ff6046
From d77d5a9399e393734fe8c8a5ad085036775854a7 Mon Sep 17 00:00:00 2001
ff6046
From: Lennart Poettering <lennart@poettering.net>
ff6046
Date: Tue, 17 Jul 2018 12:01:26 +0200
ff6046
Subject: [PATCH] man: document the new Type=exec type
ff6046
ff6046
And while we are at it, let's rearrange and extend the Type=
ff6046
documentation a bit. Let's make it an itemized list, and let's add a
ff6046
paragraph explaining which type best to use.
ff6046
ff6046
(cherry picked from commit 79905a246d645d21633f09f564b3672d5085a85c)
ff6046
ff6046
Resolves: #1683334
ff6046
---
ff6046
 man/systemd-run.xml     |  10 +++
ff6046
 man/systemd.service.xml | 158 ++++++++++++++++++++++------------------
ff6046
 2 files changed, 97 insertions(+), 71 deletions(-)
ff6046
ff6046
diff --git a/man/systemd-run.xml b/man/systemd-run.xml
ff6046
index 1c254afae3..a134b2c0dc 100644
ff6046
--- a/man/systemd-run.xml
ff6046
+++ b/man/systemd-run.xml
ff6046
@@ -83,6 +83,16 @@
ff6046
     <replaceable>COMMAND</replaceable> may be omitted. In this case, <command>systemd-run</command> creates only a
ff6046
     <filename>.path</filename>, <filename>.socket</filename>, or <filename>.timer</filename> unit that triggers the
ff6046
     specified unit.</para>
ff6046
+
ff6046
+    <para>By default, services created with <command>systemd-run</command> default to the <option>simple</option> type,
ff6046
+    see the description of <varname>Type=</varname> in
ff6046
+    <citerefentry><refentrytitle>systemd.service</refentrytitle><manvolnum>5</manvolnum></citerefentry> for
ff6046
+    details. Note that when this type is used the service manager (and thus the <command>systemd-run</command> command)
ff6046
+    considers service start-up successful as soon as the <function>fork()</function> for the main service process
ff6046
+    succeeded, i.e. before the <function>execve()</function> is invoked, and thus even if the specified command cannot
ff6046
+    be started. Consider using the <option>exec</option> service type (i.e. <option>--property=Type=exec</option>) to
ff6046
+    ensure that <command>systemd-run</command> returns successfully only if the specified command line has been
ff6046
+    successfully started.</para>
ff6046
   </refsect1>
ff6046
 
ff6046
   <refsect1>
ff6046
diff --git a/man/systemd.service.xml b/man/systemd.service.xml
ff6046
index add54524ce..315b80e704 100644
ff6046
--- a/man/systemd.service.xml
ff6046
+++ b/man/systemd.service.xml
ff6046
@@ -153,77 +153,93 @@
ff6046
       <varlistentry>
ff6046
         <term><varname>Type=</varname></term>
ff6046
 
ff6046
-        <listitem><para>Configures the process start-up type for this
ff6046
-        service unit. One of
ff6046
-        <option>simple</option>,
ff6046
-        <option>forking</option>,
ff6046
-        <option>oneshot</option>,
ff6046
-        <option>dbus</option>,
ff6046
-        <option>notify</option> or
ff6046
-        <option>idle</option>.</para>
ff6046
-
ff6046
-        <para>If set to <option>simple</option> (the default if
ff6046
-        neither <varname>Type=</varname> nor
ff6046
-        <varname>BusName=</varname>, but <varname>ExecStart=</varname>
ff6046
-        are specified), it is expected that the process configured
ff6046
-        with <varname>ExecStart=</varname> is the main process of the
ff6046
-        service. In this mode, if the process offers functionality to
ff6046
-        other processes on the system, its communication channels
ff6046
-        should be installed before the daemon is started up (e.g.
ff6046
-        sockets set up by systemd, via socket activation), as systemd
ff6046
-        will immediately proceed starting follow-up units.</para>
ff6046
-
ff6046
-        <para>If set to <option>forking</option>, it is expected that
ff6046
-        the process configured with <varname>ExecStart=</varname> will
ff6046
-        call <function>fork()</function> as part of its start-up. The
ff6046
-        parent process is expected to exit when start-up is complete
ff6046
-        and all communication channels are set up. The child continues
ff6046
-        to run as the main daemon process. This is the behavior of
ff6046
-        traditional UNIX daemons. If this setting is used, it is
ff6046
-        recommended to also use the <varname>PIDFile=</varname>
ff6046
-        option, so that systemd can identify the main process of the
ff6046
-        daemon. systemd will proceed with starting follow-up units as
ff6046
-        soon as the parent process exits.</para>
ff6046
-
ff6046
-        <para>Behavior of <option>oneshot</option> is similar to
ff6046
-        <option>simple</option>; however, it is expected that the
ff6046
-        process has to exit before systemd starts follow-up units.
