Add a new bootc-status check that runs 'bootc status' on the
host and verifies it succeeds. The check uses RequiresBootc
so it is automatically skipped for non-bootc images. Future
bootc-specific checks (kargs validation, package verification)
can follow the same pattern.

Assisted-by: Claude Code
Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Add -bootc-ref, -bootc-build-ref and -bootc-remote flags to
cmd/build. When -bootc-ref is provided, the tool resolves
the container's bootc info and creates a BootcDistro via
generic.NewBootc() instead of using the distro factory.
The -distro flag becomes unnecessary (and mutually exclusive with
-bootc-ref) since the distro identity is derived from the
container's os-release.

This follows the same pattern established in cmd/gen-manifests
for bootc container handling.

Note that the installer ref is expected to be passed via the build
config, specifically via `options.bootc.installer_payload_ref`.

Also ensure that `allRepos` is never `nil`.

Assisted-by: Claude Code
Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Add a new "dependencies" field to the "common" section in the Schutzfile
and move the "bootc-image-builder" ref under it. This is a preparation
for moving the osbuild commit there as well. Having all dependencies
under a common key will ensure that all of them are co-located.

Adjust all scripts that are reading or updating the value.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Move the osbuild dependency commit to the 'common.dependencies.osbuild'
section in the Schutzfile. In reality, the commit is always updated to
the same value for all distros. This change reduces the noise by
tracking the common value in a single place. That said, it is still
possible to define distro-specific osbuild commit if needed.

Update all scripts that are reading or writing the value.

This will allow the bootc-foundry boot tests to determine the correct
osbuild commit to use, even for distros that were previously not defined
in this repository's Schutzfile.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Use an absolute path derived from the script's location to find the
Schutzfile. This prevents using a wrong Schutzfile when the
repository is cloned as a subdirectory of another project that also
has a Schutzfile in its root.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Resolve the repository root from the script's location instead of
relying on the caller's working directory. This fixes pip failing with
"Directory '.' is not installable" when the script is invoked from a
different project root.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

The previous behavior assumed the last pipeline in the manifest was
the exported one. This does not work for bootc image manifests which
contain pipelines for all supported image types (qcow2, vmdk, vpc,
gce, etc.) but only one is exported during a build.

Instead, find the exported pipeline by checking which pipeline
directory actually exists in the build output, skipping the "build"
pipeline.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Produce clear error listing the missing variables. Otherwise, the script
would fail with a confusing error when running the boot test.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Detect bootc manifests by checking for the
org.osbuild.bootc.install-to-filesystem stage and skip the
ssh-server/jq curl-source checks, since bootc images are built from
a container that already has all packages installed - there is no
individual RPM installation step in the manifest.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

The kickstart generated by boot_qemu_iso_no_unattended_support() adds
the osbuild user to the wheel group, which grants sudo access but
requires a password. Since the boot tests run non-interactively over
SSH, the sudo password prompt causes the bootc-status check to fail
when it runs "sudo bootc status".

Add a NOPASSWD sudoers rule in the %post section to match the
behavior of the cloud-init path (make_cloud_init_iso), which already
configures passwordless sudo for the osbuild user.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>

Make sure that the boot tests in this repository still pass with the
changes.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>