Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-24 Thread Colin Walters
On Wed, May 16, 2018, at 10:56 AM, Simon McVittie wrote: > > Projects like libostree and rpm-ostree might have some useful concepts > or code for managing immutable, read-only rootfs or /usr deployments, > since that's what they do: in an ostree-based OS, /usr is an > atomically-updated

Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Lennart Poettering
On Mi, 16.05.18 15:56, Simon McVittie (s...@collabora.com) wrote: > On Wed, 16 May 2018 at 16:33:08 +0200, Antoine Pietri wrote: > > On Wed, May 16 at 13:05 PM, Jérémy Rosen wrote: > > > hmm, I think you could have the whole /var as a tmpfs and use > > > systemd-tmpfiles

Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Lennart Poettering
On Mi, 16.05.18 16:33, Antoine Pietri (antoine.piet...@gmail.com) wrote: > Hi Jérémy, > > On Wed, May 16 at 13:05 PM, Jérémy Rosen wrote: > > hmm, I think you could have the whole /var as a tmpfs and use > > systemd-tmpfiles (man:tmpfiles.d) to initialize /var at startup

Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Lennart Poettering
On Mi, 16.05.18 13:29, Antoine Pietri (antoine.piet...@gmail.com) wrote: > Hi, > > Our organization uses a diskless setup to boot hundreds of machines > using a read-only NFS export of their common rootfs. > > To be able to run services that need to write in /var, we can't just > have /var as a

Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Simon McVittie
On Wed, 16 May 2018 at 16:33:08 +0200, Antoine Pietri wrote: > On Wed, May 16 at 13:05 PM, Jérémy Rosen wrote: > > hmm, I think you could have the whole /var as a tmpfs and use > > systemd-tmpfiles (man:tmpfiles.d) to initialize /var at startup by > > copying some template

Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Antoine Pietri
Hi Jérémy, On Wed, May 16 at 13:05 PM, Jérémy Rosen wrote: > hmm, I think you could have the whole /var as a tmpfs and use > systemd-tmpfiles (man:tmpfiles.d) to initialize /var at startup by > copying some template directory from a read-only location (typicalli in > /usr)

Re: [systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Jérémy Rosen
hmm, I think you could have the whole /var as a tmpfs and use systemd-tmpfiles (man:tmpfiles.d) to initialize /var at startup by copying some template directory from a read-only location (typicalli in /usr) On 16/05/2018 13:29, Antoine Pietri wrote: Hi, Our organization uses a diskless

[systemd-devel] DynamicUsers and read-only /var

2018-05-16 Thread Antoine Pietri
Hi, Our organization uses a diskless setup to boot hundreds of machines using a read-only NFS export of their common rootfs. To be able to run services that need to write in /var, we can't just have /var as a tmpfs, because it contains files installed by packages that are required by some