diff --git a/zkey/Makefile b/zkey/Makefile index cbecf125..7211ad6c 100644 --- a/zkey/Makefile +++ b/zkey/Makefile @@ -107,6 +107,7 @@ install-common: $(INSTALL) -d -m 755 $(DESTDIR)$(USRBINDIR) $(INSTALL) -d -m 755 $(DESTDIR)$(MANDIR)/man1 $(MAKE) -C initramfs install + $(MAKE) -C dracut install install-zkey: zkey $(INSTALL) -g $(GROUP) -o $(OWNER) -m 755 zkey $(DESTDIR)$(USRBINDIR) diff --git a/zkey/dracut/99-pkey.conf b/zkey/dracut/99-pkey.conf new file mode 100644 index 00000000..75c5e0ea --- /dev/null +++ b/zkey/dracut/99-pkey.conf @@ -0,0 +1,9 @@ +# Copyright IBM Corp. 2025 +# +# s390-tools is free software; you can redistribute it and/or modify +# it under the terms of the MIT license. See LICENSE for details. +# + +add_drivers+=" uvdevice pkey pkey_cca pkey_ep11 pkey_pckmo pkey_uv paes_s390 zcrypt zcrypt_cex4 " +install_items+=" chzcrypt lszcrypt zkey zkey-cryptsetup " +install_optional_items+=" /usr/lib64/zkey/*.so /etc/zkey/* /etc/zkey/repository/* /etc/zkey/kmip/profiles/* " diff --git a/zkey/dracut/Makefile b/zkey/dracut/Makefile new file mode 100644 index 00000000..657de55f --- /dev/null +++ b/zkey/dracut/Makefile @@ -0,0 +1,17 @@ + +include ../../common.mak + +# HAVE_DRACUT +# +# This install time parameter determines whether the pkey dracut module is +# installed (HAVE_DRACUT=1) or not (default). When installed, the module +# performs the following functions when dracut is run: +# +# - install a dracut config file to include zkey related utilities and +# zkey repository in the initramfs +# +ifeq ($(HAVE_DRACUT),1) +install: + $(INSTALL) -m 755 -d $(DESTDIR)$(DRACUTCONFDIR)/ + $(INSTALL) -m 644 99-pkey.conf $(DESTDIR)$(DRACUTCONFDIR)/ +endif