Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Mantas Mikulėnas
On Thu, Jan 17, 2013 at 12:36 AM, Lennart Poettering wrote: > we already link against gcrypt via the FSS stuff, and indirectly via > libcryptsetup. gnutls is the natural next step of that i guess. IIRC, current GnuTLS versions now use Nettle as the crypto library. The gcrypt backend was removed a

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Lennart Poettering
On Wed, 16.01.13 21:57, Zbigniew Jędrzejewski-Szmek ([email protected]) wrote: > On Wed, Jan 16, 2013 at 09:18:22PM +0100, Holger Winkelmann wrote: > > Thanks for the feedback. In our design we also think about some remote > > journal > > logging but want to transport the messages via some form o

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Lennart Poettering
On Wed, 16.01.13 21:07, Zbigniew Jędrzejewski-Szmek ([email protected]) wrote: > > > search for "openvas gnutls" and "openvas libmicrohttpd" > > > and you become an overview of the quality of both libraries > > Er had Some relative Good Results with PolarSSL and lately the fork > > tropicSSL > >

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Holger Winkelmann
On Jan 16, 2013, at 9:55 PM, Zbigniew Jędrzejewski-Szmek wrote: > On Wed, Jan 16, 2013 at 09:33:22PM +0100, Holger Winkelmann wrote: >> Can't speak from person experience, but my team has worked with the libevent >> and >> libev libraries which contain http libraries as well. > IIUC, libev use

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Holger Winkelmann
On Jan 16, 2013, at 9:57 PM, Zbigniew Jędrzejewski-Szmek wrote: > On Wed, Jan 16, 2013 at 09:18:22PM +0100, Holger Winkelmann wrote: >> Thanks for the feedback. In our design we also think about some remote >> journal >> logging but want to transport the messages via some form of message proto

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread David Strauss
On Wed, Jan 16, 2013 at 12:55 PM, Zbigniew Jędrzejewski-Szmek wrote: > libmicrohttpd at least > abstracts this to the point where I only have to provide a callback > to consume buffers with data. It also supports combination event loops with thread pools. I doubt the journal gateway needs to scal

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jan 16, 2013 at 09:18:22PM +0100, Holger Winkelmann wrote: > Thanks for the feedback. In our design we also think about some remote journal > logging but want to transport the messages via some form of message protocol. > > On the final receiving host we could present the logs via http(s)

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jan 16, 2013 at 09:33:22PM +0100, Holger Winkelmann wrote: > Can't speak from person experience, but my team has worked with the libevent > and > libev libraries which contain http libraries as well. IIUC, libev uses libevent code for HTTP through a compatibility layer. libevent has only v

[systemd-devel] Support for UEFI's OsIndications to reboot into firmware menus

2013-01-16 Thread Peter Jones
Hi! Attached is a preliminary patch to add support for UEFI's "OsIndications" feature. This feature allows the operating system to indicate to the system firmware that on the next boot up, instead of starting the operating system, the system should invoke the firmware configuration menus. This i

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Holger Winkelmann
Can't speak from person experience, but my team has worked with the libevent and libev libraries which contain http libraries as well. libevent http library is linked to openssl. just my 2ct... On Jan 16, 2013, at 9:18 PM, David Strauss wrote: > On Wed, Jan 16, 2013 at 12:07 PM, Zbigniew Jędr

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Holger Winkelmann
Thanks for the feedback. In our design we also think about some remote journal logging but want to transport the messages via some form of message protocol. On the final receiving host we could present the logs via http(s) Holger On Jan 16, 2013, at 9:07 PM, Zbigniew Jędrzejewski-Szmek wrote:

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread David Strauss
On Wed, Jan 16, 2013 at 12:07 PM, Zbigniew Jędrzejewski-Szmek wrote: > I would be happy to replace it with something different. Any recommendations? I've built a few projects with libmicrohttpd. I don't find the library intuitive, but many of the reasons behind design decisions have become clear

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jan 16, 2013 at 07:11:31PM +0100, Holger Winkelmann wrote: > Holger Winkelmann > Travelping GmbH > +49-171-5594745 > > ### Sent from a mobile device. Sorry for brevity and typos... ### > > On 16.01.2013, at 18:54, Reindl Harald wrote: > > > > > > > Am 16.01.2013 18:12, schrieb Lennart

