Skip to content

Commit

Permalink
Workaround package_nfs-utils_removed issue on bootable containers
Browse files Browse the repository at this point in the history
The rule is affected by https://issues.redhat.com/browse/RHEL-74244
which causes that RHEL 10 bootable container hardened with STIG profile
fails to build. Therefore, until this issue is resolved, we will have
a special RHEL 10 only remediation which workarounds the problem on
bootable containers.

Moreover, the `nfs-utils` package is removed as a dependency of
`gssproxy` package so the same workaround is also needed for the
rule `package_gssproxy_removed`.
  • Loading branch information
matusmarhefka committed Jan 23, 2025
1 parent 2edb023 commit b67b0e1
Show file tree
Hide file tree
Showing 4 changed files with 31 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# platform = Red Hat Enterprise Linux 10
# reboot = false
# strategy = disable
# complexity = low
# disruption = low

# This RHEL 10 special remediation is a workaround for
# https://issues.redhat.com/browse/RHEL-74244
# and once the issue is resolved we will remove it.
if {{{ bash_bootc_build() }}}; then
mkdir -p /var/lib/rpm-state
fi

dnf -y remove nfs-utils
Original file line number Diff line number Diff line change
Expand Up @@ -40,3 +40,5 @@ template:
name: package_removed
vars:
pkgname: nfs-utils
backends:
bootc: "off"
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# platform = Red Hat Enterprise Linux 10
# reboot = false
# strategy = disable
# complexity = low
# disruption = low

# This RHEL 10 special remediation is a workaround for
# https://issues.redhat.com/browse/RHEL-74244
# and once the issue is resolved we will remove it.
if {{{ bash_bootc_build() }}}; then
mkdir -p /var/lib/rpm-state
fi

dnf -y remove gssproxy
Original file line number Diff line number Diff line change
Expand Up @@ -42,3 +42,4 @@ template:
pkgname: gssproxy
backends:
anaconda: "off"
bootc: "off"

0 comments on commit b67b0e1

Please sign in to comment.