Add ARM hardened malloc

Signed-off-by: Tommy <[email protected]>
itbrahh · Mar 5, 2024 · f5411aa · f5411aa
1 parent 9ee6949
commit f5411aa
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 0 deletions.
diff --git a/UTM-Chrony.ign b/UTM-Chrony.ign
@@ -60,6 +60,12 @@
           "source": "data:,%5Bupdates%5D%0Astrategy%20%3D%20%22immediate%22%0A"
         }
       },
+      {
+        "path": "/etc/yum.repos.d/_copr:copr.fedorainfracloud.org:secureblue:hardened_malloc.repo",
+        "contents": {
+          "source": "https://raw.githubusercontent.com/TommyTran732/Fedora-CoreOS-Ignition/main/etc/yum.repos.d/_copr:copr.fedorainfracloud.org:secureblue:hardened_malloc.repo"
+        }
+      },
       {
         "overwrite": true,
         "path": "/etc/chrony.conf",

diff --git a/UTM-Chrony.yml b/UTM-Chrony.yml
@@ -111,6 +111,9 @@ storage:
         inline: |
           [updates]
           strategy = "immediate"
+    - path: /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:secureblue:hardened_malloc.repo
+      contents:
+        source: https://raw.githubusercontent.com/TommyTran732/Fedora-CoreOS-Ignition/main/etc/yum.repos.d/_copr:copr.fedorainfracloud.org:secureblue:hardened_malloc.repo
     - path: /etc/chrony.conf
       contents:
         source: https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf

diff --git a/etc/yum.repos.d/_copr:copr.fedorainfracloud.org:secureblue:hardened_malloc.repo b/etc/yum.repos.d/_copr:copr.fedorainfracloud.org:secureblue:hardened_malloc.repo
@@ -0,0 +1,10 @@
+[copr:copr.fedorainfracloud.org:secureblue:hardened_malloc]
+name=Copr repo for hardened_malloc owned by secureblue
+baseurl=https://download.copr.fedorainfracloud.org/results/secureblue/hardened_malloc/fedora-$releasever-$basearch/
+type=rpm-md
+skip_if_unavailable=True
+gpgcheck=1
+gpgkey=https://download.copr.fedorainfracloud.org/results/secureblue/hardened_malloc/pubkey.gpg
+repo_gpgcheck=0
+enabled=1
+enabled_metadata=1