Security announcement for old PC-BSD/TrueOS machines

A small security announcement for people who have old PC-BSD/TrueOS machines running, or that you might boot up and run: * https://tty0.social/@JdeBP/110204963467594963 Details of the problem, of the service fix, and of local fixes that you can apply for both my service management system and t

Re: Systemd unit parser and s6 generator

[...] We've discussed internally if we change that process and try to write a systemd unit parser, because all units are there in Ubuntu. If we could catch 90% of all cases, we need, we would be happy. If it would take 2 weeks of work, that would be fine. Did somebody of you try to implement s

Re: [svlogd] / -ttt / why UTC?

Yes. You cannot set your system clock to TAI, unless you want wildly incorrect results from time() and similar system calls. Setting it 10 seconds earlier than TAI is the best you can do; and that's what the right/ timezones expect. In my world time() returns the SI seconds since the start o

Re: Why are there 3 programs in s6 that do the same thing?

Laurent Bercot: [...] direct adaptations from daemontools' setuidgid and envuidgid [...] There is a similar history, and a similar spread of tools in the nosh toolset for roughly the same reasons. There was a need for a split toolset where one could look up things in the system account dat

Re: runit: run process in a tty

Kian Kasad: Unable to open file: /dev/tty2: Operation not permitted. Operating systems do a whole bunch of stuff when connecting user programs to terminals, including changing the permissions of the terminal device file to allow the logged-in user access. If you check the terminal device

Question about s6 on Stack Exchange

Anyone who enjoys explaining s6-rc might enjoy answering https://unix.stackexchange.com/q/613225/5132 . Answers go in the box under "Your Answer", of course. (-:

Re: Following log directories

John W Higgins wrote: I meant nothing towards s6 - but daemontools does not deal with leap seconds (or at least it cetainly looks that way from my foolish viewpoint). daemontools very much *does* deal in leap seconds. The little-known requirement for daemontools, which *is* in its manual an

Re: Following log directories

John W Higgins: One thing to remember about tools like this is that s6 is very precise with it's implemenation of TAI64N - it uses leap seconds. For the case of follow-log-directories, note that it does not decode the timestamps into times. As long as they follow the simple (and obvious) co

Re: Readiness notification exemplars

Brett Neumeier: It's maybe a little heavy-handed, but is there any technical reason not to just pick an arbitrary FD, like say 3, and just always use that for a particular daemon? Further to what M. Bercot said, see https://unix.stackexchange.com/a/331104/5132 .

helpcovid and s6

Help is welcome at https://github.com/bstarynk/helpcovid/issues/34 .

Re: Readiness notification exemplars

Serge E. Hallyn: If making changes to daemons were going to palatable, [...] Clearly, it *is* palatable, given that a few people have been adding the systemd mechanism to their programs for several years, now. Pierre-Yves Ritschard's code and Cameron Norman's code come straight out of ac

Re: keeping sites off

Laurent Bercot: What I do is: * run a tinydns on another IP address (if you only have 1 nic, you can still attribute several IPs to it) * fill that tinydns with sink data for the things I want to block * configure my dnscache to query my internal DNS server for the

Re: runit SIGPWR support

Alex Suykov: Just for reference, I checked apcupsd sources. That was not nearly enough research, and your conclusion is ill-founded. The SIGPWR signal, from before Linux even existed, has always meant "something has happened with the power". In AT&T Unix System 5 books it is conventionall

Re: runit SIGPWR support

Laurent Bercot: Of course, but once the fd is closed, /dev/console should not have any impact on the process, so would a kbrequest still reach it? Yes. First: This is a kernel virtual terminal thing not a console thing. Strictly speaking, it is doing it wrongly to access it through the con

Re: runit SIGPWR support

Laurent Bercot: What piece of software sends SIGRTMIN+3 to pid 1 when you're not running systemd? * http://jdebp.uk./Softwares/nosh/guide/commands/system-control.xml#SYSTEMCONTROL (-:

