mirrors/systemd
0
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-12-11 11:13:58 +08:00
Code Issues Packages Projects Releases Wiki Activity
d852352b9c
systemd/mkosi.conf.d/10-systemd.conf

39 lines
1.7 KiB
Plaintext
Raw Normal View History

Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 23:05:06 +08:00
# SPDX-License-Identifier: LGPL-2.1-or-later
mkosi: Only build system preset by default Let's not build all presets by default, but only the system preset. Also, let's only make the system preset depend on the initrd preset if we're building a bootable disk image. This means that if we build the system image as a cpio, uki or directory, the initrd preset will be skipped as it's not necessary, making the build a little faster.
2023-09-09 16:20:01 +08:00
[Preset]
Presets=system
Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 23:05:06 +08:00
[Output]
mkosi: Move settings to right sections
2023-07-14 20:52:58 +08:00
OutputDirectory=mkosi.output
BuildDirectory=mkosi.builddir
CacheDirectory=mkosi.cache
[Content]
mkosi: Move more logic to the postinst script Let's move stuff that only applies to the final image to the postinst script. Let's also move out some of the static files to mkosi.extra/ instead of hardcoding them in scripts.
2023-02-21 22:09:38 +08:00
# Prevent ASAN warnings when building the image and ship the real ASAN options prefixed with MKOSI_.
mkosi: Changes to allow booting with sanitizers in mkosi - Extra memory because ASAN needs it - The environment variables to make the sanitizers more useful - LD_PRELOAD because the ASAN DSO needs to be the first in the list - The sanitizer library packages - Disable syscall filters because they interfere with ASAN - Disable systemd-hwdb-update because it's super slow when systemd-hwdb is built with sanitizers - Take the value for meson's b_sanitize option from the SANITIZERS environment variable
2022-07-15 08:26:52 +08:00
Environment=ASAN_OPTIONS=verify_asan_link_order=false
mkosi: Move more logic to the postinst script Let's move stuff that only applies to the final image to the postinst script. Let's also move out some of the static files to mkosi.extra/ instead of hardcoding them in scripts.
2023-02-21 22:09:38 +08:00
MKOSI_ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1
MKOSI_UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1
Move shared mkosi settings to a single file in mkosi.default.d/
2021-01-03 23:05:06 +08:00
[Host]
mkosi: Update to latest Configuration now takes priority over CLI options so we have to configure the defaults for settings that we want to allow overriding from the CLI. We also explicitly set some other settings so that they can't be overridden from the CLI anymore. For example the base and initrd image should never be made bootable so we set Bootable=no explicitly for both.
2023-09-01 19:58:16 +08:00
@Incremental=yes
@QemuMem=2G
mkosi: Replace root password setting with a credential
2023-05-07 17:03:29 +08:00
# Make sure we don't trigger systemd-firstboot prompting for the root password.
Credentials=passwd.plaintext-password.root=
mkosi: Enable some debugging options by default
2023-03-17 01:28:14 +08:00
KernelCommandLineExtra=systemd.crash_shell
systemd.log_level=debug
mkosi: Disable kmsg ratelimiting
2023-04-20 16:33:10 +08:00
systemd.log_ratelimit_kmsg=0
mkosi: Enable some debugging options by default
2023-03-17 01:28:14 +08:00
systemd.journald.forward_to_console
systemd.journald.max_level_console=warning
mkosi: Switch to use mkosi presets with prebuilt initrds Instead of building the initrds for the mkosi images with dracut, let's switch to using mkosi presets to build the initrd with mkosi as well. This commit splits up our single image build into three separate mkosi presets: 1. The "base" preset. This image contains systemd and all its runtime dependencies. The sole purpose of this image is to serve as a base image for the initrd and the final image. It's also responsible for building systemd from source with the build script. The results are installed into the base image. Note that we install the systemd and udev packages into this image as well to prevent package managers from overriding the systemd we built from source with the distro packaged systemd if it's pulled in as a dependency by another package from the initrd or final profiles. 2. The "initrd" preset. This image provides the initrd. It's trivial and does nothing more than packaging the base image up as a zstd compressed initramfs and adds /init and /etc/initrd-release symlinks to the image. 3. The "final" preset. This image builds on top of the base image and adds a kernel and extra packages that are useful for testing and debugging. We also split out the optional kernel build into a separate set of config files that are only included if a kernel to build is actually provided. Note that this commit doesn't really change anything about how mkosi is used. The commands remain the same, except that mkosi will now build all the presets in order. "mkosi summary" will show the summary of all the presets. "mkosi qemu, boot, shell" will always boot the final preset. With "-f", all presets will be built and the final one is booted. "-i" makes a cache of each preset. The only thing to keep in mind is that specifying config via the mkosi CLI will apply to each of the presets. e.g. any extra packages added with "-p" will be installed in both the initrd and the final image. To apply local configuration to a single preset, create a file 00-local.conf in mkosi.presets/<profile>/mkosi.conf.d and put all the preset specific configuration in there.
2023-04-25 22:04:49 +08:00
# Disable the kernel's ratelimiting on userspace logging to kmsg.
printk.devkmsg=on
mkosi: Package a erofs usr partition with signed verity Let's start moving towards a more involved partitioning setup to test our stuff more when using mkosi. The root partition is generated on boot with systemd-repart. CentOS supports neither erofs nor btrfs so we use squashfs and xfs instead. We also enable SecureBoot= locally for additional coverage. This and the use of verity means users need to run `mkosi genkey` once to generate the keys necessary to do secure boot and verity.
2023-05-08 22:06:41 +08:00
# Make sure /sysroot is mounted rw in the initrd.
rw
mkosi: Only lower device timeout instead of all timeouts We only really care about lowering the device timeout so we get to a shell faster when the root device doesn't appear so let's only lower that timeout instead of lowering all default timeouts.
2023-05-31 22:19:21 +08:00
# Lower the default device timeout so we get a shell earlier if the root device does
# not appear for some reason.
systemd.default_device_timeout_sec=10
mkosi: Enable more options We build with support for selinux/apparmor where applicable but disable them at runtime as even in permissive mode they're horribly broken.
2023-06-02 23:25:23 +08:00
# Make sure no LSMs are enabled by default.
apparmor=0
selinux=0
enforcing=0
mkosi: Set systemd.early_core_pattern=/core This makes sure we get pid1 coredumps during early boot.
2023-07-13 21:38:03 +08:00
systemd.early_core_pattern=/core
Reference in New Issue Copy Permalink