From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/2561 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Jeff Newsgroups: gmane.comp.sysutils.supervision.general Subject: what init systems do you use ? Date: Fri, 03 May 2019 02:53:21 +0200 Message-ID: <15692301556844801@iva7-b6ed732000ae.qloud-c.yandex.net> References: <11997211556565598@myt6-27270b78ac4f.qloud-c.yandex.net> Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="119917"; mail-complaints-to="usenet@blaine.gmane.org" To: supervision Original-X-From: supervision-return-2151-gcsg-supervision=m.gmane.org@list.skarnet.org Fri May 03 02:53:32 2019 Return-path: Envelope-to: gcsg-supervision@m.gmane.org Original-Received: from alyss.skarnet.org ([95.142.172.232]) by blaine.gmane.org with smtp (Exim 4.89) (envelope-from ) id 1hMMSB-000Uw6-IH for gcsg-supervision@m.gmane.org; Fri, 03 May 2019 02:53:31 +0200 Original-Received: (qmail 3241 invoked by uid 89); 3 May 2019 00:53:54 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm Original-Sender: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Original-Received: (qmail 3233 invoked from network); 3 May 2019 00:53:54 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1556844802; bh=2vg1vyRvd6bR3HpAMAEcd97zzNEFXLvwXSFOP3rX2oM=; h=Message-Id:Subject:In-Reply-To:Date:References:To:From; b=PjKavMHVJ4fQOpXV+fonzP3Qn5RPi7KwN3BJ2Thq4z3dIfX/JuwISzXU05T0E6kNf 2wz28nbH+g8MsvH96TCwsM3991bP0NG988CRqKYPMBVt4sywA0yHBxTuVvR144JJF+ YFF2BnoBTKu2kILZqTGKeJg01PrJ1Da7pYjj8aQg= Authentication-Results: mxback3j.mail.yandex.net; dkim=pass header.i=@yandex.com In-Reply-To: X-Mailer: Yamail [ http://yandex.ru ] 5.0 Xref: news.gmane.org gmane.comp.sysutils.supervision.general:2561 Archived-At: thanks for the interesting links. > https://www.reddit.com/r/linux/comments/2dx7k3/s6_skarnetorg_small_secure_supervision_software/cjxc1hj/?context=3 nice exchange of arguments. > Do not mistake causes for consequences. Things are not correct > because s6 does them; s6 does things because they are correct. well i thought it inherited that behaviour from daemontool's svscan. no i understand that this was a totally wrong assumption. :PP > Then you are free to use one of the many incorrect inits out there, > including sinit, Rich Felker's init, dumb-init, and others. You are > definitely not alone with your opinion. i wrote such an init myself which did a bit more than the ones you mention. it ran REALLY fast. the only thing that was slow was my usage of a customized (older) version of OpenRC (since i have written some own openrc scripts (adding perp "support" et al) and am too lazy to write my own scripts currently). > However, you sound interested in process supervision indeed. it's just a question of where to put the supervisor. > if you subscribe to that idea, then you > will understand why init must supervise at least 1 process. ok, i understand your arguments and of course there is something true about it. > Maybe you've never bricked a device because init didn't respawn > anything. well, i bricked my desktop when doing init experiments. but almost immediatly after hosing the system it comes into my mind what exactly went wrong and i fix this on reboot. i was forced to reboot from a rescue dvd only once so far. ;-) (when testing "ninit" which i don't recommend) and it involved only mounting the root fs on disc rw and fixing some symlinks in /sbin (init et al), so this was no real problem so long as one has console access. that's why i wrote (/sbin/)testinit that forks, execs into the real init to test in process #1 and sleeps a while in the child process after which it kill()s process #1 with given signals. this works usually very well and is safe to do. > I have. The "rather artificial and constructed argument" > happened to me in real life, and it was a significant inconvenience. oh no, i hope it was not a remote server ... :-/ always try things out on a box you have console access to or in a vm. BTW: what init systems do this list's subscribers use ? i use statically linked (musl) BusyBox init (and gettys) + mksh (https://www.mirbsd.org/mksh.htm) + s6 + OpenRC (v0.34.11, outdated) as default init system. i also ran perp but now run everything to be supervised under s6, started via a little setup shell script directly from /etc/inittab (most "one time tasks" are indeed directly run from the inittab file instead of a shell script).