From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7171373366228549632 X-Received: by 2002:a05:600c:a3a2:b0:3cf:7267:5b40 with SMTP id hn34-20020a05600ca3a200b003cf72675b40mr41146198wmb.164.1669715476336; Tue, 29 Nov 2022 01:51:16 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:f211:0:b0:3cf:afd2:ab84 with SMTP id s17-20020a1cf211000000b003cfafd2ab84ls7659625wmc.2.-pod-control-gmail; Tue, 29 Nov 2022 01:51:15 -0800 (PST) X-Google-Smtp-Source: AA0mqf4qlSyAgVzmlL5F4t3HFiS7vl9cAppP/WF639NFaoyREAB+vkOHxel7vKgNkRY4qq/Wv9dV X-Received: by 2002:a05:600c:1e25:b0:3d0:31c9:1d77 with SMTP id ay37-20020a05600c1e2500b003d031c91d77mr23967910wmb.113.1669715475217; Tue, 29 Nov 2022 01:51:15 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1669715475; cv=pass; d=google.com; s=arc-20160816; b=qz2qAZfOm1tbFYJJjpTlPUm+4CfxRMd6toia1JBSE5dBCBpJh9d6mFGwdtctSdBhws ZXATtqi0LqoOoOK0hq8A7LxvbZADLOuW3Ci0A39/WA+fmXVMjqNdVivj0liYE/LaSlrq n+ck6/TsmmUGmP8TG8qDV0zbcavokq7kvhZAHuMZHgnkK2piclZbhOeNkf2joO63yEEy ZFAGOFUU9B+dnTitd7yd6djJEUizFwsnLNUfBYrnJOEu9q2W2cZeiaoRXGN4Gl48JHy0 C+bc6XEamnsTvszyw6pTUyIcrTW+2zcCKP92f5m+05U2keIHoAl45CKe51MH4E2A0fcd elaA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:content-transfer-encoding:organization:subject:from:to :content-language:user-agent:date:message-id:dkim-signature; bh=uwpOB3qhxOXcNH8IX4z2JJpbeVnjdQG1J/lxT7ucWQ4=; b=c9RSQc+aN1LpxrOt+mIBS0rn+ZsfWPCS5EaIF/pVc9MY3OUTV7SkiT221vcuaQnTk+ p/cnTq+TjXYXKSqTwZZr0XJukTVGayTgfx5QYy+OvP7wClODO6AU4aHrdmaG9Jhzqnj0 8qXuXl7j4T2sO/0cuPcExCuIpAXRDGg1T7BYQw90mR+iWFYLphFirFJ6ATGm1t4qQqmv SmaXV/OhufVn6//FdHlQD0ZYN3znynasVsojPhz18fLXUmc4s25oIcpf3Z448gtcVdDv MS9kP+VkiYSCHAjhYOcvFIt+EGDPuPtTN3d8jFAzJec/n/YDxuDncvq3qyQ4sTH8jmy8 D5+Q== ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZOAyr1TF; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of quirin.gylstorff@siemens.com designates 40.107.6.64 as permitted sender) smtp.mailfrom=quirin.gylstorff@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-db3eur04on2064.outbound.protection.outlook.com. [40.107.6.64]) by gmr-mx.google.com with ESMTPS id 66-20020a1c1945000000b003cfc33e8333si87080wmz.4.2022.11.29.01.51.15 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Nov 2022 01:51:15 -0800 (PST) Received-SPF: pass (google.com: domain of quirin.gylstorff@siemens.com designates 40.107.6.64 as permitted sender) client-ip=40.107.6.64; Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZOAyr1TF; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of quirin.gylstorff@siemens.com designates 40.107.6.64 as permitted