Re: [systemd-devel] why are the systemd binaries so huge and can we do something about that?

Am 16.05.2016 um 14:18 schrieb Michael Biebl: 2016-05-16 6:15 GMT+02:00 Auke Kok : On Mon, May 16, 2016 at 04:24:25AM +0200, Michael Biebl wrote: 1,5M usr/bin/systemd-analyze What's up with systemd-analyze? It shouldn't be part of a base package, it's not even a diagnostic tool, more like

Re: [systemd-devel] service stop taking too long

Am 18.05.2016 um 16:23 schrieb Pradeepa Kumar: I have a script in ExecStop in service file. In journalctl, The time difference between "Stopping XYZ service " and logs from my script in ExecStop is 42 sec. Does that mean systemd itself took long time to start stopping of service? no, it means

Re: [systemd-devel] service stop taking too long

x27;t get it your "ExecStop" took 42 sec On Wed, May 18, 2016 at 7:58 PM, Reindl Harald mailto:h.rei...@thelounge.net>> wrote: Am 18.05.2016 um 16:23 schrieb Pradeepa Kumar: I have a script in ExecStop in service file. In journalctl, The time difference between

Re: [systemd-devel] restart vs. stop/start

Am 20.05.2016 um 21:50 schrieb Christian Boltz: Hello, it looks like systemctl restart foo is internally mapped to a sequence of systemctl stop foo; systemctl start foo what else? Unfortunately, this behaviour causes quite some trouble for me. why? I need a way to know if "rest

Re: [systemd-devel] restart vs. stop/start

Am 22.05.2016 um 21:03 schrieb Christian Boltz: I'm already using ExecReload= to reload the profiles (works fine), and hope all users actually read the documentation and use reload (and avoid restart). Please read the paragraph above the ^^^ marker again. The problem is what happens when someo

Re: [systemd-devel] Fwd: Handling ExecStop failure

Am 23.05.2016 um 10:00 schrieb Ashish Sangwan: My second issue is, on failure of stopping/umounting, no failure message appears on console although I have used StandardError option sadly systemd don't print service outputs to console even something like "systemd-run -t --service-type=oneshot

Re: [systemd-devel] Fwd: Handling ExecStop failure

Am 23.05.2016 um 10:50 schrieb Lennart Poettering: On Mon, 23.05.16 10:32, Reindl Harald (h.rei...@thelounge.net) wrote: even something like "systemd-run -t --service-type=oneshot --quiet" behaves differently and don't work if you call it via crond to get the typical behav

Re: [systemd-devel] Running ldconfig at boot

Am 23.05.2016 um 11:59 schrieb Lennart Poettering: On Mon, 23.05.16 11:34, Florian Weimer (fwei...@redhat.com) wrote: I think the trigger is just implemented incorrectly. It should keep track of UUIDs in files (such as /usr/.change-uuid), rather than looking at mtimes. Then you can just writ

Re: [systemd-devel] restart vs. stop/start

Am 23.05.2016 um 23:33 schrieb Michael Biebl: 2016-05-23 22:52 GMT+02:00 Christian Boltz : I'd argue that nobody will complain if "systemctl restart apparmor" does something sane (reloading the profiles) instead of making the system insecure by removing the confinement from all running process

Re: [systemd-devel] Systemd loads units before btrfs subvolumes are mounted

Am 26.05.2016 um 11:36 schrieb Lennart Poettering: On Thu, 26.05.16 00:52, Rashmi Ranjan Mohanty (rashmiranjan.moha...@microfocus.com) wrote: Anyway we are changing the location of unit files to standard /usr/lib/systemd/system to fix the issue. Tested it and works fine after changing the lo

Re: [systemd-devel] check to see if service is still alive

Am 26.05.2016 um 14:39 schrieb Thomas Güttler: Am 26.05.2016 um 14:35 schrieb Andrei Borzenkov: On Thu, May 26, 2016 at 3:18 PM, Thomas Güttler wrote: I want to know if the service is alive, Define "service is alive". the service is alive if a custom check method has the exit status of 0

Re: [systemd-devel] Systemd loads units before btrfs subvolumes are mounted

Am 26.05.2016 um 16:38 schrieb Lennart Poettering: On Thu, 26.05.16 13:46, Jóhann B. Guðmundsson (johan...@gmail.com) wrote: On 05/26/2016 09:36 AM, Lennart Poettering wrote: /usr is for the OS vendor really. Given that it's generally expected and wanted that application developers follow

Re: [systemd-devel] when/where was support for assigning "ethX" names removed?

