wait for time sync before starting tor (#2209)

* wait for time sync before starting tor

* don't initialize /var/lib/docker

backend/embassy-init.service

@@ -2,7 +2,7 @@
 Description=Embassy Init
 After=network-online.target
 Requires=network-online.target
-Wants=avahi-daemon.service tor.service
+Wants=avahi-daemon.service
 
 [Service]
 Type=oneshot

backend/src/init.rs

@@ -319,17 +319,9 @@ pub async fn init(cfg: &RpcContextConfig) -> Result<InitResult, Error> {
     }
     let tmp_docker = cfg.datadir().join("package-data/tmp/docker");
     let tmp_docker_exists = tokio::fs::metadata(&tmp_docker).await.is_ok();
-    if should_rebuild || !tmp_docker_exists {
-        if tmp_docker_exists {
+    if should_rebuild && tmp_docker_exists {
         tokio::fs::remove_dir_all(&tmp_docker).await?;
     }
-        Command::new("cp")
-            .arg("-ra")
-            .arg("/var/lib/docker")
-            .arg(&tmp_docker)
-            .invoke(crate::ErrorKind::Filesystem)
-            .await?;
-    }
     Command::new("systemctl")
         .arg("stop")
         .arg("docker")
@@ -392,6 +384,26 @@ pub async fn init(cfg: &RpcContextConfig) -> Result<InitResult, Error> {
         .await?;
     tracing::info!("Enabled Docker QEMU Emulation");
 
+    let mut warn_time_not_synced = true;
+    for _ in 0..60 {
+        if check_time_is_synchronized().await? {
+            warn_time_not_synced = false;
+            break;
+        }
+        tokio::time::sleep(Duration::from_secs(1)).await;
+    }
+    if warn_time_not_synced {
+        tracing::warn!("Timed out waiting for system time to synchronize");
+    } else {
+        tracing::info!("Syncronized system clock");
+    }
+
+    Command::new("systemctl")
+        .arg("start")
+        .arg("tor")
+        .invoke(crate::ErrorKind::Tor)
+        .await?;
+
     receipts
         .ip_info
         .set(&mut handle, crate::net::dhcp::init_ips().await?)
@@ -407,6 +419,7 @@ pub async fn init(cfg: &RpcContextConfig) -> Result<InitResult, Error> {
             },
         )
         .await?;
+
     receipts
         .system_start_time
         .set(&mut handle, time().await?)

build/lib/scripts/postinst

@@ -46,7 +46,9 @@ $SYSTEMCTL enable systemd-resolved.service
 $SYSTEMCTL enable systemd-networkd-wait-online.service
 $SYSTEMCTL disable wpa_supplicant.service
 
+$SYSTEMCTL disable docker.service
 $SYSTEMCTL disable postgresql.service
+$SYSTEMCTL disable tor.service
 $SYSTEMCTL disable bluetooth.service
 $SYSTEMCTL disable hciuart.service
 $SYSTEMCTL disable triggerhappy.service