From 2cfaaf77885da4df6ebc158250381ef725822318 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 12 Aug 2025 12:38:24 +0200
Subject: [PATCH] initramfs: Default to DRACUT_NO_XATTR=1

See the linked issue https://github.com/dracut-ng/dracut-ng/issues/1561

Signed-off-by: Colin Walters <walters@verbum.org>
---
 minimal/initramfs.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/minimal/initramfs.yaml b/minimal/initramfs.yaml
index a650e34..fc1fdc2 100644
--- a/minimal/initramfs.yaml
+++ b/minimal/initramfs.yaml
@@ -7,6 +7,9 @@ postprocess:
     cat > /usr/lib/dracut/dracut.conf.d/20-bootc-base.conf << 'EOF'
     # We want a generic image; hostonly makes no sense as part of a server side build
     hostonly=no
+    # Dracut will always fail to set security.selinux xattrs at build time
+    # https://github.com/dracut-ng/dracut-ng/issues/1561
+    export DRACUT_NO_XATTR=1
     add_dracutmodules+=" kernel-modules dracut-systemd systemd-initrd base ostree "
     EOF
     cat > /usr/lib/dracut/dracut.conf.d/22-bootc-generic.conf << 'EOF'