source: general/sysutils/systemd.xml@ 6742509c

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 6742509c was 6742509c, checked in by Douglas R. Reno <renodr@…>, 4 years ago

Update to dbus-1.12.18
Update to libcap-2.36
systemd: Build for for GCC10 (patch instead of cflags)

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@23245 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 15.5 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!-- <!ENTITY systemd-download-http "http://anduin.linuxfromscratch.org/LFS/systemd-&systemd-version;-&systemd-stable;.tar.xz"> For whenever we move to a stable snapshot for backports -->
8 <!ENTITY systemd-download-http "https://github.com/systemd/systemd/archive/v&systemd-version;/systemd-&systemd-version;.tar.gz">
9 <!ENTITY systemd-download-ftp " ">
10 <!ENTITY systemd-md5sum "04f02d9841ea5992a16f6b03c873da28">
11 <!ENTITY systemd-size "8.6 MB">
12 <!ENTITY systemd-buildsize "246 MB (with tests)">
13 <!ENTITY systemd-time "2.1 SBU (with tests)">
14
15]>
16
17<sect1 id="systemd" xreflabel="Systemd-&systemd-version;" revision="systemd">
18 <?dbhtml filename="systemd.html"?>
19
20 <sect1info>
21 <othername>$LastChangedBy$</othername>
22 <date>$Date$</date>
23 </sect1info>
24
25 <title>Systemd-&systemd-version;</title>
26 <!-- Whenever we switch back to stable backports, make sure to add the systemd-stable reference back. -->
27
28 <indexterm zone="systemd">
29 <primary sortas="a-systemd">systemd</primary>
30 </indexterm>
31
32 <sect2 role="package">
33 <title>Introduction to systemd</title>
34
35 <para>
36 While <application>systemd</application> was installed when
37 building LFS, there are many features provided by the package that
38 were not included in the initial installation because
39 <application>Linux-PAM</application> was not yet installed.
40 The <application>systemd</application> package needs to be
41 rebuilt to provide a working <command>systemd-logind</command> service,
42 which provides many additional features for dependent packages.
43 </para>
44
45 &lfs91_checked;
46
47 <bridgehead renderas="sect3">Package Information</bridgehead>
48 <itemizedlist spacing="compact">
49 <listitem>
50 <para>
51 Download (HTTP): <ulink url="&systemd-download-http;"/>
52 </para>
53 </listitem>
54 <listitem>
55 <para>
56 Download (FTP): <ulink url="&systemd-download-ftp;"/>
57 </para>
58 </listitem>
59 <listitem>
60 <para>
61 Download MD5 sum: &systemd-md5sum;
62 </para>
63 </listitem>
64 <listitem>
65 <para>
66 Download size: &systemd-size;
67 </para>
68 </listitem>
69 <listitem>
70 <para>
71 Estimated disk space required: &systemd-buildsize;
72 </para>
73 </listitem>
74 <listitem>
75 <para>
76 Estimated build time: &systemd-time;
77 </para>
78 </listitem>
79 </itemizedlist>
80
81 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
82 <itemizedlist spacing="compact">
83 <listitem>
84 <para>
85 Required patch:
86 <ulink url="&patch-root;/systemd-&systemd-version;-gcc_10-fixes-1.patch"/>
87 </para>
88 </listitem>
89 </itemizedlist>
90
91 <bridgehead renderas="sect3">systemd Dependencies</bridgehead>
92
93 <bridgehead renderas="sect4">Required</bridgehead>
94 <para role="required">
95 <xref linkend="linux-pam"/>
96 </para>
97
98 <bridgehead renderas="sect4">Recommended Runtime Dependencies</bridgehead>
99 <para role="recommended">
100 <xref role="runtime" linkend="polkit"/>
101 </para>
102
103 <bridgehead renderas="sect4">Optional</bridgehead>
104 <para role="optional">
105 <xref linkend="btrfs-progs"/> <!-- homed may support it, see the C.E.-->
