summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* units: drop "(Varlink)"Zbigniew Jędrzejewski-Szmek2024-03-1411-11/+11
| | | | | | | | | | | | | | | | We generally don't specify the protocol implementation in unit descriptions. For journald, we have: $ git grep Description 'units/*journald*' units/systemd-journald-audit.socket:Description=Journal Audit Socket units/systemd-journald-dev-log.socket:Description=Journal Socket (/dev/log) units/systemd-journald-varlink@.socket:Description=Journal Varlink Socket for Namespace %i units/systemd-journald.service.in:Description=Journal Service units/systemd-journald.socket:Description=Journal Sockets units/systemd-journald@.service.in:Description=Journal Service for Namespace %i units/systemd-journald@.socket:Description=Journal Sockets for Namespace %i so we need to keep "Varlink" in the name. But also use "Sockets" (plural) for the "main" socket unit, since it opens multiple sockets.
* units/systemd-machine-id-commit: retitleZbigniew Jędrzejewski-Szmek2024-03-141-1/+1
| | | | | Our docs say that the Description should be capitalized. Also, change "commit" to "save" to make this more accessible.
* units: retitle systemd-pcrextend.{service,socket}, change TPM2→TPMZbigniew Jędrzejewski-Szmek2024-03-1419-19/+19
| | | | | | | | | | | | | | | | I was looking at the logs in some bug and saw this: Mar 13 15:55:12 fedora systemd[1]: systemd-pcrmachine.service - TPM2 PCR Machine ID Measurement was skipped because of an unmet condition check (ConditionSecurity=measured-uki). Mar 13 15:55:12 fedora systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... Mar 13 15:55:12 fedora systemd[1]: systemd-tpm2-setup-early.service - TPM2 SRK Setup (Early) was skipped because of an unmet condition check (ConditionSecurity=measured-uki). This is overly technical, for most units we don't provide this level of detail about the implementation. So retitle the units to be more accessible. Also, the fact that it's a v. 2 of the TPM is not that important. We don't support TPM 1.2, but computers without TPM v2 are getting rare. For other units we don't advertise the version of hardware, and let's not do this here, to reduce some complexity.
* ptyfwd: fix typoYu Watanabe2024-03-141-1/+1
| | | | Follow-up for d0aa368c85adf2efa29c363a6671927fe7e8e76f.
* TODO: fix typoYu Watanabe2024-03-141-1/+1
| | | | Follow-up for 54b0e05ed0db04d515ecf7773e39cd61b6445698.
* stat-util: fix typoYu Watanabe2024-03-141-1/+1
| | | | Follow-up for 7cff2b79f00e82c85d0773e8cb4074c59abc6f43.
* Merge pull request #31771 from keszybz/meson-make-partial-builds-great-againZbigniew Jędrzejewski-Szmek2024-03-141-14/+9
|\ | | | | Meson make partial builds work again
| * meson: always use vcs_tagZbigniew Jędrzejewski-Szmek2024-03-131-14/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The branch with configure_file() was broken: meson doesn't know that this file is a prerequisite for other targets, so partial rebuilds were broken. Easy reproducer: git mv .git{,.no} touch meson build && ninja -C build src/basic/libbasic.a rm build/version.h ninja -C build src/basic/libbasic.a Using vcs_tag() also in that case makes meson always build the file. (Combined with the issue fixed in previous commit, I was encountering failed builds quite often.) Fixes 3f6ce3d4f04de0f765bb3bde0e400d0823829486.
| * meson: .git can also be a fileZbigniew Jędrzejewski-Szmek2024-03-131-1/+1
| | | | | | | | | | | | | | With git-worktree, .git is just a file that specifies where the parent git directory is. All the git information is available in a git worktree, so it should be treated the same as a checkout with a .git directory.
* | Merge pull request #31761 from CodethinkLabs/vmspawn/bug_fixesLuca Boccassi2024-03-141-1/+5
|\ \ | | | | | | vmspawn: fix two minor bugs
| * | vmspawn: fix FD passing logicSam Leonard2024-03-131-1/+1
| | |
| * | vmspawn: prefix extra kernel-cmdline-extra with -smbiosSam Leonard2024-03-131-0/+4
| | |
* | | core/cgroup: introduce MemoryZSwapWriteback settingMike Yuan2024-03-148-6/+88
| | | | | | | | | | | | | | | Added in https://github.com/torvalds/linux/commit/501a06fe8e4c185bbda371b8cedbdf1b23a633d8
* | | Merge pull request #31758 from DaanDeMeyer/kvmDaan De Meyer2024-03-143-5/+8
|\ \ \ | | | | | | | | mkosi: Enable KVM
| * | | mkosi: Enable KVMDaan De Meyer2024-03-131-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since https://github.blog/2024-01-17-github-hosted-runners-double-the-power-for-open-source/, it seems that KVM is supported on GA runners, so let's explicitly enable it to make sure it is used. We update mkosi to latest and set QemuFirmware=uefi to disable secure boot which crashes qemu until https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2038777 is fixed.
| * | | mkosi: Allow booting without secure bootDaan De Meyer2024-03-131-2/+3
| | | | | | | | | | | | | | | | | | | | Don't fail if SecureBoot is not enabled. Instead, only execute the secure boot related checks if secure boot is actually enabled.
| * | | boot: Only use io.systemd.boot.kernel-cmdline-extra for type 1 imagesDaan De Meyer2024-03-131-1/+1
| | | | | | | | | | | | | | | | Otherwise the cmdline is duplicated for UKIs.
