Re: [systemd-devel] tmpfiles versus tmpwatch

2015-04-29 Thread Lennart Poettering
On Wed, 29.04.15 22:08, Roger Qiu (roger@polycademy.com) wrote: Hi Lennart, So there really isn't a fast of way just checking if a file has an open file descriptor on it? Sometimes atime is on relatime, so it only gets updated if modification is earlier. Using relatime is fine,

[systemd-devel] systemd-coredump is extremely slow

2015-04-29 Thread Jan Včelák
Hello list, I'm having a trouble with systemd-coredump on my development machine. When my program crashes on an assert, the termination of the program takes a really long time even if RLIMIT_CORE is zero. When the program is compiled with address sanitizer, it usually takes minutes. I traced

Re: [systemd-devel] systemd-coredump is extremely slow

2015-04-29 Thread Lennart Poettering
On Wed, 29.04.15 12:14, Jan Včelák (jan.vce...@nic.cz) wrote: Hello list, I'm having a trouble with systemd-coredump on my development machine. When my program crashes on an assert, the termination of the program takes a really long time even if RLIMIT_CORE is zero. When the program is

Re: [systemd-devel] [systemd-commits] TODO

2015-04-29 Thread Martin Pitt
Hello all, Lennart Poettering [2015-04-28 17:48 +0200]: Hmm, so, anyone found out anything useful about this? None of the links above has anything useful really. I have never seen this issue myself, so I kinda am relying on input from those who experiencing this. Is this still an issue

Re: [systemd-devel] tmpfiles versus tmpwatch

2015-04-29 Thread Lennart Poettering
On Wed, 29.04.15 15:10, Roger Qiu (roger@polycademy.com) wrote: Hello all, I'm planning to use tmpwatch's `fuser` feature. But I'd prefer to run this simple service using systemd's tmpfiles. Does systemd tmpfiles support running `fuser` so that way it won't delete any files that have

Re: [systemd-devel] [PATCH] Add VARIANT as a standard value for /etc/os-release

2015-04-29 Thread Lennart Poettering
On Tue, 28.04.15 17:10, Stephen Gallagher (sgall...@redhat.com) wrote: + varlistentry +termvarnameVARIANT=/varname/term + +listitempara +A string identifying a specific variant or edition of the +operating system. This may be interpreted by other

[systemd-devel] Fwd: [systemd-208][PATCH] Force machined to dispatch messages

2015-04-29 Thread solganik
From: Alexander Solganik solga...@gmail.com Fixes https://bugzilla.redhat.com/show_bug.cgi?format=multipleid=1172387. Machined works in the follwing way : loop : 1) perform GC (Note at the end) 2) read messages from DBUS and dispatch one 3) if more messages pending goto

Re: [systemd-devel] Looping too fast. Throttling execution a little

2015-04-29 Thread Lennart Poettering
On Tue, 28.04.15 19:25, John Morrissey (j...@horde.net) wrote: On 18 Feb 2015, at 18:47, Lennart Poettering lennart at poettering.net wrote: Hmm, this appears to be caused by a timer that is not reset. First the timer fd is set to the earliest possible trigger, then epoll_wait() is

Re: [systemd-devel] systemd-nspawn and IPv6

2015-04-29 Thread Alexander E. Patrakov
29.04.2015 11:15, Jörg Thalheim wrote: Well, would that enable automatic, correcting routing between the container and the host's external network? That's kinda what this all is about... Lennart In case we know, which interface provides the external network, it is also possible to use proxy

Re: [systemd-devel] systemd-nspawn and IPv6

2015-04-29 Thread Lennart Poettering
On Wed, 29.04.15 08:15, Jörg Thalheim (joerg.syst...@higgsboson.tk) wrote: About ULA addresses (fd00::/8): couldn't these be generated using the machine-id of a container (does every container has a machine-id? is the mac address stable for containers)? We generate the mac addresses for

Re: [systemd-devel] systemd-nspawn and IPv6

2015-04-29 Thread Jörg Thalheim
Well, would that enable automatic, correcting routing between the container and the host's external network? That's kinda what this all is about... Lennart In case we know, which interface provides the external network, it is also possible to use proxy ndp to give containers routeable

