Systemd-homed on Fedora Atomic

[boredsquirrel]

From this Post

( when using a prebuilt RPM skip steps 1-4)

@richiedaze

5. Set file context

sudo restorecon -rv \
    /usr/lib/systemd/systemd-homed \
    /usr/lib/systemd/systemd-homework \
    /usr/lib/systemd/system/systemd-homed.service \
    /usr/lib/systemd/system/systemd-homed-activate.service \
    /var/lib/systemd/home

Permit manager’s ordinance

6. Enable the authselect profile feature: ( v1.4.1+ only )

sudo authselect enable-feature \
    with-systemd-homed

Project manager’s ordinance

7. Enable and start service:

sudo systemctl enable --now \
    systemd-homed

Project contractor’s ordinance

8. Building your new secure home

sudo homectl create secure_home \
    --password-change-now=true \
    --storage=luks --fs-type=btrfs \
    --luks-extra-mount-options=defcontext=system_u:object_r:user_home_dir_t:s0

Note:
secure_home is the name of the new home directory you want to create.

@richiedaze

I have been using systemd-homed on fedora Silverblue since v32. This policy was created and built on and for Silverblue. Being adjusted to work on all other spins.

On Atomic versions, you would have to overlayer the rpm package for it to work. ATM, I am rewriting the policy to submit it to the fedora-selinux policy to avoid a separate package to function normally.

Follow the first post on how to set up your new home. Skip steps 1-4, if your using an Atomic desktop and want to use my rpm package below.

homed-selinux-1.0-2.fc39.noarch.rpm

I would like to gather infos about differences on Fedora Atomic, and create a dedicated thread.