Install both ramdisks in the ipa downloader

- Make the different ipa-ramdisk packages installable side by side
- Clean the ipa-downloader Dockerfile from what seems to be unneeded
- Get both images in
- Use zstd instead of xz for better speed
- Check sums before redoing certs integration
- Add value to metal3 chart to select between architectures

Signed-off-by: Nicolas Belouin <nicolas.belouin@suse.com>

_config

@@ -115,7 +115,7 @@ BuildFlags: onlybuild:release-manifest-image
     BuildFlags: allowrootforbuild
 
     # ironic-ipa-ramdisk are noarch packages that need to be availble to both archs
-    ExportFiler: ^ironic-ipa-ramdisk-.*\.noarch\.rpm$ aarch64 x86_64
+    ExportFilter: ^ironic-ipa-ramdisk-.*\.noarch\.rpm$ aarch64 x86_64
 %endif
 
 # Enable reproducible builds

ironic-ipa-downloader-image/get-resource.sh

@@ -9,22 +9,22 @@ export no_proxy=${no_proxy:-$NO_PROXY}
 if [ -d "/tmp/ironic-certificates" ]; then
   sha256sum /tmp/ironic-certificates/* > /tmp/certificates.sha256
   if cmp "/shared/certificates.sha256" "/tmp/certificates.sha256"; then
-    CERT_CHANGED=1
+    REFRESH_CERTS=1
   else
-    CERT_CHANGED=0
+    REFRESH_CERTS=0
 fi
 
 # Which image should we use
 if [ -z "${IPA_BASEURI}" ]; then
   if cmp "/shared/images.sha256" "/tmp/images.sha256"; then
-    if [ "${CERT_CHANGED:-1}" = "1" ]; then
+    if [ "${REFRESH_CERTS:-1}" = "1" ]; then
       # everything is the same exit early
       exit 0
     fi
   else
-    if [ "${CERT_CHANGED:-0}" = "1" ]; then
+    if [ "${REFRESH_CERTS:-0}" = "1" ]; then
       # Image has changed we need to refresh certs anyway
-      CERT_CHANGED=0
+      REFRESH_CERTS=0
     fi
   fi
   # SLES BASED IPA - ironic-ipa-ramdisk-x86_64 and ironic-ipa-ramdisk-aarch64 packages
@@ -85,12 +85,17 @@ else
       ln -sf $FILENAME-$ETAG/$FFILENAME.headers $FFILENAME.headers
       ln -sf $FILENAME-$ETAG/$FILENAME.initramfs $FILENAME-${ARCH,,}.initramfs
       ln -sf $FILENAME-$ETAG/$FILENAME.kernel $FILENAME-${ARCH,,}.kernel
+      
+      if [ "${REFRESH_CERTS:-0}" = "1" ]; then
+        # Image has changed we need to refresh certs anyway
+        REFRESH_CERTS=0
+      fi
   else
       rm -rf $TMPDIR
   fi
 fi
 
-if [ "${CERT_CHANGED:-1}" = "0" ]; then
+if [ "${REFRESH_CERTS:-1}" = "0" ]; then
   mkdir -p /tmp/ca/tmp-initrd && cd /tmp/ca/tmp-initrd
   mkdir -p etc/ironic-python-agent.d/ca-certs
   cp /tmp/ironic-certificates/* etc/ironic-python-agent.d/ca-certs/