gib/Panama
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

WIP: Paused over-hardening fix wave (boot checkout verification, double-read package manifest)

Browse Source
This commit is contained in:
Gabriel Brown
2026-09-17 11:43:30 -04:00
parent 28e387868f
commit 442eec19fa
15 changed files with 2553 additions and 326 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/setup/hardware-contract
+4 -1
View File
@@ -103,10 +103,13 @@ fi
nvidia="$(run_stage PANAMA_NVIDIA=yes)"
called "$nvidia" 'dnf install -y akmod-nvidia' \
called "$nvidia" 'akmod-nvidia' \
|| note 'answering yes to NVIDIA does not install akmod-nvidia'
called "$nvidia" 'xorg-x11-drv-nvidia-cuda' \
|| note 'the CUDA driver is not installed alongside the kernel module'
expected_nvidia='sudo dnf install -y --repo=fedora --repo=updates --repo=rpmfusion-free --repo=rpmfusion-free-updates --repo=rpmfusion-nonfree --repo=rpmfusion-nonfree-updates --from-repo=rpmfusion-nonfree,rpmfusion-nonfree-updates akmod-nvidia xorg-x11-drv-nvidia-cuda'
grep -Fxq -- "$expected_nvidia" <<<"$nvidia" \
|| note 'the NVIDIA transaction is not limited to reviewed Fedora and RPM Fusion repositories'
called "$nvidia" 'grubby --update-kernel=ALL' \
|| note 'the kernel arguments are never set'
called "$nvidia" 'modprobe.blacklist=nouveau' \