Re: [systemd-devel] Creating containers from local .raw or tar images

2015-03-02 Thread Erik Johnson
On Tue, Mar 03, 2015 at 12:24:10AM +0100, Lennart Poettering wrote: On Mon, 02.03.15 15:45, Erik Johnson (e...@saltstack.com) wrote: The machinectl pull-* commands allow you to download container images, but no such option (yet) exists for deploying from an image or tar file on your local files

Re: [systemd-devel] Creating containers from local .raw or tar images

2015-03-02 Thread Erik Johnson
On Mon, Mar 02, 2015 at 06:03:42PM -0500, Daurnimator wrote: AFAIK, all the pull-* commands do is download into /var/lib/machines. You could easily enough just copy things into there yourself. Or even less work: don't copy them in there at all, and pass your image directly to systemd-nspawn (whi

Re: [systemd-devel] Unable to remove images using machinectl

2015-03-02 Thread Erik Johnson
On Tue, Mar 03, 2015 at 07:11:18AM +0100, Peter Paule wrote: Excerpts from Erik Johnson's message of 2015-03-02 14:10:06 -0700: Thanks. I applied the patch, restarted dbus, and now I get the following after a 20-30 second pause: @Erik Did you use the aur package or did you compile systemd and

Re: [systemd-devel] How to disable the log of services' status?

2015-03-02 Thread Wang Sen
Thanks a lot. I added the kernel argument "systemd.show_status=0" and it works. On Tue, Mar 03, 2015 at 07:02:31AM +0300, Andrei Borzenkov wrote: > В Tue, 3 Mar 2015 11:12:20 +0800 > Wang Sen пишет: > > > Hi all, > > > > I'm trying to reduce the log output when OS starts. The messages reporting

Re: [systemd-devel] Unable to remove images using machinectl

2015-03-02 Thread Peter Paule
Excerpts from Erik Johnson's message of 2015-03-02 14:10:06 -0700: > Thanks. I applied the patch, restarted dbus, and now I get the > following after a 20-30 second pause: @Erik Did you use the aur package or did you compile systemd and install it using make? Do you have experience rolling back to

Re: [systemd-devel] How to disable the log of services' status?

2015-03-02 Thread Andrei Borzenkov
В Tue, 3 Mar 2015 11:12:20 +0800 Wang Sen пишет: > Hi all, > > I'm trying to reduce the log output when OS starts. The messages reporting the > services' status like: > > [ OK ] Started Console Getty. > [ OK ] Reached target Login Prompts. > [ OK ] Started Login Service. > [ OK ] Reache

[systemd-devel] How to disable the log of services' status?

2015-03-02 Thread Wang Sen
Hi all, I'm trying to reduce the log output when OS starts. The messages reporting the services' status like: [ OK ] Started Console Getty. [ OK ] Reached target Login Prompts. [ OK ] Started Login Service. [ OK ] Reached target Multi-User System. ... are useless to me. Anyone who knows

Re: [systemd-devel] [PATCH] refactored Re: [PATCH] nspawn: Map all seccomp filters to matching capabilities

2015-03-02 Thread Jay Faulkner
Hey, Lennart reviewed this in IRC and suggested I refactor the change in this manner. Now, we have an array of capability:sys call pairs, and iterate through that and then only add the seccomp filter if the capability doesn’t exist. The new patch is attached, and available here: https://github

[systemd-devel] [PATCH] tmpfiles: Fail verbosely if acls can't be read

2015-03-02 Thread Hans-Peter Deifel
If the acls of a file couldn't be retrieved (probably due to missing acl support in the filesytem), systemd-tmpfiles just silently failed. Now it logs an error, just as it already does if the acls cannot be set. --- src/tmpfiles/tmpfiles.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

Re: [systemd-devel] Creating containers from local .raw or tar images

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 15:45, Erik Johnson (e...@saltstack.com) wrote: > The machinectl pull-* commands allow you to download container images, > but no such option (yet) exists for deploying from an image or tar file > on your local filesystem. > > Are there plans to expand the machinectl pull-* comma

Re: [systemd-devel] Creating containers from local .raw or tar images

2015-03-02 Thread Daurnimator
AFAIK, all the pull-* commands do is download into /var/lib/machines. You could easily enough just copy things into there yourself. Or even less work: don't copy them in there at all, and pass your image directly to systemd-nspawn (which is what machinectl uses) See: http://www.freedesktop.org/sof

