Current Dir: /etc/
[DIR] alternatives [ delete | rename ]
[DIR] apache2 [ delete | rename ]
[DIR] apparmor [ delete | rename ]
[DIR] apparmor.d [ delete | rename ]
[DIR] apport [ delete | rename ]
[DIR] apt [ delete | rename ]
[DIR] bash_completion.d [ delete | rename ]
[DIR] binfmt.d [ delete | rename ]
[DIR] byobu [ delete | rename ]
[DIR] ca-certificates [ delete | rename ]
[DIR] clamav [ delete | rename ]
[DIR] cloud [ delete | rename ]
[DIR] console-setup [ delete | rename ]
[DIR] credstore [ delete | rename ]
[DIR] credstore.encrypted [ delete | rename ]
[DIR] cron.d [ delete | rename ]
[DIR] cron.daily [ delete | rename ]
[DIR] cron.hourly [ delete | rename ]
[DIR] cron.monthly [ delete | rename ]
[DIR] cron.weekly [ delete | rename ]
[DIR] cron.yearly [ delete | rename ]
[DIR] cryptsetup-initramfs [ delete | rename ]
[DIR] dbus-1 [ delete | rename ]
[DIR] dconf [ delete | rename ]
[DIR] default [ delete | rename ]
[DIR] depmod.d [ delete | rename ]
[DIR] dhcp [ delete | rename ]
[DIR] dkimkeys [ delete | rename ]
[DIR] dpkg [ delete | rename ]
[DIR] emacs [ delete | rename ]
[DIR] environment.d [ delete | rename ]
[DIR] fail2ban [ delete | rename ]
[DIR] fonts [ delete | rename ]
[DIR] fwupd [ delete | rename ]
[DIR] ghostscript [ delete | rename ]
[DIR] gnutls [ delete | rename ]
[DIR] groff [ delete | rename ]
[DIR] grub.d [ delete | rename ]
[DIR] gss [ delete | rename ]
[DIR] gtk-3.0 [ delete | rename ]
[DIR] ImageMagick-6 [ delete | rename ]
[DIR] init [ delete | rename ]
[DIR] init.d [ delete | rename ]
[DIR] initramfs-tools [ delete | rename ]
[DIR] insserv.conf.d [ delete | rename ]
[DIR] iproute2 [ delete | rename ]
[DIR] iscsi [ delete | rename ]
[DIR] kernel [ delete | rename ]
[DIR] landscape [ delete | rename ]
[DIR] ld.so.conf.d [ delete | rename ]
[DIR] ldap [ delete | rename ]
[DIR] letsencrypt [ delete | rename ]
[DIR] libblockdev [ delete | rename ]
[DIR] libibverbs.d [ delete | rename ]
[DIR] libnl-3 [ delete | rename ]
[DIR] libpaper.d [ delete | rename ]
[DIR] lighttpd [ delete | rename ]
[DIR] logcheck [ delete | rename ]
[DIR] logrotate.d [ delete | rename ]
[DIR] lvm [ delete | rename ]
[DIR] mail [ delete | rename ]
[DIR] mc [ delete | rename ]
[DIR] mdadm [ delete | rename ]
[DIR] ModemManager [ delete | rename ]
[DIR] modprobe.d [ delete | rename ]
[DIR] modules-load.d [ delete | rename ]
[DIR] monit [ delete | rename ]
[DIR] multipath [ delete | rename ]
[DIR] mysql [ delete | rename ]
[DIR] needrestart [ delete | rename ]
[DIR] netplan [ delete | rename ]
[DIR] network [ delete | rename ]
[DIR] networkd-dispatcher [ delete | rename ]
[DIR] newt [ delete | rename ]
[DIR] nginx [ delete | rename ]
[DIR] openal [ delete | rename ]
[DIR] opt [ delete | rename ]
[DIR] PackageKit [ delete | rename ]
[DIR] pam.d [ delete | rename ]
[DIR] perl [ delete | rename ]
[DIR] php [ delete | rename ]
[DIR] pki [ delete | rename ]
[DIR] plymouth [ delete | rename ]
[DIR] pm [ delete | rename ]
[DIR] polkit-1 [ delete | rename ]
[DIR] pollinate [ delete | rename ]
[DIR] postfix [ delete | rename ]
[DIR] postgresql [ delete | rename ]
[DIR] postgresql-common [ delete | rename ]
[DIR] ppp [ delete | rename ]
