mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-20 05:51:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #860 from marineam/obj

Browse Source 
Update production image exclude list
This commit is contained in:
Michael Marineau 2014-09-17 16:26:14 -07:00
commit dfdcc46b63
2 changed files with 24 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/make.defaults vendored
View File

@ -23,29 +23,3 @@ INSTALL_MASK="${INSTALL_MASK}
INSTALL_MASK="${INSTALL_MASK} INSTALL_MASK="${INSTALL_MASK}
/etc/sudoers /etc/sudoers
" "
# Restrictive mask for production images.
# TODO(marineam): Perhaps later move this to a generic/production profile.
PROD_INSTALL_MASK="${INSTALL_MASK}
*.a *.la *.h *.hpp
/etc/sandbox.d
/usr/include
/usr/lib/debug
/usr/lib*/pkgconfig
/usr/share/aclocal*
/usr/share/awk
/usr/share/gdb
/usr/share/gettext
/usr/share/gobject-introspection-1.0
/usr/share/pkgconfig
/usr/share/readline
/usr/src
"
# Exclude nmap from prod image, we just want ncat/nping in there
# Also remove ncat's second ca-bundle.crt, just use the system's
PROD_INSTALL_MASK="${PROD_INSTALL_MASK}
/usr/bin/nmap
/usr/share/ncat
/usr/share/nmap
"

27
sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults vendored
View File

@ -1,6 +1,27 @@
# Copyright (c) 2014 The CoreOS Authors. All rights reserved. # Copyright (c) 2014 The CoreOS Authors. All rights reserved.
# Distributed under the terms of the GNU General Public License v2 # Distributed under the terms of the GNU General Public License v2
# default to the full PROD_INSTALL_MASK # Restrictive mask for production images.
# TODO: after transitioning that list will just be defined here. INSTALL_MASK="${INSTALL_MASK}
INSTALL_MASK="${PROD_INSTALL_MASK}" *.a *.la *.h *.hpp *.o
/etc/sandbox.d
/usr/include
/usr/lib/debug
/usr/lib*/pkgconfig
/usr/share/aclocal*
/usr/share/awk
/usr/share/gdb
/usr/share/gettext
/usr/share/gobject-introspection-1.0
/usr/share/pkgconfig
/usr/share/readline
/usr/src
"
# Exclude nmap from prod image, we just want ncat/nping in there
# Also remove ncat's second ca-bundle.crt, just use the system's
INSTALL_MASK="${INSTALL_MASK}
/usr/bin/nmap
/usr/share/ncat
/usr/share/nmap
"