[systemd-devel] Creating containers from local .raw or tar images

2015-03-02 Thread Erik Johnson
The machinectl pull-* commands allow you to download container images, but no such option (yet) exists for deploying from an image or tar file on your local filesystem. Are there plans to expand the machinectl pull-* commands to support either absolute file paths or file:/// URLs? My current dir

Re: [systemd-devel] Unable to remove images using machinectl

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 14:10, Erik Johnson (e...@saltstack.com) wrote: > On Mon, Mar 02, 2015 at 07:51:35PM +0100, Lennart Poettering wrote: > >On Mon, 02.03.15 11:06, Erik Johnson (e...@saltstack.com) wrote: > > > >>I'm getting a similar error to the one described in the following post > >>from a coupl

Re: [systemd-devel] Unable to remove images using machinectl

2015-03-02 Thread Erik Johnson
On Mon, Mar 02, 2015 at 07:51:35PM +0100, Lennart Poettering wrote: On Mon, 02.03.15 11:06, Erik Johnson (e...@saltstack.com) wrote: I'm getting a similar error to the one described in the following post from a couple weeks ago: https://www.mail-archive.com/systemd-devel@lists.freedesktop.org/

[systemd-devel] [PATCH/RFC] FuseMAC: user space MAC in systemd

2015-03-02 Thread Topi Miettinen
Intercept and filter filesystem operations of processes launched by systemd with FUSE. Implement learning, enforcing and auto enforcing/learning modes, enabled with new exec directive FuseMAC. FS operations can be filtered by access type (e.g. getattr/read, cf. AppArmor or TOMOYO Linux) or for mo

Re: [systemd-devel] Service watchdog feature in state ACTIVATING ?

2015-03-02 Thread Hoyer, Marko (ADITG/SW2)
Hi Umut, thx for answering > -Original Message- > From: Umut Tezduyar Lindskog [mailto:u...@tezduyar.com] > Sent: Monday, March 02, 2015 8:51 PM > To: Hoyer, Marko (ADITG/SW2) > Cc: systemd-devel@lists.freedesktop.org > Subject: Re: [systemd-devel] Service watchdog feature in state > ACTI

[systemd-devel] Systemd-219: Failed to start Create Volatile...

2015-03-02 Thread RicΛrdo Bastos™
Hi all, I'm using this tip to solve problem in systemd-TMPFILES-setup.service: http://forums.gentoo.org/viewtopic-t-1011254-view-previous.html?sid=4a7ba76e913f996abfa6e09aee95

Re: [systemd-devel] Service watchdog feature in state ACTIVATING ?

2015-03-02 Thread Umut Tezduyar Lindskog
Hi Marko, On Sunday, March 1, 2015, Hoyer, Marko (ADITG/SW2) wrote: > Hi, > > I ran into a use case where the activation phase of a service takes > significantly longer than the desired watchdog period (Activating: > 10-20secs, Watchdog: 1-5secs). > > I found out that the watchdog features start

Re: [systemd-devel] Errors using machinectl pull-tar and machinectl pull-dkr

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 12:28, Peter Paule (systemd-de...@fedux.org) wrote: > Quoting Lennart Poettering : > >I wonder if we can use --trustdb-name /dev/null > > I think, no. I got a weird error using /dev/null > > % strace -e file -o /tmp/blub1 gpg --no-options --no-default-keyring > --no-auto-key-loc

Re: [systemd-devel] tmpfiles.d specifier support on "argument" when operating on files

2015-03-02 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Feb 18, 2015 at 06:17:17PM -0300, Cristian Rodríguez wrote: > El 18/02/15 a las 07:10, Lennart Poettering escribió: > >On Tue, 17.02.15 17:35, Cristian Rodríguez (crrodrig...@opensuse.org) wrote: > > > >Please fix this for all arguments, not just symlinks. > > > >>diff --git a/src/tmpfiles/

Re: [systemd-devel] Proposal: Add Drive Enclosure/Slot mapping to systemd

2015-03-02 Thread Tom Gundersen
On Mon, Mar 2, 2015 at 5:42 PM, Jordan Hargrave wrote: > > > On Mon, Mar 2, 2015 at 10:24 AM, Andrei Borzenkov > wrote: >> >> В Mon, 2 Mar 2015 09:48:51 -0600 >> Jordan Hargrave пишет: >> >> > It would be nice if systemd could discover and display enclosure/bay >> > slot >> > mappings for drives

Re: [systemd-devel] Plans to fix or provide alternative for lz4?

