med-mastodon.com is one of the many independent Mastodon servers you can use to participate in the fediverse.
Medical community on Mastodon

Administered by:

Server stats:

365
active users

#systemd

7 posts6 participants2 posts today
Replied in thread

@CursedSilicon @gettie mostly because #systemD (and it's competitiors) took all the right lessions:

  • Start less
  • Start more in parallel
  • Resolve dependencies to avoid waiting times

And basically everyone (#OpenRC, #Upstart, etc. Even #LaunchD [the #init for #macOS that is literally the SystemD but before SystemD and by Apple] and #SMF [#Sun's SystemD for #Solaris] did that to allow for boot times in secinds, not minutes…

youtube.com/watch?v=o_AIw9bGog

#UnpopularOpinion / #HotTake: I think it's the right call for @gnome to "Stop being a mad scientist" and simply offload a lot of [quite security-critical] stuff onto #SystemD.

  • After all both are being bankrolled mostly by the big 3 #Linux distros and neither #RedHat nor #Suse nor #Canonical are willing to spend money on essentially redundant work if they can avoid it...

Tho @BrodieOnLinux is wrong re: "Linux is #Unix" because technically #macOS (if we take in any #POSIX-esque system into account)!

  • That being said, it does necessitate extra work by #BSD|s to run #Gnome.

Actually don't give a flying fuck about #X11 vs. #Wayland. I guess I'll be sad if I install Linux on a machine and the software I want to use doesn't work. But, I suppose other people will want to continue to use software, so maybe that will get worked out. Also don't fucking care about #Systemd. It's convenient for managing services for me, a very uneducated, reluctant, amateur sysadmin. But I get that people are upset and I see you.

Replied in thread

@mrmasterkeyboard @cesarpose I mean, #Xorg - like #SysVinit - both have severe issues that just ain't gonna be addressable under reasonable expectations re: hardware support, compatibility and software support.

  • But there's a reason "Big Distros" and the community in general came to the conclusion that #Wayland and #SystemD are at worst 'necessary evils' and for the most part deliver a lot of quality-of-life features.

youtube.com/watch?v=o_AIw9bGogo

There is no "#conspiracy" of #BigTech wanting to kill #X11 or even sabotage #Xlibre for that matter. It's just that some folks have trouble letting go and acknowledge that #Xserver is kept on "life support" as #Xwayland so people can run their 25+ year old #Windows games in #Wine without going apeshit.

  • I mean, ask @fuchsiii about that effort, where she's basically "workarounding" wine devs by literally pulling a "#Steam compatibility layer" kind of trick and swapping "good known working" Wine versions in just before launching a game because that works for setups where you have one user playing one game at a time on one machine and where shuffling around files/symlinks is possible.

Insecure defaults can lead to surprises. When creating FIFO sockets with systemd, be sure to note that SocketMode defaults to 0666 - that is world readable and writable. That is: any local user can communicate with the FIFO. If your FIFO is used to perform privileged operations you must ensure that either the FIFO file itself is located in secured location or set SocketMode to stricter value.

I spotted one such insecure use in cloud-init: the hotplug FIFO was world writable. This is CVE-2024-11584 and fixed in cloud-init 25.1.3.

The commit fixing this is in github.com/canonical/cloud-ini

Sync security patches for release.
GitHubSync security by blackboxsw · Pull Request #6265 · canonical/cloud-initBy blackboxsw
Replied in thread

@BoydStephenSmithJr @dvandal @david_chisnall @strlcat

This reasoning is based upon a fallacious dichotomy. In the real history, Upstart existed and had a strong competing maintainership, to the level that the #Debian TC itself was nearly split down the middle on #RedHat/#Canonical lines, and the choice was *never* between van Smoorenburg init+rc and systemd.

It was between #Upstart and #systemd, the latter indeed being a reaction to the former, with #OpenRC as a late entrant.

Continued thread

2/2
offizielle Version übernehmen will...🤷‍♂️
Die beiden Wege die ich gefunden habe um den #dnsmasq Aufruf durch #NetworkManager zu übernehmen sind auch Mist, weil sie beide keine Distro-Updates überleben wenn dnsmasq ein Update erfährt...

Jetzt habe ich aber doch noch ne Idee die "vollautomatisch" (reboot überleben) laufen sollte... dann wäre ich aber von #systemd abhängig...🤪
Und das ist mir jetzt egal...🤷‍♂️

For those who specialize in DHCPv6 and systemd: Is there a way to tell the DHCPv6 server "If this IP is available, just give me it, don't give me anything else", or at least get systemd to do that? I'm trying to make an oracle cloud instance running Arch+systemd-networkd that uses DHCPv6 for IP configuration only use one of two IPs assigned to the oracle instance, but leave the other one unused so I can do NDP proxying and route it to my laptop over wireguard, giving my laptop a public IPv6 address as a result, but it appears that oracle is forcing my VPS to use both IPv6 addresses, which is not what I want.
Redacted logs, for context:

Jun 18 06:08:27 somewhere systemd-networkd[-1]: eth0: DHCPv6 address 2000::4201/128 (valid for 1d 5
9min 59s, preferred for 23h 59min 59s)
Jun 18 06:08:27 somewhere systemd-networkd[-1]: eth0: DHCPv6 address 2000::1337/128 (valid for 1d 5
9min 59s, preferred for 23h 59min 59s)

Feel free to boost this for increased visibility if you wish, and if you know of any mailing lists or IRC channels I should ask on, please let me know.
Relevant tags to try to help people who might know something see this:
#dhcp #ipv6 #systemd #oracle #dhcpv6 #networking #systemdnetworkd #systemd-networkd