Re: [systemd-devel] Question about propagation of INVOCATION_ID and JOURNAL_STREAM env variables in Desktop Environments

2024-05-23 Thread Andrei Borzenkov
On 23.05.2024 09:18, Nop wrote: From my terminal emulator that I start by clicking in the menu: echo "kitty: $(pidof kitty) - $INVOCATION_ID" && echo "plasmashell: $(pidof plasmashell) - $(sudo strings /proc/$(pidof plasmashell)/environ | grep INVOCATION_ID)" kitty: 4441 -

Re: [systemd-devel] Question about propagation of INVOCATION_ID and JOURNAL_STREAM env variables in Desktop Environments

2024-05-22 Thread Andrei Borzenkov
On 22.05.2024 23:35, Nop wrote: Sorry, just noticed that I didn't "reply to all"... So Lennart is going to receive this twice... Le mer. 22 mai 2024 à 17:42, Lennart Poettering a écrit : On Mi, 22.05.24 17:13, Nop (ctx...@gmail.com) wrote: Hello folks, I have a question about what you guys

Re: [systemd-devel] Questions about initrd environment services and IgnoreOnIsolate

2024-05-12 Thread Andrei Borzenkov
On 12.05.2024 18:19, Carolina Jubran wrote: Hello! I need help with a systemd service that loads RDMA and InfiniBand drivers. The service unit specifies DefaultDependencies=no. However, when the service starts in initrd, it gets terminated when initrd-cleanup.service isolates for

Re: [systemd-devel] Unclear as to why "exec" works but "oneshot" does not

2024-04-14 Thread Andrei Borzenkov
On 14.04.2024 16:48, Laura Smith wrote: I am running a simple service to tweak SSHD on first boot (the script is at the bottom of this mail). This is on Debian Bookworm incase it makes any difference. If I configure my service as: [Unit] Description=ITS Generate SSH Server Keys

Re: [systemd-devel] How to chain services driven by a timer?

2024-04-11 Thread Andrei Borzenkov
On Thu, Apr 11, 2024 at 4:17 PM Brian Reichert wrote: > > On Thu, Apr 11, 2024 at 11:16:36AM +0300, Andrei Borzenkov wrote: > > Show full unit definition for both logrotate.service and your service. > > Sure: > > 10-153-68-34:~ # cat /usr/lib/systemd/system/l

Re: [systemd-devel] How to chain services driven by a timer?

2024-04-11 Thread Andrei Borzenkov
On Thu, Apr 11, 2024 at 12:07 AM Brian Reichert wrote: > > On Wed, Apr 10, 2024 at 01:47:47PM -0600, Dan Nicholson wrote: > > Restarting the timer doesn't make the service run immediately. Are you > > sure logrotate.service has run again since you made this change? Just > > simulate the timer and

Re: [systemd-devel] How to chain services driven by a timer?

2024-04-10 Thread Andrei Borzenkov
On 10.04.2024 22:04, Brian Reichert wrote: On Wed, Apr 10, 2024 at 09:06:09AM -0600, Dan Nicholson wrote: On Wed, Apr 10, 2024 at 8:50???AM Brian Reichert wrote: My current service file: [Unit] Description=Activities after logrotation Requires=logrotate.service

Re: [systemd-devel] How to automatically decrypt a disk on connection

2024-03-28 Thread Andrei Borzenkov
On Wed, Mar 27, 2024 at 9:49 PM Orion Poplawski wrote: > > > > Use $kernel in rule and /dev/%I in service. > > Thank you, that works. udev monitor -p doesn't show the value of KERNEL so I > didn't see that as an option. > udev documentation lists $kernel when describing substitutions. But yes,

Re: [systemd-devel] How to automatically decrypt a disk on connection

2024-03-27 Thread Andrei Borzenkov
On 27.03.2024 20:56, Orion Poplawski wrote: On 3/27/24 10:22, Mantas Mikulėnas wrote: On Wed, Mar 27, 2024, 16:36 Orion Poplawski mailto:or...@nwra.com>> wrote: Can I setup a unit that gets started automatically when a particular dev-disk-by-uuid device becomes present? Just

Re: [systemd-devel] How to automatically decrypt a disk on connection

2024-03-27 Thread Andrei Borzenkov
On Wed, Mar 27, 2024 at 12:35 AM Orion Poplawski wrote: > > Sorry this isn't strictly devel - but it is a bit non-standard. > > I need to automatically unlock an encrypted disk on connection to a machine, > with the caveat that I'm not mounting it - instead I want to connect it to a > VM. > > On

Re: [systemd-devel] enable systemd-resolved in early boot (dracut)

2024-03-21 Thread Andrei Borzenkov
On Thu, Mar 21, 2024 at 4:44 PM Cristian Rodríguez wrote: > > On Tue, Mar 19, 2024 at 7:44 AM Aleksandar Kostadinov > wrote: > > > > Hello, > > > > I want to enable systemd-resolved in early boot so that `clevis` can > > resolve `tang` address by mdns. This will simplify local network > >

Re: [systemd-devel] Restarting dbus service makes system unstable

2024-03-07 Thread Andrei Borzenkov
On 08.03.2024 09:49, Shreenidhi Shedi wrote: Hi All, I tried this on Fedora 39 so anyone can reproduce this at their end I guess. Restarting D-Bus was never safe and never supported. Every individual application would need to support D-Bus connection loss and be able to transparently