Re: [systemd-devel] tmpfiles versus tmpwatch

2015-04-29 Thread Kai Krakow
Roger Qiu roger@polycademy.com schrieb: I'm planning to use tmpwatch's `fuser` feature. But I'd prefer to run this simple service using systemd's tmpfiles. Does systemd tmpfiles support running `fuser` so that way it won't delete any files that have an open file descriptor? I

[systemd-devel] [PATCH] Add VARIANT as a standard value for /etc/os-release

2015-04-29 Thread Stephen Gallagher
Some distributions (such as Fedora) are using the VARIANT field to indicate to select packages which of several default configurations they should be using. For example, VARIANT=Server provides a different default firewall configuration (blocking basically everything but SSH and the management

[systemd-devel] [PATCH] Add VARIANT as a standard value for /etc/os-release

2015-04-29 Thread Stephen Gallagher
Originally, I was only thinking that the parseable field mattered, but you're right. There's value in having a human-presentable field here as well. Updated patch attached. ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org

Re: [systemd-devel] [systemd-commits] TODO

2015-04-29 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Apr 29, 2015 at 11:51:18AM +0200, Martin Pitt wrote: Hello all, Lennart Poettering [2015-04-28 17:48 +0200]: Hmm, so, anyone found out anything useful about this? None of the links above has anything useful really. I have never seen this issue myself, so I kinda am relying on

[systemd-devel] [PATCH 2/2] networkd: IPMasquerade only implies IPForward=ipv4

2015-04-29 Thread Benedikt Morbach
at least that's what the code does --- man/systemd.network.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/man/systemd.network.xml b/man/systemd.network.xml index 31484d8..5504b46 100644 --- a/man/systemd.network.xml +++ b/man/systemd.network.xml @@ -382,7 +382,7 @@

[systemd-devel] networkd: ip forwarding fixes

2015-04-29 Thread Benedikt Morbach
After some more testing/thinking yesterday, I've decided to split this up and only do the bugfix for now. At least on my machine the global ip_forward setting is not needed, as long as all relevant interfaces have forwarding enabled. I still dislike that the default for networkd managed

[systemd-devel] [PATCH 1/2] networkd: don't touch global forwarding setting

2015-04-29 Thread Benedikt Morbach
This reverts commit 43c6d5abacaebf813845934ec8d5e5ee3c431854. It turns out we don't actually need to set the global ip_forward setting for it to work on a per interface basis. What this toggle actually does is switch forwarding on/off for all currently present interfaces and change the default

Re: [systemd-devel] tmpfiles versus tmpwatch

2015-04-29 Thread Roger Qiu
Hi Lennart, So there really isn't a fast of way just checking if a file has an open file descriptor on it? Sometimes atime is on relatime, so it only gets updated if modification is earlier. On servers that don't shutdown, processes may access the file for long periods of time, and the

Re: [systemd-devel] [systemd-commits] TODO

2015-04-29 Thread Lennart Poettering
On Wed, 29.04.15 11:51, Martin Pitt (martin.p...@ubuntu.com) wrote: Hello all, Lennart Poettering [2015-04-28 17:48 +0200]: Hmm, so, anyone found out anything useful about this? None of the links above has anything useful really. I have never seen this issue myself, so I kinda am

Re: [systemd-devel] sd-bus vs gdbus on dbus-daemon

2015-04-29 Thread Greg KH
On Wed, Apr 29, 2015 at 04:08:50PM +0200, Umut Tezduyar Lindskog wrote: Hi, We [1] have noticed that there could be up to %50 performance gain on using sd-bus over gdbus on dbus-daemon. For this reason, we have high interest in using sd-bus. What are the plans in terms of making sd-bus API

Re: [systemd-devel] sd-bus vs gdbus on dbus-daemon

2015-04-29 Thread Simon McVittie
On 29/04/15 16:49, Greg KH wrote: I'll echo Simon's statement here, making a call to g_dbus_proxy_call_sync() seems like an odd thing to test. Is this really how your application wants to work? Is it the normal call path that you need optimized? To be completely clear here: I am not saying

