fix: our own derivation for the kernel in order to be able to sign modules

This commit is contained in:
Lars Sjöström 2025-03-13 09:36:42 +01:00
parent 3dec49b2e4
commit 2c2d212e25
No known key found for this signature in database
10 changed files with 508 additions and 32 deletions
pkgs/image

View file

@ -27,13 +27,6 @@ mv rootfs/usr/lib/systemd/network/89-ethernet.network.example rootfs/usr/lib/sys
ln -sf ../systemd-confext.service rootfs/usr/lib/systemd/system/sysinit.target.wants/systemd-confext.service
ln -sf ../systemd-sysext.service rootfs/usr/lib/systemd/system/sysinit.target.wants/systemd-sysext.service
# install sys users
mkdir creds
echo -n $defaultPassword > creds/passwd.plaintext-password.root
CREDENTIALS_DIRECTORY=$PWD/creds SYSTEMD_CRYPT_PREFIX='$6$' $systemd/usr/bin/systemd-sysusers --root=rootfs rootfs/usr/lib/sysusers.d/*.conf
chmod 600 rootfs/etc/shadow
rm -rf creds
# Initial partitioning
cat <<EOF > init.repart.d/10-root.conf
[Partition]