mirror of
https://github.com/nchevsky/systemrescue-zfs.git
synced 2026-02-08 08:44:24 +01:00
5cf652ec56
It allows to preconfigure a list of known host keys.
But the primary use case will probably be trusting signatures from SSH CAs for host keys.
Example:
---
sysconfig:
ssh_known_hosts:
myhost.example.org: "ssh-ed25519 AAAAC3NzaC1l...JJTO48B"
"@cert-authority *.mydomain.org": "ssh-rsa AAAAB3NzaC1y...Zhk0="
523 lines
23 KiB
Python
Executable file
523 lines
23 KiB
Python
Executable file
#!/usr/bin/env python3
|
|
#
|
|
# initialize SystemRescue, do the parts that can be done in parallel to networking being set up
|
|
#
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
import subprocess
|
|
import json
|
|
import glob
|
|
import os
|
|
import sys
|
|
import re
|
|
import tempfile
|
|
import functools
|
|
import configparser
|
|
|
|
# flush stdout buffer after each print call: immediately show the user what is going on
|
|
print = functools.partial(print, flush=True)
|
|
|
|
# pythons os.symlink bails when a file already exists, this function also handles overwrites
|
|
def symlink_overwrite(target, link_file):
|
|
link_dir = os.path.dirname(link_file)
|
|
|
|
while True:
|
|
# get a tmp filename in the same dir as link_file
|
|
tmp = tempfile.NamedTemporaryFile(delete=True, dir=link_dir)
|
|
tmp.close()
|
|
# tmp is now deleted
|
|
|
|
# os.symlink aborts when a file with the same name already exists
|
|
# someone could have created a new file with the tmp name right in this moment
|
|
# so we need to loop and try again in this case
|
|
try:
|
|
os.symlink(target,tmp.name)
|
|
break
|
|
except FileExistsError:
|
|
pass
|
|
|
|
os.replace(tmp.name, link_file)
|
|
|
|
def strtobool (val):
|
|
"""Convert a string representation of truth to true (1) or false (0).
|
|
|
|
True values are 'y', 'yes', 't', 'true', 'on', '1', '1.0'; false values
|
|
are 'n', 'no', 'f', 'false', 'off', '0', '0.0'. Raises ValueError if
|
|
'val' is anything else.
|
|
|
|
Function adapted from Pythons distutils.util.py because it will be deprecated soon
|
|
Copyright (c) Python Software Foundation; All Rights Reserved
|
|
"""
|
|
val = str(val).lower()
|
|
if val in ('y', 'yes', 't', 'true', 'on', '1', '1.0'):
|
|
return True
|
|
elif val in ('n', 'no', 'f', 'false', 'off', '0', '0.0'):
|
|
return False
|
|
else:
|
|
raise ValueError("invalid truth value %r" % (val,))
|
|
|
|
# ==============================================================================
|
|
# Initialization
|
|
# ==============================================================================
|
|
print(f"====> Script {sys.argv[0]} starting ...")
|
|
errcnt = 0
|
|
|
|
# ==============================================================================
|
|
# Read the effective configuration file
|
|
# ==============================================================================
|
|
print(f"====> Read the effective configuration file ...")
|
|
effectivecfg = "/run/archiso/config/sysrescue-effective-config.json"
|
|
if os.path.exists(effectivecfg) == False:
|
|
print (f"Failed to find effective configuration file in {effectivecfg}")
|
|
sys.exit(1)
|
|
|
|
with open(effectivecfg) as file:
|
|
config = json.load(file)
|
|
|
|
# ==============================================================================
|
|
# Sanitize config, initialize variables
|
|
# Make sysrescue-initialize work safely without them being defined or have a wrong type
|
|
# Also show the effective configuration
|
|
# ==============================================================================
|
|
print(f"====> Showing the effective global configuration (except clear passwords) ...")
