Re: [systemd-devel] Improving boot time of systemd based initrd?

2025-02-18 Thread Mikko Rapeli
Hi, On Tue, Feb 18, 2025 at 12:50:51PM -0600, Jeremy Linton wrote: > Hi, > > On 2/12/25 5:10 AM, Mikko Rapeli wrote: > > Hi, > > > > I'm trying to create a simple systemd based initrd with yocto > > tooling. Main rootfs runs systemd too. The initrd should only > > measure boot to TPM device and

[systemd-devel] Need help with DHCPv4 client

2025-02-18 Thread Thomas Köller
My host is on a dynamic IP address (IPv4 only), which it receives via DHCP from my provider. So far, I have been using ISC dhclient for this, the network interface being marked as unmanaged in its .network file. But since dhclient isn't maintained any more, I am exploring ways to replace it wit

Re: [systemd-devel] Improving boot time of systemd based initrd?

2025-02-18 Thread Jeremy Linton
Hi, On 2/12/25 5:10 AM, Mikko Rapeli wrote: Hi, I'm trying to create a simple systemd based initrd with yocto tooling. Main rootfs runs systemd too. The initrd should only measure boot to TPM device and then detect rootfs from mass storage on a number of boards. No graphics or other use cases a

Re: [systemd-devel] [EXT] Best practice for giving a system daemon access to smartcard readers

2025-02-18 Thread Ran Benita
On Tue, Feb 18, 2025, at 10:18, Windl, Ulrich wrote: > Hi! > > Did you consider using ACLs instead of changing owner and group? However I > must admit I never tried it with devices. > So my idea was to add an ACL for pcscd when the service is in use and drop > that right if the service is not a

Re: [systemd-devel] Starting a container with machinectl vs nspawn

2025-02-18 Thread Yassine Chaouche
Le 2/18/25 à 14:07, Kevin P. Fleming a écrit : On Tue, Feb 18, 2025, at 07:32, Yassine Chaouche wrote: I tried systemctl on the host root@messagerie-recup[10.10.10.20] ~ # systemctl status -M clone-messagerie Failed to read server status: Transport endpoint is not connected root@me

Re: [systemd-devel] Starting a container with machinectl vs nspawn

2025-02-18 Thread Kevin P. Fleming
On Tue, Feb 18, 2025, at 07:32, Yassine Chaouche wrote: > I tried systemctl on the host > > >root@messagerie-recup[10.10.10.20] ~ # systemctl status -M clone-messagerie >Failed to read server status: Transport endpoint is not connected >root@messagerie-recup[10.10.10.20] ~ # It is very

[systemd-devel] Starting a container with machinectl vs nspawn

2025-02-18 Thread Yassine Chaouche
Hello all, I have been advised to use systemd-nspawn and machinectl in place of chroot to run services from a cloned, working remote host. The cloning was done using rsync of the root filesystem (/) into a location in the new host, then linking that location from /var/lib/machines/ When I star

Re: [systemd-devel] [EXT] Best practice for giving a system daemon access to smartcard readers

2025-02-18 Thread Windl, Ulrich
Hi! Did you consider using ACLs instead of changing owner and group? However I must admit I never tried it with devices. So my idea was to add an ACL for pcscd when the service is in use and drop that right if the service is not active. You could even query the ACL to use it as "locked flag". K