Re: [systemd-devel] Restarting dbus service makes system unstable

2024-03-08 Thread Simon McVittie
On Fri, 08 Mar 2024 at 10:22:50 +0300, Andrei Borzenkov wrote: > Restarting D-Bus was never safe and never supported. Every individual > application would need to support D-Bus connection loss and be able to > transparently reconnect. None of the client libraries implement this; and if they did,

Re: Activation environment(s)?

2024-01-08 Thread Simon McVittie
On Mon, 08 Jan 2024 at 20:42:54 +0300, Vladimir Kudrya wrote: > On 08/01/2024 19.21, Mantas Mikulėnas wrote: > > The traditional dbus-daemon keeps a separate environment for services it > > spawns directly [...], though that it doesn't apply to services it runs > > via systemd so you need to keep

Re: systemd-sysupdate support for slow rollout (aka A/B testing)

2024-01-02 Thread Simon McVittie
On Tue, 02 Jan 2024 at 11:16:15 +0100, Lennart Poettering wrote: > The idea so far was always that the server is dumb, and the client > picks the release it wants. > > I have thought about this usecase a while back, and my thinking was > that such a staged update logic should be driven by the

Re: [systemd-devel] Securing bind with systemd methods (was: bind-mount of /run/systemd for chrooted bind9/named)

2023-07-18 Thread Simon McVittie
On Tue, 18 Jul 2023 at 10:42:49 +0200, Marc Haber wrote: > That would be /usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 on my > system (only output of find /lib /usr/lib -name 'ld-lin*'), and adding > that to ExecPaths doesnt allow my Executable to run. So it must be > something else (possibly in

Re: [systemd-devel] systemd-stable and Debian's systemd release strategy

2023-01-19 Thread Simon McVittie
On Wed, 18 Jan 2023 at 16:57:05 +0100, Michael Biebl wrote: > backports: mostly me lacking time Also, a note for those who might be less familiar with Debian: the backports policy is that Debian 11 backports (bullseye-backports) should always be in sync with the version that would be in Debian 12

Re: [systemd-devel] Issue with systemd / journalctl

2023-01-03 Thread Simon McVittie
On Tue, 27 Dec 2022 at 18:44:42 +0100, syst...@sioban.net wrote: > I've discovered it's linked to selinux filesystem not mounted > (don't ask me why, I'm still trying to dig into this...) Debian does not use SELinux by default (the default LSM is AppArmor), so if you are using SELinux, you're

Re: [systemd-devel] systemd-container: Trying to use a bookworm chroot with a buster host fails / Failed to create /init.scope control group

2022-12-05 Thread Simon McVittie
On Sat, 03 Dec 2022 at 23:38:55 +0100, Bernhard Übelacker wrote: > > No SELinux or Apparmor active > > As far as I see in my test VM with minimal Debian Buster there is no SELinux. > "aa-status" returns "apparmor module is loaded.", but I did not intentionally > configure anything to it. Debian

Re: [systemd-devel] systemd tries to terminate a process that seems to have exited

2022-05-10 Thread Simon McVittie
On Tue, 10 May 2022 at 08:44:27 +0300, Yuri Kanivetsky wrote: > The one running on the host is 215-17 (Debian 8). That's very old. As far as most of the Debian project is concerned, Debian 8 reached EOL in mid 2018. There is a separate Debian LTS team which picks up security support when the main

Re: [systemd-devel] Samba Config Reload

2022-04-11 Thread Simon McVittie
On Mon, 11 Apr 2022 at 09:58:54 +0200, Lennart Poettering wrote: > dbus-daemon for example uses: > > ExecReload=/usr/bin/busctl call org.freedesktop.DBus > /org/freedesktop/DBus org.freedesktop.DBus ReloadConfig > > Which is a synchronous call to reload the config: the daemon is told > to

Re: [systemd-devel] no log information about why machine is sleeping

2021-08-13 Thread Simon McVittie
On Fri, 13 Aug 2021 at 08:05:29 +0200, Ulrich Windl wrote: > Amazingly in my Leap 15 system it's GNOME that triggers it: If I'm not logged > in, no suspend happens, but when I have a GNOME session suspend happens. If this is not what you want, change the logged-in user's GNOME settings (via

Re: [systemd-devel] automatically restarting services on file changes

2021-07-19 Thread Simon McVittie
On Tue, 13 Jul 2021 at 23:37:49 -0300, Webstrucs wrote: > when I make any changes in this > file it is necessary to restart the [service] in order to get the updates. Is > there > any way to implement [an automatic restart] so > that you no longer need to use restarting the service when there are

Re: [systemd-devel] Session-specific user services

2021-04-06 Thread Simon McVittie
On Fri, 02 Apr 2021 at 20:54:05 +0300, Arseny Maslennikov wrote: > There's at least a use case to know if an active session owned by the > UID is present on seat X: > https://gitlab.gnome.org/GNOME/gvfs/-/issues/557 > In short, if a USB storage drive is connected to a particular seat, > we'd like

Re: [systemd-devel] sdbus errors and their underlaying int value: unique?

