...

/usr/share/cagefs-skeleton/lib/tmpfiles.d/systemd-nologin.conf