55 Commits

Author	SHA1	Message	Date
Tommy	b08e7b7aad	Remove exytra firmware packages ... Signed-off-by: Tommy <contact@tommytran.io>	2024-12-19 20:29:38 -07:00
Tommy	a50917bf04	Update to FCOS 41 ... Signed-off-by: Tommy <contact@tommytran.io>	2024-12-19 20:20:40 -07:00
Tommy	4ef166f60f	Fix systemd ssh override ... Signed-off-by: Tommy <contact@tommytran.io>	2024-10-15 14:39:46 -07:00
Tommy	cac37c848b	Cleaner gvisor-updater ExecStart ... Signed-off-by: Tommy <contact@tommytran.io>	2024-10-08 14:05:51 -07:00
Tommy	7a207ba742	Fix docker-compose-updater dependency ... Signed-off-by: Tommy <contact@tommytran.io>	2024-09-27 16:31:58 -07:00
Tommy	46f5a8070d	Fix scheduling for docker-compose-updater@.service ... Signed-off-by: Tommy <contact@tommytran.io>	2024-09-26 19:20:35 -07:00
Tommy	74acd37ef2	Update gvisor updater service ... Signed-off-by: Tommy <contact@tommytran.io>	2024-09-26 19:00:34 -07:00
Tommy	18593b03fd	Update package removal list ... Signed-off-by: Tommy <contact@tommytran.io>	2024-09-24 15:37:01 -07:00
Tommy	ec61164648	Update modprobe URL ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-26 05:10:01 -07:00
Tommy	c04b7a84f9	Update after Blue-OCI rebuilds ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-21 20:03:39 -07:00
Tommy	b2df161d15	Update gvisor updater ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-28 22:45:25 -07:00
Tommy	b674e55d42	Unbound systemd hardening moved to Linux-Setup-Scripts ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-25 22:32:16 -07:00
Tommy	d88311198c	Switch to UTC ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-20 05:21:05 -07:00
Tommy	7fad7ab23b	Panic on oops ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-17 01:19:59 -07:00
Tommy	e49c2c5ca4	Rename server-blacklist to vps-blacklist ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-07 04:51:45 -07:00
Tommy	d9bd0f9563	Use secureblue hardenedmalloc ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-06 22:54:40 -07:00
Tommy	37ab9797c7	Disable coredump in systemd as well ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 14:09:50 -07:00
Tommy	71d681ff8b	Use custom config and SecureBlue whenever possible ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 13:58:01 -07:00
Tommy	1a38e16151	Remove bind overrides ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 14:24:56 -07:00
Tommy	13a4d89a69	Better regex for kernel module blacklist ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:49:45 -07:00
Tommy	64efef581c	Add escapes for regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:37:30 -07:00
Tommy	d06e7489e9	Beter regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:16:38 -07:00
Tommy	f9823a43e4	Better regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 02:36:47 -07:00
Tommy	0eda27d343	Update overrides for F40 ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-28 16:21:59 -07:00
Tommy	4295b7e075	Update gvisor-downloader ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-28 13:48:13 -07:00
Tommy	3cb75ee460	Remove 5 seconds wait ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-27 15:15:41 -07:00
Tommy	4906ea33d8	Update kargs ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-27 13:23:30 -07:00
Tommy	e5f5980e0c	Use After=network-online.target ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-22 12:17:24 -07:00
Tommy	8d6447c67b	/etc/issue moved to Linux-Setup-Scripts ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-16 23:18:07 -07:00
Tommy	c320659852	zram-generator config moved to Linux-Setup-Scripts ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-16 22:27:06 -07:00
Tommy	f6751a1597	Workaround for unbound-keygen ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-06 23:47:45 -07:00
Tommy	2e0f0719cd	Update docker-compose-updater ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-03 14:55:36 -07:00
Tommy	147945e752	Rearrange kargs ... Signed-off-by: Tommy <contact@tommytran.io>	2024-04-19 14:50:41 -07:00
Tommy	7b62e6d24f	Update docker-compose-updater.service ... Signed-off-by: Tommy <contact@tommytran.io>	2024-04-09 15:15:34 -07:00
Tommy	e579cf0cf1	Disable mdns and dhcpv6-client for x86 QEMU ... Signed-off-by: Tommy <contact@tommytran.io>	2024-04-05 15:53:36 -07:00
Tommy	c6a758d8a0	Switch to using systemd timer for container update ... Signed-off-by: Tommy <contact@tommytran.io>	2024-04-05 14:21:39 -07:00
Tommy	4b109fa93b	Disable msr ... Signed-off-by: Tommy <contact@tommytran.io>	2024-04-05 13:43:06 -07:00
Tommy	c3481cbcc8	Disable coreos-cni-networking-check.service ... Signed-off-by: Tommy <contact@tommytran.io>	2024-03-24 14:00:46 -07:00
Tommy	2ecb5662fc	Enable module sig enforce and lockdown=confidentiality ... Signed-off-by: Tommy <contact@tommytran.io>	2024-03-05 14:52:54 -07:00
Tommy	9ee6949e84	Fix rpm-ostree kargs --editor ... Signed-off-by: Tommy <contact@tommytran.io>	2024-03-05 14:06:08 -07:00
Tommy	652b549e71	FCOS has already fixed SELinux handling ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-29 11:39:21 -07:00
Tommy	0721f0d393	Fix /var labels ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-29 10:48:58 -07:00
Tommy	0e29af560f	ld_preload fix ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-28 10:47:05 -07:00
Tommy	469358b8ed	Add serial port support for Proxmox ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-28 09:40:01 -07:00
Tommy	3f8465e696	Use systemd units section to disable kdump and debug-shell ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-27 21:56:58 -07:00
Tommy	0adadc1932	Add missing stamp for postinst2 ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-27 18:48:17 -07:00
Tommy	46285b769e	Single quote echo ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-27 02:19:44 -07:00
Tommy	e754f3a5eb	ld.preload path does not needed to be hardcoded ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-27 00:19:46 -07:00
Tommy	6f0bf8d8a7	Implement hardened_malloc, rename to x86_64-v3 ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-26 23:36:13 -07:00
Tommy	3cb35c79d5	Remove extra_latent_entropy ... Signed-off-by: Tommy <contact@tommytran.io>	2024-02-26 21:00:56 -07:00