Re: Handle ENOTDIR in pathexec_run

Jacob Vosmaer: The patch below makes runit ignore this type of bad path entry. What do you think? It's not good enough. I was all set to apply this to djbwares, as the runit code for pathexec is actually Daniel J. Bernstein's original code. But it highlighted some basic problems of runnin

Re: Debian and init freedom (logging freedom?)

fungal-net: While upgrading my antiX-sid (Debian) with s6 and 66 installed today … the system enforced Debian policy on you, which you had violated by using UIDs less than 100 for your private "log" and "s6log" accounts. Debian Policy §9.2.2 reserves UIDs less than 100 to Debian, for global

Re: s6 usability

Oliver Schad: A booting tools should be in /bin - full stop! That is historically untrue. The real world has not actually worked in the way that some people think. * https://unix.stackexchange.com/a/448799/5132

Re: s6 usability

Samuel Holland: Then, with the symlinks, s6 could "provide" virtual/daemontools. I do this with the nosh toolset already, for Debian. Several of the "shim" and "-run" packages, which are separate from the main tools packages, "provide" stuff. I even have a things such as a dummy "nosh-log

Re: runit patches to fix compiler warnings on RHEL 7

Jan Braun: 2) runit has manpages. s6 has HTML. :( Daniel J. Bernstein had something to say on that subject, two decades ago. See the "Notes" section of http://cr.yp.to/slashdoc.html . I generate both manual pages and HTML from a common DocBook XML master in the nosh toolset. And the DocBo

Re: runit patches to fix compiler warnings on RHEL 7

Some of those are common. I looked at similar stuff in daemontools, where runit got some of this code from, when I packaged it up with some of the other Bernstein softwares some years ago. However, you have missed the point of HASSHORTSETGROUPS. There's no point in having conditionally compi

Re: runit patches to fix compiler warnings on RHEL 7

Laurent Bercot: It looks like several distributions have their own version of runit; they are maintained by the distros themselves. Further to all that: I believe, although things may have changed, that the Debian maintainer for runit is open to patches. * https://tracker.debian.org/pkg/ru

Re: s6-log can create current with 640?

Laurent Bercot: The real question is, why is there a "umask" binary that's not the one from execline? Non-chainloading non-builtin umask is nonsense, just like non-chainloading non-builtin cd. Not quite. People find uses for these things, and as the SUS rationale points out, for every poten

Re: s6-log can create current with 640?

Dewayne Geraghty: I did try umask 037 but that just broke the pipe. That was probably because you were using the wrong umask tool. It has to be the chain-loading one in a nosh or an execlineb script. % cat /var/sv/deluged/service/run #!/bin/nosh #Deluge BitTorrent client envuidgid -- deluge

Re: chpst -u and supplementary groups

My inability to see the issue came from the fact that all other similar programs (I'm aware of) do in fact add the supplementary groups. Then you are not aware of Bernstein daemontools, where setuidgid does not. (-: # /package/admin/djbwares/command/setuidgid operator id uid=2(operator) gid=

Re: interesting claims

Jeff: where can i learn how a "correct" init has to operate ? See https://unix.stackexchange.com/a/197472/5132 for starters.

nosh version 1.40

The nosh package is now up to version 1.40 . * http://jdebp.eu./Softwares/nosh/ * http://jdebp.info./Softwares/nosh/ * https://github.com/freebsd/freebsd-quarterly/blob/master/2018q4/nosh.md This version sees changes to the doco, improvements to network configuration, and a cha

djbwares version 9

The djbwares package is now up to version 9 . * http://jdebp.eu./Softwares/djbwares/ * http://jdebp.info./Softwares/djbwares/ This version sees changes to the doco and to the DNS and HTTP servers. FreeBSD binaries I plan for this to be the last release with binarie

Tesla autopilot, runit, and svlogd

So … * https://news.ycombinator.com/item?id=19193572 … where are and who did the modifications to runit to add -L and -M options to svlogd?

Re: No ifconfig

* https://lists.debian.org/debian-user/2017/08/msg01613.html * https://news.ycombinator.com/item?id=17152738 * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=274269 * https://news.ycombinator.com/item?id=17151922 Since I needed an |ifconfig| with a more BSD-like interface /a

svscan and supervise

Kelly Dean: Surely this is a common question. It's a common redesign. In the original daemontools, |supervise| knows nothing at all about the difference between "log" and "main" services. Linking up the standard I/Os with pipes, to connect "main" services to "log" services, and knowing th

Re: Generic interrupt command?

