[Nfd-dev] [EXT] Issue with getting nfd-log

Eric Newberry enewberry at cs.ucla.edu
Thu Apr 16 12:09:30 PDT 2020


I don't believe one can make a blanket statement like this. If NFD is 
built from source, start-nfd will directly run NFD with "sudo nfd". 
Additionally, NFD runs perfectly fine on platforms that do not have systemd.

Eric

On 4/16/2020 11:59 AM, Junxiao Shi wrote:
> Hi Eric
>
> The main problems of invoking nfd binary directly are:
> * NFD will fail to start if there’s no key in the keychain.
> * NFD could make certain files in the keychain to become owned by 
> root, and subsequently cause applications under the non-root user 
> account to experience file access errors.
> * Accessing the same keychain from multiple processes could easily 
> trigger underlined behavior. In fact, if NFD binary and ndn-cxx were 
> built with asserts enabled, you run NFD on user keychain and then run 
> ndncert or ndnsec to add a new key, NFD would crash after a few seconds.
>
> Therefore, you should only start NFD with the method specify in 
> packaging: systemd. This ensures NFD is started in the correct uid and 
> a separate keychain.
>
> Yours, Junxiao
>
> On Thu, Apr 16, 2020 at 14:31 Eric Newberry <enewberry at cs.ucla.edu 
> <mailto:enewberry at cs.ucla.edu>> wrote:
>
>     *External Email*
>
>     Hi Ishita,
>
>     In commands 1 and 2 below, I notice that you're specifying "start
>     nfd". If you're trying to run NFD directly, you should rewrite
>     this part of these commands as just "nfd". (To clarify, there is
>     nothing wrong with running NFD directly.)
>
>     Hope this helps!
>
>
>     Eric
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20200416/a4f9713f/attachment.html>


More information about the Nfd-dev mailing list