Tomster/Fedora-CoreOS-Ignition
1
0
Fork 0
mirror of https://github.com/tommytran732/Fedora-CoreOS-Ignition synced 2024-11-22 09:21:32 -05:00
Code

Use systemd units section to disable kdump and debug-shell

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-02-27 21:56:58 -07:00
parent 0adadc1932
commit 3f8465e696
Signed by: Tomster
GPG Key ID: 555C902A34EC968F
4 changed files with 32 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
UTM-Chrony.ign
View File

@ -191,14 +191,6 @@
{
"path": "/etc/systemd/system/multi-user.target.wants/tuned.service",
"target": "/usr/lib/systemd/system/tuned.service"
},
{
"path": "/etc/systemd/system/kdump.service",
"target": "/dev/null"
},
{
"path": "/etc/systemd/system/debug-shell.service",
"target": "/dev/null"
}
]
},
@ -243,6 +235,16 @@
{
"enabled": true,
"name": "sshd.socket"
},
{
"enabled": false,
"mask": true,
"name": "kdump.service"
},
{
"enabled": false,
"mask": true,
"name": "debug-shell.service"
}
]
}

10
UTM-Chrony.yml
View File

@ -100,6 +100,12 @@ systemd:
enabled: false
- name: sshd.socket
enabled: true
- name: kdump.service
enabled: false
mask: true
- name: debug-shell.service
enabled: false
mask: true
storage:
files:
- path: /etc/zincati/config.d/51-rollout-wariness.toml
@ -178,10 +184,6 @@ storage:
target: /usr/lib/systemd/system/unbound.service
- path: /etc/systemd/system/multi-user.target.wants/tuned.service
target: /usr/lib/systemd/system/tuned.service
- path: /etc/systemd/system/kdump.service
target: /dev/null
- path: /etc/systemd/system/debug-shell.service
target: /dev/null
kernel_arguments:
should_exist:
- mitigations=auto,nosmt

18
x86-QEMU-Docker.ign
View File

@ -217,14 +217,6 @@
{
"path": "/etc/systemd/system/multi-user.target.wants/tuned.service",
"target": "/usr/lib/systemd/system/tuned.service"
},
{
"path": "/etc/systemd/system/kdump.service",
"target": "/dev/null"
},
{
"path": "/etc/systemd/system/debug-shell.service",
"target": "/dev/null"
}
]
},
@ -284,6 +276,16 @@
{
"enabled": true,
"name": "sshd.socket"
},
{
"enabled": false,
"mask": true,
"name": "kdump.service"
},
{
"enabled": false,
"mask": true,
"name": "debug-shell.service"
}
]
}

10
x86-QEMU-Docker.yml
View File

@ -157,6 +157,12 @@ systemd:
enabled: false
- name: sshd.socket
enabled: true
- name: kdump.service
enabled: false
mask: true
- name: debug-shell.service
enabled: false
mask: true
storage:
files:
- path: /etc/zincati/config.d/51-rollout-wariness.toml
@ -245,10 +251,6 @@ storage:
target: /usr/lib/systemd/system/unbound.service
- path: /etc/systemd/system/multi-user.target.wants/tuned.service
target: /usr/lib/systemd/system/tuned.service
- path: /etc/systemd/system/kdump.service
target: /dev/null
- path: /etc/systemd/system/debug-shell.service
target: /dev/null
kernel_arguments:
should_exist:
- mitigations=auto,nosmt