sender) smtp.mailfrom=quirin.gylstorff@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OFStPTLnQ/LzFX7XxovbQmuYowlh+1rAZHfE8SQbxPQZ1LlmNM2es/RpZm57AexoLUNuKjSu5MUpxbTS7/2lGtvP9fOPom6UzHgyctJX25ZlMHXrsP8yhH6hLWOiB64p9l04fWESkwrkQJgznLSreIc4jExjzTrEjRNSkXDGQJ1orejNWsB1Fvuvo8hBNDTQwraypeMR7MILj/PL43SpV8T24wFl01w+/zGRJYowEeXYKmfQpXstfQcLeHKiaJ5gmronBqu1sFqmiiTdKV+ihV8Uvvv3db0pio1RsFQoUKKTkMcPoqis/lajsm3SEa1eHj0cOBqYkL9ef9ciZYYxFA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=uwpOB3qhxOXcNH8IX4z2JJpbeVnjdQG1J/lxT7ucWQ4=; b=Wr033pEiTnsCUOCuaG1vSvAxJRLvcJcblosrn7ZrZdMyg/7DFWoJDSPTSHzjgWYkI8nfa+RnM+rOxH5HmnorDs/thNGyVVyoWpDw2BsKr/6pvpoAVcaqmF6/Wqy1pDFg70li51eyMgVOQwiwypRIzJ4BFvaTGnUi5Xsm0NYyflGmgtUf8bWCqviGmUnH94gCpxr9gh4cEYO0JXFHrlFgi7vvXmQfDfJ8xmqZU3ds5d5/IWllspbzH9xbZuGvlxQvep9VUF/WQdCIQ3m4QR5nhduTo3y9L9wA/tCrx/2OgulU9yfiDf/zNfmdaHvBxWJ8whHM16vTmsx43LHxdaOTKA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uwpOB3qhxOXcNH8IX4z2JJpbeVnjdQG1J/lxT7ucWQ4=; b=ZOAyr1TFLJPWD2+wxye2ssvsle5Tdm32gJlARMJKn4PfskXEiA6gw7fK4NKaaykXBrK5ehPi5JBGUjjkgRb2eS0Dp+IWJBAd/zlKz5eDhns37tl5GIDeoZxz4MUJX2xTScyJ9NWiluSyUBVT3fxkRo/nLTohNeEM89uLXrGkh31oiShu50DtGMn9BZbZPD6j0PT3mRYu4WmxpH9wwjA4dE9vhAY/IDa9KEGhnI5aiNJgrItkHqmvuK8yza/8yQMJEfS4P+zUSKZ6Vne28FBixh7R2gVDdaALAYZUoJKocJjFNI/EAUXizhzkNZY+Af+F4beEPrPX2o0+qQNWu9QBQQ== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=siemens.com; Received: from AM9PR10MB4085.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:1f9::22) by GV2PR10MB6552.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:b1::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5857.21; Tue, 29 Nov 2022 09:51:14 +0000 Received: from AM9PR10MB4085.EURPRD10.PROD.OUTLOOK.COM ([fe80::793f:57e:21e9:3741]) by AM9PR10MB4085.EURPRD10.PROD.OUTLOOK.COM ([fe80::793f:57e:21e9:3741%3]) with mapi id 15.20.5857.023; Tue, 29 Nov 2022 09:51:13 +0000 Message-ID: Date: Tue, 29 Nov 2022 10:50:57 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.5.0 Content-Language: en-US, de-DE To: isar-users , "Moessbauer, Felix (T RDA IOT SES-DE)" , "Kiszka, Jan (CT RDA IOT SES-DE)" From: Gylstorff Quirin Subject: Systemd first boot with rw rootfs Organization: Siemens Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-ClientProxiedBy: FR3P281CA0063.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:4b::13) To AM9PR10MB4085.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:1f9::22) Return-Path: quirin.gylstorff@siemens.com MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM9PR10MB4085:EE_|GV2PR10MB6552:EE_ X-MS-Office365-Filtering-Correlation-Id: e95bb6da-5380-4d10-8f1b-08dad1ef4083 X-LD-Processed: 38ae3bcd-9579-4fd4-adda-b42e1495d55a,ExtAddr X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM9PR10MB4085.