Patagia/patos
Patagia/patos
1
1
Code Issues4 Pull requests6 Activity

feat: enable conf/sys ext services and make /etc read-only without overlay

Browse source
This commit is contained in:
Lars Sjöström 2025-03-05 16:24:34 +01:00
parent 18c8e76850
commit 62dd1ca5bf
No known key found for this signature in database
4 changed files with 26 additions and 24 deletions
pkgs/image
mkimage.sh

22
pkgs/image/mkimage.sh
View file

@ -12,23 +12,6 @@ find rootfs/ -type d -exec chmod 755 {} \;
# set default target to multi-user
ln -sf multi-user.target rootfs/usr/lib/systemd/system/default.target
# Overlay mount for /etc which makes it read-write in runtime
cat <<EOF > rootfs/usr/lib/systemd/system/etc.mount
[Unit]
Description=Overlay mount for /etc
Before=local-fs.target
[Mount]
What=overlay
Where=/etc
Type=overlay
Options=lowerdir=/etc,upperdir=/run/.rw-etc/upper,workdir=/run/.rw-etc/work
[Install]
WantedBy=local-fs.target
EOF
ln -sf ../etc.mount rootfs/usr/lib/systemd/system/local-fs.target.wants/etc.mount
# enable dbus
ln -sf ../dbus.service rootfs/usr/lib/systemd/system/multi-user.target.wants/dbus.service
ln -sf ../dbus.socket rootfs/usr/lib/systemd/system/sockets.target.wants/dbus.socket
@ -40,8 +23,9 @@ ln -sf ../systemd-timesyncd.service rootfs/usr/lib/systemd/system/multi-user.tar
# enable default network config
mv rootfs/usr/lib/systemd/network/89-ethernet.network.example rootfs/usr/lib/systemd/network/89-ethernet.network
#FIXME: generate a temporary machine id (replace with overlay/confext later?)
$systemd/usr/bin/systemd-machine-id-setup --root=rootfs/
# enable confext/sysext services
ln -sf ../systemd-confext.service rootfs/usr/lib/systemd/system/sysinit.target.wants/systemd-confext.service
ln -sf ../systemd-sysext.service rootfs/usr/lib/systemd/system/sysinit.target.wants/systemd-sysext.service
# install sys users
mkdir creds