Colin Booth: As documented here: https://www.skarnet.org/software/s6/s6-svstat.html s6-svstat -p /path/to/service | xargs kill SIGNAL You can thank Jos Backus for similar functionality in the nosh toolset since 2013, with program-readable output that one can use existing tools to pull arbitr

Re: How best to ensure s6-managed services are shut down cleanly?

Laurent Bercot: The question is, how does systemd decide to proceed with the rest of the shutdown? It waits for |s6-svscan| for up to 90s, putting the infamous cylon warrior and "A stop job is running for s6" message on the console. After 90s, it starts forcibly killing stuff, not necessari

Re: s6 problems logging

Peter Pentchev: If it is not easy to change the program itself, the stdbuf(1) utility [...] I am certain that M. MacLennan is capable of changing M. MacLennan's own program. After all, you are replying to a message where xe said that xe already did. (-: Injecting things into the code of

svscan --help

Laurent Bercot: s6-svscan is pretty mild in that aspect. In fairness, the original Bernstein program was somewhat more forgiving: > /package/admin/djbwares % command/svscan --help > svscan: fatal: unable to chdir to --help: file does not exist > /package/admin/djbwares % People used this prog

Re: Essex: A simple command line interface for managing s6 services, using the s6 toolset

The |cat| subcommand is the one that seems to get most people. I have seen more objections to that in systemd's |systemctl| than to any of the others, because it really isn't concatenation as people are used to. I provide it in my toolset because I provide migration paths for people familiar

smaclennan/doorknob

d.xml> away from the superuser in their |run| scripts to an account dedicated to the dæmon. (Compare the |run| script in Bruce Guenter's nullmailer <http://untroubled.org/nullmailer/>.) o Jonathan de Boyne Pollard (2019). "Limiting services: Running

nosh version 1.39

The nosh package is now up to version 1.39 . * http://jdebp.eu./Softwares/nosh/ * https://www.freebsd.org/news/status/report-2017-07-2017-09.html#The-nosh-Project * http://jdebp.info./Softwares/nosh/ I missed announcing 1.38, so this announcement will cover both versions. These versions s

Re: nosh: User-space virtual terminal test and questions

The blue/green problem only manifested itself with certain terminal types, which I was not regularly using. Since you have 1.39 built, and as long as you built from today's snapshot, you can be the second person in the world to enjoy this: while true ; do printf '\f' ; top -b -n 1 | sed -e

Re: nosh: User-space virtual terminal test and questions

Guillermo: The combination of vboxvideo with |console-fb-realizer| was explosive, I got a (guest) kernel panic. |console-fb-realizer| does not employ the arcana of framebuffer I/O, it just using little more than the mode setting API and memory mapped I/O, so I'm initially going to lay that o

Re: s6-ps

That said, I would probably write my own portable tool if it came to that, as my gripes with |ps| are not to everyone's tastes. * It is the 21st century. The FreeBSD, OpenBSD, and NetBSD |ps| programs all use |-| as the command-line option introducer, and have done since /at least/ B

Re: s6-ps

Laurent Bercot: I just wasn't aware of people besides me actually using s6-ps. :) I used it as an example of not being a mess. (-: s6 and s6-rc are actually ports/packages in FreeBSD and s6 is a package in Debian. Alas, the Debian world has not yet caught up with the other toolsets, and th

Re: s6-ps

Laurent Bercot: That functionality: - isn't available in procps. I think that you should not let that stop you. (-: Laurent Bercot: I modelled the available columns from procps' ones. I think that you should not take that any further than you have already. This is the right point to st

s6-ps

* https://unix.stackexchange.com/a/492346/5132 It occurs to me that s6-ps would gain from having an "exe" column.

setterm and the SAF

* https://unix.stackexchange.com/a/491883/5132 * http://jdebp.eu./Softwares/nosh/guide/TerminalCapabilities.html * http://jdebp.eu./Softwares/nosh/guide/TERM.html It is a toolset for managing terminals as well. (-: * http://jdebp.eu./FGA/unix-service-access-facility.html As was this.

