!PSmBFWNKoXmlQBzUQf:helsinki-systems.de

Stage 1 systemd

82 Members
systemd in NixOs's stage 1, replacing the current bash tooling https://github.com/NixOS/nixpkgs/projects/5126 Servers

Load older messages


SenderMessageTime
27 Nov 2022
@me:linj.tech@me:linj.techinteresting, will try that later23:35:07
@elvishjerricco:matrix.org@elvishjerricco:matrix.org
In reply to @me:linj.tech
emm, what I want is somewhat weird: generate a keyfile on the fly for luks without storing that keyfile in initrd
I am curious what exactly you mean by this. If it's not randomly generated, then where is this key file you're actually trying to use?
23:36:07
@me:linj.tech@me:linj.tech
In reply to @elvishjerricco:matrix.org
I am curious what exactly you mean by this. If it's not randomly generated, then where is this key file you're actually trying to use?
mkdir -p ${luksKeyFileDir}
mount -t ramfs none ${luksKeyFileDir}
echo -n password > ${luksKeyFile}
chown 0:0 ${luksKeyFile}
chmod 0400 ${luksKeyFile}
23:37:14
@elvishjerricco:matrix.org@elvishjerricco:matrix.org so it is stored in the initrd? Just in the form of a script? 23:37:54
@me:linj.tech@me:linj.techI want to run that before unlocking luks23:37:58
@me:linj.tech@me:linj.techyeah23:38:53
30 Nov 2022
@chillermiller3:matrix.org@chillermiller3:matrix.org left the room.05:29:40
1 Dec 2022
@jkarlson:kapsi.fi@jkarlson:kapsi.fi changed their display name from Emil Karlson to Emil Thorsoe.08:20:44
@jkarlson:kapsi.fi@jkarlson:kapsi.fi changed their display name from Emil Thorsoe to Emil Thorsøe.08:25:10
@hexa:lossy.network@hexa:lossy.network changed their display name from hexa to hexa (22.11 now).13:08:44
@hexa:lossy.network@hexa:lossy.network changed their display name from hexa (22.11 now) to hexa.14:38:33
5 Dec 2022
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.de ElvishJerricco: did we have stripping enabled by default on 22.05 already? 18:29:44
@elvishjerricco:matrix.org@elvishjerricco:matrix.org Janne Heß: I don't remember how that panned out off the top of my head. I think we enabled stripping by default for initrd but not for shutdown ramfs? 18:31:13
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.deYeah that wasn't too great for some reason18:31:28
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.deMy Pi didn't boot because it couldn't load dm_mod because of: https://linux-tips.com/t/how-to-strip-linux-kernel-modules/47218:31:40
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.de(only took me 2 days to debug this - the kernel even hinted what could be the issue)18:31:55
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgYea we didn't want binutils in the runtime closure of a system. It's not needed at runtime for initrd but it would be for shutdown ramfs18:32:38
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.de hmm looks like we have always stripped, there was only a PR that made that fact configurable by Linux Hackerman 18:34:26
@janne.hess:helsinki-systems.de@janne.hess:helsinki-systems.dethis: https://github.com/NixOS/nixpkgs/commit/6fc909a1cc89b32c9bc27d69da6333b8a0d4b87e18:35:16
@elvishjerricco:matrix.org@elvishjerricco:matrix.org
In reply to @janne.hess:helsinki-systems.de
this: https://github.com/NixOS/nixpkgs/commit/6fc909a1cc89b32c9bc27d69da6333b8a0d4b87e
Right, and because the STRIP env variable isn't set when generating the shutdown ramfs, it doesn't depend on strip
18:37:35
6 Dec 2022
@mlyx:matrix.org@mlyx:matrix.org ElvishJerricco:
How to add postMountCommands in systemd initrd? It is very useful when kexec into a new kernel. https://github.com/nix-community/nixos-images/blob/36056317a6b32d4bf3377037c63bcac4d47bbc12/nix/kexec-installer/module.nix#L126
02:19:09
@mlyx:matrix.org@mlyx:matrix.org * ElvishJerricco:
How to add postMountCommands in systemd initrd? It is very useful when kexec into a new kernel and initrd. https://github.com/nix-community/nixos-images/blob/36056317a6b32d4bf3377037c63bcac4d47bbc12/nix/kexec-installer/module.nix#L126
02:20:47
@elvishjerricco:matrix.org@elvishjerricco:matrix.org mlyx: You would make a new initrd systemd service that has wantedBy = ["initrd.target"];. You also want the service to be ordered after file systems are mounted, but if you don't have DefaultDependencies=no, then it'll have After=local-fs.target by default anyway. But eventually we're going to change it so systemd-initrd uses initrd-fs.target like we're supposed to, which services don't get ordered after by default 02:23:40
@elvishjerricco:matrix.org@elvishjerricco:matrix.org The boot.initrd.systemd.services options are nearly identical to the systemd.services options 02:24:22
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgAw man. Decided to try out the networking PR on my desktop, but it doesn't work05:54:17
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgLooks like interfaces aren't being renamed to the "predictable" names.05:54:28
@elvishjerricco:matrix.org@elvishjerricco:matrix.org * Looks like interfaces aren't being renamed to the "predictable" names until stage 205:54:34
@elvishjerricco:matrix.org@elvishjerricco:matrix.orgWhat causes that in stage 2?05:54:39
@elvishjerricco:matrix.org@elvishjerricco:matrix.org Ok, the mere presence of ${systemd}/lib/systemd/network/99-default.link, regardless of whether it's linked anywhere in /etc, makes predictable names work 06:40:42
@elvishjerricco:matrix.org@elvishjerricco:matrix.org

Now I have two other problems.

  1. For some reason the DHCP server built into networkd that I use on my pi router requires my networkd clients to have dhcpV4Config.ClientIdentifier = "mac"; if I want static IPs to work. So now I have to configure that in initrd.

  2. For some reason systemd-timesync.service is failing in stage 2 now with Failed to allocate manager: Permission denied

06:44:28

Show newer messages


Back to Room ListRoom Version: 6