- Arch-general - lists.archlinux.org

Re: [arch-general] systemd --test
by Wayne S 05 Nov '13

05 Nov '13

At 11/4/2013 10:43 AM, you wrote: >On Mon, Nov 4, 2013 at 4:07 PM, Wayne S <linux(a)zuik.net> wrote: >> my apologies for improperly sending email to list. >> >> My question is how to properly use systemd --test: >> >> From the website: http://www.freedesktop.org/wiki/Software/systemd/TipsAndTricks/ >> >> It suggests to run this to see what would execute on boot for a unit: >> >> # systemd --test --system --unit=multi-user.target >> >> If I run this as root, I get command not found. So it is not in $PATH. >> >> If I run as root I get don't run as root: >> >> # /usr/lib/systemd/systemd --test --system --unit=multi-user.target >> Don't run test mode as root. >> >> If I run as user, I get a bunch of errors: >> >> $ /usr/lib/systemd/systemd --test --system --unit=multi-user.target >> systemd 208 running in system mode. (+PAM -LIBWRAP -AUDIT -SELINUX -IMA -SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ) >> Failed to set hostname to <arch-t3400>: Operation not permitted >> Failed to open /dev/tty0: Permission denied >> Failed to create root cgroup hierarchy: Permission denied >> Failed to allocate manager object: Permission denied >> >> Is there a way to use this command properly? >> >> Wayne > >I'm not a systemd guru, but try 'systemctl list-dependencies multi-user.target'. Thanks, I did run that command but did not see, for instance, shorewall, in the list. Also '$man systemd' says --test can be used to "determine startup sequence, dump it and exit." for debugging purposes. Perhaps this can only be used during an actual system boot on the boot loader command line? Wayne

1 0

Re: [arch-general] systemd --test
by Karol Blazewicz 04 Nov '13

04 Nov '13

On Mon, Nov 4, 2013 at 4:07 PM, Wayne S <linux(a)zuik.net> wrote: > my apologies for improperly sending email to list. > > My question is how to properly use systemd --test: > > From the website: http://www.freedesktop.org/wiki/Software/systemd/TipsAndTricks/ > > It suggests to run this to see what would execute on boot for a unit: > > # systemd --test --system --unit=multi-user.target > > If I run this as root, I get command not found. So it is not in $PATH. > > If I run as root I get don't run as root: > > # /usr/lib/systemd/systemd --test --system --unit=multi-user.target > Don't run test mode as root. > > If I run as user, I get a bunch of errors: > > $ /usr/lib/systemd/systemd --test --system --unit=multi-user.target > systemd 208 running in system mode. (+PAM -LIBWRAP -AUDIT -SELINUX -IMA -SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ) > Failed to set hostname to <arch-t3400>: Operation not permitted > Failed to open /dev/tty0: Permission denied > Failed to create root cgroup hierarchy: Permission denied > Failed to allocate manager object: Permission denied > > Is there a way to use this command properly? > > Wayne I'm not a systemd guru, but try 'systemctl list-dependencies multi-user.target'.

3 2

[arch-general] systemd --test
by Wayne S 04 Nov '13

04 Nov '13

my apologies for improperly sending email to list. My question is how to properly use systemd --test: >From the website: http://www.freedesktop.org/wiki/Software/systemd/TipsAndTricks/ It suggests to run this to see what would execute on boot for a unit: # systemd --test --system --unit=multi-user.target If I run this as root, I get command not found. So it is not in $PATH. If I run as root I get don't run as root: # /usr/lib/systemd/systemd --test --system --unit=multi-user.target Don't run test mode as root. If I run as user, I get a bunch of errors: $ /usr/lib/systemd/systemd --test --system --unit=multi-user.target systemd 208 running in system mode. (+PAM -LIBWRAP -AUDIT -SELINUX -IMA -SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ) Failed to set hostname to <arch-t3400>: Operation not permitted Failed to open /dev/tty0: Permission denied Failed to create root cgroup hierarchy: Permission denied Failed to allocate manager object: Permission denied Is there a way to use this command properly? Wayne