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Lennart Poettering
On Wed, 16.01.13 13:04, Colin Walters ([email protected]) wrote: > > On Wed, 2013-01-16 at 17:34 +0100, Frederic Crozat wrote: > > Hi, > > > > on openSUSE, we found the need to sometime force "--ignore-dependencies" > > when systemctl is called (usually from other services / initscripts / > > t

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Holger Winkelmann
Er had Some relative Good Results with PolarSSL and lately the fork tropicSSL I was Not following the full discussion here, any reasons against classic openSSL apart from size of the library Holger -- Holger Winkelmann Travelping GmbH +49-171-5594745 ### Sent from a mobile device. Sorry for

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Colin Walters
On Wed, 2013-01-16 at 17:34 +0100, Frederic Crozat wrote: > Hi, > > on openSUSE, we found the need to sometime force "--ignore-dependencies" > when systemctl is called (usually from other services / initscripts / > tools started by initscripts and which can cause deadlock). Hm, what about having

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Reindl Harald
Am 16.01.2013 18:12, schrieb Lennart Poettering: > Sounds good! > > gntils is a pretty awful library, but the others aren't better, and it > appears to be the right choice here. search for "openvas gnutls" and "openvas libmicrohttpd" and you become an overview of the quality of both libraries

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Kay Sievers
On Wed, Jan 16, 2013 at 6:15 PM, Colin Guthrie wrote: > 'Twas brillig, and Frederic Crozat at 16/01/13 17:07 did gyre and gimble: >> I was planning to handle this environment variable in our tools but >> tools team would prefer to have it in systemctl. I guess I'll have to >> maintain this patch d

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Frederic Crozat
Le mercredi 16 janvier 2013 à 17:15 +, Colin Guthrie a écrit : > 'Twas brillig, and Frederic Crozat at 16/01/13 17:07 did gyre and gimble: > > I was planning to handle this environment variable in our tools but > > tools team would prefer to have it in systemctl. I guess I'll have to > > mainta

Re: [systemd-devel] setroubleshoot integration.

2013-01-16 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jan 16, 2013 at 06:16:55PM +0100, Lennart Poettering wrote: > On Fri, 11.01.13 21:23, Zbigniew Jędrzejewski-Szmek ([email protected]) wrote: > > > > > On Fri, Jan 11, 2013 at 09:03:52PM +0100, Lennart Poettering wrote: > > > On Wed, 09.01.13 22:52, Zbigniew Jędrzejewski-Szmek (zbys...@in.

Re: [systemd-devel] [PATCH] do not ellipsize cgroup members in full status

2013-01-16 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jan 16, 2013 at 04:59:47PM +0100, Lukáš Nykrýn wrote: > Subject: [PATCH] systemctl,loginctl,cgls: do not ellipsize cgroup members > when --full is specified > > New file output.h with output flags and modes. > > --full parameter also for cgls and loginctl. > > Include 'all' parameter in

Re: [systemd-devel] setroubleshoot integration.

2013-01-16 Thread Lennart Poettering
On Fri, 11.01.13 21:23, Zbigniew Jędrzejewski-Szmek ([email protected]) wrote: > > On Fri, Jan 11, 2013 at 09:03:52PM +0100, Lennart Poettering wrote: > > On Wed, 09.01.13 22:52, Zbigniew Jędrzejewski-Szmek ([email protected]) > > wrote: > > > > > > > We'd define a new special field OBJECT_PID.

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Colin Guthrie
'Twas brillig, and Frederic Crozat at 16/01/13 17:07 did gyre and gimble: > I was planning to handle this environment variable in our tools but > tools team would prefer to have it in systemctl. I guess I'll have to > maintain this patch downstream in openSUSE :( It would seem to me that the tools

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Frederic Crozat
Le mercredi 16 janvier 2013 à 16:58 +, Colin Guthrie a écrit : > 'Twas brillig, and Frederic Crozat at 16/01/13 16:34 did gyre and gimble: > > Hi, > > > > on openSUSE, we found the need to sometime force "--ignore-dependencies" > > when systemctl is called (usually from other services / initsc

Re: [systemd-devel] SSL for gatewayd

2013-01-16 Thread Lennart Poettering
On Wed, 09.01.13 17:09, Zbigniew Jędrzejewski-Szmek ([email protected]) wrote: > Hi, > > I'm still working on my journal-logging-over-the-network daemon > (systemd-journal-remote), and in the process I've created some pathes > to systemd-journal-gatewayd: > > http://kawka.in.waw.pl/git/systemd

