[Freeipa-devel] 389 systemd changes

[Simo Sorce]

On Mon, 2012-01-23 at 08:03 +0200, Alexander Bokovoy wrote:
> On Sun, 22 Jan 2012, Simo Sorce wrote:
> > > > Shouldn't we just 'include' the original file and not copy it ?
> > > > If we include it a change in the file will be automatically picked up.
> > > We can't due to systemd design and use of it in 389-ds.
> > > 
> > > LimitNOFILE needs to be changed in the service file directly, not in 
> > > the environment file in /etc/sysconfig or otherwise it will not be 
> > > picked up by the systemd.
> > 
> > I am not talking about using /set/sysconfig options, but the .include
> > directive for service files.
> So, something like this for 389-ds?

No, you should include the actual dirsrv default service file (if any,
otherwise the sysconfig one might be ok I guess).

> ----8<--------8<--------8<---------
> [Unit]
> Description=389 Directory Server %i.
> BindTo=dirsrv.target
> After=dirsrv.target
> 
> [Service]
> Type=forking
> Environment=PIDDIR=/var/run/dirsrv
> EnvironmentFile=/etc/sysconfig/dirsrv
> EnvironmentFile=/etc/sysconfig/dirsrv-%i
> ExecStart=/usr/sbin/ns-slapd -D /etc/dirsrv/slapd-%i -i ${PIDDIR}/slapd-%i.pid -w ${PIDDIR}/slapd-%i.startpid
> .include /etc/sysconfig/dirsrv.systemd
> ----8<--------8<--------8<---------
> 
> and then with following /etc/sysconfig/dirsrv.systemd:
> ----8<--------8<--------8<---------
> [Service]
> LimitNOFILE=8192
> ----8<--------8<--------8<---------
> 
> local overrides can be created?

Yes I think if you put directives after the include they will override
whatever is in the include.

Also I would put as much as possible in the include file and put in the
specific instance files only the parameters we need to override.

> It seems to work. You can't use %i macro in .include unfortunately so 
> any configuration change will be global, not per service instance.

That's fine we want to put in there only global configuration anyways,
and then override in our specific per instance control files.

> # systemctl show dirsrv at IPA-LOCAL.service|grep LimitNOFILE
> LimitNOFILE=8192
> # systemctl status dirsrv at IPA-LOCAL.service
> dirsrv at IPA-LOCAL.service - 389 Directory Server IPA-LOCAL.
> 	  Loaded: loaded (/lib/systemd/system/dirsrv at .service; enabled)
> 	  Active: active (running) since Mon, 23 Jan 2012 00:47:32 -0500; 11min ago
> 	 Process: 30927 ExecStart=/usr/sbin/ns-slapd -D /etc/dirsrv/slapd-%i -i ${PIDDIR}/slapd-%i.pid -w ${PIDDIR}/slapd-%i.startpid (code=exited, status=0/SUCCESS)
> 	Main PID: 30929 (ns-slapd)
> 	  CGroup: name=systemd:/system/dirsrv at .service/IPA-LOCAL
> 		  └ 30929 /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-IPA-LOCAL -i /var/run/dirsrv/slapd-IPA-LOCAL.p...
> 
> I would still need a ticket to make appropriate removals in 
> ipapython/platform/fedora16.py so that we would modify 
> /etc/sysconfig/dirsrv.systemd and still do symlink re-linking in 
> /etc/systemd/system/dirsrv.target.wants/.

ok.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York