106 <xref linkend="curl"/>,
107 <xref linkend="cryptsetup"/>,
108 <xref linkend="git"/>,
109 <xref linkend="gnutls"/>,
110 <xref linkend="iptables"/>,
111 <xref linkend="libgcrypt"/>,
112 <xref linkend="libidn2"/>,
113 <xref linkend="libpwquality"/>,
114 <xref linkend="libseccomp"/>,
115 <xref linkend="libxkbcommon"/>,
116 <xref linkend="make-ca"/>,
117 <xref linkend="pcre2"/>,
118 <xref linkend="qemu"/>,
119 <xref linkend="valgrind"/>,
120 <xref linkend="zsh"/> (for the zsh completions),
121 <ulink url="http://sourceforge.net/projects/gnu-efi/">gnu-efi</ulink>,
122 <ulink url="https://www.kernel.org/pub/linux/utils/kernel/kexec/">kexec-tools</ulink>,
123 <ulink url="https://www.gnu.org/software/libmicrohttpd/">libmicrohttpd</ulink>,
124 <ulink url="http://lz4.github.io/lz4/">lz4</ulink>,
125 <ulink url="http://fukuchi.org/works/qrencode/">qrencode</ulink>,
126 <ulink url="http://sourceforge.net/projects/linuxquota/">quota-tools</ulink> and
127 <ulink url="https://pypi.python.org/pypi/Sphinx">Sphinx</ulink>
128 </para>
129
130 <bridgehead renderas="sect4">Optional (to rebuild the manual pages)</bridgehead>
131 <para role="optional">
132 <xref linkend="DocBook"/>,
133 <xref linkend="docbook-xsl"/>,
134 <xref linkend="libxslt"/>, and
135 <xref linkend="lxml"/> (to build the index of systemd manual pages)
136 </para>
137
138 <para condition="html" role="usernotes">User Notes:
139 <ulink url="&blfs-wiki;/systemd"/>
140 </para>
141 </sect2>
142
143 <sect2 role="installation">
144 <title>Installation of systemd</title>
145
146 <para>
147 Apply a patch to fix a build failure when building with GCC-10:
148 </para>
149
150<screen><userinput remap="pre">patch -Np1 -i ../systemd-&systemd-version;-gcc_10-fixes-1.patch</userinput></screen>
151
152
153 <para>
154 Remove an unneeded group,
155 <systemitem class="groupname">render</systemitem>, from the default udev
156 rules:
157 </para>
158
159<screen><userinput remap="pre">sed -i 's/GROUP="render", //' rules.d/50-udev-default.rules.in</userinput></screen>
160
161 <para>
162 Rebuild <application>systemd</application> by running the
163 following commands:
164 </para>
165
166<screen><userinput>mkdir build &amp;&amp;
167cd build &amp;&amp;
168
169meson --prefix=/usr \
170 --sysconfdir=/etc \
171 --localstatedir=/var \
172 -Dblkid=true \
173 -Dbuildtype=release \
174 -Ddefault-dnssec=no \
175 -Dfirstboot=false \
176 -Dinstall-tests=false \
177 -Dldconfig=false \
178 -Dman=auto \
179 -Drootprefix= \
180 -Drootlibdir=/lib \
181 -Dsplit-usr=true \
182 -Dsysusers=false \
183 -Drpmmacrosdir=no \
184 -Db_lto=false \
185 -Dhomed=false \
186 -Duserdb=false \
187 .. &amp;&amp;
188
189ninja</userinput></screen>
190<!-- Regarding homed and userdb, see the note below in Command Explanations-->
191
192 <note>
193 <para>
194 For the best test results, make sure you run the testsuite from
195 a system that is booted by the same
196 <application>systemd</application> version you are rebuilding.
197 </para>
198 </note>
199
200 <para>
201 To test the results, issue: <command>ninja test</command>. <!--One test,
202 <filename>udev-test</filename> (test 273) fails due to changes in
203 the Linux 5.3+ kernel. It does not affect the package's
204 functionality. NO LONGER APPLICABLE AS OF 244 -->
205 </para>
206
207<!--
208 <warning>
209 <para>
210 Installing the package will overwrite all files installed by
211 <application>systemd</application> in LFS. It is critical that
212 nothing uses either <application>systemd</application> or
213 <application>Udev</application> libraries during the installation.