Re: [systemd-devel] Query on sshd.socket sshd.service approaches

2024-03-05 Thread Andrei Borzenkov
On Wed, Mar 6, 2024 at 8:41 AM Shreenidhi Shedi wrote: > > Hi All, > > What is the rationale behind using sshd.socket other than not keeping sshd > daemon running always and reducing memory consumption? Neither is provided by systemd, so I guess this question is better addressed to the project

Re: [systemd-devel] Wireguard routes only after connect

2024-02-23 Thread Andrei Borzenkov
On 14.02.2024 11:55, Julian Zielke wrote: Hi, is there a possibility to only add the routes from allowed-ips to the kernel routing table after the peer has connected? This directly contradicts your next statement Because since the tunnel itself is stateless, there is no way for me to make

Re: [systemd-devel] Can I provide separate enabling for dbus-activation and "normal" start ?

2024-02-22 Thread Andrei Borzenkov
On 22.02.2024 19:09, Max Gautier wrote: Hi, Is it possible when writing a dbus-activable service to provide two separate and independent ways to enable it ? The D-Bus service file would for instance be: [D-BUS Service] Name=org.freedesktop.Notifications Exec=notification-daemon

Re: [systemd-devel] Issues supporting systems with and without TPM and firmware TPM (was Re: Handle device node timeout?)

2024-02-19 Thread Andrei Borzenkov
On Mon, Feb 19, 2024 at 11:37 AM Mikko Rapeli wrote: > > Hi, > > On Fri, Feb 16, 2024 at 11:28:31AM +0200, Mikko Rapeli wrote: > > Hi, > > > > Following up to my previous question which worked around with > > Wants: and After: to dev-tpmrm0.device and tee-supplicant@teepriv0.service, > > which

Re: [systemd-devel] Assistance Needed with 'loginctl list-users' Command Display Issue

2024-02-12 Thread Andrei Borzenkov
On 13.02.2024 09:41, Sangeetha Elumalai wrote: Hi, I modified the following file, but I am still facing the issue. # cat common-session # # /etc/pam.d/common-session - session-related modules common to all services # And did you verify that this file is actually included by the PAM service

Re: [systemd-devel] Assistance Needed with 'loginctl list-users' Command Display Issue

2024-02-12 Thread Andrei Borzenkov
On 13.02.2024 07:52, Sangeetha Elumalai wrote: Hi, The* 'loginctl list-users'* command isn't displaying the user list. I would appreciate any suggestions on resolving this issue. Do I need to enable any specific service for this functionality? Here are the logs: ``` # who root ttyS0

Re: [systemd-devel] Submitting a service activation to remote mounts success

2024-02-07 Thread Andrei Borzenkov
On 07.02.2024 19:20, Thomas HUMMEL wrote: On 2/7/24 11:50, Thomas HUMMEL wrote: Still I cannot understand where the Requires= comes in remote-fs.target unit as doc for special target only describes a Wants= dep added by systemd-fstab-generator in the case of auto mounts. Well, forget about

Re: [systemd-devel] Submitting a service activation to remote mounts success

2024-02-07 Thread Andrei Borzenkov
On 07.02.2024 13:50, Thomas HUMMEL wrote: Still I cannot understand where the Requires= comes in remote-fs.target unit It is generated by systemd-fstab-generator as doc for special target only describes a Wants= dep added by systemd-fstab-generator in the case of auto mounts. If doc for

Re: [systemd-devel] Empty journal files consume space

2024-02-02 Thread Andrei Borzenkov
On Fri, Feb 2, 2024 at 12:18 AM Steve Traylen wrote: > > > On 01/02/2024 14:48, Steve Traylen wrote: > > On 01/02/2024 13:45, Andrei Borzenkov wrote: > > > >> On Thu, Feb 1, 2024 at 3:25 PM Steve Traylen > >> wrote: > >>> Hi, > >>&

Re: [systemd-devel] Empty journal files consume space

2024-02-01 Thread Andrei Borzenkov
On Thu, Feb 1, 2024 at 3:25 PM Steve Traylen wrote: > > Hi, > > I'm trying to understand why I am only retaining just a couple of days > of logs when I would like to have more. > > The system journalctl head of the logs is only today: > Feb 01 10:47:14 nodeX.example.ch systemd-journald[722]:

Re: [systemd-devel] Delaying VM startup until block devices are available

2024-01-26 Thread Andrei Borzenkov
On 27.01.2024 00:40, Orion Poplawski wrote: On 1/26/24 01:21, Lennart Poettering wrote: On Do, 25.01.24 16:28, Orion Poplawski (or...@nwra.com) wrote: We have various VMs that are back by luks encrypted LVs. At boot the volumes are decrypted by clevis. The problem we are seeing at the

Re: [systemd-devel] Delaying VM startup until block devices are available

2024-01-25 Thread Andrei Borzenkov
On Fri, Jan 26, 2024 at 2:29 AM Orion Poplawski wrote: > > We have various VMs that are back by luks encrypted LVs. At boot the volumes > are decrypted by clevis. The problem we are seeing at the moment is that the > VMs are started before the block devices are decrypted. Our current solution

Re: [systemd-devel] Permanently remove services

2024-01-19 Thread Andrei Borzenkov
On 19.01.2024 20:22, Mantas Mikulėnas wrote: On Fri, Jan 19, 2024, 19:12 Morten Bo Johansen wrote: On 2024-01-19 Mantas Mikulėnas wrote: In general I've learned to not quite trust what the firmware shows... we've had a batch of Skylake-or-so desktops that *did* have a CPU-integrated fTPM

