source: general/sysutils/systemd.xml@ ccc69593

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since ccc69593 was ccc69593, checked in by Douglas R. Reno <renodr@…>, 4 years ago

Update to systemd-246
Restore libnl test suite information

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@23491 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 15.6 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!-- <!ENTITY systemd-download-http "http://anduin.linuxfromscratch.org/LFS/systemd-&systemd-version;-&systemd-stable;.tar.xz"> For whenever we move to a stable snapshot for backports -->
8 <!ENTITY systemd-download-http "https://github.com/systemd/systemd/archive/v&systemd-version;/systemd-&systemd-version;.tar.gz">
9 <!ENTITY systemd-download-ftp " ">
10 <!ENTITY systemd-md5sum "a3e9efa72d0309dd26513a221cdff31b">
11 <!ENTITY systemd-size "9.1 MB">
12 <!ENTITY systemd-buildsize "256 MB (with tests)">
13 <!ENTITY systemd-time "2.4 SBU (with tests)">
14
15]>
16
17<sect1 id="systemd" xreflabel="Systemd-&systemd-version;" revision="systemd">
18 <?dbhtml filename="systemd.html"?>
19
20 <sect1info>
21 <othername>$LastChangedBy$</othername>
22 <date>$Date$</date>
23 </sect1info>
24
25 <title>Systemd-&systemd-version;</title>
26 <!-- Whenever we switch back to stable backports, make sure to add the systemd-stable reference back. -->
27
28 <indexterm zone="systemd">
29 <primary sortas="a-systemd">systemd</primary>
30 </indexterm>
31
32 <sect2 role="package">
33 <title>Introduction to systemd</title>
34
35 <para>
36 While <application>systemd</application> was installed when
37 building LFS, there are many features provided by the package that
38 were not included in the initial installation because
39 <application>Linux-PAM</application> was not yet installed.
40 The <application>systemd</application> package needs to be
41 rebuilt to provide a working <command>systemd-logind</command> service,
42 which provides many additional features for dependent packages.
43 </para>
44
45 &lfs91_checked;
46
47 <bridgehead renderas="sect3">Package Information</bridgehead>
48 <itemizedlist spacing="compact">
49 <listitem>
50 <para>
51 Download (HTTP): <ulink url="&systemd-download-http;"/>
52 </para>
53 </listitem>
54 <listitem>
55 <para>
56 Download (FTP): <ulink url="&systemd-download-ftp;"/>
57 </para>
58 </listitem>
59 <listitem>
60 <para>
61 Download MD5 sum: &systemd-md5sum;
62 </para>
63 </listitem>
64 <listitem>
65 <para>
66 Download size: &systemd-size;
67 </para>
68 </listitem>
69 <listitem>
70 <para>
71 Estimated disk space required: &systemd-buildsize;
72 </para>
73 </listitem>
74 <listitem>
75 <para>
76 Estimated build time: &systemd-time;
77 </para>
78 </listitem>
79 </itemizedlist>
80
81<!-- Saving for the next time that we need a patch
82 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
83 <itemizedlist spacing="compact">
84 <listitem>
85 <para>
86 Required patch:
87 <ulink url="&patch-root;/systemd-&systemd-version;-gcc_10-fixes-2.patch"/>
88 </para>
89 </listitem>
90 </itemizedlist>
91-->
92
93 <bridgehead renderas="sect3">systemd Dependencies</bridgehead>
94
95 <bridgehead renderas="sect4">Required</bridgehead>
96 <para role="required">
97 <xref linkend="linux-pam"/>
98 </para>
99
100 <bridgehead renderas="sect4">Recommended Runtime Dependencies</bridgehead>
101 <para role="recommended">
102 <xref role="runtime" linkend="polkit"/>
103 </para>
104
105 <bridgehead renderas="sect4">Optional</bridgehead>
106 <para role="optional">
107 <xref linkend="btrfs-progs"/> <!-- homed may support it, see the C.E.-->
108 <xref linkend="curl"/>,
