[systemd-devel] Getting rid of the /run/credentials mount

2022-08-25 Thread Marc Haber
Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

Re: [systemd-devel] Getting rid of the /run/credentials mount

2022-08-25 Thread Marc Haber
On Thu, Aug 25, 2022 at 11:37:12PM +0300, Topi Miettinen wrote: > On 25.8.2022 22.42, Marc Haber wrote: > > on the system and sends an alert if things change on the system. In the > > Debian package, this is done from cron. I would like to move that to a > > systemd timer an

Re: [systemd-devel] Getting rid of the /run/credentials mount

2022-08-31 Thread Marc Haber
On Fri, Aug 26, 2022 at 07:28:37AM +0200, Marc Haber wrote: > On Thu, Aug 25, 2022 at 11:37:12PM +0300, Topi Miettinen wrote: > > On 25.8.2022 22.42, Marc Haber wrote: > > > on the system and sends an alert if things change on the system. In the > > > Debian package

[systemd-devel] bind-mount of /run/systemd for chrooted bind9/named

2023-07-03 Thread Marc Haber
didn't think of yet? Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by

Re: [systemd-devel] bind-mount of /run/systemd for chrooted bind9/named

2023-07-03 Thread Marc Haber
e darn conservative. Greetings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nat

Re: [systemd-devel] bind-mount of /run/systemd for chrooted bind9/named

2023-07-09 Thread Marc Haber
Hi Lennart, thanks for this helpful answer. On Tue, Jul 04, 2023 at 10:37:55AM +0200, Lennart Poettering wrote: > On Mo, 03.07.23 20:52, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > (1) go fully systemd > > That would mean to get rid of bind's -t option completely b

Re: [systemd-devel] bind-mount of /run/systemd for chrooted bind9/named

2023-07-10 Thread Marc Haber
Hi Lennart, On Mon, Jul 10, 2023 at 10:28:52AM +0200, Lennart Poettering wrote: > On So, 09.07.23 20:14, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > > > It should suffice bind mounting just the notify socket, not the full > > > dir. > > > > Is it int

Re: [systemd-devel] bind-mount of /run/systemd for chrooted bind9/named

2023-07-10 Thread Marc Haber
lp is appreciated. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

[systemd-devel] Securing bind with systemd methods (was: bind-mount of /run/systemd for chrooted bind9/named)

2023-07-17 Thread Marc Haber
;1.9 OK", I think it was > 9 with the standard unit. Thanks for your help, I wanted to give something back. I'll probably suggest this unit for the Debian package once it has reached some stability. Greetings Marc --

Re: [systemd-devel] Securing bind with systemd methods (was: bind-mount of /run/systemd for chrooted bind9/named)

2023-07-18 Thread Marc Haber
On Tue, Jul 18, 2023 at 01:10:16AM +0300, Mantas Mikulėnas wrote: > On Mon, Jul 17, 2023, 15:44 Marc Haber > wrote: > > # /lib is necessary here, or execve will fail without indication for > > # reason - that was a surprise and hard to debug because even strace > > # d

Re: atop package

2023-12-14 Thread Marc Haber
happen to be the maintainer of the atop package in Debian, the distribution that Ubuntu uses as a technical base. The package you're using is likely to closely resemble what I built for Debian, but I never saw that kind of misbehavior. --

Re: [systemd-devel] How to ensure a systemd unit waits for ntpd to sync before starting?

2019-04-02 Thread Marc Haber
the future. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make

Re: [systemd-devel] How to ensure a systemd unit waits for ntpd to sync before starting?

2019-04-02 Thread Marc Haber
violently disagree. I have seen unit files full of bash -c and quoting hell. Your work. Be proud of it. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, German

[systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-16 Thread Marc Haber
Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421 _

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-22 Thread Marc Haber
Hi, On Mon, Sep 16, 2019 at 12:54:23PM +0200, Marc Haber wrote: > when I run an OpenVPN interface, OpenVPN manages the interface itself: > It handles creation, destruction and assignment of the IP address. The > IP address can be controlled by the remote site, so the OpenVPN daemon >

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-25 Thread Marc Haber
Hi Susant, On Wed, Sep 25, 2019 at 05:56:23PM +, Susant Sahani wrote: > On 22/09/19, 5:35 PM, "systemd-devel on behalf of Marc Haber" > mh+systemd-de...@zugschlus.de> wrote: > On Mon, Sep 16, 2019 at 12:54:23PM +0200, Marc Haber wrote: > > when I run a