[DIR] profile.d [ delete | rename ]
[DIR] pulse [ delete | rename ]
[DIR] python3 [ delete | rename ]
[DIR] python3.12 [ delete | rename ]
[DIR] qemu [ delete | rename ]
[DIR] rc0.d [ delete | rename ]
[DIR] rc1.d [ delete | rename ]
[DIR] rc2.d [ delete | rename ]
[DIR] rc3.d [ delete | rename ]
[DIR] rc4.d [ delete | rename ]
[DIR] rc5.d [ delete | rename ]
[DIR] rc6.d [ delete | rename ]
[DIR] rcS.d [ delete | rename ]
[DIR] redis [ delete | rename ]
[DIR] resolvconf [ delete | rename ]
[DIR] rsyslog.d [ delete | rename ]
[DIR] security [ delete | rename ]
[DIR] selinux [ delete | rename ]
[DIR] sensors.d [ delete | rename ]
[DIR] sgml [ delete | rename ]
[DIR] skel [ delete | rename ]
[DIR] sos [ delete | rename ]
[DIR] ssh [ delete | rename ]
[DIR] ssl [ delete | rename ]
[DIR] sudoers.d [ delete | rename ]
[DIR] supercat [ delete | rename ]
[DIR] sysctl.d [ delete | rename ]
[DIR] sysstat [ delete | rename ]
[DIR] systemd [ delete | rename ]
[DIR] terminfo [ delete | rename ]
[DIR] tmpfiles.d [ delete | rename ]
[DIR] ubuntu-advantage [ delete | rename ]
[DIR] udev [ delete | rename ]
[DIR] udisks2 [ delete | rename ]
[DIR] ufw [ delete | rename ]
[DIR] update-manager [ delete | rename ]
[DIR] update-motd.d [ delete | rename ]
[DIR] update-notifier [ delete | rename ]
[DIR] usb_modeswitch.d [ delete | rename ]
[DIR] vim [ delete | rename ]
[DIR] vmware-tools [ delete | rename ]
[DIR] vulkan [ delete | rename ]
[DIR] X11 [ delete | rename ]
[DIR] xdg [ delete | rename ]
[DIR] xml [ delete | rename ]
[FILE] .pwd.lock [ edit | delete | rename ]
[FILE] .resolv.conf.systemd-resolved.bak [ edit | delete | rename ]
[FILE] .updated [ edit | delete | rename ]
[FILE] adduser.conf [ edit | delete | rename ]
[FILE] aliases [ edit | delete | rename ]
[FILE] aliases.db [ edit | delete | rename ]
[FILE] bash.bashrc [ edit | delete | rename ]
[FILE] bash_completion [ edit | delete | rename ]
[FILE] bindresvport.blacklist [ edit | delete | rename ]
[FILE] ca-certificates.conf [ edit | delete | rename ]
[FILE] ca-certificates.conf.dpkg-old [ edit | delete | rename ]
[FILE] crontab [ edit | delete | rename ]
[FILE] crypttab [ edit | delete | rename ]
[FILE] debconf.conf [ edit | delete | rename ]
[FILE] debian_version [ edit | delete | rename ]
[FILE] deluser.conf [ edit | delete | rename ]
[FILE] dhcpcd.conf [ edit | delete | rename ]
[FILE] e2scrub.conf [ edit | delete | rename ]
[FILE] ec2_version [ edit | delete | rename ]
[FILE] environment [ edit | delete | rename ]
[FILE] ethertypes [ edit | delete | rename ]
[FILE] fstab [ edit | delete | rename ]
[FILE] fuse.conf [ edit | delete | rename ]
[FILE] gai.conf [ edit | delete | rename ]
[FILE] gprofng.rc [ edit | delete | rename ]
[FILE] group [ edit | delete | rename ]
[FILE] group- [ edit | delete | rename ]
[FILE] gshadow [ edit | delete | rename ]
[FILE] gshadow- [ edit | delete | rename ]
[FILE] gssapi_mech.conf [ edit | delete | rename ]
[FILE] hdparm.conf [ edit | delete | rename ]
[FILE] host.conf [ edit | delete | rename ]
[FILE] hostname [ edit | delete | rename ]
[FILE] hosts [ edit | delete | rename ]
[FILE] hosts.allow [ edit | delete | rename ]
