Git-Mirrors/tommytran732-Fedora-CoreOS-Ignition
1
0
Fork 0
mirror of https://github.com/tommytran732/Fedora-CoreOS-Ignition.git synced 2024-10-01 01:15:36 -04:00
Code Issues Packages Projects Releases Wiki Activity

Mask debug shell

Browse Source 
Signed-off-by: Thien Tran <contact@tommytran.io>
This commit is contained in:
Thien Tran 2023-10-25 16:07:17 -07:00
parent ce5d43d097
commit caeeefc990
No known key found for this signature in database
GPG Key ID: 3DF2709723343A8F
6 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Docker-Compose.ign
View File

@ -170,6 +170,10 @@
{
"path": "/etc/systemd/system/kdump.service.target",
"target": "/dev/null"
},
{
"path": "/etc/systemd/system/debug-shell.service",
"target": "/dev/null"
}
]
},

2
Docker-Compose.yml
View File

@ -314,6 +314,8 @@ storage:
target: /usr/lib/systemd/system/tuned.service
- path: /etc/systemd/system/kdump.service.target
target: /dev/null
- path: /etc/systemd/system/debug-shell.service
target: /dev/null
kernel_arguments:
should_exist:
- spectre_v2=on

4
Generic.ign
View File

@ -163,6 +163,10 @@
{
"path": "/etc/systemd/system/kdump.service.target",
"target": "/dev/null"
},
{
"path": "/etc/systemd/system/debug-shell.service",
"target": "/dev/null"
}
]
},

2
Generic.yml
View File

@ -312,6 +312,8 @@ storage:
target: /usr/lib/systemd/system/tuned.service
- path: /etc/systemd/system/kdump.service.target
target: /dev/null
- path: /etc/systemd/system/debug-shell.service
target: /dev/null
kernel_arguments:
should_exist:
- spectre_v2=on

4
UTM.ign
View File

@ -156,6 +156,10 @@
{
"path": "/etc/systemd/system/kdump.service.target",
"target": "/dev/null"
},
{
"path": "/etc/systemd/system/debug-shell.service",
"target": "/dev/null"
}
]
},

2
UTM.yml
View File

@ -207,6 +207,8 @@ storage:
target: /usr/lib/systemd/system/tuned.service
- path: /etc/systemd/system/kdump.service.target
target: /dev/null
- path: /etc/systemd/system/debug-shell.service
target: /dev/null
kernel_arguments:
should_exist:
- spectre_v2=on