* | | | Merge pull request #31584 from yuwata/sd-ndisc-option-parser-cleanupsLuca Boccassi2024-03-1412-856/+1161
|\ \ \ \ | |/ / / |/| | | sd-ndisc: rewrite option parser
| * | | sd-ndisc-router: adjust function names and type of returned valueYu Watanabe2024-03-134-90/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - prefix length and preference should be fit in uint8_t, and actually the kernel and networkd uses uint8_t to store them. - captive portal is now stored as a NUL-terminated string. Hence, it is not necessary to also provide its length.
| * | | sd-ndisc-router: introduce sd_ndisc_router_get_sender_mac()Yu Watanabe2024-03-132-0/+8
| | | | | | | | | | | | | | | | | | | | The Router Advertisement option can take the MAC address of the sender. Let's introduce a function to get it from the parsed options.
| * | | ndisc-option: drop unused functionYu Watanabe2024-03-132-11/+0
| | | |
| * | | sd-ndisc-router: use ndisc_parse_options() and friends to parse Router ↵Yu Watanabe2024-03-132-665/+93
| | | | | | | | | | | | | | | | Advertisement
| * | | ndisc-option: introduce generic NDisc option parserYu Watanabe2024-03-133-6/+924
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is not used in this commit, but will be used for parsing NDisc options in Router Advertisement message and friends. The parser does mostly equivalent to what currently we do in sd-ndisc-router.c. Several notable differences are: - also perse source and target link-layer address, - refuse multiple captive portals, - check if the captive portal is in safe characters, as previously we checked that in networkd-ndisc.c, - dedup prefixes, routes, and pref64, - limit the total number of options, for safety.
| * | | sd-ndisc: rename ndisc-protocol.[ch] -> ndisc-option.[ch]Yu Watanabe2024-03-135-4/+4
| | | |
* | | | build(deps): bump github/codeql-action from 3.24.6 to 3.24.7dependabot[bot]2024-03-132-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.6 to 3.24.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8a470fddafa5cbb6266ee11b37ef4d8aae19c571...3ab4101902695724f9365a384f86c1074d94e18c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | build(deps): bump pkg/debian from `49132a8` to `5451923`dependabot[bot]2024-03-131-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps pkg/debian from `49132a8` to `5451923`. --- updated-dependencies: - dependency-name: pkg/debian dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | build(deps): bump actions/checkout from 4.1.1 to 4.1.2dependabot[bot]2024-03-1312-12/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/b4ffde65f46336ab88eb53be808477a3936bae11...9bb56186c3b09b4f86b1c65136769dd318469633) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | build(deps): bump meson from 1.3.2 to 1.4.0 in /.github/workflowsdependabot[bot]2024-03-131-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [meson](https://github.com/mesonbuild/meson) from 1.3.2 to 1.4.0. - [Release notes](https://github.com/mesonbuild/meson/releases) - [Commits](https://github.com/mesonbuild/meson/compare/1.3.2...1.4.0) --- updated-dependencies: - dependency-name: meson dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | build(deps): bump softprops/action-gh-release from 1 to 2dependabot[bot]2024-03-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 1 to 2. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/de2c0eb89ae2a093876385947365aca7b0e5f844...9d7c94cfd0a1f3ed45544c887983e9fa900f0564) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | Merge pull request #31673 from DaanDeMeyer/mkosiDaan De Meyer2024-03-1321-61/+76
|\ \ \ \ | | | | | | | | | | mkosi: Introduce packaging sources as submodules
| * | | | mkosi: Introduce packaging sources as submodulesDaan De Meyer2024-03-1313-18/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By always cloning the latest branch commit, we can't bisect properly using mkosi as when bisecting wildly different packaging sources will be used compared to when the commit was merged. By using submodules, we track individual commits which means when bisecting the same packaging sources will be used. We use git submodules as dependabot has support for automatically making PRs to update git submodules. This commit also includes the necessary dependabot configuration to enable this. We make ubuntu/debian use the same submodule instead of adding the debian packaging sources twice by introducing a new $PKG_SUBDIR environment variable and using it instead of $DISTRIBUTION.
| * | | | mkosi: Remove some leftover shell debuggingDaan De Meyer2024-03-133-3/+3
| | | | |
| * | | | mkosi: Use same pkg/ subdirectory for debian and ubuntuDaan De Meyer2024-03-1314-44/+49
| | |_|/ | |/| | | | | | | | | | | | | | Instead of cloning the same repository twice, let's make sure we use the same directory for both debian/ubuntu.
