[file_systems] Boot a Usable Read-Only File System

LukeShortCloud / rootpages

Root Pages is a collection of easy-to-reference tutorials and guides primarily for Linux and other UNIX-like systems.

Other

56 stars 6 forks source link

Open LukeShortCloud opened 6 years ago

LukeShortCloud commented 6 years ago

tl;dr?

Mount / as read-only.
Temporary and log directories should use ramfs (avoid tmpfs as to not use swap partition).
Modify journald to use volatile memory (or set to "none" to turn off journald logging, not recommended).
- /etc/systemd/journald.conf
  - Storage=volatile
Disable the "systemd-random-seed" service that relies on writing a seed to the file system.

LukeShortCloud commented 2 years ago

Regarding the first step of mounting / as read-only, systemd now natively supports this with the systemd-volatile-root.service.