Re: [systemd-devel] Permanently remove services

2024-01-19 Thread Andrei Borzenkov
On 19.01.2024 19:47, Morten Bo Johansen wrote: On 2024-01-19 Mantas Mikulėnas wrote: In general I've learned to not quite trust what the firmware shows... we've had a batch of Skylake-or-so desktops that *did* have a CPU-integrated fTPM but it wasn't even mentioned until we did a BIOS update,

Re: Masking swap.target to disable swaps (on old systemd versions)

2024-01-02 Thread Andrei Borzenkov
On 02.01.2024 18:47, Max Gautier wrote: Hi, Is masking `swap.target` a reliable/supported way to disable all swaps (partition, file, whatever) ? I used that approach in Kubespray[1] (a k8s installer) while refactoring our "disable swap" steps, but it looks likes it does not work on Centos 7

Re: udev rules in /etc/udev/rules.d/ ignored/not-loaded on boot; exec manually OK at shell ?

2023-12-22 Thread Andrei Borzenkov
On 22.12.2023 19:11, pgnd wrote: You do realize that /etc/ is generally not transferred from the initrd to the host? If you look into /etc/ from the host, then no files you created there from the initrd will exist. it doesn't appear that the rules are written to the initrd in the first place.

Re: Ton of random units "could not be found"

2023-12-15 Thread Andrei Borzenkov
On 16.12.2023 08:17, chandler wrote: Hi all,     When I run `systemctl status --all` I see a ton of "Unit X could not be found" where X = an item from the list below.  How did this mess happen and how to clean it up?  None of these units represent things the system is using, for the most part.

Re: networkd: learned DNS server not propagated to rdnss option in RA

2023-12-13 Thread Andrei Borzenkov
On Wed, Dec 13, 2023 at 10:46 AM Michael Heimpold wrote: > > Dear all, > > I'm trying to setup an embedded system as IPv6 router using IPv6 > prefix delegation. The system has two network interfaces, eth0 and > eth1. eth0 is the upstream interface, but it is part of a bridge interface, > but I

Re: [systemd-devel] Manual start of user@.service failed with permission denied

2023-12-11 Thread Andrei Borzenkov
On 11.12.2023 18:28, Christopher Wong wrote: Hi Mantas, I have added ExecStartPre to user@.service to run “id” and “ls -la”: Dec 11 15:50:34 host systemd-user-runtime-dir[40287]: Will mount /run/user/1001 owned by 1001:118 Dec 11 15:50:34 host

Re: [RFC] initoverlayfs - a scalable initial filesystem

2023-12-09 Thread Andrei Borzenkov
On 09.12.2023 17:42, Eric Curtin wrote: On Sat, 9 Dec 2023 at 12:46, Luca Boccassi wrote: On Fri, 8 Dec 2023 at 19:00, Eric Curtin wrote: We have been working on a new initial filesystem called initoverlayfs. It is a new filesystem that provides a more scalable approach to initial

Re: [systemd-devel] Manual start of user@.service failed with permission denied

2023-12-08 Thread Andrei Borzenkov
On 08.12.2023 23:53, Mantas Mikulėnas wrote: ... Dec 08 17:33:29 host systemd-user-runtime-dir[36278]: Will mount /run/user/1001 owned by 1001:118 Dec 08 17:33:29 host systemd-user-runtime-dir[36278]: Mounting tmpfs (tmpfs) on /run/user/1001 (MS_NOSUID|MS_NODEV

Re: [systemd-devel] WSL Ubuntu creates XDG_RUNTIME_DIR with incorrect permissions

2023-11-27 Thread Andrei Borzenkov
> you know about any any of those cases :) Right now, I barely know where to > report this issue. > > > On Sun, Nov 26, 2023 at 10:07 AM Andrei Borzenkov wrote: >> >> On 26.11.2023 02:39, Thomas Larsen Wessel wrote: >> > I set up WSL on Windows 10 and created

Re: [systemd-devel] WSL Ubuntu creates XDG_RUNTIME_DIR with incorrect permissions

2023-11-25 Thread Andrei Borzenkov
On 26.11.2023 02:39, Thomas Larsen Wessel wrote: I set up WSL on Windows 10 and created an instance from the default Ubuntu 22.04 image. I ran some (non-GUI) software that somehow relies on Qt, and apparently Qt does some checks on the XDG environment, so I got the following. *Warning:

Re: [systemd-devel] Reload simple

2023-10-27 Thread Andrei Borzenkov
On Fri, Oct 27, 2023 at 2:07 PM Andy Pieters wrote: > > Hi > > Is there a good way to send a usr1 signal upon reload of a service with > type=simple? > > I don't really want to do KILL USR1 $(pidof process) as that could pull other > processes with similar names / instances. > systemctl kill

Re: [systemd-devel] Help! iSCSI based file systemd with "_netdev" causing ordering cycles to occur (random services and mounts fail)

2023-10-27 Thread Andrei Borzenkov
On Fri, Oct 27, 2023 at 5:01 AM Tony Rodriguez wrote: > > Experiencing this same issue with iSCSI and systemd-239 for RH8/Rocky8 > and RH9/Rocky9 system-252. Nothing was done on my end to create this > issue. In other words, no custom mount/unit files or services, just > your typical ISO install

Re: [systemd-devel] How to make an encrypted disk mentioned in /etc/crypttab "optional"?

