2017-06-28 15:46 UTC

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0008767CentOS-7systemdpublic2017-06-17 22:50
Reportermtp 
PrioritynormalSeveritymajorReproducibilityalways
StatusnewResolutionopen 
Platformx86-64OSCentOSOS Version7.1
Product Version 
Target VersionFixed in Version 
Summary0008767: Systemd User Support is Broken on Delivery
DescriptionI have a freshly-installed CentOS 7.1 node (zero modifications made to it post-installer) with a user account added. When logging in to the machine in-person (GDM workflow), I attempt to list the status of systemd units for my user:

$ systemctl --user status
Failed to issue method call: Process /bin/false exited with status 1
Additional InformationIt appears that PAM has been configured correctly out-of-the-box to start the systemd-logind service to manage the user sessions.
TagsNo tags attached.
abrt_hash
URL
Attached Files

-Relationships
+Relationships

-Notes

~0023258

matttproud (reporter)

As a start, from what I can tell, support for user units (being started from logind and PAM) was explicitly removed by Harald Hoyer in commit 572a44c507ecd5e7dee4fd5958e7d5aaa3466e6f (https://goo.gl/K1IDbh) or Lukas Nykryn in issue 1019738. Unfortunately I do not have permission to view the latter issue's content, so I can't trace the rationale for this.

In any case, I can rebuild the RPM with patch 200 disabled (thereby re-adding support for user units), but it appears that control groups are somehow interfering:

"""
# systemctl status user@1000.service
user@1000.service - User Manager for 1000
   Loaded: loaded (/usr/lib/systemd/system/user@.service; static)
   Active: inactive (dead)

Jun 01 00:16:56 localhost.localdomain systemd[1]: Starting User Manager for 1000...
Jun 01 00:16:56 localhost.localdomain systemd[1133]: pam_systemd(systemd-user:session): pam-systemd initializing
Jun 01 00:16:56 localhost.localdomain systemd[1133]: pam_unix(systemd-user:session): session opened for user ...d=0)
Jun 01 00:16:56 localhost.localdomain systemd[1133]: Failed to create root cgroup hierarchy: Permission denied
Jun 01 00:16:56 localhost.localdomain systemd[1162]: pam_unix(systemd-user:session): session closed for user FOO
Jun 01 00:16:56 localhost.localdomain systemd[1]: Started User Manager for 1000.
Jun 01 00:23:09 localhost.localdomain systemd[1]: Starting User Manager for 1000...
Jun 01 00:23:09 localhost.localdomain systemd[2803]: pam_systemd(systemd-user:session): pam-systemd initializing
Jun 01 00:23:09 localhost.localdomain systemd[2803]: pam_unix(systemd-user:session): session opened for user ...d=0)
Jun 01 00:23:09 localhost.localdomain systemd[2805]: pam_unix(systemd-user:session): session closed for user FOO
Jun 01 00:23:09 localhost.localdomain systemd[1]: Started User Manager for 1000.
Jun 01 00:23:49 localhost.localdomain systemd[1]: Stopped User Manager for 1000.
"""

~0025252

lnykryn (reporter)

Basically we don't know if systemd --user will stay in systemd as is right now.
So we have decided to disable it completely so we will not hit regression in future versions of centos.

~0025541

mwmahlberg (reporter)

The ability to run services with their startup as an unprivileged user is one of the advantages of systemd. Basically, removing the according support would force a user to install a redundant software (such as supervisors) and / or use inferior means (such as cron's @reboot).

~0025705

wolfy (developer)

So you will need to take it to bugzilla.redhat.com and persuade RH to change this. CentOS will inherit all changes automatically.

~0028506

ngoldin@redhat.com (reporter)

Hi,
Year later - I'm hitting the same issue with 7.3. Has there been any progress with this?

~0028596

centos_anon (reporter)

I too would like to see an update of this issue.

~0028611

lnykryn (reporter)

I am sorry, but we don't plan to provide --user in el7. We will revisit this issue with next major version of centos/rhel.
+Notes

-Issue History
Date Modified Username Field Change
2015-05-24 22:43 mtp New Issue
2015-05-31 22:39 matttproud Note Added: 0023258
2016-01-05 09:39 lnykryn Note Added: 0025252
2016-01-27 18:21 mwmahlberg Note Added: 0025541
2016-02-12 10:10 wolfy Note Added: 0025705
2017-01-29 12:48 ngoldin@redhat.com Note Added: 0028506
2017-02-17 23:24 centos_anon Note Added: 0028596
2017-02-20 09:37 lnykryn Note Added: 0028611
+Issue History