Re: [systemd-devel] Splitting sd-boot from systemd/bootctl for enabling sd-boot in Fedora

2022-04-29 Thread Andrei Borzenkov
On 28.04.2022 10:54, Lennart Poettering wrote: > >> * systemd-boot is an additional bootloader, rather than replacing >> an existing one, thus increasing the attack surface. > > Hmm, what? "additional bootloader"? Are they suggesting you use grub > to start sd-boot? I mean, you certainly could

Re: [systemd-devel] Custom options and passing options via command line.

2022-05-10 Thread Andrei Borzenkov
On 08.05.2022 20:19, Kamil Jońca wrote: > I have question about custom options in network interface definitions > and passing it via command line. > In currend Debian tools > > (https://manpages.debian.org/buster/ifupdown/interfaces.5.en.html) > there is a possibility to define custom option and

Re: [systemd-devel] systemd tries to terminate a process that seems to have exited

2022-05-09 Thread Andrei Borzenkov
github.com/x-yuri/b12e8178a621372a4aa62c60693af37b#file-b-journal-gnome-keyring-gist-md > > Do you know any reason a process can remain alive after exit() or > return from main()? Any threads started by PAM or anything > dbus-related (wild guesses on my part)? Anything else I can che

Re: [systemd-devel] systemd tries to terminate a process that seems to have exited

2022-05-04 Thread Andrei Borzenkov
On 05.05.2022 04:41, Yuri Kanivetsky wrote: > Hi, > > This might be not a systemd issue. But the behavior is weird, and I'm not > sure. > > I'm trying to run GNOME in a docker container. And gnome-keyring fails to > start: > > https://gist.github.com/x-yuri/c3c715ea6355633de4546ae957a66410 >

Re: [systemd-devel] Ordering units and targets with devices

2022-08-25 Thread Andrei Borzenkov
On 17.08.2022 16:23, Michael Cassaniti wrote: > Hi, > > I'm trying to order my units and targets during early boot so that: > 1. A symlink to the specific FIDO2 token I'm using gets created. I > already have a udev rule in place for this and it successfully creates > the symlink under /dev.

Re: [systemd-devel] The best way to execute kexec via dbus

2022-08-26 Thread Andrei Borzenkov
Please answer to the list, not me personally. You do it second time. On 26.08.2022 17:12, Tomáš Hnyk wrote: > On Friday 26. August 2022, 15:02:54 (+02:00), Andrei Borzenkov wrote: > >> On 26.08.2022 13:54, Tomáš Hnyk wrote: >>> >>>>>> >>

Re: [systemd-devel] Problem: Renaming the USB network interface makes SYSTEMD_WANTS not working

2022-08-29 Thread Andrei Borzenkov
On 28.08.2022 23:35, Charles wrote: > Hello, > > Adding NAME="mywifi" to an udev rule causes the SYSTEMD_WANTS service to not > be executed. Removing NAME="mywifi" and the service is executed. How come? > ​ > >> /etc/udev/rules.d/10-network.rules >> SUBSYSTEM=="net", ACTION=="add",

Re: [systemd-devel] The best way to execute kexec via dbus

2022-08-26 Thread Andrei Borzenkov
On 26.08.2022 12:29, Tomáš Hnyk wrote: > On Friday 26. August 2022, 06:55:15 (+02:00), Andrei Borzenkov wrote: > >> On 26.08.2022 03:59, Tomáš Hnyk wrote: >>> Hello,I am trying to be able to reboot with kexec from a GUI (I am >>> modifying this: https://github.com/

Re: [systemd-devel] The best way to execute kexec via dbus

2022-08-26 Thread Andrei Borzenkov
On 26.08.2022 13:54, Tomáš Hnyk wrote: > > > >> > > > Indeed, it must have been the late night, they are the same. However, > the following are not the same even the man page says they are: > > > > > > sudo systemctl kexec # results in kexec > > > > > > full log here:

Re: [systemd-devel] Problem: Renaming the USB network interface makes SYSTEMD_WANTS not working

2022-08-29 Thread Andrei Borzenkov
by the “mywifi” device and not a parent > device. > > Another solution is: > >> SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="...", NAME="mywifi" >> SUBSYSTEM=="net", ACTION=="move", ATTR{address}=="...", TA

Re: [systemd-devel] The best way to execute kexec via dbus

2022-08-25 Thread Andrei Borzenkov
On 26.08.2022 03:59, Tomáš Hnyk wrote: > Hello,I am trying to be able to reboot with kexec from a GUI (I am > modifying this: https://github.com/varlesh/org.kde.plasma.compact-shutdown > ). As far as I can tell, I need to use qdbus. Via command line, I can > successfully reboot with kexec with:

Re: [systemd-devel] Q: handling generator-like dependency: target won't start on boot

2022-09-28 Thread Andrei Borzenkov
On 28.09.2022 09:25, Ulrich Windl wrote: > Hi! > > I'm trying to establish a mechanism that uses a generator-like mechanism as > described below. Unfortunately it starts when triggering the target manually, > but it never starts on system boot. I could need some advice how to make it > work. >

Re: [systemd-devel] Antw: [EXT] Re: SOLVED: daemon-reload does not pick up changes to /etc/systemd/system during boot

2022-10-24 Thread Andrei Borzenkov
On Mon, Oct 24, 2022 at 1:24 PM Ulrich Windl wrote: > > > > > What do you call a "recursive start"? "systemctl start" simply tells > > starting multi-user.target via ExecStart=systemctl start starts all depending > units, and probably one of those starts the multi-user.target again. > That's

Re: [systemd-devel] Antw: [EXT] Re: SOLVED: daemon-reload does not pick up changes to /etc/systemd/system during boot

2022-10-24 Thread Andrei Borzenkov
On Mon, Oct 24, 2022 at 9:48 AM Ulrich Windl wrote: > > >>> Alex Aminoff schrieb am 21.10.2022 um 18:11 in > >>> Nachricht > : > > ... > > Just to close out this thread, I am happy to report that > > > > ExecStart=systemctl start --no-block multi-user.target > > > > worked great. > > Makes me

Re: [systemd-devel] Can /usr/lib/systemd/user/sockets.target.wants be used to autoenable a socket by a vendor package?

2022-09-18 Thread Andrei Borzenkov
On 18.09.2022 09:05, Yuri Kanivetsky wrote: >> No, everything linked to a .wants/ directory immediately becomes a >> Wants= dep of and is therefore "enabled", it doesn't matter whether >> that .wants/ is in /etc or /usr/lib or /run. > > To confirm this, I created the following files: > > $

Re: [systemd-devel] Can /usr/lib/systemd/user/sockets.target.wants be used to autoenable a socket by a vendor package?

2022-09-20 Thread Andrei Borzenkov
On Tue, Sep 20, 2022 at 10:42 AM Barry wrote: > > Enabled does mean that it will or will not run. > It means that it is wanted by the default target. > No. It means that it is wanted by whatever units are listed in [Install] section (actually, it is "enabled" even if only aliases are created, so

Re: [systemd-devel] Antw: Re: Re: [EXT] Re: Q: Querying units for "what provides" a target

2022-09-09 Thread Andrei Borzenkov
On 09.09.2022 16:19, Andrei Borzenkov wrote: > "Requires" means - submit additional start jobs for the listed units > and wait until these start jobs are completed before processing the > start job for the unit itself. Sorry, that was wrong. That is what everyone assumes it do

Re: [systemd-devel] boot-complete.target dependencies issue

2022-09-17 Thread Andrei Borzenkov
On 17.09.2022 19:44, Lennart Poettering wrote: > > So, my recommended fix: add After=multi-user.target to your > service. Note that systemd handling of .wants/ works like this: > > 1. add Wants= type dep > 2. if no After=/Before= dep is set, then also add Before= > That's not what manual page

Re: [systemd-devel] boot-complete.target dependencies issue

2022-09-16 Thread Andrei Borzenkov
On Fri, Sep 16, 2022 at 11:11 AM Antonio Murdaca wrote: > > Hi, following > https://systemd.io/AUTOMATIC_BOOT_ASSESSMENT/#how-to-adapt-this-scheme-to-other-setups > I've been experimenting on a fedora system with > systemd-boot-check-no-failures.service and the ability to have services run >

Re: [systemd-devel] "Failed to connect to bus: No such file or directory" when running systemd --user commands with runuser as root

2022-09-20 Thread Andrei Borzenkov
On 20.09.2022 20:29, Dave Houser wrote: > Figured out why it was failing. I updated my post here --> > https://askubuntu.com/questions/1430191/ubuntu-20-04-not-allowing-runuser-to-manage-systemd-user-services-failed-to/1430379#1430379 > Problem was Ubuntu default user .bashrc had the following

Re: [systemd-devel] Antw: Re: Re: [EXT] Re: Q: Querying units for "what provides" a target

2022-09-09 Thread Andrei Borzenkov
On Fri, Sep 9, 2022 at 4:12 PM Ulrich Windl wrote: > Thanks for the explanation! For me part of the problem is: Where is "pull in" > defined? ;-) In an English dictionary? > The phrase is used for Wants, but also for Requires. So is "pull in " a > synonym for "wants or requires"? Yes. "Pull

Re: [systemd-devel] Antw: Re: Re: [EXT] Re: Q: Querying units for "what provides" a target

2022-09-09 Thread Andrei Borzenkov
On Fri, Sep 9, 2022 at 2:13 PM Ulrich Windl wrote: ... > > > > If you are interested in services that pull in e.g. time-sync.target > > via Wants (or Requires) and order themselves before the target, you > > can use something like > > $ systemctl show time-sync.target -p WantedBy -p RequiredBy -p

Re: [systemd-devel] Attaching virtual session (e.g. SSH) to seat

2022-10-01 Thread Andrei Borzenkov
On 01.10.2022 15:46, Nils Kattenbeck wrote: > I am logging in on a PC using SSH and need to access some peripherals > which are attached to seat0. > loginctl shows that my session is not attached to any seat: > > SESSION UID USER SEAT TTY > 50 1000 septatrix pts/0 > > The devices

Re: [systemd-devel] Service is started multiple times during initrd

2022-10-04 Thread Andrei Borzenkov
On 04.10.2022 22:14, cd wrote: ... > add_symlink > "/usr/lib/systemd/system/initrd-root-fs.target.wants/lvm-autosnap-initrd.service" > "/usr/lib/systemd/system/lvm-autosnap-initrd.service" > ... > > Oct 04 11:49:20 archlinux systemd[1]: Reached target Initrd Default Target. > Oct 04 11:49:20

