Include systemd-pcrphase dracut module only on !ppc64le
See: https://pagure.io/workstation-ostree-config/pull-request/518 See: https://gitlab.com/fedora/ostree/sig/-/issues/44
This commit is contained in:
parent
8a4fcf94ce
commit
0709c10b47
3 changed files with 26 additions and 9 deletions
|
@ -16,6 +16,14 @@ include:
|
||||||
# Read only sysroot
|
# Read only sysroot
|
||||||
- sysroot-ro.yaml
|
- sysroot-ro.yaml
|
||||||
|
|
||||||
|
# systemd-pcrphase module fails on ppc64le:
|
||||||
|
# https://gitlab.com/fedora/ostree/sig/-/issues/44
|
||||||
|
arch-include:
|
||||||
|
x86_64:
|
||||||
|
- initramfs-tpm-luks.yaml
|
||||||
|
aarch64:
|
||||||
|
- initramfs-tpm-luks.yaml
|
||||||
|
|
||||||
conditional-include:
|
conditional-include:
|
||||||
# Manifests included only for classic ostree variants
|
# Manifests included only for classic ostree variants
|
||||||
- if: bootable_container == false
|
- if: bootable_container == false
|
||||||
|
|
18
initramfs-tpm-luks.yaml
Normal file
18
initramfs-tpm-luks.yaml
Normal file
|
@ -0,0 +1,18 @@
|
||||||
|
# Set dracut configuration for the initramfs
|
||||||
|
# See: https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0/initramfs.yaml
|
||||||
|
# See: https://github.com/coreos/fedora-coreos-config/tree/testing-devel/overlay.d/05core/usr/lib/dracut/dracut.conf.d
|
||||||
|
postprocess:
|
||||||
|
- |
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
set -xeuo pipefail
|
||||||
|
|
||||||
|
install -dm 0755 -o 0 -g 0 /usr/lib/dracut/dracut.conf.d
|
||||||
|
|
||||||
|
- |
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
set -xeuo pipefail
|
||||||
|
|
||||||
|
cat > /usr/lib/dracut/dracut.conf.d/20-atomic-tpm-luks.conf << 'EOF'
|
||||||
|
# Add support for systemd-cryptsetup and tpm2-tss LUKS locking
|
||||||
|
add_dracutmodules+=" tpm2-tss systemd-pcrphase "
|
||||||
|
EOF
|
|
@ -26,12 +26,3 @@ postprocess:
|
||||||
# save much space. So let's disable it to avoid the error-looking message.
|
# save much space. So let's disable it to avoid the error-looking message.
|
||||||
do_strip=no
|
do_strip=no
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
- |
|
|
||||||
#!/usr/bin/env bash
|
|
||||||
set -xeuo pipefail
|
|
||||||
|
|
||||||
cat > /usr/lib/dracut/dracut.conf.d/20-atomic-tpm-luks.conf << 'EOF'
|
|
||||||
# Add support for systemd-cryptsetup and tpm2-tss LUKS locking
|
|
||||||
add_dracutmodules+=" tpm2-tss systemd-pcrphase "
|
|
||||||
EOF
|
|
||||||
|
|
Loading…
Reference in a new issue