FINALLY figured it out. My .rpmmacros file sets %_tmppath to isolate separate users on the same system. However the resulting dir didn't exist inside the image, so none of the %post scripts could run, including the generated initrd... On to actually doing interesting things with thincrust... Aron