e95fbdcfad
Sometimes we need to fix minor issues like changing the key or fixing other small problem on live OS. We can ship this as a part of BSP package, but its handling should be made easy. This downloads script from CDN, verify its signature and executes after apt upgrade starts installing packages. * Record patch output to syslog * Enable armbian-live-patch as additional service and run patch mechanism at startup * Additional security check
25 lines
763 B
Desktop File
25 lines
763 B
Desktop File
# Armbian simple patch system service
|
|
# Sometimes we need to fix minor issues like changing the key or fixing other small problem on live OS.
|
|
# This downloads patch script from CDN, verify its signature and executes it at various stages
|
|
#
|
|
# Currently execute by: booting the system up, at apt upgrade stage, right before installing packages
|
|
#
|
|
# GH Action script for automatic signing and upload:
|
|
# https://github.com/armbian/os/tree/main/live-patch
|
|
|
|
[Unit]
|
|
Description=Armbian simple patch
|
|
Wants=time-sync.target
|
|
Before=time-sync.target
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=forking
|
|
ExecStart=/usr/lib/armbian/armbian-live-patch startup
|
|
ExecStop=/usr/lib/armbian/armbian-live-patch stop
|
|
RemainAfterExit=no
|
|
TimeoutStartSec=2m
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|