It's that time again! The systemd v262 release is coming closer. Let's restart the "what's new" series of posts for this iteration! Hence:
1️⃣ Here's the 1st post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
Back in systemd v258 we added support for a special "?" character in /etc/hostname.
GNU Shepherd is the abstraction for a better computing age https://lobste.rs/s/z3pbcd #video #emacs #linux #lisp #rant #systemd
https://www.youtube.com/watch?v=HgqEy8IjfLU
Unranked, systemd, crawls via @ggpsv https://lobste.rs/s/tsp3fq #linux #systemd
https://www.marginalia.nu/log/a_138_systemdocker/
7️⃣ Here's the 7th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
In systemd we have a lot of CLI tools that users may invoke. We try to provide relatively uniform interfaces for them, i.e. there's always a man page, and always a --help switch, which are structured roughly the same way.
In previous systemd versions the command line interfaces and their --help texts were maintained with only little shared code in the various tools…
4️⃣ Here's the 4th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
In systemd v261 we introduced the concept of "machine tags", i.e. a set of free-form, user chosen strings you can attach to a host. They are stored in /etc/machine-info along with some other metadata fields about the host.
In v262 the concept is further extended. First of all, the strings may now also have the form "key=value" in addition to simple strings without "=", as…
5️⃣ Here's the 5th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
systemd-sysupdate is a tool for updating files and partitions from a source typically on the Internet, to implement OS updates or updates of container, VM, extension or service images. It's mostly built around the concept of a "transfer" file, that does primarily one thing: it declares where to find new resources on the internet and where to place them locally. The tool then…
6️⃣ Here's the 6th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
In systemd v260 we added the "systemd-report" subsystem that provides a unified way to gather metrics from running services, that would like to offer them. Many of systemd's own subsystems implement providers for this now, and the systemd-report tool can compile them into a single report JSON document.
With v262 this functionality is upgraded in one fundamental way:
California and Colorado legislated that Linux distributions, being free and open-source, are exempt from the age verification in operating systems, unless they are proprietary like SteamOS (and Windows).
Too bad the systemd developers already complied with fascism in advance before the bills were even finalized.
Will Lennart Poettering and his followers now please remove the birthDate field from systemd?
P.S.: If you reply with any variation of "You need to calm down," I will block you.
Using docker-compose with Podman rootless https://lobste.rs/s/tpxwfe #devops #linux #systemd #virtualization
https://elou.world/en/tutorial/podman-docker-compose
Monitoring SystemD services with Healthchecks.io https://lobste.rs/s/dxfl0r #systemd
https://passbe.com/2022/healthchecks-io-systemd-checks/
2️⃣0️⃣ Here's the 20th post highlighting key new features of the recently published v262 release of systemd. #systemd262 #systemd
In systemd v261 we added the new "bootctl link" command, which allows managing boot menu in a commit/rollback style fashion by combining, UKIs, credentials, sysext, confext into an UAPI.1 type #1 boot loader entry, and managing space on the ESP at the same time.
"bootctl link" requires specifying the resources to combine in the boot loader entry on the command line.
modern #Linux system powered bu #systemd, in my case #Debian, after I modified /etc/fstab, simply mount -a WILL NOT work. I had to systemctl daemon-reload and then mount. I miss the old behavior, and I do not understand why I had to systemctl ... This is like ifconfig to ip, wlan0 to wlpblablablah which I can never remember ...1️⃣3️⃣ Here's the 13th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
The Linux kernel's console doesn't particularly receive much development these days, and neither in the previous decade or so. Because of that it hasn't really caught up with modern technical developments, such as HiDPI screens. In many scenarios it makes the console barely usable: output in a teeny-tiny font somewhere in the top-left of your screen, requiring a microscope to…
1️⃣1️⃣ Here's the 11th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
In the previous post in this series we already discussed systemd-cryptenroll/systemd-cryptsetup's TPM support a bit. There's another addition in this area with v262.
If you use LUKS for disk encryption, then the actual data is protected by a symmetric "volume" key. Encrypted versions of this volume key are placed in one or more "slots" in the LUKS header.
1️⃣4️⃣ Here's the 14th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
systemd is large collection of modular tools and services, that work nicely together. Currently if you install them all you get something like ~175 binaries. Downstream distributions tend to split these into a number of software package, which you can install separately, but I guess compared to certain other init systems, yes, we cover a lot with a lot of separate binaries.
1️⃣2️⃣ Here's the 12th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
For a while now systemd has provided the "systemd-confext" subsystem. It enables a form of atomic, reversible, secure configuration management: you wrap up configuration files in a UAPI.3 DDI, drop it on a node, run systemd-confext --refresh and it will merge the files from the DDI into your /etc/ through overlayfs. Later, drop in a different version, delete the old one, …
2️⃣ Here's the 2nd post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd
The Linux kernel 7.1 added support for setting extended attributes on socket inodes: both for AF_UNIX entrypoint socket inodes in the file system hierarchy, and for listener/connected sockets in the "sockfs" pseudo file system.
This is truly useful, because it allows attaching descriptive metadata on sockets that can be very cheaply read without connecting to them.
Nspawn comeback: an OCI hub, new images and nspawn 1.0.0 https://lobste.rs/s/o74pht #systemd
https://blog.nspawn.org/posts/nspawn-comeback-an-oci-hub-new-images-and-nspawn-1-0-0/
A whirlwind tour of systemd-nspawn containers (2025) https://lobste.rs/s/yusomz #systemd
https://quantum5.ca/2025/03/22/whirlwind-tour-of-systemd-nspawn-containers/
2️⃣2️⃣ Here's the 22nd post highlighting key new features of the recently published v262 release of systemd. #systemd262 #systemd
Initially, there was /etc/crypttab. And then there was /etc/veritytab, and soon followed /etc/integritytab. With v262 there's also /etc/clonetab.
All of these manage a type of device mapper target that is important when building an OS: dm-crypt (encryption, i.e. LUKS), dm-verity (immutable integrity), dm-integrity (writable integrity) and dm-clone (live…
3️⃣3️⃣ Here's the 33rd post highlighting key new features of the recently published v262 release of systemd. #systemd262 #systemd
For a longer time now systemd has supported the "credentials" concept, that allows passing parameters to systems and services in a secure way, with optional locking to the local TPM. One of the key goals of the design was to make the TPM binding logic "just work". Specifically, not all systems have TPMs, and thus it was key to gracefully degrade: the encryption…
3️⃣5️⃣ Here's the 35th post highlighting key new features of the recently published v262 release of systemd. #systemd262 #systemd
A key concept in systemd's TPM support is that UKIs can carry information about expected PCR measurements (specifically PCR 11), which are signed by a cryptographic key of the vendor. The idea is to use this as one of the protections on disk encryption keys protected by the TPM: only on systems where PCR 11 is in a state for which the OS vendor provided such a…
2️⃣1️⃣ Here's the 21st post highlighting key new features of the recently published v262 release of systemd. #systemd262 #systemd
When a systemd-sysupdate update cycle completes, new resources have been dropped into the system: either as files, directories or as partitions. In some cases it's then useful to trigger further actions that then make use of the new resources made available, for example refresh the sysext or confext stack, or rebuild TPM policies or similar.
2️⃣3️⃣ Here's the 23rd post highlighting key new features of the recently published v262 release of systemd. #systemd262 #systemd
The service manager in the systemd suite manages a dependency network of units, where state changes are applied to via a job queue. The job queue provides a certain kind of atomicity: when a job –and all the depending jobs it might induce – is enqueued this is either done fully or not at all, but we'll never leave some jobs around and drop others.
This is a…