# Fleet-generic initramfs for diskless 802.1X/MACsec hosts.
# Root = erofs image on a shared read-only NVMe/TCP namespace,
# integrity-verified by dm-verity, tmpfs overlay for runtime state.
# Built with --no-hostonly; assert everything the real hardware needs,
# because the build VM only has virtio devices.
hostonly="no"
# Module NAMES here omit the NN dir-prefix: the directory is 95dot1x-macsec but
# the module is 'dot1x-macsec' (cf. nvmf, overlayfs below).
add_dracutmodules+=" dot1x-macsec network-legacy nvmf systemd-veritysetup overlayfs "
filesystems+=" erofs overlay "
add_drivers+=" macsec nvme-tcp nvme-fabrics dm-verity @NIC_DRIVERS@ "
install_items+=" /etc/dot1x/radius-ca.pem /etc/dot1x/wpa_supplicant-dot1x.conf "
compress="zstd"