Re: [systemd-devel] daemon-reload does not pick up changes to /etc/systemd/system during boot

2022-10-12 Thread Andrei Borzenkov
On 12.10.2022 23:54, Alex Aminoff wrote: I am diskless booting Rocky Linux 9 , using an NFS mounted root. This works OK so far. However, I want to mount /etc/ as a tmpfs and load up a bunch of config files, then have systemd see the (new) /etc/systemd/system and use that in the rest of the boot

Re: [systemd-devel] [EXT] Re: Q: handling generator-like dependency: target won't start on boot

2022-09-29 Thread Andrei Borzenkov
On Thu, Sep 29, 2022 at 9:41 AM Ulrich Windl wrote: > > >>> Andrei Borzenkov schrieb am 28.09.2022 um 20:34 in > Nachricht : > > On 28.09.2022 09:25, Ulrich Windl wrote: > >> Hi! > >> > >> I'm trying to establish a mechanism that use

Re: [systemd-devel] user unit with delayed users homes mount - ?

2022-10-14 Thread Andrei Borzenkov
On Fri, Oct 14, 2022 at 2:48 PM lejeczek wrote: > > > > On 14/10/2022 12:02, Andrei Borzenkov wrote: > > On Fri, Oct 14, 2022 at 12:59 PM lejeczek wrote: > >> Hi guys. > >> > >> I'm on Centos 8 S with systemd 239. > >> Users home

Re: [systemd-devel] user unit with delayed users homes mount - ?

2022-10-14 Thread Andrei Borzenkov
On Fri, Oct 14, 2022 at 12:59 PM lejeczek wrote: > > Hi guys. > > I'm on Centos 8 S with systemd 239. > Users homes are mounted at later (latest?) stage off NFS so when such a user > logs in then: > > -> $ systemctl --user status -l xyz.service > Unit xyz.service could not be found. > -> $

Re: [systemd-devel] [EXT] Re: Q: handling generator-like dependency: target won't start on boot

2022-09-29 Thread Andrei Borzenkov
On Thu, Sep 29, 2022 at 4:01 PM Ulrich Windl wrote: > > >>> Andrei Borzenkov schrieb am 29.09.2022 um 13:57 in > Nachricht > : > ... > >> I don't quite understand what an "initial transaction" is, > > > > The set of (start) jobs starting

Re: [systemd-devel] What is the shutdown sequence with systemd and dracut?

2022-08-08 Thread Andrei Borzenkov
On 08.08.2022 15:24, Patrick Schleizer wrote: > Hi! > > This is what I think but please correct me if I am wrong. > > 1. systemd runs systemd units for systemd shutdown.target > > 2. /lib/systemd/system-shutdown (shutdown.c) runs > > 3. /lib/systemd/system-shutdown executes

Re: [systemd-devel] Trying to understand change in PCR 4 extension behavior

2022-12-30 Thread Andrei Borzenkov
, Kyle On Mon, Dec 19, 2022 at 1:36 PM Andrei Borzenkov wrote: On 14.12.2022 20:28, Kyle Rose wrote: ... However, in v252, the corresponding event occurs earlier in the log and (after some measurements extending PCR 11) is followed by another BSA event extending PCR 4 with a DevicePath I can't

Re: [systemd-devel] service dependencies

2023-01-10 Thread Andrei Borzenkov
On Tue, Jan 10, 2023 at 2:48 PM Markus Rathgeb wrote: > > Hello, > > I have a question about service dependencies. > > Assume there are two services > * test1 > * test2 > > (for testing purpose only I am using user services) > > The test2 service requires that test1 service is active. > The test2

Re: [systemd-devel] Ordering issues

2023-01-04 Thread Andrei Borzenkov
On 04.01.2023 21:21, Scott Ellentuch wrote: Hi, I'm trying to do something with inconsistent results and wondered where I'm going wrong. I recently installed GLUSTERFS onto a set of 4 Raspberry PI's, but am having some boot sequencing issues. It started trying to run rsyslogd. Apparently, it

Re: [systemd-devel] Order-only mount units?

2023-01-07 Thread Andrei Borzenkov
On 07.01.2023 19:06, Norbert Lange wrote: Hello, Say want a service unit which mounts some stuff, then does further steps (create some initial files, etc..). The problem here is that it is not automatically ordered in regards to mounts in the subdirectories or some other dependencies like

Re: [systemd-devel] how to run a shell in my systemd initramfs before pivot root

2022-12-27 Thread Andrei Borzenkov
On 26.12.2022 22:56, marty leisner wrote: I'd like to be able to run a shell before completing the pivot (I'm running ubuntu core 20). I'm well versed in systemV init, but not systemd. How do I simulate the initramfs debugging methodology of "break=init" or "break=mount" using systemd (i.e.

Re: [systemd-devel] Trying to understand change in PCR 4 extension behavior

2022-12-19 Thread Andrei Borzenkov
On 14.12.2022 20:28, Kyle Rose wrote: ... However, in v252, the corresponding event occurs earlier in the log and (after some measurements extending PCR 11) is followed by another BSA event extending PCR 4 with a DevicePath I can't parse from a call I can't seem to find in the systemd source

Re: [systemd-devel] systemd-timer way of queuing jobs like 'at' command does ?