2021-03-03 Thread Simon McVittie
On Wed, 03 Mar 2021 at 13:51:38 +0100, Lennart Poettering wrote: > On Di, 02.03.21 10:40, Carlo Wood (ca...@alinoe.com) wrote: > > In C++ we have std::error_code which stores both a (unique) domain > > and an int that is defined within that domain. The integer values > > do not have to be globally

Re: [systemd-devel] Debugging sd_notify / tracing notifications?

2021-03-02 Thread Simon McVittie
On Mon, 01 Mar 2021 at 10:20:31 -0500, John Ioannidis wrote: > I occasionally need to send a SIGINT to the process Have you tried this? systemctl kill --signal=SIGINT foo.service (Perhaps with --kill-who=main if you just want to kill its top-level process and not its child processes, if

Re: [systemd-devel] Still confused with socket activation

2021-02-04 Thread Simon McVittie
On Thu, 04 Feb 2021 at 13:07:33 +0100, Reindl Harald wrote: > "Requires=a.service" combined with "Before=a.service" is contradictory - > don't you get that? It means what it says: whenever my service is enabled, a.service must also be enabled, but my service has to start first (and stop last).

Re: [systemd-devel] What exactly is multi-seat? -- questions about logind

2021-01-26 Thread Simon McVittie
On Tue, 26 Jan 2021 at 01:43:43 -0800, Kian Kasad wrote: > First of all, what exactly is multi-seat? Does it just mean allowing > multiple sessions to be running at once, like for multiple users to be > logged into the same desktop, even though only one will be in use at a > time? No, that's

Re: [systemd-devel] ssh.service in rescue.target

2020-11-09 Thread Simon McVittie
On Mon, 09 Nov 2020 at 09:16:05 -0500, Phillip Susi wrote: > I guess I'll try masking it. The Debian/Ubuntu package for systemd already masks various services that are superseded by something in systemd, such as procps.service and rcS.service. It used to also mask all the services from

Re: [systemd-devel] systemctl reboot/halt with non-privilege user

2020-10-28 Thread Simon McVittie
On Wed, 28 Oct 2020 at 14:11:07 +0200, Mantas Mikulėnas wrote: > I'm not entirely sure why reboot is treated differently from halt, though. If you reboot a machine, it will (hopefully!) come back up after some downtime, so it's a limited level of denial of service and might make sense to restrict

Re: [systemd-devel] Crond session, pam_access and pam_systemd

2020-10-13 Thread Simon McVittie
On Tue, 13 Oct 2020 at 13:09:43 +0200, Thomas HUMMEL wrote: > Ok, so for instance, on my debian, when I see: > > > user@1000.service > │ │ ├─gvfs-goa-volume-monitor.service > │ │ │ └─1480 /usr/lib/gvfs/gvfs-goa-volume-monitor > │ │ ├─gvfs-daemon.service > │ │ │ ├─1323 /usr/lib/gvfs/gvfsd

Re: [systemd-devel] A sh -c '${name} and $name' are treated inconsistently within a .service unit

2020-08-27 Thread Simon McVittie
On Thu, 27 Aug 2020 at 16:11:37 +, u...@net9.ga wrote: > ExecStart=/bin/bash -c 'set -x; declare -r str="1 2"; echo ${str}; echo $str; > exit 0;' This seems to be behaving as documented: Basic environment variable substitution is supported. Use "${FOO}" as part of a word, or

Re: [systemd-devel] Ensuring that a unit starts before any networking

2020-06-30 Thread Simon McVittie
On Tue, 30 Jun 2020 at 12:59:54 +0100, Mark Rogers wrote: > On Tue, 30 Jun 2020 at 12:13, Simon McVittie wrote: > > > > I would have expected this to be done in some "larger" network management > > component that is responsible for bringing up network i

Re: [systemd-devel] Ensuring that a unit starts before any networking

2020-06-30 Thread Simon McVittie
On Tue, 30 Jun 2020 at 11:27:30 +0200, Lennart Poettering wrote: > On Sa, 27.06.20 15:54, Mark Rogers (m...@more-solutions.co.uk) wrote: > > Adding After=network-pre.target to dhcpcd.service seems to have > > resolved it, and taught me a lesson in the process. > > > > Is there an obvious reason

Re: [systemd-devel] Q: daemon-reload: when and how?

