Merge remote-tracking branch 'tlaurion-github/generate_passphrase-reo…

…wnership_qr_code' into introduce_quiet_mode-diceware_STAGING Signed-off-by: Thierry Laurion <[email protected]>
tlaurion · Dec 7, 2024 · 0166533 · 0166533
2 parents ae97467 + 4b4ac60
commit 0166533
Show file tree

Hide file tree

Showing 7 changed files with 2,849 additions and 1,135 deletions.
diff --git a/initrd/bin/kexec-sign-config b/initrd/bin/kexec-sign-config
@@ -27,6 +27,9 @@ assert_signable
 
 confirm_gpg_card
 
+# remount /boot as rw
+mount -o remount,rw /boot
+
 # update hashes in /boot before signing
 if [ "$update" = "y" ]; then
 	(
@@ -81,8 +84,15 @@ for tries in 1 2 3; do
 	; then
 		# successful - update the validated params
 		check_config $paramsdir
+
+		# remount /boot as ro
+		mount -o remount,ro /boot
+
 		exit 0
 	fi
 done
 
+# remount /boot as ro
+mount -o remount,ro /boot
+
 die "$paramsdir: Unable to sign kexec hashes"