commit 94813a39a3d3ebe768755268dd7c96db541fa04c3e0df89630dd2f56f5d32c78 Author: Adrian Schröter Date: Tue Feb 25 17:52:01 2025 +0100 Sync from SUSE:SLFO:Main dracut-pcr-signature revision 07a097d0cbdd28e3c4025b224a0ece26 diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/_service b/_service new file mode 100644 index 0000000..4ab0712 --- /dev/null +++ b/_service @@ -0,0 +1,17 @@ + + + + git + https://github.com/aplanas/dracut-pcr-signature.git + main + @PARENT_TAG@+@TAG_OFFSET@ + v(.*) + enable + dracut-pcr-signature.spec + + + xz + *.tar + + + diff --git a/_servicedata b/_servicedata new file mode 100644 index 0000000..6be6248 --- /dev/null +++ b/_servicedata @@ -0,0 +1,4 @@ + + + https://github.com/aplanas/dracut-pcr-signature.git + d6f12e9aa99233acc4844cb406fc04e8486a47ec \ No newline at end of file diff --git a/dracut-pcr-signature-0.6+0.tar.xz b/dracut-pcr-signature-0.6+0.tar.xz new file mode 100644 index 0000000..282989c --- /dev/null +++ b/dracut-pcr-signature-0.6+0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:47ea766bc04f331ce13097f104b51bd9c7f923ba2b9e38b3a1601af2b8f3b3a5 +size 8696 diff --git a/dracut-pcr-signature.changes b/dracut-pcr-signature.changes new file mode 100644 index 0000000..8ee54bb --- /dev/null +++ b/dracut-pcr-signature.changes @@ -0,0 +1,99 @@ +------------------------------------------------------------------- +Fri Jan 31 13:46:43 UTC 2025 - aplanas@suse.com + +- Update to version 0.6+0: + * Copy measure-pcr files + +------------------------------------------------------------------- +Tue Dec 17 09:56:49 UTC 2024 - aplanas@suse.com + +- Update to version 0.5+1: + * Make the mount do not depend of default service + +------------------------------------------------------------------- +Thu Oct 31 09:37:56 UTC 2024 - aplanas@suse.com + +- Update to version 0.5+0: + * Normalize spec file + * Use a generator to mount ESP + * Avoid race condition when multiple disks are encrypted + +------------------------------------------------------------------- +Mon Oct 07 14:52:41 UTC 2024 - aplanas@suse.com + +- Update to version 0.4+2: + * Synchronize spec file + * Copy JSON file in /run to survive initrd + +------------------------------------------------------------------- +Thu May 30 08:45:40 UTC 2024 - Alberto Planas Dominguez + +- Update to version 0.4: + + No new features, tagged on 0.3+6 +- Remove GRUB2 conflict + +------------------------------------------------------------------- +Mon May 13 20:42:01 UTC 2024 - Alberto Planas Dominguez + +- Adapt regenerate initrd macro expansion + +------------------------------------------------------------------- +Mon Apr 22 09:08:46 UTC 2024 - aplanas@suse.com + +- Update to version 0.3+6: + * Add UTF8 character set + +------------------------------------------------------------------- +Wed Apr 17 12:29:01 UTC 2024 - aplanas@suse.com + +- Update to version 0.3+5: + * Generate the initrd after installation + * Temporaly conflict with GRUB2 + * Small fix for comment + +------------------------------------------------------------------- +Tue Apr 16 17:19:57 UTC 2024 - aplanas@suse.com + +- Update to version 0.3+2: + * Do not hard fail when error in mount + +------------------------------------------------------------------- +Fri Apr 12 18:01:58 UTC 2024 - aplanas@suse.com + +- Update to version 0.3+1: + * Include mktemp in initrd + +------------------------------------------------------------------- +Wed Apr 10 11:13:22 UTC 2024 - aplanas@suse.com + +- Update to version 0.3+0: + * Various small improvements + +------------------------------------------------------------------- +Tue Mar 12 15:08:08 UTC 2024 - aplanas@suse.com + +- Update to version 0.2: + * Support GRUB2 configurations + +------------------------------------------------------------------- +Tue Jan 30 09:16:29 UTC 2024 - aplanas@suse.com + +- Update to version 0.1+3: + * Copy pcrlock.json if available + +------------------------------------------------------------------- +Tue Jan 09 07:35:24 UTC 2024 - aplanas@suse.com + +- Update to version 0.1+2: + * Explicitly add VFAT module + +------------------------------------------------------------------- +Fri Dec 01 13:04:17 UTC 2023 - aplanas@suse.com + +- Update to version 0.1+1: + * Use xz compression + +------------------------------------------------------------------- +Wed Nov 29 15:47:37 UTC 2023 - Alberto Planas Dominguez + +- Initial package diff --git a/dracut-pcr-signature.spec b/dracut-pcr-signature.spec new file mode 100644 index 0000000..029eb0f --- /dev/null +++ b/dracut-pcr-signature.spec @@ -0,0 +1,64 @@ +# +# spec file for package dracut-pcr-signature +# +# Copyright (c) 2025 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +Name: dracut-pcr-signature +Version: 0.6+0 +Release: 0 +Summary: Dracut module to import PCR signatures +License: GPL-2.0-or-later +URL: https://github.com/aplanas/dracut-pcr-signature +Source: %{name}-%{version}.tar.xz +BuildRequires: pkgconfig +BuildRequires: rpm-config-SUSE +BuildRequires: pkgconfig(dracut) +BuildArch: noarch + +%description +Dracut module to import PCR signatures. This will make possible the +prediction of the initrd (and cmdline) hashes, as will not require the +update of the initrd to introduce the JSON and PEM files required to +unlock the LUKS2 device via systemd-cryptsetup. + +%prep +%setup -q + +%build + +%install +mkdir -p %{buildroot}%{_prefix}/lib/dracut/modules.d/50pcr-signature +for i in module-setup.sh boot-efi-generator.sh pcr-signature.sh pcr-signature.service; do + cp "$i" %{buildroot}%{_prefix}/lib/dracut/modules.d/50pcr-signature +done + +%post +%{?regenerate_initrd_post} + +%posttrans +%{?regenerate_initrd_posttrans} + +%postun +%{?regenerate_initrd_post} + +%files +%license LICENSE +%doc README.md +%dir %{_prefix}/lib/dracut +%dir %{_prefix}/lib/dracut/modules.d +%{_prefix}/lib/dracut/modules.d/50pcr-signature + +%changelog