2022-12-22 Thread Andrei Borzenkov
On Thu, Dec 22, 2022 at 11:17 AM Nicolas Pillot wrote: > > Hello > > I am wondering if i can dynamically plan jobs (once) using systemd timer. > What i mean by that is kind of replicating the usage of the 'at' command > systemd-run --on-calendar=tomorrow echo I am at replacement > If not,

Re: [systemd-devel] Preventing automatic driver loading on live boot disk

2022-11-16 Thread Andrei Borzenkov
On Wed, Nov 16, 2022 at 12:25 PM Vadim Lebedev wrote: > > I'm preparing ubuntu-based live boot disk. It works fine mostly, but on some > machines equipped with Nvidia Quadro cards the default nouveau driver causes > problems (temporary freezes). I've determined that buy blacklisting nouveau >

Re: [systemd-devel] missed _netdev option for nfs

2022-11-30 Thread Andrei Borzenkov
On Thu, Dec 1, 2022 at 8:42 AM Дмитрий Марков wrote: > > Hello, please help me understand the logic of fstab-generator. > > I noticed that now (judging by the links below) an explicit indication of the > _netdev mount option is not necessary and systemd will add it itself. I > conducted an

Re: [systemd-devel] bridge vlan-aware

2022-11-19 Thread Andrei Borzenkov
On 18.11.2022 03:46, Salvatore Mazzarino wrote: Posted a wrong config for br0.netdev. the correct one is the following br0.netdev [NetDev] Name=br0 Kind=bridge [Bridge] DefaultPVID=1 VLANFiltering=yes On Fri, Nov 18, 2022 at 1:43 AM Salvatore Mazzarino wrote: I have a physical interface

Re: [systemd-devel] bridge vlan-aware

2022-11-19 Thread Andrei Borzenkov
Please reply to list On 19.11.2022 12:05, Salvatore Mazzarino wrote: The vlan 166 has a dhcp server. The switch port is set to accept tagged and untagged traffic. I am not sure what "accept tagged and untagged" traffic does on your switch. But so far it sounds more like switch

Re: [systemd-devel] bridge vlan-aware

2022-11-19 Thread Andrei Borzenkov
On 19.11.2022 12:26, Salvatore Mazzarino wrote: bridge vlan show port vlan-id enp89s0 1 PVID Egress Untagged br0     1 PVID Egress Untagged br166   1 PVID Egress Untagged eth.166 1 Egress Untagged         166 PVID Egress Untagged virbr0  1 PVID Egress Untagged Just to understand. I attach VMs

Re: [systemd-devel] Preventing automatic driver loading on live boot disk

2022-11-17 Thread Andrei Borzenkov
On 17.11.2022 20:48, Lennart Poettering wrote: On Do, 17.11.22 18:17, Vadim Lebedev (vadiml1...@gmail.com) wrote: Awesome, thanks, it is EXTREMELY useful | Find the right one and denylist it. One more question: how do I 'denylist' the offending alias? Via the "blacklist" stanza in the

Re: [systemd-devel] efivarfs mounting

2023-01-16 Thread Andrei Borzenkov
On 16.01.2023 20:30, Michał Zegan wrote: Hello, What should be responsible for mounting efivarfs? systemd itself (PID 1) when it is started Using systemd-251 on fedora37, and my machine is booted in uefi mode also with secureboot, but /sys/firmware/efi/efivars is not mounted on boot, why?

Re: [systemd-devel] networkd: Link local static IP address behind NAT

2023-01-17 Thread Andrei Borzenkov
On 17.01.2023 18:28, Thomas Burghout wrote: Hello, We are trying to configure a device to use a gateway and a static IP address (in the link-local address range). However, the default gateway does not appear to be used. As such, there is no traffic possible to the internet. The device runs

Re: [systemd-devel] networkd: Link local static IP address behind NAT

2023-01-19 Thread Andrei Borzenkov
On 18.01.2023 17:12, Thomas Burghout wrote: On 18.01.20233 04:06, Andrei Borzenkov wrote: On 17.01.2023 18:28, Thomas Burghout wrote: inet 169.254.146.171/16 brd 169.254.255.255 scope link eth0 Is it output from the correct system? Because address is different. I do not see how "

Re: [systemd-devel] Bug or misconfiguration for systemd-networkd and VXLAN?

2022-11-14 Thread Andrei Borzenkov
On 14.11.2022 15:49, Lukas Wolf wrote: Hi all and thanks a lot for all your work on systemd! I'm trying to setup a VXLAN configuration with multicast with systemd-networkd but struggle to make it work. What I'm trying to replicate is the following (working command): ip link add vxlan100 type

Re: [systemd-devel] Ordering cycle when trying to use BindToDevice socket option

2023-03-31 Thread Andrei Borzenkov
On 01.04.2023 01:12, Dmitri Kourennyi wrote: The message seems to imply that systemd-networkd depends on sockets.target, which in turn depends on the tinyssh socket, but that in turn needs systemd-networkd to run to create the target device. I Socket units have implicit Before=sockets.target

Re: [systemd-devel] PAMName=login, systemctl stop

2023-07-03 Thread Andrei Borzenkov
On 03.07.2023 14:17, Lennart Poettering wrote: On Mo, 03.07.23 10:58, Valentijn Sessink (valent...@sessink.nl) wrote: Now my remaining question is probably so very basic, that you sort of missed it: my "session" is started from a script and so I'm probably able to stop all services in the

Re: [systemd-devel] Why is my reboot.target disabled?

