replacing rsyslogd in minimal with journald [was Re: systemd requires HTTP server and serves QR codes]

Stephen John Smoogen smooge at
Tue Oct 9 22:20:14 UTC 2012

On 9 October 2012 17:18, Dan Williams <dcbw at> wrote:
> On Tue, 2012-10-09 at 15:57 -0600, Stephen John Smoogen wrote:
>> On 9 October 2012 15:50, Matthew Miller <mattdm at> wrote:
>> > On Tue, Oct 09, 2012 at 03:41:51PM -0600, Stephen John Smoogen wrote:
>> >> > If you want audit-like semantics with crashing if we cannot write, then
>> >> > use something else, not the journal. The journal is supposed to be
>> >> > robust and do the right thing so that you can leave it unnatteneded and
>> >> > whatever happens it didn't spill the disk or become unavailable. It's
>> >> > supposed to be "zero maintainance".
>> >>
>> >> So in those cases rsyslog would be required, but would be seen as a
>> >> post-install step.
>> >>
>> >> EG what you are looking at is building a GNOME-OS and for those sorts
>> >> of tablets, etc the journal is right for that. The other cases like at
>> >> a Hospital, trading firm or various .gov.XX then having rsyslog
>> >> installed with audit post would be the way to get the needed features.
>> >
>> > If so, this seems unfortunate, because the other features discussed (e.g.,
>> > trustable metadata) would be very welcome in these environments. Can't the
>> > enterprise have nice things?
>> Sorry I didn't mean to make that either/or. The enterprise gets the
>> journald but does not get to keep its contents unless there is a
>> program that sends it to say rsyslog.
> Ah; I think what you meant to say is:
> "*IF* what you are looking at..."

In my head I thought I wrote that *IF* until you pointed out I missed it.

> but I'd suggest instead:
> "If you have strict requirements on time-based logging rotation or
> certain audit requirements, then something like rsyslog(?) is required
> in parallel with the journal.  In most other cases (desktops, tablets,
> many servers) the journal is sufficient."

*patch acked*

> No?
> Dan
> --
> devel mailing list
> devel at

Stephen J Smoogen.
"Don't derail a useful feature for the 99% because you're not in it."
Linus Torvalds
"Years ago my mother used to say to me,... Elwood, you must be oh
so smart or oh so pleasant. Well, for years I was smart. I
recommend pleasant. You may quote me."  —James Stewart as Elwood P. Dowd

More information about the devel mailing list