2020-06-18 Thread Simon McVittie
On Thu, 18 Jun 2020 at 11:01:59 +0200, Jérémy ROSEN wrote: > multiple unit files need to work together to make a working environment, and > systemd can't know when all changes are consistent and > it is safe to reload. So systemd will want an explicit order from the user. Also, reloading is

Re: [systemd-devel] --Reboot-- lines in journal

2020-05-14 Thread Simon McVittie
On Thu, 14 May 2020 at 16:12:49 +0300, Mantas Mikulėnas wrote: > The "--Reboot--" line is simply shown every time the _BOOT_ID field changes > between two entries -- even if it changes to a previously seen boot ID (which > shouldn't happen normally, but *might* be caused by lack of a RTC?). The

Re: [systemd-devel] os-release: extension to expose host's version variables to containers

2020-05-06 Thread Simon McVittie
On Wed, 06 May 2020 at 16:39:39 +0200, Lennart Poettering wrote: > On Do, 16.04.20 16:56, Simon McVittie (s...@collabora.com) wrote: > > /run/host seems like a reasonable convention to encourage for > > container/host systems that want this, since it doesn't require > > inve

Re: [systemd-devel] os-release: extension to expose host's version variables to containers

2020-04-16 Thread Simon McVittie
On Thu, 16 Apr 2020 at 14:03:43 +, Luca Boccassi wrote: > But I found at least one other use case where this is needed, and the > solution there is to add a new directory /host/ which replicates part > of the host's filesystem tree, including os-release: > >

Re: [systemd-devel] Stateless system - Centos8 and overlayfs on root

2020-03-30 Thread Simon McVittie
On Fri, 27 Mar 2020 at 10:17:37 -0700, Preston L. Bannister wrote: > Updates would be accomplished by booting from the original boot menu entry. > (This is slightly complicated by the fact the target systems' computers do not > have a console - but figure I can script altering the default boot.)

Re: [systemd-devel] Reasoning behind sd_bus_error argument to sd_bus_call?

2020-03-18 Thread Simon McVittie
On Tue, 17 Mar 2020 at 20:17:05 +0100, Daan De Meyer wrote: > I'm documenting sd_bus_call and its async variant and I was wondering about > the > sd_bus_error output parameter that's passed to it. [...] I don't > see immediately see the benefit of the sd_bus_error parameter in a D-Bus > client >

Re: [systemd-devel] dbus activation service path

2020-01-27 Thread Simon McVittie
On Fri, 24 Jan 2020 at 23:27:20 +0200, Damian Ivanov wrote: > I also have a question about dbus activation. > Is there an environment variable or something to tell systemd/dbus-broker > to look in a specific path for dbus .service files? The D-Bus Specification[1] says: On Unix systems,

Re: [systemd-devel] EXT: sdbus_event loop state mark as volatile?

2019-09-06 Thread Simon McVittie
On Fri, 06 Sep 2019 at 06:57:22 +, Ray, Ian (GE Healthcare) wrote: > If thread-safety is a design goal (and I don’t believe that it is [1]) > then atomic or thread-safe primitives should be used. > > [1] > https://lists.freedesktop.org/archives/systemd-devel/2017-March/038519.html [1] is

Re: [systemd-devel] Antw: Re: Need help detecting local/remote targets

2019-08-21 Thread Simon McVittie
On Wed, 21 Aug 2019 at 08:02:39 +0200, Ulrich Windl wrote: > >>> Mantas Mikulenas schrieb am 21.08.2019 um 06:07 in > Nachricht > : > > / and /usr are mounted by initramfs before systemd starts. > > And what about /run? /run is mounted by systemd as pid 1, but it is one of the "API file

Re: [systemd-devel] systemd's connections to /run/systemd/private ?

2019-08-14 Thread Simon McVittie
On Wed, 14 Aug 2019 at 10:26:53 -0400, Brian Reichert wrote: > And, if I were to ever use daemonize(1), or any other other canonical > mechanism for daemonizing code, STDOUT would normally be closed > under those circumstances, as well. Doesn't daemonize(1) make stdin, stdout and stderr point to

Re: [systemd-devel] keyrings and dbus

2019-06-13 Thread Simon McVittie
On Thu, 13 Jun 2019 at 15:43:36 +0300, Topi Miettinen wrote: > The sessions with slightly different scopes might be useful in some cases. > But if this is not the case, would it be possible to unify the scopes and > make systemd --user part of the login session? I don't think so. Consider these

Re: [systemd-devel] keyrings and dbus

2019-06-12 Thread Simon McVittie
On Wed, 12 Jun 2019 at 19:57:39 +0300, Andrei Borzenkov wrote: > 12.06.2019 19:18, Simon McVittie пишет: > > systemd user services are not part of a particular login session. They > > exist outside all login sessions (look at systemd-cgls). > > > gnome-terminal surely

Re: [systemd-devel] keyrings and dbus

2019-06-12 Thread Simon McVittie
On Wed, 12 Jun 2019 at 18:34:30 +0300, Andrei Borzenkov wrote: > Technically this is probably correct - session keyring lifetime is > exactly that - session, and systemd-user lifetime is independent of > individual (GUI) login session lifetime. But then D-Bus should not be > started inside

Re: [systemd-devel] Anybody care to fix the list processor?