Am 26.05.2016 um 20:28 schrieb Chris Friesen: So I've been playing with this a bit, but I've run into another snag. It seems that on initial boot even with "net.ifnames=0" the ethernet interface ordering isn't consistent. This means that two systems with identical hardware can end up mapping "

Re: [systemd-devel] OT: Which tool to use to restart service if check-script fails

Am 27.05.2016 um 06:48 schrieb Thomas Güttler: OK, I understand that I need different tool to restart a service if a check-script fails. In my case the check script will be custom code. But the restart stuff is very general and reusable: Step1: Call check-script Step2: If exit 0 (meaning se

Re: [systemd-devel] [ANNOUNCE] systemd v230

Am 22.05.2016 um 00:51 schrieb Zbigniew Jędrzejewski-Szmek: * systemd-logind will now by default terminate user processes that are part of the user session scope unit (session-XX.scope) when the user logs out. This behavior is controlled by the KillUserProcesses=

Re: [systemd-devel] [ANNOUNCE] systemd v230

Am 27.05.2016 um 12:10 schrieb Reindl Harald: Am 22.05.2016 um 00:51 schrieb Zbigniew Jędrzejewski-Szmek: * systemd-logind will now by default terminate user processes that are part of the user session scope unit (session-XX.scope) when the user logs out. This

Re: [systemd-devel] [ANNOUNCE] systemd v230

Am 27.05.2016 um 12:45 schrieb Mantas Mikulėnas: On Fri, May 27, 2016 at 1:16 PM, Reindl Harald mailto:h.rei...@thelounge.net>> wrote: Am 27.05.2016 um 12:10 schrieb Reindl Harald: Am 22.05.2016 um 00:51 schrieb Zbigniew Jędrzejewski-Szmek: * systemd-

Re: [systemd-devel] pid file /var/run/dhcpd.pid currenty exists

Am 01.06.2016 um 14:07 schrieb XYZDragon: When trying to restart isc-dhcp-server, I was wondering why it didn't start. After executing the suggested `journalctl -xe` I could see that something was wrong: May 27 13:32:15 my-pc isc-dhcp-server[26032]: Starting ISC DHCPv4 server: dhcpddhcpd servi

Re: [systemd-devel] systemd network interface names - new twist

Am 02.06.2016 um 18:20 schrieb Greg KH: Ok, but please ask on a fedora list as this is a fedora specific issue, as it is running a very old version of systemd as well as the kernel, so there's not much we can do here either you must confuse Fedora with other distributions in context of "as we

Re: [systemd-devel] systemd network interface names - new twist

Am 02.06.2016 um 18:50 schrieb Greg KH: On Thu, Jun 02, 2016 at 06:29:50PM +0200, Reindl Harald wrote: Am 02.06.2016 um 18:20 schrieb Greg KH: Ok, but please ask on a fedora list as this is a fedora specific issue, as it is running a very old version of systemd as well as the kernel, so

Re: [systemd-devel] systemd network interface names - new twist

Am 02.06.2016 um 19:24 schrieb JB: On 6/2/2016 11:01 AM, Reindl Harald wrote: Am 02.06.2016 um 18:50 schrieb Greg KH: On Thu, Jun 02, 2016 at 06:29:50PM +0200, Reindl Harald wrote: Am 02.06.2016 um 18:20 schrieb Greg KH: Ok, but please ask on a fedora list as this is a fedora specific

Re: [systemd-devel] Can LSBInitScipts specify an dependency on systemd unit?

Am 09.06.2016 um 10:55 schrieb Bao Nguyen: Hi everyone, I have a script written by SysVinit, can I declare ordering of this script with a systemd unit in "X-Start-Before:" and "X-Start-After:", for ex X-Start-Before: systemd_1.service X-Start-After: systemd_2.service Can it be declared like

Re: [systemd-devel] Can LSBInitScipts specify an dependency on systemd unit?

Am 09.06.2016 um 12:02 schrieb Andrei Borzenkov: On Thu, Jun 9, 2016 at 1:00 PM, Jóhann B. Guðmundsson wrote: On 06/09/2016 09:02 AM, Ross Lagerwall wrote: On Thu, Jun 9, 2016 at 9:55 AM, Bao Nguyen wrote: With a new enough systemd, you should be able to add a snippet to extend the initscr

Re: [systemd-devel] Samba Server dosen't start

Am 26.06.2016 um 13:27 schrieb Ralf Recktenwald: Smb.conf how is that a systemd problem? how do you imagine help without mention distrubition, software-versions, cotent of the systemd-unit, systemctl status servicename and so on? it's really tiresome: http://www.catb.org/esr/faqs/smart-q

Re: [systemd-devel] Samba Server dosen't start

Am 26.06.2016 um 14:16 schrieb Tom H: On Sun, Jun 26, 2016 at 8:09 AM, Reindl Harald wrote: Am 26.06.2016 um 13:27 schrieb Ralf Recktenwald: Smb.conf how is that a systemd problem? how do you imagine help without mention distrubition, software-versions, cotent of the systemd-unit

Re: [systemd-devel] Time synchronization over HTTP?