[FILE] hosts.deny [ edit | delete | rename ]
[FILE] inputrc [ edit | delete | rename ]
[FILE] issue [ edit | delete | rename ]
[FILE] issue.net [ edit | delete | rename ]
[FILE] ld.so.cache [ edit | delete | rename ]
[FILE] ld.so.conf [ edit | delete | rename ]
[FILE] legal [ edit | delete | rename ]
[FILE] libaudit.conf [ edit | delete | rename ]
[FILE] locale.alias [ edit | delete | rename ]
[FILE] locale.conf [ edit | delete | rename ]
[FILE] locale.gen [ edit | delete | rename ]
[FILE] localtime [ edit | delete | rename ]
[FILE] login.defs [ edit | delete | rename ]
[FILE] logrotate.conf [ edit | delete | rename ]
[FILE] lsb-release [ edit | delete | rename ]
[FILE] machine-id [ edit | delete | rename ]
[FILE] magic [ edit | delete | rename ]
[FILE] magic.mime [ edit | delete | rename ]
[FILE] mailcap [ edit | delete | rename ]
[FILE] mailcap.order [ edit | delete | rename ]
[FILE] mailname [ edit | delete | rename ]
[FILE] manpath.config [ edit | delete | rename ]
[FILE] mecabrc [ edit | delete | rename ]
[FILE] mime.types [ edit | delete | rename ]
[FILE] mke2fs.conf [ edit | delete | rename ]
[FILE] modules [ edit | delete | rename ]
[FILE] mtab [ edit | delete | rename ]
[FILE] multipath.conf [ edit | delete | rename ]
[FILE] nanorc [ edit | delete | rename ]
[FILE] netconfig [ edit | delete | rename ]
[FILE] networks [ edit | delete | rename ]
[FILE] nftables.conf [ edit | delete | rename ]
[FILE] nsswitch.conf [ edit | delete | rename ]
[FILE] opendkim.conf [ edit | delete | rename ]
[FILE] os-release [ edit | delete | rename ]
[FILE] overlayroot.conf [ edit | delete | rename ]
[FILE] overlayroot.local.conf [ edit | delete | rename ]
[FILE] pam.conf [ edit | delete | rename ]
[FILE] papersize [ edit | delete | rename ]
[FILE] passwd [ edit | delete | rename ]
[FILE] passwd- [ edit | delete | rename ]
[FILE] profile [ edit | delete | rename ]
[FILE] protocols [ edit | delete | rename ]
[FILE] resolv.conf [ edit | delete | rename ]
[FILE] rmt [ edit | delete | rename ]
[FILE] rpc [ edit | delete | rename ]
[FILE] rsyslog.conf [ edit | delete | rename ]
[FILE] screenrc [ edit | delete | rename ]
[FILE] sensors3.conf [ edit | delete | rename ]
[FILE] services [ edit | delete | rename ]
[FILE] shadow [ edit | delete | rename ]
[FILE] shadow- [ edit | delete | rename ]
[FILE] shells [ edit | delete | rename ]
[FILE] subgid [ edit | delete | rename ]
[FILE] subgid- [ edit | delete | rename ]
[FILE] subuid [ edit | delete | rename ]
[FILE] subuid- [ edit | delete | rename ]
[FILE] sudo.conf [ edit | delete | rename ]
[FILE] sudoers [ edit | delete | rename ]
[FILE] sudo_logsrvd.conf [ edit | delete | rename ]
[FILE] sysctl.conf [ edit | delete | rename ]
[FILE] timezone [ edit | delete | rename ]
[FILE] ucf.conf [ edit | delete | rename ]
[FILE] updatedb.conf [ edit | delete | rename ]
[FILE] usb_modeswitch.conf [ edit | delete | rename ]
[FILE] vconsole.conf [ edit | delete | rename ]
[FILE] vdpau_wrapper.cfg [ edit | delete | rename ]
[FILE] vtrgb [ edit | delete | rename ]
[FILE] wgetrc [ edit | delete | rename ]
[FILE] xattr.conf [ edit | delete | rename ]
[FILE] zsh_command_not_found [ edit | delete | rename ]
