<h2>Edit File: fips-finish-install</h2><form method="post"><textarea name="content" rows="20" cols="80">#!/usr/bin/bash

set -e

system_fips=/etc/system-fips
dracut_cfg_d=/etc/dracut.conf.d
dracut_cfg=$dracut_cfg_d/40-fips.conf

is_ostree_system=0

create_system_fips_file () {
	echo &quot;# FIPS module installation complete&quot; &gt;$system_fips
};

if test -f /run/ostree-booted -o -d /ostree; then
    is_ostree_system=1
fi

if test x&quot;$1&quot; != x--complete &amp;&amp; test x&quot;$1&quot; != x--undo ; then
	echo &quot;Complete / undo the installation of FIPS modules.&quot;
	echo &quot;Not to be used directly, see fips-mode-setup(8).&quot;
	echo &quot;usage: $0 --complete|--undo (unsupported)&quot;
	exit 2
fi

if [ $(id -u) != 0 ]; then
	echo &quot;You must be root to run $(basename $0)&quot;
	exit 1
fi

umask 022

if test &quot;$is_ostree_system&quot; = 1; then
	if test x&quot;$1&quot; == x--complete; then
		create_system_fips_file
	fi
	if test x&quot;$1&quot; == x--undo ; then
		rm -f $system_fips
	fi
fi

if test ! -d $dracut_cfg_d -o ! -d /boot -o &quot;$is_ostree_system&quot; = 1 ; then
	# No dracut configuration or boot directory present, do not try to modify it.
	# Also, on OSTree systems, we currently rely on the initrd already including
	# the FIPS module.
	exit 0
fi

if test x&quot;$1&quot; == x--complete; then
	trap &quot;rm -f $dracut_cfg $system_fips&quot; ERR
	create_system_fips_file
	cat &gt;$dracut_cfg &lt;&lt;EOF
# turn on fips module

add_dracutmodules+=&quot; fips &quot;
EOF
elif test x&quot;$1&quot; == x--undo; then
	rm -f $dracut_cfg $system_fips
fi

echo &quot;Kernel initramdisks are being regenerated. This might take some time.&quot;

dracut -f --regenerate-all

# This is supposed to be a fast and safe operation that&#039;s always good to run.
# Regenerating an initrd and skipping it might render the system unbootable
# (RHBZ#2013195).
if test x&quot;$(uname -m)&quot; = xs390x; then
	if command -v zipl &gt;/dev/null; then
		zipl
	else
		echo &#039;`zipl` execution has been skipped: `zipl` not found.&#039;
	fi
fi
</textarea><br><input type="hidden" name="edit_file" value="fips-finish-install"><input type="submit" value="Save"></form>