diff options
| author | unitexe <unitexe70@gmail.com> | 2026-01-03 15:23:38 -0600 |
|---|---|---|
| committer | unitexe <unitexe70@gmail.com> | 2026-01-03 15:39:21 -0600 |
| commit | f2738c399dffe325b5add7b912d9562484f071e3 (patch) | |
| tree | bc83ab2a3decfa9ff38a57b3cd4c8c76ad9743b3 /meta-unit-core/recipes-core/packagegroups | |
| parent | a94f9b9fdf29d0f27349599aa73a585ba78949d6 (diff) | |
Introduce core-image-unit
- Add unitexe user
- Configured for public key authentication SSH
- Part of sudoers (via drop-in) so admin tasks can be performed
- No root login via SSH or TTY allowed
- TTY is restricted via PAM
- Added misc. utilities
Diffstat (limited to 'meta-unit-core/recipes-core/packagegroups')
4 files changed, 32 insertions, 0 deletions
diff --git a/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-networking.bb b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-networking.bb new file mode 100644 index 0000000..e4353e1 --- /dev/null +++ b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-networking.bb @@ -0,0 +1,6 @@ +SUMMARY = "Unit networking packages" + +inherit packagegroup + +RDEPENDS:${PN}:append = " curl" +RDEPENDS:${PN}:append = " openssh" diff --git a/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-system.bb b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-system.bb new file mode 100644 index 0000000..60bf072 --- /dev/null +++ b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-system.bb @@ -0,0 +1,10 @@ +SUMMARY = "Unit system packages" + +inherit packagegroup + +RDEPENDS:${PN}:append = " kernel-modules" + +# The preferred default for unit images (is also default for arch). +# Provides high performance and reliability while being drop in +# compatible. +RDEPENDS:${PN}:append = " dbus-broker" diff --git a/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-users.bb b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-users.bb new file mode 100644 index 0000000..8cc7faf --- /dev/null +++ b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-users.bb @@ -0,0 +1,10 @@ +SUMMARY = "Unit users" + +inherit packagegroup + +# TTY root login restriction, among other things. +# Is needed for rootless containers too. +RDEPENDS:${PN}:append = " libpam" + +# Add admin user. +RDEPENDS:${PN}:append = " add-user-unitexe" diff --git a/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-utils.bb b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-utils.bb new file mode 100644 index 0000000..1cbb0ff --- /dev/null +++ b/meta-unit-core/recipes-core/packagegroups/packagegroup-unit-utils.bb @@ -0,0 +1,6 @@ +SUMMARY = "Unit utility packages" + +inherit packagegroup + +RDEPENDS:${PN}:append = " jq" +RDEPENDS:${PN}:append = " tree" |