We want to stop systemd from being added to docker images, because of rpm requiring systemctl.

Chris Adams linux at cmadams.net
Tue Apr 29 21:20:14 UTC 2014

Once upon a time, Reindl Harald <h.reindl at thelounge.net> said:
> defense in depth means limit the attack surface as much as you can

No, because "as much as you can" is turn the system off and bury it in
concrete (with an armed guard).

The goal is "as much as practical".  Trying to remove things that are
needed is not practical.

Spending a whole bunch of effort to allow you to remove systemd (again,
just the files, it isn't running) seems excessive.  There are some basic
things that RPMs expect; installing a service expects that the service
management tools are present.

Chris Adams <linux at cmadams.net>

More information about the devel mailing list