[systemd-devel] systemd-logind fails to start if /etc is read-only

2025-08-16 Thread Demi Marie Obenour
On a system where /etc is read-only, systemd-logind fails to start. I have tried making / a writable overlayfs without any success so far. The code is at https://github.com/DemiMarie/spectrum (branch b4/systemd) and the problem can be reproduced by running nix-shell --pure --run 'make run' in host

[systemd-devel] Arranging groups of services

2025-08-16 Thread Demi Marie Obenour
I'm working on Spectrum OS (https://spectrum-os.org/) and am currently porting it from s6 (https://skarnet.org/software/s6-linux-init/) to systemd. Spectrum OS's host (which is what is being ported) is rather different from a normal system: - The root filesystem is completely read-only. There's

[systemd-devel] journald client SELinux denial - net_admin

2025-08-16 Thread Ian Pilcher
I am using the journald API for the first time, and I'm seeing the following SELinux denial. type=AVC msg=audit(1755354245.763:72049): avc: denied { net_admin } for pid=65403 comm="acg-cfm" capability=12 scontext=system_u:system_r:cfm_t:s0 tcontext=system_u:system_r:cfm_t:s0 tclass=capability