ff6046
-        <varname>RemainAfterExit=</varname> is particularly useful for
ff6046
-        this type of service. This is the implied default if neither
ff6046
-        <varname>Type=</varname> nor <varname>ExecStart=</varname> are
ff6046
-        specified.</para>
ff6046
-
ff6046
-        <para>Behavior of <option>dbus</option> is similar to
ff6046
-        <option>simple</option>; however, it is expected that the
ff6046
-        daemon acquires a name on the D-Bus bus, as configured by
ff6046
-        <varname>BusName=</varname>. systemd will proceed with
ff6046
-        starting follow-up units after the D-Bus bus name has been
ff6046
-        acquired. Service units with this option configured implicitly
ff6046
-        gain dependencies on the <filename>dbus.socket</filename>
ff6046
-        unit. This type is the default if <varname>BusName=</varname>
ff6046
-        is specified.</para>
ff6046
-
ff6046
-        <para>Behavior of <option>notify</option> is similar to
ff6046
-        <option>simple</option>; however, it is expected that the
ff6046
-        daemon sends a notification message via
ff6046
-        <citerefentry><refentrytitle>sd_notify</refentrytitle><manvolnum>3</manvolnum></citerefentry>
ff6046
-        or an equivalent call when it has finished starting up.
ff6046
-        systemd will proceed with starting follow-up units after this
ff6046
-        notification message has been sent. If this option is used,
ff6046
-        <varname>NotifyAccess=</varname> (see below) should be set to
ff6046
-        open access to the notification socket provided by systemd. If
ff6046
-        <varname>NotifyAccess=</varname> is missing or set to
ff6046
-        <option>none</option>, it will be forcibly set to
ff6046
-        <option>main</option>. Note that currently
ff6046
-        <varname>Type=</varname><option>notify</option> will not work
ff6046
-        if used in combination with
ff6046
-        <varname>PrivateNetwork=</varname><option>yes</option>.</para>
ff6046
-
ff6046
-        <para>Behavior of <option>idle</option> is very similar to <option>simple</option>; however, actual execution
ff6046
-        of the service program is delayed until all active jobs are dispatched. This may be used to avoid interleaving
ff6046
-        of output of shell services with the status output on the console. Note that this type is useful only to
ff6046
-        improve console output, it is not useful as a general unit ordering tool, and the effect of this service type
ff6046
-        is subject to a 5s time-out, after which the service program is invoked anyway.</para>
ff6046
+        <listitem>
ff6046
+          <para>Configures the process start-up type for this service unit. One of <option>simple</option>,
ff6046
+          <option>exec</option>, <option>forking</option>, <option>oneshot</option>, <option>dbus</option>,
ff6046
+          <option>notify</option> or <option>idle</option>:</para>
ff6046
+
ff6046
+          <itemizedlist>
ff6046
+            <listitem><para>If set to <option>simple</option> (the default if <varname>ExecStart=</varname> is
ff6046
+            specified but neither <varname>Type=</varname> nor <varname>BusName=</varname> are), the service manager
ff6046
+            will consider the unit started immediately after the main service process has been forked off. It is
ff6046
+            expected that the process configured with <varname>ExecStart=</varname> is the main process of the
ff6046
+            service. In this mode, if the process offers functionality to other processes on the system, its
ff6046
+            communication channels should be installed before the service is started up (e.g.  sockets set up by
ff6046
+            systemd, via socket activation), as the service manager will immediately proceed starting follow-up units,
ff6046
+            right after creating the main service process, and before executing the service's binary. Note that this
ff6046
+            means <command>systemctl start</command> command lines for <option>simple</option> services will report
ff6046
+            success even if the service's binary cannot be invoked successfully (for example because the selected
ff6046
+            <varname>User=</varname> doesn't exist, or the service binary is missing).</para></listitem>
ff6046
+
ff6046
+            <listitem><para>The <option>exec</option> type is similar to <option>simple</option>, but the service
ff6046
+            manager will consider the unit started immediately after the main service binary has been executed. The service
ff6046
+            manager will delay starting of follow-up units until that point. (Or in other words:
ff6046
+            <option>simple</option> proceeds with further jobs right after <function>fork()</function> returns, while
ff6046
+            <option>exec</option> will not proceed before both <function>fork()</function> and
ff6046
+            <function>execve()</function> in the service process succeeded.) Note that this means <command>systemctl
ff6046
+            start</command> command lines for <option>exec</option> services will report failure when the service's
ff6046
+            binary cannot be invoked successfully (for example because the selected <varname>User=</varname> doesn't
ff6046
+            exist, or the service binary is missing).</para></listitem>
ff6046
+
ff6046
+            <listitem><para>If set to <option>forking</option>, it is expected that the process configured with
ff6046
+            <varname>ExecStart=</varname> will call <function>fork()</function> as part of its start-up. The parent
ff6046
+            process is expected to exit when start-up is complete and all communication channels are set up. The child
ff6046
