Fixed omission in last article

This commit is contained in:
Julien Dessaux 2023-10-04 10:58:05 +02:00
parent 3c50871869
commit b8c0c18ebf
Signed by: adyxax
GPG key ID: F92E51B86E07177E

View file

@ -24,6 +24,7 @@ Install your vps or compute instance normally using a Linux distribution (or any
We are going to remount the partitions as the running OS as read only. In order to do that, we are going to shutdown nearly everything! If at some point you lose access to your system, just force reboot it and try again. Our goal is for those commands to run without an error: We are going to remount the partitions as the running OS as read only. In order to do that, we are going to shutdown nearly everything! If at some point you lose access to your system, just force reboot it and try again. Our goal is for those commands to run without an error:
```sh ```sh
swapoff -a
mount -o remount,ro /boot mount -o remount,ro /boot
mount -o remount,ro / mount -o remount,ro /
``` ```
@ -37,7 +38,13 @@ On most Linux you can list running services using `systemctl|grep running` and b
- session-XX - session-XX
- user@0 (root) and any user@XX where XX is the uid you connected with - user@0 (root) and any user@XX where XX is the uid you connected with
Everything else should be fair game, here is a list of what I shutdown on an oracle cloud compute before I could remount / read only: Everything else should be fair game, what you are looking for are processus that keep files opened for writing. Those can be identified with:
- `lsof / | awk '$4 ~ /[0-9].*w/'`
- `fuser -v -m /`
- `ps aux`
- `systemctl|grep running`
Here is a list of what I shutdown on an oracle cloud compute before I could remount / read only:
```sh ```sh
systemctl stop smartd systemctl stop smartd
systemctl stop rpcbind systemctl stop rpcbind
@ -77,6 +84,7 @@ systemctl stop serial-getty@ttyS0.service
Remember, your success condition is to be able to run this without errors: Remember, your success condition is to be able to run this without errors:
```sh ```sh
swapoff -a
mount -o remount,ro /boot mount -o remount,ro /boot
mount -o remount,ro / mount -o remount,ro /
``` ```