From fedde430b1d654671a564361575053792ce04d59 Mon Sep 17 00:00:00 2001
From: Scott Dodson <sdodson@redhat.com>
Date: Fri, 11 Sep 2026 14:53:37 -0400
Subject: [PATCH] DNM: debug

---
 extensions/build.sh      |   2 +
 extensions/rhel-9.6.yaml | 108 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 110 insertions(+)
 create mode 100644 extensions/rhel-9.6.yaml

diff --git a/extensions/build.sh b/extensions/build.sh
index 0fcc4239..a8c650fa 100755
--- a/extensions/build.sh
+++ b/extensions/build.sh
@@ -109,6 +109,8 @@ echo "Downloading all extension packages (${#all_packages[@]} packages)..."
 #
 # Leverage skip_if_unavailable=True for cases where repos exist for
 # only specific architectures.
+dnf versionlock list
+dnf list available --repo="${repo_list}" kernel\*
 for subcommand in 'install' 'reinstall'; do
     dnf --repo="${repo_list}" "${subcommand}" \
         --assumeyes                           \
diff --git a/extensions/rhel-9.6.yaml b/extensions/rhel-9.6.yaml
new file mode 100644
index 00000000..92bc355f
--- /dev/null
+++ b/extensions/rhel-9.6.yaml
@@ -0,0 +1,108 @@
+# RPMs as operating system extensions, distinct from the base ostree commit/image
+# https://github.com/openshift/enhancements/blob/master/enhancements/rhcos/extensions.md
+# and https://github.com/coreos/fedora-coreos-tracker/issues/401
+
+# RULE: If repos support all architectures then put them in the global repos list
+# at the top of this file (directly below this comment). If we don't we can have
+# consistency issues across arches. See e.g. https://issues.redhat.com/browse/OCPBUGS-52293.
+
+repos:
+  # Generically used for various extensions.
+  # Repo placed here to respect the rule above.
+  - rhel-9.6-appstream
+  # For crun-wasm (wasm) and kata-containers (sandboxed-containers).
+  # Repo placed here to respect the rule above.
+  - rhel-9.6-server-ose-4.21
+  # For two-node-ha extension.
+  # Repo placed here to respect the rule above.
+  - rhel-9.6-highavailability
+  # For ipsec extension include the fast-datapath repo.
+  # Repo placed here to respect the rule above.
+  - rhel-9.6-fast-datapath
+
+extensions:
+  # https://issues.redhat.com/browse/RFE-4177
+  wasm:
+    architectures:
+      - x86_64
+      - aarch64
+    packages:
+      - crun-wasm
+  # https://github.com/coreos/fedora-coreos-tracker/issues/1504
+  ipsec:
+    packages:
+      - libreswan
+      - NetworkManager-libreswan
+      - openvswitch3.5-ipsec
+  # https://github.com/coreos/fedora-coreos-tracker/issues/326
+  usbguard:
+    packages:
+      - usbguard
+  kerberos:
+    packages:
+      - krb5-workstation
+      - libkadm5
+  # https://github.com/kmods-via-containers/kmods-via-containers/issues/3
+  # https://gitlab.cee.redhat.com/coreos/redhat-coreos/merge_requests/866
+  # These are currently overlaid onto the host so that they can be bind-mounted
+  # into build containers... in the future they should be a `development`
+  # extension: https://github.com/openshift/machine-config-operator/pull/2143.
+  kernel-devel:
+    packages:
+      - kernel-devel
+      - kernel-headers
+    match-base-evr: kernel
+  # These are already in the base, so they're not OS extensions, but they're
+  # useful to have in RPM form to install in kmod build containers.
+  kernel:
+    kind: development
+    packages:
+      - kernel
+      - kernel-core
+      - kernel-modules
+      - kernel-modules-extra
+    match-base-evr: kernel
+  # GRPA-2822
+  # https://github.com/openshift/machine-config-operator/pull/1330
+  # https://github.com/openshift/enhancements/blob/master/enhancements/support-for-realtime-kernel.md
+  kernel-rt:
+    architectures:
+      - x86_64
+    repos:
+      # this is not available on all arches, so keep here and not in the global repo list
+      - rhel-9.6-nfv
+    packages:
+      - kernel-rt-core
+      - kernel-rt-kvm
+      - kernel-rt-modules
+      - kernel-rt-modules-extra
+      - kernel-rt-devel
+    match-base-evr: kernel
+  # https://github.com/openshift/machine-config-operator/pull/2456
+  # https://github.com/openshift/enhancements/blob/master/enhancements/sandboxed-containers/sandboxed-containers-tech-preview.md
+  # GRPA-3123
+  sandboxed-containers:
+    architectures:
+      - x86_64
+      - s390x
+    packages:
+      - kata-containers
+  # https://issues.redhat.com/browse/COS-2402
+  kernel-64k:
+    architectures:
+      - aarch64
+    packages:
+      - kernel-64k-core
+      - kernel-64k-modules
+      - kernel-64k-modules-core
+      - kernel-64k-modules-extra
+  # https://issues.redhat.com/browse/COS-2940
+  sysstat:
+    packages:
+      - sysstat
+  # https://issues.redhat.com/browse/OCPEDGE-1493
+  two-node-ha:
+    packages:
+      - pacemaker
+      - pcs
+      - fence-agents-all