mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
Finn Callies
3d679f61fc
The boot partition is not designed for log files. Disable logging of the EBC units to /boot/sics/log. Reviewed-by: Holger Dengler <dengler@linux.ibm.com> Signed-off-by: Finn Callies <fcallies@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
28 lines
717 B
Desktop File
28 lines
717 B
Desktop File
[Unit]
|
|
Description=Enforce PAES encrypted root fs for SEL guests
|
|
|
|
# Ensure this runs before the handoff to the real root, if that's required:
|
|
After=cryptsetup.target
|
|
After=initrd-root-device.target
|
|
Before=sysroot.mount
|
|
|
|
# Initramfs requirement
|
|
DefaultDependencies=no
|
|
# Make absolutely sure this only runs in initramfs
|
|
ConditionPathExists=/etc/initrd-release
|
|
ConditionKernelCommandLine=rd.sel-ebc
|
|
ConditionKernelCommandLine=root
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=bash -c 'dmsetup table /dev/disk/by-label/root | grep "paes-xts-plain64"'
|
|
FailureAction=poweroff-immediate
|
|
RemainAfterExit=yes
|
|
|
|
# logs do not leek any sensitive information
|
|
StandardOutput=console
|
|
StandardError=console
|
|
|
|
[Install]
|
|
RequiredBy=sel-ebc.target
|