!PSmBFWNKoXmlQBzUQf:helsinki-systems.de

Stage 1 systemd

83 Members
systemd in NixOs's stage 1, replacing the current bash tooling https://github.com/NixOS/nixpkgs/projects/5127 Servers

Load older messages


SenderMessageTime
29 Apr 2023
@aktaboot:tchncs.de@aktaboot:tchncs.de* the problem I encountered was that efi partition was full, so I could not rebuild, and therefore I also could not empty the efi with nix tooling, cleaning the efi manually isn't very user friendly or desirable17:52:48
@elvishjerricco:matrix.org@elvishjerricco:matrix.org systemd-boot-builder.py is supposed to clear old generations before it adds new ones, so running out of space isn't supposed to be a problem if you've garbage collected 17:53:51
@elvishjerricco:matrix.org@elvishjerricco:matrix.org (in actuality it deletes the entire nixos folder in the ESP before recreating it, because of a bug, but the effect is the same) 17:54:53
30 Apr 2023
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.de ElvishJerricco: what do you think about a single option that disables timeout behaviour for crypto? I wouldn't want to enable it by default but I think it's not as uncommon to have issues as-is. For example, I reboot my computer and go fetch a coffee while it does it's thing, just to see that it rebooted and timed out into a recovery shell 11:30:54
@oddlama:matrix.orgoddlamaI just ran into this, too. I'd love an option to disable the timeout.13:58:58
@oddlama:matrix.orgoddlama Also not sure if this is related, but sometimes when I am in the middle of entering the password via ssh and systemd-tty-ask-password-agent, the agent seems to be reset and the prompt exits. 14:02:05
@elvishjerricco:matrix.org@elvishjerricco:matrix.org Janne Heß: By default, JobTimeoutSec is set to 0 for crypttab stuff. So there should already be no timeout 20:01:20
@elvishjerricco:matrix.org@elvishjerricco:matrix.org(I believe we do not do this for zfs's import service, so zfs native encryption will timeout; we should change that)20:02:25
@lily:lily.flowers@lily:lily.flowers
In reply to @elvishjerricco:matrix.org
Janne Heß: By default, JobTimeoutSec is set to 0 for crypttab stuff. So there should already be no timeout
There definitely is one. I'll see if I can figure out why in a bit
20:04:25
@lily:lily.flowers@lily:lily.flowers(I do the same reboot computer and go fetch a coffee thing and occasionally come back to it timed out)20:05:04
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.de
In reply to @elvishjerricco:matrix.org
Janne Heß: By default, JobTimeoutSec is set to 0 for crypttab stuff. So there should already be no timeout
That's true but then waiting for the decrypted device times out
20:05:12
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.de20230430_220529_474826277132580486.jpg
Download 20230430_220529_474826277132580486.jpg
20:05:42
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgHmm ok20:05:44
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgWell there's fstab options for that20:05:54
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.deOh there is? I will check once I find the time 20:06:12
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.deThanks for the pointer :) 20:06:23
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgHm but that says the device job timed out....20:06:38
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgOh I see20:08:01
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgCryptsetup-generator probably sets the timeout for the physical device to zero, but leaves it default for the mapper device and the FS itself20:08:41
2 May 2023
@arianvp:matrix.orgArian ElvishJerricco: could you open a nixpkgs issue about systemd-repart in initrd being borked and assign it to me? 20:59:48
@arianvp:matrix.orgArianI can make some time tomorrow to fix it21:00:00
@arianvp:matrix.orgArianthough i do think it can be a matter of opinion https://github.com/systemd/systemd/blame/main/units/systemd-repart.service.in#L2521:02:47
@arianvp:matrix.orgArian upstream runs after /sysusr is mounted (which will become /usr after switchroot) so it definitely expects the main software to already be mounted and only add additional partitions for storage not software 21:03:29
@arianvp:matrix.orgArian I think for us that'd mean run before root but after nix.mount 21:03:52
@arianvp:matrix.orgArian I think that makes sense for the nixos case if /nix is on separate partition 21:05:10
@arianvp:matrix.orgArianbut not sure....21:05:19
@elvishjerricco:matrix.org@elvishjerricco:matrix.org Arian: Yea I was looking into this last night, and there isn't really a clean answer without patching systemd or something. It really expects at least an OS to be installed on a disk, but in NixOS we go even further and don't even have an OS on a disk. The other thing is that we actually can't just use /sysroot; we would have to wait for nixos-activation.service to run so that /etc is set up 21:19:39
@arianvp:matrix.orgArian I think doing systemd-repart --empty=allow /dev/vda is the way to go 21:20:17
@arianvp:matrix.orgArianfor nixos21:20:24
@arianvp:matrix.orgArianthat will re-partition the disk even if it doesnt have a GPT partition table21:20:42

Show newer messages


Back to Room ListRoom Version: 6