Am 27.06.2016 um 04:34 schrieb Kai Hendry: I had a quick look at https://github.com/systemd/systemd/tree/master/src/timesync to try work out if /usr/lib/systemd/systemd-timesyncd had some sort of fallback if ntp UDP port 123 traffic is blocked. This happens all too often with my deployments of

Re: [systemd-devel] Time synchronization over HTTP?

Am 27.06.2016 um 08:30 schrieb Kai Hendry: On Mon, 27 Jun 2016, at 01:03 PM, Mantas Mikulėnas wrote: (I also have a strong dislike for network admins who cling to their "HTTP only" firewall policies... I don't see why NTP is a 'lesser' protocol than HTTP and DNS, both of which require either t

Re: [systemd-devel] Time synchronization over HTTP?

Am 28.06.2016 um 05:20 schrieb Kai Hendry: On Mon, 27 Jun 2016, at 08:33 PM, Reindl Harald wrote: normally service level agreemnets contain basic prerequisites and if the are ignored the customers has to pay a penalty in case of support cases You live in a different world to me. you are

Re: [systemd-devel] How to mount NFS prior to start postgresql from this volume

Am 01.07.2016 um 16:44 schrieb wolfgang.wag...@riwa-gis.de: Modifications in section [Unit] like : ConditionPathExists=/mnt/daten/postgis Requires=mnt-daten-postgis.mount Before=mnt-daten-postgis.mount nonsense - you explicitly state that it should be startet *before* the mountpoint - when

Re: [systemd-devel] How to mount NFS prior to start postgresql from this volume

please strip your quotes Am 01.07.2016 um 17:44 schrieb killermoehre: just drop a --- [Unit] ReuqiresMountsFor=/mnt/daten/postgis/9.4/main --- into »/etc/systemd/system/postgresql@9.4-main.service.d/wait-for-mountpoint.conf« (create directory and file if necessary) end everything should be fine.

Re: [systemd-devel] Samba Server dosen't start

Am 06.07.2016 um 07:12 schrieb Lennart Poettering: On Sun, 26.06.16 14:28, Reindl Harald (h.rei...@thelounge.net) wrote: Am 26.06.2016 um 14:16 schrieb Tom H: On Sun, Jun 26, 2016 at 8:09 AM, Reindl Harald wrote: Am 26.06.2016 um 13:27 schrieb Ralf Recktenwald: Smb.conf how is that a

Re: [systemd-devel] Adding a Timer section to .service files

Am 08.07.2016 um 07:35 schrieb One Infinite Loop: systemctl start foo.service systemctl enable foo.service would enabled timer *and* service how would you disable the timer alone? how do you imagine that to work with Type=forking or Type=simple sorry that is a sonsense idea because it offers

Re: [systemd-devel] Adding a Timer section to .service files

Am 08.07.2016 um 15:03 schrieb One Infinite Loop: If you want to disable timer alone or do something else, then you could use .timer file. If not, instead of [Install] section in .service file, you​ could have a [Timer] section so and when the distribution package ships one of them and you c

Re: [systemd-devel] Adding a Timer section to .service files

Am 08.07.2016 um 15:11 schrieb One Infinite Loop: There are cases when you don't need .timer files but only a [Timer] section. With a well written manual page, systemd users will understand why is useful to have a [Timer] section inside a .service file FIRST: learn to quote in email second:

Re: [systemd-devel] Adding a Timer section to .service files

AGAIN: learn to write readable communication * quote waht you refer to * get rid of html Am 08.07.2016 um 15:21 schrieb One Infinite Loop: Why would you create another one? Why are there always people who try to complicate things? you try to complicate things since you bring a *third* place b

Re: [systemd-devel] Adding a Timer section to .service files

Am 08.07.2016 um 15:35 schrieb One Infinite Loop: A few usecases: 1) I want to delete specific files once a day what is the problem? 2)I want to free RAM using sync command and `echo 3 > /proc/sys/vm/drop_caches` every 15 seconds besides it's stupid - what is the problem? 3)I want to ma

Re: [systemd-devel] Adding a Timer section to .service files

Am 08.07.2016 um 16:21 schrieb One Infinite Loop: I want like my browser processes, for example, to run at a nice value of -15. That's why I want to run '/usr/bin/zsh -c '/usr/bin/renice -15 -p $(/usr/bin/pgrep -f /opt/google/chrome/chrome)'` every 15 seconds, for example well, nice -15 means

