Merge pull request #63 from kewu1992/modify_cmd_when_have_to

Only disable signature verification when module.sig_enforce=1 is set
GoogleCloudPlatform · Nov 19, 2020 · 5e39ee4 · 5e39ee4
2 parents c9b2ae4 + eb0edae
commit 5e39ee4
Showing 1 changed file with 3 additions and 7 deletions.
diff --git a/cos-gpu-installer-docker/entrypoint.sh b/cos-gpu-installer-docker/entrypoint.sh
@@ -122,13 +122,9 @@ configure_kernel_module_locking() {
   pushd "${mount_path}"
 
   # Disable kernel module signature verification.
-  if grep -q "module.sig_enforce" /proc/cmdline; then
-    if grep -q "module.sig_enforce=1" /proc/cmdline; then
-      sed_cmds+=('s/module.sig_enforce=1/module.sig_enforce=0/g')
-    fi
-  else
-    sed_cmds+=('s/cros_efi/cros_efi module.sig_enforce=0/g')
-  fi;
+  if grep -q "module.sig_enforce=1" /proc/cmdline; then
+    sed_cmds+=('s/module.sig_enforce=1/module.sig_enforce=0/g')
+  fi
 
   # Disable loadpin.
   if grep -q "loadpin.enabled" /proc/cmdline; then