From 92b34d1d31b104c23b62a059d89951ff06c23d8a Mon Sep 17 00:00:00 2001
From: Neal Gompa <ngompa@fedoraproject.org>
Date: Mon, 16 Mar 2026 10:14:26 -0400
Subject: [PATCH] components/boot: Explicitly filter out debug kernels

The Fedora Respins SIG are seeing debug kernels getting installed,
and despite the inability to reproduce this, it's fairly straightforward
to prevent.

(cherry picked from commit 9a6d1fed510f61ad55f883f5b8a7491f2cc002f1)
---
 components/boot.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/components/boot.xml b/components/boot.xml
index c251e7f..a46e723 100644
--- a/components/boot.xml
+++ b/components/boot.xml
@@ -106,9 +106,11 @@
 		<package name="systemd-resolved"/>
 	</packages>
 	<packages type="image" patternType="plusRecommended" profiles="BootCore">
+		<ignore name="kernel-*debug*"/>
 		<package name="kernel-core"/>
 	</packages>
 	<packages type="image" patternType="plusRecommended" profiles="BootCoreLive">
+		<ignore name="kernel-*debug*"/>
 		<!-- Use kernel-uki-dtbloader for aarch64 -->
 		<package name="kernel-core" arch="x86_64,riscv64,ppc64le,s390x"/>
 		<package name="kernel-uki-dtbloader" arch="aarch64"/>
@@ -131,6 +133,7 @@
 		<package name="grub2-efi-x64-cdboot" arch="x86_64"/>
 	</packages>
 	<packages type="image" patternType="plusRecommended" profiles="BootDiskCore">
+		<ignore name="kernel-*debug*"/>
 		<package name="arm-image-installer" arch="aarch64"/>
 		<package name="glibc-all-langpacks"/>
 		<package name="kernel"/>