Systemd for Embedded Linux. Challenges and Opportunities

Similar documents
Syslog & xinetd. Stephen Pilon

Terminal Server Guide

OpenShift. OpenShift platform features. Benefits Document. openshift. Feature Benefit OpenShift. Enterprise

HIPAA Compliance Use Case

Embedded Linux development with Buildroot training 3-day session

Configuring MassTransit Server to listen on ports less than 1024 using WaterRoof on Macintosh Workstations

How To Set Up An Ip Firewall On Linux With Iptables (For Ubuntu) And Iptable (For Windows)

Adafruit's Raspberry Pi Lesson 7. Remote Control with VNC

MyPBX Security Configuration Guide

Alert Logic Log Manager

Remote Unix Lab Environment (RULE)

Secure Network Filesystem (Secure NFS) By Travis Zigler

SECURE YOUR NETWORK WITH FIREWALL BUILDER

Automating client deployment

Snow Inventory. Installing and Evaluating

Track 2 Workshop PacNOG 7 American Samoa. Firewalling and NAT

System Management. Leif Nixon. a security perspective 1/37

Print Audit 6 Network Installation Guide

Pen Test Tips 2. Shell vs. Terminal

VPN: Virtual Private Network Setup Instructions

{jatabs type="content" position="top" width="600" mousetype="click" animtype="none" skipanim="false" duration=200}

Wicked A Network Manager Olaf Kirch

CSE 265: System and Network Administration

defacto installation guide

enetworks TM Using the Syslog Feature C.1 Configuring the Syslog Feature

TightVNC for Windows: Installing from MSI Packages

Microsoft Office 365 Exchange Online Cloud

SiteManager. Air-Site s advanced facility management system

Red Hat Linux Administration II Installation, Configuration, Software and Troubleshooting

Mobile application development with QML & PySide

First Steps after Installation Guide

Firewalls. October 23, 2015

Kaspersky Endpoint Security 8 for Linux INSTALLATION GUIDE

Assignment # 1 (Cloud Computing Security)

Securing Linux Servers Best Practice Document

Using Red Hat Enterprise Linux with Georgia Tech's RHN Satellite Server Installing Red Hat Enterprise Linux

New Products and New Features May, 2015

Red Condor Syslog Server Configurations

Introduction. Editions

Secure Proxy Server Installation Guide

Managed VoIP platform for delivering business class features to your clients. Deliver reliable Voice Over IP service without licensing costs

DeployStudio Server Quick Install

Citrix EdgeSight for Load Testing User s Guide. Citrx EdgeSight for Load Testing 2.7

W H I T E P A P E R. Best Practices for Building Virtual Appliances

Using TU Eindhoven's VPN with Ubuntu 14.04

Eclipse Summit Europe 2008

Release Notes for McAfee(R) VirusScan(R) Enterprise for Linux Version Copyright (C) 2014 McAfee, Inc. All Rights Reserved.

ISLET: Jon Schipp, Ohio Linux Fest An Attempt to Improve Linux-based Software Training

GL-250: Red Hat Linux Systems Administration. Course Outline. Course Length: 5 days

VHA Innovations Program Future Technology Laboratory. Linux Workstation Remote Desktop Connection Manual

Plesk 11 Manual. Fasthosts Customer Support

SUPEROFFICE 7 ONLINE. t e s t s

Firewalls. Firewall types. Packet filter. Proxy server. linux, iptables-based Windows XP s built-in router device built-ins single TCP conversation

Firebird on Linux. Author: Philippe Makowski IBPhoenix Licence: Public Documentation License Date:

Hardened Hosting. Quintin Russ. OWASP New Zealand Chapter th December 2011

BeagleBone Black: Installing Operating Systems

Cloud Security with Stackato

NGASI Shared-Runtime Manager Administration and User Guide WebAppShowcase DBA NGASI

Understanding Task Scheduler FIGURE Task Scheduler. The error reporting screen.

TIBCO Silver Fabric Continuity User s Guide

ENTERPRISE LINUX SYSTEM ADMINISTRATION

URL:

Click Studios. Passwordstate. Password Discovery, Reset and Validation. Requirements

OroTimesheet 7 Installation Guide

UltraLog HSPI User s Guide

Network Power Manager. User Manual

Setting Up the Site Licenses

Author A.Kishore/Sachin VNC Background

Toolbox Overview Guide Extensive Testing

Network Install Guide

RH033 Red Hat Linux Essentials or equivalent experience with Red Hat Linux..

