mirror/bazzite
1
0
Fork 0
mirror of https://github.com/ublue-os/bazzite.git synced 2025-03-29 22:20:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(virt): Enhance service setup and restrict root execution for virtualization script (#2116)

Browse Source 
* fix(service): enhance bazzite-libvirtd-setup.service to restore SELinux context

* fix(virt): ensure user doesnt run setup-virtualization as root

* fix(virt): create /var/log/libvirt
This commit is contained in:
Zeglius 2025-01-19 21:26:33 +01:00 committed by GitHub
parent 40bc1fba97
commit 02e3e9ac63
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
system_files/desktop/shared/usr/lib/systemd/system/bazzite-libvirtd-setup.service
View File

@ -6,7 +6,7 @@ ConditionPathExists=/usr/lib/systemd/system/libvirtd.service
[Service]
Type=oneshot
# TODO: Rewrite this whenever systemd allows to queue ephemeral commands for next boot without modifying kernel args
ExecStart=/usr/bin/bash -c "systemctl enable --now libvirtd; systemctl disable %n"
ExecStart=/usr/bin/bash -c "systemctl enable --now libvirtd; restorecon -Rv /var/log/libvirt /var/lib/libvirt; systemctl disable %n"
[Install]
WantedBy=multi-user.target

1
system_files/desktop/shared/usr/lib/tmpfiles.d/bazzite-libvirt.conf Normal file
View File

@ -0,0 +1 @@
d /var/log/libvirt 0700 root root - -

4
system_files/desktop/shared/usr/share/ublue-os/just/84-bazzite-virt.just
View File

@ -4,6 +4,10 @@
setup-virtualization ACTION="":
#!/usr/bin/bash
source /usr/lib/ujust/ujust.sh
if [[ $(id -u) -eq 0 ]]; then
echo "Please do not run this command as root"
exit 1
fi
# Check if we are running on a Steam Deck
if /usr/libexec/hwsupport/valve-hardware; then
echo "${red}${b}WARNING${n}: Virtualization is not properly supported on Steam Deck by Valve"