+            continues to run as the main service process, and the service manager will consider the unit started when
ff6046
+            the parent process exits. This is the behavior of traditional UNIX services. If this setting is used, it is
ff6046
+            recommended to also use the <varname>PIDFile=</varname> option, so that systemd can reliably identify the
ff6046
+            main process of the service. systemd will proceed with starting follow-up units as soon as the parent
ff6046
+            process exits.</para></listitem>
ff6046
+
ff6046
+            <listitem><para>Behavior of <option>oneshot</option> is similar to <option>simple</option>; however, the
ff6046
+            service manager will consider the unit started after the main process exits. It will then start follow-up
ff6046
+            units. <varname>RemainAfterExit=</varname> is particularly useful for this type of
ff6046
+            service. <varname>Type=</varname><option>oneshot</option> is the implied default if neither
ff6046
+            <varname>Type=</varname> nor <varname>ExecStart=</varname> are specified.</para></listitem>
ff6046
+
ff6046
+            <listitem><para>Behavior of <option>dbus</option> is similar to <option>simple</option>; however, it is
ff6046
+            expected that the service acquires a name on the D-Bus bus, as configured by
ff6046
+            <varname>BusName=</varname>. systemd will proceed with starting follow-up units after the D-Bus bus name
ff6046
+            has been acquired. Service units with this option configured implicitly gain dependencies on the
ff6046
+            <filename>dbus.socket</filename> unit. This type is the default if <varname>BusName=</varname> is
ff6046
+            specified.</para></listitem>
ff6046
+
ff6046
+            <listitem><para>Behavior of <option>notify</option> is similar to <option>exec</option>; however, it is
ff6046
+            expected that the service sends a notification message via
ff6046
+            <citerefentry><refentrytitle>sd_notify</refentrytitle><manvolnum>3</manvolnum></citerefentry> or an
ff6046
+            equivalent call when it has finished starting up. systemd will proceed with starting follow-up units after
ff6046
+            this notification message has been sent. If this option is used, <varname>NotifyAccess=</varname> (see
ff6046
+            below) should be set to open access to the notification socket provided by systemd. If
ff6046
+            <varname>NotifyAccess=</varname> is missing or set to <option>none</option>, it will be forcibly set to
ff6046
+            <option>main</option>. Note that currently <varname>Type=</varname><option>notify</option> will not work if
ff6046
+            used in combination with <varname>PrivateNetwork=</varname><option>yes</option>.</para></listitem>
ff6046
+
ff6046
+            <listitem><para>Behavior of <option>idle</option> is very similar to <option>simple</option>; however,
ff6046
+            actual execution of the service program is delayed until all active jobs are dispatched. This may be used
ff6046
+            to avoid interleaving of output of shell services with the status output on the console. Note that this
ff6046
+            type is useful only to improve console output, it is not useful as a general unit ordering tool, and the
ff6046
+            effect of this service type is subject to a 5s time-out, after which the service program is invoked
ff6046
+            anyway.</para></listitem>
ff6046
+          </itemizedlist>
ff6046
+
ff6046
+          <para>It is generally recommended to use <varname>Type=</varname><option>simple</option> for long-running
ff6046
+          services whenever possible, as it is the simplest and fastest option. However, as this service type won't
ff6046
+          propagate service start-up failures and doesn't allow ordering of other units against completion of
ff6046
+          initialization of the service (which for example is useful if clients need to connect to the service through
ff6046
+          some form of IPC, and the IPC channel is only established by the service itself — in contrast to doing this
ff6046
+          ahead of time through socket or bus activation or similar), it might not be sufficient for many cases. If so,
ff6046
+          <option>notify</option> or <option>dbus</option> (the latter only in case the service provides a D-Bus
ff6046
+          interface) are the preferred options as they allow service program code to precisely schedule when to
ff6046
+          consider the service started up successfully and when to proceed with follow-up units. The
ff6046
+          <option>notify</option> service type requires explicit support in the service codebase (as
ff6046
+          <function>sd_notify()</function> or an equivalent API needs to be invoked by the service at the appropriate
ff6046
+          time) — if it's not supported, then <option>forking</option> is an alternative: it supports the traditional
ff6046
+          UNIX service start-up protocol. Finally, <option>exec</option> might be an option for cases where it is
ff6046
+          enough to ensure the service binary is invoked, and where the service binary itself executes no or little
ff6046
+          initialization on its own (and its initialization is unlikely to fail). Note that using any type other than
ff6046
+          <option>simple</option> possibly delays the boot process, as the service manager needs to wait for service
ff6046
+          initialization to complete. It is hence recommended not to needlessly use any types other than
ff6046
+          <option>simple</option>. (Also note it is generally not recommended to use <option>idle</option> or
ff6046
+          <option>oneshot</option> for long-running services.)</para>
ff6046
         </listitem>
ff6046
       </varlistentry>
ff6046