<![CDATA[2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd.]]>2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd.

When you care for a more than a single system, it is often advisable to roll out new stuff in a staged fashion: first 1% of your fleet should get it, and only after the results are in and all is good, you up it to 10%, and then to 25% and finally to 100% (or in other steps like this).

With v261, systemd is going to help you with this to some degree:

]]>https://board.circlewithadot.net/topic/3d388b4c-c36e-4b69-a66d-917f9f041695/2-here-s-the-2nd-post-highlighting-key-new-features-of-the-upcoming-v261-release-of-systemd.RSS for NodeFri, 05 Jun 2026 12:17:33 GMTFri, 22 May 2026 02:06:00 GMT60<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Sat, 23 May 2026 10:06:44 GMT]]>@purpleidea @pid_eins I think there’s room for both driven sharding of populations and autonomous local stable sharding. The latter is useful when you want the local state to be persistent and stable even when stops working or is not used in the first place.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/tzz/statuses/116623330794984561https://board.circlewithadot.net/post/https://infosec.exchange/users/tzz/statuses/116623330794984561Sat, 23 May 2026 10:06:44 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 08:56:27 GMT]]>@raito yeah, you can query the result of conditions via D-Bus and "systemctl status"

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617392104466822https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617392104466822Fri, 22 May 2026 08:56:27 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 08:54:22 GMT]]>@purpleidea … is now just adds a tiny bit of code on top which instead of doing memcmp() of the machine-id now calculates `HMAC(machine-id, tag) <= X`. Which is frankly a triviality.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617383932990700https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617383932990700Fri, 22 May 2026 08:54:22 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 08:53:01 GMT]]>@purpleidea …that's not a given: consider an image based desktop OS with a strong feedback path, which wants to deploy some tooling/metrics collection in a staged fashion. They typically don't have a list of their installations, but they still want to deploy piecemeal.

Hence, I am pretty sure this is very useful, and in many way systematically better than a centrally scheduled approach.

Also, systemd already had ConditionHost= (which can condition on /etc/machine-id) before. This feature…

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617378611180118https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617378611180118Fri, 22 May 2026 08:53:01 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 08:48:47 GMT]]>@purpleidea well, people can push out unit files with any tool they like, it's really up to users.

The great thing about this is that it just works, i.e that there's no scalability problem. If you centrally determine a list of hosts to run something on, then you always have that: the algorithm needs to pick hosts, and compile things in a massive list, which could be quite large for a datacenter.

Also, you are assuming that there even *is* a central node that could do such scheduling. But…

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617361985952708https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617361985952708Fri, 22 May 2026 08:48:47 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 08:45:50 GMT]]>@purpleidea we have no API for this, but it's trivial to reimplement. And this stuff is supposed to be deterministic and reproducible, hence I guess we really should try to keep it stable so that it doesn't lose it's reliable properties if you mix different systemd versions in the same datacenter. Hence I guess you can consider the algorithm the stable API here.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617350396286707https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617350396286707Fri, 22 May 2026 08:45:50 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 08:41:30 GMT]]>@jamesh @purpleidea it's SHA256, not SHA1. It's 2026 after all

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617333309878489https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116617333309878489Fri, 22 May 2026 08:41:30 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 08:20:50 GMT]]>@pid_eins very nice! I assume there's a way to determine via DBus or Varlink if the randomized condition was true or not on a given unit file so that rollout agents can retrieve it?

]]>https://board.circlewithadot.net/post/https://nixos.paris/users/raito/statuses/116617252065774556https://board.circlewithadot.net/post/https://nixos.paris/users/raito/statuses/116617252065774556Fri, 22 May 2026 08:20:50 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:54:21 GMT]]>@pid_eins As an aside, I love the machine-id deterministic hashing... I think we should add the machine-id as a built in value users can query, and copy the hash function to be able to model the same distribution! I will eventually UTSL unless you have an API we can query directly.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/purpleidea/statuses/116615968304293939https://board.circlewithadot.net/post/https://mastodon.social/users/purpleidea/statuses/116615968304293939Fri, 22 May 2026 02:54:21 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:51:39 GMT]]>@pid_eins Well put it this way, what tooling would deploy the `ConditionFraction=` line?