[systemd-devel] *argh* Re: systemd-devel Digest, Vol 75, Issue 19

-devel digest..." Today's Topics: 1. Re: Adding a Timer section to .service files (Reindl Harald) 2. Re: Adding a Timer section to .service files (Michał Zegan) 3. Re: Adding a Timer section to .service files (Mantas Mikulėnas) 4. Re: Adding a Timer s

Re: [systemd-devel] *argh* Re: systemd-devel Digest, Vol 75, Issue 19

Am 08.07.2016 um 17:51 schrieb Mantas Mikulėnas: On Fri, Jul 8, 2016 at 6:23 PM, Reindl Harald mailto:h.rei...@thelounge.net>> wrote: > There can be many instances of a application without being related in > any way (parent and children) so niceness won't be inher

[systemd-devel] systemd-run and -p ProtectSystem=ful

just upgraded to Fedora 24 /usr/bin/systemd-run -t --service-type=oneshot --quiet --nice=19 --unit=spamfilter-fetch-samples --description=spamfilter-fetch-samples -p ProtectSystem=full /usr/bin/php /scripts/test.php don't log anything useful or return anything, calling a shellscript which is

Re: [systemd-devel] systemd-run and -p ProtectSystem=ful

Am 25.07.2016 um 19:41 schrieb Lennart Poettering: On Mon, 25.07.16 19:26, Reindl Harald (h.rei...@thelounge.net) wrote: just upgraded to Fedora 24 /usr/bin/systemd-run -t --service-type=oneshot --quiet --nice=19 --unit=spamfilter-fetch-samples --description=spamfilter-fetch-samples -p

Re: [systemd-devel] Where is systemd non-devel list?

Am 28.07.2016 um 23:52 schrieb Chip: I see that my question re: issues with systemd, is more suited for non development list. Is there a non development systemd list? no, just this one signature.asc Description: OpenPGP digital signature ___ sys

Re: [systemd-devel] Systemd Questions

Am 14.08.2016 um 14:29 schrieb Tom Browder: I am trying to get comfortable with systemd on Debian 8 but am very confused by the complex documentation. I am a simple man with a simple need to be able to modiify startup scripts for several packages I build from source which currently are: + apa

Re: [systemd-devel] Systemd Questions

Am 14.08.2016 um 15:20 schrieb Tom Browder: On Sun, Aug 14, 2016 at 7:34 AM, Reindl Harald wrote: to be honest: did you read *any* documentation or anything about systemd before your post besides "it exists"? Yes I did, a tutorial and man systemd. Have you ever looked at the man

Re: [systemd-devel] start database mysql.

Am 18.08.2016 um 16:48 schrieb Alfredo Garzon: hi, we have a problem, we install rpm of mysql5.7.9, at the beginning start database please, someone give some idea to correct this: the messages is: bgtlhnbd2etc#systemctl start mysqld Job for mysqld.service failed. See 'systemctl status mysql

Re: [systemd-devel] Halt then reboot

Am 17.09.2016 um 13:23 schrieb Dark Penguin: Long version: Many UPS-es do not support cutting power at all, or ignore the command to cut the power in certain situations. There was a workaround for that: instead of powering the machines off, they had to halt, then wait a reasonable amount of tim

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

Am 25.09.2016 um 23:52 schrieb Sergei Franco: I am looking at correct way to disable the "feature" of emergency mode when systemd encounters missing block device entires in fstab. For example: the following entry is in /etc/fstab: UUID=d4a23034-8cbe-44b3-92a5-3d38e1816eff /data

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

Am 26.09.2016 um 11:27 schrieb Oliver Neukum: On Sun, 2016-09-25 at 23:57 +0200, Reindl Harald wrote: Am 25.09.2016 um 23:52 schrieb Sergei Franco: I am looking at correct way to disable the "feature" of emergency mode when systemd encounters missing block device entires in f

Re: [systemd-devel] systemd - cleaning of /var/run/

Am 27.09.2016 um 12:22 schrieb Hajo Locke: When restarting mysql, then folder /var/run/mysqld is deleted and recreated. Result is that every mounted folder is loosing his content, because "mount --bind" does not find its source any more. then don't use RunTimeDirectory in your mysqld-unit ins

Re: [systemd-devel] mysql open_files_limit controlled by systemd

Am 29.09.2016 um 11:56 schrieb Hajo Locke: Hello, Am 29.09.2016 um 11:30 schrieb Tomasz Torcz: On Thu, Sep 29, 2016 at 11:20:34AM +0200, Hajo Locke wrote: Hello List, we found out that mysql open_files_limit ist controlled by systemd-service file. We used LimitNOFILE to increase default val