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230022)(4636009)(39860400002)(376002)(136003)(366004)(396003)(346002)(451199015)(2906002)(83380400001)(36756003)(2616005)(41300700001)(5660300002)(186003)(8936002)(31696002)(86362001)(38100700002)(82960400001)(110136005)(316002)(6636002)(6506007)(478600001)(966005)(6512007)(6486002)(36916002)(31686004)(66476007)(66946007)(6666004)(8676002)(66556008)(43740500002)(45980500001);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?NFNBYStUeUdJM3lmTUR6a1VFRUZGUVhadzRXc05kRDJHTUJzRnR2T0RTang2?= =?utf-8?B?cHorYlBYTGZiTEpDUnY3R0RyRVJ5N0JaOVFwV1B1ZkN3WUtBTUp0WGVQeVlD?= =?utf-8?B?VDN0aW5CYnQ0cThvUkVOZGJndTJXeHJNZ1JpUTZVTjBmS2F4Q01xSGI3WXF4?= =?utf-8?B?V0JUVFRiTzF5TVBHZmdBNFZwd05HczVKOE9WVjZTZi81dVFncXR2VGU2b1Zq?= =?utf-8?B?U3U5VFFKanlaMkt4WjlVNVVJcTdmV0VWdWN2QURhVHJRaUdCL29KTm9SR2R1?= =?utf-8?B?eHBJdnArZjVwc3hIeERScHg3Q0NsakpiVmpJTXB5Q0xFcktpTlhMb3V1cmxm?= =?utf-8?B?TEdtNVdkNisrYUhqVUlYb3dBWWN2YXI5cis1WEkzUnlSOWRqTExmSklWWE1v?= =?utf-8?B?VDJBTml4UnRVdWJDS0I3RVhOWms3aHB6UUw0akc0cUdRYVg3VXJodFV4RmJK?= =?utf-8?B?OEJ4TytPTy9tUi9LZmNJZU16WlZpU0V6aDl3SEFUTURWdzVjTEU3Vkt3d3Fn?= =?utf-8?B?Y1lTTTZ4WUZMMmo5RGExWVdpazcxV2NuWG0vQ05MSEY1VzMxRWhFd0JZZDR6?= =?utf-8?B?R09LWWtMMGNiS29DOTNRQjZIeXhqOUNIN042YkhUTkZHNUhCbmVpaG8yaStD?= =?utf-8?B?MnRLZXJESTdydTNTVDB3L1VaUWJGbHk1dXFMcWxjVHNCOTBHVnpqSkQ1MlRv?= =?utf-8?B?SHhmRERrN29WK3lSeStaUUc4cTJTaW5PUkNxeWZCSDhTT2lXTVlQVkNUSEdV?= =?utf-8?B?NU42TEFSSUFEM0w4ODE4VWVOT09SYmNNZ09UYjhrU203dXVzUXV1bUZFNG42?= =?utf-8?B?K1FkVHF5Tzh5MnRhMjhWakk2Q2sxV2k0WHUwRVhqaWtXZTJuZ2hpaERzY0hw?= =?utf-8?B?S0RHMGIrcWt2TXJBdGY4TjZHVjRmRk16OVB4MS8vVFY4NTdEYnpnUHhSYmR5?= =?utf-8?B?QlcxNUtia3dBaGlocjJ6RHgzWDVCeUZzTmIyYVNlZi9vNHF3U3VHTTZKWXpr?= =?utf-8?B?K1lnc1NkaUVxUFordjJ5NnRTbGlNZDN6cDlLaG1IaTZXVExhWnE5U2tEMmhj?= =?utf-8?B?K2thblNWanViUmFUdnR4M1pKTWQ2RnRCOE93UTFMOTNjcUUxQmRrak1rZVFQ?= =?utf-8?B?Wk51ajhlQk1HanZOMDBPWHFwNDBxU1dOR3FaSDBzbStHTUhjOThoWEtSWm52?= =?utf-8?B?K2tmZHUxVGU1MUJwTDlDeUJYTVpYYjZWczZKSEFYdXA4TXA0M1lqM01TV1Zw?= =?utf-8?B?dVpMSXhXUnN4Zis4TTFlVTlVeXRUK3A3MkEyZzR4QlpzRDdCRC9pU3R0U2hh?= =?utf-8?B?YzNwajlZenNYUGlXRmVHSndmenJUejZUOWxtOVY5Y09BczlIdWdXWUtxcDFT?= =?utf-8?B?QmtMQjVJV1ZSbVNMSUYwMEFZRGYza0pKR0RraWttaktsSFBhYkZRRHhieXlW?= =?utf-8?B?L3RFR2M0YjhvcXNTaG5tY0lVUGIrQUsrQjBWcjNLdGNPNEFPMERtckRkVndK?= =?utf-8?B?b0FGTnZ3WHp4WDFmQTNDSS82bFlrVThmT2VlNW9hdHR5TXc0c0VVNStzQUFC?