109 <xref linkend="cryptsetup"/>,
110 <xref linkend="git"/>,
111 <xref linkend="gnutls"/>,
112 <xref linkend="iptables"/>,
113 <xref linkend="libgcrypt"/>,
114 <xref linkend="libidn2"/>,
115 <xref linkend="libpwquality"/>,
116 <xref linkend="libseccomp"/>,
117 <xref linkend="libxkbcommon"/>,
118 <xref linkend="make-ca"/>,
119 <xref linkend="pcre2"/>,
120 <xref linkend="qemu"/>,
121 <xref linkend="valgrind"/>,
122 <xref linkend="zsh"/> (for the zsh completions),
123 <ulink url="http://sourceforge.net/projects/gnu-efi/">gnu-efi</ulink>,
124 <ulink url="https://www.kernel.org/pub/linux/utils/kernel/kexec/">kexec-tools</ulink>,
125 <ulink url="https://www.gnu.org/software/libmicrohttpd/">libmicrohttpd</ulink>,
126 <ulink url="http://lz4.github.io/lz4/">lz4</ulink>,
127 <ulink url="http://fukuchi.org/works/qrencode/">qrencode</ulink>,
128 <ulink url="http://sourceforge.net/projects/linuxquota/">quota-tools</ulink> and
129 <ulink url="https://pypi.python.org/pypi/Sphinx">Sphinx</ulink>
130 </para>
131
132 <bridgehead renderas="sect4">Optional (to rebuild the manual pages)</bridgehead>
133 <para role="optional">
134 <xref linkend="DocBook"/>,
135 <xref linkend="docbook-xsl"/>,
136 <xref linkend="libxslt"/>, and
137 <xref linkend="lxml"/> (to build the index of systemd manual pages)
138 </para>
139
140 <para condition="html" role="usernotes">User Notes:
141 <ulink url="&blfs-wiki;/systemd"/>
142 </para>
143 </sect2>
144
145 <sect2 role="installation">
146 <title>Installation of systemd</title>
147
148<!--
149 <para>
150 Apply a patch to fix a build failure when building with GCC-10 as well as
151 a segmentation fault in systemd-udevd on some platforms:
152 </para>
153
154<screen><userinput remap="pre">patch -Np1 -i ../systemd-&systemd-version;-gcc_10-fixes-2.patch</userinput></screen>
155-->
156
157 <para>
158 Remove an unneeded group,
159 <systemitem class="groupname">render</systemitem>, from the default udev
160 rules:
161 </para>
162
163<screen><userinput remap="pre">sed -i 's/GROUP="render", //' rules.d/50-udev-default.rules.in</userinput></screen>
164
165 <para>
166 Rebuild <application>systemd</application> by running the
167 following commands:
168 </para>
169
170<screen><userinput>mkdir build &amp;&amp;
171cd build &amp;&amp;
172
173meson --prefix=/usr \
174 --sysconfdir=/etc \
175 --localstatedir=/var \
176 -Dblkid=true \
177 -Dbuildtype=release \
178 -Ddefault-dnssec=no \
179 -Dfirstboot=false \
180 -Dinstall-tests=false \
181 -Dldconfig=false \
182 -Dman=auto \
183 -Drootprefix= \
184 -Drootlibdir=/lib \
185 -Dsplit-usr=true \
186 -Dsysusers=false \
187 -Drpmmacrosdir=no \
188 -Db_lto=false \
189 -Dhomed=false \
190 -Duserdb=false \
191 .. &amp;&amp;
192
193ninja</userinput></screen>
194<!-- Regarding homed and userdb, see the note below in Command Explanations-->
195
196 <note>
197 <para>
198 For the best test results, make sure you run the testsuite from
199 a system that is booted by the same
200 <application>systemd</application> version you are rebuilding.
201 </para>
202 </note>
203
204 <para>
205 To test the results, issue: <command>ninja test</command>. <!--One test,
206 <filename>udev-test</filename> (test 273) fails due to changes in
207 the Linux 5.3+ kernel. It does not affect the package's
208 functionality. NO LONGER APPLICABLE AS OF 244 -->
209 </para>
210
211<!--
212 <warning>
213 <para>
214 Installing the package will overwrite all files installed by
215 <application>systemd</application> in LFS. It is critical that
216 nothing uses either <application>systemd</application> or
217 <application>Udev</application> libraries during the installation.