[systemd-devel] 'Failed at step NAMESPACE spawning' when using ReadOnlyDirectories in multi-instance service file

2015-04-29 Thread nusenu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, I'm running into a problem with systemd's hardening features ReadOnlyDirectories and ReadWriteDirectories *when* using them in multi-instance service files - temp. workaround was to disable them [1]. - - that the service works fine *with*

Re: [systemd-devel] [PATCH 2/3] networkd: introduce vti6 tunnel

2015-04-29 Thread Tom Gundersen
Applied. Thanks! Tom On Wed, Apr 22, 2015 at 10:44 AM, Susant Sahani sus...@redhat.com wrote: This patch add support to create vti6 tunnel test: vt6.network [Match] Name=wlan0 [Network] Tunnel=ip6vti vti6.netdev [NetDev] Name=ip6vti Kind=vti6 [Tunnel]

Re: [systemd-devel] initrd mount inactive

2015-04-29 Thread Aaron_Wright
Lennart Poettering lenn...@poettering.net wrote on 04/27/2015 12:47:38 PM: On Mon, 27.04.15 11:47, aaron_wri...@selinc.com (aaron_wri...@selinc.com) wrote: I applied commit 628c89cc68ab96fce2de7ebba5933725d147aecc - core: rework device state logic, but now I'm left with a random chance

Re: [systemd-devel] CapabilityBoundingSet vs. ExecReload (kill)

2015-04-29 Thread nusenu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I'm currently preparing a systemd service file for tor [1]. We make use of CapabilityBoundingSet and first we had it set to: CapabilityBoundingSet = CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE but after noticing that reloads fail I added

Re: [systemd-devel] [PATCH 3/3] networkd: add man for vti6 tunnel

2015-04-29 Thread Tom Gundersen
Applied. Thanks! Tom On Wed, Apr 22, 2015 at 10:44 AM, Susant Sahani sus...@redhat.com wrote: --- man/systemd.netdev.xml | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/man/systemd.netdev.xml b/man/systemd.netdev.xml index f413739..3bfd01b 100644 ---

Re: [systemd-devel] [PATCH 1/3] networkd: tunnel improve logging

2015-04-29 Thread Tom Gundersen
Applied. Thanks! Tom On Wed, Apr 22, 2015 at 10:44 AM, Susant Sahani sus...@redhat.com wrote: Replaces a lof ot strerror() usage with log_netdev_error_errno() --- src/network/networkd-netdev-tunnel.c | 240 ++- 1 file changed, 64 insertions(+), 176

Re: [systemd-devel] pam_systemd.so indirectly calling pam_acct_mgmt

2015-04-29 Thread Jakub Hrozek
On 10.04.2015 17:31, Lennart Poettering wrote: On Fri, 10.04.15 17:20, Jakub Hrozek (jakub.hro...@posteo.se) wrote: On 10.04.2015 17:06, Lennart Poettering wrote: On Fri, 10.04.15 16:56, Jakub Hrozek (jakub.hro...@posteo.se) wrote: I'm wondering why does systemd-user call the account

[systemd-devel] [PATCH] core: fix event source annotations

2015-04-29 Thread Mantas Mikulėnas
These looked like a mass-replace gone slightly wrong – two statements with no { }'s, and no error checking. --- src/core/busname.c | 4 +++- src/core/manager.c | 5 - src/core/socket.c | 3 ++- 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/src/core/busname.c

Re: [systemd-devel] [systemd-nspawn] nginx: [emerg] open() /dev/stderr failed (6: No such device or address)

2015-04-29 Thread Peter Paule
What precisely is the setting you picked? I used this setting: error_log /dev/stderr warn But I must admit, I thought that this is the default of the Arch Linux package. But they use this setting in their nginx-package: error_log stderr Here's their service-unit [Unit] Description=A

[systemd-devel] [PATCH] terminal: fix prototypes after removal of |bus|

2015-04-29 Thread Mantas Mikulėnas
Following commits fe506d569d82467f3186 and 190700621f95160d364f. --- src/libsystemd-terminal/grdev-drm.c | 9 +++-- src/libsystemd-terminal/idev-evdev.c| 3 +-- src/libsystemd-terminal/idev-keyboard.c | 8 +++- src/libsystemd-terminal/idev.c | 6 ++

