projects / ostree.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 476f375) | patch
lib/deploy: Also install HMAC file into /boot
authorJonathan Lebon <jonathan@jlebon.com>
Tue, 29 Oct 2019 20:45:29 +0000 (16:45 -0400)
committerJonathan Lebon <jonathan@jlebon.com>
Tue, 29 Oct 2019 20:45:29 +0000 (16:45 -0400)
commit7ae8da08b9f832bbaf6c9c50737e25116ec7ca9c
tree2e2ac4fa5af1aaba6609d1f1aa015ca35b3ea265tree | snapshot
parent476f375cfcfe0b9a56db0703ffe68441a33b2ce2commit | diff
lib/deploy: Also install HMAC file into /boot

To allow for FIPS mode, we need to also install the HMAC file from
`/usr/lib/modules` to `/boot` alongside the kernel image where the
`fips` dracut module will find it. For details, see:

https://github.com/coreos/fedora-coreos-tracker/issues/302

Note I didn't include the file in the boot checksum since it's itself a
checksum of the kernel, so we don't really gain much here other than
potentially causing an unnecessary bootcsum bump.
src/libostree/ostree-sysroot-deploy.c diff | blob | history
tests/libtest.sh diff | blob | history
tests/test-admin-deploy-none.sh diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.