fix(installer): validate ISO payload metadata

Rewrite system-release atomically and reject stale or NUL-bearing
payload metadata before it reaches Anaconda bootupd.

1 files changed, 33 insertions, 0 deletions

diff --git a/build_files/build.sh b/build_files/build.sh
index 5618d20..dd58852 100755
--- a/build_files/build.sh
+++ b/build_files/build.sh
@@ -14,6 +14,39 @@ esac
 # Copy the contents of system_files/ of the git repo to /
 cp -avf "/ctx/system_files"/. /
 
+# KDE's Deck presets use distributor-logo-steamdeck.svg for the Kickoff
+# launcher.  In the Bazzite base image that name (and the related aliases)
+# may already exist as links to the upstream distributor-logo.svg.  Install
+# the AeroCore asset explicitly after the general overlay so the final image
+# cannot silently retain the upstream Bazzite logo.
+AEROCORE_DISTRIBUTOR_LOGO="/ctx/system_files/usr/share/icons/hicolor/scalable/places/distributor-logo.svg"
+AEROCORE_ICON_DIR="/usr/share/icons/hicolor/scalable/places"
+mkdir -p "${AEROCORE_ICON_DIR}"
+for icon_name in \
+  distributor-logo.svg \
+  distributor-logo-steamdeck.svg \
+  bazzite-logo.svg \
+  start-here.svg; do
+  cp -f "${AEROCORE_DISTRIBUTOR_LOGO}" "${AEROCORE_ICON_DIR}/${icon_name}"
+done
+
+# The Plasma launcher resolves the standard start-here name from both scalable
+# and per-size places directories.  Populate every existing Bazzite icon size
+# in the installed payload, not only in the live installer image.
+for icon_dir in /usr/share/icons/hicolor/*/places; do
+  [[ -d "${icon_dir}" ]] || continue
+  source_icon="${icon_dir}/bazzite-logo-icon.png"
+  if [[ -f "${source_icon}" ]]; then
+    cp -f "${source_icon}" "${icon_dir}/start-here.png"
+    cp -f "${source_icon}" "${icon_dir}/fedora-logo-icon.png"
+  fi
+done
+
+if ! cmp -s "${AEROCORE_DISTRIBUTOR_LOGO}" "${AEROCORE_ICON_DIR}/distributor-logo.svg"; then
+  echo "AeroCore distributor logo was not installed into the image" >&2
+  exit 1
+fi
+
 # Default HDMI-CEC to putting the TV into standby when the system sleeps.
 # `ujust toggle-cec-sleep enable` changes this same setting at runtime.  Keep
 # the default in the base image's config so users do not need to run the