Re: Log rotation issue with runit

Dmitry Bogatov: After some investigation I found code, that caused issue, but it seems that it was written with some purpose, yet I fail to understand that purpose. What you need are manuals that tell you about this mechanism. (-: * http://jdebp.eu./Softwares/nosh/guide/cyclog.html#COMPATIB

Re: Log rotation issue with runit

Alex Efros: I'm not sure is it good idea to include .u files in usual rotation process at all, and especially handle them just like .s files. If several crashes happens for some reason in a short period of time this will result in deletion of all log files except last (say) 10 .u files, which

Re: Log rotation issue with runit

Laurent Bercot: If loggers kept appending to "current" instead, it could have corrupt information in the middle of a "current" file, which would them be archived as a .s (intact file), which wouldn't be good. Examples: * https://unix.stackexchange.com/questions/237321/ * https://askubuntu.c

More Answers

* https://unix.stackexchange.com/a/489949/5132 This may be of interest to people looking for some (brief) comparative analysis. Including the further reading. (-:

Re: runit don't restart service.

Yoshinori Sato: root 10647 10592 0 7月13 ? 00:00:00 /opt/LifeKeeper/sbin/runsv lkcheck terminate service [root@nodeA ec2-user]# kill 10647 12521 That is not terminating a service. That is terminating the service supervision subsystem. If you kill the process that actually does the restartin

Re: has anyone gotten nosh to build on Void Linux?

Guillermo: * There is a |curses.h| file in both Void's 'standard' headers directory and in a subdirectory named '|ncursesw|' (for the narrow character and wide character versions of the library, respectively). Normally, that would be |/usr/include/curses.h| and |/usr/includ

Re: has anyone gotten nosh to build on Void Linux?

Guillermo: * The |wall|(1) program is available in Void's 'standard' executables directories. Because that's what nosh's build system and executables are going to expect, as far as I know. For the sake of other readers: note that it is not the build system that employs the |wall|

Re: has anyone gotten nosh to build on Void Linux?

As someone porting to another operating system, you need also to pull up the /_nosh Guide_/ and read the _Packages and Ports_ chapter. There is a section in that chapter of things that require attention (in addition to figuring out your operating

Re: has anyone gotten nosh to build on Void Linux?

Chris Brannon: When I run package/compile from the root of the unpacked source tree, I get: redo: ERROR: all: Cannot find .do file to use. You need to make your operating system POSIX-conformant. I make fairly liberal use of some standard utilities in the build process including |pax

Re: [RFC] prctl: (Please do not!) Deprecate non PR_SET_MM_MAP operations

In case you weren't aware, programs can make use of a facility on Linux to make their ps listings contain appropriate command-line arguments and environment strings. There's also a similar kernel API on FreeBSD. This is used by the built-ins in nosh to good effect, even more so in the forthcom

Parsing /etc/os-release

For those who might be parsing /etc/os-release, and for those who have seen the way that the nosh toolset does it, in its build system and in the external configuration import subsystem: * https://unix.stackexchange.com/a/433245/5132

uschedule service bundles supplied with the nosh toolset

Guillermo: the 1.38 development version On that subject: If you are tempted to play with the new uschedule service bundles, note what is written in the new section in the Guide about uschedule.

G++ warnings for set-control-group-knob from nosh-1.37

The macro generates no warning in the GNU C library in Debian 9, but I should have caught that overload that was not passing by reference. It is fixed now, thank you. The in-development source archive for 1.38 is in the usual place.

cloux

s6 and runit get a mention at http://cloux.org/init/ . It's not a very technical or in-depth treatment, resorting more to quotations. For example: There's a lot more to say about system 5 rc, which it conflates with system 5 init. And AIX had more run levels than the eleven that it claims.