|
|
|
|
def read_cfg_value(scope, name, defaultval, printval):
|
|
if not scope in config:
|
|
val = defaultval
|
|
elif name in config[scope]:
|
|
chkval = config[scope][name]
|
|
try:
|
|
if isinstance(chkval, list) or isinstance(chkval, dict):
|
|
raise TypeError(f"must be a {type(defaultval)}, not a {type(chkval)}")
|
|
elif isinstance(defaultval, bool) and not isinstance(chkval, bool):
|
|
val = strtobool(chkval)
|
|
else:
|
|
val = type(defaultval)(chkval)
|
|
except (TypeError, ValueError) as e:
|
|
if printval:
|
|
print(f"config['{scope}']['{name}'] with {chkval} is not the same type as defaultval: {e}")
|
|
else:
|
|
print(f"config['{scope}']['{name}'] is not the same type as defaultval: {e}")
|
|
val = defaultval
|
|
else:
|
|
val = defaultval
|
|
|
|
if printval:
|
|
print(f"config['{scope}']['{name}']={val}")
|
|
|
|
return val
|
|
|
|
setkmap = read_cfg_value('global','setkmap', "", True)
|
|
rootshell = read_cfg_value('global','rootshell', "", True)
|
|
rootpass = read_cfg_value('global','rootpass', "", False)
|
|
rootcryptpass = read_cfg_value('global','rootcryptpass', "", False)
|
|
noautologin = read_cfg_value('global','noautologin', False, True)
|
|
dostartx = read_cfg_value('global','dostartx', False, True)
|
|
dovnc = read_cfg_value('global','dovnc', False, True)
|
|
vncpass = read_cfg_value('global','vncpass', "", False)
|
|
late_load_srm = read_cfg_value('global','late_load_srm', "", True)
|
|
timezone = read_cfg_value('sysconfig','timezone', "", True)
|
|
|
|
# ==============================================================================
|
|
# Apply the effective configuration
|
|
# ==============================================================================
|
|
print(f"====> Applying configuration ...")
|
|
|
|
# Configure keyboard layout if requested in the configuration
|
|
if setkmap != "":
|
|
p = subprocess.run(["localectl", "set-keymap", setkmap], text=True)
|
|
if p.returncode == 0:
|
|
print (f"Have changed the keymap successfully")
|
|
else:
|
|
print (f"Failed to change keymap")
|
|
errcnt+=1
|
|
|
|
# Configure root login shell if requested in the configuration
|
|
if rootshell != "":
|
|
p = subprocess.run(["chsh", "--shell", rootshell, "root"], text=True)
|
|
if p.returncode == 0:
|
|
print (f"Have changed the root shell successfully")
|
|
else:
|
|
print (f"Failed to change the root shell")
|
|
errcnt+=1
|
|
|
|
# Set the system root password from a clear password
|
|
if rootpass != "":
|
|
p = subprocess.run(["chpasswd", "--crypt-method", "SHA512"], text=True, input=f"root:{rootpass}")
|
|
if p.returncode == 0:
|
|
print (f"Have changed the root password successfully")
|
|
else:
|
|
print (f"Failed to change the root password")
|
|
errcnt+=1
|
|
|
|
# Set the system root password from an encrypted password
|
|
# A password can be encrypted using a one-line python3 command such as:
|
|
# python3 -c 'import crypt; print(crypt.crypt("MyPassWord123", crypt.mksalt(crypt.METHOD_SHA512)))'
|
|
if rootcryptpass != "":
|
|
p = subprocess.run(["chpasswd", "--encrypted"], text=True, input=f"root:{rootcryptpass}")
|
|
if p.returncode == 0:
|
|
print (f"Have changed the root password successfully")
|
|
else:
|
|
print (f"Failed to change the root password")
|
|
errcnt+=1
|
|
|
|
# Auto-start the graphical environment (tty1 only)
|
|
if dostartx == True or dovnc == True:
|
|
str = '[[ ! $DISPLAY ]] && [[ ! $SSH_TTY ]] && [[ $XDG_VTNR == 1 ]] && startx'
|
|
if (os.path.exists("/root/.bash_profile") == False) or (open("/root/.bash_profile", 'r').read().find(str) == -1):
|
|
file1 = open("/root/.bash_profile", "a")
|
|
file1.write(f"{str}\n")
|
|
file1.close()
|
|
file2 = open("/root/.zlogin", "w")
|
|
file2.write(f"{str}\n")
|
|
file2.close()
|
|
|
|
# Require authenticated console access
|
|
if noautologin == True:
|
|
p = subprocess.run(["systemctl", "revert", "getty@.service", "serial-getty@.service"], text=True)
|
|
if p.returncode == 0:
|
|
print (f"Have enabled authenticated console access successfully")
|
|
else:
|
|
print (f"Failed to enable authenticated console access")
|
|
errcnt+=1
|
|
|
|
# Set the VNC password from a clear password
|
|
if vncpass != "":
|
|
os.makedirs("/root/.vnc", exist_ok = True)
|
|
p = subprocess.run(["x11vnc", "-storepasswd", vncpass, "/root/.vnc/passwd"], text=True)
|
|
if p.returncode == 0:
|
|
print (f"Have changed the vnc password successfully")
|
|
else:
|
|
print (f"Failed to change the vnc password")
|
|
errcnt+=1
|
|
|
|
# Auto-start x11vnc with the graphical environment
|
|
if dovnc == True:
|
|
print (f"Enabling VNC Server in /root/.xprofile ...")
