Pid Eins

On June 19 we released systemd v261 into the wild.

On March 17 we released systemd v260 into the wild.

Today, we announce Amutable, our ✨ new ✨ company.

On Dec 17 we released systemd v259 into the wild.

Already on Sep 17 we released systemd v258 into the wild.

The All Systems Go!

Last week we released systemd v257 into the wild.

Yesterday evening we released systemd v256 into the wild.

This is a guest post written by Daan De Meyer, systemd and mkosi maintainer Almost 7 years ago, Lennart first wrote about mkosi on this blog.

The All Systems Go!

💽 Linux Boot Partitions and How to Set Them Up 🚀 Let’s have a look how traditional Linux distributions set up /boot/ and the ESP, and how this could be improved.

🔐 Brave New Trusted Boot World 🚀 This document looks at the boot process of general purpose Linux distributions.

TLDR: Hermetic /usr/ is awesome; let's popularize image-based OSes with modernized security properties built around immutability, SecureBoot, TPM2, adaptability, auto-updating, factory reset, uniformity – built from traditional distribution packages, but…

I recently blogged about how to run a volatile systemd-nspawn container from your host's /usr/ tree, for quickly testing stuff in your host environment, sharing your home drectory, but all that without making a single modification to your host, and on an…

Apparently, in some parts of this world, the /usr/-merge transition is still ongoing.

The Strange State of Authenticated Boot and Disk Encryption on Generic Linux Distributions TL;DR: Linux has been supporting Full Disk Encryption (FDE) and technologies such as UEFI SecureBoot and TPMs for a long time.

TL;DR: Tag your GPT partitions with the right, descriptive partition types, and the world will become a better place.

TL;DR: don't use select() + bump the RLIMIT_NOFILE soft limit to the hard limit in your modern programs.

TL;DR: It's now easy to unlock your LUKS2 volume with a FIDO2 security token (e.g.

The All Systems Go!

Portable Services Walkthrough (Go Edition) A few months ago I posted a blog story with a walkthrough of systemd Portable Services.

All Systems Go!

The All Systems Go!

The All Systems Go!

Portable Services with systemd v239 systemd v239 contains a great number of new features.

The All Systems Go!

The GNOME.Asia Summit 2017 organizers invited to me to speak at their conference in Chongqing/China, and it was an excellent event!

For those living under a rock, the videos from everybody's favourite Userspace Linux Conference All Systems Go!

TL;DR: systemd now can do per-service IP traffic accounting, as well as access control for IP address ranges.

TL;DR: you may now configure systemd to dynamically allocate a UNIX user ID for service processes when it starts them and release it when it stops them.

The All Systems Go!

The All Systems Go!

The All Systems Go!

Video of my casync Presentation @ kinvolk The great folks at kinvolk have uploaded a video of my casync presentation at their offices last week.

Introducing mkosi After blogging about casync I realized I never blogged about the mkosi tool that combines nicely with it. mkosi has been around for a while already, and its time to make it a bit better known. mkosi stands for Make Operating System Image,

Introducing casync In the past months I have been working on a new project: casync. casync takes inspiration from the popular rsync file synchronization tool as well as the probably even more popular git revision control system.

The All Systems Go!

Avoiding CVE-2016-8655 with systemd Just a quick note: on recent versions of systemd it is relatively easy to block the vulnerability described in CVE-2016-8655 for individual services.

systemd.conf 2016 is Over Now!

Tickets for systemd 2016 Workshop day still available!

A Preliminary systemd.conf 2016 Schedule is Now Available!

Please note that the systemd.conf 2016 Call for Participation ends on Monday, on Aug. 1st!

Please note that the systemd.conf 2016 Call for Participation ends in less than two weeks, on Aug. 1st!

The systemd.conf 2016 Call for Participation is Now Open!

Announcing systemd.conf 2016 We are happy to announce the 2016 installment of systemd.conf, the conference of the systemd project!

The Event Loop API of libsystemd When we began working on systemd we built it around a hand-written ad-hoc event loop, wrapping Linux epoll.

systemd.conf 2015 is Over Now!

Second Round of systemd.conf 2015 Sponsors We are happy to announce the second round of systemd.conf 2015 sponsors!

Only 14 tickets still available!

A Preliminary systemd.conf 2015 Schedule is Now Online!