61e1a1335c
Convert 14 config files from the legacy init script format (plain-text commands) to the systemd-style TOML .service format. The init daemon supports both formats; this eliminates the legacy path entirely so that all services use the richer, more structured TOML unit format. Key changes per config: - base.toml: split 00_base into 00_base.service (tmpdir) + 00_sudo.service (sudo daemon); remove redundant 00_drivers and 10_net (handled by existing .service files from the base recipe) - minimal.toml: split 30_console into 29_activate_console.service + 30_console.service + 31_debug_console.service - desktop-minimal.toml: convert 20_display and 30_console to .service, add 29_activate_console and 31_debug_console overrides - x11.toml: convert 10_dbus, 10_xenv, 20_orbital, 30_console - redoxer.toml: split 10_net into 10_smolnetd.service + 10_dhcpd.service, convert 30_redoxer - redbear-legacy-*.toml: update override references to .service paths - acid.toml, auto-test.toml, os-test.toml, sys-build.toml: direct conversions
70 lines
1.4 KiB
TOML
70 lines
1.4 KiB
TOML
# Desktop configuration using the Contain sandbox
|
|
|
|
include = ["../desktop.toml"]
|
|
|
|
# Override the default settings here
|
|
|
|
# General settings
|
|
[general]
|
|
# Filesystem size in MiB
|
|
# filesystem_size = 1024
|
|
|
|
# Package settings
|
|
[packages]
|
|
# example = {}
|
|
|
|
# Override orbital init to use contain_orblogin
|
|
[[files]]
|
|
path = "/usr/lib/init.d/20_orbital.service"
|
|
data = """
|
|
[unit]
|
|
description = "Orbital display (contain sandbox)"
|
|
requires_weak = ["00_base.target"]
|
|
|
|
[service]
|
|
cmd = "orbital"
|
|
args = ["contain_orblogin", "launcher"]
|
|
envs = { VT = "3" }
|
|
type = "oneshot_async"
|
|
"""
|
|
|
|
# Override console init to use contain
|
|
[[files]]
|
|
path = "/usr/lib/init.d/30_console.service"
|
|
data = """
|
|
[unit]
|
|
description = "Console terminals (contained)"
|
|
requires_weak = ["20_orbital.service"]
|
|
|
|
[service]
|
|
cmd = "getty"
|
|
args = ["--contain", "2"]
|
|
type = "oneshot_async"
|
|
respawn = true
|
|
"""
|
|
|
|
[[files]]
|
|
path = "/usr/lib/init.d/31_debug_console.service"
|
|
data = """
|
|
[unit]
|
|
description = "Debug console (contained)"
|
|
requires_weak = ["30_console.service"]
|
|
|
|
[service]
|
|
cmd = "getty"
|
|
args = ["--contain", "/scheme/debug/no-preserve", "-J"]
|
|
type = "oneshot_async"
|
|
respawn = true
|
|
"""
|
|
|
|
[[files]]
|
|
path = "/etc/contain.toml"
|
|
data = """
|
|
pass_schemes = ["rand", "null", "tcp", "udp", "thisproc", "pty", "orbital", "display.vesa"]
|
|
sandbox_schemes = ["file"]
|
|
files = ["file:/dev/null"]
|
|
rofiles = ["file:/etc/passwd", "file:/etc/hostname", "file:/etc/localtime"]
|
|
dirs = ["file:/tmp"]
|
|
rodirs = ["file:/bin", "file:/ui"]
|
|
"""
|