overlay profiles: Add a function for vendorizing pam files

This is meant to be used by packages installing pam config files. The
function should be invoked in a post src_install hook.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
This commit is contained in:
Krzesimir Nowak 2025-10-17 11:48:10 +02:00
parent d4b29659d3
commit 2b120cc866

View File

@ -134,6 +134,23 @@ cros_pre_pkg_postinst_no_modifications_of_users() {
export ACCT_USER_NO_MODIFY=x
}
# Move pam files from /etc to /usr. It is a no-op for SDK builds.
#
# Invoke this in post_src_install hook.
vendorize_pam_files() {
if [[ ${FLATCAR_TYPE} = 'sdk' ]]; then
# We don't care about PAM inside SDK.
return 0
fi
mkdir -p "${ED}/usr/lib/pam/security"
tar --create --remove-files --directory "${ED}/etc/security" . | \
tar --extract --directory "${ED}/usr/lib/pam/security"
tar --create --remove-files --directory "${ED}/etc/pam.d" . | \
tar --extract --directory "${ED}/usr/lib/pam"
}
# Source hooks for SLSA build provenance report generation
source "${BASH_SOURCE[0]}.slsa-provenance"