[systemd-devel] generators, private /tmp

[James Muir (jamesmui)]

> > > > Hi everyone,
> > > >
> > > > The system manager (as of v253) executes generators in a sandbox with a fresh tmpfs mount on /tmp:
> > > >
> > > >   https://github.com/systemd/systemd/blob/a526b9ddfc03a290f20a65c0a73792e73029f1b8/src/core/manager.c#L4274
> > > >
> > > > Looking at the code, it appears that there is no way to disable that using, say, an environment variable or a config file setting.
> > > >
> > > > Is that correct?
> > >
> > > Yes.
> > >
> > > Generators run during earliest boot, where /tmp/ is quite likely not
> > > mounted yet, hence generators do not have access to the system's /tmp/
> > > and get a transient one.
> > >
> >
> > Thanks for your reply.
> >
> > Is my second statement also correct?
> >
> > i.e. is there no way to prevent mounting a private /tmp when executing generators using something like an environment variable or config setting?
>
> There is none.

I am considering preparing a patch that makes it configurable via system.conf.

e.g., "GeneratorsUsePrivateTmp=yes"

Would a contribution like that be welcome?

-James M

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/systemd-devel/attachments/20241127/e98fb07e/attachment.htm>