Re: [systemd-devel] thoughts on different command structure

Am 05.10.2016 um 21:26 schrieb Xen: Tomasz Torcz schreef op 05-10-2016 19:12: On Wed, Oct 05, 2016 at 07:00:11PM +0200, Xen wrote: [ … renaming propositions … ] Uh, it is way too late for such changes. Maybe if you brought this five years ago… Right now it would only bring pointless di

Re: [systemd-devel] thoughts on different command structure

Am 05.10.2016 um 21:42 schrieb Xen: Reindl Harald schreef op 05-10-2016 21:33: Am 05.10.2016 um 21:26 schrieb Xen: Tomasz Torcz schreef op 05-10-2016 19:12: On Wed, Oct 05, 2016 at 07:00:11PM +0200, Xen wrote: [ … renaming propositions … ] Uh, it is way too late for such changes

Re: [systemd-devel] wayland ..??!

Am 07.10.2016 um 04:03 schrieb Che: I'm wondering... Has anyone yet invoked 'wayland' as being, in fact, a most diabolical project... by which Lennart Poettering & Co. schemingly intend to take over the GNUnix *graphics* universe, as well..? :D I'm wondering what taht has to do with systemd

Re: [systemd-devel] TTL for systemd -> EL7

Am 12.10.2016 um 15:08 schrieb Chris Bell: Hey everyone, Not sure if this is the right place to ask no but I figured someone here or at RH would know. What's the TTL for systemd updates on EL7? My Arch box runs 231, but our EL7 (RHEL7.2) boxes are only at 219, where it has been (if I'm not

Re: [systemd-devel] PAM session hooks for independent session

Am 29.10.2016 um 13:37 schrieb Antoine Martin: Just like "screen" or "tmux", we want to ensure that some xpra sessions (aka "screen for X11", VNC-like but seamless) can survive when the user logs out which is not longer true https://www.reddit.com/r/linux/comments/4lebbr/systemd_to_kill_all_u

Re: [systemd-devel] rpcbind.socket failing

Am 01.11.2016 um 16:11 schrieb Steve Dickson: On 10/31/2016 03:40 PM, Michael Biebl wrote: Why is it using /var/run (where /var could be on a separate partition) and not /run for the socket files? Historical reasons?? I guess that's way its always been and never caused a problem... i strong

Re: [systemd-devel] rpcbind.socket failing

Am 01.11.2016 um 17:05 schrieb Steve Dickson: and I still getting the following errors rpcbind.socket: Failed to listen on sockets: No such file or directory Failed to listen on RPCbind Server Activation Socket. Starting RPC Bind... rpcbind.service: Failed at step EXEC spawning /usr/bin/rpcbin

Re: [systemd-devel] unsubsribe

Am 03.11.2016 um 20:27 schrieb sp113438: unsubsribe i can' remember that you asked me or other list memeber to subscribe you so why should we even be able to unsubscribe you? guess what the list footer is for List-Unsubscribe:

Re: [systemd-devel] unsubsribe

Am 03.11.2016 um 21:36 schrieb Douglas R. Reno: On Thu, Nov 3, 2016 at 3:10 PM, Reindl Harald <mailto:h.rei...@thelounge.net>> wrote: Am 03.11.2016 um 20:27 schrieb sp113438: unsubsribe i can' remember that you asked me or other list memeber to subscr

Re: [systemd-devel] xmodmap gives: No protocol specified

Am 04.11.2016 um 16:26 schrieb Cecil Westerhof: 2016-11-04 15:46 GMT+01:00 Cecil Westerhof : I want to set my own keyboard definitions when they get lost. They sometimes do. The only way of doing this automatically is in a cronjob or a systemd service. I would prefer a systemd service. But for

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

Am 06.11.2016 um 07:28 schrieb Andrei Borzenkov: 04.11.2016 18:14, Marc Haber пишет: "nofail" has been around as long as fstab has been around really. It's not a systemd invention. I cannot say anything about that, I don't have any non-systemd machines left. However, that machines stop booti

Re: [systemd-devel] systemd-sysv-generator bug ?