|
|
file = open("/root/.xprofile", "w")
|
|
file.write("""[ -f ~/.vnc/passwd ] && pwopt="-usepw" || pwopt="-nopw"\n""")
|
|
file.write("""x11vnc $pwopt -nevershared -forever -logfile /var/log/x11vnc.log &\n""")
|
|
file.close()
|
|
|
|
# Set the timezone
|
|
if timezone != "":
|
|
p = subprocess.run(["/usr/bin/timedatectl", "set-timezone", timezone], text=True)
|
|
if p.returncode != 0:
|
|
print (f"Failed to set timezone")
|
|
errcnt+=1
|
|
|
|
# Add Firefox bookmarks
|
|
firefox_policy_path = "/opt/firefox-esr/distribution/policies.json"
|
|
if 'sysconfig' in config and 'bookmarks' in config['sysconfig'] and config['sysconfig']['bookmarks']:
|
|
if os.path.exists(firefox_policy_path):
|
|
with open(firefox_policy_path) as polfile:
|
|
ff_policy = json.load(polfile)
|
|
else:
|
|
ff_policy = {}
|
|
|
|
# build dict structure if it doesn't exist yet
|
|
if not "policies" in ff_policy:
|
|
ff_policy["policies"] = {}
|
|
if not "Bookmarks" in ff_policy["policies"]:
|
|
ff_policy["policies"]["Bookmarks"] = []
|
|
|
|
# Don't add bookmark titles again if we already have them in the list
|
|
for ff_bmarkdict in ff_policy["policies"]["Bookmarks"]:
|
|
if "Title" in ff_bmarkdict and ff_bmarkdict["Title"]:
|
|
for prio, cfg_bmarkdict in sorted(config['sysconfig']['bookmarks'].items()):
|
|
if "title" in cfg_bmarkdict and cfg_bmarkdict["title"] == ff_bmarkdict["Title"]:
|
|
del config['sysconfig']['bookmarks'][prio]
|
|
|
|
for prio, cfg_bmarkdict in sorted(config['sysconfig']['bookmarks'].items()):
|
|
if "title" in cfg_bmarkdict and "url" in cfg_bmarkdict:
|
|
ff_bmarkdict = {}
|
|
ff_bmarkdict["Title"] = cfg_bmarkdict["title"]
|
|
ff_bmarkdict["URL"] = cfg_bmarkdict["url"]
|
|
ff_policy["policies"]["Bookmarks"].append(ff_bmarkdict)
|
|
|
|
# create dir, write out
|
|
if not os.path.isdir(os.path.dirname(firefox_policy_path)):
|
|
os.makedirs(os.path.dirname(firefox_policy_path))
|
|
with open(firefox_policy_path, "w", encoding='utf-8') as polfile:
|
|
json.dump(ff_policy, polfile, ensure_ascii=False, indent=2)
|
|
|
|
# ==============================================================================
|
|
# configure rclone
|
|
# ==============================================================================
|
|
|
|
if 'sysconfig' in config and 'rclone' in config['sysconfig'] and \
|
|
config['sysconfig']['rclone'] and isinstance(config['sysconfig']['rclone'], dict) and \
|
|
'config' in config['sysconfig']['rclone'] and \
|
|
config['sysconfig']['rclone']['config'] and \
|
|
isinstance(config['sysconfig']['rclone']['config'], dict):
|
|
print(f"====> Adding rclone config ...")
