On Tue, Oct 15, 2024 at 02:33:48PM +0200, Raphaël Hertzog wrote:
> Since a few weeks, gdm was no longer starting right ahead. It was waiting
> for network-online.target to be finished.
> 
> I figured out that it was due to yubihsm-connector.service (at least the
> problem went away when I purged the package): it marks itself
> "After=network-online.target" and as "WantedBy=multi-user.target".
> 
> I'm not exactly sure how that ends up being in the dependency tree
> of gdm however... but I question the need of network-online.target.
> This is a daemon, it doesn't need outbound access, I assume
> "After=network.target" should be sufficient.

Looks like this comes from upstream.  I agree network-online.target
isn't necessary for the default and common case where you're just
listening on 127.0.0.1.  I think using network.target would be a problem
if you set a different listen address in yubihsm-connector.yaml, though;
Go doesn't seem to do IP_FREEBIND.

I guess we could patch it to use network.target and add a comment to say
that you might need to change that if you use a different listen
address?  And either way, I don't think I see a justification for
Wants=systemd-networkd-wait-online.service - that unit has
Before=network-online.target, so specifying it explicitly seems
redundant.

-- 
Colin Watson (he/him)                               [[email protected]]

Reply via email to