Enable fwupd refresh timer on Fedora 39

See: https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
Fixes: coreos/fedora-coreos-tracker#1512

manifests/enable-fwupd-refresh-timer.yaml

@@ -0,0 +1,2 @@
+ostree-layers:
+  - overlay/18fwupd-refresh-timer

manifests/fedora-coreos.yaml

@@ -46,6 +46,11 @@ conditional-include:
     # Modularity is going away in F39+ so we'll only include
     # the fedora-repos-modular package in <39.
     include: fedora-modularity.yaml
+  - if: releasever >= 39
+    # https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+    # Merge with overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+    # once Fedora 39 is released to all streams
+    include: enable-fwupd-refresh-timer.yaml
 
 ostree-layers:
   - overlay/15fcos

overlay.d/18fwupd-refresh-timer/statoverride

@@ -0,0 +1,2 @@
+# Config file for overriding permission bits on overlay files/dirs
+# Format: =<file mode in decimal> <absolute path to a file or directory>

overlay.d/18fwupd-refresh-timer/usr/lib/systemd/system-preset/50-fwupd-refresh-timer.preset

@@ -0,0 +1,4 @@
+# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+# As this is for FCOS only for now, once Fedora 39 is released to all streams,
+# this should be moved to overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
+enable fwupd-refresh.timer

overlay.d/README.md

@@ -42,6 +42,15 @@ Things that are more closely "Fedora CoreOS":
 Disable Zincati on non-production streams:
 https://github.com/coreos/fedora-coreos-tracker/issues/163
 
+18fwupd-refresh-timer
+---------------------
+
+Enable fwupd-refresh.timer on Fedora 39:
+https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+
+Move to overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset once
+Fedora 39 lands in all streams.
+
 20platform-chrony
 -----------------
 

tests/kola/files/fwupd-refresh-timer

@@ -0,0 +1,21 @@
+#!/bin/bash
+## kola:
+##   exclusive: false
+##   description: Verify fwupd-refresh.timer is enabled.
+##   tags: "platform-independent"
+
+set -xeuo pipefail
+
+# shellcheck disable=SC1091
+. "$KOLA_EXT_DATA/commonlib.sh"
+
+if verlt "$(get_fedora_ver)" 39; then
+    ok "Skipping fwupd-refresh.timer test"
+    exit 0
+fi
+
+unit="fwupd-refresh.timer"
+if ! systemctl is-enabled ${unit} 1>/dev/null; then
+    fatal "Unit ${unit} should be enabled"
+fi
+ok "Unit ${unit} is enabled as expected"