From fe67d3321d9a55a69a5082fc862c08a1aeb8ade3 Mon Sep 17 00:00:00 2001 From: Grant Slater Date: Thu, 30 Apr 2026 10:54:58 +0100 Subject: [PATCH] Disable algif_aead module globally --- cookbooks/devices/recipes/default.rb | 8 ++++++++ .../devices/templates/default/disable-algif.conf.erb | 2 ++ 2 files changed, 10 insertions(+) create mode 100644 cookbooks/devices/templates/default/disable-algif.conf.erb diff --git a/cookbooks/devices/recipes/default.rb b/cookbooks/devices/recipes/default.rb index 9bcaf898f..b06dadfcd 100644 --- a/cookbooks/devices/recipes/default.rb +++ b/cookbooks/devices/recipes/default.rb @@ -44,10 +44,18 @@ template "/etc/modprobe.d/nvme.conf" do only_if { ::File.exist?("/sys/module/nvme/parameters/poll_queues") } end +template "/etc/modprobe.d/disable-algif.conf" do + source "disable-algif.conf.erb" + owner "root" + group "root" + mode "644" +end + package "initramfs-tools" execute "update-initramfs" do action :nothing command "/usr/sbin/update-initramfs -u" subscribes :run, "template[/etc/modprobe.d/nvme.conf]" + subscribes :run, "template[/etc/modprobe.d/disable-algif.conf]" end diff --git a/cookbooks/devices/templates/default/disable-algif.conf.erb b/cookbooks/devices/templates/default/disable-algif.conf.erb new file mode 100644 index 000000000..e7b920cee --- /dev/null +++ b/cookbooks/devices/templates/default/disable-algif.conf.erb @@ -0,0 +1,2 @@ +# DO NOT EDIT - This file is being maintained by Chef +install algif_aead /bin/false -- 2.39.5