4 ms·

Soooooo, I'm part of a CubeSat team and we use systemd. Extensively. We us their dbus library for our daemons to communicate, some of the ops is basically done

Soooooo, I'm part of a CubeSat team and we use systemd. Extensively. We us their dbus library for our daemons to communicate, some of the ops is basically done in service files. I have to get our systems people to write a paper on it. My experiences with systemd are pretty much perpendicular to what some people claim.

telmich 9y ago
It's not about claiming here, it's about experiences. I guess we should open up a youtube channel for filming our most catastrophic experiences with systemd, because otherwise somebody will claim again that its brokeness is just a claim ...
- chris_wot 9y ago
  Would have been good if the author did this in the original article.
- lima 9y ago
  Let me tell you about my most catastrophic experiences with sysv... I've had quite a few. Anecdotal evidence is useless. What you're suggesting is basically spreading FUD. Your article didn't point out a single actual issue with systemd. I run large scale VM infrastructure on a systemd distro (RHEL, in particular) and I've yet to encounter a single issue that was caused by systemd or, for that matter, any issue with systemd that wasn't easily resolved.
  - fao_ 9y ago
    > What you're suggesting is basically spreading FUD. Your article didn't point out a single actual issue with systemd. That doesn't mean that there aren't any. Also, FUD (as I understand it) is people spreading unfounded rumours, not people documenting their own experiences and problems with a piece of software. The intent is incomparable. If you are actually interested in tangible structural flaws in systemd, look no further: https://suckless.org/sucks/systemd https://suckless.org/sucks/systemd https://www.theregister.co.uk/2017/07/28/black_hat_pwnie_awards/ https://www.theregister.co.uk/2017/07/28/black_hat_pwnie_awa... Also, see how Poettering handled this zero day (Which grants root to any user with a numeral): https://github.com/systemd/systemd/issues/6237 https://github.com/systemd/systemd/issues/6237 HINT: He doesn't think it's a bug... The fact that this even fucking exists in the first damn place: https://latesthackingnews.com/2017/06/29/a-systemd-vulnerability-allows-attackers-hack-linux-machines-via-malicious-dns-response/ https://latesthackingnews.com/2017/06/29/a-systemd-vulnerabi... See also: http://without-systemd.org/wiki/index.php/Arguments_against_systemd http://without-systemd.org/wiki/index.php/Arguments_against_...
    - bennofs 9y ago
      > Which grants root to any user with a numeral This formulation may be misunderstood. The bug did not grant users root rights, it ignored the user= setting on a service if the service was intended to run as a user stating with a numeral. So you already needed to be root to create a service. The bug allows a service to run with more permissions than intended though.
- JdeBP 9y ago
  It appears that people are already using Twitter to do something similar. * https://twitter.com/Serianox_/status/922050013655650305 https://twitter.com/Serianox_/status/922050013655650305 * https://twitter.com/gibbon_/status/935786202724208641 https://twitter.com/gibbon_/status/935786202724208641 * https://twitter.com/ManChicken1911/status/931820892291608576 https://twitter.com/ManChicken1911/status/931820892291608576 * https://twitter.com/hawko2600/status/931082871187505153 https://twitter.com/hawko2600/status/931082871187505153 * https://twitter.com/RPaschedag/status/930860506256113666 https://twitter.com/RPaschedag/status/930860506256113666 * https://twitter.com/BoolKiRool/status/930422520074919936 https://twitter.com/BoolKiRool/status/930422520074919936 * https://twitter.com/infosecabaret/status/929069203193200640 https://twitter.com/infosecabaret/status/929069203193200640 * https://twitter.com/sirzeitgeist/status/925535140947922944 https://twitter.com/sirzeitgeist/status/925535140947922944 * https://twitter.com/saruspete/status/925182958012715009 https://twitter.com/saruspete/status/925182958012715009 * https://twitter.com/iMilnb/status/928260238322651136 https://twitter.com/iMilnb/status/928260238322651136 * https://twitter.com/patrick_mooney/status/936374590070185984 https://twitter.com/patrick_mooney/status/936374590070185984 * https://twitter.com/patrick_mooney/status/930929899686182912 https://twitter.com/patrick_mooney/status/930929899686182912 * https://twitter.com/patrick_mooney/status/930929899686182912 https://twitter.com/patrick_mooney/status/930929899686182912 * https://twitter.com/patrick_mooney/status/925026104972165120 https://twitter.com/patrick_mooney/status/925026104972165120 * https://twitter.com/patrick_mooney/status/925023617674461184 https://twitter.com/patrick_mooney/status/925023617674461184 * https://twitter.com/patrick_mooney/status/923815696894607360 https://twitter.com/patrick_mooney/status/923815696894607360 * https://twitter.com/warnecke/status/915010187932717056 https://twitter.com/warnecke/status/915010187932717056

telmich 9y ago

It's not about claiming here, it's about experiences. I guess we should open up a youtube channel for filming our most catastrophic experiences with systemd, because otherwise somebody will claim again that its brokeness is just a claim ...

