2022-11-17 10:44:20 +00:00
|
|
|
#!/usr/bin/env bash
|
2022-10-19 11:10:15 +00:00
|
|
|
set -euxo pipefail
|
|
|
|
|
|
|
|
|
|
# This will work in sd-boot 251 to auto-enroll secure boot keys.
|
|
|
|
|
# https://www.freedesktop.org/software/systemd/man/systemd-boot.html
|
|
|
|
|
# > CHANGES WITH 252 in spe:
|
|
|
|
|
# > [...]
|
|
|
|
|
# > * sd-boot can automatically enroll SecureBoot keys from files found on
|
|
|
|
|
# > the ESP. This enrollment can be either automatic ('force' mode) or
|
|
|
|
|
# > controlled by the user ('manual' mode).
|
|
|
|
|
# > [...]
|
|
|
|
|
#
|
|
|
|
|
# echo "secure-boot-enroll force" >> /boot/loader/loader.conf
|
|
|
|
|
|
|
|
|
|
# create mountpoints in /etc
|
|
|
|
|
mkdir -p /etc/{cni,kubernetes}
|
|
|
|
|
|
|
|
|
|
# move issue files away from /etc
|
|
|
|
|
# to allow /run/issue and /run/issue.d to take precedence
|
|
|
|
|
mv /etc/issue.d /usr/lib/issue.d || true
|
|
|
|
|
rm -f /etc/issue
|
|
|
|
|
rm -f /etc/issue.net
|
2022-11-16 14:45:10 +00:00
|
|
|
|
|
|
|
|
# update /etc/os-release
|
|
|
|
|
echo "IMAGE_ID=\"${IMAGE_ID}\"" >> /etc/os-release
|
|
|
|
|
echo "IMAGE_VERSION=\"${IMAGE_VERSION}\"" >> /etc/os-release
|
