Start9/start-os
2
0
Fork 0
mirror of https://github.com/Start9Labs/start-os.git synced 2026-03-26 02:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

disable ssh login as pi for non-dev builds

Browse Source
This commit is contained in:
Aiden McClelland
2022-02-11 13:14:44 -07:00
committed by Keagan McClelland
parent 350bbf88ab
commit 03a8dca7d7
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
build/initialization.sh
View File

@@ -60,9 +60,12 @@ EOF
cat /embassy-os/product_key.txt | tr -d '\n' | sha256sum | head -c 32 | sed 's/$/\n/' > /etc/machine-id cat /embassy-os/product_key.txt | tr -d '\n' | sha256sum | head -c 32 | sed 's/$/\n/' > /etc/machine-id
passwd -l pi
raspi-config nonint enable_overlayfs raspi-config nonint enable_overlayfs
systemctl disable initialization.service systemctl disable initialization.service
sudo systemctl restart NetworkManager sudo systemctl restart NetworkManager
sync sync
# TODO: clean out ssh host keys # TODO: clean out ssh host keys

7
build/write-image.sh
View File

@@ -82,7 +82,12 @@ sudo mkdir -p /tmp/eos-mnt/root/.ssh
#sudo chmod +x /tmp/eos-mnt/etc/update-motd.d/90-updates-available #sudo chmod +x /tmp/eos-mnt/etc/update-motd.d/90-updates-available
#sudo chmod +x /tmp/eos-mnt/etc/update-motd.d/95-hwe-eol #sudo chmod +x /tmp/eos-mnt/etc/update-motd.d/95-hwe-eol
sudo cp ./build/initialization.sh /tmp/eos-mnt/usr/local/bin if [[ "$ENVIRONMENT" =~ (^|-)dev($|-) ]]; then
cat ./build/initialization.sh | grep -v "passwd -l pi" | sudo tee /tmp/eos-mnt/usr/local/bin/initialization.sh > /dev/null
sudo chmod +x /tmp/eos-mnt/usr/local/bin/initialization.sh
else
sudo cp ./build/initialization.sh /tmp/eos-mnt/usr/local/bin
fi
sudo cp ./build/initialization.service /tmp/eos-mnt/etc/systemd/system/initialization.service sudo cp ./build/initialization.service /tmp/eos-mnt/etc/systemd/system/initialization.service
sudo ln -s /etc/systemd/system/initialization.service /tmp/eos-mnt/etc/systemd/system/multi-user.target.wants/initialization.service sudo ln -s /etc/systemd/system/initialization.service /tmp/eos-mnt/etc/systemd/system/multi-user.target.wants/initialization.service