2023-07-05 Thread Andrei Borzenkov
On 05.07.2023 11:57, Ferenc Wágner wrote: Andrei Borzenkov writes: On 04.07.2023 14:58, Ferenc Wágner wrote: Please help me understand this phenomenon (systemd 252): $ systemctl status ctrl-alt-del.target ○ reboot.target - System Reboot Loaded: loaded (/lib/systemd/system

Re: [systemd-devel] Why is my reboot.target disabled?

2023-07-04 Thread Andrei Borzenkov
On 04.07.2023 14:58, Ferenc Wágner wrote: Hi, Please help me understand this phenomenon (systemd 252): $ systemctl status ctrl-alt-del.target ○ reboot.target - System Reboot Loaded: loaded (/lib/systemd/system/reboot.target; disabled; preset: enabled) Active: inactive (dead)

Re: [systemd-devel] Networkd doesn't create route for IP in different but connected net with GatewayOnLink= Inbox

2023-07-12 Thread Andrei Borzenkov
not sure this represents a meaningful difference. > > On Wed, 12 Jul 2023 at 10:29, Andrei Borzenkov wrote: >> >> On Wed, Jul 12, 2023 at 10:44 AM LunarLambda wrote: >> > >> > Hello, >> > >> > I was recently tasked with moving existing network configur

Re: [systemd-devel] Networkd doesn't create route for IP in different but connected net with GatewayOnLink= Inbox

2023-07-12 Thread Andrei Borzenkov
On Wed, Jul 12, 2023 at 10:44 AM LunarLambda wrote: > > Hello, > > I was recently tasked with moving existing network configuration for a > machine and some nspawn containers from iupdown to networkd. > > The situation looks as follows: > > A single VPS has 3 IPs. One 37.x.x.x/22, and two

Re: [systemd-devel] why systemd-boot (seems as everyone else) does not check the signatures of initramfs?

2023-05-24 Thread Andrei Borzenkov
need to either wrap it in PE (which is effectively what UKI does) or develop a new standard for attaching signature to initrd. For example, using grub2 GPG keys :) > Thank you > > --- > Felix Rubio > "Don't believe what you're told. Double check." > > On 2023-05-23 2

Re: [systemd-devel] By what mechanism are locale-related environment variables (LC_*) set in services?

2023-05-25 Thread Andrei Borzenkov
On 25.05.2023 17:12, Farblos wrote: Running on systemd 252 (252.6-1) on Debian testing. It seems that systemd services, also transient ones, get the full set of locale environment variables (LANG, LANGUAGE, LC_*) as defined in /etc/default/locale. I only have found environment variable $LANG

Re: [systemd-devel] why systemd-boot (seems as everyone else) does not check the signatures of initramfs?

2023-05-23 Thread Andrei Borzenkov
On 23.05.2023 21:54, Felix Rubio wrote: Hi everybody, I am trying to understand something, and after looking around I have not found any explicit answer. Maybe somebody in this list can shed some light on the matter? I have a laptop in which I am setting up the boot process through

Re: [systemd-devel] Usage of PCR[7]

2023-06-06 Thread Andrei Borzenkov
On Tue, Jun 6, 2023 at 8:20 AM Mantas Mikulėnas wrote: > > On Mon, Jun 5, 2023 at 11:38 PM Adrian Vovk wrote: >> >> >> 2. The alternative approach involves pre-calculating PCR[7] on the >> client if we're updating DBX or Shim. Here's how I envision this >> going: >> - We read the TPM log (which

Re: [systemd-devel] Under what condition would systemd not restart a target service.

2023-06-03 Thread Andrei Borzenkov
On 03.06.2023 15:25, Virendra Negi wrote: I noticed a couple of days back that in the event of an apt-get update of the target services, our services did not start. "target service" sounds very strange in systemd world. Apparently, the service was in a sleeping state when it was upgraded.

Re: [systemd-devel] multiple starts for a socket-based service

2023-08-05 Thread Andrei Borzenkov
On 06.08.2023 03:42, Ross Boylan wrote: On Fri, Aug 4, 2023 at 4:32 PM Kevin P. Fleming wrote: On Fri, Aug 4, 2023, at 18:11, Ross Boylan wrote: Theory: since br0 has no associated IP address when socket creation is attempted, the socket creation fails. If so, I need to delay socket startup

Re: [systemd-devel] Service not run, although enabled

2023-08-07 Thread Andrei Borzenkov
On Mon, Aug 7, 2023 at 11:49 AM Martin Stenzel wrote: > > > Hi list, > I searched the _whole_ www but did not find the answer. > > > > I use bestcrypt > to mount the home directory. > > > This is my service file. > > -- > [Unit] > Description=Mount Bestcrypt containers > Wants=local-fs.target >

