"Drop non-determinism from default templates") made
an attempt to ensure /etc/gshadow is reproducible by sorting it.
However, there was a typo causing the sorted version to be saved as
/etc/gschadow, leaving the original intact.
(from upstream lorax commit 33f1877dd6fa5659b42b89195a1795c837b89904)
Resolves: RHEL-35396
Audio is not needed on the boot.iso, and now that the firmware package
has been split up it is easier to remove specific firmware completely.
Related: RHEL-44311
As a part of the switch to Wayland the installer
switches from VNC top RDP, which is provided by a different tool
(GNOME remote desktop). As a result, Tiger VNC is no longer needed
on the boot.iso and should be dropped from the templates.
Resolves: RHEL-38741
With libreport going away from RHEL 10,
lets remove any references to if from the
image generation templates, so that the
package can be removed from the distro.
Resolves: RHEL-39794
gtk4 is now getting sucked into installer images because mutter
depends on it (since 44-beta). Strip some stuff the installer
env currently doesn't need. The /usr/bin/* removal may not be
safe long-term, but it should be OK for now.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
This means: Keep all things from the audit package as-is, do not erase or
overwrite.
Previously:
- clean up most things audit in the template
- install a custom replacement for auditd from the anaconda packages
- in anaconda, run the replacement manually
Now:
- keep audit things as they are
- do not install the custom replacement
- in anaconda, run "auditctl -e 0" instead of the custom binary
Overall goals remain the same and met:
- keep boot.iso small: this adds +200 KiB-ish
- do not run auditd to lower runtime memory requirements: still ok
- do not spam journal/syslog with audit messages: still ok
Note: Most audit messages come from dracut, where it is not turned off
anyway.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
Includes 4a678d6670add49fe17ede43e5789d05a24b4e45 and
22c3e76d6c01f019bbe3a78da751933dc6e53459 from the lorax
package.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rvykydal pointed out that libvorbis is still pulled in via gnome-kiosk
dependencies so keep the removefrom line and update the comment.
Related: rhbz#1961099
Anaconda creates a user for connecting via ssh during the installation
when the sshpw kickstart command is used. The user is created with
"/sbin/nologin" shell when /etc/default/useradd is missing, which
prevents the user from log into the running installation.
Resolves: rhbz#1843609
dracut renamed this module so the files were being removed from the
install.img (BUT not from the initramfs). They are necessary for the
shutdown eject feature to work.
Related: rhbz#1805405
The eject utility moved into util-linux and the package was dropped, but
since the runtime-cleanup template is using `removefrom util-linux
--allbut` it was never added to the boot.iso after the move.
This adds it to the list of binaries to keep from util-linux.
Resolves: rhbz#1805405
...turns out you can't just have a single template file, because lorax
just picks a single directory and expects all the data it needs to be
there. Sigh.
So this adds all the rest of the files, plus some Makefile machinery for
generating a tarball and updating the specfile after you've checked in
changes. See README for details.
