_arm64" {
+data "amazon-ami" "fedora_41_arm64" {
   filters = {
     architecture        = "arm64"
-    name                = "Fedora-Cloud-Base-39-*aarch64-hvm-*-gp3-*"
+    name                = "Fedora-Cloud-Base-AmazonEC2.aarch64-41-*"
     root-device-type    = "ebs"
     virtualization-type = "hvm"
   }
@@ -10,10 +10,10 @@ data "amazon-ami" "fedora_39_arm64" {
   region      = var.build_region
 }
 
-data "amazon-ami" "fedora_39_x86_64" {
+data "amazon-ami" "fedora_41_x86_64" {
   filters = {
     architecture        = "x86_64"
-    name                = "Fedora-Cloud-Base-39-*x86_64-hvm-*-gp3-*"
+    name                = "Fedora-Cloud-Base-AmazonEC2.x86_64-41-*"
     root-device-type    = "ebs"
     virtualization-type = "hvm"
   }

build.pkr.hcl

@@ -5,6 +5,20 @@ build {
     "source.amazon-ebs.x86_64",
   ]
 
+  # This is necessary because the base AMI we use does not come with
+  # the python3-libdnf5 package preinstalled.  Since Ansible detects
+  # dnf5 as the package manage on Fedora 41 and above, this package
+  # must be installed before Ansible can be run.
+  provisioner "shell" {
+    execute_command = "chmod +x {{ .Path }}; sudo env {{ .Vars }} {{ .Path }} ; rm -f {{ .Path }}"
+    inline          = ["dnf5 --assumeyes --quiet --refresh install python3-libdnf5"]
+  }
+
+  provisioner "shell" {
+    execute_command = "chmod +x {{ .Path }}; sudo env {{ .Vars }} {{ .Path }} ; rm -f {{ .Path }}"
+    inline          = ["echo daspasswort | passwd fedora --stdin"]
+  }
+
   provisioner "ansible" {
     playbook_file = "ansible/upgrade.yml"
     use_proxy     = false
@@ -30,6 +44,6 @@ build {
     # noexec bit set on it.
     execute_command = "chmod +x {{ .Path }}; sudo env {{ .Vars }} bash {{ .Path }} ; rm -f {{ .Path }}"
     skip_clean      = true
-    inline          = ["update-crypto-policies --set DEFAULT", "sed -i '/^users:/ {N; s/users:.*/users: []/g}' /etc/cloud/cloud.cfg", "rm --force /etc/sudoers.d/90-cloud-init-users", "rm --force /root/.ssh/authorized_keys", "/usr/sbin/userdel --remove --force fedora"]
+    inline          = ["update-crypto-policies --set DEFAULT", "sed -i '/^users:/ {N; s/users:.*/users: []/g}' /etc/cloud/cloud.cfg", "rm --force /etc/sudoers.d/90-cloud-init-users", "rm --force /root/.ssh/authorized_keys"] # , "/usr/sbin/userdel --remove --force fedora"]
   }
 }

version.txt

@@ -1 +1 @@
-0.9.5
+0.10.0-rc.6