tree 9efaeeba1a31ce6809fe76553abd61d0ffd82829
parent 80dc0969ac4c1df99b83e92b9a0c6ac795e9df3a
author He Gao <hegao@google.com> 1717004516 +0000
committer COS Cherry Picker <cloud-image-release@prod.google.com> 1717088216 -0700

Disable update-engine.service

There is a race condition between systemd and device policy manager.
Confidential VM makes systemd units slower so that policy manager
finishes its work before update-engine.service is initiated and enabled
resulting in unexpected OS update.

Device policy manager can enable update-engine.service if the metadata
for disabling auto-update is not set. So we should disable
update-engine.service in systemd and let device policy manager controls
it.

BUG=b/335549105
TEST=presubmit and validation tests
RELEASE_NOTE=None

cos-patch: bug
Change-Id: Ib3e1fb29ae02ca44f75ad0be20c361ef65bb91d0
Reviewed-on: https://cos-review.googlesource.com/c/third_party/overlays/chromiumos-overlay/+/72713
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Main-Branch-Verified: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Oleksandr Tymoshenko <ovt@google.com>