]> git.ipfire.org Git - thirdparty/dracut.git/commitdiff
fix(systemd-verity): incorrect reference to cryptsetup target
authorJóhann B. Guðmundsson <johannbg@gmail.com>
Tue, 27 Apr 2021 10:37:20 +0000 (10:37 +0000)
committerHarald Hoyer <harald@hoyer.xyz>
Tue, 27 Apr 2021 13:05:12 +0000 (15:05 +0200)
Incorrect include of remote-cryptsetup.target in hostonly.
Corrected to point to remote-veritysetup.target

dracut.spec
modules.d/01systemd-veritysetup/module-setup.sh [new file with mode: 0755]

index 42f7e8ffd7830c274c9e5556856f960fd6ebf528..fa78680c3fcd96d85dedabd35447caab18b96567 100644 (file)
@@ -335,7 +335,7 @@ echo 'dracut_rescue_image="yes"' > $RPM_BUILD_ROOT%{dracutlibdir}/dracut.conf.d/
 %{dracutlibdir}/modules.d/01systemd-sysusers
 %{dracutlibdir}/modules.d/01systemd-timedated
 %{dracutlibdir}/modules.d/01systemd-timesyncd
-%{dracutlibdir}/modules.d/01systemd-verity
+%{dracutlibdir}/modules.d/01systemd-veritysetup
 %{dracutlibdir}/modules.d/03modsign
 %{dracutlibdir}/modules.d/03rescue
 %{dracutlibdir}/modules.d/04watchdog
diff --git a/modules.d/01systemd-veritysetup/module-setup.sh b/modules.d/01systemd-veritysetup/module-setup.sh
new file mode 100755 (executable)
index 0000000..fecfecc
--- /dev/null
@@ -0,0 +1,60 @@
+#!/bin/bash
+# This file is part of dracut.
+# SPDX-License-Identifier: GPL-2.0-or-later
+
+# Prerequisite check(s) for module.
+check() {
+
+    # If the binary(s) requirements are not fulfilled the module can't be installed.
+    require_binaries \
+        "$systemdutildir"/systemd-veritysetup \
+        "$systemdutildir"/system-generators/systemd-veritysetup-generator \
+        || return 1
+
+    # Return 255 to only include the module, if another module requires it.
+    return 255
+
+}
+
+# Module dependency requirements.
+depends() {
+
+    # This module has external dependency on other module(s).
+    echo systemd dm
+    # Return 0 to include the dependent module(s) in the initramfs.
+    return 0
+
+}
+
+# Install the required file(s) and directories for the module in the initramfs.
+install() {
+
+    inst_multiple -o \
+        "$systemdutildir"/systemd-veritysetup \
+        "$systemdutildir"/system-generators/systemd-veritysetup-generator \
+        "$systemdsystemunitdir"/remote-veritysetup.target \
+        "$systemdsystemunitdir"/veritysetup-pre.target \
+        "$systemdsystemunitdir"/veritysetup.target \
+        "$systemdsystemunitdir"/sysinit.target.wants/veritysetup.target \
+        "$systemdsystemunitdir"/initrd-root-device.target.wants/remote-veritysetup.target
+
+    # Install the hosts local user configurations if enabled.
+    if [[ $hostonly ]]; then
+        inst_multiple -H -o \
+            /etc/veritytab \
+            "$systemdsystemconfdir"/veritysetup.target \
+            "$systemdsystemconfdir/veritysetup.target.wants/*.target" \
+            "$systemdsystemconfdir"/veritysetup-pre.target \
+            "$systemdsystemconfdir/veritysetup-pre.target.wants/*.target" \
+            "$systemdsystemconfdir"/remote-veritysetup.target \
+            "$systemdsystemconfdir/remote-veritysetup.target.wants/*.target" \
+            "$systemdsystemconfdir"/sysinit.target.wants/veritysetup.target \
+            "$systemdsystemconfdir/sysinit.target.wants/veritysetup.target.wants/*.target" \
+            "$systemdsystemconfdir"/initrd-root-device.target.wants/remote-veritysetup.target
+    fi
+
+    # Install required libraries.
+    _arch=${DRACUT_ARCH:-$(uname -m)}
+    inst_libdir_file {"tls/$_arch/",tls/,"$_arch/",}"libcryptsetup.so.*"
+
+}