s390x: secex: disable Ignition's logs

coreos · Sep 27, 2022 · 359b898 · 359b898
1 parent 6bb97af
commit 359b898
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-diskful-generator
@@ -73,5 +73,17 @@ EOF
     if [[ "${secure_execution}" = "1" ]]; then
         mkdir -p /run/coreos/
         touch /run/coreos/secure-execution
+        # Add dropins to disable Ignition logging for all stages
+        stages=("fetch-offline" "fetch" "kargs" "disks" "mount" "files" )
+        for s in ${stages[@]}; do
+            dropin="${UNIT_DIR}/ignition-${s}.service.d"
+            mkdir -p "${dropin}"
+            cat > "${dropin}/10-secex.conf" <<EOF
+[Service]
+Environment=IGNITION_ARGS=-log-to-stdout
+StandardOutput=null
+StandardError=null
+EOF
+        done
     fi
 fi