movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

shutdown: Protect system from make-initrd-ng

Browse source
This commit is contained in:
Will Fancher 2022-08-03 20:46:04 -04:00
parent 951c50ec6d
commit a454a706b5
1 changed files with 13 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

22
nixos/modules/system/boot/systemd/shutdown.nix
View file

@ -33,26 +33,30 @@ in {
systemd.shutdownRamfs.contents."/shutdown".source = "${config.systemd.package}/lib/systemd/systemd-shutdown"; systemd.shutdownRamfs.contents."/shutdown".source = "${config.systemd.package}/lib/systemd/systemd-shutdown";
systemd.shutdownRamfs.storePaths = [pkgs.runtimeShell "${pkgs.coreutils}/bin"]; systemd.shutdownRamfs.storePaths = [pkgs.runtimeShell "${pkgs.coreutils}/bin"];
systemd.mounts = [{
what = "tmpfs";
where = "/run/initramfs";
type = "tmpfs";
}];
systemd.services.generate-shutdown-ramfs = { systemd.services.generate-shutdown-ramfs = {
description = "Generate shutdown ramfs"; description = "Generate shutdown ramfs";
wantedBy = [ "shutdown.target" ]; wantedBy = [ "shutdown.target" ];
before = [ "shutdown.target" ]; before = [ "shutdown.target" ];
unitConfig = { unitConfig = {
DefaultDependencies = false; DefaultDependencies = false;
RequiresMountsFor = "/run/initramfs";
ConditionFileIsExecutable = [ ConditionFileIsExecutable = [
"!/run/initramfs/shutdown" "!/run/initramfs/shutdown"
]; ];
}; };
path = [pkgs.util-linux pkgs.makeInitrdNGTool]; serviceConfig = {
serviceConfig.Type = "oneshot"; Type = "oneshot";
script = '' ProtectSystem = "strict";
mkdir -p /run/initramfs ReadWritePaths = "/run/initramfs";
if ! mountpoint -q /run/initramfs; then ExecStart = "${pkgs.makeInitrdNGTool}/bin/make-initrd-ng ${ramfsContents} /run/initramfs";
mount -t tmpfs tmpfs /run/initramfs };
fi
make-initrd-ng ${ramfsContents} /run/initramfs
'';
}; };
}; };
} }