mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2026-05-05 04:06:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

sys-apps/systemd: Avoid initrd bloat by using OpenSSL instead of gcrypt

Browse Source 
systemd-journal's Forward Secure Sealing feature requires gcrypt, but
Flatcar doesn't need it.

Signed-off-by: James Le Cuirot <jlecuirot@microsoft.com>
This commit is contained in:
James Le Cuirot 2025-04-07 18:35:18 +01:00
parent e5ef9e4f36
commit 959e0715a9
No known key found for this signature in database
GPG Key ID: 1226415D00DD3137
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
changelog/changes/2025-04-17-systemd-crypt.md Normal file
View File

@ -0,0 +1 @@
- systemd now uses OpenSSL instead of gcrypt for cryptography to reduce the size of the initrd. This change disables systemd-journal's Forward Secure Sealing feature, but it is generally not useful for Flatcar.

4
sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use vendored
View File

@ -166,3 +166,7 @@ net-dns/bind-tools gssapi
# Flatcar can't benefit from this performance boost for several reasons, the
# main one being the use of binary packages.
sys-kernel/dracut -dracut-cpio
# Avoid initrd bloat by using OpenSSL instead of gcrypt in systemd.
# systemd-journal's FSS feature requires gcrypt, but Flatcar doesn't need it.
sys-apps/systemd -gcrypt