mirror of
https://github.com/Start9Labs/start-os.git
synced 2026-03-26 02:11:53 +00:00
disable ssh login as pi for non-dev builds
This commit is contained in:
committed by
Keagan McClelland
parent
350bbf88ab
commit
03a8dca7d7
@@ -60,9 +60,12 @@ EOF
|
||||
|
||||
cat /embassy-os/product_key.txt | tr -d '\n' | sha256sum | head -c 32 | sed 's/$/\n/' > /etc/machine-id
|
||||
|
||||
passwd -l pi
|
||||
|
||||
raspi-config nonint enable_overlayfs
|
||||
systemctl disable initialization.service
|
||||
sudo systemctl restart NetworkManager
|
||||
|
||||
sync
|
||||
|
||||
# TODO: clean out ssh host keys
|
||||
|
||||
@@ -82,7 +82,12 @@ sudo mkdir -p /tmp/eos-mnt/root/.ssh
|
||||
#sudo chmod +x /tmp/eos-mnt/etc/update-motd.d/90-updates-available
|
||||
#sudo chmod +x /tmp/eos-mnt/etc/update-motd.d/95-hwe-eol
|
||||
|
||||
if [[ "$ENVIRONMENT" =~ (^|-)dev($|-) ]]; then
|
||||
cat ./build/initialization.sh | grep -v "passwd -l pi" | sudo tee /tmp/eos-mnt/usr/local/bin/initialization.sh > /dev/null
|
||||
sudo chmod +x /tmp/eos-mnt/usr/local/bin/initialization.sh
|
||||
else
|
||||
sudo cp ./build/initialization.sh /tmp/eos-mnt/usr/local/bin
|
||||
fi
|
||||
|
||||
sudo cp ./build/initialization.service /tmp/eos-mnt/etc/systemd/system/initialization.service
|
||||
sudo ln -s /etc/systemd/system/initialization.service /tmp/eos-mnt/etc/systemd/system/multi-user.target.wants/initialization.service
|
||||
|
||||
Reference in New Issue
Block a user