2019-06-11 Thread Simon McVittie
On Tue, 11 Jun 2019 at 15:44:07 +0200, Ulrich Windl wrote: > Does anybody running the list care to fix the list-processor. I don't think the members of this list control its infrastructure, but I've opened . smcv

Re: [systemd-devel] Password agent for user services

2019-05-28 Thread Simon McVittie
On Mon, 20 May 2019 at 11:49:42 +0200, Lennart Poettering wrote: > Ideally some infrastructure like PK would supply this mechanism > instead of us btw. polkit is for controlled privilege escalation where an unprivileged user asks a privileged system service to do something, and the system service

Re: [systemd-devel] sd-bus dynamic property table

2019-05-13 Thread Simon McVittie
On Mon, 13 May 2019 at 08:25:03 -0700, Stephen Hemminger wrote: > The next step is to add ethtool statistics. Each type of network device will > have > different set of named properties. This is really a D-Bus API design query, not a systemd query. The standard D-Bus Properties interface is not

Re: [systemd-devel] sd-bus: Enabling free-standing, bus-independent plain messages

2019-05-13 Thread Simon McVittie
On Mon, 13 May 2019 at 10:38:38 +0200, Lennart Poettering wrote: > On So, 12.05.19 13:06, Stanislav Angelovič (angelovi...@gmail.com) wrote: > > Quick question: Would it be possible to extend sd-bus to also allow > > creating messages without requiring a bus? > > This used to be available but we

Re: [systemd-devel] Many user slices created and user managers spawned on boot

2019-01-28 Thread Simon McVittie
On Sat, 26 Jan 2019 at 10:26:23 -0600, Steve Bergman wrote: > possibly since before the upgrade from Debian 7 with sysvinit to > Debian 9 with systemd I hope you upgraded from Debian 7 (usually booted with sysvinit) to Debian 8 (usually booted with systemd), then rebooted, cleaned up any obsolete

Re: [systemd-devel] sd-bus: calling D-Bus method from a D-Bus method callback upon the same D-Bus connection

2019-01-28 Thread Simon McVittie
On Sat, 26 Jan 2019 at 16:22:47 +0100, Lennart Poettering wrote: > Yes, you may synchronously call into other bus services from an async > msg hander, but as long as that call runs no incoming msgs besides the > expected reply will be processed. This means effectively that while > the synchronous

Re: [systemd-devel] Data flow is slow

2018-11-08 Thread Simon McVittie
On Thu, 08 Nov 2018 at 18:57:35 +0530, deepan muthusamy wrote: > I have two applications. App1 is UI application. App2 is console application. > Both are communicating through Dbus(session). ... > If I start as system service System services are not part of any session, so they should not attempt

Re: [systemd-devel] [PATCH v2] meson: use the host architecture compiler/linker for src/boot/efi

2018-09-28 Thread Simon McVittie
On Fri, 28 Sep 2018 at 10:40:28 +0200, Lennart Poettering wrote: > On Do, 27.09.18 17:17, Helmut Grohne (hel...@subdivi.de) wrote: > > > cross building systemd to arm64 presently fails, because the build > > system uses plain gcc and plain ld (build architecture compiler and > > linker

Re: [systemd-devel] non-dev systemd-devel package for Linux

2018-08-31 Thread Simon McVittie
On Fri, 31 Aug 2018 at 10:52:30 -0700, Sayeed hyder wrote: > Thanks Silvio. Unfortunately, I cannot use devel. IIUC, rhel/centos does not > provide a non-dev systemd package? That does not sound right. Are you mixing up the concept of an unstable version that is still under development, and the

Re: [systemd-devel] Select on value of log message

2018-08-30 Thread Simon McVittie
On Thu, 30 Aug 2018 at 12:48:02 +0200, Cecil Westerhof wrote: > Posted the problem in a Debian newsgroup. Please send all Debian-specific bug reports and feature requests to its bug tracking system , filed against the package that has the bug or is missing the

Re: [systemd-devel] Returning a struct from an sd-bus method

2018-08-23 Thread Simon McVittie
On Thu, 23 Aug 2018 at 17:34:14 +0100, Simon McVittie wrote: > Finally, I think the message-building API expects struct members as > individual arguments, like > > sd_bus_reply_method_return(m, "xx", (int64_t) s->x, (int64_t) s->y); Sorry, obviously that's cor