218 The best way to ensure that these libraries are not being used is to
219 run the installation in rescue mode. To switch to rescue mode,
220 run the following command as the
221 <systemitem class="username">root</systemitem> user (from a TTY):
222 </para>
223
224<screen role="root"><userinput>systemctl isolate rescue.target</userinput></screen>
225 </warning>
226 Nobody has reported problems with this in years. Let's comment it. -->
227
228 <para>
229 Now, as the <systemitem class="username">root</systemitem> user:
230 </para>
231
232<screen role="root"><userinput>ninja install</userinput></screen>
233 <!-- No longer needed as of systemd-244.
234 <para>
235 Remove a configuration file that causes some problems with PID files:
236 </para>
237
238<screen role="root"><userinput>rm -fv /etc/sysctl.d/50-pid-max.conf</userinput></screen>
239 -->
240 </sect2>
241
242 <sect2 role="commands">
243 <title>Command Explanations</title>
244
245<!-- Not needed with the patch
246 <para>
247 <parameter>-Dc_args=-Wno-format-overflow</parameter>: Prevents an error
248 when building with <application>GCC 10</application>. The default is
249 <option>-Werror=format-overflow</option>,
250 which generates false positives. This switch may be used with previous
251 versions of GCC too.
252 </para>
253-->
254
255 <para>
256 <parameter>-Duserdb=false</parameter>: Removes a daemon that does not
257 offer any use under a BLFS configuration. If you wish to enable the
258 <application>userdbd</application> daemon, replace "false" with "true"
259 in the above meson command.
260 </para>
261
262 <para>
263 <parameter>-Dhomed=false</parameter>: Remove a daemon that does not offer
264 any use under a traditional BLFS configuration, especially using accounts
265 created with useradd. To enable systemd-homed, first ensure that you have
266 <xref linkend="cryptsetup"/> and <xref linkend="libpwquality"/>, and then
267 change "false" to "true" in the above meson command.
268 </para>
269
270 <!-- EDITORS NOTE: Explanation on removing userdbd and homed:
271 In BLFS, we do not fully support disk encryption. We offer instructions for
272 building 'cryptsetup' as a dependency, but we do not offer instructions for
273 actually configuring it. In addition, we generally do not include
274 functionality that could potentially conflict with other packages, or that
275 is not of any use to us (in an enterprise configuration using Thin Clients
276 or laptops with LUKS encryption, it could make sense though, but that isn't
277 the configuration that we natively support).
278
279 A few of the complications of systemd-homed include:
280 - SSH Logins
281 - Disk Space Assignments
282 - UID Assignments (chown() on login)
283 (See https://cfp.all-systems-go.io/media/homed-asg2019.pdf)
284
285 In an article I read when systemd-homed was originally unveiled, I remember
286 reading about systemd-homed causing problems with OpenSSH Private Key Auth
287 because the user would have to login at the console in order to unlock
288 their home directory, thus allowing the private key to be unlocked and
289 processed by OpenSSH. Since BLFS does not fully support encrypted disks,
290 and because systemd-homed is incompatible with our usage of useradd /
291 traditional UNIX users and groups, I advise that we take the following
292 approach to avoid any confusion:
293
294 - Leave the added Short Descriptions for homectl and userdbctl
295 - Add the above command explanations and restore the previous behavior
296
297 Should we decide to enable homed by default anytime in the future,
298 let's move cryptsetup to recommended or required.