Viewing: /etc/overlayroot.conf
# This is the overlayroot config file
# By default, overlayroot is not enabled.
# To enable overlayroot:
# 1) edit the 'overlayroot' definition below
# 2) reboot
#
# Supported values:
# * overlayroot=tmpfs or overlayroot=tmpfs:PARAMETERS
# write all changes to a temporary (ram only) backing device
# A tmpfs mount will be created, and usable filesystem can
# grow to 1/2 available memory.
#
# available parameters:
# * see COMMON PARAMETERS
#
# examples:
# overlayroot=tmpfs
# overlayroot=tmpfs:swap=1
#
# * overlayroot=DEVICE or overlayroot=device:PARAMETERS
# mount DEVICE as overlayfs and write changes there
# device must already have kernel mountalbe filesystem on it.
#
# available parameters are:
# * dev: default: "" [REQUIRED]
# use given device for backing filesystem.
# Note, 'overlayroot=/dev/vdb' is translated to
# 'overlayrooot=device:dev=/dev/vdb'
# * timeout: default: 0
# if 'dev' provided does not exist, wait up to many seconds for
# it to appear.
# * see COMMON PARAMETERS
#
# examples:
# overlayroot=/dev/xvdb
# overlayroot=/dev/vdb
# overlayroot=device:dev=/dev/sdb,timeout=180
# overlayroot=device:dev=LABEL=my-flashdrive,timeout=180
#
# * overlayroot=crypt:PARAMETERS
# use an encrypted [dmcrypt] device as the backing device. Parameters
# are comma delimited key=value pairs.
#
# available parameters are:
# * dev: default: "" [REQUIRED]
# use given device for backing filesystem.
# * mapname: default: "secure"
# the name of the map device to be created in /dev/mapper
# * pass: default: ""
# if not provided or empty, password is randomly generated
# the generated password will be stored for recovery in
# /run/initramfs/overlayroot.passwd
# * fstype: default: "ext4"
# mapname=mapper,pass=foo,fstype=ext4,mkfs=1
# * mkfs: default: 1
# 0: never create filesystem
# 1: if pass is given and mount fails, create a new one
# if no pass given, create new
# 2: if pass is given and mount fails, fail
# if no pass given, create new
# * timeout: default: 0
# if 'dev' provided does not exist, wait up to many seconds for
# it to appear.
# * see COMMON PARAMETERS
#
# examples:
# crypt:mapname=mapper,pass=foo,fstype=ext4,mkfs=1,dev=vdb
# crypt:mapname=mapper,pass=foo,fstype=ext3,mkfs=1,dev=/dev/disk/by-label/my-jumpdrive,timeout=120
# crypt:dev=xvdb
#
# * overlayroot=disabled
# if set explicitly to 'disabled', or an empty string, then
# overlayroot will do nothing.
#
#
# COMMON PARAMETERS:
# The following parameters are supported for each of overlayroot=
# values above.
# * swap: default: 0
# allowed values: 0, 1
# indicate if swap partitions should be allowed. By default swap entries
# are removed from /etc/fstab to disable swap.
# Swap *files* are always disabled, independent of this setting.
#
# * recurse: default: 1
# allowed values: 0, 1
# indicate if all mounts should be made read-only, or just /.
# if set to 1, then all filesystems will be mounted read-only.
# if set to 0, only root will be set to read-only, and changes
# to other filesystems will be permenant. For example, if
# /home is on a separate partition from / and recurse set to 0
# then changes to /home will go through to the original device.
