From 69ab83554efb0aaae69fb469d11a8a8faf4b7c45 Mon Sep 17 00:00:00 2001
From: Philip J Freeman <elektron@halo.nu>
Date: Tue, 28 Apr 2026 22:53:17 -0700
Subject: To:  
 72f96fb792b373276aded94500e9bb8bb682f60c94d748477a368e16e31fcc09

---
 hooks/build-os-post/70-cleanup-etc | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100755 hooks/build-os-post/70-cleanup-etc

(limited to 'hooks/build-os-post')

diff --git a/hooks/build-os-post/70-cleanup-etc b/hooks/build-os-post/70-cleanup-etc
new file mode 100755
index 0000000..97e2e8b
--- /dev/null
+++ b/hooks/build-os-post/70-cleanup-etc
@@ -0,0 +1,18 @@
+#!/bin/bash -xe
+set -o pipefail
+
+# remove local self-signed snakeoil certificate
+find "$root"/etc/ssl/certs -maxdepth 1 -lname ssl-cert-snakeoil.pem -delete
+rm -f -- \
+	ssl/private/ssl-cert-snakeoil.key \
+	ssl/certs/ssl-cert-snakeoil.pem
+
+# cleanup some additional things in etc
+pushd "${root:?}"/etc
+rm -f -- \
+	resolv.conf \
+	group- \
+	gshadow- \
+	passwd- \
+	shadow-
+
-- 
cgit v1.2.3