← Feed

Posts

• Post #4438429

  2️⃣7️⃣ Here's the 27th post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd systemd-oomd is systemd's subsystem for optimizing system behaviour under memory pressure (i.e. shut down services to remedy memory pressure and similar). So far it has been applying very similar policies for dealing with pressure on all workload services on the system. With v261 we are extending the concepts around this considerably. systemd-oomd can no...

• Post #4438428

  I just finished my #systemd261 series of posts. And I now also prepped a blog story linking to every single one of them here: https://0pointer.net/blog/mastodon-stories-for-systemd-v261.html Make sure to stay tuned for the #systemd262 series, most likely starting already in a few weeks!

• Post #4438427

  We are hiring @ Amutable: https://amutable.com/careers

• Post #4438426

  We are hiring → https://amutable.com/careers ← this time with a technical job posting! #amutable #fedihire

• Post #3410771

  5️⃣ Here's the 5th installment of my series of posts highlighting key new features of the upcoming v256 release of systemd. I am pretty sure all of you are well aware of the venerable "sudo" tool that is a key component of most Linux distributions since a long time. At the surface it's a tool that allows an unprivileged user to acquire privileges temporarily, from within their existing login sessions, for just one command, or maybe for a subshell. "sudo" is very very...

• Post #2871943

  5️⃣ Here's the 5th post highlighting key new features of the upcoming v261 release of systemd. #systemd261 #systemd When we first put together systemd-boot, it supported only UAPI.1 Type #1 entries: small text files with separate lines for kernel, initrd, and a few other fields. Soon later we added Type #2 entries, i.e. UKIs that are self-descriptive and which you just drop in the right dir. They have nice security and robustness properties, but they also had drawbacks, because they were...

• Post #1495885

  RE: https://fosstodon.org/@allsystemsgo/116438059274250850 The best conference around, and this time with a heavy @amutable presence!

• Post #1032197

  Here's the second published video of my FOSDEM talks, about VM Integrations in systemd: https://video.fosdem.org/2026/h2213/G7VMEN-vm_integration_in_systemd.av1.webm one more to come, stay tuned. #systemd #fosdem #fosdem2026

• Post #1023612

  9️⃣ Here's the 9th post highlighting key new features of the upcoming v257 release of systemd. #systemd257 systemd has a powerful timer concept, that allows specification of calendar events (repetitive or not) in a relatively flexible, expressive way. When such a calendar timer elapses, the service unit associated with the timer unit gets activated. When it elapses again, it gets activated again, and so on. But what happens if a calendar timer elapses while the service is still running?

• Post #875857

  1️⃣7️⃣ Here's the 17th post highlighting key new features of the recently published v260 release of systemd. #systemd260 #systemd When generating disk images for secure environments – in particular Confidential Computing environments – it's often essential to pin a specific encrypted disk to an installation, to make it hard to swap out the properly protected disk with one with a much weaker protection. In episode 16 we already discussed one mechanism to enforce a tight but generic...

• Post #875855

  1️⃣8️⃣ Here's the 18th post highlighting key new features of the recently published v260 release of systemd. #systemd260 #systemd Accessing the journal is primarily done via journalctl. Since a long time it has optionally provided output in JSON mode. But a tool that can generate JSON output is so very close to a Varlink service! Starting v260, journalctl actually *is* a Varlink service, if you want. More specifically: you can now access the journal through a simple Varlink IPC interface…

• Post #875854

  RE: https://mastodon.social/@daandemeyer/116144059697098766 1️⃣9️⃣ Here's the 19th post highlighting key new features of the recently published v260 release of systemd. #systemd260 #systemd For this one, I am just gonna quote @daandemeyer about the delegation of multiuple UID ranges.

• Post #875853

  2️⃣0️⃣ Here's the 20th post highlighting key new features of the recently published v260 release of systemd. #systemd260 #systemd One ongoing project inside of systemd is to rework systemd-nspawn to not do its own namespacing/sandboxing but make it mostly just a frontend to systemd's own namespacing/sandboxing that is implemented for system services. The goal is to make it play a role similar to systemd-run: i.e. a command line tool that just allocates a transient service, and thus...

• Post #875852

  2️⃣1️⃣ Here's the 21st and last post highlighting key new features of the recently published v260 release of systemd. #systemd260 #systemd If you have been following this series of posts I am sure you recognized some repeating themes. One of them is the progressing Varlinkification of systemd's functionality. The last item on my list of features to post about for v260 is another one in this theme: "bootctl install" is what gets systemd-boot installed in your ESP....

