Disable mitigations

aleskandro · Nov 13, 2023 · 0bb1a41 · 0bb1a41
1 parent 5c16ccc
commit 0bb1a41
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/overlay.d/05-systemd/usr/lib/systemd/system-preset/90-mitigations.preset b/overlay.d/05-systemd/usr/lib/systemd/system-preset/90-mitigations.preset
@@ -0,0 +1 @@
+enable kargs-mitigations.service
diff --git a/overlay.d/05-systemd/usr/lib/systemd/system/kargs-mitigations.service b/overlay.d/05-systemd/usr/lib/systemd/system/kargs-mitigations.service
@@ -0,0 +1,16 @@
+[Unit]
+Description=Disable mitigations
+Documentation=
+After=network-online.target
+ConditionPathExists=!/var/.mitigations-kargs
+
+[Service]
+Type=oneshot
+RemainAfterExit=true
+ExecStartPre=/usr/bin/rpm-ostree kargs --replace=mitigations=off
+ExecStart=/usr/bin/touch /var/.mitigations-kargs
+Restart=on-failure
+RestartSec=30
+
+[Install]
+WantedBy=multi-user.target