fx-marionette: Exit after idle

By default, `systemd-socket-proxyd` keeps running after the remote
disconnects.  This prevents the HUD control from reconnecting if e.g.
Firefox crashes.

ci/Jenkinsfile

@@ -2,6 +2,7 @@ pipeline {
     agent {
         kubernetes {
             yamlFile 'ci/podTemplate.yaml'
+            defaultContainer 'build'
         }
     }
 
@@ -10,28 +11,9 @@ pipeline {
         disableConcurrentBuilds()
     }
 
-    parameters {
-        booleanParam \
-            name: 'Clean',
-            description: 'Clean the workspace and perform a full rebuild'
-    }
-
     stages {
         stage('Build') {
             steps {
-                container('build') {
-                    script {
-                        if (params.Clean) {
-                            sh 'rm -rf _build'
-                        }
-                    }
-                    copyArtifacts \
-                        filter: 'aarch64/mqttdpms',
-                        projectName: '../mqttdpms/master',
-                        selector: lastSuccessful()
-                    sh 'install aarch64/mqttdpms overlay/usr/local/bin/'
-                    sh 'make rootfs initramfs'
-                }
                 copyArtifacts \
                     filter: 'aarch64/mqttdpms',
                     projectName: '../mqttdpms/master',

ci/podTemplate.yaml

@@ -4,18 +4,28 @@ spec:
   terminationGracePeriodSeconds: 0
   containers:
   - name: build
-    image: registry.pyrocufflink.blue/build/basementhud
+    image: git.pyrocufflink.net/containerimages/build/basementhud
     command:
     - sleep
     - infinity
     securityContext:
       readOnlyRootFilesystem: true
       privileged: true
+    volumeMounts:
+    - name: tmp
+      mountPath: /tmp
   - name: publish
-    image: registry.fedoraproject.org/fedora
+    image: git.pyrocufflink.net/containerimages/build/basementhud
     command:
     - sleep
     - infinity
     securityContext:
       readOnlyRootFilesystem: true
       runAsUser: 1000
+    volumeMounts:
+    - name: tmp
+      mountPath: /tmp
+  volumes:
+  - name: tmp
+    emptyDir:
+      medium: Memory

mkrootfs.sh

@@ -5,7 +5,7 @@ set -e
 srcdir="$(dirname "$0")"
 destdir="$(mkdir -p "$1" && readlink -e "$1")"
 dest=basementhud.squashfs
-releasever=35
+releasever=37
 
 mkdir -p "${destdir}"
 
@@ -28,6 +28,7 @@ dnf --installroot "${destdir}" install -y \
     nbd \
     openbox \
     openssh-server \
+    openssl1.1 \
     rsyslog \
     systemd \
     xinit \
@@ -73,6 +74,8 @@ chroot "${destdir}" systemctl disable \
     systemd-homed \
     systemd-userdbd
 ln -sf /run/resolv.conf "${destdir}"/etc/resolv.conf
+grep -lR pam_sss "${destdir}"/etc/pam.d \
+    | xargs sed -i /pam_sss/d
 
 umask 0022
 mksquashfs "${destdir}" "${destdir}/boot/${dest}" \

overlay/etc/systemd/system/xinit@.service

@@ -4,13 +4,15 @@ Wants=network-online.target
 After=network-online.target
 Wants=time-set.target
 After=time-set.target
+After=getty@tty1.service
+Conflicts=getty@tty1.service
 
 [Service]
 Type=simple
 User=%I
 WorkingDirectory=~
 PAMName=xinit
-TTYPath=/dev/tty7
+TTYPath=/dev/tty1
 StandardInput=tty
 StandardOutput=journal
 StandardError=journal

overlay/etc/systemd/user/firefox-marionette.service

@@ -4,4 +4,7 @@ Requires=firefox-marionette.socket
 Requires=firefox.service
 
 [Service]
-ExecStart=/usr/lib/systemd/systemd-socket-proxyd 127.0.0.1:2828
+ExecStart=/usr/lib/systemd/systemd-socket-proxyd \
+    --connections-max=1 \
+    --exit-idle-time=10s \
+    127.0.0.1:2828