Am 18.11.2016 um 15:46 schrieb Cédric BRINER: We used to have a custom init script written for systemV that was working. Now, for some unknown reason, systemd does not to treat this init script as it used to be If so how can I instruct this service to execute the ExecStop before unmounting th

Re: [systemd-devel] Script in /usr/lib/systemd/system-shutdown not executed on init 6

Am 23.11.2016 um 13:42 schrieb Benoit SCHMID: Is there an easy way to create a systemd service that would be stopped very early at the shutdown and would avoid the other services stop command to be executed. In other world, on my XXX server, the most important service is XXX. Stopping XXX take

Re: [systemd-devel] Script in /usr/lib/systemd/system-shutdown not executed on init 6

Am 23.11.2016 um 15:19 schrieb Benoit SCHMID: On 11/23/2016 03:03 PM, Reindl Harald wrote: than you need only to adjust "DefaultTimeoutStopSec" to ensure it does not get killed and order services proper In most of my tests, this is set to 5min. Therefore the problem is not loca

Re: [systemd-devel] after=local-fs not enforced

Am 24.11.2016 um 16:20 schrieb Benoit SCHMID: We have defined the following sap_XXX.service. It contains the following in [Unit]: ### After=local-fs.target network-online.target ora_lsnr_XXX.service remote-fs.target Wants=ora_lsnr_XXX.service ### Stopping and Starting the service with systemd

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

Am 27.11.2016 um 19:23 schrieb Jonathan de Boyne Pollard: Lennart Poettering: "nofail" has been around as long as fstab has been around really. This is a falsehood. /etc/fstab has a history that goes back to the 20th century. It was in UNIX System 5 Release 3, 4.2BSD, and OSF/1, for exampl

Re: [systemd-devel] [PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy

On 30.11.2016 15:05, Stefan Berger wrote: > From: Stefan Berger > > To sync with systemd, use the filepath /etc/ima/ima-policy as > the file location for the IMA policy. > > Signed-off-by: Stefan Berger > --- > modules.d/98integrity/ima-policy-load.sh | 7 ++- > 1 file changed, 6 insertion

Re: [systemd-devel] [PATCH v2] 98integrity: Use /etc/ima as dir for IMA policy and config file

On 30.11.2016 16:10, Stefan Berger wrote: > From: Stefan Berger > > To sync with systemd, use the filepath /etc/ima/ima-policy as > the file location for the IMA policy. At the same time we > move the ima config file location to /etc/ima/ima. Adapt the > documentation to the new path. > > Signed

Re: [systemd-devel] [PATCH v2] 98integrity: Use /etc/ima as dir for IMA policy and config file

On 30.11.2016 16:24, Stefan Berger wrote: > On 11/30/2016 10:16 AM, Harald Hoyer wrote: >> On 30.11.2016 16:10, Stefan Berger wrote: >>> From: Stefan Berger >>> >>> To sync with systemd, use the filepath /etc/ima/ima-policy as >>> the file location for

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

Am 01.12.2016 um 02:36 schrieb Manuel Amador (Rudd-O): On 09/26/2016 10:31 AM, Reindl Harald wrote: Am 26.09.2016 um 11:27 schrieb Oliver Neukum: On Sun, 2016-09-25 at 23:57 +0200, Reindl Harald wrote: RTFM - when you don't say "nofail" it's ecpected to be crucial

Re: [systemd-devel] unsubscribe

only today the third "unsubscribe" post on differnet lists to all members - what's wrong with all the people not able to click on a list-footers link, https://lists.freedesktop.org/mailman/listinfo/systemd-devel in that case and scroll down to "unsubscribe" or just send to the correct address

Re: [systemd-devel] About http://0pointer.net/blog/avoiding-cve-2016-8655-with-systemd.html

Am 09.12.2016 um 01:56 schrieb Michael Biebl: Btw, I think we are lacking a good systemd sandboxing howto/tutorial. The one linked from fdo (http://0pointer.de/blog/projects/security.html) is pretty dated and the systemd.exec man page is not coherent enough with regards to security/sandboxing.

Re: [systemd-devel] Best way to limit per-user system-wide units

Am 13.12.2016 um 21:41 schrieb Samuel Williams: I wanted to use systemd --user but had trouble getting it to run via sudo- seemed like the environment wasn't getting set up correctly. Any ideas? get rid of sudo and re-consider everything where you are using sudo/su ___

Re: [systemd-devel] Best way to limit per-user system-wide units

g to solve not the solution you think is good! On 14 December 2016 at 10:45, Reindl Harald wrote: Am 13.12.2016 um 22:40 schrieb Samuel Williams: Reindl, thanks for your ideas. So, I log in as me "bob", but I want to run a task as http, e.g. sudo -u http git checkout -f What do

Re: [systemd-devel] Best way to limit per-user system-wide units

ds to On 14 December 2016 at 09:49, Reindl Harald wrote: Am 13.12.2016 um 21:41 schrieb Samuel Williams: I wanted to use systemd --user but had trouble getting it to run via sudo- seemed like the environment wasn't getting set up correctly. Any ideas? get rid of sudo and

