Re: [systemd-devel] [RFC] Switching to OpenSSL 3?

2021-11-23 Thread Dimitri John Ledkov
On Tue, Nov 23, 2021 at 12:09 PM Lennart Poettering wrote: > > On Di, 23.11.21 11:53, Dimitri John Ledkov (dimitri.led...@canonical.com) > wrote: > > > Just an update from Ubuntu - for the upcoming release of Jammy (22.04 > > LTS targeting release in April 2022) we have started transition to > >

Re: [systemd-devel] [RFC] Switching to OpenSSL 3?

2021-11-23 Thread Lennart Poettering
On Di, 23.11.21 11:53, Dimitri John Ledkov (dimitri.led...@canonical.com) wrote: > Just an update from Ubuntu - for the upcoming release of Jammy (22.04 > LTS targeting release in April 2022) we have started transition to > OpenSSL 3 and currently upgrading to systemd v249. Did Ubuntu adopt

Re: [systemd-devel] [RFC] Switching to OpenSSL 3?

2021-11-23 Thread Dimitri John Ledkov
Just an update from Ubuntu - for the upcoming release of Jammy (22.04 LTS targeting release in April 2022) we have started transition to OpenSSL 3 and currently upgrading to systemd v249. W.r.t. library choice usually GnuTLS APIs are nicer to use; however OpenSSL library tends to be the more

Re: [systemd-devel] give unprivileged nspawn container write access to host wayland socket

2021-11-23 Thread Lennart Poettering
On Mo, 22.11.21 16:02, Nozz (n...@protonmail.com) wrote: > I recently moved to pure wayland, I want to run a graphical > application in a unprivileged container(user namespace isolation) > . The application needs write access to wayland socket on the host > side. What's the best way to achieve

Re: [systemd-devel] give unprivileged nspawn container write access to host wayland socket

2021-11-23 Thread Nozz
Thanks nd, I think your idea for giving access to "others" is best, then individual access can be controlled with SELinux policy, or at least that's the idea, haven't tried it yet in practice.