From 01c8938e54d73595f672f01b78ff6834e8312160 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 17 Nov 2017 11:39:14 +0100 Subject: [PATCH 1/3] README: document that prefix *must* be /usr and nss-systemd is not an option See: #7374 --- README | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README b/README index 835763dca8..14e6f3f70c 100644 --- a/README +++ b/README @@ -193,6 +193,16 @@ REQUIREMENTS: under all circumstances. In fact, systemd-hostnamed will warn if nss-myhostname is not installed. + nss-systemd must be enabled on systemd systems, as that's required for + DynamicUser= to work. Note that we ship services out-of-the-box that + make use of DynamicUser= now, hence enabling nss-systemd is not + optional. + + Note that the build prefix for systemd must be /usr. -Dsplit-usr=false + (which is the default and does not need to be specified) is the + recommended setting, and -Dsplit-usr=true should be used on systems + which have /usr on a separate partition. + Additional packages are necessary to run some tests: - busybox (used by test/TEST-13-NSPAWN-SMOKE) - nc (used by test/TEST-12-ISSUE-3171) From 9e93f6f09229ffdbc46abb4b0a9429a7bbdc1901 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 17 Nov 2017 11:39:48 +0100 Subject: [PATCH 2/3] README: slightly update the section about split /usr It's fine if /usr is actually on a separate fs. What matters is that it is mounted early enough. Say so. --- README | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/README b/README index 14e6f3f70c..c8ef449b8e 100644 --- a/README +++ b/README @@ -283,16 +283,16 @@ SYSV INIT.D SCRIPTS: needs to look like, and provide an implementation at the marked places. WARNINGS: - systemd will warn you during boot if /usr is on a different - file system than /. While in systemd itself very little will - break if /usr is on a separate partition, many of its - dependencies very likely will break sooner or later in one - form or another. For example, udev rules tend to refer to - binaries in /usr, binaries that link to libraries in /usr or - binaries that refer to data files in /usr. Since these - breakages are not always directly visible, systemd will warn - about this, since this kind of file system setup is not really - supported anymore by the basic set of Linux OS components. + systemd will warn during early boot if /usr is not already mounted at + this point (that means: either located on the same file system as / or + already mounted in the initrd). While in systemd itself very little + will break if /usr is on a separate, late-mounted partition, many of + its dependencies very likely will break sooner or later in one form or + another. For example, udev rules tend to refer to binaries in /usr, + binaries that link to libraries in /usr or binaries that refer to data + files in /usr. Since these breakages are not always directly visible, + systemd will warn about this, since this kind of file system setup is + not really supported anymore by the basic set of Linux OS components. systemd requires that the /run mount point exists. systemd also requires that /var/run is a symlink to /run. From 2422bd21c822a837bc42fe262f1bde47b5723953 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Mon, 20 Nov 2017 12:30:42 +0100 Subject: [PATCH 3/3] README,sysusers: complete and order list of default udev groups we need Let's make sure the list of default udev groups we need are ordered in README and in the sysusers.d snippet, and both are complete. --- README | 2 +- sysusers.d/basic.conf.in | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README b/README index c8ef449b8e..130141aaed 100644 --- a/README +++ b/README @@ -217,7 +217,7 @@ USERS AND GROUPS: even in the very early boot stages, where no other databases and network are available: - audio, cdrom, dialout, disk, input, kmem, lp, tape, tty, video + audio, cdrom, dialout, disk, input, kmem, kvm, lp, render, tape, tty, video During runtime, the journal daemon requires the "systemd-journal" system group to exist. New journal files will diff --git a/sysusers.d/basic.conf.in b/sysusers.d/basic.conf.in index 6c23f4216d..edaa3d91b0 100644 --- a/sysusers.d/basic.conf.in +++ b/sysusers.d/basic.conf.in @@ -28,11 +28,11 @@ g cdrom - - - g dialout - - - g disk - - - g input - - - -g lp - - - g kvm - - - +g lp - - - +g render - - - g tape - - - g video - - - -g render - - - # Default group for normal users g users - - -