Re: [systemd-devel] Best way to limit per-user system-wide units

Am 14.12.2016 um 00:08 schrieb Samuel Williams: Well, given I opened the PR, I'd hope the chance is very low -- at least, no more than sudo. Sudo verifies the configuration using a regular language. It doesn't mean you can't shoot yourself in the foot, but it makes it pretty damn hard. JavaS

Re: [systemd-devel] PrivateNetwork and libusb

Am 14.12.2016 um 10:25 schrieb Richard Hughes: It would be a shame to have PrivateNetwork commented out in fwupd, especially as it's a root daemon that has no business dealing with networking stuff. Is there a way of using PrivateNetwork=yes and allowing AF_NETLINK to correctly work? Restrict

Re: [systemd-devel] systemd-networkd in initrd

Am 23.12.2016 um 16:43 schrieb Thijs Cramer: In that case, is there any guide on what's required to get it working? My current scripting only adds the binary (and library dependancies) and adds the systemd-network and resolve users to /etc/passwd. When it starts it says: "Cannot resolve user n

Re: [systemd-devel] unit names in systemd log entries

Am 11.01.2017 um 15:41 schrieb Yuri D'Elia: When systemd is generating log entries for some units, it writes the human description in the syslog: systemd[xy]: Starting GnuPG cryptographic agent... systemd[xy]: Stopping GnuPG cryptographic agent... systemd[xy]: Closing GnuPG cryptographic agent

Re: [systemd-devel] unit names in systemd log entries

Am 11.01.2017 um 16:11 schrieb Yuri D'Elia: On Wed, Jan 11 2017, Reindl Harald wrote: The description is fine for looking at the status of a service (as the unit name is right there), but it does not help in the log, since I have to go and look which unit has the same description (essent

Re: [systemd-devel] problem apache2 service

Am 12.01.2017 um 09:12 schrieb Nico - Clicom snc - www.clicom.it: I have this error on my nas: -- Unit apache2-safe.service has begun starting up. Jan 12 08:55:47 ReadyNESSY systemd[5020]: apache2-safe.service: Failed at step EXEC spawning /usr/sbin/apache2: No such file or directory -- Subject

Re: [systemd-devel] Having synchronization between 2 process using systemd.

Am 20.01.2017 um 11:20 schrieb Raghavendra. H. R: I have a scenario in which I have 2 processes and both acts as Server & Client. Process A starts it server & tries to connect as client with Process B. Process B starts it server & tries to connect as client with Process A. We want handle this

Re: [systemd-devel] What information does machine-id leak?

Am 20.01.2017 um 20:54 schrieb Bryan Quigley: But what information is it carrying that is private? none - a UUID is by defintion UNIQUE but random stuff generated once and that's it https://en.wikipedia.org/wiki/Universally_unique_identifier ___

Re: [systemd-devel] Errorneous detection of degraded array

Am 26.01.2017 um 19:02 schrieb Luke Pyzowski: I have a large RAID6 device with 24 local drives on CentOS7.3. Randomly (around 50% of the time) systemd will unmount my RAID device thinking it is degraded after the mdadm-last-resort@.timer expires, however the device is working normally by all

Re: [systemd-devel] Errorneous detection of degraded array

Am 26.01.2017 um 19:02 schrieb Luke Pyzowski: I have a large RAID6 device with 24 local drives on CentOS7.3. Randomly (around 50% of the time) systemd will unmount my RAID device thinking it is degraded after the mdadm-last-resort@.timer expires, however the device is working normally by all

Re: [systemd-devel] "libsystemdexec/systemd-run --exec-from-unit"

Am 29.01.2017 um 07:56 schrieb Colin Walters: Hey so, this is is a half-baked thought, but here goes: One problem I've hit when trying to use systemd unit file features is that they only work when executed by systemd. Let's take the example of User=, but it applies to tons of other ones too.

Re: [systemd-devel] Errorneous detection of degraded array

Am 30.01.2017 um 07:36 schrieb NeilBrown: By virtue of "Following" attribute. dev-md0.device is Following sys-devices-virtual-block-md0.device so stopping the latter will also stop the former. Ahh.. I see why I never saw this now. Two reasons. 1/ My /etc/fstab has UUID=d1711227-c9fa-4883-a90

Re: [systemd-devel] Any reason why /run and /dev/shm do not have MS_NOEXEC flags set?