• Post #875851

  I just finished my #systemd260 series of posts. And I now also prepped a blog story linking to every single one of them here: https://0pointer.net/blog/mastodon-stories-for-systemd-v260.html Make sure to stay tuned for the #systemd261 series, most likely starting already in a few weeks!

• Post #687306

  8️⃣ Here's the 8th post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd In the 4th posting of this current series, we introduced the new .mstack/ directory type, for putting together service and container trees from stacks of overlayed directory trees and bind mounts, all in a self-descriptive directory. In v260 there's also one major user of this new concept: the importctl tool gained a new "pull-oci" verb for downloa...

• Post #687305

  9️⃣ Here's the 9th post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd If you deploy systems and services, then beyond the general lifecycle management that systemd always did you typically also want some form of metrics monitoring/observability. There are various approach to this, but the most popular ones all operate with local agents that pull metrics out of local services, and make them available for centralized collection (prometheus, …).

• Post #616071

  Right on time to coincide with the end of the year I finished my #systemd259 series of posts. And I now also prepped a blog story linking to every single one of them here: https://0pointer.net/blog/mastodon-stories-for-systemd-v259.html Make sure to stay tuned for the #systemd260 series, most likely starting already in a few weeks! Also, happy new year! 🎇

• Post #608192

  Here's the first published video of my FOSDEM talks, about native OCI support in systemd: https://video.fosdem.org/2026/ua2118/ZKKQWC-native_oci_container_support_in_systemd.av1.webm two more to come, stay tuned. #systemd #fosdem #fosdem2026

• Post #600220

  6️⃣ Here's the 6th post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd One of the now-standard files that systemd introduces is the /usr/lib/os-release file. It contains various fields with meta information on the OS and the OS image your system is running. One of the fields in there is PRETTY_NAME= which contains the primary name of the OS for human consumption. It's a bit limited in some ways however. Given this is written…

• Post #600218

  Hey, lazy web. Together with AWS and Microsoft, we are working on adding some minimal, native IMDS support to systemd, given how ubiquitous the concept is in the cloud world these days. It's supposed to be fully automatic, and reasonably generic. i.e. all the cloud-specific info (i.e. how to detect the clouds, which URLs to use) are placed in systemd's hwdb database, so that the code itself can be kept generic. Right now the PR I prepped for this supports 5 major clouds. And I...

• Post #574087

  2️⃣ Here's the 2nd post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd systemd is adopting the IPC system in more and more places. One nice thing about Varlink is that it is conceptually close to HTTP, in its request/response semantics. This is on purpose to make bridging the web world and the low-level system world easy. @michaelvogt has beeing working on a Varlink/HTTP bridge in Rust, with various bells and whistles, including…

• Post #572602

  5️⃣ Here's the 5th post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd One of the fundamental operations one can execute on a systemd service is "reload", i.e. asking the service to reload its configuration, for example via "systemctl reload foobar.service". What precisely this triggers in the service code, is up to the developers to decide, but the assumption is that it rescans and parses its configuration f...

• Post #510363

  RE: https://mastodon.social/@amutable/115967747219090945 Today, we announce Amutable, our ✨ new ✨ company. We – @blixtra, @brauner, @davidstrauss, @rodrigo_rata, @michaelvogt, @pothos, @zbyszek, @daandemeyer, @cyphar, @jrocha and yours truly – are building the 🚀 next generation of Linux systems, with integrity, determinism, and verification – every step of the way. → https://amutable.com/blog/introducing-amutable ← #amutable #linux #systemd #⊼mutable #integrity

• Post #510359

  I don't often share Phoronix articles, but this one I will: https://www.phoronix.com/news/Amutable

• Post #460927

  It's that time again! The systemd v260 release is coming closer. Let's restart the "what's new" series of posts for this iteration! Hence: 1️⃣ Here's the 1st post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd In v259 we introduced the concept of "NvPCRs", i.e. additional TPM PCRs, that are implemented based on TPM NV Indexes in PCR mode, rather than true PCRs. PCRs are scarce, and t...

• Post #408514

  Here's the third published video of my FOSDEM talks, about the Varlink IPC system: https://video.fosdem.org/2026/ub2147/NFNKEK-varlink-ipc-system-keynote.av1.webm This was the last one of the three. Enjoy! #systemd #fosdem #fosdem2026