Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(24.04): systemd and dependencies #274

Merged
merged 17 commits into from
Aug 30, 2024

Conversation

Meulengracht
Copy link
Member

@Meulengracht Meulengracht commented Jul 5, 2024

Proposed changes

Add systemd slice and it's dependencies

Testing

Smoke testing mount

mkdir mount-root
chisel cut --root mount-root bash_bins coreutils_bins passwd_config base-files_base mount_bins
sudo chroot mount-root/
mkdir /proc
mount -t proc proc /proc
umount /proc

Smoke testing systemd

mkdir systemd-root
chisel cut --root systemd-root bash_bins coreutils_bins passwd_config base-files_base systemd_bins
sudo chroot systemd-root
mkdir /proc
mount -t proc proc /proc
systemctl enable [email protected]
systemctl disable [email protected]
systemctl preset-all
systemd --help
journalctl --update-catalog
umount /proc

Checklist

Copy link

github-actions bot commented Jul 5, 2024

Diff of dependencies:
None found.


@Meulengracht Meulengracht force-pushed the slices/systemd branch 5 times, most recently from e71981e to d2b90f5 Compare July 5, 2024 10:01
@cjdcordeiro cjdcordeiro requested a review from a team July 19, 2024 11:08
Copy link
Collaborator

@cjdcordeiro cjdcordeiro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks.

the checks are failing (systemd related I believe).

I also couldn't make the mount_bins slice work...can you provide a test case for that?

@Meulengracht
Copy link
Member Author

thanks.

the checks are failing (systemd related I believe).

I also couldn't make the mount_bins slice work...can you provide a test case for that?

I updated the description in the PR with a testing case

Copy link
Collaborator

@cjdcordeiro cjdcordeiro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. could you please put that into an integration test?

@Meulengracht Meulengracht force-pushed the slices/systemd branch 2 times, most recently from 9d783ef to 8081645 Compare August 1, 2024 10:04
@cjdcordeiro cjdcordeiro requested a review from a team August 5, 2024 08:30
@cjdcordeiro cjdcordeiro added the Priority Look at me first label Aug 5, 2024
@cjdcordeiro cjdcordeiro self-assigned this Aug 5, 2024
Copy link
Collaborator

@zhijie-yang zhijie-yang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. One thing worth noticing: adding the --cap-add SYS_ADMIN and --security-opt apparmor=confined would make the test runner vulnerable to malicious test cases. We must carefully review the spread tests from external contributors before we let them run.

Copy link
Member

@rebornplusplus rebornplusplus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very nice slices! Nice tests too!

I left a few comments below -- mostly about the systemd slices, with a few nitpicks here and there. Please let me know what you think about those.

slices/libargon2-1.yaml Outdated Show resolved Hide resolved
slices/libdevmapper1.02.1.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
@Meulengracht
Copy link
Member Author

@rebornplusplus this PR is ready for review

Copy link
Member

@rebornplusplus rebornplusplus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me overall. Only left a few nitpicks and questions.

Splendid job slicing the systemd package! (Other packages too) Took me a long while to review those systemd slices, I wonder what it must have taken you to write them in the first place.

slices/systemd.yaml Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Outdated Show resolved Hide resolved
slices/systemd.yaml Show resolved Hide resolved
slices/systemd.yaml Show resolved Hide resolved
@Meulengracht
Copy link
Member Author

@rebornplusplus @cjdcordeiro tests are now running with rebased on master with the lxd backend, the tests are restored, can we give this a review again?

Copy link
Member

@rebornplusplus rebornplusplus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me, thank you very much!

Let's settle on the nice.conf file in that thread however, before merging.

@Meulengracht
Copy link
Member Author

Meulengracht commented Aug 28, 2024

Looks good to me, thank you very much!

Let's settle on the nice.conf file in that thread however, before merging.

I found the file and added it in my last commit! Thanks for the reviews!

It seems the file may have been moved.

EDIT: added the correct path :-)

@cjdcordeiro cjdcordeiro merged commit c8b6fde into canonical:ubuntu-24.04 Aug 30, 2024
14 checks passed
vpa1977 added a commit to vpa1977/chisel-releases that referenced this pull request Aug 30, 2024
canonical#274
referenced libssecomp2 copyright instead of libmount1.
Use libmount1 copyright.
cjdcordeiro pushed a commit that referenced this pull request Aug 30, 2024
#274
referenced libssecomp2 copyright instead of libmount1.
Use libmount1 copyright.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Priority Look at me first
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants