Re: [systemd-devel] scheduling services first during shutdown/reboot

2025-02-12 Thread Andrei Borzenkov
12.02.2025 16:35, Olaf Hering wrote: What is the proper way to run a service as the very first unit when the system goes down? I want to run it before systemd stops active sessions with "Stopping Session N of User $user...". It seems that "After=session-N.scope" does have the desired effect, but

[systemd-devel] scheduling services first during shutdown/reboot

2025-02-12 Thread Olaf Hering
What is the proper way to run a service as the very first unit when the system goes down? I want to run it before systemd stops active sessions with "Stopping Session N of User $user...". It seems that "After=session-N.scope" does have the desired effect, but I may have to list every possible valu

Re: [systemd-devel] Improving boot time of systemd based initrd?

2025-02-12 Thread Itxaka Serrano Garcia
IMHO if you want speed in the initrd and know what you will need in terms of kernel, modules and sysroot, just create your own initrd with a single binary that extends the PCR, mounts the needed parts and pivots into the sysroot init? This should be pretty easy to do on go for example, so you get

[systemd-devel] Improving boot time of systemd based initrd?

2025-02-12 Thread Mikko Rapeli
Hi, I'm trying to create a simple systemd based initrd with yocto tooling. Main rootfs runs systemd too. The initrd should only measure boot to TPM device and then detect rootfs from mass storage on a number of boards. No graphics or other use cases are needed at the moment. The initrd is created

[systemd-devel] Notice: journal has been rotated since unit was started, output may be incomplete.

2025-02-12 Thread Vincent Prince
Hello, I use systemd 255.13 on a custom Yocto machine that runs for long periods of time. I configured journald with those options: Storage=persistent SystemMaxUse=2000M RuntimeMaxUse=200M ForwardToSyslog=no After a while, my services don't output anything using "journalctl -f -u myservice" and

Re: [systemd-devel] Need Advice about MaxConnections on ssh.socket

2025-02-12 Thread Andy Pieters
On Tue, 11 Feb 2025 at 15:57, Marc Haber wrote: > One of my systems is rather frequently target of scans, which the socket I'm not saying security through obscurity is the solution, but I find that putting my SSH on a non-standard and not frequently used protocol port cuts down 99.% of these

Re: [systemd-devel] [EXT] Need Advice about MaxConnections on ssh.socket

2025-02-12 Thread Windl, Ulrich
I had similar effects (even though not parallel) from pre-systemd times. As most of those attempts were coming from a specific IP, I added some firewall rule, and it calmed down things significantly. Maybe today one could add such firewall rules automatically and dynamically from detected attack