[systemd-devel] systemd-tmpfiles, unsafe path transitions

2025-03-26 Thread James Muir (jamesmui)
I am doing dev work on a linux system and I am mounting the root filesystem via NFS to make my work-flow easier. Unfortunately, the directory I am NFS mounting is not owned by root, and this causes some of the directives processed by the systemd-tmpfiles utility during boot (e.g. in systemd-tmp

Re: [systemd-devel] systemd-repart MountPoint fails for esp partitions

2025-03-26 Thread Lennart Poettering
On Di, 25.03.25 16:53, Thayne Harbaugh (tha...@mastodonlabs.com) wrote: > Greetings, > > systemd-repart MountPoint fails to generate a correct fstab entry for > esp partitions. It generates a standard partition UUID which does not > work for FAT file systems - a FAT volume ID must be used analogo

Re: [systemd-devel] shim 16 breaking systemd stub and next steps

2025-03-26 Thread Ard Biesheuvel
On Thu, 20 Mar 2025 at 23:36, Luca Boccassi wrote: ... > > The shim maintainers have expressed interest in providing a protocol > that allows us to correctly configure loadimage so that it doesn't > check the signature and it doesn't measure, which is what we need. > I'll provide further updates o

Re: [systemd-devel] shim 16 breaking systemd stub and next steps

2025-03-26 Thread Luca Boccassi
On Thu, 20 Mar 2025 at 22:43, Alexander Graf wrote: > Let's first figure out how all of this works without shim. Then we can > look at whether we need to and how we can extend the shim/sd-boot > interface to make that case work as well. Please don't start off > assuming everyone runs shim in secur