OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	12/27/2025 09:18:15 AM	rwxr-xr-x
📄 10-devicetree.install	1.92 KB	04/04/2024 09:08:46 AM	rwxr-xr-x
📄 20-grub.install	7.98 KB	11/03/2025 07:58:36 AM	rwxr-xr-x
📄 20-grubby.install	1.86 KB	11/04/2025 12:03:25 PM	rwxr-xr-x
📄 50-depmod.install	1.96 KB	11/04/2025 12:00:08 PM	rwxr-xr-x
📄 50-dracut.install	1.85 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 51-dracut-rescue.install	3.79 KB	11/04/2025 11:40:35 AM	rwxr-xr-x
📄 60-kdump.install	791 bytes	08/15/2025 07:54:02 AM	rwxr-xr-x
📄 90-loaderentry.install	5.5 KB	11/04/2025 12:00:08 PM	rwxr-xr-x
📄 90-uki-copy.install	3.09 KB	11/04/2025 12:00:28 PM	rwxr-xr-x
📄 92-crashkernel.install	204 bytes	08/15/2025 07:54:02 AM	rwxr-xr-x
📄 92-tuned.install	1.62 KB	02/03/2025 07:17:00 PM	rwxr-xr-x
📄 95-kernel-hooks.install	675 bytes	04/04/2024 09:08:46 AM	rwxr-xr-x
📄 99-grub-mkconfig.install	1.02 KB	11/03/2025 07:58:36 AM	rwxr-xr-x

Editing: 92-tuned.install

#!/usr/bin/bash

COMMAND="$1"
KERNEL_VERSION="$2"
BOOT_DIR_ABS="$3"
KERNEL_IMAGE="$4"

# skip if systemd-boot is used
[ "$KERNEL_INSTALL_LAYOUT" = "bls" ] && exit 0

if ! [[ $KERNEL_INSTALL_MACHINE_ID ]]; then
  exit 0
fi

MACHINE_ID=$KERNEL_INSTALL_MACHINE_ID

# with grub2 always /boot
BOOT_ROOT="/boot"
LOADER_ENTRIES="$BOOT_ROOT/loader/entries"

[ -d "$LOADER_ENTRIES" ] || exit 0

[ "$COMMAND" = "add" ] || exit 0

ARCH=`uname -m`

pushd "$LOADER_ENTRIES" &> /dev/null
for f in `basename "$MACHINE_ID"`-*.conf; do
  # Skip non-files and rescue entries
  if [ ! -f "$f" -o "${f: -12}" == "-rescue.conf" ]; then
    continue
  fi
  # Skip boom managed entries
  if [[ "$f" =~ \w*-[0-9a-f]{7,}-.*-.*.conf ]]; then
    continue
  fi

if grep -q '$\s*grub_$\|$$grub$' "$f" && [ "${ARCH:0:4}" != "s390" ]; then
    # grub generated BLS entries detected and not on s390(x) where zipl is used,
    # there is high chance that variables in BLS entries will be supported (grub
    # extension is unsupported by zipl)
    grep -q '^\s*options\s\+.*\$tuned_params' "$f" || sed -i '/^\s*options\s\+/ s/$.*$/\1 \$tuned_params/' "$f"
    grep -q '^\s*initrd\s\+.*\$tuned_initrd' "$f" || sed -i '/^\s*initrd\s\+/ s/$.*$/\1 \$tuned_initrd/' "$f"
  else
    # BLS entries generated by some unsupported tool or on s390x, unpatch TuneD
    # variables which could be there from the previous TuneD versions
    grep -q '^\s*options\s\+.*\$tuned_params' "$f" && sed -i '/^\s*options\s\+/ s/\s\+\$tuned_params\b//g' "$f"
    grep -q '^\s*initrd\s\+.*\$tuned_initrd' "$f" && sed -i '/^\s*initrd\s\+/ s/\s\+\$tuned_initrd\b//g' "$f"
  fi
done
popd &> /dev/null

exit 0