From 6b5ecb451643cb781ecad3810c1bbea52b4a236f Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Fri, 27 Jun 2025 10:00:03 +0300 Subject: [PATCH] install: also ensure DNS (resolved,unbound) and network (networkd,NetworkManager,iwd) never stop trying to start --- install | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/install b/install index 0bda742f..a5945290 100755 --- a/install +++ b/install @@ -161,16 +161,22 @@ if [ "$(id -u)" == "0" ]; then cp etc/ssh/sshd_config.d/00-basic-security.conf /etc/ssh/sshd_config.d/ chmod -v a+r /etc/ssh/sshd_config.d/*.conf - # Systemd configuration directories. No configuration placed, so safe. + # Systemd configuration directories. SECURITY WARNINGS! mkdir -vp /etc/systemd/{system,system-preset,user,network}/ mkdir -vp /etc/systemd/system/{app.slice.d,service.d}/ - mkdir -vp /etc/systemd/system/{ssh,sshd,sshguard,tor,yggdrasil}.service.d/ + mkdir -vp /etc/systemd/{coredump,login,oomd,journald,resolved,system,timesyncd}.conf.d/ + mkdir -vp /etc/systemd/system/{ssh,sshd,sshguard,systemd-resolved,systemd-networkd,NetworkManager,iwd,unbound,tor,yggdrasil}.service.d/ + # SECURITY WARNING! cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/ssh.service.d/ cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/sshd.service.d/ cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/sshguard.service.d/ + cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/systemd-resolved.service.d/ + cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/systemd-networkd.service.d/ + cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/NetworkManager.service.d/ + cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/iwd.service.d/ + cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/unbound.service.d/ cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/tor.service.d/ cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/yggdrasil.service.d/ - mkdir -vp /etc/systemd/{coredump,login,oomd,journald,resolved,system,timesyncd}.conf.d/ if hash systemctl 2> /dev/null; then systemctl daemon-reload