#
# * debug: default: 0
# allowed values: 0, 1
# enable debug output if set to 1
#
# * dir: default: "/overlay"
# the directory under the filesystem to use for writes
# default is to use top level directory. For example, use
# 'dir=my-tests/run1' and later 'dir=my-tests/run2'
#
# * driver: default: "auto"
# This can be 'overlay' or 'overlayfs'. It will affect which filesystem
# is used to provide the overlay and the entries in fstab.
# The default value is almost certainly correct.
#
# overlayroot_cfgdisk:
# * default: 'disabled'
# If this variable is set, it references a disk/filesystem that
# may exist, and include a 'overlayroot.conf' file in it's root directory
# If a such a device exists, then it's overlayroot.conf file can
# set overlayroot as above.
#
# examples:
# * overlayroot_cfgdisk="LABEL=OROOTCFG"
# * overlayroot_cfgdisk="/dev/vdb"
#
# Note: if you enable this setting, then you must be careful to be sure
# that no filesystems are created that match this without your
# knowledge. This is because code on that filesystem is executed
# as root in the initramfs environment.
#
# Notes:
# * This file is managed by dpkg as a conffile, so changes to it
# will force dpkg config file prompts on package updates that contain a
# change. Instead of putting changes here, put them in
# /etc/overlayroot.local.conf
# * you can pass the same 'overlayroot=' parameters on the kernel
# command line, and they will override any values set here.
# This includes 'overlayroot=' or 'overlayroot=disabled' to disable
# a value set in this file.
# * if you specify crypt:dev=/dev/vdb, then DATA WILL BE LOST
# on /dev/vdb. A safer value would be to use
# crypt:dev=/dev/vdb,pass=somepassword,mkfs=0
# However, you would then have to have previously set up the luks device.
# Do that like the following:
# $ MAPNAME="secure"; DEV="/dev/vdg"; PASSWORD="foobar"
# $ sudo wipefs -a $DEV
# $ printf "%s" "$PASSWORD" |
# sudo cryptsetup luksFormat "${$DEV}" --key-file -
# $ printf "%s" "$PASSWORD" |
# sudo cryptsetup luksOpen "${DEV}" "${MAPNAME}" --key-file -
# $ sudo mke2fs -t "ext4" "/dev/mapper/${MAPNAME}"
#
# Security Note:
# IT IS INSECURE TO SET THIS PASSWORD HERE IN THIS CLEARTEXT CONFIGURATION
# FILE OR ON THE KERNEL COMMAND LINE.
# Randomly generated passwords are more secure, but you won't be able to
# read your encrypted disk on reboot.
# Randomly generated passwords are generated by calculating the sha512sum
# of a concatenation of:
# - stat -L /dev/* /proc/* /sys/*
# + some unpredictability of access/modify times of a number of kernel
# files, directories, and block devices
# - /proc/sys/kernel/random/boot_id
# + 16-bytes uuid, consider this a 'salt'
# - /proc/sys/kernel/random/uuid
# + 16-bytes uuid, consider this psuedo randomness
# - /dev/urandom
# + 4096-bytes of psuedo randomness
# - $DEV
# + 4096-bytes from the head of the disk
# + security-paranoid users can write 4096-bytes of randomness to
# this device and specify mkfs=1 before rebooting into an
# crypt+overlayroot setup
# The result is stored in r-------- /dev/.initramfs/overlayroot.XXXXXXX,
# which is a tmpfs in memory.
overlayroot_cfgdisk="disabled"
overlayroot=""