TrueNAS/scale-build
1
0
Fork 0
mirror of https://github.com/truenas/scale-build.git synced 2026-02-14 23:18:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Excluded openssl.cnf and fipsmodule.cnf. Both modified by configure_fips.py. (#963)

Browse Source 
Excluded all /etc/rcX.d directories that hold links files in /etc/init.d.
Excluded ca-certificates.crt.
Excluded entries in /var/lib/certmonger/local.
Removed duplicate entry.
This commit is contained in:
Mark Grimes
2025-12-18 17:29:24 -08:00
committed by GitHub
parent 7d4376d953
commit eb48d7c498
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
scale_build/image/mtree.py
View File

@@ -87,11 +87,11 @@ def _do_mtree_impl(mtree_file_path, version):
'-c', '--format=mtree',
'--exclude', './boot/initrd.img*',
'--exclude', './etc/aliases',
'--exclude', './etc/audit/audit.rules', # TrueNAS managed and audited
'--exclude', './etc/audit/audit.rules', # TrueNAS managed and audited
'--exclude', './etc/console-setup/cached_setup_*',
'--exclude', './etc/default/keyboard',
'--exclude', './etc/default/kdump-tools',
'--exclude', './etc/default/zfs', # Modifed in usr/local/bin/truenas-initrd.py
'--exclude', './etc/default/zfs', # Modifed by truenas-initrd.py
'--exclude', './etc/fstab',
'--exclude', './etc/group',
'--exclude', './etc/machine-id',
@@ -105,20 +105,24 @@ def _do_mtree_impl(mtree_file_path, version):
'--exclude', './etc/dhcp/dhclient.conf',
'--exclude', './etc/libvirt',
'--exclude', './etc/default/libvirt-guests',
'--exclude', './etc/ssl/openssl.cnf', # Modified by configure_fips.py
'--exclude', './etc/pam.d/common-account',
'--exclude', './etc/pam.d/common-auth',
'--exclude', './etc/pam.d/common-password',
'--exclude', './etc/pam.d/common-session',
'--exclude', './etc/pam.d/common-session-noninteractive',
'--exclude', './etc/pam.d/sshd',
'--exclude', './etc/rc?\\.d',
'--exclude', './etc/ssl/certs/ca-certificates.crt',
'--exclude', './usr/lib/debug/*',
'--exclude', './usr/lib/debug/*',
'--exclude', './usr/lib/ssl/fipsmodule.cnf', # Modified by configure_fips.py
'--exclude', './var/cache',
'--exclude', './var/trash',
'--exclude', './var/spool/*',
'--exclude', './var/log/*',
'--exclude', './var/lib/dbus/machine-id',
'--exclude', './var/lib/certmonger/cas/*',
'--exclude', './var/lib/certmonger/local/*',
'--exclude', './var/lib/smartmontools/*',
'--options', '!all,mode,uid,gid,type,link,size,sha256',
]