5 Mar 2025 |
Sandro π§ | π€ hmmmm | 22:57:21 |
Sandro π§ | Do you have an idea if common things like Gunicorn or such application servers use that? | 22:57:34 |
Arian | No idea. | 23:09:07 |
Arian | Why don't you just use SocketUser and SocketMode ? | 23:09:32 |
Arian | If there isn't more than one user consuming the socket | 23:09:49 |
Arian | But e.g. postgres uses it https://www.postgresql.org/docs/current/auth-peer.html | 23:15:07 |
6 Mar 2025 |
Sandro π§ | I currently have SockerUser but I should probably set SocketMode as it has 666 right now | 00:39:30 |
| Grimmauld (moving to @grimmauld:grapevine.grimmauld.de) changed their display name from Grimmauld to Grimmauld (any/all). | 15:37:32 |
Arian | I wonder if we could use this for the Test Driver: https://github.com/systemd/systemd/blob/main/NEWS#L1179-L1196 | 18:35:26 |
Arian | currently all our wait_for_unit stuff is kind ad-hoc but itβs built into systemd now | 18:35:38 |
Arian | it will send messages about unit state back to the VMM over VSOCK | 18:35:52 |
@elvishjerricco:matrix.org | well that sounds like a big improvement | 18:37:07 |
Arian | https://www.freedesktop.org/software/systemd/man/latest/systemd.html#Readiness%20Protocol | 18:37:21 |
@elvishjerricco:matrix.org | I didn't realize PID1 was conscientious about being hosted as a container or vm | 18:38:35 |
Alyssa Ross | IIRC it basically has to be | 19:12:21 |
Alyssa Ross | Even s6-linux-init is | 19:12:30 |
Arian | It isn't really. It just checks if there is a socket passed in through a credential | 19:20:19 |
@elvishjerricco:matrix.org | how do you pass a socket in through a credential? | 19:23:01 |
Arian | https://www.freedesktop.org/software/systemd/man/latest/systemd.html#vmm.notify_socket | 19:23:49 |
Arian | It's the socket address. Not socket. Sorry | 19:24:54 |
Arian | So for VMs it's the vsock address. For containers it's a Unix domain socket path | 19:25:07 |
@elvishjerricco:matrix.org | I guess I don't understand vsock things :P | 19:29:15 |
Arian | There's a virtio driver that exposes vsocks to the guest | 19:32:35 |
@elvishjerricco:matrix.org | oh so it can't start until the module is loaded | 19:33:16 |
raitobezarius | speaking of vsock things | 19:33:26 |
Arian | https://man7.org/linux/man-pages/man7/vsock.7.html | 19:33:28 |
raitobezarius | it would be nice to add the code for ssh generators in systemd | 19:33:34 |
raitobezarius | i have it in my personal nixpkgs | 19:33:39 |
raitobezarius | i use vsock ssh for all my vms | 19:33:42 |
Arian | There's a pr | 19:33:45 |