From fdf36adb8b87012c96187afa4f348d80bbf571eb Mon Sep 17 00:00:00 2001
From: Paul Whalen <pwhalen@fedoraproject.org>
Date: Thu, 27 Feb 2025 15:28:38 -0500
Subject: [PATCH] Migrate systems to a static GRUB config

See: https://pagure.io/workstation-ostree-config/pull-request/591
     https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
     https://fedoraproject.org/wiki/Changes/ComposefsAtomicDesktops

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
---
 bootupd.yaml | 25 +++++++++----------------
 1 file changed, 9 insertions(+), 16 deletions(-)

diff --git a/bootupd.yaml b/bootupd.yaml
index 61a6a9a..2d50c71 100644
--- a/bootupd.yaml
+++ b/bootupd.yaml
@@ -12,21 +12,14 @@ postprocess:
     # Transforms /usr/lib/ostree-boot into a bootupd-compatible update payload
     /usr/bin/bootupctl backend generate-update-metadata
 
-    # Trigger a bootloader update on boot
-    cat > /usr/lib/systemd/system/bootloader-update.service << 'EOF'
-    [Unit]
-    Description=Update bootloader on boot
-    Documentation=https://github.com/coreos/bootupd
-    ConditionFirmware=uefi
-      
+    # Enable migration to a static GRUB config
+    install -dm0755 /usr/lib/systemd/system/bootloader-update.service.d
+    cat > /usr/lib/systemd/system/bootloader-update.service.d/migrate-static-grub-config.conf << 'EOF'
     [Service]
-    Type=oneshot
-    ExecStart=/usr/bin/bootupctl update
-    RemainAfterExit=yes
-    MountFlags=slave
-                  
-    [Install]     
-    WantedBy=multi-user.target
+    ExecStart=/usr/bin/bootupctl migrate-static-grub-config
     EOF
-    chmod 644 /usr/lib/systemd/system/bootloader-update.service
-    echo "enable bootloader-update.service" > /usr/lib/systemd/system-preset/81-iot.preset
\ No newline at end of file
+    
+    echo "enable bootloader-update.service" >> /usr/lib/systemd/system-preset/80-iot.preset
+
+    # Turn permissive mode on for bootupd until all SELinux issues are fixed
+    semanage permissive --noreload --add bootupd_t