systemd-efivars-clear.service

systemd

Request that the boot loader's EFI variables are erased on next boot

systemd-efivars-clear.service

/usr/lib/systemd/systemd-efivars-clear

Description

systemd-efivars-clear.service is a service that requests that systemd-boot(7) erases all EFI variables owned by the boot loader and by systemd on the next boot. It does so by setting the LoaderFactoryResetVariables EFI variable. Note that this service does not immediately erase any variables, but simply asks the boot loader to do so at next boot, where the user will be asked for confirmation before the operation is done. After erasing the variables the boot loader reboots the system.

The EFI variables erased are all those in the Boot Loader Interface vendor UUID namespace (4a67b082-0a4c-41cf-b6c7-440b29bb8c4f) and in systemd's own vendor UUID namespace (8cf2644b-4b0b-428f-9387-6d876050dc67), with the exception of the FactoryResetRequest variable, which is retained so that the factory reset of the OS itself can take place on the subsequent boot.

systemd-efivars-clear.service is typically hooked into the factory-reset.target unit in order to issue the request before an immediate reboot. A pending request is withdrawn again by systemd-factory-reset cancel, see systemd-factory-reset(8). See Factory Reset for more information.

Options

The following options are understood:

--graceful
Exit cleanly and execute no operation if the system was not booted via UEFI, or the boot loader does not support erasing EFI variables.

Kernel Command Line

systemd-efivars-clear understands the following kernel command line parameters:

systemd.efivars_allow_clear=
Takes a boolean argument. If false the service will succeed, but instead of requesting the erase operation from the boot loader it will not execute any operation. If not specified defaults to true.