!PSmBFWNKoXmlQBzUQf:helsinki-systems.de

Stage 1 systemd

83 Members
systemd in NixOs's stage 1, replacing the current bash tooling https://github.com/NixOS/nixpkgs/projects/5127 Servers

Load older messages


SenderMessageTime
11 Mar 2023
@jaen:matrix.orgjaen If it helps, what I'm trying to do at a high-level is taking advantage of the fact that if you put a domain socket as keyfile source, systemd will try to get keyfile contents from that socket. As such, I have added a keyfile.socket to the stage1 units and it spawns a unit with a simple bash script using systemd-ask-password --no-tty and cryptsetup to read the keyfile. I can provide relevant parts of config if you would need more details. 11:58:18
@jaen:matrix.orgjaen * If it helps, what I'm trying to do at a high-level is taking advantage of the fact that if you put a domain socket as keyfile source in crypttab, systemd will try to get keyfile contents from that socket. As such, I have added a keyfile.socket to the stage1 units and it spawns a unit with a simple bash script using systemd-ask-password --no-tty and cryptsetup to read the keyfile. I can provide relevant parts of config if you would need more details. 11:58:33
@jaen:matrix.orgjaenI think that's everything relevant – https://gist.github.com/jaen/f1e32d2d7810b20ba97159a19f8374db12:06:49
13 Mar 2023
@hexa:lossy.network@hexa:lossy.networkRedacted or Malformed Event15:00:26
14 Mar 2023
@ckie:ckie.devckie (they/them) changed their display name from ckie (they/them) to ckie (they/them; heavily limited keyboard usage, dictation or voice only).01:09:13
22 Mar 2023
@linus:schreibt.jetzt@linus:schreibt.jetzt ElvishJerricco: re zfs mount generator, I wonder if in the future (when we have multiple initramfs support) we could even make the generator work in the systemd initramfs, by updating an initramfs which contains the cache in the zedlet 13:25:55
@linus:schreibt.jetzt@linus:schreibt.jetztand thus make non-legacy mounts for /var/lib and stuff work too13:26:22
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgI have thought about doing that already. But it's not clear where to source that cache from. If the point is to keep the mountpoint details out of the nix config, then it has to be acquired when the generation is added to /boot, which doesn't seem ideal13:29:02
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgoh, I misread13:29:16
@elvishjerricco:matrix.org@elvishjerricco:matrix.orghave the zedlet do it.13:29:21
@elvishjerricco:matrix.org@elvishjerricco:matrix.orghuh13:29:22
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgthat seems... risky13:29:28
@elvishjerricco:matrix.org@elvishjerricco:matrix.organd also not helpful for nixos-install13:29:40
@linus:schreibt.jetzt@linus:schreibt.jetzthm yeah13:30:36
@elvishjerricco:matrix.org@elvishjerricco:matrix.org btw I do use non-legacy mountpoints for initrd FSes, I just also have them in fileSystems with the zfsutil option :P 13:30:38
@linus:schreibt.jetzt@linus:schreibt.jetztright13:30:50
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgit's just nice to have mount.zfs handle turning properties into mount options, and to have the fs hierarchy so you can just make new datasets and have the mountpoints be inferred13:31:27
@linus:schreibt.jetzt@linus:schreibt.jetztyeah13:31:49
@linus:schreibt.jetzt@linus:schreibt.jetzt
[root@sol:~]# zfs list -Ho name | wc -l
277
13:32:12
@elvishjerricco:matrix.org@elvishjerricco:matrix.org (though I also have different datasets with mountpoint=/ canmount=off... 13:32:17
@linus:schreibt.jetzt@linus:schreibt.jetztI don't want to do that in nixos config lol13:32:19
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgyea...13:32:26
@linus:schreibt.jetzt@linus:schreibt.jetzt(ok, like half of that is podman image layers actually. But still)13:32:52
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgI believe ZFS's dracut module handles the stage 1 file systems by searching the pool for the bootfs property or its synonyms, and then also looking for child datasets that cover any critical mount points13:33:32
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgthat should be easy to do with nixos13:33:40
@elvishjerricco:matrix.org@elvishjerricco:matrix.org Linux Hackerman: https://openzfs.github.io/openzfs-docs/man/7/dracut.zfs.7.html?highlight=dracut 13:37:15
23 Mar 2023
@ckie:ckie.devckie (they/them) changed their display name from ckie (they/them; heavily limited keyboard usage, dictation or voice only) to ckie (they/them; limited keyboard usage, voice preferred).02:07:43
24 Mar 2023
@elvishjerricco:matrix.org@elvishjerricco:matrix.org looking over the networkd PR again, I've got two lingering questions. 1) Should the environment.etc thing be in there? I barely used it and it's not hard to work around its absence. 2) How can I best document the difference between boot.initrd.network.enable and boot.initrd.systemd.network.enable? It's similar to the difference between systemd.network.enable and networking.useNetworkd. The former simply turns on systemd-networkd, the latter also does some automatic configuration for networking.* things. Similarly, boot.initrd.systemd.network.enable just turns on systemd-networkd, and boot.initrd.network.enable also automatically configures DHCP on interfaces. 23:07:24
@colemickens:matrix.orgcolemickens(been carrying that pr a while) Does the latter option enable DHCP specifically or does it hoist the regular config into stage1? I thought it was the latter?23:33:57
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgit is not the latter23:34:21

Show newer messages


Back to Room ListRoom Version: 6