Lennart Poettering 78f81f02e8 boot: skip random seed handling if seed file is marked read-only ...

If the read-only FAT file attribute is set on /loader/random-seed,
don't update the seed file — and hence don't use it either, since a
seed we cannot update would be the same on every boot.

This gives users an explicit way to turn off random seed handling by
marking the file read-only, useful for example in pre-built OS images
that are replicated to many systems, where the baked-in seed is shared
and hence must not be credited.

The check is done upfront in process_random_seed(), before any other
work, mirroring the existing check for read-only volumes. This covers
both systemd-boot and systemd-stub, which share this code.

Inspired-by: #42979

2026-07-14 10:12:50 +02:00

..

_data

docs: update external links

2026-01-31 01:11:11 +09:00

_includes

docs: update footer to 2026

2026-04-14 17:32:37 +01:00

_layouts

…

assets

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

fonts

…

var-log

meson: install README.logs independently of HAVE_SYSV_COMPAT

2024-11-29 14:18:15 +01:00

_config.yml

Revert "docs: don't suffix page permalink with a slash"

2024-04-17 20:53:49 +02:00

.gitattributes

…

.gitignore

…

API_FILE_SYSTEMS.md

docs: update external links

2026-01-31 01:11:11 +09:00

APPSTREAM_BUNDLE.md

sysupdate: Support changelogs & appstream metadata

2024-07-12 14:38:09 +01:00

ARCHITECTURE.md

Fix wording in two places

2026-02-09 11:01:15 +01:00

AUTOMATIC_BOOT_ASSESSMENT.md

docs: update external links

2026-01-31 01:11:11 +09:00

BACKPORTS.md

docs/BACKPORTS: update

2025-11-12 23:01:35 +00:00

BLOCK_DEVICE_LOCKING.md

docs: update external links

2026-01-31 01:11:11 +09:00

BOOT_LOADER_INTERFACE.md

docs: document the new smbios measurements

2026-05-21 21:44:06 +01:00

BOOT_LOADER_SPECIFICATION.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

BOOT.md

systemd-boot: add a preferred setting that's similar to default but avoids booting known-bad entries

2026-02-18 03:28:12 +09:00

BUILDING_IMAGES.md

docs: update external links

2026-01-31 01:11:11 +09:00

CATALOG.md

docs: update external links

2026-01-31 01:11:11 +09:00

CGROUP_DELEGATION.md

docs: Document manual cgroup controller management for Delegate=yes

2025-04-25 00:42:24 +01:00

CODE_OF_CONDUCT.md

docs/CODE_OF_CONDUCT: format text

2024-03-27 07:11:55 +01:00

CODE_QUALITY.md

ci: Drop codeql workflow

2026-03-24 17:55:26 +01:00

CODING_STYLE.md

docs: specifically mention that braces in if blocks do not need to be symmetric

2026-06-01 10:55:40 +01:00

CONTAINER_INTERFACE.md

docs: fix capability name, it's CAP_MKNOD not CAP_SYS_MKNOD (#41621)

