<h2>Editing File: /usr/lib/dracut/modules.d/01fips/module-setup.sh</h2><form method='post'><textarea name='content' class='file-edit'>#!/bin/bash

# called by dracut
check() {
    return 0
}

# called by dracut
depends() {
    return 0
}

# called by dracut
installkernel() {
    local _fipsmodules _mod _bootfstype
    if [[ -f &quot;${srcmods}/modules.fips&quot; ]]; then
        _fipsmodules=&quot;$(cat &quot;${srcmods}/modules.fips&quot;)&quot;
    else
        _fipsmodules=&quot;&quot;

        # Hashes:
        _fipsmodules+=&quot;sha1 sha224 sha256 sha384 sha512 &quot;
        _fipsmodules+=&quot;sha3-224 sha3-256 sha3-384 sha3-512 &quot;
        _fipsmodules+=&quot;crc32c crct10dif ghash &quot;

        # Ciphers:
        _fipsmodules+=&quot;cipher_null des3_ede aes cfb dh ecdh &quot;

        # Modes/templates:
        _fipsmodules+=&quot;ecb cbc ctr xts gcm ccm authenc hmac cmac &quot;

        # Compression algs:
        _fipsmodules+=&quot;deflate lzo zlib &quot;

        # PRNG algs:
        _fipsmodules+=&quot;ansi_cprng &quot;

        # Misc:
        _fipsmodules+=&quot;aead cryptomgr tcrypt crypto_user &quot;
    fi

    mkdir -m 0755 -p &quot;${initdir}/etc/modprobe.d&quot;

    for _mod in $_fipsmodules; do
        if hostonly='' instmods -c -s $_mod; then
            echo $_mod &gt;&gt; &quot;${initdir}/etc/fipsmodules&quot;
            echo &quot;blacklist $_mod&quot; &gt;&gt; &quot;${initdir}/etc/modprobe.d/fips.conf&quot;
        fi
    done

    # with hostonly_default_device fs module for /boot is not installed by default
    if [[ $hostonly ]] &amp;&amp; [[ &quot;$hostonly_default_device&quot; == &quot;no&quot; ]]; then
        _bootfstype=$(find_mp_fstype /boot)
        if [[ -n &quot;$_bootfstype&quot; ]]; then
            hostonly='' instmods $_bootfstype
        else
            dwarning &quot;Can't determine fs type for /boot, FIPS check may fail.&quot;
        fi
    fi
}

# called by dracut
install() {
    local _dir
    inst_hook pre-trigger 01 &quot;$moddir/fips-boot.sh&quot;
    inst_hook pre-pivot 01 &quot;$moddir/fips-noboot.sh&quot;
    inst_hook pre-udev 01 &quot;$moddir/fips-load-crypto.sh&quot;
    inst_script &quot;$moddir/fips.sh&quot; /sbin/fips.sh

    inst_multiple sha512hmac rmmod insmod mount uname umount grep sort

    inst_simple /etc/system-fips
    [ -c ${initdir}/dev/random ] || mknod ${initdir}/dev/random c 1 8 \
        || {
            dfatal &quot;Cannot create /dev/random&quot;
            dfatal &quot;To create an initramfs with fips support, dracut has to run as root&quot;
            return 1
        }
    [ -c ${initdir}/dev/urandom ] || mknod ${initdir}/dev/urandom c 1 9 \
        || {
            dfatal &quot;Cannot create /dev/random&quot;
            dfatal &quot;To create an initramfs with fips support, dracut has to run as root&quot;
            return 1
        }
}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flib%2Fdracut%2Fmodules.d%2F01fips'>Back to Directory</a>