Re: [systemd-devel] Returning a struct from an sd-bus method

2018-08-23 Thread Simon McVittie
On Thu, 23 Aug 2018 at 16:52:38 +0200, Niall Murphy wrote: > struct pack { >     int x; >     int y; > }; ... >     return sd_bus_reply_method_return(m, "(xx)", s); Is there a reason why you're returning a struct/tuple? D-Bus methods can return as many things as you want[1], unlike C functions,

Re: [systemd-devel] Restarting a service as user instead as root

2018-08-13 Thread Simon McVittie
On Mon, 13 Aug 2018 at 12:44:48 +0200, Cecil Westerhof wrote: > I tried to put this in: >     /etc/polkit-1/rules.d/10-auth.rules ... > I am using Debian 9. Debian uses an old version of polkit (with most of the changes from newer versions backported) due to maintainability concerns about the use

Re: [systemd-devel] How to build only udev

2018-07-04 Thread Simon McVittie
On Wed, 04 Jul 2018 at 11:36:23 -0700, Kevin Greene wrote: > 2018-07-03 18:18 GMT-07:00 Mike Gilbert : > Why not just install the libudev-dev package on a Ubuntu dev > system/chroot? That would be much simpler than building libudev from > scratch, and would ensure you build against the

Re: [systemd-devel] Authenticating "sd bus" fails with Invalid argument

2018-06-19 Thread Simon McVittie
On Tue, 19 Jun 2018 at 12:32:19 +, mag...@minimum.se wrote: > The system is on a quite old kernel (3.18.44) ... > At this point, things go wrong when > recvmsg() is called on bus->input_fd with flags MSG_DONTWAIT|MSG_NOSIGNAL| > MSG_CMSG_CLOEXEC. This syscall returns -22 (Invalid argument)

Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Simon McVittie
On Wed, 16 May 2018 at 16:33:08 +0200, Antoine Pietri wrote: > On Wed, May 16 at 13:05 PM, Jérémy Rosen wrote: > > hmm, I think you could have the whole /var as a tmpfs and use > > systemd-tmpfiles (man:tmpfiles.d) to initialize /var at startup by > > copying some template

Re: [systemd-devel] how to make systemd ignore the memory cgroup controller and hierarchy

2018-05-09 Thread Simon McVittie
On Wed, 09 May 2018 at 16:46:09 +, john terragon wrote: > I have the memory cgroup controller configured in the kernel. I want to use it > myself directly without interference from systemd. I don't think this is supported. systemd behaves as though cgroups v2 is in use (single unified cgroup

Re: [systemd-devel] How to change XDG_RUNTIME_DIR permissions

2018-04-09 Thread Simon McVittie
On Mon, 09 Apr 2018 at 17:27:10 +, john terragon wrote: > created by the logind service.I want to make the socket of the pulseaudio > server of one particular user available to all the others. This is basically PulseAudio system-wide mode:

Re: [systemd-devel] how to login into a container booting with a minimal 'debian distro unstable' via nspawn

2018-03-26 Thread Simon McVittie
On Sun, 25 Mar 2018 at 19:50:24 +0300, Mantas Mikulėnas wrote: > Does debootstrap actually create a passwordless root account? No, it creates a system with all system accounts locked[1] (including root, daemon, bin, www-data, etc.) and no non-system accounts. There is no single correct answer for

Re: [systemd-devel] Starting a service at shutdown time, with requirements

2018-03-20 Thread Simon McVittie
On Tue, 20 Mar 2018 at 19:16:59 +, Mantas Mikulėnas wrote: > On Tue, Mar 20, 2018, 21:09 Colin Walters wrote: > Another way I've thought about handling this is to basically invert things > so that > we have a "stub" unit that starts on bootup, and its ExecStop

[systemd-devel] Should long-running child processes clear INVOCATION_ID?

2018-03-02 Thread Simon McVittie
When dbus-daemon carries out a mixture of systemd and traditional (non-systemd) activation, we get a process tree like this: systemd --user (init.scope) |- dbus-daemon --session (dbus.service) | |- (babysitter process) |

Re: [systemd-devel] Why is systemd-run --scope synchronous?

2018-02-06 Thread Simon McVittie
On Tue, 06 Feb 2018 at 13:09:26 +0100, worz wrote: > I am not sure why things are different. I also > notice the difference is that in case of --scope, the service manager is > not really the parent process, and it's just that systemd-run creates a > transient scope and places the process inside

Re: [systemd-devel] Again, why this strange behavior implied by "auto" in fstab ?

