Component

systemd-sysext

Is your feature request related to a problem? Please describe

systemd-sysext has a few options which are only available on the command line. Namely:

--image-policy=policy
--mutable=BOOL|auto|import

cannot be set without modifying (or overriding) /usr/lib/systemd/system/systemd-sysext.service as there's no config file for systemd-sysext.

Describe the solution you'd like

Introduce a global systemd-sysext conffile (/usr/lib/systemd/sysext.conf, /etc/systemd/sysext.conf) allowing to set global parameters:

[Sysext]
Mutable=yes
ImagePolicy=root=verity+signed+encrypted+unprotected+absent

Describe alternatives you've considered

Placing modified systemd-sysext.service to /etc/systemd/ helps to workaround the absence of global config.

The systemd version you checked that didn't have the feature you are asking for

No response