From c93941079e3a8295743b11237c0020696b8d338f Mon Sep 17 00:00:00 2001 From: Dan Puttick Date: Wed, 25 Oct 2017 15:28:59 -0400 Subject: [PATCH] Update image setup docs - disabling services --- doc/image_setup_checklist.md | 1 + doc/setup_with_proot.md | 7 +++++++ 2 files changed, 8 insertions(+) diff --git a/doc/image_setup_checklist.md b/doc/image_setup_checklist.md index 0343f89..25a3c06 100644 --- a/doc/image_setup_checklist.md +++ b/doc/image_setup_checklist.md @@ -38,6 +38,7 @@ * Symlink /proc/mounts to /etc/mtab * Turn on rc-local.service `systemctl enable rc-local.service` - If it doesn't work, read these instructions: https://www.linuxbabe.com/linux-server/how-to-enable-etcrc-local-with-systemd +* Disable networking.service, bluetooth.service, and dchpcd.service * apt-get autoclean * apt-get autoremove * Exit from proot diff --git a/doc/setup_with_proot.md b/doc/setup_with_proot.md index 7c2ad2e..0b833ff 100644 --- a/doc/setup_with_proot.md +++ b/doc/setup_with_proot.md @@ -185,6 +185,13 @@ This is what triggers CIRCLean to run. ``` systemctl enable rc-local.service ``` +* Turn off several networking related services. This speeds up boot and reduces the +attack surface: +``` + systemctl disable networking.service + systemctl disable bluetooth.service + systemctl disable dhcpcd.service +``` * Clean up: ``` apt-get clean