From db0803fec80e24f978be283568f9aa3ada0b7f59 Mon Sep 17 00:00:00 2001 From: Helmut Grohne Date: Tue, 6 May 2025 15:20:31 +0200 Subject: debefivm-create: drop nosymfollow for the EFI filesystem On stretch, the nosymfollow mount option is not supported. Given that vfat does not do symlinks at all, the simple way forward is skipping it. Reported-by: Stefano Rivera --- bin/debefivm-create | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'bin') diff --git a/bin/debefivm-create b/bin/debefivm-create index d68d647..d533f56 100755 --- a/bin/debefivm-create +++ b/bin/debefivm-create @@ -397,7 +397,7 @@ fi # By default, Debian mounts the EFI System Partition to /boot/efi. Keep that # default. -BOOT_EFI_MOUNT_TEMPLATE='[Unit]\nDescription=EFI System Partition\n\n[Mount]\nWhat=LABEL=%s\nWhere=/boot/efi\nType=vfat\nOptions=umask=0077,rw,nodev,nosuid,noexec,nosymfollow\n\n[Install]\nWantedBy=local-fs.target\n' +BOOT_EFI_MOUNT_TEMPLATE='[Unit]\nDescription=EFI System Partition\n\n[Mount]\nWhat=LABEL=%s\nWhere=/boot/efi\nType=vfat\nOptions=umask=0077,rw,nodev,nosuid,noexec\n\n[Install]\nWantedBy=local-fs.target\n' set -- \ '--customize-hook=mkdir "$1/boot/efi"' \ "--customize-hook=printf '$BOOT_EFI_MOUNT_TEMPLATE' '$EFILABEL' >"'"$1/etc/systemd/system/boot-efi.mount"' \ -- cgit v1.2.3