[systemd-devel] Enrolling PCR11 does not work as expected

2023-07-04 Thread Felix Rubio
Hi everybody, In my setup (sd-boot+UKI+LUKS) I am using PCRs 7+11+14 to unlock the LUKS drive. Should I use only PCRs 7+14 everything works, but when I add 11 I need to provide the rescue password every single time I boot. I have extracted the values of those PCRs using tpm2_pcrread in two c

[systemd-devel] timing issue in mounting systemd filesystems

2023-07-04 Thread Giacinto Cifelli
Dear community, I have an issue booting on a RV machine. The mount targets fail, and (I suppose) as a consequence everything else fails and the system is not running: [FAILED] Failed to mount Huge Pages File System. [FAILED] Failed to mount POSIX Message Queue File System. [FAILED] Failed to mou

Re: [systemd-devel] Why is my reboot.target disabled?

2023-07-04 Thread Andrei Borzenkov
On 04.07.2023 14:58, Ferenc Wágner wrote: Hi, Please help me understand this phenomenon (systemd 252): $ systemctl status ctrl-alt-del.target ○ reboot.target - System Reboot Loaded: loaded (/lib/systemd/system/reboot.target; disabled; preset: enabled) Active: inactive (dead)

[systemd-devel] Why is my reboot.target disabled?

2023-07-04 Thread Ferenc Wágner
Hi, Please help me understand this phenomenon (systemd 252): $ systemctl status ctrl-alt-del.target ○ reboot.target - System Reboot Loaded: loaded (/lib/systemd/system/reboot.target; disabled; preset: enabled) Active: inactive (dead) Docs: man:systemd.special(7) $ ls -l /{etc,r

Re: [systemd-devel] PAMName=login, systemctl stop

2023-07-04 Thread Lennart Poettering
On Mo, 03.07.23 15:21, Andrei Borzenkov ([email protected]) wrote: > On 03.07.2023 14:17, Lennart Poettering wrote: > > On Mo, 03.07.23 10:58, Valentijn Sessink ([email protected]) wrote: > > > > > Now my remaining question is probably so very basic, that you sort of > > > missed > > > it: m

Re: [systemd-devel] bind-mount of /run/systemd for chrooted bind9/named

2023-07-04 Thread Lennart Poettering
On Mo, 03.07.23 20:52, Marc Haber ([email protected]) wrote: > (1) go fully systemd > That would mean to get rid of bind's -t option completely but use > systemd's RootDirectory directive instead. I have not tried this but I > think that the bind community might be reluctant to support