Re: [systemd-devel] Service not run, although enabled

2023-08-08 Thread Andrei Borzenkov
On Tue, Aug 8, 2023 at 11:31 AM Martin Stenzel wrote: ... > Your answer: > These Wants and After are redundant, every standard service will be > ordered after local-fs.target unless it also has > DefaultDependencies=no. > > My answer/question: > I want my service to be run DIRECTLY (at first

Re: [systemd-devel] sd-boot setup and PCRs

2023-06-18 Thread Andrei Borzenkov
On 18.06.2023 21:56, Felix Rubio wrote: Hi everybody, After some days offline, today I have gone through the emails exchanged a couple of weeks ago and agreed: UKI is the way to go. Last time I checked about it I read about possible problems related to when some modules would be loaded and so,

Re: [systemd-devel] sd-boot setup and PCRs

2023-06-19 Thread Andrei Borzenkov
rd disk. I am not familiar with details of UKI implementation, but if it is possible to override kernel command line, you can trivially boot into /bin/sh unless you also bind LUKS key to the PCR 12 (or whatever is used to measure kernel parameters). Regards! Felix On 2023-06-19 06:26, Andrei Borz

Re: [systemd-devel] sd-boot setup and PCRs

2023-06-19 Thread Andrei Borzenkov
d disk. I am not familiar with details of UKI implementation, but if it is possible to override kernel command line, you can trivially boot into /bin/sh unless you also bind LUKS key to the PCR 12 (or whatever is used to measure kernel parameters). Regards! Felix On 2023-06-19 06:26, Andr

Re: [systemd-devel] Assistance Needed with 'loginctl list-users' Command Display Issue

2024-02-12 Thread Andrei Borzenkov
On 13.02.2024 07:52, Sangeetha Elumalai wrote: Hi, The* 'loginctl list-users'* command isn't displaying the user list. I would appreciate any suggestions on resolving this issue. Do I need to enable any specific service for this functionality? Here are the logs: ``` # who root ttyS0

Re: [systemd-devel] Assistance Needed with 'loginctl list-users' Command Display Issue

2024-02-12 Thread Andrei Borzenkov
On 13.02.2024 09:41, Sangeetha Elumalai wrote: Hi, I modified the following file, but I am still facing the issue. # cat common-session # # /etc/pam.d/common-session - session-related modules common to all services # And did you verify that this file is actually included by the PAM service

Re: [systemd-devel] Issues supporting systems with and without TPM and firmware TPM (was Re: Handle device node timeout?)

2024-02-19 Thread Andrei Borzenkov
On Mon, Feb 19, 2024 at 11:37 AM Mikko Rapeli wrote: > > Hi, > > On Fri, Feb 16, 2024 at 11:28:31AM +0200, Mikko Rapeli wrote: > > Hi, > > > > Following up to my previous question which worked around with > > Wants: and After: to dev-tpmrm0.device and tee-supplicant@teepriv0.service, > > which

Re: [systemd-devel] Submitting a service activation to remote mounts success

2024-02-07 Thread Andrei Borzenkov
On 07.02.2024 19:20, Thomas HUMMEL wrote: On 2/7/24 11:50, Thomas HUMMEL wrote: Still I cannot understand where the Requires= comes in remote-fs.target unit as doc for special target only describes a Wants= dep added by systemd-fstab-generator in the case of auto mounts. Well, forget about

Re: [systemd-devel] Submitting a service activation to remote mounts success

2024-02-07 Thread Andrei Borzenkov
On 07.02.2024 13:50, Thomas HUMMEL wrote: Still I cannot understand where the Requires= comes in remote-fs.target unit It is generated by systemd-fstab-generator as doc for special target only describes a Wants= dep added by systemd-fstab-generator in the case of auto mounts. If doc for

Re: udev rules in /etc/udev/rules.d/ ignored/not-loaded on boot; exec manually OK at shell ?

2023-12-22 Thread Andrei Borzenkov
On 22.12.2023 19:11, pgnd wrote: You do realize that /etc/ is generally not transferred from the initrd to the host? If you look into /etc/ from the host, then no files you created there from the initrd will exist. it doesn't appear that the rules are written to the initrd in the first place.

Re: Ton of random units "could not be found"

2023-12-15 Thread Andrei Borzenkov
On 16.12.2023 08:17, chandler wrote: Hi all,     When I run `systemctl status --all` I see a ton of "Unit X could not be found" where X = an item from the list below.  How did this mess happen and how to clean it up?  None of these units represent things the system is using, for the most part.

Re: networkd: learned DNS server not propagated to rdnss option in RA

2023-12-13 Thread Andrei Borzenkov
On Wed, Dec 13, 2023 at 10:46 AM Michael Heimpold wrote: > > Dear all, > > I'm trying to setup an embedded system as IPv6 router using IPv6 > prefix delegation. The system has two network interfaces, eth0 and > eth1. eth0 is the upstream interface, but it is part of a bridge interface, > but I

Re: [systemd-devel] Manual start of user@.service failed with permission denied

2023-12-08 Thread Andrei Borzenkov
On 08.12.2023 23:53, Mantas Mikulėnas wrote: ... Dec 08 17:33:29 host systemd-user-runtime-dir[36278]: Will mount /run/user/1001 owned by 1001:118 Dec 08 17:33:29 host systemd-user-runtime-dir[36278]: Mounting tmpfs (tmpfs) on /run/user/1001 (MS_NOSUID|MS_NODEV