2015-03-02 Thread Shawn Landden
On Sun, Mar 1, 2015 at 3:04 AM, Lennart Poettering wrote: > On Thu, 26.02.15 05:55, Zbigniew Jędrzejewski-Szmek (zbys...@in.waw.pl) > wrote: > > > On Thu, Feb 26, 2015 at 04:41:48AM +, Laszlo Papp wrote: > > > Hi, > > > > > > it seems that the lz4 headers are broken when getting coredumps > >

Re: [systemd-devel] Proposal: Add biosdevname naming scheme to systemd

2015-03-02 Thread Tom Gundersen
Hi Jordan, On Mon, Mar 2, 2015 at 4:45 PM, Jordan Hargrave wrote: > There are currently two competing naming mechanisms for network cards, > biosdevname and systemd. Systemd currently has some limitations on naming > cards that use network partitioning or support SR-IOV. Could you point to an e

Re: [systemd-devel] Proposal: Add Drive Enclosure/Slot mapping to systemd

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 15:33, Cristian Rodríguez (crrodrig...@opensuse.org) wrote: > On Mon, Mar 2, 2015 at 12:48 PM, Jordan Hargrave wrote: > > It would be nice if systemd could discover and display enclosure/bay slot > > mappings for drives in the system. The /dev/disk/by-path method doesn't > > qui

Re: [systemd-devel] Unable to remove images using machinectl

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 11:06, Erik Johnson (e...@saltstack.com) wrote: > I'm getting a similar error to the one described in the following post > from a couple weeks ago: > > https://www.mail-archive.com/systemd-devel@lists.freedesktop.org/msg28255.html > > I get an "access denied" error when running

Re: [systemd-devel] Proposal: Add Drive Enclosure/Slot mapping to systemd

2015-03-02 Thread Cristian Rodríguez
On Mon, Mar 2, 2015 at 12:48 PM, Jordan Hargrave wrote: > It would be nice if systemd could discover and display enclosure/bay slot > mappings for drives in the system. The /dev/disk/by-path method doesn't > quite work, for SAS drives the ID can change on hotplug. The slot mapping > also doesn't

[systemd-devel] Unable to remove images using machinectl

2015-03-02 Thread Erik Johnson
I'm getting a similar error to the one described in the following post from a couple weeks ago: https://www.mail-archive.com/systemd-devel@lists.freedesktop.org/msg28255.html I get an "access denied" error when running machinectl remove, even as root. For reference, /var/lib/machines is on a bt

Re: [systemd-devel] Proposal: Add Drive Enclosure/Slot mapping to systemd

2015-03-02 Thread Jordan Hargrave
On Mon, Mar 2, 2015 at 10:24 AM, Andrei Borzenkov wrote: > В Mon, 2 Mar 2015 09:48:51 -0600 > Jordan Hargrave пишет: > > > It would be nice if systemd could discover and display enclosure/bay slot > > mappings for drives in the system. The /dev/disk/by-path method doesn't > > quite work, for SA

Re: [systemd-devel] Proposal: Add Drive Enclosure/Slot mapping to systemd

2015-03-02 Thread Andrei Borzenkov
В Mon, 2 Mar 2015 09:48:51 -0600 Jordan Hargrave пишет: > It would be nice if systemd could discover and display enclosure/bay slot > mappings for drives in the system. The /dev/disk/by-path method doesn't > quite work, for SAS drives the ID can change on hotplug. The slot mapping > also doesn'

Re: [systemd-devel] Proposal: Add biosdevname naming scheme to systemd

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 09:45, Jordan Hargrave (jhar...@gmail.com) wrote: > There are currently two competing naming mechanisms for network cards, > biosdevname and systemd. Systemd currently has some limitations on naming > cards that use network partitioning or support SR-IOV. Proposal is to add > su

