Skip to content

Commit

Permalink
Remove useless apt cmd and IMA config in TDX image creation (#36)
Browse files Browse the repository at this point in the history
The TDX setup process is nice and won't break the apt system, so
"apt install --fix-broken" is redundant.
Also remove IMA parameters from guest kernel cmdline to avoid confusion.
Enabling TDX doesn't require kernel IMA at all.

Signed-off-by: Feng, Jialei <[email protected]>
  • Loading branch information
jialeif authored Feb 20, 2024
1 parent 9085fdc commit 645db8a
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 10 deletions.
5 changes: 0 additions & 5 deletions guest-tools/image/cloud-init-data/user-data
Original file line number Diff line number Diff line change
Expand Up @@ -29,11 +29,6 @@ packages:
- golang-doc
- ntp

runcmd:
- apt install --fix-broken
- sed -i 's/GRUB_CMDLINE_LINUX_DEFAULT="[^"]*/& ima_hash=sha384 ima_policy=critical_data/' /etc/default/grub.d/50-cloudimg-settings.cfg
- update-grub2

# HACK way to set root password
# https://github.com/vmware/photon/issues/931
# set root password to 123456
Expand Down
5 changes: 0 additions & 5 deletions guest-tools/image/cloud-init-data/user-data.template
Original file line number Diff line number Diff line change
Expand Up @@ -29,11 +29,6 @@ packages:
- golang-doc
- ntp

runcmd:
- apt install --fix-broken
- sed -i 's/GRUB_CMDLINE_LINUX_DEFAULT="[^"]*/& ima_hash=sha384 ima_policy=critical_data/' /etc/default/grub.d/50-cloudimg-settings.cfg
- update-grub2

# HACK way to set root password
# https://github.com/vmware/photon/issues/931
# set root password to 123456
Expand Down

0 comments on commit 645db8a

Please sign in to comment.