New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Debian Templates: get rid of redundant (systemd) services #1928

Closed
adrelanos opened this Issue Apr 22, 2016 · 3 comments

Comments

Projects
None yet
5 participants
@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong Aug 25, 2016

Member

On 2016-08-22 08:37, johnyjukya@[...].org wrote:

I notice in the debian-8 template that network time synchronization seems
to be on by default in systemd.

systemd-timesyncd.service loaded active running Network Time
Synchronization
time-sync.target loaded active active System Time Synchronized

It's disabled in fedora-23 by default, and rightly so, as I believe it's
unnecessary given the dom0 driven /etc/qubes-rpc/qubes.SetDateTime
mechanism, and it's kind of "leaky" sending requests unnecessarily to the
Internet.

Paranoidly yours,

JJ

Member

andrewdavidwong commented Aug 25, 2016

On 2016-08-22 08:37, johnyjukya@[...].org wrote:

I notice in the debian-8 template that network time synchronization seems
to be on by default in systemd.

systemd-timesyncd.service loaded active running Network Time
Synchronization
time-sync.target loaded active active System Time Synchronized

It's disabled in fedora-23 by default, and rightly so, as I believe it's
unnecessary given the dom0 driven /etc/qubes-rpc/qubes.SetDateTime
mechanism, and it's kind of "leaky" sending requests unnecessarily to the
Internet.

Paranoidly yours,

JJ

@adrelanos

This comment has been minimized.

Show comment
Hide comment
@adrelanos

adrelanos Aug 25, 2016

Member

#1928 (comment) --> systemd-timesyncd -> Debian templates: disable systemd-timesyncd [regression]-> #2188

Member

adrelanos commented Aug 25, 2016

#1928 (comment) --> systemd-timesyncd -> Debian templates: disable systemd-timesyncd [regression]-> #2188

@marmarek marmarek modified the milestones: Release 4.0, Release 3.2 Nov 19, 2016

@unman unman referenced this issue in QubesOS/qubes-builder-debian Feb 14, 2017

Merged

Remove name of build machine #7

@unman

This comment has been minimized.

Show comment
Hide comment
@unman

unman Feb 15, 2017

Member

A default Debian install brings with it rpcbind, exim4 and avahi.
I see little sense in having these running in all TemplaeBasedVMs, so it seems natural to disable them in the default Template.
@marmarek Would there be any objection to including constraints for all these in core-agent-linux? That seems a natural place.
afaik these services aren't installed (or perhaps just aren't started) in Fedora templates.

Member

unman commented Feb 15, 2017

A default Debian install brings with it rpcbind, exim4 and avahi.
I see little sense in having these running in all TemplaeBasedVMs, so it seems natural to disable them in the default Template.
@marmarek Would there be any objection to including constraints for all these in core-agent-linux? That seems a natural place.
afaik these services aren't installed (or perhaps just aren't started) in Fedora templates.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment