Lennart Poettering

still not liking this because of the swap-in-luks case, which makes this impossible to properly check even on the local disk. i'd be fine with adding a pseudo mount option...

yeah, the race applies to all kinds of services.

also tracked on https://bugs.freedesktop.org/show_bug.cgi?id=50184

> This seems easy to fix because systemd can create the link once and only update it the next time a unit starts and gets a new invocation id, thus...

> Would replacing the socket with a file on a fuse filesystem the journal exposes be reasonable? The rationale is that we can safely collect metadata without any races. I'd...

@DemiMarie journald implements the BSD syslog proto. There are about a million implementations of the client side for that around, including in glibc. None of those send a pidfd of...

> The RFC quoted says _iterative_ (recursive) resolvers must query for DS in the parent _zone_ (i.e. the authoritative nameservers on the parent side of a delegation point). This is...

uh, we do not have any experience with podman, no idea how it actually sets up the container context. Please contact the podman and fedora communities for help. Please point...

> * clone systemd Container Dockerfiles repo: https://github.com/heywoodlh/dockerfiles/tree/master/systemd > > * build Dockerfile for any distro there, e.g. [Dockerfile.fedora](https://github.com/heywoodlh/dockerfiles/blob/master/systemd/Dockerfile.fedora): > `podman build -t systemd -f Dockerfile.fedora` this definitely doesn't work:...

> Podman is the default container runtime in Fedora, RHEL, and the other derivatives… It's certainly fairly popular now. So you personally may be not use it, but that's no...