v0.2.0 - Internal version sync for automation scripts

Author: Gemini CLI

automation/37-flatpak-env.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+# MiOS v0.2.0  37-flatpak-env: Capture Flatpak environment for boot-time install
+set -euo pipefail
+
+echo "?"
+echo "  MiOS v0.2.0  Flatpak Environment"
+echo "?"
+
+# Directory for MiOS system-level environment definitions (USR-OVER-ETC compliance)
+# Using /usr/lib/mios/env.d as a "venv/env" style storage
+mkdir -p /usr/lib/mios/env.d
+
+# Capture MIOS_FLATPAKS if set (from build-arg)
+# This creates a system-baked environment file that mios-flatpak-install can read.
+ENV_FILE="/usr/lib/mios/env.d/flatpaks.env"
+
+echo "# MiOS System Environment Definition" > "$ENV_FILE"
+echo "# Generated at build time: $(date -u)" >> "$ENV_FILE"
+
+if [[ -n "${MIOS_FLATPAKS:-}" ]]; then
+    echo "MIOS_FLATPAKS=\"${MIOS_FLATPAKS}\"" >> "$ENV_FILE"
+    echo "[37-flatpak-env] Captured MIOS_FLATPAKS to ${ENV_FILE}"
+else
+    echo "MIOS_FLATPAKS=\"\"" >> "$ENV_FILE"
+    echo "[37-flatpak-env] MIOS_FLATPAKS not set, created empty env file."
+fi
+
+chmod 644 "$ENV_FILE"
+
+echo "[37-flatpak-env] Flatpak environment configured in /usr."

automation/90-generate-sbom.sh

@@ -0,0 +1,50 @@
+#!/bin/bash
+# MiOS v0.2.0  90-generate-sbom: Generate Software Bill of Materials (SBOM)
+# Uses Syft to generate CycloneDX and SPDX manifests for the final image.
+set -euo pipefail
+
+# shellcheck source=lib/common.sh
+source "$(dirname "$0")/lib/common.sh"
+
+echo "[90-generate-sbom] Starting SBOM generation..."
+
+ARTIFACT_DIR="/usr/lib/mios/artifacts/sbom"
+mkdir -p "$ARTIFACT_DIR"
+
+# Check if syft is available
+if ! command -v syft &> /dev/null; then
+    echo "[90-generate-sbom] WARN: Syft not found. Attempting to install..."
+    # Syft is in packages-utils, but if it's missing for some reason, try to install it.
+    dnf install -y syft || {
+        echo "[90-generate-sbom] ERROR: Failed to install Syft. Skipping SBOM generation."
+        exit 0 # Non-fatal
+    }
+fi
+
+VERSION=$(cat /ctx/VERSION 2>/dev/null || echo "v0.2.0")
+TIMESTAMP=$(date -u +%Y%m%dT%H%M%SZ)
+
+echo "[90-generate-sbom] Scanning root filesystem..."
+
+# Generate CycloneDX (JSON) - Primary for AI and automation
+syft scan dir:/ \
+    --output cyclonedx-json \
+    --file "${ARTIFACT_DIR}/mios-sbom-${VERSION}-${TIMESTAMP}.cyclonedx.json" \
+    --exclude "/ctx" \
+    --exclude "/var/cache"
+
+# Generate SPDX (Tag-Value) - Standard compliance
+syft scan dir:/ \
+    --output spdx-tag-value \
+    --file "${ARTIFACT_DIR}/mios-sbom-${VERSION}-${TIMESTAMP}.spdx.txt" \
+    --exclude "/ctx" \
+    --exclude "/var/cache"
+
+# Create latest symlinks
+ln -sf "mios-sbom-${VERSION}-${TIMESTAMP}.cyclonedx.json" "${ARTIFACT_DIR}/latest.cyclonedx.json"
+ln -sf "mios-sbom-${VERSION}-${TIMESTAMP}.spdx.txt" "${ARTIFACT_DIR}/latest.spdx.txt"
+
+echo "[90-generate-sbom] SBOMs generated in ${ARTIFACT_DIR}:"
+ls -lh "$ARTIFACT_DIR"
+
+echo "[90-generate-sbom] Done."