Re: [systemd-devel] [PATCH] journal: fix Inappropriate ioctl for device on ext4

2015-03-02 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Mar 02, 2015 at 03:58:48AM +0300, Ivan Shapovalov wrote: > On 2015-03-01 at 21:13 -0300, Cristian Rodríguez wrote: > > Logs constantly show > > > > systemd-journald[395]: Failed to set file attributes: Inappropriate > > ioctl for device > > > > This is because ext4 does not support FS_NOC

[systemd-devel] Proposal: Add Drive Enclosure/Slot mapping to systemd

2015-03-02 Thread Jordan Hargrave
It would be nice if systemd could discover and display enclosure/bay slot mappings for drives in the system. The /dev/disk/by-path method doesn't quite work, for SAS drives the ID can change on hotplug. The slot mapping also doesn't handle PCIe SSD devices as they are bare block devices and don't

[systemd-devel] Proposal: Add biosdevname naming scheme to systemd

2015-03-02 Thread Jordan Hargrave
There are currently two competing naming mechanisms for network cards, biosdevname and systemd. Systemd currently has some limitations on naming cards that use network partitioning or support SR-IOV. Proposal is to add support for biosdevname-like names as part of systemd. The names would be cre

Re: [systemd-devel] [PATCH] po: update Russian translation

2015-03-02 Thread Dimitri John Ledkov
On 2 March 2015 at 13:04, Sergey Ptashnick <0comff...@inbox.ru> wrote: > On 02.03.2015 02:26, Ivan Shapovalov wrote: >> Hmm... Here (and in similar cases below) the comma should not be used, >> because "для" is just a preposition and hence "для управления" does not >> introduce neither a subordinat

Re: [systemd-devel] [PATCH] po: update Russian translation

2015-03-02 Thread Sergey Ptashnick
On 02.03.2015 02:26, Ivan Shapovalov wrote: > Hmm... Here (and in similar cases below) the comma should not be used, > because "для" is just a preposition and hence "для управления" does not > introduce neither a subordinate clause; it's a word in genitive case. Such form used also in other statem

Re: [systemd-devel] Errors using machinectl pull-tar and machinectl pull-dkr

2015-03-02 Thread Peter Paule
Quoting Lennart Poettering : I am not really sure, it sounds slightly problematic regarding security since it would not be clear anymore what you get if you ask for a specific name. Mmmh... I see it more like another source of images. In yum I can add as much repositories as I like. I think

Re: [systemd-devel] Errors using machinectl pull-tar and machinectl pull-dkr

2015-03-02 Thread Peter Paule
Quoting Lennart Poettering : I wonder if we can use --trustdb-name /dev/null I think, no. I got a weird error using /dev/null % strace -e file -o /tmp/blub1 gpg --no-options --no-default-keyring --no-auto-key-locate --no-auto-check-trustdb --batch --trust-model=always --keyring=/usr/lib/sy

Re: [systemd-devel] Errors using machinectl pull-tar and machinectl pull-dkr

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 06:56, Peter Paule (systemd-de...@fedux.org) wrote: > Hi, > > is it ok for you to have a configuration file for machined? It would be > wonderful if one could add the dkr index url to that file because for me > it's always the same. You can specify it at build time as a configur

Re: [systemd-devel] Errors using machinectl pull-tar and machinectl pull-dkr

2015-03-02 Thread Lennart Poettering
On Mon, 02.03.15 11:00, Peter Paule (systemd-de...@fedux.org) wrote: > > Quoting Lennart Poettering : > >>Thanks for clarifying this. :-) Any ETA for this? I'm looking for better > >>integrated solution "into" systemd than docker and I really like the > >>idea of having a systemd-daemon managing

Re: [systemd-devel] heads-up: chasing journal(?) related regression in 219 causing boot hang/fail

2015-03-02 Thread Martin Pitt
Hey Lennart, Lennart Poettering [2015-02-28 13:05 +0100]: > Any idea about the details of this? For the record, I'm still working on this on-and-off (I got some other urgent things to work on, though). It took me a while to install Fedora, as the rawhide images and upgrade are both broken ATM, bu

Re: [systemd-devel] Errors using machinectl pull-tar and machinectl pull-dkr

2015-03-02 Thread Peter Paule
Quoting Lennart Poettering : Thanks for clarifying this. :-) Any ETA for this? I'm looking for better integrated solution "into" systemd than docker and I really like the idea of having a systemd-daemon managing the containers. This is actually in place now in git. The first time you invoke on