Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Jan 03, 2020 at 11:48:53AM +0800, Dave Young wrote: > On 01/03/20 at 11:45am, Dave Young wrote: > > On 01/02/20 at 09:02am, Zbigniew Jędrzejewski-Szmek wrote: > > > On Thu, Jan 02, 2020 at 12:21:26AM +0800, Kairui Song wrote: > > > > Some component, like Systemd, have grown by a lot, here i

Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Kairui Song
On Thu, Jan 2, 2020 at 5:04 PM Zbigniew Jędrzejewski-Szmek wrote: > > On Thu, Jan 02, 2020 at 12:21:26AM +0800, Kairui Song wrote: > > Some component, like Systemd, have grown by a lot, here is a list of > > the size of part of binaries along with the binaries they required in > > F31: > > /root/i

Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Dave Young
On 01/03/20 at 11:45am, Dave Young wrote: > On 01/02/20 at 09:02am, Zbigniew Jędrzejewski-Szmek wrote: > > On Thu, Jan 02, 2020 at 12:21:26AM +0800, Kairui Song wrote: > > > Some component, like Systemd, have grown by a lot, here is a list of > > > the size of part of binaries along with the binari

Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Dave Young
On 01/02/20 at 09:02am, Zbigniew Jędrzejewski-Szmek wrote: > On Thu, Jan 02, 2020 at 12:21:26AM +0800, Kairui Song wrote: > > Some component, like Systemd, have grown by a lot, here is a list of > > the size of part of binaries along with the binaries they required in > > F31: > > /root/image/bin/s

Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Adam Williamson
On Thu, 2020-01-02 at 22:59 +, Zbigniew Jędrzejewski-Szmek wrote: > (In Debian the motivation was speed, rather than installation footprint. > So that work was mostly wasted because of the switch from sysvinit to systemd > and ensuing avoidance of shell during boot. Instead of trying to switch

Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Zbigniew Jędrzejewski-Szmek
On Thu, Jan 02, 2020 at 03:29:26PM -0500, Robbie Harwood wrote: > Kairui Song writes: > > > What I'm trying to do is reduce the initramfs size used for kdump. > > Kdump loads a crash kernel and kdump initramfs image in a prereseved > > memory region, which get booted when current kernel crashed a

Re: [systemd-devel] systemd unit file to remount /home /tmp /dev/shm /run with nosuid, nodev

2020-01-02 Thread Topi Miettinen
On 2.1.2020 21.08, Josh Triplett wrote: Lennart Poettering wrote: And noexec doesn't really make much sense for these dirs, as this blocks mmap() with MAP_EXEC and there are plenty apps that want to use that. Moreover "noexec" is at best a protection against accidental execution and not a securi

Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Robbie Harwood
Kairui Song writes: > What I'm trying to do is reduce the initramfs size used for kdump. > Kdump loads a crash kernel and kdump initramfs image in a prereseved > memory region, which get booted when current kernel crashed and > perform crash dump. The prereserved memory is limited, so initramfs >

Re: [systemd-devel] systemd unit file to remount /home /tmp /dev/shm /run with nosuid, nodev

2020-01-02 Thread Josh Triplett
Lennart Poettering wrote: > And noexec doesn't really make much sense for these dirs, as this > blocks mmap() with MAP_EXEC and there are plenty apps that want to use > that. Moreover "noexec" is at best a protection against accidental > execution and not a security mechanism since it is trivially

Re: [systemd-devel] Random branch in github.com/systemd/systemd

2020-01-02 Thread František Šumšal
On 1/2/20 5:13 PM, Mike Gilbert wrote: > On Thu, Jan 2, 2020 at 9:08 AM Lennart Poettering > wrote: >>> If possible, it would probably be wise to restrict access for pushing >>> new branches like this. >> >> Hmm, how would we do that? Any suggestion? Happy to restrict that, but >> not sure how to

Re: [systemd-devel] Random branch in github.com/systemd/systemd

2020-01-02 Thread Mike Gilbert
On Thu, Jan 2, 2020 at 9:08 AM Lennart Poettering wrote: > > If possible, it would probably be wise to restrict access for pushing > > new branches like this. > > Hmm, how would we do that? Any suggestion? Happy to restrict that, but > not sure how to do that... I thought maybe there was a settin

Re: [systemd-devel] Random branch in github.com/systemd/systemd

2020-01-02 Thread Lennart Poettering
On So, 29.12.19 14:59, Mike Gilbert (flop...@gentoo.org) wrote: > It looks like a branch called "msekletar-security-list-process" was > pushed to the official systemd github repo earlier this month. This > branch probably belongs in msekletar's personal fork instead. > > https://github.com/systemd

Re: [systemd-devel] systemd unit file to remount /home /tmp /dev/shm /run with nosuid, nodev

2020-01-02 Thread Lennart Poettering
On Mo, 30.12.19 12:26, Mantas Mikulėnas (graw...@gmail.com) wrote: > > a script to remount /home /tmp /dev/shm /run (configurable) with > > nosuid,nodev (+noexec configurable) has been created by me. The purpose > > of remounting is increasing the security of the system. The script shall > > run a

Re: [systemd-devel] Cannot create 'home' directory systemd-tmpfiles-setup.service

2020-01-02 Thread Lennart Poettering
On Mo, 30.12.19 18:57, Bao Nguyen (bao...@gmail.com) wrote: > Hi everyone, > > systemd-tmpfiles-setup.service throws a strange error when booting > my system Which distro? Which systemd version? > Dec 30 11:32:53 mynode systemd-tmpfiles[751]: Failed to open directory > 'home': No such file or di

Re: [systemd-devel] systemd kills user's scopes/sessions before shutdown service

2020-01-02 Thread Lennart Poettering
On Di, 31.12.19 11:04, Kamal Rathi (kr30ap...@gmail.com) wrote: > Hi Git-Hub Mailing List, > > I am designing a stop service which has to be run before the kill of user's > scope / session . How could this work? Users can log out or be terminated any time, i.e. their scope/sessions can go away du

Re: [systemd-devel] systemd kills user's scopes/sessions before shutdown service

2020-01-02 Thread Andrei Borzenkov
31.12.2019 08:34, Kamal Rathi пишет: > Hi Git-Hub Mailing List, > > I am designing a stop service which has to be run before the kill of user's > scope / session . > As the reboot or shutdown are being initiated the systemd kill all the > users which are in user's.slice > before the script ran so

Re: [systemd-devel] Minimize systemd for kdump's initramfs

2020-01-02 Thread Zbigniew Jędrzejewski-Szmek
On Thu, Jan 02, 2020 at 12:21:26AM +0800, Kairui Song wrote: > Some component, like Systemd, have grown by a lot, here is a list of > the size of part of binaries along with the binaries they required in > F31: > /root/image/bin/systemctl > 20M . > /root/image/usr/bin/systemctl > 20M . > /r