Merge pull request #860 from marineam/obj

Update production image exclude list
This commit is contained in:
Michael Marineau 2014-09-17 16:26:14 -07:00
commit dfdcc46b63
2 changed files with 24 additions and 29 deletions

View File

@ -23,29 +23,3 @@ INSTALL_MASK="${INSTALL_MASK}
INSTALL_MASK="${INSTALL_MASK}
/etc/sudoers
"
# Restrictive mask for production images.
# TODO(marineam): Perhaps later move this to a generic/production profile.
PROD_INSTALL_MASK="${INSTALL_MASK}
*.a *.la *.h *.hpp
/etc/sandbox.d
/usr/include
/usr/lib/debug
/usr/lib*/pkgconfig
/usr/share/aclocal*
/usr/share/awk
/usr/share/gdb
/usr/share/gettext
/usr/share/gobject-introspection-1.0
/usr/share/pkgconfig
/usr/share/readline
/usr/src
"
# Exclude nmap from prod image, we just want ncat/nping in there
# Also remove ncat's second ca-bundle.crt, just use the system's
PROD_INSTALL_MASK="${PROD_INSTALL_MASK}
/usr/bin/nmap
/usr/share/ncat
/usr/share/nmap
"

View File

@ -1,6 +1,27 @@
# Copyright (c) 2014 The CoreOS Authors. All rights reserved.
# Distributed under the terms of the GNU General Public License v2
# default to the full PROD_INSTALL_MASK
# TODO: after transitioning that list will just be defined here.
INSTALL_MASK="${PROD_INSTALL_MASK}"
# Restrictive mask for production images.
INSTALL_MASK="${INSTALL_MASK}
*.a *.la *.h *.hpp *.o
/etc/sandbox.d
/usr/include
/usr/lib/debug
/usr/lib*/pkgconfig
/usr/share/aclocal*
/usr/share/awk
/usr/share/gdb
/usr/share/gettext
/usr/share/gobject-introspection-1.0
/usr/share/pkgconfig
/usr/share/readline
/usr/src
"
# Exclude nmap from prod image, we just want ncat/nping in there
# Also remove ncat's second ca-bundle.crt, just use the system's
INSTALL_MASK="${INSTALL_MASK}
/usr/bin/nmap
/usr/share/ncat
/usr/share/nmap
"