= =?utf-8?B?UlZkU0FhblVBRkpnczN1M2NOOHVPNXRqT3VPcHM0bnJtLy9ScFozQ0toT2dn?= =?utf-8?B?SDFVSld5c0J0L2JjMFZsdHhSaE9HMUNnUm8wU2UxMUd0b1gyYjBsaVNXUW9B?= =?utf-8?B?TWdXRWRWb0NUTEhJNU84bXhxU2ZIa05veENNOThoOFB5dzFISmdIMGgxT0ZE?= =?utf-8?B?TEttemwwcmlQTTg1cHpIenZ3dmxBRmErQ0QwQTRGOXp4Q0M5bUNsQkh3eWYv?= =?utf-8?B?VmVBanNZU3lLWkZyL2xCYWlkMnVuVnR3RGdtMjd4M1M0SVdOSmdpVjFTUi9V?= =?utf-8?B?TS8vWXBUblpoUlhrVUdFRmlzWURhWXVSV2N2SDBualpDWU9UN28rTFhoWG15?= =?utf-8?B?VXZxTHpXZlBONnRMc09EZDNra0djaWlMQ0VtS0FOeXBUUkhKOHo4K1ZTMWt1?= =?utf-8?B?UUdoTUcrTGc0MFNOWXhSOGp0RDB5d054SlQ4bVFleWVkV2lQemFBWDR6aXE1?= =?utf-8?B?b2NBQVVZeG9JS0tKYTZEWUxoUjFxbGJNSFpQQWxwZ3NGbCtQL3VXVWZGUVJk?= =?utf-8?B?cnMvdVRYLzZCMEJSNkNTRGYxMUNzbHB1K3N4NVdHZEQyL2hvTmI5ZGFPdEFF?= =?utf-8?B?eE9zY1l3QUdmeWlYWk9SUm8zQlBvY01xeW9RUVFmeEdMT0JJUGRTaEk1dFl0?= =?utf-8?Q?egDaTtmg4qxt9Hdit4GNS3F3b7/62tIhbeBoybtaXA=3D?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: e95bb6da-5380-4d10-8f1b-08dad1ef4083 X-MS-Exchange-CrossTenant-AuthSource: AM9PR10MB4085.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Nov 2022 09:51:13.8911 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: aIeuYSmShtCg15uEv/S/kbyAYZtC9zR/ha7iXRpUV9xetWn0epBMQHzZpZOibLEhaJNkbMTENgyBM5VgVXEFF6Kju0yzFcBh7Sm/l942Qrc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR10MB6552 X-TUID: ghJJ6tHI8gaM Hi all, currently we trigger a first boot by removing the machine-id from the root file system[1]. In case of a writable root filesystem systemd will enable all units in /usr/lib/systemd/system with the vendor preset enable. This will also enable units in /usr/lib/systemd/system which are disable during the installation like ssh.socket[2]. This will not happen in a Debian installation as first boot is the installation boot as defined by: "For normal operating system installations, where a custom image is created for a specific machine, /etc/machine-id should be populated during installation."[3] If a first boot is not detected, e.g. by using an empty /etc/machine-id, the units are started as defined during the installation [4]. Another possibility is to mask the units during the the installation. [1]: https://github.com/ilbers/isar/blob/49854b625a6b0dc9339a33c3b4d78b2ce418b377/meta/classes/image-postproc-extension.bbclass#L57 [2]: https://gitlab.com/cip-project/cip-core/isar-cip-core/-/issues/48 [3]: https://manpages.debian.org/bullseye/systemd/machine-id.5.en.html#INITIALIZATION [4]: https://manpages.debian.org/bullseye/systemd/machine-id.5.en.html#FIRST_BOOT_SEMANTICS -- With best regards, Quirin Gylstorff Siemens AG Technology