From 91840539f9e4c48a11d5cc04c4cee8adfa504911 Mon Sep 17 00:00:00 2001 From: Aiden McClelland <3732071+dr-bonez@users.noreply.github.com> Date: Fri, 10 Dec 2021 10:19:22 -0700 Subject: [PATCH] disable login as `ubuntu` (#934) --- build/initialization.sh | 1 + build/write-image.sh | 9 +++++++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/build/initialization.sh b/build/initialization.sh index 2b49cb6ec..aa5cfd16e 100755 --- a/build/initialization.sh +++ b/build/initialization.sh @@ -53,6 +53,7 @@ ControlPort 9051 CookieAuthentication 1 EOF +passwd -l ubuntu echo 'overlayroot="tmpfs":swap=1,recurse=0' > /etc/overlayroot.local.conf systemctl disable initialization.service sync diff --git a/build/write-image.sh b/build/write-image.sh index 550d7a21f..f9f7b60a2 100755 --- a/build/write-image.sh +++ b/build/write-image.sh @@ -64,8 +64,13 @@ sudo cp -R diagnostic-ui/www /tmp/eos-mnt/var/www/html/diagnostic # Make the .ssh directory sudo mkdir -p /tmp/eos-mnt/root/.ssh -sudo cp ./build/initialization.sh /tmp/eos-mnt/usr/local/bin +if [ "$ENVIRONMENT" = "dev" ]; then + cat ./build/initialization.sh | grep -v "passwd -l ubuntu" | sudo tee /tmp/eos-mnt/usr/local/bin/initialization.sh > /dev/null +else + sudo cp ./build/initialization.sh /tmp/eos-mnt/usr/local/bin +fi + sudo cp ./build/initialization.service /tmp/eos-mnt/etc/systemd/system/initialization.service -sudo ln -s /etc/systemd/system/initialization.service /tmp/eos-mnt/etc/systemd/system/multi-user.target.wants/initialization.service +sudo ln -s /etc/systemd/system/initialization.service /tmp/eos-mnt/etc/systemd/system/multi-user.target.wants/initialization.service sudo umount /tmp/eos-mnt