481bdfe702
This handles an issue where the three way /etc merge can leave a user unpatched despite having the new package. Adapted from https://gitlab.com/fedora/bootc/base-images/-/merge_requests/663 (cherry picked from commit bfa213b13bc967d4652a908ec457e3f1aed34d6d https://github.com/ublue-os/main/pull/3029) Co-authored-by: Kyle Gospodnetich <me@kylegospodneti.ch>
18 lines
622 B
Desktop File
18 lines
622 B
Desktop File
# Regenerate backend files preserved by the /etc three-way merge after image upgrades.
|
|
[Unit]
|
|
Description=Regenerate crypto-policies backend configuration
|
|
Documentation=https://gitlab.com/fedora/bootc/base-images/-/merge_requests/663
|
|
ConditionPathIsMountPoint=/sysroot
|
|
ConditionPathExists=/usr/bin/update-crypto-policies
|
|
DefaultDependencies=no
|
|
Requires=local-fs.target
|
|
After=local-fs.target
|
|
Before=sysinit.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
ExecStart=/bin/bash -ec 'policy=$(/usr/bin/update-crypto-policies --show); exec /usr/bin/update-crypto-policies --set "$$policy"'
|
|
|
|
[Install]
|
|
WantedBy=sysinit.target
|