Tag archive
Declaratively create locked system users and groups with sysusers.d and systemd-sysusers — line types, UID pools, package hooks, credentials, and a hands-on lab.
Declaratively create, age-clean, and fix ownership of volatile paths with tmpfiles.d and systemd-tmpfiles — boot setup, clean timer, and service directory boundaries.
Enroll TPM2, FIDO2, and recovery keys into LUKS2 with systemd-cryptenroll — PCR binding, crypttab unlock lines, wipe-slot rotation, and safe headless recipes.
Claude Code in print mode denies writes outside its working directory with no prompt and no error. Here's why /tmp breaks headless pipelines and the fix.
Introspect and call systemd Varlink APIs with varlinkctl — resolve hosts, list methods, stream replies, tunnel over SSH, and serve sandboxed stdio tools as discoverable services.
Download, verify, import, and export machine, portable, sysext, and confext images with importctl and systemd-importd — tar, raw/qcow2, and OCI paths.
I tested systemd 261's mstack overlay tool: a one-layer stack with no rw/ folder mounts read-write and writes land straight in your source files, no warning given.
Boot real KVM guests from disk images or directories with systemd-vmspawn — networking, credentials, machined registration, ephemeral snapshots, and SSH over vsock.
A host that answers on no port while the kernel keeps logging is not failing memory. In OpenZFS before 2.4.4 and 2.3.9, zfs_fillpage() computes io_len = i_size - io_off in unsigned types: race an mmap read against an in-place truncate and the length
Where systemd is in the Linux boot process, what unit files are, and the two tools you'll use every day: systemctl and journalctl.
Extend /usr, /opt, and /etc at runtime with overlay-based system and configuration extension images — without portable service isolation or a full OS rebuild.
Before I touch a live configuration file, my hands type the same line on their own: cp -p file...