214 The best way to ensure that these libraries are not being used is to
215 run the installation in rescue mode. To switch to rescue mode,
216 run the following command as the
217 <systemitem class="username">root</systemitem> user (from a TTY):
218 </para>
219
220<screen role="root"><userinput>systemctl isolate rescue.target</userinput></screen>
221 </warning>
222 Nobody has reported problems with this in years. Let's comment it. -->
223
224 <para>
225 Now, as the <systemitem class="username">root</systemitem> user:
226 </para>
227
228<screen role="root"><userinput>ninja install</userinput></screen>
229 <!-- No longer needed as of systemd-244.
230 <para>
231 Remove a configuration file that causes some problems with PID files:
232 </para>
233
234<screen role="root"><userinput>rm -fv /etc/sysctl.d/50-pid-max.conf</userinput></screen>
235 -->
236 </sect2>
237
238 <sect2 role="commands">
239 <title>Command Explanations</title>
240
241<!-- Not needed with the patch
242 <para>
243 <parameter>-Dc_args=-Wno-format-overflow</parameter>: Prevents an error
244 when building with <application>GCC 10</application>. The default is
245 <option>-Werror=format-overflow</option>,
246 which generates false positives. This switch may be used with previous
247 versions of GCC too.
248 </para>
249-->
250
251 <para>
252 <parameter>-Duserdb=false</parameter>: Removes a daemon that does not
253 offer any use under a BLFS configuration. If you wish to enable the
254 <application>userdbd</application> daemon, replace "false" with "true"
255 in the above meson command.
256 </para>
257
258 <para>
259 <parameter>-Dhomed=false</parameter>: Remove a daemon that does not offer
260 any use under a traditional BLFS configuration, especially using accounts
261 created with useradd. To enable systemd-homed, first ensure that you have
262 <xref linkend="cryptsetup"/> and <xref linkend="libpwquality"/>, and then
263 change "false" to "true" in the above meson command.
264 </para>
265
266 <!-- EDITORS NOTE: Explanation on removing userdbd and homed:
267 In BLFS, we do not fully support disk encryption. We offer instructions for
268 building 'cryptsetup' as a dependency, but we do not offer instructions for
269 actually configuring it. In addition, we generally do not include
270 functionality that could potentially conflict with other packages, or that
271 is not of any use to us (in an enterprise configuration using Thin Clients
272 or laptops with LUKS encryption, it could make sense though, but that isn't
273 the configuration that we natively support).
274
275 A few of the complications of systemd-homed include:
276 - SSH Logins
277 - Disk Space Assignments
278 - UID Assignments (chown() on login)
279 (See https://cfp.all-systems-go.io/media/homed-asg2019.pdf)
280
281 In an article I read when systemd-homed was originally unveiled, I remember
282 reading about systemd-homed causing problems with OpenSSH Private Key Auth
283 because the user would have to login at the console in order to unlock
284 their home directory, thus allowing the private key to be unlocked and
285 processed by OpenSSH. Since BLFS does not fully support encrypted disks,
286 and because systemd-homed is incompatible with our usage of useradd /
287 traditional UNIX users and groups, I advise that we take the following
288 approach to avoid any confusion:
289
290 - Leave the added Short Descriptions for homectl and userdbctl
291 - Add the above command explanations and restore the previous behavior
292
293 Should we decide to enable homed by default anytime in the future,
294 let's move cryptsetup to recommended or required.