Am 01.02.2017 um 11:02 schrieb Hoyer, Marko (ADITG/SW2): a tiny question: - Is there any reason why the mount points /run and /dev/shm do not have MS_NOEXEC flags set? We like to remove execution capabilities from all volatile areas that are writeable to users for security reasons it's all

Re: [systemd-devel] Fw: Installing VirtualBox on Debian Jessie - Problem with Linux kernel Name

Am 04.02.2017 um 22:00 schrieb gilesaj: During installation of VirtualBox I got this error. It seems to be a problem with the way the OVH dedicated server displays the Linux Kernel name as 3.14.32--grs-ipv6-64. how is that a systemd problem at all? contact OVH and/or Oracle http://w

Re: [systemd-devel] misleadin email Re: Fw: Installing VirtualBox on Debian Jessie - Problem with Linux kernel Name

Am 04.02.2017 um 23:48 schrieb Tomasz Torcz: On Sat, Feb 04, 2017 at 10:34:39PM +, gilesaj wrote: The only reason I posted here is because that is what is in the text of the error. root@ns527415:~#journalctl -xn-- The start-up result is done.Feb 04 15:31:03 ns527415.ip-192-99-6.net syst

Re: [systemd-devel] systemd-networkd meet the error of "No such file or directory"

Am 15.02.2017 um 01:47 schrieb Zhou, Luwei: Hi Lennart, Thanks for the reply. Is there any command to check whether networkd has been installed in my image. I can find the systemd-nspawn and many system-* in my image. Is the networkd part of systemd package? Sorry, I am new to system. sin

Re: [systemd-devel] Start a global service

Am 15.02.2017 um 18:53 schrieb Damien Robert: Lennart Poettering wrote in message <20170215172159.GA10587@gardel-login>: Sorry, but this is unlikely to be added. I understand that this would be handy, but this is semantically very questionable, as this would be transition from privileged cod

Re: [systemd-devel] Adding "After=network-online.target" via drop-in

Am 19.02.2017 um 13:34 schrieb Mantas Mikulėnas: On Sat, Feb 18, 2017 at 10:32 PM, Ian Pilcher mailto:arequip...@gmail.com>> wrote: I have configured sshd on my firewall to listen only on its internal IP address. This is causing it to fail when it first starts, since the IP address

Re: [systemd-devel] Log output is incomplete or unavailable

Am 20.02.2017 um 22:00 schrieb Patrick B: I'm running Ubuntu 16.04.01 Server and just realised some log files are not being created. Such as: /var/log/kern.log /var/log/postgresql/postgresql.log this is really not a upstream question- maybe your distribution just don#t install an

Re: [systemd-devel] [networkd] Mixing DHCP & static IPs on 1 interface

Am 22.02.2017 um 01:30 schrieb Ian Pilcher: I'm trying to find a way to do this with systemd-networkd. The reason is that my cable modem listens on a 192.168.X.X address. Normally this "just works". My firewall tries to send traffic destined for this address to my ISP's router, and the cable

Re: [systemd-devel] [networkd] Mixing DHCP & static IPs on 1 interface

please keep repsonses on the list Am 22.02.2017 um 15:42 schrieb Ian Pilcher: On 02/21/2017 08:28 PM, Reindl Harald wrote: since this should be all on the LAN side something is *very* unusual on your setup - the firewall i setup at office is just a virtual machine with a single NIC and is

Re: [systemd-devel] how make systemd NOT to clutter dmesg?

Am 27.02.2017 um 10:55 schrieb lejeczek: hi there I'm trying to solve problem which to you guys must be trivial, but it's a puzzle to me. I've searched the net & man pages but ... failed to find how/where systemd is told to put stuff like: Got message type... seriously - could you at least

Re: [systemd-devel] how make systemd NOT to clutter dmesg?

Am 27.02.2017 um 12:11 schrieb Tomasz Torcz: On Mon, Feb 27, 2017 at 11:03:09AM +, lejeczek wrote: On 27/02/17 10:10, Reindl Harald wrote: Am 27.02.2017 um 10:55 schrieb lejeczek: hi there I'm trying to solve problem which to you guys must be trivial, but it's a puzzle t

Re: [systemd-devel] how make systemd NOT to clutter dmesg?

Am 27.02.2017 um 17:18 schrieb lejeczek: yes, correct, something did, in /etc/grub2.cfg systemd.log_level=debug systemd.log_target=kmsg even tough nothing of above is to be found in /etc/default/grub What I found and messaged Centos list about, long agao, but it might be interesting to anybod

[systemd-devel] F25: NAMESPACE spawning: Too many levels of symbolic links

with systemd-229-18.fc24.x86_64 no problem at all - after upgrade to F25 "/usr/bin/vmware-networks" while this is just a phyiscal file and was not touched [root@rh:~]$ rpm -q systemd systemd-231-14.fc25.x86_64 Mar 16 16:25:23 rh systemd: vmware-vmnet.service: Failed at step NAMESPACE spawning

<    1   2   3   4   5   6   7   8   9   10   >