systemd

A deep dive into my Forgejo setup https://lobste.rs/s/jhcyuq #show #devops #systemd #vcs
https://a.l3x.in/blog/welcome-to-my-forge/

1️⃣3️⃣ Here's the 13th post highlighting key new features of the just published v260 release of systemd. #systemd260 #systemd

systemd-vmspawn is systemd's wrapper around qemu, that integrates it nicely with various of systemd's interfaces and subsystems, while providing an interface closely resembling systemd-nspawn's.

There's one really useful switch systemd-nspawn has that systemd-vmspawn so far didn't:

1️⃣2️⃣ Here's the 12th post highlighting key new features of the just published v260 release of systemd. #systemd260 #systemd

D-Bus has been tremendously successful as an IPC system, but as you probably are aware within the systemd project we have been pursuing adding more and more Varlink IPC interfaces to our services instead – for a variety of reasons.

In v260 we added minimal Varlink support to one key component, that needs to be available during early boot, and where D-Bus is hence…

1️⃣1️⃣ Here's the 11th post highlighting key new features of the just published v260 release of systemd. #systemd260 #systemd

ARM laptops have recently started moving from the fringes of the Linux world more towards the middle. In the ARM world the nice ACPI-based auto-discovery of devices that PCs have is not really that common, and Devicetree reigns instead. While ACPI is somewhat OS independent, and hence can easily be provided…

1️⃣0️⃣ Here's the 10th post highlighting key new features of the just published v260 release of systemd. #systemd260 #systemd

As systemd gains more and more TPM support we increasingly run into problems with actual real-life TPM implementations. TPMs run non-trivial firmware after all, and … let's just say …, not all of it is of the highest quality.

When TPM operations fail, and we get a "clean" error back, then we can relatively nicely handle this, implement fallback code paths, and move on.

I appreciate genAI LLM for confirming once and for all that systemd sucks.

#genai #llm #systemd

My favorite device is a Chromebook, without ChromeOS https://lobste.rs/s/ffu7l8 #linux #systemd
https://kokada.dev/blog/my-favorite-device-is-a-chromebook-without-chromeos/

You Don't Love systemd Timers Enough https://lobste.rs/s/9vt4ng #systemd
https://blog.tjll.net/you-dont-love-systemd-timers-enough/

Flatpak will depend on systemd https://lobste.rs/s/gfbpgq #linux #systemd
https://www.osnews.com/story/145071/flatpak-will-depend-on-systemd/

1️⃣7️⃣ Here's the 17th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd

In v260 we added "systemd-report", a mechanism for acquiring metrics from local services, including various systemd ones, through a generic interface. With v261 we substantially extended the available backends for this. In particular there's now a new backend systemd-report-basic which reports basic metrics, among them things like number of CPUs, installed RAM,…

1️⃣8️⃣ Here's the 18th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd

With v261 we completed a journey we started back in 2016 with systemd v229 (by making our libxkbcommon dependency dlopen() based) and which by adding the dlopen meta data sections for ELF in v256 become a true cornerstone of how we build systemd: in v261 we are no longer linking directly to *any* other library except for libc. All 35 other runtime dependencies have been…

1️⃣9️⃣ Here's the 19th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd

Back in v254 systemd gained support for dealing with memory pressure in two ways: sd-event (systemd's event loop library) has native support for watching for them via the kernel's PSI API (and by default can trigger invocation of malloc_trim()), and there's a protocol for configuring the pressure thresholds in service unit files so that service processes can make…

2️⃣0️⃣ Here's the 20th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd

One of the really useful features of the Varlink IPC system is that it natively has a concept of "upgrading" the protocol of a connection. Or in other words: you start out with a Varlink connection, you set the "upgrade" flag on a method call, and when the server agrees then the protocol is switched to something else, and every later byte exchanged over the connection…

Systemd Dynamic Users (2020) via @bd103 https://lobste.rs/s/kjuxof #systemd
https://ethulhu.co.uk/systemd-dynamicuser

2️⃣5️⃣ Here's the 25th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd

The systemd-socket-proxy tool has been part of the systemd toolset for a long long time, but is probably not known by many. It was originally created to add "fake" socket activation support to daemons that do not support it natively: the tool implements the socket activation, can be wrapped in appropriate socket activation unit files, and when activated…

2️⃣6️⃣ Here's the 26th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd

When dealing with VMs, you have to think about dealing with storage, too: how do you connect your block devices and file systems to your VMs.

For a while now systemd has been shipping systemd-vmspawn, a small wrapper around qemu, which integrates it in various ways into the system, for example registers it with systemd-machined and a variety of other things.

2️⃣7️⃣ Here's the 27th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd

systemd-oomd is systemd's subsystem for optimizing system behaviour under memory pressure (i.e. shut down services to remedy memory pressure and similar). So far it has been applying very similar policies for dealing with pressure on all workload services on the system.

With v261 we are extending the concepts around this considerably. systemd-oomd can now read a number…

8️⃣ Here's the 8th post highlighting key new features of the upcoming v261 release of systemd. #systemd261 #systemd

When you manage a fleet a systems, it's important to minimize differences between systems, in order to unify handling. But at the same time systems will differ in purpose, in location, in hardware properties, architectures, in connectivity, deployment state, in payloads and more.

To schedule work on the machines it's often necessary to condition them properly, to take all these…

1️⃣1️⃣ Here's the 11th post highlighting key new features of the upcoming v261 release of systemd. #systemd261 #systemd

In the previous installment we already talked a lot about secrets when booting without a TPM. Let's continue in this general area: with the "boot secret" described in the previous posting we now have a random but persistent per-installation secret that userspace will receive. But how precisely do we want to consume it?

We could of course directly consume it from FDE, i.e.…

9️⃣ Here's the 9th post highlighting key new features of the upcoming v261 release of systemd. #systemd261 #systemd

When operating systems are deployed in the cloud they typically need to be parameterized for first boot, so that they automatically deploy the right configuration, the right payloads, and join whatever infrastructure tooling is appropriate.

This provisioning traditionally happens with the "cloud-init" package (or various alternatives). These tools typically implement the…

1️⃣0️⃣ Here's the 10th post highlighting key new features of the upcoming v261 release of systemd. #systemd261 #systemd

I believe that TPMs are great technology for securing systems, in particular for implementing full disk encryption. In particular in non-interactive environments (i.e. servers, embedded) they are great for holding disk encryption keys in a reasonably secure fashion.

However, not all systems have a TPM. Bummer. While many VM environments nowadays do provide an sw tpm, it's not…

To switch between different #init tools on a non-#systemd #Linux systems is so easy.

(it is not my post, just read about it)

dinit a new init system

#FOSS #unix

Thunderbird littering my home https://lobste.rs/s/qqq4sd #email #systemd
https://thefoggiest.dev/2026/06/04/thunderbird-littering-my-home

FAQ: What is a TPM and how can I use it on Linux? https://lobste.rs/s/wiirte #cryptography #linux #systemd
https://debugging.works/blog/tpm-explained/

It's that time again! The systemd v262 release is coming closer. Let's restart the "what's new" series of posts for this iteration! Hence:

1️⃣ Here's the 1st post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd

Back in systemd v258 we added support for a special "?" character in /etc/hostname.