zkey/dracut: Add a dracut config file for zkey

Provide a dracut config file that ensures that the required drivers and
executables, as well as the zkey repository is included into the initramfs.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2025-05-12 15:27:35 +02:00
committed by Jan Höppner
parent 5bedcff65c
commit 14c977768e
3 changed files with 27 additions and 0 deletions

View File

@@ -107,6 +107,7 @@ install-common:
$(INSTALL) -d -m 755 $(DESTDIR)$(USRBINDIR)
$(INSTALL) -d -m 755 $(DESTDIR)$(MANDIR)/man1
$(MAKE) -C initramfs install
$(MAKE) -C dracut install
install-zkey: zkey
$(INSTALL) -g $(GROUP) -o $(OWNER) -m 755 zkey $(DESTDIR)$(USRBINDIR)

9
zkey/dracut/99-pkey.conf Normal file
View File

@@ -0,0 +1,9 @@
# Copyright IBM Corp. 2025
#
# s390-tools is free software; you can redistribute it and/or modify
# it under the terms of the MIT license. See LICENSE for details.
#
add_drivers+=" uvdevice pkey pkey_cca pkey_ep11 pkey_pckmo pkey_uv paes_s390 zcrypt zcrypt_cex4 "
install_items+=" chzcrypt lszcrypt zkey zkey-cryptsetup "
install_optional_items+=" /usr/lib64/zkey/*.so /etc/zkey/* /etc/zkey/repository/* /etc/zkey/kmip/profiles/* "

17
zkey/dracut/Makefile Normal file
View File

@@ -0,0 +1,17 @@
include ../../common.mak
# HAVE_DRACUT
#
# This install time parameter determines whether the pkey dracut module is
# installed (HAVE_DRACUT=1) or not (default). When installed, the module
# performs the following functions when dracut is run:
#
# - install a dracut config file to include zkey related utilities and
# zkey repository in the initramfs
#
ifeq ($(HAVE_DRACUT),1)
install:
$(INSTALL) -m 755 -d $(DESTDIR)$(DRACUTCONFDIR)/
$(INSTALL) -m 644 99-pkey.conf $(DESTDIR)$(DRACUTCONFDIR)/
endif