Re: nosh version 1.37

Guillermo: Did someone else help with that? No. I am reliant upon you and anyone else who pipes up. Guillermo: if you are going to go this route: Yes. I thought about it and it seemed that doing otherwise places the burden on the wrong person. The other approach is to defer running the

Re: nosh version 1.37

Guillermo: redo-ifchange[2]: ERROR: services/dbus-broker.service: Not done. redo-ifchange[2]: ERROR: services/dbus-daemon.service: Not done. redo-ifchange[2]: ERROR: services/system-wide.conf: Not done. redo-ifchange[2]: ERROR: systemd/service-manager.socket: Not done. redo-ifchange[2]: ERROR: co

Re: nosh version 1.37

Guillermo: But the 7 .do scripts I talked about are executed (indirectly) by the package/compile script from the source package, and they just create symbolic links. To be precise, they are executed by the source/all.do script, because they are named in 'echo' commands that feed their output t

Re: nosh version 1.37

Guillermo: This is going to happen for every [GNU/]Linux distribution that is not Debian, Arch, CentOS or RHEL. It does not... uh... look very portable :/ That is a reflection of reality. It isn't very portable. But you are misidentifying what it is. It is the location of these various

nosh version 1.37

The nosh package is now up to version 1.37 . * http://jdebp.eu./Softwares/nosh/ * https://www.freebsd.org/news/status/report-2017-07-2017-09.html#The-nosh-Project * http://jdebp.info./Softwares/nosh/ Some of the changes in this release are works in progress, that you will see

djbwares version 7

djbwares is now at version 7. * http://jdebp.eu./Softwares/djbwares/ * http://jdebp.info./Softwares/djbwares/ There are only a few changes. A common build problem across several toolsets that occurs if one has set a |CDPATH|, has been fixed. |dnscache| now has a |FORWARDFIRST| mode

redo version 1.4

redo is now at version 1.4 * http://jdebp.eu./Softwares/redo/ The only change from 1.3 is a belt-and-braces protection mechanism that prevents cleanup code from being told to delete a parent directory.

The shape of things to come

To let you know in advance, Thomas: In 1.37, a pre-relase source archive for which will be available for you later today in the usual place, I am making several changes. Several of your patches are going to be shorter or even entirely moot. The build system will try to explicitly pick some .

Re: nosh build problems (Re: Compatibilities between runit and s6 (re: )

Guillermo: Jonathan de Boyne Pollard: What does line 843 of your |/usr/include/curses.h| actually say? Because that's not the location of that function declaration in that header in either Dickey ncurses or Acton pdcurses as far as I can see. So what curses are you actually using? D

Re: Compatibilities between runit and s6 (re: Incompatibilities between runit and s6?)

Charlie Brady: OK, so this statement is incomplete: It also does not tell you that you need other POSIX-standard commands such as |mv| and |ln|. But you need them, too. I draw the line at listing every command, that POSIX-conformant systems have had to have for two decades and that are al

Re: nosh build problems (Re: Compatibilities between runit and s6 (re: )

Charlie Brady: /usr/include/curses.h:843:31: error: initializing argument 1 of 'char* tigetstr(char*)' [-fpermissive] service-status.cpp:148:21: error: invalid conversion from 'const char*' to 'char*' [-fpermissive] s = tigetstr(setaf); This is a problem that I thought was confined to O

Re: Compatibilities between runit and s6 (re: Incompatibilities between runit and s6?)

Charlie Brady: Sorry, doesn't work for me: You need a POSIX-conformant system with all of the POSIX utilities, including |pax| . The Debian |package/debian/control| file automatically ensures this on Debian, with its |Buil

Re: Compatibilities between runit and s6 (re: Incompatibilities between runit and s6?)

Thomas Caravia: I'm not familiar with rpm but my packaging is just this: You have prompted me to fill in a long-standing dangling hyperlink. * http://jdebp.eu./FGA/slashpackage.html

Re: Compatibilities between runit and s6 (re: Incompatibilities between runit and s6?)

Jonathan de Boyne Pollard: The |service-manager| manual page from version 1.37 or later of the nosh toolset contains a full breakdown of the control/status API in a |supervise/| directory, including the daemontools-encore extensions and the nosh service-manager's own extensions. I am h

Re: Compatibilities between runit and s6 (re: Incompatibilities between runit and s6?)

