[RHEL 6] Configure new-kernel-pkg to keep tboot configuration on updates (#742885)

Peter Jones pjones at redhat.com
Mon Oct 15 15:58:19 UTC 2012


If we want tboot to keep getting used, we need to configure
new-kernel-pkg to tell grubby to do that.  When grubby finds a  multiboot
stanza as the default template, it won't use the multiboot parts of the
template unless specifically configured to.  This patch adds a
configuration option to tell grubby that we always want to use the tboot
multiboot kernel by default when we add a new kernel.

Signed-off-by: Peter Jones <pjones at redhat.com>
---
 bootloader.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bootloader.py b/bootloader.py
index c77830a..6c0d801 100644
--- a/bootloader.py
+++ b/bootloader.py
@@ -226,6 +226,10 @@ def writeBootloader(anaconda):
     f.write("\n")
     f.write("# DEFAULTKERNEL specifies the default kernel package type\n")
     f.write("DEFAULTKERNEL=%s\n" %(defkern,))
+    if anaconda.id.bootloader.trusted_boot:
+        f.write("# HYPERVISOR specifies the default multiboot kernel\n");
+        f.write("HYPERVISOR=/boot/tboot.gz\n");
+        f.write("HYPERVISOR_ARGS=logging=vga,serial,memory\n");
     f.close()
 
     dosync()
-- 
1.7.12.1



More information about the anaconda-patches mailing list