Bump aurora 0.9.0 for uki (#3524)

Author: Itxaka

.github/workflows/reusable-build-flavor.yaml

@@ -135,7 +135,7 @@ jobs:
         run: |
           docker run --rm --privileged -v /var/run/docker.sock:/var/run/docker.sock \
           -v $PWD/build/:/output \
-          quay.io/kairos/auroraboot:latest \
+          quay.io/kairos/auroraboot:v0.9.0 \
           --debug \
           --set "disable_http_server=true" \
           --set "disable_netboot=true" \
@@ -148,7 +148,7 @@ jobs:
           mkdir build
           docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
           -v $PWD/build/:/output \
-          quay.io/kairos/auroraboot:latest --debug build-iso --output /output/ \
+          quay.io/kairos/auroraboot:v0.9.0 --debug build-iso --output /output/ \
           docker:${{ env.IMAGE_NAME }}
       - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ inputs.model == 'generic' }}

.github/workflows/reusable-release.yaml

@@ -172,7 +172,7 @@ jobs:
           mkdir release
           docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
           -v $PWD/release:/output \
-          quay.io/kairos/auroraboot:latest --debug build-iso --output /output/ \
+          quay.io/kairos/auroraboot:v0.9.0 --debug build-iso --output /output/ \
           docker:${{ env.IMAGE_TAG }}
       - name: Sign ISO sha files
         if: ${{ inputs.trusted_boot == 'false' && inputs.model == 'generic' }}
@@ -186,7 +186,7 @@ jobs:
         run: |
           docker run --rm --privileged -v /var/run/docker.sock:/var/run/docker.sock \
           -v $PWD:/output \
-          quay.io/kairos/auroraboot:latest \
+          quay.io/kairos/auroraboot:v0.9.0 \
           --debug \
           --set "disable_http_server=true" \
           --set "disable_netboot=true" \

.github/workflows/reusable-uki-test.yaml

@@ -142,7 +142,10 @@ jobs:
           -v $PWD/tests/assets/keys:/keys \
           -v $PWD/tests/assets/sysext/:/overlay \
           -v $PWD/build/:/output \
-          quay.io/kairos/auroraboot:v0.8.3 --debug build-uki --output-dir /output/ -k /keys --output-type iso \
+          quay.io/kairos/auroraboot:v0.9.0 --debug build-uki --output-dir /output/ --output-type iso \
+          --public-keys /keys \
+          --tpm-pcr-private-key /keys/tpm2-pcr-private.pem \
+          --sb-key /keys/db.key --sb-cert /keys/db.pem \
           --single-efi-cmdline="testentry: nothing" \
           --overlay-iso /overlay \
           docker:${{ env.IMAGE_NAME }}
@@ -160,8 +163,11 @@ jobs:
           docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
             -v $PWD/build:/result \
             -v $PWD/tests/assets/keys:/keys \
-            quay.io/kairos/auroraboot:v0.8.3 --debug build-uki \
-            --output-dir /result --keys /keys --output-type container \
+            quay.io/kairos/auroraboot:v0.9.0 --debug build-uki \
+            --output-dir /result --output-type container \
+            --public-keys /keys \
+            --tpm-pcr-private-key /keys/tpm2-pcr-private.pem \
+            --sb-key /keys/db.key --sb-cert /keys/db.pem \
             docker:upgrade-image
 
           image=$(docker load -i build/*.tar | grep "Loaded image" | awk -F: '{ st = index($0,":");print substr($0,st+1)}' | sed 's/+/-/g' | xargs)

.github/workflows/upload-cloud-images.yaml

@@ -74,7 +74,7 @@ jobs:
           containerImage="quay.io/kairos/ubuntu:24.04-core-amd64-generic-${latestTag}"
           docker run -v /var/run/docker.sock:/var/run/docker.sock --net host \
             --privileged \
-            -v $PWD:/aurora --rm quay.io/kairos/auroraboot \
+            -v $PWD:/aurora --rm quay.io/kairos/auroraboot:v0.9.0 \
             --debug \
             --set "disable_http_server=true" \
             --set "container_image=docker:${containerImage}" \
@@ -148,7 +148,7 @@ jobs:
           containerImage="quay.io/kairos/ubuntu:24.04-core-amd64-generic-${latestTag}"
           docker run -v /var/run/docker.sock:/var/run/docker.sock --net host \
             --privileged \
-            -v $PWD:/aurora --rm quay.io/kairos/auroraboot \
+            -v $PWD:/aurora --rm quay.io/kairos/auroraboot:v0.9.0 \
             --debug \
             --set "disable_http_server=true" \
             --set "container_image=docker:${containerImage}" \
@@ -221,7 +221,7 @@ jobs:
             containerImage="quay.io/kairos/ubuntu:24.04-core-amd64-generic-${latestTag}"
             docker run -v /var/run/docker.sock:/var/run/docker.sock --net host \
               --privileged \
-              -v $PWD:/aurora --rm quay.io/kairos/auroraboot \
+              -v $PWD:/aurora --rm quay.io/kairos/auroraboot:v0.9.0 \
               --debug \
               --set "disable_http_server=true" \
               --set "container_image=docker:${containerImage}" \

renovate.json

@@ -29,5 +29,15 @@
       ],
       "pinDigests": true
     }
+  ],
+  "regexManagers": [
+    {
+      "fileMatch": [".github/workflows/.*.ya?ml"],
+      "matchStrings": [
+        "quay.io/kairos/auroraboot:(?<currentValue>[a-zA-Z0-9_.-]+)"
+      ],
+      "depNameTemplate": "quay.io/kairos/auroraboot",
+      "datasourceTemplate": "docker"
+    }
   ]
 }