veganism.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Veganism Social is a welcoming space on the internet for vegans to connect and engage with the broader decentralized social media community.

Administered by:

Server stats:

262
active users

#systemd

9 posts9 participants1 post today
Replied in thread

@gamingonlinux I would have tested it, but this far it's been deeply depending on #systemd which I think it's wrong way to go, as there are multiple init system and not the #unlx
way of doing things, posrting getting nasty as say BSD don't use systemd at all.

Replied in thread

@aires I'm already using it! Although not because it's made in rust, purely because I found some Nix tooling really doesn't accommodate doas 🙄

I can't remember them all, but I know deploy-rs was the one that "pushed me over the edge", as it would only work with sudo, so I went with the more minimal sudo-rs implementation.

That said, what I've seen mentioned elsewhere which I'm really interested in, is run0

mastodon.social/@pid_eins/1123

Although it doesn't seem to work on NixOS, unless anyone's aware of any workarounds? This is the most recent (Nix oriented) post I've seen.

discourse.nixos.org/t/run0-not

MastodonLennart Poettering (@pid_eins@mastodon.social)5️⃣ Here's the 5th installment of my series of posts highlighting key new features of the upcoming v256 release of systemd. I am pretty sure all of you are well aware of the venerable "sudo" tool that is a key component of most Linux distributions since a long time. At the surface it's a tool that allows an unprivileged user to acquire privileges temporarily, from within their existing login sessions, for just one command, or maybe for a subshell. "sudo" is very very useful, as it…

Good blog post, basically sums up my current thoughts about the home lab. Kubernetes is nice, but overkill, and Podman+systemd and even further Quadlet can replace k8s really well on a single person scale.

Wish there was a good NGINX-based solution to mimic what ingress-nginx and cert-manager can do on k8s, not that it's that much work to handle a couple domains manually.

https://blog.yaakov.online/replacing-kubernetes-with-systemd/

#podman #systemd #quadlet #k8s

Yaakov's Blog · Replacing Kubernetes with systemd
More from Yaakov
Replied in thread

@litchipi

configuring nginx to auto-redirect from port 80 to 443 may be useful

if #nginx can automatically do #acme that'd be news to me, you might want to try #caddy for that

personally i use #nixos options to configure nginx and tls/ssl, which achieve this by creating a cert-renewing #systemd service that calls out to #letsencrypt. i assume that's sort of the canonical solution for not generating certs manually - even if you don't want to use nixos you may want to look into how they do it

Replied in thread

@irfan while this points to a specific bug triggering this behaviour it also means, #KDE should extend the process isolation of desktop components and background services as #systemd user services. Ensuring desktop interaction is always possible and snappy and limiting the potential outfall in terms of resource consumption of individual processes by enforcing upper limits.

The groundwork is done and already widely used, it just needs to spread to a few more places and needs some finetuning.

On today's episode of knit-picking #SystemD;

Obviously, we'd need all the #ZFS storage to be fully set-up, running, and /dev/zvol/ populated, 1st. Only then, can we start our #iSCSI target service.

How do YOU do it? (please reply, *splaining)

The first two options might get evaluated to the same result by the systemd "magic" - either option should make sure the storage is ready for services, right?

Thinking out loud: is there a way to get systemd to pass a D-Bus system bus socket FD to a service when it’s bus activated (i.e. via `LISTEN_FDS`)? Would mean the service could sandbox AF_UNIX socket connectivity (if it only needed that to connect to the bus, which I guess is true for some bus daemons). Downside ottomh: system bus connection policy would be bypassed (though it allows all connections by default) and the auth would still need to be done by the service.

Continued thread

This happens when I login from my greeter, LightDM (`lightdm-gtk-greeter` specifically).

I chose convenience and installed this system with archinstaller, and as a consequence I am not certain how LightDM was configured to launch my desktop environment. I just want to verify that's not the problem before I keep trying to figure out what I did wrong in the last 48h to cause this.

I think it has to have something to do with following these (community-maintained) instructions to integrate Sway with #systemd, but reversing these steps to the best of my ability doesn't seem to make this go away, even after a reboot.

github.com/swaywm/sway/wiki/Sy

GitHubsystemd integrationi3-compatible Wayland compositor. Contribute to swaywm/sway development by creating an account on GitHub.