2023-10-09 Thread Andrei Borzenkov
On Mon, Oct 9, 2023 at 10:10 AM Aaron Rainbolt wrote: > > Good morning/evening, and thanks for your time. > > I'm attempting to create a Fedora-based immutable distro (not based on > Silverblue) that stores user data in an encrypted /home partition. The > goal is to have something that behaves

Re: [systemd-devel] What condition(s) do .device units wait for?

2023-09-16 Thread Andrei Borzenkov
On 16.09.2023 07:53, Philip Couling wrote: I'm trying to understand what a system is timing out waiting for a device in /etc/fstab when a simple "mount -av" will succeed. To reach systemd, initramfs has already mounted the device as the base layer to an overlay mount used as the root file

Re: [systemd-devel] Wifi resumes with wrong ssid after opening laptop lid

2023-09-07 Thread Andrei Borzenkov
On 07.09.2023 21:07, Morten Bo Johansen wrote: Hi First, apologies if this isn't really systemd related ... I have a wifi router and an extender/repeater. I connect to the extender's ssid to get the best signal, but when I close the lid on my laptop and then open it again, wifi resumes instead

Re: [systemd-devel] Question regarding configuration of SystemMaxUse and SystemKeepFree

2023-09-02 Thread Andrei Borzenkov
On 02.09.2023 12:22, PureLinux Betriebsführung wrote: ... The documentation states, that there are relative values used per default, but they are capped (as you mentioned) at a specific value. So for me, it looks like journald is also supporting relative values. So i am wondering about the

Re: [systemd-devel] Question regarding configuration of SystemMaxUse and SystemKeepFree

2023-09-01 Thread Andrei Borzenkov
On 02.09.2023 00:29, PureLinux Betriebsführung wrote: Hi, i am running a bunch of partly very different systems with Debian Bookworm. On this machines, i am using systemd 252 (252.12-1~deb12u1). If i am configuring journald, i am facing the problem, that /var/log is having a very different size

Re: [systemd-devel] [multiseat] How to make automatic ACL creation via udev "uaccess" tag work for seats other than seat0?

2023-08-31 Thread Andrei Borzenkov
On 31.08.2023 19:22, Christian Pernegger wrote: Hello, still trying to get the kinks out of my multiseat setup ... AFAICT the proper way to give local users access to devices nowadays is via udev and the "uaccess" tag: devices with this tag set should automagically get an ACL entry that gives

Re: [systemd-devel] Systemctl thinks a service file exists that does not

2023-08-28 Thread Andrei Borzenkov
On Mon, Aug 28, 2023 at 1:50 PM Cecil Westerhof wrote: > > Op ma 28 aug 2023 om 11:55 schreef Andrei Borzenkov : >> >> On Mon, Aug 28, 2023 at 12:27 PM Cecil Westerhof >> wrote: >> > >> > On debian 12, when Itype: >> > sys

Re: [systemd-devel] Systemctl thinks a service file exists that does not

2023-08-28 Thread Andrei Borzenkov
On Mon, Aug 28, 2023 at 12:27 PM Cecil Westerhof wrote: > > On debian 12, when Itype: > systemctl status spam > > and giving a tab I get: > spamassassin-maintenance.service spamassassin.service > spamassassin-maintenance.timerspamd.service > > Still: > systemctl start

Re: [systemd-devel] Normal user can ask status of services

2023-08-27 Thread Andrei Borzenkov
On 27.08.2023 20:35, Cecil Westerhof wrote: Op zo 27 aug 2023 om 18:30 schreef Leon Fauster : Am 26.08.23 um 18:41 schrieb Cecil Westerhof: Replying on google does not work as I am used to. It sends to the sender instead of the group.  Op za 26 aug 2023 om 18:36 schreef Cecil Westerhof

Re: [systemd-devel] Normal user can ask status of services

2023-08-26 Thread Andrei Borzenkov
On 26.08.2023 15:46, Michael Biebl wrote: Reading system logs is a privileged operation. It is not about reading logs but about being able to "systemctl status some-system-unit" You can grant this privilege to individual users by adding them to the systemd-journal (or adm) group. The

Re: [systemd-devel] Normal user can ask status of services

2023-08-26 Thread Andrei Borzenkov
Do not send personal reply to the list post. On 26.08.2023 15:35, Cecil Westerhof wrote: Op za 26 aug 2023 om 13:45 schreef Andrei Borzenkov : On 26.08.2023 10:44, Cecil Westerhof wrote: Is this the expected behaviour? Yes, it is. It seemed strange to me, but I will not worry

Re: [systemd-devel] Normal user can ask status of services

2023-08-26 Thread Andrei Borzenkov
On 26.08.2023 10:44, Cecil Westerhof wrote: Is this the expected behaviour? Yes, it is.