295
296 I would be open to discussing this after the next systemd version when
297 systemd-homed has matured a bit more. -renodr -->
298
299 </sect2>
300
301 <sect2 role="configuration">
302 <title>Configuring systemd</title>
303
304 <para>
305 The <filename>/etc/pam.d/system-session</filename> file needs to
306 be modified and a new file needs to be created in order for
307 <command>systemd-logind</command> to work correctly. Run the following
308 commands as the <systemitem class="username">root</systemitem> user:
309 </para>
310
311<screen role="root"><userinput>cat &gt;&gt; /etc/pam.d/system-session &lt;&lt; "EOF"
312<literal># Begin Systemd addition
313
314session required pam_loginuid.so
315session optional pam_systemd.so
316
317# End Systemd addition</literal>
318EOF
319
320cat &gt; /etc/pam.d/systemd-user &lt;&lt; "EOF"
321<literal># Begin /etc/pam.d/systemd-user
322
323account required pam_access.so
324account include system-account
325
326session required pam_env.so
327session required pam_limits.so
328session required pam_unix.so
329session required pam_loginuid.so
330session optional pam_keyinit.so force revoke
331session optional pam_systemd.so
332
333auth required pam_deny.so
334password required pam_deny.so
335
336# End /etc/pam.d/systemd-user</literal>
337EOF</userinput></screen>
338
339<!--
340 <para>
341 At this point, you should reload the systemd daemon, and reenter
342 multi-user mode with the following commands (as the
343 <systemitem class="username">root</systemitem> user). If a desktop
344 manager is installed and you wish to reenter the graphical mode,
345 replace <userinput>multi-user.target</userinput> with
346 <userinput>graphical.target</userinput>:
347 </para>
348
349<screen role="root"><userinput>systemctl daemon-reexec
350systemctl start multi-user.target</userinput></screen>-->
351
352 <warning>
353 <para>
354 If upgrading from a previous version of systemd and an
355 initrd is used for system boot, you should generate a new initrd before
356 rebooting the system.
357 </para>
358 </warning>
359
360 </sect2>
361
362 <sect2 role="content">
363 <title>Contents</title>
364
365 <para>
366 A list of the installed files, along with their short
367 descriptions can be found at
368 <ulink url="&lfs-root;/chapter06/systemd.html#contents-systemd"/>.
369 </para>
370
371 <para>
372 Listed below are the newly installed libraries and directories
373 along with short descriptions.
374 </para>
375
376 <segmentedlist>
377 <segtitle>Installed Programs</segtitle>
378 <segtitle>Installed Libraries</segtitle>
379 <segtitle>Installed Directories</segtitle>
380
381 <seglistitem>
382 <seg>
383 <!-- maybe userdbd/userdbctl can go in LFS, try at next time -->
384 homectl (if <xref linkend="cryptsetup"/> is installed)
385 and userdbctl (optionally)
386 </seg>
387 <seg>
388 pam_systemd.so
389 (in <filename class="directory">/lib/security</filename>)
390 </seg>
391 <seg>
392 None
393 </seg>
394 </seglistitem>
395 </segmentedlist>
396
397 <variablelist>
398 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
399 <?dbfo list-presentation="list"?>
400 <?dbhtml list-presentation="table"?>
401
402 <varlistentry id="homectl">
403 <term><command>homectl</command></term>
404 <listitem>
405 <para>
406 is a tool to create, remove, change, or inspect a home directory
407 managed by <command>systemd-homed</command>; note that it's
408 useless for the classic UNIX users and home directories which
409 we are using in LFS/BLFS book
410 </para>
411 <indexterm zone="systemd homectl">
412 <primary sortas="b-homectl">homectl</primary>
413 </indexterm>
414 </listitem>
415 </varlistentry>
416
417 <varlistentry id="userdbctl">
418 <term><command>userdbctl</command></term>
419 <listitem>
420 <para>
421 inspect users, groups, and group memberships
422 </para>
423 <indexterm zone="systemd userdbctl">
424 <primary sortas="b-userdbctl">userdbctl</primary>
425 </indexterm>
426 </listitem>
427 </varlistentry>
428
429 <varlistentry id="pam_systemd">
430 <term><filename class="libraryfile">pam_systemd.so</filename></term>
431 <listitem>
432 <para>
433 is a PAM module used to register user sessions with the
434 <application>systemd</application> login manager,
435 <command>systemd-logind</command>.
436 </para>
437 <indexterm zone="systemd pam_systemd">
438 <primary sortas="c-pam_systemd">pam_systemd.so</primary>
439 </indexterm>
440 </listitem>
441 </varlistentry>
442
443 </variablelist>
444
445 </sect2>
446
447</sect1>
Note: See TracBrowser for help on using the repository browser.