Charlie Brady: There is a certain level of compatibility between daemontools and runit, and I presume the same exists for s6. The devil is in the detils. The |service-manager| manual page from version 1.37 or later of the nosh toolset contains a full breakdown of the control/status API in a

Re: Incompatibilities between runit and s6?

Laurent Bercot: Also, admittedly, I simply did not want to read the systemd unit file documentation to understand how to start a s6 supervision tree from systemd. I will do the effort and come up with a small unit file suitable for this. * https://lists.debian.org/debian-user/2014/09/msg01

Re: cannot set terminal process group

DGSJ: Well, Crtl+C doesn't work, [...] It seems to be the time of year for this question. I just answered another variant of it, complete with daemontools-style chain loading tools. Read the further reading and other questions, too. * https://unix.stackexchange.com/questions/410318/ * ht

nosh version 1.36

The nosh package is now up to version 1.36 . * http://jdebp.eu./Softwares/nosh/ * https://www.freebsd.org/news/status/report-2015-07-2015-09.html#The-nosh-Project * http://jdebp.info./Softwares/nosh/ More Java tools This release comes with the |find-default-jvm| and |find-

SpaceFM using nosh service management

For a wider readership: > > I recently had issues where Firefox and the SpaceFM file manager would > hang when started. Apparently they were calling dbus-launch. > If they were calling dbus-launch, that means that they were unable to contact a Desktop Bus broker and tried to run their own b

Re: New reboot flag: -c for 'power cycle'

Warner Losh, FreeBSD and embedded systems developer, has just invented a new shutdowngoal, in addition to the ones that we already know. In addition to the conventional reset, power off, halt, and kexec goals; xe has added a power-off-and-then-on-again goal. Xe has named it power cycle, and i

Re: New reboot flag: -c for 'power cycle'

Warner Losh: I was completely unaware of SIGWINCH being used like this on Linux. It didn't pop up in the quick research I did before implementing this. But it would have been nice to know this sooner, but I'm OK with later since it isn't much later. Some sources of information for you, an

Re: execlineb's import conflicts with ImageMagick

Guillermo: This is known, see the 'execline-2.3.0.0' section of this announcement: * https://www.skarnet.org/cgi-bin/archive.cgi?2:msp:1687:blbgbjnpebcmhkmelgjd And these: * https://lists.debian.org/debian-user/2017/10/threads.html#00164 * https://lists.debian.org/debian-devel/2017/10/thr

Re: bug in tcpserver?

Laurent Bercot: s6-tcpserver doesn't have this bug. :P Neither do tcp-socket-accept, nor local-{stream,seqpacket}-socket-accept. (-: Just for the Hell of it, I have patched the djbwares' tcpserver to have if (0 != s) and if (1 != s) conditions, for version 7 whenever that will be.

nosh version 1.35

The nosh package is now up to version 1.35 . * http://jdebp.eu./Softwares/nosh/ * https://www.freebsd.org/news/status/report-2015-07-2015-09.html#The-nosh-Project * http://jdebp.info./Softwares/nosh/ Networking As I mentioned a week or so ago, the external configuration im

Gentoo wiki

For those people who had not noticed: Someone (I shall say no more. (-:) has been writing on the Gentoo wiki recently. * https://wiki.gentoo.org/wiki/S6_and_s6-rc-based_init_system * https://wiki.gentoo.org/wiki/Runit * https://wiki.gentoo.org/wiki/S6 * https://wiki.gentoo.org/wiki/Daemontool

Archnosh 1.35 networking

Thomas: [...] the new networking documentation [...] This will benefit a general readership, as well as you looking towards Archnosh 1.35. When you upgrade to 1.35, there will be two ways of configuring things. You can either write a Debian-style /etc/network/interfaces file, or you can e

djbwares version 6

djbwares is now at version 6. * http://jdebp.eu./Softwares/djbwares/ * http://jdebp.info./Softwares/djbwares/ The main changes here are in dnscache and ftpd. dnscache now has a built-in resource record for localhost, like it already had a built-in A resource record. I've slightly improve

Re: s6-svscanboot, how to exit?

