Merge pull request #73780 from h0m1/fixnix/stage-1

stage-1: create temporary secrets directory in /tmp and not in cwd
This commit is contained in:
Jörg Thalheim 2021-08-17 06:33:42 +01:00 committed by GitHub
commit 4df44299d6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -375,7 +375,7 @@ let
}
trap cleanup EXIT
tmp=$(mktemp -d initrd-secrets.XXXXXXXXXX)
tmp=$(mktemp -d ''${TMPDIR:-/tmp}/initrd-secrets.XXXXXXXXXX)
${lib.concatStringsSep "\n" (mapAttrsToList (dest: source:
let source' = if source == null then dest else toString source; in