OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/23/2026 04:30:28 PM	r-xr-xr-x
📄 dracut-functions	30.52 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 dracut-functions.sh	30.52 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 dracut-init.sh	36.56 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 dracut-initramfs-restore	3.06 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 dracut-install	67.99 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 dracut-logger.sh	13.13 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 dracut-util	15.15 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 dracut-version.sh	40 bytes	11/04/2025 11:40:35 AM	rw-r--r--
📁 dracut.conf.d	-	12/27/2025 09:19:39 AM	rwxr-xr-x
📁 modules.d	-	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 ossl-config	15.2 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 ossl-files	15.22 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 skipcpio	15.13 KB	11/04/2025 11:40:35 AM	rwxr-xr-x

Editing: dracut-initramfs-restore

#!/usr/bin/bash

set -e

# do some sanity checks first
[ -e /run/initramfs/bin/sh ] && exit 0
[ -e /run/initramfs/.need_shutdown ] || exit 0

# SIGTERM signal is received upon forced shutdown: ignore the signal
# We want to remain alive to be able to trap unpacking errors to avoid
# switching root to an incompletely unpacked initramfs
trap 'echo "Received SIGTERM signal, ignoring!" >&2' TERM

KERNEL_VERSION="$(uname -r)"

[[ $dracutbasedir ]] || dracutbasedir=/usr/lib/dracut
SKIP="$dracutbasedir/skipcpio"
[[ -x $SKIP ]] || SKIP="cat"

if [[ -d /efi/Default ]] || [[ -d /boot/Default ]] || [[ -d /boot/efi/Default ]]; then
    MACHINE_ID="Default"
elif [[ -f /etc/machine-id ]]; then
    read -r MACHINE_ID < /etc/machine-id
else
    MACHINE_ID="Default"
fi

mount -o ro /boot &> /dev/null || true

if [[ -d /efi/loader/entries || -L /efi/loader/entries ]] \
    && [[ -d /efi/$MACHINE_ID || -L /efi/$MACHINE_ID ]]; then
    IMG="/efi/${MACHINE_ID}/${KERNEL_VERSION}/initrd"
elif [[ -d /boot/loader/entries || -L /boot/loader/entries ]] \
    && [[ -d /boot/$MACHINE_ID || -L /boot/$MACHINE_ID ]]; then
    IMG="/boot/${MACHINE_ID}/${KERNEL_VERSION}/initrd"
elif [[ -d /boot/efi/loader/entries || -L /boot/efi/loader/entries ]] \
    && [[ -d /boot/efi/$MACHINE_ID || -L /boot/efi/$MACHINE_ID ]]; then
    IMG="/boot/efi/$MACHINE_ID/$KERNEL_VERSION/initrd"
elif [[ -f /lib/modules/${KERNEL_VERSION}/initrd ]]; then
    IMG="/lib/modules/${KERNEL_VERSION}/initrd"
elif [[ -f /boot/initramfs-${KERNEL_VERSION}.img ]]; then
    IMG="/boot/initramfs-${KERNEL_VERSION}.img"
elif mountpoint -q /efi; then
    IMG="/efi/$MACHINE_ID/$KERNEL_VERSION/initrd"
elif mountpoint -q /boot/efi; then
    IMG="/boot/efi/$MACHINE_ID/$KERNEL_VERSION/initrd"
else
    echo "No initramfs image found to restore!"
    exit 1
fi

cd /run/initramfs

if $SKIP "$IMG" | zcat | cpio -id --no-absolute-filenames --quiet > /dev/null \
    || $SKIP "$IMG" | bzcat | cpio -id --no-absolute-filenames --quiet > /dev/null \
    || $SKIP "$IMG" | xzcat | cpio -id --no-absolute-filenames --quiet > /dev/null \
    || $SKIP "$IMG" | lz4 -d -c | cpio -id --no-absolute-filenames --quiet > /dev/null \
    || $SKIP "$IMG" | lzop -d -c | cpio -id --no-absolute-filenames --quiet > /dev/null \
    || $SKIP "$IMG" | zstd -d -c | cpio -id --no-absolute-filenames --quiet > /dev/null \
    || $SKIP "$IMG" | cpio -id --no-absolute-filenames --quiet > /dev/null; then
    rm -f -- .need_shutdown
else
    # something failed, so we clean up
    echo "Unpacking of $IMG to /run/initramfs failed" >&2
    rm -f -- /run/initramfs/shutdown
    exit 1
fi

if [[ -d squash ]]; then
    if ! unsquashfs -no-xattrs -f -d . squash-root.img > /dev/null; then
        echo "Squash module is enabled for this initramfs but failed to unpack squash-root.img" >&2
        rm -f -- /run/initramfs/shutdown
        exit 1
    fi
fi

if [ -e /etc/selinux/config -a -x /usr/sbin/setfiles ]; then
    . /etc/selinux/config
    [ -n "${SELINUXTYPE}" ] && /usr/sbin/setfiles -v -r /run/initramfs /etc/selinux/"${SELINUXTYPE}"/contexts/files/file_contexts /run/initramfs > /dev/null
fi

exit 0