Re: [RFC] initoverlayfs - a scalable initial filesystem

2023-12-09 Thread Andrei Borzenkov
On 09.12.2023 17:42, Eric Curtin wrote: On Sat, 9 Dec 2023 at 12:46, Luca Boccassi wrote: On Fri, 8 Dec 2023 at 19:00, Eric Curtin wrote: We have been working on a new initial filesystem called initoverlayfs. It is a new filesystem that provides a more scalable approach to initial

Re: [systemd-devel] Manual start of user@.service failed with permission denied

2023-12-11 Thread Andrei Borzenkov
On 11.12.2023 18:28, Christopher Wong wrote: Hi Mantas, I have added ExecStartPre to user@.service to run “id” and “ls -la”: Dec 11 15:50:34 host systemd-user-runtime-dir[40287]: Will mount /run/user/1001 owned by 1001:118 Dec 11 15:50:34 host

Re: Masking swap.target to disable swaps (on old systemd versions)

2024-01-02 Thread Andrei Borzenkov
On 02.01.2024 18:47, Max Gautier wrote: Hi, Is masking `swap.target` a reliable/supported way to disable all swaps (partition, file, whatever) ? I used that approach in Kubespray[1] (a k8s installer) while refactoring our "disable swap" steps, but it looks likes it does not work on Centos 7

Re: [systemd-devel] WSL Ubuntu creates XDG_RUNTIME_DIR with incorrect permissions

2023-11-25 Thread Andrei Borzenkov
On 26.11.2023 02:39, Thomas Larsen Wessel wrote: I set up WSL on Windows 10 and created an instance from the default Ubuntu 22.04 image. I ran some (non-GUI) software that somehow relies on Qt, and apparently Qt does some checks on the XDG environment, so I got the following. *Warning:

Re: [systemd-devel] WSL Ubuntu creates XDG_RUNTIME_DIR with incorrect permissions

2023-11-27 Thread Andrei Borzenkov
> you know about any any of those cases :) Right now, I barely know where to > report this issue. > > > On Sun, Nov 26, 2023 at 10:07 AM Andrei Borzenkov wrote: >> >> On 26.11.2023 02:39, Thomas Larsen Wessel wrote: >> > I set up WSL on Windows 10 and created

Re: [systemd-devel] Delaying VM startup until block devices are available

2024-01-26 Thread Andrei Borzenkov
On 27.01.2024 00:40, Orion Poplawski wrote: On 1/26/24 01:21, Lennart Poettering wrote: On Do, 25.01.24 16:28, Orion Poplawski (or...@nwra.com) wrote: We have various VMs that are back by luks encrypted LVs. At boot the volumes are decrypted by clevis. The problem we are seeing at the

Re: [systemd-devel] Empty journal files consume space

2024-02-01 Thread Andrei Borzenkov
On Thu, Feb 1, 2024 at 3:25 PM Steve Traylen wrote: > > Hi, > > I'm trying to understand why I am only retaining just a couple of days > of logs when I would like to have more. > > The system journalctl head of the logs is only today: > Feb 01 10:47:14 nodeX.example.ch systemd-journald[722]:

Re: [systemd-devel] Empty journal files consume space

2024-02-02 Thread Andrei Borzenkov
On Fri, Feb 2, 2024 at 12:18 AM Steve Traylen wrote: > > > On 01/02/2024 14:48, Steve Traylen wrote: > > On 01/02/2024 13:45, Andrei Borzenkov wrote: > > > >> On Thu, Feb 1, 2024 at 3:25 PM Steve Traylen > >> wrote: > >>> Hi, > >>&

Re: [systemd-devel] Permanently remove services

2024-01-19 Thread Andrei Borzenkov
On 19.01.2024 19:47, Morten Bo Johansen wrote: On 2024-01-19 Mantas Mikulėnas wrote: In general I've learned to not quite trust what the firmware shows... we've had a batch of Skylake-or-so desktops that *did* have a CPU-integrated fTPM but it wasn't even mentioned until we did a BIOS update,

Re: [systemd-devel] Permanently remove services

2024-01-19 Thread Andrei Borzenkov
On 19.01.2024 20:22, Mantas Mikulėnas wrote: On Fri, Jan 19, 2024, 19:12 Morten Bo Johansen wrote: On 2024-01-19 Mantas Mikulėnas wrote: In general I've learned to not quite trust what the firmware shows... we've had a batch of Skylake-or-so desktops that *did* have a CPU-integrated fTPM

Re: [systemd-devel] Delaying VM startup until block devices are available

2024-01-25 Thread Andrei Borzenkov
On Fri, Jan 26, 2024 at 2:29 AM Orion Poplawski wrote: > > We have various VMs that are back by luks encrypted LVs. At boot the volumes > are decrypted by clevis. The problem we are seeing at the moment is that the > VMs are started before the block devices are decrypted. Our current solution

Re: [systemd-devel] Can I provide separate enabling for dbus-activation and "normal" start ?

