> -----Original Message-----
> From: [email protected] <[email protected]> On
> Behalf Of Paul Gortmaker via lists.yoctoproject.org
> Sent: den 10 maj 2023 17:05
> To: Armin Kuster <[email protected]>
> Cc: [email protected]
> Subject: [yocto] [meta-security][PATCH 2/4] dm-verity: don't make read-
> only-rootfs sound like a requirement
> 
> From: Paul Gortmaker <[email protected]>
> 
> Adding to your local.conf right out of the gate:
> 
>   EXTRA_IMAGE_FEATURES = "read-only-rootfs"
> 
> while you are trying to sort out other things can be just another
> complication to an already steep learning curve.
> 
> For example, I found simply enabling this with systemd caused:
> 
>   systemd[1]: Failed to fork off sandboxing environment for executing
> generators: Protocol error
>   [!!!!!!] Failed to start up manager.
>   systemd[1]: Freezing execution.
> 
> While I'd like to get to the root cause of that, it doesn't change that
> things boot fine w/o adding to EXTRA_IMAGE_FEATURES, even though the
> rootfs is still read-only courtesy of dm-verity.

The error you are seeing above is due to a bug in systemd. It is fixed 
in version 253.4 (commit 5ed087fa46dc04ee92da12635777b2b622183a5d).

//Peter

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#60010): https://lists.yoctoproject.org/g/yocto/message/60010
Mute This Topic: https://lists.yoctoproject.org/mt/98808915/21656
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to