299
300 I would be open to discussing this after the next systemd version when
301 systemd-homed has matured a bit more. -renodr -->
302
303 </sect2>
304
305 <sect2 role="configuration">
306 <title>Configuring systemd</title>
307
308 <para>
309 The <filename>/etc/pam.d/system-session</filename> file needs to
310 be modified and a new file needs to be created in order for
311 <command>systemd-logind</command> to work correctly. Run the following
312 commands as the <systemitem class="username">root</systemitem> user:
313 </para>
314
315<screen role="root"><userinput>cat &gt;&gt; /etc/pam.d/system-session &lt;&lt; "EOF"
316<literal># Begin Systemd addition
317
318session required pam_loginuid.so
319session optional pam_systemd.so
320
321# End Systemd addition</literal>
322EOF
323
324cat &gt; /etc/pam.d/systemd-user &lt;&lt; "EOF"
325<literal># Begin /etc/pam.d/systemd-user
326
327account required pam_access.so
328account include system-account
329
330session required pam_env.so
331session required pam_limits.so
332session required pam_unix.so
333session required pam_loginuid.so
334session optional pam_keyinit.so force revoke
335session optional pam_systemd.so
336
337auth required pam_deny.so
338password required pam_deny.so
339
340# End /etc/pam.d/systemd-user</literal>
341EOF</userinput></screen>
342
343<!--
344 <para>
345 At this point, you should reload the systemd daemon, and reenter
346 multi-user mode with the following commands (as the
347 <systemitem class="username">root</systemitem> user). If a desktop
348 manager is installed and you wish to reenter the graphical mode,
349 replace <userinput>multi-user.target</userinput> with
350 <userinput>graphical.target</userinput>:
351 </para>
352
353<screen role="root"><userinput>systemctl daemon-reexec
354systemctl start multi-user.target</userinput></screen>-->
355
356 <warning>
357 <para>
358 If upgrading from a previous version of systemd and an
359 initrd is used for system boot, you should generate a new initrd before
360 rebooting the system.
361 </para>
362 </warning>
363
364 </sect2>
365
366 <sect2 role="content">
367 <title>Contents</title>
368
369 <para>
370 A list of the installed files, along with their short
371 descriptions can be found at
372 <ulink url="&lfs-root;/chapter06/systemd.html#contents-systemd"/>.
373 </para>
374
375 <para>
376 Listed below are the newly installed libraries and directories
377 along with short descriptions.
378 </para>
379
380 <segmentedlist>
381 <segtitle>Installed Programs</segtitle>
382 <segtitle>Installed Libraries</segtitle>
383 <segtitle>Installed Directories</segtitle>
384
385 <seglistitem>
386 <seg>
387 <!-- maybe userdbd/userdbctl can go in LFS, try at next time -->
388 homectl (if <xref linkend="cryptsetup"/> is installed)
389 and userdbctl (optionally)
390 </seg>
391 <seg>
392 pam_systemd.so
393 (in <filename class="directory">/lib/security</filename>)
394 </seg>
395 <seg>
396 None
397 </seg>
398 </seglistitem>
399 </segmentedlist>
400
401 <variablelist>
402 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
403 <?dbfo list-presentation="list"?>
404 <?dbhtml list-presentation="table"?>
405
406 <varlistentry id="homectl">
407 <term><command>homectl</command></term>
408 <listitem>
409 <para>
410 is a tool to create, remove, change, or inspect a home directory
411 managed by <command>systemd-homed</command>; note that it's
412 useless for the classic UNIX users and home directories which
413 we are using in LFS/BLFS book
414 </para>
415 <indexterm zone="systemd homectl">
416 <primary sortas="b-homectl">homectl</primary>
417 </indexterm>
418 </listitem>
419 </varlistentry>
420
421 <varlistentry id="userdbctl">
422 <term><command>userdbctl</command></term>
423 <listitem>
424 <para>
425 inspects users, groups, and group memberships
426 </para>
427 <indexterm zone="systemd userdbctl">
428 <primary sortas="b-userdbctl">userdbctl</primary>
429 </indexterm>
430 </listitem>
431 </varlistentry>
432
433 <varlistentry id="pam_systemd">
434 <term><filename class="libraryfile">pam_systemd.so</filename></term>
435 <listitem>
436 <para>
437 is a PAM module used to register user sessions with the
438 <application>systemd</application> login manager,
439 <command>systemd-logind</command>.
440 </para>
441 <indexterm zone="systemd pam_systemd">
442 <primary sortas="c-pam_systemd">pam_systemd.so</primary>
443 </indexterm>
444 </listitem>
445 </varlistentry>
446
447 </variablelist>
448
449 </sect2>
450
451</sect1>
Note: See TracBrowser for help on using the repository browser.