Linux runlevels and systemd targets don't have to be confusing.
Learn:
• Runlevel meanings (0–6)
• Systemd target mapping
• Multi-user vs graphical mode
• Checking current target
• Changing default boot mode
Read more:
https://www.linuxteck.com/systemd-targets-boot-modes-linux-explained/
#linuxteck #Linux #Systemd #RHEL #SysAdmin #DevOps #LinuxLearning
2️⃣3️⃣ Here's the 23rd post highlighting key new features of the recently released v261 release of systemd. #systemd261 #systemd
systemd-sysext is a tool in systemd's toolset that allows overlaying disk images over /usr/ in order to extend the OS vendor tree with additional resources, extending the base functionality of the base OS image. It comes with a counterpart for /etc/ called systemd-confext.
The tools can drop in any file whatsoever ultimately, however so far they weren't great for…
Ich nutze das neue (gebrauchte) #T570 aktuell für Tests von $Dingen, die ich mir auf meinen sonstigen Systemen (noch) nicht traue. Schön ist, das es halbwegs aktuelle #Hardware ist.
Aktuell teste ich die Absicherung der Boot-Chain und die Verschlüsselung der Systempartition mit #LUKS + #clevis + #systemd + #TPM2 + #SecureBoot.
Ich habe lange über die Sinnhaftigkeit gezweifelt, aber mittlerweile verstehe ich das Konzept etwas besser. Praxiserfahrung hilft mir da enorm.
Aktuell habe ich die Kombination einer 6-stelligen PIN mit dem TPM2 des #Notebooks, um die Partition zu entschlüsseln. Da erscheint mir momentan ein ausreichender Kompromis zwischen Sicherheit und Nutzbarkeit.
Jetzt schaue ich mal, wie sich das mittelfristig im Betrieb schlägt. Vor allem, ob es zu Fehlern bei Upgrades kommt, die mir potentiell den Zugriff auf das System kaputt machen könnten.
systemd-bsod.service
https://www.freedesktop.org/software/systemd/man/257/systemd-bsod.service.html
Как reload ingress-nginx уронил прод. История про pids.max, threads-max и виртуалку, которая подросла
Схема входящего траффика в кластер Kubernetes простая: web → Envoy Gateway → Ingress Nginx → backend . За Ingress Nginx, помимо обычного HTTP, живут долгоживущие WebSocket-соединения. Штатная нагрузка - около 100 RPS. Ничего экзотического. В один прекрасный день всё в кластере легло. Клиенты получают 503/500. В логах Envoy - флаг UF и upstream_reset_before_response_started{connection_timeout} . То есть ingress-nginx просто перестал отвечать. Дальше - два часа разбора и довольно красивая цепочка причин, которая началась с банального reload, а закончилась на том, как ядро считает лимит потоков при старте виртуалки.
https://habr.com/ru/articles/1050478/
#kubernetes #ingressnginx #postmortem #threadsmax #pidsmax #systemd #websocket #sre
Предистория Схема входящего траффика в кластер Kubernetes простая: web → Envoy Gateway → Ingress Nginx → backend . За Ingress Nginx, помимо обычного HTTP, живут долгоживущие WebSocket-соединения....
KaOS 2026.06 RC: التوزيعة المستقلة تتخلى عن systemd وتتبنى Dinit و Niri
أصدرت KaOS الإصدار التجريبي 2026.06 RC، الذي يمثل خطوة جذرية في مسار التوزيعة. تتخلى عن systemd كمدير تهيئة وخدمات، وتستبدله بـ Dinit، مع استبدال KDE Plasma بـ Niri/Noctalia في صورة النظام، واعتماد greetd و Limine، مع...
🔗 https://salehgnutux.github.io/GT-NEWSTECH/ar/gnulinux/kaos-dinit-2026-rc/
#KaOS #Dinit #systemd #توزيعات_لينكس #KDE_Plasma #Niri #Noctalia #gnutux
quicktipp #114: How to utilize systemd socket activation with a Go HTTP service.
This is a resource-friendly alternative to running web apps on Desktops without needing things like Electron.
There's a long read about it here: https://poweruser.blog/socket-activation-for-a-go-http-service-part-1-on-linux-with-systemd-0e530ed463a3
@acirep
I'd like to do the same, but am struggling with testing how to move the stuff I do in #docker over to something suitable in #freebsd15
Because some of the containers are not of my own making, I'm going to have to learn quite a bit to reproduce them and the security within them for #vpns etc.
I'm still interested in trying to see if #freebsd15 can be an option for me, but I'm also going through a handful of options in #linux with #systemd free distros and trying to stay away from the likes of #wayland and #pipewire also.
Current favourite is #artixlinux as they have made the effort to decouple the pid1 init system with additional packages for some of the daemon-type services. I like #dinit a lot, but am also testing #openrc too.
Asked around a bit about #systemd v261 new weak reference usage for glibc syscall wrappers and nobody can say why this is even desirable.
Implementation PR: https://github.com/systemd/systemd/pull/42065
This needed a few fixes afterwards, for example on 32bit archs with 64bit time_t - https://github.com/systemd/systemd/pull/42270
But overall this seems like a problem one should just not have?
1/n
For libc syscall wrappers (pidfd_open, fsopen, openat2, etc.) we previously gated the calls behind build-time HAVE_* checks. Replace these with weak external references, falling back to the raw sys...
LinuxTeck
Lennart Poettering
Paula Gentle on Friendica 🇺🇦
Lobsters
Habr
GNUTUX
Chris
Mason Pines
Jarkko Sakkinen
ch2500