* | | | units: Bump various oneshot unit timeouts to 90sDaan De Meyer2024-03-132-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In mkosi, we've been having CI failures caused by systemd-machine-id-commit.service timing out. Let's bump the timeout for it and systemd-rfkill.service to 90s which we also use for other oneshot services to avoid transient failures on slower systems.
* | | | fuzz: make sure DHCP client leases are loaded successfullyEvgeny Vereshchagin2024-03-131-3/+2
| |_|/ |/| | | | | | | | | | | Now that fa3357b9e8d9d7a486902d0b6d4b4015fc10aac0 is merged the fuzz target should no longer crash there.
* | | mkosi: Drop leftover mkosi.kernel.configDaan De Meyer2024-03-131-286/+0
| | | | | | | | | | | | | | | | | | The rest of the kernel build infra for mkosi was already removed a long time ago, but we forgot to remove this config file. Let's drop it now as well;
* | | udev: add assert for EVENT_RESULT_EXIT_STATUS_BASE (#31710)sharad30012024-03-131-0/+1
| | | | | | | | | | | | EVENT_RESULT_EXIT_STATUS_BASE and EVENT_RESULT_SUCCESS has the same value. Code updated to add assert statement for EVENT_RESULT_EXIT_STATUS_BASE.
* | | network/varlink: return StorageReadOnly errorYu Watanabe2024-03-132-3/+8
| | | | | | | | | | | | Addresses https://github.com/systemd/systemd/pull/30021#discussion_r1521595855.
* | | networkctl.c : call 'assert_not_reached' where appropriateAKHIL KUMAR2024-03-131-1/+1
| | | | | | | | | networkctl.c : call 'assert_not_reached' where appropriate
* | | networkd-manager: drop spurious returnMike Yuan2024-03-131-1/+1
| | | | | | | | | | | | Follow-up for f90eb086270f0aea8efcbff5a5e4c338d178cfd4
* | | Merge pull request #31746 from yuwata/network-unit-hide-boot-and-efiMike Yuan2024-03-131-1/+2
|\ \ \ | | | | | | | | unit: do not trigger automount for /boot and/or /efi
| * | | unit: do not trigger automount for /boot and/or /efiYu Watanabe2024-03-131-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ProtectSystem=full remounts /boot and/or /efi read-only, but that may trigger automount for the paths and delay the service being started. === systemd[1]: boot.automount: Got automount request for /boot, triggered by 720 ((networkd)) === The service does not need to access the paths, so let's hide them. Follow-up for f90eb086270f0aea8efcbff5a5e4c338d178cfd4. Fixes #31742.
| * | | unit: sort optionYu Watanabe2024-03-131-1/+1
| | |/ | |/|
* | | Merge pull request #31729 from aafeijoo-suse/logind-cleanupsLuca Boccassi2024-03-133-10/+10
|\ \ \ | | | | | | | | logind: coding style cleanups
| * | | logind-inhibit: get rid of basename() in inhibitor_new()Antonio Alvarez Feijoo2024-03-122-6/+6
| | | | | | | | | | | | | | | | Follow-up to #31594
| * | | logind: place 'ret' param at lastAntonio Alvarez Feijoo2024-03-123-4/+4
| | | | | | | | | | | | | | | | Follow-up to 2454cee32e
* | | | Merge pull request #31733 from poettering/polkit-more-flagsLennart Poettering2024-03-132-40/+104
|\ \ \ \ | |_|_|/ |/| | | add two more flags to polkit client wrapper
| * | | polkit: add another flag that controls how to treat the PK absent caseLennart Poettering2024-03-132-29/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Typically if PK is not present we want to treat this as "denied". But sometimes it makes sense to treat this case as "allowed". In particular the combination POLKIT_ALWAYS_QUERY and POLKIT_DEFAULT_ALLOW makes a lot of sense: it means we can enable PK logic for actions where we so far bypassed the checks for root. With the new combination we can have a default policy of allowing some operation but still provide an effective hook to disable it. Also add some debug logging about PK operations and results as they are ongoing.
| * | | polkit: add new POLKIT_ALWAYS_QUERY flagLennart Poettering2024-03-132-8/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When this flag is set we'll disable the local shortcut that skips polkit checks for clients that are privileged, and assumes they are authenticated. Or in other words: if this flag is set, we'll query PK not matter what, regardless if it's root we talk about or any other user.
| * | | polkit: allow checking if we already acquired some actionLennart Poettering2024-03-132-4/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a new helper that basically just wraps async_polkit_query_have_action() and allows calling this without actually triggering a PK authentication operation: it just checks if we aleady have acquired an action or not.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-19 09:22:34 +0100