|
|
|
|
try:
|
|
if not os.path.isdir("/root/.config"):
|
|
os.mkdir("/root/.config")
|
|
if not os.path.isdir("/root/.config/rclone"):
|
|
os.mkdir("/root/.config/rclone")
|
|
os.chmod("/root/.config/rclone", 0o700)
|
|
|
|
iniparser = configparser.ConfigParser()
|
|
iniparser.read_dict(config['sysconfig']['rclone']['config'])
|
|
with open('/root/.config/rclone/rclone.conf', 'w') as configfile:
|
|
os.chmod("/root/.config/rclone/rclone.conf", 0o600)
|
|
iniparser.write(configfile)
|
|
except Exception as e:
|
|
print(e)
|
|
errcnt+=1
|
|
|
|
# ==============================================================================
|
|
# Configure custom CA certificates
|
|
# ==============================================================================
|
|
ca_anchor_path = "/etc/ca-certificates/trust-source/anchors/"
|
|
|
|
if 'sysconfig' in config and 'ca-trust' in config['sysconfig'] and config['sysconfig']['ca-trust']:
|
|
print("====> Adding trusted CA certificates ...")
|
|
|
|
for name, cert in sorted(config['sysconfig']['ca-trust'].items()):
|
|
print (f"Adding certificate '{name}' ...")
|
|
with open(os.path.join(ca_anchor_path, name + ".pem"), "w") as certfile:
|
|
certfile.write(cert)
|
|
|
|
print("Updating CA trust configuration ...")
|
|
p = subprocess.run(["update-ca-trust"], text=True)
|
|
|
|
# Firefox wants special treatment, doesn't read the default CA list but has it's own
|
|
print("Setting CA trust for Firefox ...")
|
|
if os.path.exists(firefox_policy_path):
|
|
with open(firefox_policy_path) as polfile:
|
|
ff_policy = json.load(polfile)
|
|
else:
|
|
ff_policy = {}
|
|
|
|
# build dict structure if it doesn't exist yet
|
|
if not "policies" in ff_policy:
|
|
ff_policy["policies"] = {}
|
|
if not "Certificates" in ff_policy["policies"]:
|
|
ff_policy["policies"]["Certificates"] = {}
|
|
if not "Install" in ff_policy["policies"]["Certificates"]:
|
|
ff_policy["policies"]["Certificates"]["Install"] = []
|
|
|
|
for name, cert in sorted(config['sysconfig']['ca-trust'].items()):
|
|
ff_policy["policies"]["Certificates"]["Install"].append(os.path.join(ca_anchor_path, name + ".pem"))
|
|
|
|
# remove duplicates
|
|
ff_policy["policies"]["Certificates"]["Install"] = list(set(ff_policy["policies"]["Certificates"]["Install"]))
|
|
|
|
# create dir, write out
|
|
if not os.path.isdir(os.path.dirname(firefox_policy_path)):
|
|
os.makedirs(os.path.dirname(firefox_policy_path))
|
|
with open(firefox_policy_path, "w", encoding='utf-8') as polfile:
|
|
json.dump(ff_policy, polfile, ensure_ascii=False, indent=2)
|
|
|
|
# ==============================================================================
|
|
# Configure gui_autostart
|
|
# ==============================================================================
|
|
|
|
if 'gui_autostart' in config and isinstance(config['gui_autostart'], dict):
|
|
print(f"====> Preparing gui_autostart ...")
|
|
try:
|
|
for name, starter in sorted(config['gui_autostart'].items()):
|
|
# create a sane filename out of the dict key
|
|
name_sane=re.sub('[^-a-zA-Z0-9_.]+', '_', name)
|
|
|
|
if 'desktop' in starter:
|
|
# symlink an existing desktop file
|
|
|
|
if 'exec' in starter or 'terminal' in starter:
|
|
# only allow either desktop or exec, not both
|
|
print (f"Ignoring ambiguous gui_autostart '{name}'")
|
|
errcnt+=1
|
|
continue
|
|
|
|
# the desktop file doesn't need to exist at this stage, could be loaded later via SRM for example
|
|
symlink_overwrite(starter['desktop'],f"/root/.config/autostart/{name_sane}.desktop")
|
|
|
|
if 'exec' in starter:
|
|
# create a new autostart desktop file
|
|
with open(f"/root/.config/autostart/{name_sane}.desktop", "w") as df:
|
|
df.write(f"[Desktop Entry]\n")
|
|
df.write(f"Type=Application\n")
|
|
df.write(f"Name={name_sane}\n")
|
|
df.write(f"Exec={starter['exec']}\n")
|
|
df.write(f"NoDisplay=true\n")
|
|
if 'terminal' in starter and strtobool(starter['terminal']):
|
|
df.write(f"Terminal=true\n")
|
|
else:
|
|
df.write(f"Terminal=false\n")
|
|
|
|
except Exception as e:
|
|
print(e)
|
|
errcnt+=1
|
|
|
|
# ==============================================================================
|
|
# late-load a SystemRescueModule (SRM)
|
|
# load-srm contains code that waits for the networking being up if necessary
|
|
# ==============================================================================
|
|
|
|
if late_load_srm != "":
|
|
print(f"====> Late-loading SystemRescueModule (SRM) ...")
