refractor: move default systemd drop in files.

cmd/prebuild/main.go

@@ -47,6 +47,8 @@ func aaPrebuild() error {
 
 	if full {
 		prebuild.Prepares = append(prebuild.Prepares, prebuild.SetFullSystemPolicy)
+	} else {
+		prebuild.Prepares = append(prebuild.Prepares, prebuild.SetDefaultSystemd)
 	}
 	if complain {
 		prebuild.Builds = append(prebuild.Builds, prebuild.BuildComplain)

pkg/prebuild/prepare.go

@@ -173,6 +173,11 @@ func SetFlags() error {
 	return nil
 }
 
+// Set systemd unit drop in files to ensure some service start after apparmor
+func SetDefaultSystemd() error {
+	return copyTo(paths.New("systemd/default/"), Root.Join("systemd"))
+}
+
 // Set AppArmor for (experimental) full system policy.
 // See https://apparmor.pujol.io/development/structure/#full-system-policy
 func SetFullSystemPolicy() error {

pkg/prebuild/tools.go

@@ -71,6 +71,9 @@ func copyTo(src *paths.Path, dst *paths.Path) error {
 			return err
 		}
 		destination = dst.JoinPath(destination)
+		if err := destination.Parent().MkdirAll(); err != nil {
+			return err
+		}
 		if err := file.CopyTo(destination); err != nil {
 			return err
 		}

systemd/default/system/systemd-userdbd.service

@@ -0,0 +1,2 @@
+[Unit]
+After=apparmor.service