2024-02-22 Thread Andrei Borzenkov
On 22.02.2024 19:09, Max Gautier wrote: Hi, Is it possible when writing a dbus-activable service to provide two separate and independent ways to enable it ? The D-Bus service file would for instance be: [D-BUS Service] Name=org.freedesktop.Notifications Exec=notification-daemon

Re: [systemd-devel] Wireguard routes only after connect

2024-02-23 Thread Andrei Borzenkov
On 14.02.2024 11:55, Julian Zielke wrote: Hi, is there a possibility to only add the routes from allowed-ips to the kernel routing table after the peer has connected? This directly contradicts your next statement Because since the tunnel itself is stateless, there is no way for me to make

Re: [systemd-devel] Restarting dbus service makes system unstable

2024-03-07 Thread Andrei Borzenkov
On 08.03.2024 09:49, Shreenidhi Shedi wrote: Hi All, I tried this on Fedora 39 so anyone can reproduce this at their end I guess. Restarting D-Bus was never safe and never supported. Every individual application would need to support D-Bus connection loss and be able to transparently

Re: [systemd-devel] enable systemd-resolved in early boot (dracut)

2024-03-21 Thread Andrei Borzenkov
On Thu, Mar 21, 2024 at 4:44 PM Cristian Rodríguez wrote: > > On Tue, Mar 19, 2024 at 7:44 AM Aleksandar Kostadinov > wrote: > > > > Hello, > > > > I want to enable systemd-resolved in early boot so that `clevis` can > > resolve `tang` address by mdns. This will simplify local network > >

Re: [systemd-devel] Query on sshd.socket sshd.service approaches

2024-03-05 Thread Andrei Borzenkov
On Wed, Mar 6, 2024 at 8:41 AM Shreenidhi Shedi wrote: > > Hi All, > > What is the rationale behind using sshd.socket other than not keeping sshd > daemon running always and reducing memory consumption? Neither is provided by systemd, so I guess this question is better addressed to the project

Re: [systemd-devel] How to automatically decrypt a disk on connection

2024-03-28 Thread Andrei Borzenkov
On Wed, Mar 27, 2024 at 9:49 PM Orion Poplawski wrote: > > > > Use $kernel in rule and /dev/%I in service. > > Thank you, that works. udev monitor -p doesn't show the value of KERNEL so I > didn't see that as an option. > udev documentation lists $kernel when describing substitutions. But yes,

Re: [systemd-devel] How to automatically decrypt a disk on connection

2024-03-27 Thread Andrei Borzenkov
On Wed, Mar 27, 2024 at 12:35 AM Orion Poplawski wrote: > > Sorry this isn't strictly devel - but it is a bit non-standard. > > I need to automatically unlock an encrypted disk on connection to a machine, > with the caveat that I'm not mounting it - instead I want to connect it to a > VM. > > On

Re: [systemd-devel] How to automatically decrypt a disk on connection

2024-03-27 Thread Andrei Borzenkov
On 27.03.2024 20:56, Orion Poplawski wrote: On 3/27/24 10:22, Mantas Mikulėnas wrote: On Wed, Mar 27, 2024, 16:36 Orion Poplawski mailto:or...@nwra.com>> wrote: Can I setup a unit that gets started automatically when a particular dev-disk-by-uuid device becomes present? Just

Re: [systemd-devel] How to chain services driven by a timer?

2024-04-11 Thread Andrei Borzenkov
On Thu, Apr 11, 2024 at 4:17 PM Brian Reichert wrote: > > On Thu, Apr 11, 2024 at 11:16:36AM +0300, Andrei Borzenkov wrote: > > Show full unit definition for both logrotate.service and your service. > > Sure: > > 10-153-68-34:~ # cat /usr/lib/systemd/system/l

Re: [systemd-devel] How to chain services driven by a timer?

2024-04-10 Thread Andrei Borzenkov
On 10.04.2024 22:04, Brian Reichert wrote: On Wed, Apr 10, 2024 at 09:06:09AM -0600, Dan Nicholson wrote: On Wed, Apr 10, 2024 at 8:50???AM Brian Reichert wrote: My current service file: [Unit] Description=Activities after logrotation Requires=logrotate.service

Re: [systemd-devel] Unclear as to why "exec" works but "oneshot" does not

2024-04-14 Thread Andrei Borzenkov
On 14.04.2024 16:48, Laura Smith wrote: I am running a simple service to tweak SSHD on first boot (the script is at the bottom of this mail). This is on Debian Bookworm incase it makes any difference. If I configure my service as: [Unit] Description=ITS Generate SSH Server Keys

Re: [systemd-devel] How to chain services driven by a timer?

2024-04-11 Thread Andrei Borzenkov
On Thu, Apr 11, 2024 at 12:07 AM Brian Reichert wrote: > > On Wed, Apr 10, 2024 at 01:47:47PM -0600, Dan Nicholson wrote: > > Restarting the timer doesn't make the service run immediately. Are you > > sure logrotate.service has run again since you made this change? Just > > simulate the timer and

Re: [systemd-devel] Questions about initrd environment services and IgnoreOnIsolate

2024-05-12 Thread Andrei Borzenkov
On 12.05.2024 18:19, Carolina Jubran wrote: Hello! I need help with a systemd service that loads RDMA and InfiniBand drivers. The service unit specifies DefaultDependencies=no. However, when the service starts in initrd, it gets terminated when initrd-cleanup.service isolates for

<    4   5   6   7   8   9