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-26 Thread Marc Haber
On Thu, Sep 26, 2019 at 09:16:53AM +, Susant Sahani wrote: > On 26/09/19, 11:49 AM, "Marc Haber" wrote: > > > > Did you tried with KeepConfiguration=? > > That is not yet in the Man Page on my system. Is it alreay there in > systemd 2

[systemd-devel] Unit dependencies for socket activated services

2019-10-13 Thread Marc Haber
e the network is ready. Would I put those two lines into foo.service or foo.socket? Grüße Marc -- -- !! No courtesy copies, please !! - Marc Haber | " Questions are the | Mailadresse im Header Mannheim, Germany | Beginning

[systemd-devel] disable EDNS in systemd-resolved

2019-12-27 Thread Marc Haber
Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | F

Re: [systemd-devel] disable EDNS in systemd-resolved

2019-12-27 Thread Marc Haber
On Fri, Dec 27, 2019 at 11:25:20AM +0200, Mantas Mikulėnas wrote: > On Fri, Dec 27, 2019 at 10:52 AM Marc Haber > wrote: > > how would I disable EDNS in systemd-resolved? Some recursive DNS servers > > (for example in public hotspots) choke on queries with EDNS options. >

[systemd-devel] Networkd - how to augment an already configured interface

2020-03-12 Thread Marc Haber
ot;up" script from the OpenVPN configuration? Hoping for your opinions and a good discussion, cheers, Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germa

Re: [systemd-devel] Networkd - how to augment an already configured interface

2020-03-21 Thread Marc Haber
I asked. Greetings Ma "this is now documented" rc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 160

[systemd-devel] Are Pathnames in /tmp/systemd-private-foo predictable?

2021-06-13 Thread Marc Haber
umber, or can it be predicted in a way? Greetings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224

Re: [systemd-devel] Are Pathnames in /tmp/systemd-private-foo predictable?

2021-06-14 Thread Marc Haber
> shutdown or so). In the latter case we can safely remove them to avoid > collecting left-over directories. Thanks for the explanation, I appreciate that. Greetings Marc -- ----- Marc Haber | "I do

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

2016-10-31 Thread Marc Haber
option yet. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to ma

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

2016-10-31 Thread Marc Haber
ple, an sshd comes up and an admin can login to the remote box. Is there an example around for doing so? This looks way interesting. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They |

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

2016-11-04 Thread Marc Haber
On Thu, Nov 03, 2016 at 10:55:35PM +0100, Lennart Poettering wrote: > On Mon, 26.09.16 07:02, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > On Mon, Sep 26, 2016 at 10:52:50AM +1300, Sergei Franco wrote: > > > The emergency mode assumes console access, which requir

Re: [systemd-devel] Emergency mode if non-critical /etc/fstab entries are missing

2016-11-10 Thread Marc Haber
ed to boot in case (1) until they hit something hard and unmoving. systemd systems stop voluntarily. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, German

Re: [systemd-devel] How to disable Predictable Network Interface Names using a drop-in?

2017-02-06 Thread Marc Haber
names for USB network interfaces that I regularly plug in as well. Will placing a /etc/udev/rules.d/70-persistent-network.rules that renames enp0s25 to wired0 and wlp3s0 to wless0 play nice, it is that asking for trouble? Greetings Marc -- -

Re: [systemd-devel] How to disable Predictable Network Interface Names using a drop-in?

2017-02-19 Thread Marc Haber
On Mon, Feb 06, 2017 at 09:56:30PM +0100, Lennart Poettering wrote: > On Sat, 21.01.17 21:20, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > On Fri, Jan 20, 2017 at 02:51:00PM +, Patrick Schleizer wrote: > > > I've learned about the kernel parameter and

Re: [systemd-devel] How to disable Predictable Network Interface Names using a drop-in?

2017-03-10 Thread Marc Haber
f one uses it without more explanation. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordi

[systemd-devel] systemd-networkd and openvswitch?

2015-05-16 Thread Marc Haber
Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | F

Re: [systemd-devel] systemd-networkd and openvswitch?

2015-05-28 Thread Marc Haber
well, and the VLAN definition needs to be on the _bridge_, not the ethernet. I guess that the Linux bridge code uses the VLANs defined on the bridge as kind of VLAN filter for the poor. Greetings Marc -- - Marc Haber

Re: [systemd-devel] [ANNOUNCE] Git development moved to github

2015-07-18 Thread Marc Haber
uests to be moved over to github issues by people interested in those requests/issues being addressed, or do old bugzilla requests have the same chance of being looked at by somebody able to address them as github issues? Greetings Marc -- ---

[systemd-devel] How to properly write an "umbrella" unit

2015-07-21 Thread Marc Haber
commended way? Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

Re: [systemd-devel] How to properly write an "umbrella" unit

2015-07-21 Thread Marc Haber
Hi Alexandre, thanks for your fast answer and correctly guessing my Distribution ,-) On Tue, Jul 21, 2015 at 02:13:12PM +0200, Alexandre Detiste wrote: > Le mardi 21 juillet 2015, 13:43:48 Marc Haber a écrit : > > This works as designed. Unfortunately, my Distribution's build t

Re: [systemd-devel] How to properly write an "umbrella" unit

2015-07-21 Thread Marc Haber
choice and robustness. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature |

Re: [systemd-devel] How to properly write an "umbrella" unit

2015-07-21 Thread Marc Haber
eetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

Re: [systemd-devel] How to properly write an "umbrella" unit

2015-07-22 Thread Marc Haber
fine with it. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

[systemd-devel] Policy Routing on a machine using systemd-networkd

2015-12-15 Thread Marc Haber
tings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quil

Re: [systemd-devel] Query regarding "EnvironmentFile"

2015-12-20 Thread Marc Haber
ings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt

Re: [systemd-devel] Query regarding "EnvironmentFile"

2015-12-20 Thread Marc Haber
agment system. And what is your business in deliberately breaking those ugly setups? If you want to educate people, be a teacher. If you want to bully people into doing things your way, be a team leader. Greetings Marc -- -------

Re: [systemd-devel] Query regarding "EnvironmentFile"

2015-12-20 Thread Marc Haber
lid reason - it would only confirm people which hesitate to > adopt systemd because the fear that they can't rely on capabilities > it brings now because they may flippantly disappear Amen. Greetings Marc -- ---

Re: [systemd-devel] Query regarding "EnvironmentFile"

2015-12-20 Thread Marc Haber
On Sun, Dec 20, 2015 at 02:34:15PM +0100, Tomasz Torcz wrote: > On Sun, Dec 20, 2015 at 02:30:30PM +0100, Marc Haber wrote: > > On Fri, Dec 18, 2015 at 05:00:32PM +0100, Michael Biebl wrote: > > > and then tell admin to use systemctl edit > > > [Unit] > > > Envi

Re: [systemd-devel] Policy Routing on a machine using systemd-networkd

2015-12-20 Thread Marc Haber
*nudge* Is there really no option about this rather common issue? Greetings Marc On Tue, Dec 15, 2015 at 01:20:34PM +0100, Marc Haber wrote: > I would like to do policy routing on a router with ~ 10 interfaces > running Debian Linux and systemd. Networking is managed with ferm and >

Re: [systemd-devel] Query regarding "EnvironmentFile"

2015-12-21 Thread Marc Haber
eople the power of forcing us to run our systems their way. Man kann manchmal echt nicht genug essen wie man in dieser Welt kotzen möchte. Merry Christmas. -- ----- Marc Haber | "I don't trust Computers. Th

Re: [systemd-devel] Query regarding "EnvironmentFile"

2015-12-21 Thread Marc Haber
inoriy of concepts and the attitude of the makers make working with systemd a constant source of increased blood pressure and a strong urge to break something expensive just to get rid of the aggression. -- - Marc

[systemd-devel] Thoughts about /etc/crypttab keyscript options

2014-07-21 Thread Marc Haber
ion. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 621 31958061 Nordisch by Nature | How to make an Ame

Re: [systemd-devel] Thoughts about /etc/crypttab keyscript options

2014-08-13 Thread Marc Haber
Hi, did I reach the wrong mailing list? Is there better forum to get systemd working with something resembling my current setup? Greetings Marc On Mon, Jul 21, 2014 at 10:46:21AM +0200, Marc Haber wrote: > From: Marc Haber > Subject: Thoughts about /etc/crypttab keyscript option

Re: [systemd-devel] Thoughts about /etc/crypttab keyscript options

2014-08-14 Thread Marc Haber
On Wed, Aug 13, 2014 at 06:42:13PM +0200, Lennart Poettering wrote: > On Wed, 13.08.14 16:43, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > did I reach the wrong mailing list? Is there better forum to get > > systemd working with something resembling my current setup? >

Re: [systemd-devel] Thoughts about /etc/crypttab keyscript options

2014-08-14 Thread Marc Haber
Hi Lennart, thanks for your thoughts. On Thu, Aug 14, 2014 at 07:44:59PM +0200, Lennart Poettering wrote: > On Mon, 21.07.14 10:46, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > (4) > > My PasswordAgent indicates taking responsibility by unlinking the > > ask.xxx f

