if [ "@DIST@" = "REDHAT" ]; then
cd @top_builddir@
# Decide on names for the final output. These have to match Makefile.am.
- output=appliance/initramfs.@REPO@.@host_cpu@.img
- koutput=appliance/vmlinuz.@REPO@.@host_cpu@
+ output=appliance/initramfs.@host_cpu@.img
+ koutput=appliance/vmlinuz.@host_cpu@
rm -f $output
rm -f $koutput
/usr/sbin/groupmems \
/sbin/unix_update \
/usr/sbin/tcpd \
+ /usr/share/dbus-1/services/org.selinux.Restorecond.service \
/lib/dbus-1/dbus-daemon-launch-helper \
/lib64/dbus-1/dbus-daemon-launch-helper \
/etc/passwd- \
/var/log/yum.log \
$(cd initramfs && echo usr/sbin/glibc_post_upgrade.*)
+ # Remove all .*.hmac files (RHBZ#654638). These are not used unless
+ # you are using FIPS, and they cause hard dependencies on files
+ # which change whenever a library version is bumped.
+ @FEBOOTSTRAP_RUN@ initramfs -- rm -f $(cd initramfs && find -name '.*.hmac')
+
# Kernel modules take up nearly half of the image. Only include ones
# which are on the whitelist.
exec 5<appliance/kmod.whitelist
ls -lh $koutput
- # Now directly run the update script to copy/update the daemon in the
- # initramfs.
- cd appliance && bash update.sh
-
elif [ "@DIST@" = "DEBIAN" ]; then
cd @top_builddir@/appliance
debirf make -n debian