Re: [systemd-devel] Using systemd.offline-updates from an ostree based system

2019-05-02 Thread Richard Hughes
On Mon, 29 Apr 2019 at 10:16, Lennart Poettering wrote: > Please rewrite this as `FOREACH_STRING(fn, "/system-update/, > "/etc/system-update") …` and then exit fatally with an error if > laccess() fails with any error != ENOENT. In the above failures to > laccess() /system-update are handled diffe

Re: [systemd-devel] Using systemd.offline-updates from an ostree based system

2019-04-26 Thread Richard Hughes
keep everything in systemd so that if there are any changes to how this works they are all done in one project, not two. Richard From f190efefb00c73087c8ceafd1ca0fdab100cfa36 Mon Sep 17 00:00:00 2001 From: Richard Hughes Date: Fri, 26 Apr 2019 14:53:34 +0100 Subject: [PATCH] Support /etc/system-updat

Re: [systemd-devel] Using systemd.offline-updates from an ostree based system

2019-04-26 Thread Richard Hughes
On Fri, 26 Apr 2019 at 09:54, Lennart Poettering wrote: > Hmm, the assumption was always that / was mutable if offline updates > are used to update /... Right, I don't know if I'm misusing the offline updates feature to update firmware. If there's something else I should be using I'm open for ide

[systemd-devel] Using systemd.offline-updates from an ostree based system

2019-04-25 Thread Richard Hughes
Hi all, I use the offline updates feature https://www.freedesktop.org/software/systemd/man/systemd.offline-updates.html in fwupd to install some kinds of firmware. I've just found out this doesn't work on Fedora SilverBlue as / is immutable and of course creating the /system-update symlink fails.

Re: [systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Richard Hughes
On 14 December 2016 at 11:36, Lennart Poettering wrote: > RestrictNamespaces=yes I didn't see this on https://www.freedesktop.org/software/systemd/man/systemd.exec.html -- is super-new or just undocumented? Otherwise, thanks! Richard. ___ systemd-devel

Re: [systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Richard Hughes
On 14 December 2016 at 09:32, Reindl Harald wrote: > RestrictAddressFamilies=AF_NETLINK Great, that was the pointer I needed, thanks. I'm currently setting this in the service file: NoNewPrivileges=yes PrivateTmp=yes PrivateUsers=yes ProtectControlGroups=yes ProtectHome=yes ProtectKernelModules=

[systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Richard Hughes
Hi all, For a long time colord has had PrivateNetwork commented out in colord, as it prevented libudev working correctly. We thought that perhaps udev's AF_NETLINK messages are being filtered when network namespacing is on. In an unrelated project (this time fwupd) we recently also found that libu

Re: [systemd-devel] Question about system-update.target

2015-04-27 Thread Richard Hughes
On 27 April 2015 at 17:53, Mantas Mikulėnas wrote: > In this case, failure doesn't make much sense, if you describe the task as > "ensuring that the BIOS is up-to-date". In this case, the task is "upload firmware blob foo.bin in /var/cache to the flash chip" Richard.

Re: [systemd-devel] Question about system-update.target

2015-04-27 Thread Richard Hughes
On 27 April 2015 at 16:42, Lennart Poettering wrote: > - ship a service packagekit-reboot.service that contains: > > [Service] > ExecStart=/bin/systemctl reboot --no-block > Type=oneshot If that file was shipped in systemd, fwupd could use the same method without having to ship the extra du

Re: [systemd-devel] Question about system-update.target

2015-04-27 Thread Richard Hughes
On 27 April 2015 at 15:18, Lennart Poettering wrote: > Well, thinking about this, maybe OnFailure=reboot.target is missing > the point for these services. After all, the system should reboot > regardless if the update fails or not... Not quite; PackageKit supports an update-offline-and-then-shutd

[systemd-devel] Question about system-update.target

2015-04-27 Thread Richard Hughes
At the moment the only user of system-update.target is PackageKit, which does package updates offline in the special system-update boot target. The other project that has just started using this mode is fwupd, which is using it to update BIOS-based firmware (not UEFI capsules) offline. I've instal

[systemd-devel] udev firmware loading

2013-11-27 Thread Richard Hughes
Hi all, I've been porting a lot of the gnome-packagekit functionality to gnome-software these last few months. One thing that used to work well, but I've not seen a bugreport about in *years* is the install-package-for-missing-firmware thing. IIRC, udev used to call /lib/udev/firmware.sh which us

