]> git.ipfire.org Git - thirdparty/dracut.git/commit
Check .hmac of boot.iso in fips mode
authorBrian C. Lane <bcl@brianlane.com>
Fri, 13 Dec 2019 17:47:43 +0000 (09:47 -0800)
committerHarald Hoyer <harald@hoyer.xyz>
Tue, 14 Jan 2020 08:23:21 +0000 (09:23 +0100)
commit05b75703b0e378f0dac2db89dd5a4ad88ed9e529
tree69449fe19933cb2d1fd9c1df38a032903bb13448
parent7fea85ce5f313445a260b5eb7bd7466217479d99
Check .hmac of boot.iso in fips mode

Instead of carrying the kernel and hmac in the install.img (which takes
up more space) use the vmlinuz installed under /images/pxeboot/ and the
.hmac in the install.img /boot.

This check is triggered by the presence of /run/install/repo/images/pxeboot/vmlinuz

Related: rhbz#1782737
modules.d/01fips/fips.sh