search

fedora-silverblue / issue-tracker

Fedora Silverblue issue tracker
https://fedoraproject.org/atomic-desktops/silverblue/
125 stars 3 forks source link

grubby / sdubby installed by default #517

Closed chrisawi closed 6 months ago

chrisawi commented 6 months ago

Now that unified core is re-enabled in 39.20231213, I compared the latest two compose logs to see if it was introducing any unexpected changes, and I found one odd thing: grubby has been replaced by sdubby, which also pulls in systemd-boot-unsigned.

I don't think either one is wanted. grubby was already excluded in comps-sync-exclude-list.yml, but I think it was being pulled in via Recommends from crypto-policies-scripts. Maybe grubby (and sdubby?) should be added to this list as well: https://pagure.io/workstation-ostree-config/blob/f39/f/fedora-common-ostree.yaml#_84

travier commented 6 months ago

Indeed, sdubby should not be included.

Rawhide:

F39:

travier commented 6 months ago

Merged, will be in the next build (when https://github.com/fedora-silverblue/issue-tracker/issues/516 is fixed).

chrisawi commented 6 months ago

Thanks, that gets us back to the status quo, but what about grubby itself? My understanding is that it's not compatible with rpm-ostree, which is why it's excluded from the comps sync.

travier commented 6 months ago

grubby should not be included as it is indeed conflicting with rpm-ostree. Setting kernel arguments should be done via rpm-ostree kargs. Is it included somewhere?

travier commented 6 months ago

Hum, looks like it's include in all variants. Will have to remove it as well.

travier commented 6 months ago
travier commented 6 months ago

Merged. Will be in tomorrow's build for F39+.