maintain selinux attributes into the erofs build

2026-06-15 21:45:59 +00:00
parent 72d3f49369
commit 450a989d4e
4 changed files with 48 additions and 8 deletions
@@ -52,7 +52,8 @@ shellcheck --exclude=SC1091,SC2154 files/dracut/95dot1x-macsec/*.sh scripts/*.sh
 Build-host deps: qemu-kvm, libguestfs-tools (+ a kernel for its supermin
 appliance), erofs-utils, cryptsetup, jq, systemd-ukify **and systemd-boot-efi**
 (the latter ships the `linuxx64.efi.stub` ukify needs), sbsigntools,
-buildah (or docker).
+buildah (or docker), **attr** (`getfattr` — `extract-artifacts.sh` asserts the
+SELinux labels survived the export; an unlabeled enforcing root denies login).

 ## Architecture invariants — do not violate these