fix: our own derivation for the kernel in order to be able to sign modules

This commit is contained in:
Lars Sjöström 2025-03-13 09:36:42 +01:00
parent 3dec49b2e4
commit 2c2d212e25
No known key found for this signature in database
10 changed files with 508 additions and 32 deletions

View file

@ -7,12 +7,10 @@
}:
let
pname = "patos-image";
defaultPassword = "patos";
in
stdenvNoCC.mkDerivation (finalAttrs: {
inherit version;
inherit pname;
inherit defaultPassword;
buildInputs = with pkgs; [
erofs-utils
@ -29,7 +27,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
};
systemd = patosPkgs.systemd.out;
kernel = patosPkgs.kernel.kernel;
kernel = patosPkgs.kernel;
initrd = patosPkgs.initrd.out;
rootfs = patosPkgs.rootfs.out;

View file

@ -27,13 +27,6 @@ mv rootfs/usr/lib/systemd/network/89-ethernet.network.example rootfs/usr/lib/sys
ln -sf ../systemd-confext.service rootfs/usr/lib/systemd/system/sysinit.target.wants/systemd-confext.service
ln -sf ../systemd-sysext.service rootfs/usr/lib/systemd/system/sysinit.target.wants/systemd-sysext.service
# install sys users
mkdir creds
echo -n $defaultPassword > creds/passwd.plaintext-password.root
CREDENTIALS_DIRECTORY=$PWD/creds SYSTEMD_CRYPT_PREFIX='$6$' $systemd/usr/bin/systemd-sysusers --root=rootfs rootfs/usr/lib/sysusers.d/*.conf
chmod 600 rootfs/etc/shadow
rm -rf creds
# Initial partitioning
cat <<EOF > init.repart.d/10-root.conf
[Partition]