Disable mitigations

aleskandro · Nov 12, 2023 · b15c310 · b15c310
1 parent f587974
commit b15c310
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/overlay.d/05-systemd/usr/lib/systemd/system/kargs-mitigations.service b/overlay.d/05-systemd/usr/lib/systemd/system/kargs-mitigations.service
@@ -0,0 +1,16 @@
+[Unit]
+Description="Disable mitigations"
+Documentation=
+After=network-online.target
+ConditionPathExists=!/var/.mitigations-kargs
+
+[Service]
+Type=oneshot
+RemainAfterExit=true
+ExecStartPre=/usr/bin/rpm-ostree kargs --replace=mitigations=off
+ExecStart=/usr/bin/touch /var/.mitigations-kargs
+Restart=on-failure
+RestartSec=30
+
+[Install]
+WantedBy=multi-user.target
diff --git a/overlay.d/05-systemd/usr/lib/systemd/system/system-preset/90-mitigations.preset b/overlay.d/05-systemd/usr/lib/systemd/system/system-preset/90-mitigations.preset
@@ -0,0 +1 @@
+enable kargs-mitigations.service