ISO and VM images still ship the fab bootstrap's machine-id #24

Closed
opened 2026-09-30 07:31:15 -03:00 by marcos-mendez · 1 comment
marcos-mendez commented 2026-09-30 07:31:15 -03:00 (Migrated from github.com)

buildtasks#15 empties /etc/machine-id in every bt-layer layer, which covers the tar.zst that keel assemble builds. bt-container, bt-iso and bt-vm build from the ISO and do not pass through bt-layer, so an ISO install or a VM image still carries the bootstrap's id (f0e97605...) unless the installer regenerates it. Check tkl-installer and apply the same reset (empty file, /var/lib/dbus/machine-id symlink) where Keel ships those images. Also from the review: reword the comment at bin/layer-lib:583 (a first boot only enables units), add a test for the child-layer case in tests/layer, and decide whether an empty 0644 file should be reset to 0444.

buildtasks#15 empties /etc/machine-id in every bt-layer layer, which covers the tar.zst that keel assemble builds. bt-container, bt-iso and bt-vm build from the ISO and do not pass through bt-layer, so an ISO install or a VM image still carries the bootstrap's id (f0e97605...) unless the installer regenerates it. Check tkl-installer and apply the same reset (empty file, /var/lib/dbus/machine-id symlink) where Keel ships those images. Also from the review: reword the comment at bin/layer-lib:583 (a first boot only enables units), add a test for the child-layer case in tests/layer, and decide whether an empty 0644 file should be reset to 0444.
marcos-mendez commented 2026-10-01 16:47:34 -03:00 (Migrated from github.com)

Fixed by Keel-Linux/buildtasks#16: ISO and ISO-derived outputs reset /etc/machine-id (empty, 0444, D-Bus link) before the squashfs is built, with a check on the built ISO. A real install from the ISO is still to be tested.

Fixed by Keel-Linux/buildtasks#16: ISO and ISO-derived outputs reset /etc/machine-id (empty, 0444, D-Bus link) before the squashfs is built, with a check on the built ISO. A real install from the ISO is still to be tested.
Sign in to join this conversation.
No description provided.