Initial Commit

2026-09-15 15:24:03 -04:00
commit 4dc7086e7e
605 changed files with 101380 additions and 0 deletions
@@ -0,0 +1,33 @@
+# =====================================================================
+# Put a staged installation disc into the library.
+#
+#   systemctl start owuivm-insert@ubuntu.service
+#
+# The instance is the MACHINE ID, not a path. The desktop tool has
+# already copied the disc into /var/lib/owuivm/incoming, as the operator,
+# out of their own home - see the header of owuivm-insert-media for why
+# that is the only arrangement that works. All this unit does is check
+# the staged file and move it, which is a rename within one filesystem.
+#
+# ProtectHome stays ON. This never reads the operator's home; that is the
+# entire point of the staging step.
+# =====================================================================
+[Unit]
+Description=Insert the staged installation disc for %i
+
+[Service]
+Type=oneshot
+User=owuivmadm
+Group=owuivmadm
+RemainAfterExit=no
+UMask=0022
+ProtectSystem=strict
+# The staging directory, and the library it moves the disc into.
+ReadWritePaths=/var/lib/owuivm/iso /var/lib/owuivm/incoming
+ProtectHome=yes
+PrivateTmp=yes
+NoNewPrivileges=yes
+# A 6-8 GB disc has already been copied by this point; the move itself is
+# instant. This is only a backstop against a wedged filesystem.
+TimeoutStartSec=120
+ExecStart=/usr/local/libexec/owuivm-insert-media %i