From e9fbc35513489dde2b72855ab9f36abec83542e8 Mon Sep 17 00:00:00 2001 From: Michael Nguyen Date: Wed, 6 Aug 2025 15:24:50 -0400 Subject: [PATCH] Revert "40rhcos-fips: include fips.so in initrd" This reverts commit f21c511624729dab8a93a78279f02e27313434b7. This was fixed upstream in in RHEL so this patch is no longer needed. 9.4 - https://issues.redhat.com/browse/RHEL-104864 9.2 - https://issues.redhat.com/browse/RHEL-104863 --- .../lib/dracut/modules.d/40rhcos-fips/module-setup.sh | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/overlay.d/05rhcos/usr/lib/dracut/modules.d/40rhcos-fips/module-setup.sh b/overlay.d/05rhcos/usr/lib/dracut/modules.d/40rhcos-fips/module-setup.sh index 2bd69c78b..4a26b7408 100755 --- a/overlay.d/05rhcos/usr/lib/dracut/modules.d/40rhcos-fips/module-setup.sh +++ b/overlay.d/05rhcos/usr/lib/dracut/modules.d/40rhcos-fips/module-setup.sh @@ -28,16 +28,6 @@ install() { inst_simple "$moddir/rhcos-fips-dracut-boot-fix.service" \ "$systemdsystemunitdir/rhcos-fips-dracut-boot-fix.service" - # Golang 1.22 requires the fips shared object in the initrd to determine - # whether the system is in FIPS mode and ignition will panic if its missing - local src="/usr/lib64/ossl-modules/fips.so" - local dest="/usr/lib64/ossl-modules/fips.so" - if [ -f "$src" ]; then - inst_simple "$src" "$dest" - else - echo "Warning: $src not found!" - fi - # Unconditionally include /etc/system-fips in the initrd. This has no # practical effect if fips=1 isn't also enabled. OTOH, it is a *requirement* # for a true FIPS boot: https://bugzilla.redhat.com/show_bug.cgi?id=1778940