Skip to content

boot: Discover aboot OCI artifacts only in /boot - #414

Merged
alexlarsson merged 1 commit into
mainfrom
aboot-boot-only
Oct 8, 2026
Merged

alexlarsson merged 1 commit into
mainfrom
aboot-boot-only

Conversation

@alexlarsson

@alexlarsson alexlarsson commented Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

Legacy OStree images/commits that use aboot will have an aboot.img in /usr/lib/modules. We don't want to pick that up as if it was a native composefs aboot bootc image and break old images. So, only look for those in /boot.

Assisted-by: AI

Legacy OStree images/commits that use aboot will have an aboot.img in
/usr/lib/modules. We don't want to pick that up as if it was a native
composefs aboot bootc image and break old images. So, only look for
those in /bootc.

Assisted-by: AI
Signed-off-by: Alexander Larsson <alexl@redhat.com>
@cgwalters

Copy link
Copy Markdown
Collaborator

Hmm. I had honestly really liked still finding kernel related stuff in /usr/lib/modules, but I guess that ship has sailed now.

Is there UKI-like sealing concerns for masking out aboot.img in the same way we mask out the UKI in /boot for digest embedding?

@alexlarsson
alexlarsson added this pull request to the merge queue Oct 8, 2026
Merged via the queue into main with commit a0a3847 Oct 8, 2026
16 of 18 checks passed
@alexlarsson

Copy link
Copy Markdown
Contributor Author

Yes, for exactly the same reason as with Luis, we want to be able to sign the aboot image and not affect the boot transformed digest.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants