TEMPORARY: use (bookworm) securedrop-grsec as kernel metapackage

freedomofpress · Mar 27, 2024 · 9723430 · 9723430
1 parent 9c345ff
commit 9723430
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/dom0/sd-dom0-files.sls b/dom0/sd-dom0-files.sls
@@ -46,7 +46,7 @@ dom0-workstation-rpm-repo:
     - require:
       - file: dom0-rpm-test-key
 
-# Ensure debian-12-xfce is present
+# Ensure debian-12-xfce is present for use as base template
 dom0-install-debian-base-template:
   cmd.run:
     - name: >

diff --git a/dom0/sd-workstation-template-files.sls b/dom0/sd-workstation-template-files.sls
@@ -7,7 +7,8 @@ sd-workstation-template-install-kernel-config-packages:
   pkg.installed:
     - pkgs:
       - securedrop-workstation-config
-      - securedrop-workstation-grsec
+#TODO: flip this back to securedrop-workstation-grsec when packaging changes are complete
+      - securedrop-grsec
     - require:
       - sls: fpf-apt-repo