Re: s6/s6-rc policy for Gentoo: config files for service scripts

Jan Braun <[email protected]> Thu, 19 Sep 2024 22:26:10 +0200
Newsgroups gmane.comp.sysutils.supervision.general
Message-ID <ZuyI4lJpGJz3Ey-k@abakus>
Paul Sopka schrob:
> > > ... then begs the question: what's the advantage of having the
> > > ${S6CONFIGDIR}/system/config/seatd entry point at all? How much effort
> > > does this save the admin over creating their own my_seatd service and
> > > disabling the one you provide?
> > > (Honest question, I don't fully grok s6.)
> > 
> > It doesn’t save any effort at all.
> I disagree, because it allows original service scripts to sit at
> /usr/lib/s6-rc/{user,system}/src/service
> and be recklessly updated by the package manager.

I think there's a misunderstanding here, I'll try again:
What I proposed is putting the service definitions into /usr, never copy
or link them to /etc, never modify them (except by package updates), and
let s6 execute them directly from there.

If the local admin wants something other than the service as you ship
it, they create a completely new, independent local service and disable
the one shipped by you.

Thus you can update the definitions in /usr as you see fit, and the
admin can override things as they see fit. No machinery needed inside
the actual run scripts.

Cheers,
    Jan
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=sUjY
-----END PGP SIGNATURE-----