From 6025da1421958500458a72f2f8ff33e34fa07d09 Mon Sep 17 00:00:00 2001
From: "Brian C. Lane" <bcl@redhat.com>
Date: Fri, 13 Dec 2019 09:54:43 -0800
Subject: [PATCH] lorax: Remove vmlinuz from install.img /boot

The kernel in /boot is not needed. Keep the .vmlinuz*hmac file so that
fips mode can check it (this requires dracut-050 or later).

Related: rhbz#1782737
---
 lorax.spec                                        | 2 +-
 share/templates.d/99-generic/runtime-cleanup.tmpl | 5 ++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/lorax.spec b/lorax.spec
index 68760288..96ed194d 100644
--- a/lorax.spec
+++ b/lorax.spec
@@ -41,7 +41,7 @@ Requires:       xz-lzma-compat
 Requires:       xz
 Requires:       pigz
 Requires:       pbzip2
-Requires:       dracut >= 030
+Requires:       dracut >= 050
 Requires:       kpartx
 
 # Python modules
diff --git a/share/templates.d/99-generic/runtime-cleanup.tmpl b/share/templates.d/99-generic/runtime-cleanup.tmpl
index 6be0a4cd..286e689d 100644
--- a/share/templates.d/99-generic/runtime-cleanup.tmpl
+++ b/share/templates.d/99-generic/runtime-cleanup.tmpl
@@ -328,9 +328,8 @@ removefrom ${product.name}-logos /usr/share/{firstboot,gnome-screensaver,kde4,pi
 runcmd find ${root} -name "*.pyo" -type f -delete
 runcmd find ${root} -name "*.pyc" -type f -exec ln -sf /dev/null {} \;
 
-## cleanup /boot/ leaving vmlinuz, and .*hmac files
-runcmd chroot ${root} find /boot \! -name "vmlinuz*" \
-                            -and \! -name ".vmlinuz*" \
+## cleanup /boot/ leaving vmlinuz*hmac files
+runcmd chroot ${root} find /boot \! -name ".vmlinuz*hmac" \
                             -and \! -name boot -delete
 
 ## remove any broken links in /etc or /usr