2026-04-13 16:41:33 +01:00

CONTRIBUTING.md

docs: Update AI usage policy

2026-06-17 09:59:34 +00:00

CONTROL_GROUP_INTERFACE.md

docs: update external links

2026-01-31 01:11:11 +09:00

CONVERTING_TO_HOMED.md

docs: update external links

2026-01-31 01:11:11 +09:00

COREDUMP_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

COREDUMP.md

docs: update external links

2026-01-31 01:11:11 +09:00

CREDENTIALS.md

credentials: add policy that can allow key=null creds from the ESP

2026-07-09 16:48:26 +02:00

DAEMON_SOCKET_ACTIVATION.md

docs/DAEMON_SOCKET_ACTIVATION

2024-06-03 15:22:54 +09:00

DEBUGGING.md

docs: update external links

2026-01-31 01:11:11 +09:00

DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

DISCOVERABLE_PARTITIONS.md

…

DISK-QUOTAS-PROJECTIDS.md

core: add quota support for State, Cache, and Log exec directories

2025-07-07 17:28:47 +00:00

DISTRO_PORTING.md

docs: update external links

2026-01-31 01:11:11 +09:00

ELF_DLOPEN_METADATA.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

ELF_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

ENVIRONMENT.md

clonesetup: add support to clone devices via /etc/clonetab

2026-07-10 14:01:24 +02:00

FACTORY_RESET.md

docs: document factory reset logic

2025-03-05 12:38:30 +01:00

FAQ.md

docs: update external links

2026-01-31 01:11:11 +09:00

favicon.png

…

favicon.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

FILE_DESCRIPTOR_STORE.md

core: add FileDescriptorStorePreserve=on-success option

2026-05-21 10:14:08 +01:00

GOVERNANCE.md

docs: add a governance document

2025-09-24 08:48:17 +02:00

GROUP_RECORD.md

docs: punctuation and a typo

2025-05-14 18:06:04 +02:00

HACKING.md

docs: Add explicit reference to unprivileged userns docs of mkosi

2025-12-28 09:31:47 +00:00

HOME_DIRECTORY.md

homed/fscrypt: add new xattr format hardening key sealing

2026-05-19 13:35:19 +01:00

INCOMPATIBILITIES.md

docs/INCOMPATIBILITIES: fix typo

2026-02-09 02:36:50 +01:00

index.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

INHIBITOR_LOCKS.md

docs/INHIBITOR_LOCKS: Update sentence for the new mode added

2026-06-06 13:44:49 +01:00

INITRD_INTERFACE.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

JOURNAL_EXPORT_FORMATS.md

docs: update external links

2026-01-31 01:11:11 +09:00

JOURNAL_FILE_FORMAT.md

docs: wrap bare enum constants in inline code in JOURNAL_FILE_FORMAT

2026-03-12 09:37:24 +01:00

JOURNAL_NATIVE_PROTOCOL.md

docs: update external links

2026-01-31 01:11:11 +09:00

MEMORY_PRESSURE.md

docs: Update MEMORY_PRESSURE.md => PRESSURE.md

2026-04-09 22:47:10 +02:00

MINIMAL_BUILDS.md

tree-wide: drop unused libcap dependencies

2025-10-24 01:52:59 +09:00

MOUNT_REQUIREMENTS.md

docs/MOUNT_REQUIREMENTS: fix typo

2025-11-25 22:52:10 +09:00

MY_SERVICE_CANT_GET_REALTIME.md

docs: update external links

2026-01-31 01:11:11 +09:00

NETWORK_ONLINE.md

docs: update external links

2026-01-31 01:11:11 +09:00

OPTIMIZATIONS.md

docs: update external links

2026-01-31 01:11:11 +09:00

OSC_CONTEXT.md

docs: add redirection of the osc context to uapi website

2025-12-18 10:50:23 +01:00

PACKAGE_METADATA_FOR_EXECUTABLE_FILES.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

PASSWORD_AGENTS.md

docs/PASSWORD_AGENTS: document the AcceptCached= field

2025-12-31 10:59:41 -05:00

PAX_CONTROL_GROUPS.md

docs: fix multiple grammar errors

2026-01-29 00:40:18 +09:00

PORTABILITY_AND_STABILITY.md

units: restore runlevel[0-6].target aliases

2026-02-01 09:40:10 +01:00

PORTABLE_SERVICES.md

docs: update external links

2026-01-31 01:11:11 +09:00

PORTING_TO_NEW_ARCHITECTURES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

PREDICTABLE_INTERFACE_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESET.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESSURE.md

docs: Update memory pressure docs for latest GLib support for it

2026-07-02 15:05:14 +01:00

RANDOM_SEEDS.md

boot: skip random seed handling if seed file is marked read-only

2026-07-14 10:12:50 +02:00

RELEASE.md

docs: note step to update obs workflow file on release

2026-02-09 09:36:53 +01:00

RESOLVED-VPNS.md

docs: update external links

2026-01-31 01:11:11 +09:00

ROOT_STORAGE_DAEMONS.md

docs: fix SurviveFinalKillSignal typo

2025-07-22 18:03:39 +01:00

ROOTFS_DISCOVERY.md

docs: fix multiple grammar errors

2026-01-29 00:40:18 +09:00

rootfs-discovery-flow.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

SECURITY.md

docs: say that the github form is preferred for security vulnerabilities

2026-06-01 15:06:20 +01:00

SEPARATE_USR_IS_BROKEN.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

style.css

docs: contain image sizing and prevent overflow on mobile

2026-03-12 09:38:03 +01:00

SYSLOG.md

docs: update external links

2026-01-31 01:11:11 +09:00

SYSTEMD_FILE_HIERARCHY_REQUIREMENTS.md

docs/SYSTEMD_FILE_HIERARCHY: format text

2024-03-27 07:17:08 +01:00

sysupdate-objects.svg

docs: Add a diagram for the internals of sysupdate

2026-01-30 13:19:33 +09:00

TEMPORARY_DIRECTORIES.md

docs: update external links

2026-01-31 01:11:11 +09:00

TESTING_WITH_SANITIZERS.md

docs: fix mkosi section for Environment= setting

2025-04-16 08:30:25 +09:00

THE_CASE_FOR_THE_USR_MERGE.md

docs: update external links

2026-01-31 01:11:11 +09:00

TIPS_AND_TRICKS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

TPM2_PCR_MEASUREMENTS.md

tpm2: optionally disable TPMA_NV_ORDERLY for NvPCRs

2026-07-02 21:51:54 +02:00

TRANSIENT-SETTINGS.md

cgroup: Add CPUSetPartition= setting

2026-05-14 08:55:44 +02:00

TRANSLATORS.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

UIDS-GIDS.md

nsresourced: Optionally map foreign UID range

2026-02-24 18:29:37 +01:00

USER_GROUP_API.md

userdb: suppress lookups outside of indicated ranges

2026-07-12 23:09:01 +02:00

USER_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

USER_RECORD_BLOB_DIRS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

USER_RECORD.md

userdb: add birthDate field to JSON user records

2026-03-18 17:33:22 -04:00

USERDB_AND_DESKTOPS.md

docs: update external links

2026-01-31 01:11:11 +09:00

VARLINK.md

docs: clarify when to use varlink enum types vs plain strings

2026-04-14 13:37:02 +02:00

VM_INTERFACE.md

docs: fix typo

2024-03-15 04:04:01 +09:00

WRITING_DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

WRITING_DISPLAY_MANAGERS.md

docs: update external links

2026-01-31 01:11:11 +09:00

WRITING_NETWORK_CONFIGURATION_MANAGERS.md

docs/WRITING_NETWORK_CONFIG_MANAGERS: format text

2024-03-27 07:31:54 +01:00

WRITING_RESOLVER_CLIENTS.md

docs/WRITING_RESOLVER_CLIENTS: update manpage link

2024-03-27 07:11:50 +01:00

WRITING_VM_AND_CONTAINER_MANAGERS.md

docs: fix misleading VM/machined documentation

2026-04-02 12:55:33 +02:00