update: Read whitelist from the /run/initramfs directory
Find the whitelist under /run/initramfs directory instead of
looking in root directory. This results in the whitelist always
existing and being the same instance (copy) in all environments.
Currently the update script is invoked from two places: from
shutdown, where systemd bind-mounted the initramfs directory on
itself and made it root (with its parent /run mounted underneath
it in a twist), and from the initramfs init script where it
copied the files from its root directory into the /run/initramfs
directory for use at shutdown time when the original rootfs is
no longer reachable.
By looking under /run/initramfs we will always look at one copy
of the whitelist. This will also allow future modes where the
update script can be invoked while running from a copies of
the file systems located in RAM.
Signed-off-by: Milton Miller <miltonm@us.ibm.com>
1 file changed