chris_wot 9y ago
Would have been good if the author did this in the original article.
lima 9y ago
Let me tell you about my most catastrophic experiences with sysv... I've had quite a few. Anecdotal evidence is useless. What you're suggesting is basically spreading FUD. Your article didn't point out a single actual issue with systemd. I run large scale VM infrastructure on a systemd distro (RHEL, in particular) and I've yet to encounter a single issue that was caused by systemd or, for that matter, any issue with systemd that wasn't easily resolved.
- fao_ 9y ago
  > What you're suggesting is basically spreading FUD. Your article didn't point out a single actual issue with systemd. That doesn't mean that there aren't any. Also, FUD (as I understand it) is people spreading unfounded rumours, not people documenting their own experiences and problems with a piece of software. The intent is incomparable. If you are actually interested in tangible structural flaws in systemd, look no further: https://suckless.org/sucks/systemd https://suckless.org/sucks/systemd https://www.theregister.co.uk/2017/07/28/black_hat_pwnie_awards/ https://www.theregister.co.uk/2017/07/28/black_hat_pwnie_awa... Also, see how Poettering handled this zero day (Which grants root to any user with a numeral): https://github.com/systemd/systemd/issues/6237 https://github.com/systemd/systemd/issues/6237 HINT: He doesn't think it's a bug... The fact that this even fucking exists in the first damn place: https://latesthackingnews.com/2017/06/29/a-systemd-vulnerability-allows-attackers-hack-linux-machines-via-malicious-dns-response/ https://latesthackingnews.com/2017/06/29/a-systemd-vulnerabi... See also: http://without-systemd.org/wiki/index.php/Arguments_against_systemd http://without-systemd.org/wiki/index.php/Arguments_against_...
  - bennofs 9y ago
    > Which grants root to any user with a numeral This formulation may be misunderstood. The bug did not grant users root rights, it ignored the user= setting on a service if the service was intended to run as a user stating with a numeral. So you already needed to be root to create a service. The bug allows a service to run with more permissions than intended though.
JdeBP 9y ago
It appears that people are already using Twitter to do something similar. * https://twitter.com/Serianox_/status/922050013655650305 https://twitter.com/Serianox_/status/922050013655650305 * https://twitter.com/gibbon_/status/935786202724208641 https://twitter.com/gibbon_/status/935786202724208641 * https://twitter.com/ManChicken1911/status/931820892291608576 https://twitter.com/ManChicken1911/status/931820892291608576 * https://twitter.com/hawko2600/status/931082871187505153 https://twitter.com/hawko2600/status/931082871187505153 * https://twitter.com/RPaschedag/status/930860506256113666 https://twitter.com/RPaschedag/status/930860506256113666 * https://twitter.com/BoolKiRool/status/930422520074919936 https://twitter.com/BoolKiRool/status/930422520074919936 * https://twitter.com/infosecabaret/status/929069203193200640 https://twitter.com/infosecabaret/status/929069203193200640 * https://twitter.com/sirzeitgeist/status/925535140947922944 https://twitter.com/sirzeitgeist/status/925535140947922944 * https://twitter.com/saruspete/status/925182958012715009 https://twitter.com/saruspete/status/925182958012715009 * https://twitter.com/iMilnb/status/928260238322651136 https://twitter.com/iMilnb/status/928260238322651136 * https://twitter.com/patrick_mooney/status/936374590070185984 https://twitter.com/patrick_mooney/status/936374590070185984 * https://twitter.com/patrick_mooney/status/930929899686182912 https://twitter.com/patrick_mooney/status/930929899686182912 * https://twitter.com/patrick_mooney/status/930929899686182912 https://twitter.com/patrick_mooney/status/930929899686182912 * https://twitter.com/patrick_mooney/status/925026104972165120 https://twitter.com/patrick_mooney/status/925026104972165120 * https://twitter.com/patrick_mooney/status/925023617674461184 https://twitter.com/patrick_mooney/status/925023617674461184 * https://twitter.com/patrick_mooney/status/923815696894607360 https://twitter.com/patrick_mooney/status/923815696894607360 * https://twitter.com/warnecke/status/915010187932717056 https://twitter.com/warnecke/status/915010187932717056