1 0

[arch-general] SELinux packages status update
by Timothée Ravier 03 Nov '13

03 Nov '13

Hi, I've updated all the SELinux related packages in the AUR. I've changed most packages names to better fit with upstream names and AUR naming policy (selinux-pam -> pam-selinux; selinux-usr-libselinux -> libselinux). I'll keep the old ones a week or two, just in case, then I'll ask for deletion. I've only tested those packages in SELinux _disabled_ mode as currently there aren't any usable policy. I'll be working on this from now on. Status of core packages that requires patches or rebuild: * linux: rebuild. bug opened in the Arch bugtracker; * coreutils: rebuild (links with libselinux); * cronie: rebuild '--with-selinux' flag; * findutils: need SELinux patch, can be upstreamed, but is upstream still alive ? * openssh: rebuild '--with-selinux' flag; * pambase: configuration changes to add pam_selinux.so; * pam: rebuild '--enable-selinux' flag for Linux-PAM, patch for pam_unix2, which only removes a function already implemented in a library elsewhere. Is there an upstream here? I couldn't find one; * psmisc: small patch, already upstream. Will be in version 22.21; * shadow: rebuild '-lselinux' and '--with-selinux' flags; * sudo: rebuild '--with-selinux' flag; * systemd: rebuild '--enable-selinux' flag; * util-linux: rebuild '--with-selinux' flag; Total: 1 rebuild as-is, 8 rebuild with additional flags/config, 3 rebuild with patches required (with one already upstream and two potentially dead upstream). I think this looks good! Suggestions for packages are welcomed as AUR comments or issues on GitHub: https://github.com/Siosm/siosm-selinux A repository with signed packages for x86-64 only is available at http://repo.siosm.fr/siosm-selinux/ (See https://tim.siosm.fr/repositories/ if you need instructions or GPG public key). I'll also update the Arch Wiki SELinux page soon. I'll setup an other repository for the SELinux policy as soon as I have something which can boot in enforcing mode. Cheers, Tim

5 6

[arch-general] Revisit official SELinux support
by Karol Babioch 01 Nov '13

01 Nov '13

Hi, I'm wondering whether there was ever an actual discussion regarding the SELinux support within Arch. I could only find a bug report from September 2012 (see [1]), which was closed by Dave Reisner with kind of a lame comment: "A million times no.". After having dealt with SELinux on a couple of occasions I think that it is real security enhancement worth the initial hassle of setting it up properly (at least in a server environment). Looking into the support for SELinux in Arch I think it is way too messy to be actually used in practice (see [2]). I wouldn't go so far to suggest to enable SELinux by default as proposed in the bug report mentioned above, but I think it would actually make sense to support it - more or less - officially. I'm thinking about a model similar to the one implemented by Debian (see [3]). It basically comes down to installing some default policies and enabling SELinux by running a script. This would, however, require at least the stock kernel to have support for SELinux built-in by default. Are there any technical reasons for this not being the case already? I don't want this to become a discussion about the pros and cons of SELinux (on a desktop system) in general. I'm just wondering whether it would be feasible to implement "official" support for SELinux within Arch. So, if possible, please keep it technical. Best regards, Karol Babioch [1]: https://bugs.archlinux.org/task/31448 [2]: https://wiki.archlinux.org/index.php/SELinux [3]: https://wiki.debian.org/SELinux/Setup