Re: [systemd-devel] systemd-cryptenroll with TPM2

2023-08-23 Thread Andrei Borzenkov
On Wed, Aug 23, 2023 at 12:50 PM Aleksandar Kostadinov wrote: > > On Wed, Aug 23, 2023 at 10:49 AM Andrei Borzenkov wrote: > <...> > > > > Sure, if you allow unencrypted systems to boot in your OS then all > > > > bets are off. You shouldn't do that

Re: [systemd-devel] systemd-cryptenroll with TPM2

2023-08-23 Thread Andrei Borzenkov
On Tue, Aug 22, 2023 at 10:45 PM Aleksandar Kostadinov wrote: > > On Tue, Aug 22, 2023 at 8:10 PM Lennart Poettering > wrote: > > On Di, 22.08.23 19:16, Aleksandar Kostadinov (akost...@redhat.com) wrote: > <...> > > > If attacker replaces volume with unencrypted one, and it boots without > > >

Re: [systemd-devel] Ordering dependency on device unit not working

2023-08-14 Thread Andrei Borzenkov
On 13.08.2023 22:37, Ian Pilcher wrote: I am attempting to create a service that will load device-specific netfilter rules after the corresponding device has been created (bonds, VLANs, etc.). Here is my current attempt. [Unit] Description=Apply device-specific nftables rules for %I

Re: [systemd-devel] Service not run, although enabled

2023-08-08 Thread Andrei Borzenkov
On Tue, Aug 8, 2023 at 11:31 AM Martin Stenzel wrote: ... > Your answer: > These Wants and After are redundant, every standard service will be > ordered after local-fs.target unless it also has > DefaultDependencies=no. > > My answer/question: > I want my service to be run DIRECTLY (at first

Re: [systemd-devel] Service not run, although enabled

2023-08-07 Thread Andrei Borzenkov
On Mon, Aug 7, 2023 at 11:49 AM Martin Stenzel wrote: > > > Hi list, > I searched the _whole_ www but did not find the answer. > > > > I use bestcrypt > to mount the home directory. > > > This is my service file. > > -- > [Unit] > Description=Mount Bestcrypt containers > Wants=local-fs.target >

Re: [systemd-devel] multiple starts for a socket-based service

2023-08-05 Thread Andrei Borzenkov
On 06.08.2023 03:42, Ross Boylan wrote: On Fri, Aug 4, 2023 at 4:32 PM Kevin P. Fleming wrote: On Fri, Aug 4, 2023, at 18:11, Ross Boylan wrote: Theory: since br0 has no associated IP address when socket creation is attempted, the socket creation fails. If so, I need to delay socket startup

Re: [systemd-devel] Networkd doesn't create route for IP in different but connected net with GatewayOnLink= Inbox

2023-07-12 Thread Andrei Borzenkov
not sure this represents a meaningful difference. > > On Wed, 12 Jul 2023 at 10:29, Andrei Borzenkov wrote: >> >> On Wed, Jul 12, 2023 at 10:44 AM LunarLambda wrote: >> > >> > Hello, >> > >> > I was recently tasked with moving existing network configur

Re: [systemd-devel] Networkd doesn't create route for IP in different but connected net with GatewayOnLink= Inbox

2023-07-12 Thread Andrei Borzenkov
On Wed, Jul 12, 2023 at 10:44 AM LunarLambda wrote: > > Hello, > > I was recently tasked with moving existing network configuration for a > machine and some nspawn containers from iupdown to networkd. > > The situation looks as follows: > > A single VPS has 3 IPs. One 37.x.x.x/22, and two

Re: [systemd-devel] Why is my reboot.target disabled?

2023-07-05 Thread Andrei Borzenkov
On 05.07.2023 11:57, Ferenc Wágner wrote: Andrei Borzenkov writes: On 04.07.2023 14:58, Ferenc Wágner wrote: Please help me understand this phenomenon (systemd 252): $ systemctl status ctrl-alt-del.target ○ reboot.target - System Reboot Loaded: loaded (/lib/systemd/system

Re: [systemd-devel] Why is my reboot.target disabled?

2023-07-04 Thread Andrei Borzenkov
On 04.07.2023 14:58, Ferenc Wágner wrote: Hi, Please help me understand this phenomenon (systemd 252): $ systemctl status ctrl-alt-del.target ○ reboot.target - System Reboot Loaded: loaded (/lib/systemd/system/reboot.target; disabled; preset: enabled) Active: inactive (dead)

Re: [systemd-devel] PAMName=login, systemctl stop

2023-07-03 Thread Andrei Borzenkov
On 03.07.2023 14:17, Lennart Poettering wrote: On Mo, 03.07.23 10:58, Valentijn Sessink (valent...@sessink.nl) wrote: Now my remaining question is probably so very basic, that you sort of missed it: my "session" is started from a script and so I'm probably able to stop all services in the

Re: [systemd-devel] sd-boot setup and PCRs

2023-06-19 Thread Andrei Borzenkov
rd disk. I am not familiar with details of UKI implementation, but if it is possible to override kernel command line, you can trivially boot into /bin/sh unless you also bind LUKS key to the PCR 12 (or whatever is used to measure kernel parameters). Regards! Felix On 2023-06-19 06:26, Andrei Borz

Re: [systemd-devel] sd-boot setup and PCRs

2023-06-19 Thread Andrei Borzenkov
d disk. I am not familiar with details of UKI implementation, but if it is possible to override kernel command line, you can trivially boot into /bin/sh unless you also bind LUKS key to the PCR 12 (or whatever is used to measure kernel parameters). Regards! Felix On 2023-06-19 06:26, Andr

Re: [systemd-devel] sd-boot setup and PCRs

2023-06-18 Thread Andrei Borzenkov
On 18.06.2023 21:56, Felix Rubio wrote: Hi everybody, After some days offline, today I have gone through the emails exchanged a couple of weeks ago and agreed: UKI is the way to go. Last time I checked about it I read about possible problems related to when some modules would be loaded and so,

Re: [systemd-devel] Usage of PCR[7]

2023-06-06 Thread Andrei Borzenkov
On Tue, Jun 6, 2023 at 8:20 AM Mantas Mikulėnas wrote: > > On Mon, Jun 5, 2023 at 11:38 PM Adrian Vovk wrote: >> >> >> 2. The alternative approach involves pre-calculating PCR[7] on the >> client if we're updating DBX or Shim. Here's how I envision this >> going: >> - We read the TPM log (which

Re: [systemd-devel] Under what condition would systemd not restart a target service.