Why wouldn't that tooling have the ability to choose which hosts?

I don't mind having this feature in, but I'm struggling to see the value. Like it's great to have a ladder, but if everything is already at eye level, how useful is it really?

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/purpleidea/statuses/116615957646363414https://board.circlewithadot.net/post/https://mastodon.social/users/purpleidea/statuses/116615957646363414Fri, 22 May 2026 02:51:39 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:47:24 GMT]]>@purpleidea Yeah, well, that's just like, your opinion, man.

You can have a multitude of conditions in the same unit file, to further restrict things. And there's another condition type we added in this release that might fit will into the concept you describe, but that's for later.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615940933073973https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615940933073973Fri, 22 May 2026 02:47:24 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:44:28 GMT]]>@pid_eins neat feature. thank you for your work, sir

]]>https://board.circlewithadot.net/post/https://social.vivaldi.net/users/synlogic4242/statuses/116615929446229354https://board.circlewithadot.net/post/https://social.vivaldi.net/users/synlogic4242/statuses/116615929446229354Fri, 22 May 2026 02:44:28 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:41:45 GMT]]>@pid_eins This is a very neat idea but I don't think it belongs in systemd. Tools like https://github.com/purpleidea/mgmt/ are where this belongs.

This design implies a static representation of the world, when in reality we might care about doing this in 15% of machines that are in a certain zone or with a certain version or something else.

So you need automation tools to deploy to that subset anyways, so the same tools can choose which % get the workload.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/purpleidea/statuses/116615918750656303https://board.circlewithadot.net/post/https://mastodon.social/users/purpleidea/statuses/116615918750656303Fri, 22 May 2026 02:41:45 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:16:19 GMT]]>…of systems that are selected. If multiple units use the same tag they'd be conditioned on the same subset of systems, and if they use a different tag the subset will be selected differently.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615818729165811https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615818729165811Fri, 22 May 2026 02:16:19 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:15:20 GMT]]>As defined above the only input for the hash function is the machine ID, which would mean that for any unit you condition like this, it would be the very same subset of systems that would run it, and the same subset that wouldn't, regardless of the unit.

This typically is not what you want. Hence, you can also specify "ConditionFraction=foo 15%" where "foo" is an arbitrary string called the "tag". When specified it's mixed into the hash, and thus selects a random, yet deterministic subset…

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615814884538527https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615814884538527Fri, 22 May 2026 02:15:20 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:13:42 GMT]]>@pid_eins
This will be an essential feature for Works On My Machine certification!

]]>https://board.circlewithadot.net/post/https://c3d2.social/users/astro/statuses/116615808419712416https://board.circlewithadot.net/post/https://c3d2.social/users/astro/statuses/116615808419712416Fri, 22 May 2026 02:13:42 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:11:28 GMT]]>With that simple setting you just declared that the service shall be run on only ~15% of systems and be skipped on ~85% of them.

How does this work?

Basically, we derive an 32bit integer value from the machine ID (i.e. /etc/machine-id) by hashing, and if that integer is below the specified percentage of 2^32, the condition holds, and otherwise it doesn't.

You can also invert the check, so that you can condition some stuff to run on the in-group, and something else on the out-group.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615799667484918https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615799667484918Fri, 22 May 2026 02:11:28 GMT<![CDATA[Reply to 2️⃣ Here's the 2nd post highlighting key new features of the upcoming v261 release of systemd. on Fri, 22 May 2026 02:07:06 GMT]]>There's a new setting ConditionFraction= which allows to condition a unit to only run on a certain, randomly selected (but deterministic) subset of your fleet.

You can use it like this:

[Unit]
…
ConditionFraction=15%
…

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615782506601463https://board.circlewithadot.net/post/https://mastodon.social/users/pid_eins/statuses/116615782506601463Fri, 22 May 2026 02:07:06 GMT