Add various patches for slfo-1.1

- suse_docs.patch: update documentation to point at new links (bsc#1226050)
- remove_rh_links.patch: remove additional hardcoded RH refs (bsc#1221336)
- hide-pcp.patch: correct patch to properly disable pcp on micro
  (bsc#1226049)
- suse-microos-branding.patch: use suse ID as branding instead of sle-micro
  (bsc#1227441)

0006-totp-motd.patch

@@ -0,0 +1,10 @@
+--- a/src/systemd/inactive.motd
++++ b/src/systemd/inactive.motd
+@@ -1,2 +1,7 @@
+ Activate the web console with: systemctl enable --now cockpit.socket
+ 
++Note: Cockpit disallows root login by default.
++To create a regular user and optionally enable 2FA run both:
++
++jeos-config user
++jeos-config otp

cockpit.changes

@@ -8,6 +8,22 @@ Wed Oct  9 12:14:14 UTC 2024 - Alice Brooks <alice.brooks@suse.com>
 - suse-microos-branding.patch: use suse ID as branding instead of sle-micro
   (bsc#1227441)
 
+-------------------------------------------------------------------
+Mon Sep 30 07:08:12 UTC 2024 - Alice Brooks <alice.brooks@suse.com>
+
+- add 0006-totp-motd.patch for guidance to enabling totp to the mtod
+
+-------------------------------------------------------------------
+Wed Sep 18 12:37:18 UTC 2024 - Jan Zerebecki <jan.suse@zerebecki.de>
+
+- support optional TOTP for authentication, requires pam_oath
+
+-------------------------------------------------------------------
+Tue Aug 20 13:24:06 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- remove requires on pam_oath completely. It will be re-introduced
+  later when it works with optional enrollment
+
 -------------------------------------------------------------------
 Mon Aug 20 11:44:33 UTC 2024 - Alice Brooks <alice.brooks@suse.com>
 
@@ -40,6 +56,7 @@ Sat Aug  7 09:37:00 UTC 2024 - pallas wept <pallaswept@proton.me>
 
 - Recommend cockpit-packagekit if zypper is installed
 
+-------------------------------------------------------------------
 Wed Aug  7 09:36:58 UTC 2024 - Jan Zerebecki <jan.suse@zerebecki.de>
 
 - load pam_oath for optional TOTP for authentication

cockpit.pam

@@ -8,3 +8,4 @@ password include common-password
 session required pam_loginuid.so
 session optional pam_keyinit.so force revoke
 session include common-session
+auth [user_unknown=ignore success=ok] pam_oath.so usersfile=${HOME}/.pam_oath_usersfile no_usersfile_okay window=20 digits=6

cockpit.spec

@@ -68,6 +68,7 @@ Patch5:         storage-btrfs.patch
 # SLE Micro specific patches
 Patch101:       hide-pcp.patch
 Patch102:       0002-selinux-temporary-remove-setroubleshoot-section.patch
+Patch107:       0006-totp-motd.patch
 # For anything based on SLES 15 codebase (including Leap, SLE Micro)
 Patch103:       0004-leap-gnu18-removal.patch
 Patch104:       selinux_libdir.patch
@@ -231,6 +232,7 @@ BuildRequires:  python3-tox-current-env
 %patch -P 4 -p1
 %patch -P 5 -p1
 %patch -P 106 -p1
+%patch -P 107 -p1
 
 # SLE Micro specific patches
 %if 0%{?is_smo}
@@ -530,6 +532,7 @@ Requires: cockpit-bridge >= %{version}-%{release}
 Requires: shadow-utils
 %endif
 Requires: grep
+Requires: jeos-firstboot
 Requires: /usr/bin/pwscore
 Requires: /usr/bin/date
 Provides: cockpit-shell = %{version}-%{release}
@@ -579,7 +582,7 @@ Suggests: sssd-dbus >= 2.6.2
 %if 0%{?suse_version}
 Requires(pre): permissions
 Requires: distribution-logos
-Requires: pam_oath
+Requires: pam_oath >= 2.6.11.12
 Requires: wallpaper-branding
 %endif
 # for cockpit-desktop