coreos-secex-ignition-prepare: remount /usr rw if needed

Issue: coreos/ignition#1891 Fedora 41 comes with systemd-256, where /usr is read-only during initramfs time.
nikita-dubrovskii · Nov 5, 2024 · c75debf · c75debf
1 parent 6b6f1f7
commit c75debf
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-prepare.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-secex-ignition-prepare.sh
@@ -15,6 +15,11 @@ cleanup() {
 
 trap cleanup EXIT
 
+# https://github.com/coreos/ignition/issues/1891
+if [ ! -w /usr ]; then
+    mount -o rw,remount /usr
+fi
+
 # copy base Secure Execution config (enables LUKS+dm-verity for boot and root partitions)
 cp /usr/lib/coreos/01-secex.ign /usr/lib/ignition/base.d/01-secex.ign