Re: [systemd-devel] Using the hwdb in external programs

2013-08-14 Thread Richard Hughes
On 14 August 2013 11:41, Kay Sievers wrote: > An example is here: > > http://cgit.freedesktop.org/systemd/systemd/tree/src/test/test-libudev.c#n432 Great! Thanks. So I know what to use where, what's the cost of those functions? For instance, is udev_hwdb_new() going to use globs of memory unti

[systemd-devel] Using the hwdb in external programs

2013-08-14 Thread Richard Hughes
Hi all, I'm aware of at least half a dozen programs and daemons that read and parse /usr/share/hwdata/pnp.ids to convert PNP_IDS to actual vendor names. Although this file will be in hot cache at login, it does seem a waste of a lot of duplicated parsing and hashing code. I'm aware the PNP_ID data

Re: [systemd-devel] Handling lid close in logind?

2012-09-03 Thread Richard Hughes
On 3 September 2012 09:17, Zbigniew Jędrzejewski-Szmek wrote: > Laptop emits a long series of angry beeps. If it starts really overheating, > thermal protection kicks in and the laptop shuts down. Unless you're a macbook, with the white thermoplastic cover. Gloopy mess :) I don't think the deskt

[systemd-devel] Handling lid close in logind?

2012-09-03 Thread Richard Hughes
Hey, I know Lennart and Kay are still on walkabout, but I wanted to ask any opinions on https://bugzilla.gnome.org/show_bug.cgi?id=680689 Basically: * User inhibits suspend, perhaps by doing an update or burning a CD * User closes laptop * Laptop shows polkit auth box, but the lid is closed and

Re: [systemd-devel] systemd security issue

2012-08-24 Thread Richard Hughes
On 24 August 2012 17:40, shawn wrote: > ...if you use udevadm you should be able to figure out > which /dev/fb[0-9]* it is. Sure, but what do I then do to assign the fb and usb devices the right seat, and to start X with the right parameters? I assumed it would be a bit more plug-and-play than th

Re: [systemd-devel] systemd security issue

2012-08-24 Thread Richard Hughes
On 23 August 2012 17:25, Kay Sievers wrote: > F17 should already have proper multi-seat support, if that's what you look > for. I plugged in the pluggable-dock thing, and got this in dmesg: [259482.053980] udlfb: open /dev/fb1 user=1 fb_info=88020535f800 count=1 [259482.054006] udlfb: relea

Re: [systemd-devel] systemd security issue

2012-08-23 Thread Richard Hughes
On 23 August 2012 07:21, Damian Ivanov wrote: > a) In the gnome-control-center==> Color Management you can play > with the settings of a monitor attached to another seat. I've not done any scoping for colord and multiseat yet. I have got a pluggable USB docking station to test here, but I'm w

[systemd-devel] Adding a service file to run with system-update.target

2012-06-01 Thread Richard Hughes
I've been playing with the offline updates thing a bit. Is this the kind of service file that PackageKit should install into /usr/lib/systemd/system/ ? [Unit] Description=Updates the operating system whilst offline DefaultDependencies=no After=system-update.target [Service] Type=oneshot ExecStart

Re: [systemd-devel] [ANNOUNCE] systemd 183

2012-06-01 Thread Richard Hughes
On 25 May 2012 13:28, Lennart Poettering wrote: >        * A framework for implementing offline system updates is now >          integrated, for details see: >          http://freedesktop.org/wiki/Software/systemd/SystemUpdates Seeing as system-update.target is now shipped in systemd itself, woul

Re: [systemd-devel] systemd -> consolekit, spice-vdagent questions

2011-09-16 Thread Richard Hughes
On 16 September 2011 13:17, Hans de Goede wrote: > Hmm, I cannot find this in gnome-settings-daemon-3.1.91 git master, sorry. Richard. ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/syst

Re: [systemd-devel] systemd -> consolekit, spice-vdagent questions

2011-09-15 Thread Richard Hughes
On 15 September 2011 13:41, Matthias Clasen wrote: > gdbus introspect --system --dest org.freedesktop.login1 --object-path > /org/freedesktop/login1 FWIW, so gnome-settings-daemon could track the active console I added ConsoleKit support in an abstract way, on the logic that it could easily be sw

[systemd-devel] Running packagekitd on shutdown

2011-08-23 Thread Richard Hughes
Hello list, hello again Lennart, I'm trying to make the update experience in GNOME 3.2 much better; at the moment updating core services and libraries whilst everything is running is quite unpredictable and we really just want to update stuff like systemd, dbus and libc in shutdown when the system