iot/base-images
0
0
Fork 0
mirror of https://gitlab.com/fedora/bootc/base-images.git synced 2026-08-31 13:30:45 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge branch 'kernel-protect' into 'main'

Browse source 
minimal/kernel-install: set protect_running_kernel to False

See merge request fedora/bootc/base-images!149
This commit is contained in:
Colin Walters 2025-03-14 18:45:12 +00:00
commit 59a3586a40
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
minimal/kernel-install.yaml
View file

@ -13,9 +13,13 @@ postprocess:
# https://dnf.readthedocs.io/en/latest/conf_ref.html#main-options
# Let's add the config to a distribution configuration file if dnf5
# is used, we append to /etc/dnf/dnf.conf if not.
# Also set protect_running_kernel=False, dnf/yum pre-dates Containers and
# uses uname to protect the running kernel even on Container builds.
if [ -d "/usr/share/dnf5/libdnf.conf.d/" ]; then
echo -e "[main]\ninstallonlypkgs=''" >> /usr/share/dnf5/libdnf.conf.d/20-ostree-installonlypkgs.conf
echo -e "[main]\nprotect_running_kernel=False" >> /usr/share/dnf5/libdnf.conf.d/20-ostree-protect_running_kernel.conf
else
echo "installonlypkgs=''" >> /etc/dnf/dnf.conf
echo "protect_running_kernel=False" >> /etc/dnf/dnf.conf
fi