2023-06-03 Thread Andrei Borzenkov
On 03.06.2023 15:25, Virendra Negi wrote: I noticed a couple of days back that in the event of an apt-get update of the target services, our services did not start. "target service" sounds very strange in systemd world. Apparently, the service was in a sleeping state when it was upgraded.

Re: [systemd-devel] By what mechanism are locale-related environment variables (LC_*) set in services?

2023-05-25 Thread Andrei Borzenkov
On 25.05.2023 17:12, Farblos wrote: Running on systemd 252 (252.6-1) on Debian testing. It seems that systemd services, also transient ones, get the full set of locale environment variables (LANG, LANGUAGE, LC_*) as defined in /etc/default/locale. I only have found environment variable $LANG

Re: [systemd-devel] why systemd-boot (seems as everyone else) does not check the signatures of initramfs?

2023-05-24 Thread Andrei Borzenkov
need to either wrap it in PE (which is effectively what UKI does) or develop a new standard for attaching signature to initrd. For example, using grub2 GPG keys :) > Thank you > > --- > Felix Rubio > "Don't believe what you're told. Double check." > > On 2023-05-23 2

Re: [systemd-devel] why systemd-boot (seems as everyone else) does not check the signatures of initramfs?

2023-05-23 Thread Andrei Borzenkov
On 23.05.2023 21:54, Felix Rubio wrote: Hi everybody, I am trying to understand something, and after looking around I have not found any explicit answer. Maybe somebody in this list can shed some light on the matter? I have a laptop in which I am setting up the boot process through

Re: [systemd-devel] Ordering cycle when trying to use BindToDevice socket option

2023-03-31 Thread Andrei Borzenkov
On 01.04.2023 01:12, Dmitri Kourennyi wrote: The message seems to imply that systemd-networkd depends on sockets.target, which in turn depends on the tinyssh socket, but that in turn needs systemd-networkd to run to create the target device. I Socket units have implicit Before=sockets.target

Re: [systemd-devel] networkd: Link local static IP address behind NAT

2023-01-19 Thread Andrei Borzenkov
On 18.01.2023 17:12, Thomas Burghout wrote: On 18.01.20233 04:06, Andrei Borzenkov wrote: On 17.01.2023 18:28, Thomas Burghout wrote: inet 169.254.146.171/16 brd 169.254.255.255 scope link eth0 Is it output from the correct system? Because address is different. I do not see how "

Re: [systemd-devel] networkd: Link local static IP address behind NAT

2023-01-17 Thread Andrei Borzenkov
On 17.01.2023 18:28, Thomas Burghout wrote: Hello, We are trying to configure a device to use a gateway and a static IP address (in the link-local address range). However, the default gateway does not appear to be used. As such, there is no traffic possible to the internet. The device runs

Re: [systemd-devel] efivarfs mounting

2023-01-16 Thread Andrei Borzenkov
On 16.01.2023 20:30, Michał Zegan wrote: Hello, What should be responsible for mounting efivarfs? systemd itself (PID 1) when it is started Using systemd-251 on fedora37, and my machine is booted in uefi mode also with secureboot, but /sys/firmware/efi/efivars is not mounted on boot, why?

Re: [systemd-devel] service dependencies

2023-01-10 Thread Andrei Borzenkov
On Tue, Jan 10, 2023 at 2:48 PM Markus Rathgeb wrote: > > Hello, > > I have a question about service dependencies. > > Assume there are two services > * test1 > * test2 > > (for testing purpose only I am using user services) > > The test2 service requires that test1 service is active. > The test2

Re: [systemd-devel] Order-only mount units?

2023-01-07 Thread Andrei Borzenkov
On 07.01.2023 19:06, Norbert Lange wrote: Hello, Say want a service unit which mounts some stuff, then does further steps (create some initial files, etc..). The problem here is that it is not automatically ordered in regards to mounts in the subdirectories or some other dependencies like

Re: [systemd-devel] Ordering issues

2023-01-04 Thread Andrei Borzenkov
On 04.01.2023 21:21, Scott Ellentuch wrote: Hi, I'm trying to do something with inconsistent results and wondered where I'm going wrong. I recently installed GLUSTERFS onto a set of 4 Raspberry PI's, but am having some boot sequencing issues. It started trying to run rsyslogd. Apparently, it

Re: [systemd-devel] Trying to understand change in PCR 4 extension behavior

2022-12-30 Thread Andrei Borzenkov
, Kyle On Mon, Dec 19, 2022 at 1:36 PM Andrei Borzenkov wrote: On 14.12.2022 20:28, Kyle Rose wrote: ... However, in v252, the corresponding event occurs earlier in the log and (after some measurements extending PCR 11) is followed by another BSA event extending PCR 4 with a DevicePath I can't

Re: [systemd-devel] how to run a shell in my systemd initramfs before pivot root

2022-12-27 Thread Andrei Borzenkov
On 26.12.2022 22:56, marty leisner wrote: I'd like to be able to run a shell before completing the pivot (I'm running ubuntu core 20). I'm well versed in systemV init, but not systemd. How do I simulate the initramfs debugging methodology of "break=init" or "break=mount" using systemd (i.e.