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Frederic Crozat
Le mercredi 16 janvier 2013 à 17:47 +0100, Lennart Poettering a écrit : > On Wed, 16.01.13 17:34, Frederic Crozat ([email protected]) wrote: > > > Hi, > > > > on openSUSE, we found the need to sometime force "--ignore-dependencies" > > when systemctl is called (usually from other services / initsc

Re: [systemd-devel] [PATCH] journalctl: quit on I/O error

2013-01-16 Thread Lennart Poettering
On Tue, 15.01.13 21:36, David Herrmann ([email protected]) wrote: > >> > +++ b/src/journal/journalctl.c > >> > @@ -1077,7 +1077,7 @@ int main(int argc, char *argv[]) { > >> > arg_catalog * OUTPUT_CATALOG; > >> > > >> > r = output_j

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Colin Guthrie
'Twas brillig, and Frederic Crozat at 16/01/13 16:34 did gyre and gimble: > Hi, > > on openSUSE, we found the need to sometime force "--ignore-dependencies" > when systemctl is called (usually from other services / initscripts / > tools started by initscripts and which can cause deadlock). > > To

Re: [systemd-devel] logind.conf missing doc about IdleAction and IdleActionSec

2013-01-16 Thread Lennart Poettering
On Wed, 16.01.13 10:31, Valere Monseur ([email protected]) wrote: > Hi all, > > In systemd 197, there are 2 new parameters in logind.conf: IdleAction & > IdleActionSec > > Would it be possible to have them documented in the man page logind.conf Ah, indeed, apparently I forgot to documen

Re: [systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Lennart Poettering
On Wed, 16.01.13 17:34, Frederic Crozat ([email protected]) wrote: > Hi, > > on openSUSE, we found the need to sometime force "--ignore-dependencies" > when systemctl is called (usually from other services / initscripts / > tools started by initscripts and which can cause deadlock). I am pretty s

[systemd-devel] PATCH: handle SYSTEMCTL_OPTIONS in systemctl

2013-01-16 Thread Frederic Crozat
Hi, on openSUSE, we found the need to sometime force "--ignore-dependencies" when systemctl is called (usually from other services / initscripts / tools started by initscripts and which can cause deadlock). To handle this in a transparent manner, I'd like to introduce SYSTEMCTL_OPTIONS environmen

Re: [systemd-devel] failure to disable a servie from restarting

2013-01-16 Thread Lennart Poettering
On Mon, 14.01.13 02:22, Zbigniew Jędrzejewski-Szmek ([email protected]) wrote: > > But I don't want to _stop_ the service. I want the running service > > to not restart when/if it dies. > There's a dbus property > readonly s Restart > exposed for units. It would serve your usecase perfectly to m

Re: [systemd-devel] [PATCH] do not ellipsize cgroup members in full status

2013-01-16 Thread Lukáš Nykrýn
Lennart Poettering píše v St 16. 01. 2013 v 04:53 +0100: > On Tue, 15.01.13 10:58, Lukáš Nykrýn ([email protected]) wrote: > > Heya, > > > diff --git a/src/shared/output.h b/src/shared/output.h > > new file mode 100644 > > index 000..0efd430 > > --- /dev/null > > +++ b/src/shared/output.h >

Re: [systemd-devel] [PATCH] do not ellipsize cgroup members in full status

2013-01-16 Thread Lukáš Nykrýn
Zbigniew Jędrzejewski-Szmek píše v Út 15. 01. 2013 v 17:08 +0100: > On Tue, Jan 15, 2013 at 10:58:26AM +0100, Lukáš Nykrýn wrote: > > Subject: [PATCH] systemctl,loginctl,cgls: do not ellipsize cgroup members > > when --full is specified > > > > diff --git a/man/systemctl.xml b/man/systemctl.xml >

[systemd-devel] logind.conf missing doc about IdleAction and IdleActionSec

2013-01-16 Thread Valere Monseur
Hi all, In systemd 197, there are 2 new parameters in logind.conf: IdleAction & IdleActionSec Would it be possible to have them documented in the man page logind.conf Thanks Regards Valère ___ systemd-devel mailing list [email protected]

[systemd-devel] StopWhenUnneeded and Templated install paches

2013-01-16 Thread Oleksii Shevchuk
Hi list! First patch removes StopWhenUnneeded= when service starts, if service will be stopped after start, because WantedBy=,RequiredBy,.. is empty. Second one allows templated enable, like: > grep WantedBy ~/.config/systemd/user/[email protected] WantedBy=services@%i.target > srv disa