mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
Finn Callies
8a52693acc
Fix the sel-ebc-pvebc.service unit to execute the failure action when the sics directory does not exist instead of getting skipped. Reviewed-by: Holger Dengler <dengler@linux.ibm.com> Signed-off-by: Finn Callies <fcallies@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
36 lines
1.0 KiB
Desktop File
36 lines
1.0 KiB
Desktop File
[Unit]
|
|
Description=Run pvebc during early boot to process SICS
|
|
|
|
# boot partition contains SICS
|
|
# Loading of kernel modules is required which are needed for protected keys
|
|
Requires=systemd-modules-load.service
|
|
Requires=sel-ebc-boot-mount.service
|
|
|
|
# Ensure this runs before the handoff to the real root, if that's required:
|
|
Before=initrd-root-device.target
|
|
Before=cryptsetup-pre.target
|
|
Before=cryptsetup.target
|
|
After=systemd-modules-load.service
|
|
After=sel-ebc-boot-mount.service
|
|
|
|
# Initramfs requirement
|
|
DefaultDependencies=no
|
|
# Make absolutely sure this only runs in initramfs
|
|
ConditionPathExists=/etc/initrd-release
|
|
ConditionKernelCommandLine=rd.sel-ebc
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
# execute pvebc
|
|
ExecStart=/bin/bash /etc/sel-ebc/pvebc-wrapper.sh
|
|
RemainAfterExit=yes
|
|
# If pvebc fails immediately abort boot
|
|
FailureAction=poweroff-immediate
|
|
# boot partition is unencrypted and contains SICS so we can get logs out this way
|
|
# logs do not leek any sensitive information
|
|
StandardOutput=journal+console
|
|
StandardError=journal+console
|
|
|
|
[Install]
|
|
RequiredBy=sel-ebc.target
|