2018-01-23 Thread Simon McVittie
On Tue, 23 Jan 2018 at 15:47:21 +0100, Franck Bui wrote: > Basically, systemd mounts all filesystems listed in /etc/fstab (unless > "noauto" is used) which is good since that's how fstab was used when > SysV was the init system. > > However it also introduced another "feature" which basically >

Re: [systemd-devel] sd_watchdog_enabled: how to use when forking process?

2018-01-19 Thread Simon McVittie
On Fri, 19 Jan 2018 at 17:22:51 +, philip is hungry wrote: > however if i run the forkme function (to put process in the background) it > behaves as follows: > > Jan 18 15:06:25 thinkpad waitonly[11228]: Return from forkme = 11228 > Jan 18 15:06:25 thinkpad waitonly[11228]: Return from lockme

Re: [systemd-devel] systemctl start second.service first.service

2018-01-12 Thread Simon McVittie
On Thu, 11 Jan 2018 at 21:41:54 +0100, Reindl Harald wrote: > come on - nobody cares about this bullshit bingo about what are jobs, units > and services Please try to be polite when you are in a situation where you could be perceived as representing a community. Responses like this to discussion

Re: [systemd-devel] Dependencies on DBus activated services during shutdown

2018-01-08 Thread Simon McVittie
On Mon, 08 Jan 2018 at 16:07:48 +0100, Michal Koutný wrote: > As it comes, A.service needs B.service for proper termination. During > the shutdown transaction there is unspecified ordering of the two (since > the dependency is implicit only) and B.service is stopped before A.service. Does

Re: [systemd-devel] proper use of /run/{user/, }/systemd/private sockets

2017-11-14 Thread Simon McVittie
On Tue, 14 Nov 2017 at 09:19:08 +0100, Jérémy Rosen wrote: > That being said, the system socket location is hardcoded not just in systemd, > but in the dbus specification itself. The D-Bus Specification does not say anything about the .../systemd/private sockets. That would be inappropriate:

Re: [systemd-devel] How to give users permissions to /dev/kfd

2017-10-16 Thread Simon McVittie
On Sat, 14 Oct 2017 at 17:50:33 +0300, Mantas Mikulėnas wrote: > No, it's only available for local sessions (ones which systemd-logind > considers > "local" + "active"). I think the idea is that console users automatically get > more privileges in general. Specifically, the idea is that console

Re: [systemd-devel] start user-service only with UID greater than 1000

2017-07-25 Thread Simon McVittie
On Wed, 26 Jul 2017 at 00:02:06 +0200, Jakob Schürz wrote: > I have no idea, why this users get a PAM-Session. > Now i can see there is also a systemd --user process for > debian-security-support: > > Jul 25 23:54:49 aldebaran systemd[1]: Starting User Manager for UID 137... > Jul 25 23:54:49

Re: [systemd-devel] no user dbus session in container

2017-07-19 Thread Simon McVittie
On Wed, 19 Jul 2017 at 09:31:36 +, arnaud gaboury wrote: > Do I really need a per user dbsu session in my container? I don't know. Do you? You haven't said anything about how you start the container, how you log in to the container, what its purpose is, or how (if at all) its purpose

Re: [systemd-devel] no user dbus session in container

2017-07-18 Thread Simon McVittie
On Fri, 14 Jul 2017 at 12:36:12 +, arnaud gaboury wrote: > After upgrade from Fedora 25 to 26, there is no more user dbus session for > user > in container. ... > On container, user can't connect to dbus session, and I have no idea why. > May someone please give me some hints on how to debug

Re: [systemd-devel] Is there a reason to run systemd Units with root access?

2017-07-06 Thread Simon McVittie
On Tue, 04 Jul 2017 at 20:33:54 +, Mariusz Wojcik wrote: > As far as I know, there > aren’t many services that need full root access (maybe for getting a low port > number). systemd system units are basically a replacement for LSB (or sysvinit if you prefer) init scripts, which always run as

Re: [systemd-devel] [RFC] AddMatch on a private/direct bus

2017-06-09 Thread Simon McVittie
On Fri, 09 Jun 2017 at 15:20:49 +0200, Łukasz Stelmach wrote: > We are developing a daemon that is monitoring a system. One of its > sources of information is systemd. To avoid dependency on dbus-daemon > (which may fail and cripple our daemon) the daemon connects to > /run/systemd/private to

Re: [systemd-devel] Systemd --session instance?

