titanz/Fedora-CoreOS-Ignition
1
0
Fork 0
mirror of https://github.com/TommyTran732/Fedora-CoreOS-Ignition.git synced 2025-06-13 12:54:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix /etc/ld.so.preload handling

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2025-06-08 03:31:06 -07:00
parent 494371382f
commit c193aecd1e
No known key found for this signature in database
GPG Key ID: 555C902A34EC968F
2 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
x86.ign
View File

File diff suppressed because one or more lines are too long

19
x86.yml
View File

@ -36,6 +36,7 @@ systemd:
After=systemd-machine-id-commit.service
After=network-online.target
Before=zincati.service
ConditionPathExists=!/var/lib/%N.stamp
[Service]
Type=oneshot
@ -46,9 +47,27 @@ systemd:
ExecStart=/usr/sbin/setsebool -P virt_use_samba off
ExecStart=/usr/bin/rpm-ostree install hardened_malloc qemu-guest-agent tuned
ExecStart=/usr/bin/sed -i 's/\s+nullok//g' /etc/pam.d/system-auth
ExecStart=/usr/bin/touch /var/lib/%N.stamp
ExecStart=/usr/bin/systemctl --no-block reboot
[Install]
WantedBy=multi-user.target
- name: postinst2.service
enabled: true
contents: |
[Unit]
ConditionPathExists=/var/lib/postinst.stamp
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/bin/echo 'libhardened_malloc.so' > /etc/ld.so.preload
ExecStart=/usr/bin/systemctl disable postinst
ExecStart=/usr/bin/rm /etc/systemd/system/postinst.service
ExecStart=/usr/bin/rm /var/lib/postinst.stamp
ExecStart=/usr/bin/systemctl disable postinst2
ExecStart=/usr/bin/rm /etc/systemd/system/postinst2.service
ExecStart=/usr/bin/systemctl --no-block reboot
[Install]