sabotage linux rootfs image tuning

tested on slack150

cloud image tuning

ln -s sabotage-stage1 lala

    rm -rf lala/etc/service/tty1/
    rm -rf lala/etc/service/tty2/
    rm -rf lala/etc/service/tty3/
    rm -rf lala/etc/service/tty4/

    rm -rf lala/etc/service/wpa_supplicant/
    rm -rf lala/opt/wpa-supplicant/

    cp -pi lala/etc/rc.boot lala/etc/rc.boot.dist
    chmod -x lala/etc/rc.boot.dist
    vi lala/etc/rc.boot

    (remove that hotplug thing lines 14 and 22)

    (remove call to hwclock)

    (get rid of the `/tmp/` write-test condition right after rw=true)

    cp -pi lala/etc/rc.shutdown lala/etc/rc.shutdown.dist
    chmod -x lala/etc/rc.shutdown.dist
    vi lala/etc/rc.shutdown

    (remove the hwclock call from there also)

    cp -pi lala/etc/profile lala/etc/profile.dist
    vi lala/etc/profile

TZ="Europe/Moscow"
#TZ="Europe/Paris"

default password is sabotage but that’s already too complicated to remember – anyhow it might even be safer not to have a password at all as long as you do not allow empty passwords

    ls -lhF lala/etc/shadow
    cp -pi lala/etc/shadow lala/etc/shadow.dist
    chroot lala/ passwd -d root
    diff -bu lala/etc/shadow.dist lala/etc/shadow

docker-specific

rm -rf lala/etc/service/ttyS0/

xen-specific

see guest-sabotage