2017-04-25 Thread Simon McVittie
On Tue, 25 Apr 2017 at 09:55:16 +0200, Lennart Poettering wrote: > If you now > introduce a third set of search paths /usr/lib/systemd/session, then > you'll open an entirely new can of worms, as no apps install their > unit files there, and you'd have to convince every single one of them > to do

Re: [systemd-devel] sd-bus connections & authentication timeout

2017-03-23 Thread Simon McVittie
On Mon, 20 Mar 2017 at 19:40:04 +0100, Stanislav Angelovič wrote: > Regarding polling, I understand, but I fear this way we could get race > condition on the connection instance, since we'd have a thread doing the > polling and processing in a loop on the connection, and some other thread (say >

Re: [systemd-devel] suspend hook as user service

2017-02-20 Thread Simon McVittie
On Fri, 17 Feb 2017 at 19:41:00 +0100, Michael Hirmke wrote: > A much better approach is to write a script or program listening for the > according signals "PrepareForSleep" and "PrepareForShutdown" on the dbus > interface "org.freedesktop.login1". This is the thing to do. It allows your program

Re: [systemd-devel] General question about dbus-activatable services

2017-02-16 Thread Simon McVittie
On Thu, 16 Feb 2017 at 02:01:29 +0100, Christian Rebischke wrote: > I would like to start > ibus-daemon automatically on login in my user session. ... > But it was rejected, due to the fact that a dbus-activatable service for > ibus exists. If there is a D-Bus service already, the way to get it

Re: [systemd-devel] WebUSB

2017-01-16 Thread Simon McVittie
On Mon, 09 Jan 2017 at 10:20:33 +0100, Lars Knudsen wrote: > 2. make sure that webusb devices will be somehow accessible to be used by a > browser running with user permissions (current temp solution listed here: > adding user to plugdev, adding 0664 permissions to device: https:// >

Re: [systemd-devel] User bus broke automatic multiseat

2017-01-16 Thread Simon McVittie
On Wed, 14 Dec 2016 at 23:23:55 +0300, Oleg Samarin wrote: > The following change in systemd-226: > > systemd now supports the concept of user buses replacing > session buses, if used with dbus-1.10 (and enabled via dbus > --enable-user-session). It previously only supported this on >

Re: [systemd-devel] question regarding DBUS_SESSION_BUS_ADDRESS in multiseat environment

2017-01-16 Thread Simon McVittie
On Sat, 03 Dec 2016 at 11:18:43 +0530, MohanR wrote: > I'm looking through this --enable-user-session in dbus-daemon. Even if > I enable that option, how can I retrive uniq DBUS_SESSION_BUS_ADDRESS > from systemd started dbus-daemon to pass it to gnome-session? I suggest taking a look at how it

Re: [systemd-devel] question regarding DBUS_SESSION_BUS_ADDRESS in multiseat environment

2016-12-02 Thread Simon McVittie
On Fri, 02 Dec 2016 at 13:58:01 +0530, Mohan R wrote: > Let say if a user already have a session(session0) in a seat (customseat0) and > he want to start another session in another seat (customseat1). Does this mean your user is trying to be physically present in two places at the same time? How

Re: [systemd-devel] Spurious failures starting ConnMan with systemd

2016-11-21 Thread Simon McVittie
On Tue, 15 Nov 2016 at 16:02:07 +0100, Daniel Wagner wrote: > commit 09aa0243aac40ec4e5bd0fbe41e702be4952a382 > Author: Patrik Flykt > Date: Thu Sep 17 10:42:46 2015 +0300 > > connman.service: Fix dependencies for early boot > > Unset default

Re: [systemd-devel] systemd-timesyncd: Cannot resolve user name systemd-timesync: No such process

2016-11-11 Thread Simon McVittie
On Fri, 11 Nov 2016 at 15:13:00 +0100, Michael Hirmke wrote: > Does anyone know, what "+::" in /etc/passwd means? It's to do with the NSS "compat" plugin, which glues together NIS and a traditional password file. Look for "Compatibility mode (compat)" in

Re: [systemd-devel] No rhyme or reason to systemd enabling/disabling service

2016-07-29 Thread Simon McVittie
On 29/07/16 18:56, Simon McVittie wrote: > So I'm not sure what you're doing, or > where your dnscrypt-proxy.{socket,service} came from. It's a bug in the Debian/Ubuntu packaging for dnscrypt-proxy, which have their own fork of the systemd units, possibly derived from 1.6.0. I've opened

Re: [systemd-devel] No rhyme or reason to systemd enabling/disabling service

2016-07-29 Thread Simon McVittie
ystem or /lib/systemd/system depending on distribution, although you can copy them into /etc/systemd/system to make local modifications (or use "drop-ins", see systemd.unit(5)). -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> _

Re: [systemd-devel] No rhyme or reason to systemd enabling/disabling service

2016-07-29 Thread Simon McVittie
If you need the network to be up before dnscrypt-proxy actually starts, then it's dnscrypt-proxy.service that needs the dependency. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.f

Re: [systemd-devel] Standardizing names for graphical session units

2016-07-05 Thread Simon McVittie
ntu, but I'd advocate a similar approach - sourcing a couple of dozen Turing-complete shell script fragments during session startup makes it rather difficult to reason about. S -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___

Re: [systemd-devel] How to mount NFS prior to start postgresql from this volume

2016-07-01 Thread Simon McVittie
ight want to look into taking over its maintenance. I think vmware-tools might be in a similar situation: relatively early boot, but only a LSB init script, not a native systemd service. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/>

Re: [systemd-devel] how to use per-user systemd --user services / how to replace /etc/xdg/autostart/app.desktop?