|
|
subprocess.run(["/usr/share/sysrescue/bin/load-srm", late_load_srm], stdout=None, stderr=None)
|
|
# the SRM could contain changes to systemd units -> let them take effect
|
|
subprocess.run(["/usr/bin/systemctl", "daemon-reload"])
|
|
# trigger start of multi-user.target: the SRM could have added something to it's "Wants"
|
|
# systemd doesn't re-evaluate the dependencies on daemon-reload while running a transaction
|
|
# so we have to do this manually. Note: only affects multi-user.target, nothing else
|
|
subprocess.run(["/usr/bin/systemctl", "--no-block", "start", "multi-user.target"])
|
|
|
|
# ==============================================================================
|
|
# configure SSH authorized_keys
|
|
# do this after late-loading SRMs because we want to add to what is contained in a SRM
|
|
# ==============================================================================
|
|
|
|
if 'sysconfig' in config and 'authorized_keys' in config['sysconfig'] and \
|
|
config['sysconfig']['authorized_keys'] and isinstance(config['sysconfig']['authorized_keys'], dict):
|
|
print(f"====> Adding SSH authorized_keys ...")
|
|
# create list of key lines we want to add
|
|
keylines = []
|
|
for key, value in config['sysconfig']['authorized_keys'].items():
|
|
keylines.append(f"{value} {key}")
|
|
|
|
try:
|
|
if os.path.exists("/root/.ssh/authorized_keys"):
|
|
# check if we already have one of our keylines in the file: don't add it again
|
|
with open("/root/.ssh/authorized_keys", "r") as authfile:
|
|
for line in authfile:
|
|
line = line.strip()
|
|
# iterate backwards through the list to make deletion safe
|
|
for i in range(len(keylines)-1, -1, -1):
|
|
if line == keylines[i]:
|
|
del keylines[i]
|
|
if keylines:
|
|
if not os.path.isdir("/root/.ssh"):
|
|
os.mkdir("/root/.ssh")
|
|
os.chmod("/root/.ssh", 0o700)
|
|
with open("/root/.ssh/authorized_keys", "a") as authfile:
|
|
# append all our keylines
|
|
for line in keylines:
|
|
authfile.write(f"{line}\n")
|
|
authfile.close()
|
|
os.chmod("/root/.ssh/authorized_keys", 0o600)
|
|
except Exception as e:
|
|
print(e)
|
|
errcnt+=1
|
|
|
|
# ==============================================================================
|
|
# configure SSH known hosts
|
|
# do this after late-loading SRMs because we want to add to what is contained in a SRM
|
|
# ==============================================================================
|
|
|
|
if 'sysconfig' in config and 'ssh_known_hosts' in config['sysconfig'] and \
|
|
config['sysconfig']['ssh_known_hosts'] and isinstance(config['sysconfig']['ssh_known_hosts'], dict):
|
|
print(f"====> Adding SSH known hosts ...")
|
|
# create list of key lines we want to add
|
|
keylines = []
|
|
for key, value in config['sysconfig']['ssh_known_hosts'].items():
|
|
keylines.append(f"{key} {value}")
|
|
|
|
try:
|
|
if os.path.exists("/etc/ssh/ssh_known_hosts"):
|
|
# check if we already have one of our keylines in the file: don't add it again
|
|
with open("/etc/ssh/ssh_known_hosts", "r") as khfile:
|
|
for line in khfile:
|
|
line = line.strip()
|
|
# iterate backwards through the list to make deletion safe
|
|
for i in range(len(keylines)-1, -1, -1):
|
|
if line == keylines[i]:
|
|
del keylines[i]
|
|
if keylines:
|
|
with open("/etc/ssh/ssh_known_hosts", "a") as khfile:
|
|
# append all our keylines
|
|
for line in keylines:
|
|
khfile.write(f"{line}\n")
|
|
except Exception as e:
|
|
print(e)
|
|
errcnt+=1
|
|
|
|
# ==============================================================================
|
|
# configure bash_history
|
|
# do this after late-loading SRMs because we want to add to what is contained in a SRM
|
|
# ==============================================================================
|
|
|
|
if 'sysconfig' in config and 'bash_history' in config['sysconfig'] and \
|
|
config['sysconfig']['bash_history'] and isinstance(config['sysconfig']['bash_history'], dict):
|
|
print(f"====> Configuring bash_history ...")