Re: [systemd-devel] systemd-timer way of queuing jobs like 'at' command does ?

2022-12-22 Thread Andrei Borzenkov
On Thu, Dec 22, 2022 at 11:17 AM Nicolas Pillot wrote: > > Hello > > I am wondering if i can dynamically plan jobs (once) using systemd timer. > What i mean by that is kind of replicating the usage of the 'at' command > systemd-run --on-calendar=tomorrow echo I am at replacement > If not,

Re: [systemd-devel] Trying to understand change in PCR 4 extension behavior

2022-12-19 Thread Andrei Borzenkov
On 14.12.2022 20:28, Kyle Rose wrote: ... However, in v252, the corresponding event occurs earlier in the log and (after some measurements extending PCR 11) is followed by another BSA event extending PCR 4 with a DevicePath I can't parse from a call I can't seem to find in the systemd source

Re: [systemd-devel] missed _netdev option for nfs

2022-11-30 Thread Andrei Borzenkov
On Thu, Dec 1, 2022 at 8:42 AM Дмитрий Марков wrote: > > Hello, please help me understand the logic of fstab-generator. > > I noticed that now (judging by the links below) an explicit indication of the > _netdev mount option is not necessary and systemd will add it itself. I > conducted an

Re: [systemd-devel] bridge vlan-aware

2022-11-19 Thread Andrei Borzenkov
On 19.11.2022 12:26, Salvatore Mazzarino wrote: bridge vlan show port vlan-id enp89s0 1 PVID Egress Untagged br0     1 PVID Egress Untagged br166   1 PVID Egress Untagged eth.166 1 Egress Untagged         166 PVID Egress Untagged virbr0  1 PVID Egress Untagged Just to understand. I attach VMs

Re: [systemd-devel] bridge vlan-aware

2022-11-19 Thread Andrei Borzenkov
Please reply to list On 19.11.2022 12:05, Salvatore Mazzarino wrote: The vlan 166 has a dhcp server. The switch port is set to accept tagged and untagged traffic. I am not sure what "accept tagged and untagged" traffic does on your switch. But so far it sounds more like switch

Re: [systemd-devel] bridge vlan-aware

2022-11-19 Thread Andrei Borzenkov
On 18.11.2022 03:46, Salvatore Mazzarino wrote: Posted a wrong config for br0.netdev. the correct one is the following br0.netdev [NetDev] Name=br0 Kind=bridge [Bridge] DefaultPVID=1 VLANFiltering=yes On Fri, Nov 18, 2022 at 1:43 AM Salvatore Mazzarino wrote: I have a physical interface

Re: [systemd-devel] Preventing automatic driver loading on live boot disk

2022-11-17 Thread Andrei Borzenkov
On 17.11.2022 20:48, Lennart Poettering wrote: On Do, 17.11.22 18:17, Vadim Lebedev (vadiml1...@gmail.com) wrote: Awesome, thanks, it is EXTREMELY useful | Find the right one and denylist it. One more question: how do I 'denylist' the offending alias? Via the "blacklist" stanza in the

Re: [systemd-devel] Preventing automatic driver loading on live boot disk

2022-11-16 Thread Andrei Borzenkov
On Wed, Nov 16, 2022 at 12:25 PM Vadim Lebedev wrote: > > I'm preparing ubuntu-based live boot disk. It works fine mostly, but on some > machines equipped with Nvidia Quadro cards the default nouveau driver causes > problems (temporary freezes). I've determined that buy blacklisting nouveau >

Re: [systemd-devel] Bug or misconfiguration for systemd-networkd and VXLAN?

2022-11-14 Thread Andrei Borzenkov
On 14.11.2022 15:49, Lukas Wolf wrote: Hi all and thanks a lot for all your work on systemd! I'm trying to setup a VXLAN configuration with multicast with systemd-networkd but struggle to make it work. What I'm trying to replicate is the following (working command): ip link add vxlan100 type

Re: [systemd-devel] Antw: [EXT] Re: SOLVED: daemon-reload does not pick up changes to /etc/systemd/system during boot

2022-10-24 Thread Andrei Borzenkov
On Mon, Oct 24, 2022 at 1:24 PM Ulrich Windl wrote: > > > > > What do you call a "recursive start"? "systemctl start" simply tells > > starting multi-user.target via ExecStart=systemctl start starts all depending > units, and probably one of those starts the multi-user.target again. > That's

Re: [systemd-devel] Antw: [EXT] Re: SOLVED: daemon-reload does not pick up changes to /etc/systemd/system during boot

2022-10-24 Thread Andrei Borzenkov
On Mon, Oct 24, 2022 at 9:48 AM Ulrich Windl wrote: > > >>> Alex Aminoff schrieb am 21.10.2022 um 18:11 in > >>> Nachricht > : > > ... > > Just to close out this thread, I am happy to report that > > > > ExecStart=systemctl start --no-block multi-user.target > > > > worked great. > > Makes me

Re: [systemd-devel] user unit with delayed users homes mount - ?

