Non-Systemd (Preferable if Possible)

Development
1

Although not a direct security issue on its own, systemd is a bulky piece of software and has been heavily criticized for numerous things.

For linux there are init available check here.

For seL4 good news is that Genode OS has developed its own lightweight init component.

Note: Though Genode init is not with (yet) rich features as systemd.

2

Way too much to discuss.

I could not find an article that goes point-by-point, line-by-line through the “Arguments against systemd” page at without-systemd.org and gives a direct reply to each claim.

Compiling a huge list may make it appear as “there must be some issue”.

shotgunning: Where a debater overwhelms their opponent with a rapid series of many arguments, often numerous and some irrelevant or weak.

Systemd has been adopted by the vast majority of major Linux distributions. It’s the most popular init system. Systemd is the most popular init system. Unavoidably, there are going to be a lot opinions, project issues and design decisions that not everybody will agree with.

I have some criticism of systemd myself. For one, they could lower confusion by not naming all sorts of projects systemd-something. And a lot other technical issues. But on balance, the good still weights out the bad by far.

Most if not all of these points has been discussed in the past. If you want to go through them: Search term suggestion for https://www.perplexity.ai or any other AI of your choice:

https://without-systemd.org/wiki/index_php/Arguments_against_systemd/
rebuttal of that page line by line more or less with comments on each item

I recommend also to not only focus on negativity, criticism. To reach a more balanced, realistic viewpoint, I recommend

  • not only reading what anti-systemd activists are saying. I am calling Arguments against systemd - Without Systemd activists. That becomes clear from the website logo and memes posted on the website.
  • but also to read the opposite, articles why systemd is great and which security features it provides.

Basically, you’re seeing some technical details (“systemd”) and are attempting to perform a system audit. Please refer to:

Without being a developer, you will not be able to make head or tail of this. It’s way too complex. It will only be a complex informational spiderweb of person A said B but person C said D.

That comparison table is insufficient. It doesn’t mention any security hardening features.

See also:

The init system is a criteria for base distribution choice for Kicksecure.

Realistically, we’ll only get this feature if a base distribution gains that feature and we port to it.

There are no suitable, promising base distributions at time of writing with this feature and other criteria.

1 Like
3

Yep thats sadly true.