Commit Graph
2 Commits
Author SHA1 Message Date
Zbigniew Jędrzejewski-Szmek 5d0a953960 report-basic: lock down the service
The basic approach is copied from systemd-journal-gatewayd.service,
with some additions to lock down unneeded network access.
2026-04-01 16:38:14 +02:00
Zbigniew Jędrzejewski-Szmek b47139e489 report: move facts generator out of PID1 into a separate varlink service
The collection of facts is entirely unprivileged and has very little to
do with PID1. PID1 is privileged and single-threaded and a point of
contention, so we shouldn't put things in PID1 that don't need to be
there. A separate service can be enabled/disabled/started/stopped at
will, is easy to sandbox, etc. If it turns out to be necessary to
collect some facts through PID1 in the future, we can always add a
smaller facts endpoint to PID1 again.
2026-04-01 16:38:11 +02:00