2022-10-14 Thread Andrei Borzenkov
On Fri, Oct 14, 2022 at 2:48 PM lejeczek wrote: > > > > On 14/10/2022 12:02, Andrei Borzenkov wrote: > > On Fri, Oct 14, 2022 at 12:59 PM lejeczek wrote: > >> Hi guys. > >> > >> I'm on Centos 8 S with systemd 239. > >> Users home

Re: [systemd-devel] user unit with delayed users homes mount - ?

2022-10-14 Thread Andrei Borzenkov
On Fri, Oct 14, 2022 at 12:59 PM lejeczek wrote: > > Hi guys. > > I'm on Centos 8 S with systemd 239. > Users homes are mounted at later (latest?) stage off NFS so when such a user > logs in then: > > -> $ systemctl --user status -l xyz.service > Unit xyz.service could not be found. > -> $

Re: [systemd-devel] daemon-reload does not pick up changes to /etc/systemd/system during boot

2022-10-12 Thread Andrei Borzenkov
On 12.10.2022 23:54, Alex Aminoff wrote: I am diskless booting Rocky Linux 9 , using an NFS mounted root. This works OK so far. However, I want to mount /etc/ as a tmpfs and load up a bunch of config files, then have systemd see the (new) /etc/systemd/system and use that in the rest of the boot

Re: [systemd-devel] Service is started multiple times during initrd

2022-10-04 Thread Andrei Borzenkov
On 04.10.2022 22:14, cd wrote: ... > add_symlink > "/usr/lib/systemd/system/initrd-root-fs.target.wants/lvm-autosnap-initrd.service" > "/usr/lib/systemd/system/lvm-autosnap-initrd.service" > ... > > Oct 04 11:49:20 archlinux systemd[1]: Reached target Initrd Default Target. > Oct 04 11:49:20

Re: [systemd-devel] Attaching virtual session (e.g. SSH) to seat

2022-10-01 Thread Andrei Borzenkov
On 01.10.2022 15:46, Nils Kattenbeck wrote: > I am logging in on a PC using SSH and need to access some peripherals > which are attached to seat0. > loginctl shows that my session is not attached to any seat: > > SESSION UID USER SEAT TTY > 50 1000 septatrix pts/0 > > The devices

Re: [systemd-devel] [EXT] Re: Q: handling generator-like dependency: target won't start on boot

2022-09-29 Thread Andrei Borzenkov
On Thu, Sep 29, 2022 at 4:01 PM Ulrich Windl wrote: > > >>> Andrei Borzenkov schrieb am 29.09.2022 um 13:57 in > Nachricht > : > ... > >> I don't quite understand what an "initial transaction" is, > > > > The set of (start) jobs starting

Re: [systemd-devel] [EXT] Re: Q: handling generator-like dependency: target won't start on boot

2022-09-29 Thread Andrei Borzenkov
On Thu, Sep 29, 2022 at 9:41 AM Ulrich Windl wrote: > > >>> Andrei Borzenkov schrieb am 28.09.2022 um 20:34 in > Nachricht : > > On 28.09.2022 09:25, Ulrich Windl wrote: > >> Hi! > >> > >> I'm trying to establish a mechanism that use

Re: [systemd-devel] Q: handling generator-like dependency: target won't start on boot

2022-09-28 Thread Andrei Borzenkov
On 28.09.2022 09:25, Ulrich Windl wrote: > Hi! > > I'm trying to establish a mechanism that uses a generator-like mechanism as > described below. Unfortunately it starts when triggering the target manually, > but it never starts on system boot. I could need some advice how to make it > work. >

Re: [systemd-devel] "Failed to connect to bus: No such file or directory" when running systemd --user commands with runuser as root

2022-09-20 Thread Andrei Borzenkov
On 20.09.2022 20:29, Dave Houser wrote: > Figured out why it was failing. I updated my post here --> > https://askubuntu.com/questions/1430191/ubuntu-20-04-not-allowing-runuser-to-manage-systemd-user-services-failed-to/1430379#1430379 > Problem was Ubuntu default user .bashrc had the following

Re: [systemd-devel] Can /usr/lib/systemd/user/sockets.target.wants be used to autoenable a socket by a vendor package?

2022-09-20 Thread Andrei Borzenkov
On Tue, Sep 20, 2022 at 10:42 AM Barry wrote: > > Enabled does mean that it will or will not run. > It means that it is wanted by the default target. > No. It means that it is wanted by whatever units are listed in [Install] section (actually, it is "enabled" even if only aliases are created, so

Re: [systemd-devel] Can /usr/lib/systemd/user/sockets.target.wants be used to autoenable a socket by a vendor package?

2022-09-18 Thread Andrei Borzenkov
On 18.09.2022 09:05, Yuri Kanivetsky wrote: >> No, everything linked to a .wants/ directory immediately becomes a >> Wants= dep of and is therefore "enabled", it doesn't matter whether >> that .wants/ is in /etc or /usr/lib or /run. > > To confirm this, I created the following files: > > $

Re: [systemd-devel] boot-complete.target dependencies issue

2022-09-17 Thread Andrei Borzenkov
On 17.09.2022 19:44, Lennart Poettering wrote: > > So, my recommended fix: add After=multi-user.target to your > service. Note that systemd handling of .wants/ works like this: > > 1. add Wants= type dep > 2. if no After=/Before= dep is set, then also add Before= > That's not what manual page

  1   2   3   4   5   6   7   8   9   >