fix(rescue): create hmac file for rescue kernel

fix(35network-manager): remove duplicate installkernel
feat(fips): include fips module unconditionally
fix(dracut.sh): make omit-drivers option do exact match for
feat: add openssl module

fix(35network-manager): install nftables kernel modules
fix(35network-manager): install nft binary during module
fix(dracut-install): copy xattr when use clone ioctl
feat(dracut.sh): add --add-confdir option
fix: typo in variable name
feat(fips): add support for UKIs
fix(kernel-modules): use modalias info in get_dev_module()
fix(dracut-functions.sh): convert mmcblk to the real kernel

fix(systemd): set right permissions for the machine-id file
feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
feat(dracut-init.sh): give --force-add precedence over --omit

feat(systemd): install systemd-executor
test: use -device instead of -watchdog to remove qemu
fix(fips): remove /dev/{random,urandom} pre-creation
fix(systemd): always include sg module
fix(fips): do not blindly remove /boot
fix(github): update format of labeler
fix(network-manager): add "After" dependency on dbus.service
fix(url-lib.sh): nfs_already_mounted() with trailing slash in
feat(systemd-pcrphase): introducing the systemd-pcrphase
fix(systemd-pcrphase): only include
fix(nfs): include also entries from /usr/lib/{passwd,group}

fix(dracut-install): use stripped kernel module path as hash

fix(dracut.sh): remove microcode check based on

fix(nvmf): move /etc/nvme/host{nqn,id} requirement to

fix(dracut.sh): correct wrong systemd variable paths
fix(hwdb): follow shfmt-recommended format
feat(dracut): add --sbat option to add sbat policy to UKI
feat(systemd): install systemd-sysroot-fstab-check
fix(dracut.spec): add jq dependency to network subpackage
fix(fcoe-uefi): exit early on empty vlan

feat(hwdb): install hwdb on demand when module is needed

feat(spec): include modules for IMA
fix(dracut): there can be \ at the end on line in awk script
fix(rngd): spacing
fix(integrity): do not enable EVM if there is no key
fix(fips): include openssl's fips.so and openssl.cnf

fix(dracut.sh): use dynamically uefi's sections offset
fix(dracut.sh): handle imagebase for uefi
fix(dracut.sh): use gawk for strtonum
fix(rngd): install system service file
fix(nvmf): nvme list-subsys prints the address using commas
fix(nvmf): don't try to validate network connections in
fix(nvmf): no need to load the nvme module
fix(nvmf): don't create did-setup file
fix(nvmf): don't use "finished" queue for autoconnect
fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
fix(nvmf): avoid calling "exit" in a cmdline hook
fix(nvmf): run cmdline hook before parse-ip-opts.sh
feat(nvmf): set rd.neednet=1 if tcp records encountered
fix(nvmf): install 8021q module unconditionally
fix(nvmf): support /etc/nvme/config.json
feat(nvmf): add code for parsing the NBFT

fix(lvmthinpool-monitor): activate lvm thin pool before