|
|
|
|
try:
|
|
# append all our entries in case the file already exists
|
|
with open("/root/.bash_history", "a") as historyfile:
|
|
# iterate reverse sorted, the first key is written last and will appear first when pressing the up key
|
|
for key, command in sorted(config['sysconfig']['bash_history'].items(),reverse=True):
|
|
historyfile.write(f"{command}\n")
|
|
historyfile.close()
|
|
|
|
except Exception as e:
|
|
print(e)
|
|
errcnt+=1
|
|
|
|
# ==============================================================================
|
|
# autoterminal: programs that take over a virtual terminal for user interaction
|
|
# ==============================================================================
|
|
|
|
# expect a dict with terminal-name: command, like config['autoterminal']['tty2'] = "/usr/bin/setkmap"
|
|
if ('autoterminal' in config) and (config['autoterminal'] is not None) and \
|
|
(config['autoterminal'] is not False) and isinstance(config['autoterminal'], dict):
|
|
print("====> Configuring autoterminal ...")
|
|
with open('/usr/share/sysrescue/template/autoterminal.service', 'r') as template_file:
|
|
conf_template = template_file.read()
|
|
with open('/usr/share/sysrescue/template/serial-autoterminal.service', 'r') as template_file:
|
|
serial_conf_template = template_file.read()
|
|
start_services = []
|
|
for terminal, command in sorted(config['autoterminal'].items()):
|
|
if m := re.match(r"^serial:([a-zA-Z0-9_-]+)$", terminal):
|
|
serial=True
|
|
terminal = m.group(1)
|
|
else:
|
|
serial=False
|
|
|
|
if not re.match(r"^[a-zA-Z0-9_-]+$", terminal):
|
|
print (f"Ignoring invalid terminal name '{terminal}'")
|
|
errcnt+=1
|
|
continue
|
|
# do not check if terminal or command exists: an autorun could create them later on
|
|
if serial:
|
|
print (f"setting serial terminal '{terminal}' to '{command}'")
|
|
else:
|
|
print (f"setting terminal '{terminal}' to '{command}'")
|
|
with open(f"/etc/systemd/system/autoterminal-{terminal}.service", "w") as terminal_conf:
|
|
# write service config, based on the template config we loaded above
|
|
# don't use getty@{terminal}.service name to not use autovt@{terminal}.service on-demand logic
|
|
if serial:
|
|
conf_data=serial_conf_template.replace("%TTY%",terminal)
|
|
else:
|
|
conf_data=conf_template.replace("%TTY%",terminal)
|
|
|
|
conf_data=conf_data.replace("%EXEC%",command)
|
|
terminal_conf.write(conf_data)
|
|
# enable service: always start it, do not wait for the user to switch to the terminal
|
|
# means other programs (like X.org) can't allocate it away, also allows for longer running init sequences
|
|
symlink_overwrite(f"/etc/systemd/system/autoterminal-{terminal}.service",
|
|
f"/etc/systemd/system/getty.target.wants/autoterminal-{terminal}.service")
|
|
|
|
# mask the regular getty for this terminal
|
|
if serial:
|
|
symlink_overwrite("/dev/null",f"/etc/systemd/system/serial-getty@{terminal}.service")
|
|
else:
|
|
symlink_overwrite("/dev/null",f"/etc/systemd/system/getty@{terminal}.service")
|
|
symlink_overwrite("/dev/null",f"/etc/systemd/system/autovt@{terminal}.service")
|
|
|
|
start_services.append(f"autoterminal-{terminal}.service")
|
|
# reload systemd to allow the new config to take effect
|
|
subprocess.run(["/usr/bin/systemctl", "daemon-reload"])
|
|
# explicitly start new services (after daemon-reload): systemd can't update dependencies while starting
|
|
for s in start_services:
|
|
subprocess.run(["/usr/bin/systemctl", "--no-block", "start", s])
|
|
|
|
# ==============================================================================
|
|
# End of the script
|
|
# ==============================================================================
|
|
print(f"====> Script {sys.argv[0]} completed with {errcnt} errors ...")
|
|
sys.exit(errcnt)
|