> Type=forking No. > StandardOutput=tty No. > RemainAfterExit=yes No. > SysVStartPriority=99 No. You're a long-time daemontools user, you say. Why on Earth do you think that Type=forking is right? Why on Earth do you think that good daemons fork and exit parent? Why on Earth do you think

Re: s6-svscanboot, how to exit?

Jean Louis: > Well I made rc-local.service Do not do that. Creating a two steps backwards compatibility mechanism, in order to run s6-svscan under systemd, is daft. Jean Louis: > I just used recipe from stackexchange.com You're not reading the right parts of Stack Exchange, obviously. * https:

Re: nosh version 1.34

Guillermo: > > So, system-control has a new but undocumented 'is-service-manager-client' > subcommand? > Yes. It's part of an incomplete to-do list item; and might change.

Re: nosh git tree

Suggestions are welcome. You can put them on the Supervision mailing list if you like. Please bear in mind the design principles laid out in the Guide http://jdebp.eu./Softwares/nosh/guide.html , though. Bug reports and real world experiences are also welcome, and in fact more interesting. Seve

nosh version 1.34

The nosh package is now up to version 1.34 . * http://jdebp.eu./Softwares/nosh/ * https://www.freebsd.org/news/status/report-2015-07-2015-09.html#The-nosh-Project * http://jdebp.info./Softwares/nosh/ Once again, there are a few more service bundles. The most interesting ones in this version are

Runit and perp doco improvement for chpst and runuid

This week's little kerfuffle over systemd and the way that its mechanism to drop superuser privileges works (see https://news.ycombinator.com/item?id=14681377 and the headlined bug report there) has led me to observe that whilst the doco for nosh, s6, daemontools, and daemontools-encore all state t

Re: s6 as a systemd alternative

Charles Duffy > - Integration with the linux-only cgroups mechanism for managing CPU, > memory, and I/O throughput limits As you say, this is just an exercise in chain loading tools and conversion to scripts that employ them. * https://news.ycombinator.com/item?id=11846083 * http://jdebp.eu./Sof

Re: s6 as a systemd alternative

Casper Ti. Vector: > > (Normally Jonathan would be replying to this point, but I still do not see > him in this thread, so I rashly take this job ;) > Goodonyer. Thank you. I have been distracted. * https://github.com/neovim/neovim/pull/6816 https://github.com/neovim/neovim/pull/6816 I

Davin McCall's comparison of service and system management

https://github.com/davmac314/dinit/blob/master/doc/COMPARISON#L71 It's a shame that this gets a number of things wrong about several of the systems.

Re: small proxy

Jorge Almeida: > As said in the first mail, I need to redirect some targets to a ssh tunnel, > and let everything else go its way. Rather than using a proxy, the solution > seems obvious: [...] ... use a Proxy Auto-Configuration script, as that is the function of PAC scripts. * http://jdebp.eu./F

Re: A dumb question

Francisco Gómez García: > And the person who told me the "it is too old" thing used arguments > such as "it will eventually not compile" - while I doubt a small codebase > on plain C will stop compiling in the near future, it is indeed something > to keep an eye on. That person needs to learn f

Re: A dumb question

Laurent Bercot: > Lots of work have been put into s6 in the last few years, more than in any > other supervision suite, with the possible exception of nosh; (-: Laurent Bercot: > the fact that Void Linux has not yet switched to s6 is proof that runit is > still working well enough for them and th

Re: A dumb question

Laurent Bercot: > It is also true that it would benefit from closer maintenance. > Gerrit Pape, runit's author, is still around and still reads this list, > but is not as active as he was a few years ago (typically during > runit development). Fortunately, there are not many feature requests.

Re: A dumb question

Laurent Bercot: > > "It's old software. Its last version is from 2014." > > Old? Let's see... A more amusant counterexample is perhaps the Debian Almquist shell, put into widespread use on Debian and Ubuntu a decade ago in order to speed up bootstrap. M. Almquist first published it in May 1989.

  1   2   3   >