Skip to main content ↑ ↓
Topic: Artix-xfce-openrc: How to use OpenRc? (Read 2150 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

Artix-xfce-openrc: How to use OpenRc?

I'm used to Systemd.
Now that I'm Systemd free, I would like to celebrate by enabling a service or two.
I'm concerned about runlevels. When I start a service is that automatically handled?

Auditd - How do I start and enable this service?
Auditd is a kernel module, do I need to set a specific runlevel, or check to see if it is the right runlevel?
Audit rules file and audit.log will be in their standard arch locations, I assume. Correct me if this is wrong.

nftables -Same.

Examples? If you can suggest some basics.
Alternatively, identifying resources that will help me understand at my leisure, I would appreciate your pointing.

Re: Artix-xfce-openrc: How to use OpenRc?

Reply #1 –
To enable and start auditd and nftables services you need to install audit-openrc and nftables-openrc packages. Then enable and start them as any other openrc services.

https://wiki.artixlinux.org/Main/OpenRC

Re: Artix-xfce-openrc: How to use OpenRc?

Reply #2 –
Quote from: Ambie – on
To enable and start auditd and nftables services you need to install audit-openrc and nftables-openrc packages. Then enable and start them as any other openrc services.

https://wiki.artixlinux.org/Main/OpenRC
In and ideal world/helio pause/galaxy/omniverse...
auditd and nftables should be included in the ISO.
That way I can enable them before I ever connect my system to the internet.

/etc/audit already exists why do I need to install something else?
When I 'sudo pacman -Sy nftables' are you saying nftables-openrc doesn't get downloaded with it?

Thanks, I'll check the link to see if they have usage instructions.

Re: Artix-xfce-openrc: How to use OpenRc?

Reply #3 –
Quote from: tsedek1 – on
When I 'sudo pacman -Sy nftables' are you saying nftables-openrc doesn't get downloaded with it?
There are different init systems in Artix. Selecting and installing corresponding init services mostly is a user's job.

Re: Artix-xfce-openrc: How to use OpenRc?

Reply #4 –
Quote from: Ambie – on
Quote from: tsedek1 – on
When I 'sudo pacman -Sy nftables' are you saying nftables-openrc doesn't get downloaded with it?
There are different init systems in Artix. Selecting and installing corresponding init services mostly is a user's job.
When I download the Artix-XFCE-OpenRC.iso it should be understood that auditd-openrc will be included because it is an OpenRC platform. It isn't a genral iso, it is a specific iso.
nftables is the new standard for Linux firewalls, so including it is sensible.
The ability to have basic security enabled before connecting to the internet is important to me.

Re: Artix-xfce-openrc: How to use OpenRc?

Reply #5 –
I haven't used the live ISOs in years, but I do agree that they should have relevant init scripts for included packages. If it is the case that audit-openrc isn't there, it should be added. (Note that the package is audit-openrc without the 'd'.)

Not very familiar with nftables, but just the fact that it is in the [world] repo instead of [system] suggests that it is not considered a core component yet. Artix, while very stable (thanks, devs!), is a fairly bleeding-edge distro.

I'm also pretty sure iptables still covers "basic security"...

Re: Artix-xfce-openrc: How to use OpenRc?

Reply #6 –
I come from the Funtoo (Gentoo) world, where I used Netfilter (Nftables). I've just finished setting it up for OpenRC, and made some changes based on how I've been using it.

I found the nftables-mk to be most Gentoo-like, and you should use that as a starting point. The other file tries to retain old iptables compatibility.

I was thinking of re-downloading the package and making minimal fixes, but I don't know how to get those "sent upstream" or anything. I just started using Artix when Funtoo folded.

If anyone has info on how to submit script changes to Netfilter, or whomever, please reply.

Re: Artix-xfce-openrc: How to use OpenRc?

Reply #7 –
Quote from: lotuskip – on
I haven't used the live ISOs in years, but I do agree that they should have relevant init scripts for included packages. If it is the case that audit-openrc isn't there, it should be added. (Note that the package is audit-openrc without the 'd'.)
To be a little more exact:
The audit-openrc....zst is, according to pacman, already installed, upgrade size = 0.00.
If it is already installed why do I have to install it for it to work?