Systemd Is Not Magic Security Dust
I quite like systemd on my newer notebooks, hate it on servers. Different users (DWH != 1-person desktop installation) have different requirements.<p>@munin[0] did a pretty good illustration on why both pro&#x2F;con systemd camps might be right about their reasons:<p>→  So, systemd is kind of a perfect microcosm of all the &#x27;problematic&#x27; behavior in tech, all at the same time. It&#x27;s a project that is dedicated to novelty and a specific set of goals - mostly speed-centric - above all else. And, to its credit, it -does- make certain linux systems boot faster than other, competing init systems. However. First, the way in which systemd has progressed has taken specific advantage of certain problems in the open-source community. Namely, that there are many projects that have little or no attention paid to them, despite being infrastructurally critical.<p>→  So there is little desire by various linux distributors to make the effort to maintain them - and when someone shows up offering to replace and maintain that functionality, taking the responsibility off the already overworked maintainers&#x27; plate? That&#x27;s attractive.<p>→ Open source maintainers are always in a deep technical deficit trying to get these old bits and pieces maintained, so they&#x27;re eager to get the help, and don&#x27;t look too closely at what his &#x27;help&#x27; entails.<p>→ And unfortunately, what this &#x27;help&#x27; entails is the highly toxic systemd community - and I use &#x27;community&#x27; in the loosest sense, because it really works out to being a sort of cult, spearheaded by a specific individual with the ultimate power of acceptance or rejection over anyone else&#x27;s participation in the project.<p>→ Which is really unfortunate, because that guy&#x27;s got an ego the size of Manhattan. And he continually refuses to take criticism over his design and implementation choices - take a look at what&#x27;s left of any bug reports.<p>→ I say &quot;what&#x27;s left&quot; because he has a history of purging anything he considers to be &quot;un-useful&quot; - that is, critical - from the archives<p>→  Now, certainly, you -could- go ahead and fork the project! Except now you have a giant codebase and no community to work with to fix it. You could always convince the distros to abandon it! ...except you&#x27;re now up against a bunch of overworked people who, frankly, won&#x27;t care. And, worse, now that it&#x27;s a de-facto &#x27;standard&#x27; in the linux world, you have a whole lot of institutional inertia to work against to try to replace it, and - unlike when they replaced init - a dedicated group of people who are utterly convinced they&#x27;re doing the right things advocating against rolling back the changes. And, worse, there -are- some good points. SysVInit -is- grody as all get-out.<p>→  However, because of their dedication to novelty above all else, they&#x27;re making not only all the same mistakes sysvinit had to learn...<p>→ [ And because of ego, rejecting these mistakes as being &#x27;un-useful criticism&#x27; ]<p>→ But they&#x27;re making whole new kinds of mistakes - things like <a href="https:&#x2F;&#x2F;cfp.systemd.io&#x2F;en&#x2F;systemdconf_2016&#x2F;public&#x2F;events&#x2F;21" rel="nofollow">https:&#x2F;&#x2F;cfp.systemd.io&#x2F;en&#x2F;systemdconf_2016&#x2F;public&#x2F;events&#x2F;21</a> … which is just -staggeringly- WTF.<p>→  It&#x27;s this whole fun trend of &quot;fail fast&quot; that, sure, looks great in a startup producing some new kind of app for making your phone go yawp<p>→  But it&#x27;s not -really- a very good model for infrastructural type concerns - the things that need to be, by reason of their importance - conservative and slow to change. You want your infra to be -reliable-, not &quot;full-featured&quot; - at least if you&#x27;ve any sense.<p>→  So: You have the trend-chasing guys who show up to solve &quot;all your problems&quot; at the cost of making mistakes that could be seen a mile away. Eventually leaving you far worse off and making a huge mess that will be -extremely- expensive to fix when a reckoning comes. All in the name of some &quot;change&quot; that&#x27;s needed from the status quo and without understanding why the status was quo. What&#x27;s the solution here? Well, for one thing, take a look at the fine print when Mephistopheles shows up offering to take care of all your problems. It&#x27;s too late for Linux - most Linuces are pretty much doomed at this point into becoming utter travesties that make WinMe look reasonable. Though the Devuan and Alpine folks seem to have some good impetus behind them.<p>→ Consider carefully what consequences are going to show up from adopting these new and nifty &#x27;features&#x27;.<p>→  Consider that there is a very large difference in requirements between core infrastructure and user-facing things.<p>→  [ Because user-facing things can fail fast and be updated fast, but core infra is much more expensive and time-consuming to do either ]<p>[0] Source: <a href="https:&#x2F;&#x2F;twitter.com&#x2F;munin&#x2F;status&#x2F;781257878321582080" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;munin&#x2F;status&#x2F;781257878321582080</a><p>Sorry about the above format, was too lazy to do a &#x27;storify&#x27; or &#x27;tweetlonger&#x27; also hoping he puts that into a blog.