disallow login to tdx guest

iovoid · iovoid · commit c8de57cfb4bc · 2025-05-09T11:27:21.000-03:00
diff --git a/crates/l2/tee/mkosi.conf b/crates/l2/tee/mkosi.conf
@@ -14,11 +14,9 @@ SourceDateEpoch=0
 Bootable=true
 Bootloader=uki
 KernelModules=tdx_guest,tsm,vmw_vsock_virtio_transport,virtio_net,dm_mod,dm_verity,erofs
-RootPassword=1234
 ExtraTrees=./mkosi.extra
 KernelCommandLine=console=hvc0 systemd.firstboot=no ip=enp0s1:any
                   systemd.mount-extra=TMPDIR=:/var/tmp:tmpfs
-                  systemd.wants=payload.service
 
 [Validation]
 Verity=hash
diff --git a/crates/l2/tee/mkosi.extra/etc/systemd/system/default.target b/crates/l2/tee/mkosi.extra/etc/systemd/system/default.target
@@ -0,0 +1,3 @@
+[Unit]
+Requires=payload.service
+