11 16

[arch-general] mplayer2 deprecation
by kendell clark 01 Nov '13

01 Nov '13

hi all Since mplayer2 has been deprecated and moved to the aur, i've been trying to find another console video player that will play videos in full screen. I've tried mplayer and mpv, neither of which seem tow work. Browsing the arch wiki, I see I need kms enabled, so have set radeon.modeset=1 in my grub config file, and added radeon to the modules section of mkinitcpio.conf. After this, videos play, but only after adding fbdev2 to mplayer's config file, and only in a small box on screen, it won't stretch. Can anyone help me find a video player that will work? I have vlc for x, but I don't launch x that often. For now, I've used downgrade to install mplayer2 and it's old version of libquvi. I'll attach my .mplayer/config file for reference. Please note that when I'm using mplayer2, I don't select a video driver, mplayer picks the one that works, so I'm not at all sure which one ut's using. My system has an ati radeon hd4200 graphics card with the xf86-vide-ati package for x. I have no special configuration in x, I simply installed x, xfce, and x vlc, and the videos played. I hope this helps. Thanks Kendell clark

5 9

[arch-general] Wacom CTL480S support
by J. ~marahin M. 01 Nov '13

01 Nov '13

Heyah. I've got an simple question: how does Arch stand with the support for Wacom graphic tablets? Especially the CTL480S version. As I lurked through the forums, it might not be supported in the Kernel yet (~ src: linuxwacom), but they also said that it should've been granted support in mid-october. So my question is - how does it really look right now (and does anyone have *any* experience with that particular model)? My first mail to the list also. ;-) Have a nice day! -- *Humanitee.pl - Hosting dla Ciebie!* <http://humanitee.pl/> Marahin ~ Homespace <http://marahin.pl/> Projectspace (3lab) <http://3lab.re/> Twitter <http://twitter.com/3labMarahin>

2 4

[arch-general] fsck.f2fs and systemd
by Simon Perry 31 Oct '13

31 Oct '13

Hey all, I've been experimenting with f2fs, and see that the latest version of f2fs-tools now includes an actual fsck tool (not an exit 0 bash script). See below for the output I get from systemd when it tries to run fsck.f2fs on the root filesystem. Anyway, my questions are: - Is there any way to override how systemd does its fsck? I've tried poking around and overriding systemd-fsck-root.service and systemd-fsck@.service to no avail. Any advice on this? - Should systemd always expect an fsck tool to accept that the "-a" arg works, therefore an issue for f2fs-tools upstream, or should systemd be aware of this (therefore an upstream issue for systemd). Any hints / advice appreciated. Cheers. systemd-fsck[198]: fsck.f2fs: invalid option -- 'a' systemd-fsck[198]: Error: Unknown option ? systemd-fsck[198]: Usage: fsck.f2fs [options] device systemd-fsck[198]: [options]: systemd-fsck[198]: -d debug level [default:0] -- Simon Perry (aka Pezz)

2 1

[arch-general] Revisit official SELinux support
by Pablo Lezaeta Reyes 31 Oct '13

31 Oct '13

I noticed that you guys are discusing about SeLinux, so I find a link, maybe can by helpful in a minimal way or in the way [1] http://www.jamesthebard.net/site/archlinux-selinux-and-you-a-trip-down-the-… -- *Pablo Lezaeta*.

1 0

[arch-general] OBS or other package build server?
by Magnus Therning 30 Oct '13

30 Oct '13

I've once again lost access to the server I use to build [haskell-core], this time it's entirely my own doing :( So I'm once again looking around to see if there are any generally available build servers, but the only one I find is OBS[1] (in particular OpenSUSE's server[2]). Does anyone on the list have experience of using OBS for building packages for Arch Linux? Would OBS scale to building and maintaining about 200 Arch Linux packages? Are there any other options out there? /M [1]: http://openbuildservice.org/ [2]: http://en.opensuse.org/Portal:Build_Service -- Magnus Therning OpenPGP: 0xAB4DFBA4 email: magnus(a)therning.org jabber: magnus(a)therning.org twitter: magthe http://therning.org/magnus Don't worry about other people stealing your ideas. If your ideas are any good, you’ll have to ram them down people's throats. -- Howard Aiken, IBM Engineer

2 1