2016-06-20 Thread Simon McVittie
upstream versions in Debian testing/unstable in some cases. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] Sync mail with offlineimap via systemd service/timer; getting password from gnome keyring

2016-06-20 Thread Simon McVittie
ved distributions, it might be enabled unconditionally (as on recent Fedora and Arch), or there might be some equivalent step you have to take, or it might even not be possible at all. libsecret uses D-Bus to communicate with gnome-keyring, which is why this is relevant. -- Simon McVittie Collabora Ltd

Re: [systemd-devel] question on special configuration case

2016-06-08 Thread Simon McVittie
will normally only run on one CPU at a time anyway. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] /usr/lib/systemd/*.wants vs. Wants in unit definition

2016-06-06 Thread Simon McVittie
is used by other systemd components). Conversely, polkitd.service is statically *disabled* (it doesn't ship symlinks in the .deb and doesn't have a WantedBy), so it can be started on-demand via D-Bus activation, but is never started "eagerly" during boot (there would be no point). --

Re: [systemd-devel] why does bootctl default to /boot and not to /boot/efi?

2016-05-30 Thread Simon McVittie
overwrite. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] Supporting properties(configurations) system

2016-03-07 Thread Simon McVittie
ight be a better fit to use plain files, inotify and no daemon. Normal Unix DAC permissions, or LSMs' MAC policies, can provide read-only and read/write. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list sy

Re: [systemd-devel] euid 0 not honored authenticating control socket?

2016-01-25 Thread Simon McVittie
t;http://cgit.freedesktop.org/polkit/tree/src/programs/pkexec.c> does - then you can set the real and effective uids to the same value, effectively taking responsibility for dealing with the security boundary. -- Simon McVittie Collabora Ltd. <http://www.c

Re: [systemd-devel] How to suppress coredumps when systemd-coredump is in use?

2016-01-12 Thread Simon McVittie
. If systemd's pid 1 has a way to set RLIMIT_CORE globally (including for itself), then perhaps that argument doesn't hold on system systems, but it's something to think about before making this change. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> _

Re: [systemd-devel] How to unlock a blocking sd_bus_wait() call

2016-01-08 Thread Simon McVittie
if you're using it single-threaded. S -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] User service with suid executable

2016-01-08 Thread Simon McVittie
other user. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] How to suppress coredumps when systemd-coredump is in use?

2016-01-08 Thread Simon McVittie
.org/dbus/dbus/tree/test/test-segfault.c> <https://bugs.freedesktop.org/show_bug.cgi?id=83772> -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists

Re: [systemd-devel] Query regarding "EnvironmentFile"

2015-12-10 Thread Simon McVittie
rtunately dbus doesn't always follow this rule for historical reasons - is a configuration-file option, but it shouldn't be. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedeskto

Re: [systemd-devel] [help][227] Enabling a user service breaks a little my system!

2015-11-26 Thread Simon McVittie
installs some extra files: on Debian, we always enable that option, but we split the files into the dbus-user-session package instead of including them in the main dbus package. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-d

Re: [systemd-devel] [packaging] split of systemd package

2015-11-12 Thread Simon McVittie
present in libc. S -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] Help writing a user service file that will exec a command upon system sleep

2015-10-29 Thread Simon McVittie
: http://cgit.freedesktop.org/telepathy/telepathy-mission-control/tree/src/connectivity-monitor.c -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists.freedesktop

Re: [systemd-devel] Secret machine-id for RFC 7217 stable addresses

2015-10-09 Thread Simon McVittie
ine to use the hash of a random secret as a basis for the world-readable machine ID. However, in existing installations that are upgraded, the old machine ID should always be preserved. S -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> ___

Re: [systemd-devel] Possible confusion with socket activation and daemon own configuration

2015-09-08 Thread Simon McVittie
resource consumption until then. This would be appropriate if the reason for providing ssh access is as a rarely-used "developer console" analogous to Android's adb, for instance. -- Simon McVittie Collabora Ltd. <http://www.collabora.com/> _

  1   2   3   >