diff --git a/.github/workflows/vib-build.yml b/.github/workflows/vib-build.yml index 770ec29..6194ba7 100644 --- a/.github/workflows/vib-build.yml +++ b/.github/workflows/vib-build.yml @@ -18,7 +18,10 @@ jobs: steps: - uses: actions/checkout@v4 - - uses: vanilla-os/vib-gh-action@v0.3.2-2 + - uses: vanilla-os/vib-gh-action@v0.3.3-1 + with: + recipe: 'recipe.yml' + plugins: 'Vanilla-OS/vib-fsguard:v1.2-1' - name: Build the Docker image run: docker image build -f Containerfile --tag ghcr.io/vanilla-os/nvidia:main . diff --git a/.github/workflows/vib-pr.yml b/.github/workflows/vib-pr.yml index a71fdc0..c931e66 100644 --- a/.github/workflows/vib-pr.yml +++ b/.github/workflows/vib-pr.yml @@ -13,7 +13,10 @@ jobs: steps: - uses: actions/checkout@v4 - - uses: vanilla-os/vib-gh-action@v0.3.2-2 + - uses: vanilla-os/vib-gh-action@v0.3.3-1 + with: + recipe: 'recipe.yml' + plugins: 'Vanilla-OS/vib-fsguard:v1.2-1' - name: Build the Docker image run: docker image build -f Containerfile --tag vanillaos/nvidia:validation . diff --git a/recipe.yml b/recipe.yml index 079cc4d..7bd0bb1 100644 --- a/recipe.yml +++ b/recipe.yml @@ -66,3 +66,17 @@ modules: - apt autoremove -y - apt clean - lpkg --lock + +- name: fsguard + type: fsguard + CustomFsGuard: false + FsGuardLocation: "/usr/sbin/FsGuard" + GenerateKey: true + FilelistPaths: ["/usr/bin"] + modules: + - name: remove-prev-fsguard + type: shell + commands: + - rm -rf /FsGuard + - rm -f ./minisign.pub ./minisign.key + - chmod +x /usr/sbin/init