okd: add filtered repo for 4.19 plashet

We only want certain packages to come from the 4.19 plashet. And we
can't just rely on NVRs because the plashet may sometimes win. Long-term
we should sever that dependence on ART packages, but for now, let's add
a hack to essentially generate a repo on the fly from the 4.19 repo with
the filters we need.

The advantage of doing it this way instead of e.g. in the
`get-ocp-repo.sh` script is that this applies both in CI and locally.

Author: jlebon

Containerfile

@@ -43,11 +43,22 @@ RUN --mount=type=bind,target=/run/src --mount=type=secret,id=yumrepos,target=/et
         /run/src/ci/get-ocp-repo.sh /etc/yum.repos.d/ocp.repo
     fi
 
+    source /etc/os-release
+
+    # XXX: For SCOS, only allow certain packages to come from ART; everything else
+    # should come from CentOS. We should eventually sever this.
+    if [ $ID = centos ]; then
+        # this says: "if the line starts with [.*], turn off printing. if the line starts with [our-repo], turn it on."
+        awk "/\[.*\]/{p=0} /\[rhel-9.6-server-ose-4.19\]/{p=1} p" /etc/yum.repos.d/*.repo > /etc/yum.repos.d/okd.repo.tmp
+        sed -i -e 's,rhel-9.6-server-ose-4.19,rhel-9.6-server-ose-4.19-okd,' /etc/yum.repos.d/okd.repo.tmp
+        echo 'includepkgs=openshift-*,ose-aws-ecr-*,ose-azure-acr-*,ose-gcp-gcr-*' >> /etc/yum.repos.d/okd.repo.tmp
+        mv /etc/yum.repos.d/okd.repo{.tmp,}
+    fi
+
     # XXX: patch cri-o spec to use tmpfiles
     # https://github.com/CentOS/centos-bootc/issues/393
     mkdir -p /var/opt
 
-    source /etc/os-release
     # this is where all the real work happens
     rpm-ostree experimental compose treefile-apply \
         --var id=$ID /run/src/packages-openshift.yaml

packages-openshift.yaml

@@ -20,7 +20,8 @@ conditional-include:
         - c9s-appstream
         - c9s-sig-nfv
         - c9s-sig-cloud-okd
-        - rhel-9.6-server-ose-4.19
+        # XXX: this shouldn't be here; see related XXX in Containerfile
+        - rhel-9.6-server-ose-4.19-okd
 
 packages:
   # The packages below are required by OpenShift/OKD