Files
systemd/units/systemd-firstboot.service

48 lines
1.6 KiB
SYSTEMD
Raw Permalink Normal View History

# SPDX-License-Identifier: LGPL-2.1-or-later
2017-11-18 17:35:03 +01:00
#
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
[Unit]
Description=Initial Setup
Documentation=man:systemd-firstboot(1)
ConditionPathIsReadWrite=/etc
ConditionFirstBoot=yes
DefaultDependencies=no
# This service may need to write to the file system:
After=systemd-remount-fs.service
# Both systemd-sysusers and systemd-tmpfiles may create the root account
# (via factory files or credentials), obviating the need for us to do that:
After=systemd-sysusers.service systemd-tmpfiles-setup.service
# Let vconsole-setup do its setup before starting user interaction:
After=systemd-vconsole-setup.service
After=systemd-mute-console.socket
Wants=first-boot-complete.target
Before=first-boot-complete.target sysinit.target
Conflicts=shutdown.target
Before=shutdown.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=systemd-firstboot --prompt-locale --prompt-keymap-auto --prompt-timezone --prompt-root-password --mute-console=yes
StandardOutput=tty
StandardInput=tty
StandardError=tty
units: explicitly reset TTY before running stuff on console This adds TTYReset=yes to all units which run directly on the TTY. We already had this in place for the gettys, but this adds it for the rest that basically has StandardInput=tty + StandardOutput=tty set. Originally, for these tools it wasn't necessary to reset the TTY, because we after all already reset /dev/console very very early on once, during PID1's early initialization, and hence there's no real reason to do it again for these early boot services. But that's actually not right, because since #36666 the TTY we reset from PID 1 is typically /dev/console but the TTY those services are invoked on is typically the resolved version of that, i.e. wherever that points. Now you might think: if one is just an alias to the other, why does it matter to reset this again? Well, because it's only a half-assed alias, and as it turns out WIOCSWINSZ is not propagated from one to the other, i.e the terminal dimesions we initialize for /dev/console don't propagate to whatever that points to. One option to address that would be to immediately propagate this down ourselves (or to fix the kernel for it), but it felt safer to simply do the reset again before the use, after all these one one-off services, and there's no point in optimizing much here. Moreover, its probably safer to give the guarantee that when the firstboot stuff (which after all queries for pws to set) runs it definitely certainly guaranteed has a properly reset terminal.
2025-09-18 17:50:06 +02:00
TTYReset=yes
# Optionally, pick up basic fields from credentials passed to the service
# manager. This is useful for importing this data from nspawn's
# --set-credential= switch.
ImportCredential=passwd.hashed-password.root
ImportCredential=passwd.plaintext-password.root
ImportCredential=passwd.shell.root
ImportCredential=firstboot.*