Phoronix Test Suite v5.8.0 (Belev)

Syslog (Centralized Logging and Analysis) Jason Healy, Director of Networks and Systems

IMAPing 3.0 Administrator s Guide

Netwatch Installation For Windows

Workshop for WebLogic introduces new tools in support of Java EE 5.0 standards. The support for Java EE5 includes the following technologies:

INTELLECT TM Software Package

Administration of Soft IOCs under Linux

User s Guide. SNMPWEBCARD Firmware Version through Revision A

Notice: Don t disconnect USB VoIP Phone when Linux is running, or else maybe keyboard will be disabled until restart.

STAR ENTERPRISE - Information Technology Is Our Universe! STAR Device Monitor

Enterprise Content Management System Monitor. Server Debugging Guide CENIT AG Bettighofer, Stefan

How To Sync Quickbooks With Qvinci.Com On A Pc Or Macbook Or Mac Book (For A Webbook) With A Flashbook (For An Ubuntu Account) With An Ipo (For Macbook) On A Mac

Specifications. What s Inside The box

Lync 2013 Customer Solution Case Study

identity management in Linux and UNIX environments

What s New in Propalms VPN 3.5?

TIBCO Spotfire Statistics Services Installation and Administration Guide. Software Release 5.0 November 2012

Addonics T E C H N O L O G I E S. NAS Adapter. Model: NASU Key Features

Creating a DUO MFA Service in AWS

DRG700 Quick Installation Guide. This guide applies to all DRG700 models

Understanding offline files

Deploying Ubuntu Server Edition. Training Course Overview. (Ubuntu LTS)

Quick-Start Guide. solo gateway

Red Hat System Administration 1(RH124) is Designed for IT Professionals who are new to Linux.

Print Audit 4 Network Install Guide

Features. The Samhain HIDS. Overview of available features. Rainer Wichmann

Pwn Plug Community Edition 1.1 Installation Guide

SSL Tunnels. Introduction

Fermilab Central Web Service Site Owner User Manual. DocDB: CS-doc-5372

Transcription:

Systemd for Embedded Linux Challenges and Opportunities Embedded Linux Conference Europe Düsseldorf, 2014-10-14 Michael Olbrich <m.olbrich@pengutronix.de> Slide 1 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Preconceptions about Systemd It's only for desktop and server systems. It's too big. Everything is different. I don't need all this extra... We have our own custom init system. Slide 2 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Anatomy of an Embedded System The Application! Slide 3 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Anatomy of an Embedded System The Application... There are actually multiple processes in the main application Login via ssh during development only Logging Network configuration Web server or other auxiliary servers Robustness / availability Slide 4 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Anatomy of an Embedded System What you sell is The Application Nobody cares about the rest until it breaks Use systemd to handle the ugly details Slide 5 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Service Manager vs. Service Launcher System V init: Fire and forget: just runs the init script No global automated failure handling Magic scripts Systemd: Declarative service description Less freedom than scripts Systemd knows what should happen and can detect problems Processes are monitored during the whole live time of a service Slide 6 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Reliability / Availability Restart failed services Reboot when restarting doesn't work Better failure detection with per service watchdog Resource management Slide 7 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Optional and On-Demand Services Problem: The ssh server is only needed during development Starting an extra server changes the startup sequence Solution: Systemd can listen on a port and start the server only when someone tries to connect Activation can depend e.g. on a special kernel command line option that is only used during development Slide 8 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Logging with Journald Catch-all log: dmesg, syslog and service stdout/stderr Basic journal on a tmpfs Optional journal on a persistent file system Built-in size limit, so no logrotate needed Slide 9 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Startup Notification Init systems need to know when a service is ready Use case: Hard dependencies between services Soft dependencies, e.g. delay things for smooth animations Implementation: Classic deamonizing Many steps needed Hard to get it right With systemd: sd_notify(0, "READY=1"); Slide 10 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Security It's easy to start services as a different user Integrated namespace handling Integration with several LSMs (SELinux, AppArmor,...)... Slide 12 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Network Configuration with Networkd? It works well for fixed configurations No support for wireless networks Configuration changes at runtime are not really supported It's rather new Let's see what the future brings Slide 13 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Starting with Systemd on Embedded Linux Choose an embedded Linux distribution that provides a recent version of systemd Read the systemd README! It contains all mandatory and optional requirements Kernel on embedded systems a often missing mandatory features Systemd 'feels' different. Take the time to familiarize yourself with it Slide 14 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Future Improved network configuration? Systemd-networkd is quite new. Where will it go? Kdbus? Possibilities for faster interprocess communication? Implications for the required Linux kernel version? Stateless Systems, Factory Reset, Golden Master Systems and systemd How do stateless systems and embedded systems with read-only rootfs fit together? Can we reuse golden master systems for in-system updates in embedded systems? Slide 15 - Pengutronix - http://www.pengutronix.de - 10/08/2014

Questions? Slide 16 - Pengutronix - http://www.pengutronix.de - 10/08/2014