Re: [systemd-devel] By default, restrict vsock

2025-01-29 Thread Fox, Kevin M
So, the main option now, is to write a script that looks for any service without a RestrictAddressFamilies and make a dropin to restrict it, and run the script whenever a new service is added? Was hoping to avoid that as its complex / potentially error prone. But if thats what it takes, thats w

[systemd-devel] Problem bind-mounting /etc/hosts

2025-01-29 Thread Thomas Köller
I am creating a systemd service that contains the three lines below: TemporaryFileSystem = %E BindReadOnlyPaths = %E/hosts NetworkNamespacePath = /var/run/netns/vpnlink So the service runs in a network namespace of its own. The problem is that I cannot mount '/etc/hosts' into the tmpfs: root@

Re: [systemd-devel] error sending to systemd: org.freedesktop.DBus.Error.Spawn.ChildExited: Process org.freedesktop.systemd1 exited with status 1

2025-01-29 Thread Michal Koutný
On Thu, Jan 16, 2025 at 01:40:31PM +, Bernd Lentes wrote: > Hi, > > I get this error on an Ubuntu 22.04.5 when I try to connect via X2go from a > Windows Box. (And does it work OK from a Linux client?) > The error message appears in the file > .xsession-x2go-bioinformatics-mcd-01-errors

Re: [systemd-devel] By default, restrict vsock

2025-01-29 Thread Michal Koutný
On Fri, Jan 24, 2025 at 05:20:50PM +, "Fox, Kevin M" wrote: > So, I think there still is a problem here. > > Any ideas? Hm, the latter is clearly generally unadvisable, so stick with the first approach and allow the AF_VSOCK in a higher drop-in, in your case /usr/lib/systemd/system/particu

Re: [systemd-devel] Oneshot killed by timeout

2025-01-29 Thread Mantas Mikulėnas
On Wed, Jan 29, 2025 at 11:56 AM Henti Smith wrote: > On Tue, 28 Jan 2025 at 16:05, Mantas Mikulėnas wrote: > >> On Tue, Jan 28, 2025 at 4:42 PM Henti Smith >> wrote: >> >>> Good day all. >>> >>> I'm having some timeouts on a oneshot service and I cannot explain the >>> failure based on the doc

Re: [systemd-devel] Oneshot killed by timeout

2025-01-29 Thread Henti Smith
On Tue, 28 Jan 2025 at 16:05, Mantas Mikulėnas wrote: > On Tue, Jan 28, 2025 at 4:42 PM Henti Smith > wrote: > >> Good day all. >> >> I'm having some timeouts on a oneshot service and I cannot explain the >> failure based on the documentation. >> >> We have a service that runs a script that chec

[systemd-devel] UKI secure boot regression after systemd update from 256 to 257.1

2025-01-29 Thread Mikko Rapeli
Hi, We're cross compiling and booting into u-boot based UEFI secure boot firmware which should load a UKI with kernel and initramfs to find the real rootfs. This has been working for months now with systemd 256 but is now broken with 257.1. UKI is generated in the cross compile environment with: