Re: [systemd-devel] soft-reboot and service templates

2024-06-07 Thread Luca Boccassi
On Fri, 7 Jun 2024 at 13:10, Thorsten Kukuk wrote: > > On Fri, Jun 7, 2024 at 12:43 PM Luca Boccassi wrote: > > > /run is expected though - if you want that, you need to bind mount it > > explicitly. You normally don't want all of it, and the default > > portable profile only picks the journal an

Re: [systemd-devel] soft-reboot and service templates

2024-06-07 Thread Thorsten Kukuk
On Fri, Jun 7, 2024 at 12:43 PM Luca Boccassi wrote: > /run is expected though - if you want that, you need to bind mount it > explicitly. You normally don't want all of it, and the default > portable profile only picks the journal and dbus sockets and a couple > of other things, which is better:

Re: [systemd-devel] soft-reboot and service templates

2024-06-07 Thread Luca Boccassi
On Fri, 7 Jun 2024 at 08:17, Thorsten Kukuk wrote: > > On Thu, Jun 6, 2024 at 10:45 PM Luca Boccassi wrote: > > > > On Thu, 6 Jun 2024 at 09:15, Thorsten Kukuk wrote: > > > > The default mounts of portable images goes lost during soft-reboot, too. > > > If you explicitly add them to the service

Re: [systemd-devel] Sysext questions

2024-06-07 Thread Itxaka Serrano Garcia
On Thu, Jun 6, 2024 at 6:17 PM Lennart Poettering wrote: > On Mi, 05.06.24 18:28, Itxaka Serrano Garcia ( > itxaka.gar...@spectrocloud.com) wrote: > > > Hello again! > > > > A few sysext questions that have arisen from our testing > > > > - image policy is configurable but it's there a single co

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-07 Thread Andrei Borzenkov
On Fri, Jun 7, 2024 at 2:07 AM Sergio Arroutbi wrote: ... > > We are developing a PKCS11 plugin for Clevis > (https://github.com/latchset/clevis). Clevis allows automatic boot encrypted > disks unlocking by storing some information into LUKS metadata. > To do so, it is executed in parallel to sy

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-07 Thread Lennart Poettering
On Do, 06.06.24 19:42, Sergio Arroutbi (sarro...@redhat.com) wrote: > > > I miss an option where systemd-cryptsetup is executed headless, but > > > continues running, without exiting. > > > > > > I have tried with keyfile=/dev/urandom and option=keyfile-size=60, > > but > > > it is too quick.

Re: [systemd-devel] Sysext questions

2024-06-07 Thread Itxaka Serrano Garcia
done, thanks! On Thu, Jun 6, 2024 at 6:18 PM Lennart Poettering wrote: > On Do, 06.06.24 16:49, Itxaka Serrano Garcia ( > itxaka.gar...@spectrocloud.com) wrote: > > > Another extra question, trying a extension that is signed, if I dont > > provide the signature in the verity.d dir, the service h

Re: [systemd-devel] systemd-umount doesn't unmount LVM volumes

2024-06-07 Thread Lennart Poettering
On Fr, 07.06.24 08:31, Vladimir Mokrozub (m...@mfc.tambov.gov.ru) wrote: > > > Uh, LVM is simply nothing anyone here tests, it's not really where the > > future is. Please reproduce with a current systemd version (i.e. 252 > > is two years old, an eternity in Linux), and file a bug, and maybe > >

Re: [systemd-devel] soft-reboot and service templates

2024-06-07 Thread Thorsten Kukuk
On Thu, Jun 6, 2024 at 10:45 PM Luca Boccassi wrote: > > On Thu, 6 Jun 2024 at 09:15, Thorsten Kukuk wrote: > > The default mounts of portable images goes lost during soft-reboot, too. > > If you explicitly add them to the service file (e.g. > > BindReadOnlyPaths=/run) they survive. Bug report i

Re: [systemd-devel] tee-supplicant initrd startup before tpm2.target and dev-tpmrm0.device

2024-06-07 Thread Lennart Poettering
On Fr, 07.06.24 14:09, Mikko Rapeli (mikko.rap...@linaro.org) wrote: > > How is this supposed to work anyway? is the supplicant supposed to > > exit before initd transition, and be started anew after the > > transition? > > Yes, and tee-supplicant must be started again before any of the TPM using

Re: [systemd-devel] soft-reboot and service templates

2024-06-07 Thread Thorsten Kukuk
On Thu, Jun 6, 2024 at 10:53 PM Luca Boccassi wrote: > > On Thu, 6 Jun 2024 at 09:15, Thorsten Kukuk wrote: > > I tried that, but no idea what I'm doing wrong, the values there seem > > to get ignored. systemctl show only displays the old values. > > It works for me in latest main: For me now,