Re: [systemd-devel] [PATCH] core: fix event source annotations

2015-04-29 Thread Tom Gundersen
Applied. Thanks! Tom On Wed, Apr 29, 2015 at 8:29 PM, Mantas Mikulėnas graw...@gmail.com wrote: These looked like a mass-replace gone slightly wrong – two statements with no { }'s, and no error checking. --- src/core/busname.c | 4 +++- src/core/manager.c | 5 - src/core/socket.c | 3

[systemd-devel] [PATCH] coredump: vacuum - fix MaxUse and KeepFree default handling

2015-04-29 Thread Mike Winter
When max_use and keep_free are set to the defaults in coredump.conf for use in non-journal cores, systemd-coredump ignores the settings altogether and proceeds to fill up all available disk space with coredumps. '-1 'is used internally inside of coredump.c and coredump-vacuum.c to denote

[systemd-devel] Basic network with Fedora conatiner

2015-04-29 Thread arnaud gaboury
After installation of Fedora 22 container, the container (poppy) boots but no network. # journalctl -b -M poppy Apr 29 14:02:20 poppy firewalld[28]: 2015-04-29 14:02:20 ERROR: ebtables not usable, disabling ethernet bridge firewall. Apr 29 14:02:20 poppy NetworkManager[56]: warn

[systemd-devel] sd-bus vs gdbus on dbus-daemon

2015-04-29 Thread Umut Tezduyar Lindskog
Hi, We [1] have noticed that there could be up to %50 performance gain on using sd-bus over gdbus on dbus-daemon. For this reason, we have high interest in using sd-bus. What are the plans in terms of making sd-bus API public? Details of the test [2]: gdbus.c - g_dbus_proxy_new_for_bus_sync()

Re: [systemd-devel] [systemd-commits] TODO

2015-04-29 Thread David Herrmann
Hi On Wed, Apr 29, 2015 at 2:25 PM, Zbigniew Jędrzejewski-Szmek zbys...@in.waw.pl wrote: On Wed, Apr 29, 2015 at 11:51:18AM +0200, Martin Pitt wrote: Hello all, Lennart Poettering [2015-04-28 17:48 +0200]: Hmm, so, anyone found out anything useful about this? None of the links above has

Re: [systemd-devel] Basic network with Fedora conatiner

2015-04-29 Thread Dan Williams
On Wed, 2015-04-29 at 15:36 +0200, arnaud gaboury wrote: After installation of Fedora 22 container, the container (poppy) boots but no network. # journalctl -b -M poppy Apr 29 14:02:20 poppy firewalld[28]: 2015-04-29 14:02:20 ERROR: ebtables not usable, disabling

Re: [systemd-devel] Basic network with Fedora conatiner

2015-04-29 Thread arnaud gaboury
On Wed, Apr 29, 2015 at 4:48 PM, Dan Williams d...@redhat.com wrote: On Wed, 2015-04-29 at 15:36 +0200, arnaud gaboury wrote: After installation of Fedora 22 container, the container (poppy) boots but no network. # journalctl -b -M poppy Apr 29 14:02:20 poppy

Re: [systemd-devel] sd-bus vs gdbus on dbus-daemon

2015-04-29 Thread Simon McVittie
On 29/04/15 15:08, Umut Tezduyar Lindskog wrote: We [1] have noticed that there could be up to %50 performance gain on using sd-bus over gdbus on dbus-daemon. ... gdbus.c - g_dbus_proxy_new_for_bus_sync() - 50 x g_dbus_proxy_call_sync() sdbus.c - sd_bus_open_system() - 50 x

Re: [systemd-devel] Looping too fast. Throttling execution a little

2015-04-29 Thread John Morrissey
On Wed, Apr 29, 2015 at 11:46:50AM +0200, Lennart Poettering wrote: On Tue, 28.04.15 19:25, John Morrissey (j...@horde.net) wrote: On 18 Feb 2015, at 18:47, Lennart Poettering lennart at poettering.net wrote: Hmm, this appears to be caused by a timer that is not reset. First the timer