Re: [systemd-devel] Thoughts about /etc/crypttab keyscript options

2014-08-14 Thread Marc Haber
e for that). If systemd would support keyscript=, migration would be painless. I am absolutely in favor of that ;-) Greetings Marc, unfortunately too bad a C programmer to write a patch -- ----- Marc Haber | "

Re: [systemd-devel] Thoughts about /etc/crypttab keyscript options

2014-08-15 Thread Marc Haber
On Thu, Aug 14, 2014 at 08:18:10PM +0200, Lennart Poettering wrote: > On Thu, 14.08.14 20:10, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > > Not aware of an C++ code. There's a vala one, and of course the one we > > > ship in systemd itself in C, but c++ i c

Re: [systemd-devel] Thoughts about /etc/crypttab keyscript options

2014-08-15 Thread Marc Haber
On Fri, Aug 15, 2014 at 01:30:32PM +0200, Lennart Poettering wrote: > On Fri, 15.08.14 12:56, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: > > > > Is it possible to write a PasswordAgent in shell? Example code please > > > > ;) > > > > > > Probabl

[systemd-devel] Need Advice about MaxConnections on ssh.socket

2025-02-11 Thread Marc Haber
hour. I would love to hear your opinion. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 622

Re: [systemd-devel] Generators, Targets and Stater Units - I am holding it wrong?

2025-06-23 Thread Marc Haber
tings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an Ameri

[systemd-devel] Generators, Targets and Stater Units - I am holding it wrong?

2025-06-22 Thread Marc Haber
ti-user.target.wants/console-log-9.service? How am I supposed to do this correctly? Or is my entire approach wrong? Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im He

Re: [systemd-devel] Generators, Targets and Stater Units - I am holding it wrong?

2025-06-23 Thread Marc Haber
and add the want symlinks from the generator? Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 622

Re: [systemd-devel] Generators, Targets and Stater Units - I am holding it wrong?

2025-06-23 Thread Marc Haber
On Mon, Jun 23, 2025 at 09:34:34AM +0300, Andrei Borzenkov wrote: 23.06.2025 09:28, Marc Haber wrote: On Mon, Jun 23, 2025 at 09:16:58AM +0300, Andrei Borzenkov wrote: /run/systemd/generator/console-log-starter.service.wants/console-log-9.service -> /run/systemd/generator/console-log-9.serv

Re: [systemd-devel] Generators, Targets and Stater Units - I am holding it wrong?

2025-06-23 Thread Marc Haber
Hi Lennart, thank you for trying to help. tl;dr setting the symlinks accomplishes the intended behavior. On Mon, Jun 23, 2025 at 01:27:24PM +0200, Lennart Poettering wrote: On So, 22.06.25 22:30, Marc Haber (mh+systemd-de...@zugschlus.de) wrote: I am not sure I follow. What are you trying to

Re: [systemd-devel] How to lock two instances of a templated service against each other

2025-07-30 Thread Marc Haber
Hi, On Wed, Jul 30, 2025 at 08:28:34PM +0100, Barry Scott wrote: On 30 Jul 2025, at 09:00, Marc Haber wrote: I find the entire Before/After and Wants/Requires incredibly powerful but also hard to grasp. I am not a newbie to systemd but this is something that I have not fully understood yet

Re: [systemd-devel] How to lock two instances of a templated service against each other

2025-07-30 Thread Marc Haber
Hi, On Wed, Jul 30, 2025 at 07:31:56AM +0300, Andrei Borzenkov wrote: 29.07.2025 11:30, Marc Haber wrote: Hi, I have a template service unit which runs a oneshot service that generates both high CPU and high I/O load for a couple of minutes. The service is templated a couple of times and runs

Re: [systemd-devel] How to lock two instances of a templated service against each other

2025-07-29 Thread Marc Haber
On Tue, Jul 29, 2025 at 10:20:31AM +0100, Barry Scott wrote: Is it possible to use After= or Before= in template services to order them? Wouldnt that make them just start all at once? Greetings Marc -- - Marc Haber

[systemd-devel] How to lock two instances of a templated service against each other

2025-07-29 Thread Marc Haber
tings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an Ameri

Re: [systemd-devel] How to lock two instances of a templated service against each other

2025-07-29 Thread Marc Haber
le or can a service assign itself to a slice from its own unit? Greetings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."Winona R