This means: Keep all things from the audit package as-is, do not erase or
overwrite.
Previously:
- clean up most things audit in the template
- install a custom replacement for auditd from the anaconda packages
- in anaconda, run the replacement manually
Now:
- keep audit things as they are
- do not install the custom replacement
- in anaconda, run "auditctl -e 0" instead of the custom binary
Overall goals remain the same and met:
- keep boot.iso small: this adds +200 KiB-ish
- do not run auditd to lower runtime memory requirements: still ok
- do not spam journal/syslog with audit messages: still ok
Note: Most audit messages come from dracut, where it is not turned off
anyway.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
We don't build 32-bit ARM or x86 images in Fedora any more (we
stopped doing x86 images after F30, we are no longer doing 32-bit
ARM images after F36). So we can drop all of this stuff from
master branch at least.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
Just add them to the xorrisofs command, the order of the arguments is
interleaved and trying to assemble it from variables just makes it more
confusing.
Apple hardware doesn't need the macboot.img to boot, efiboot.img is not
needed in the filesystem so do not graft it into it.
Remove macboot.img and apple specific EFI support
This adds support for BIOS booting using grub2. The bios config file and
grub2 modules are under /boot/grub2/
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
syslinux is unsupported and is going to be removed from Fedora. This
removes it and all of its configuration files from the templates.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
These were commented out early in the RHEL9 Alpha import process and
should be included in the boot.iso
nmap-ncat
redhat-release-eula
libreport-rhel-anaconda-bugzilla
Resolves: rhbz#2056086
Running rngd can slow down the boot in some situations. All current
arches in RHEL support better entropy gathering so this is no longer
needed.
Resolves: rhbz#2028720
This reverts commit 09acfd978e.
rngd is installed in the initrd by dracut, and unconditionally started,
so this won't fix rngd slowdowns in the initrd.
Related: rhbz#2028720
rngd should no long be needed, recent kernels have enough entropy out of
the box. This leaves it in the boot.iso but only enables it if inst.rngd
is passed on the kernel cmdline.
Resolves: rhbz#2028720
scp in openssh 8.7 will change to use sftp protocol. See
https://github.com/openssh/openssh-portable/pull/194 for details.
This enables the sshd internal-sftp implementation so that newer scp
versions will continue to work as expected. Note that the sshd service
is only running during the installation if inst.sshd is passed on the
kernel cmdline.
Resolves: rhbz#2035049
Includes 4a678d6670add49fe17ede43e5789d05a24b4e45 and
22c3e76d6c01f019bbe3a78da751933dc6e53459 from the lorax
package.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
nomodeset no long does anything helpful, and inst.text doesn't make sense
with a live image so drop the menu from the live image.
Related: rhbz#1961092
grub2-2.06-3 changes where the unicode.pf2 font file is stored.
This changes the efi.tmpl to install it from the new location, which
means that it depends on grub2-2.06-3, but there is no way to express
this in the runtime-install.tmpl so if you see a failure like:
2021-07-08 16:10:05,586: OSError: nothing matching /var/tmp/lorax/lorax.t80f74er/installroot/boot/grub2/fonts/unicode.pf2 in /
It means the new version of grub2 wasn't in the repos you used when
running lorax.
Related: rhbz#2003030
rvykydal pointed out that libvorbis is still pulled in via gnome-kiosk
dependencies so keep the removefrom line and update the comment.
Related: rhbz#1961099
