]> git.ipfire.org Git - thirdparty/systemd.git/blame - TODO
networkd: fix typo
[thirdparty/systemd.git] / TODO
CommitLineData
ee9c9500 1Bugfixes:
19aadacf 2* enabling an instance unit creates a pointless link, and
cff452c7
KS
3 the unit will be started with getty@getty.service:
4 $ systemctl enable getty@.service
5 ln -s '/usr/lib/systemd/system/getty@.service' '/etc/systemd/system/getty.target.wants/getty@.service'
6
f957632b
KS
7* Dangling symlinks of .automount unit files in .wants/ directories, set up
8 automount points even when the original .automount file did not exist
9 anymore. Only the .mount unit was still around.
10
a40593a0 11* properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point.
20ffc4c4 12
04ac7992
ZJS
13* shorten the message to sane length:
14
15 Cannot add dependency job for unit display-manager.service, ignoring: Unit display-manager.service failed to load: No such file or directory. See system logs and 'systemctl status display-manager.service' for details.
16
d8160f21
ZJS
17* systemctl --root=container/ set-default ... is totally borked.
18
f38afcd0 19External:
7b4da18c 20
f38afcd0 21* Fedora: when installing fedora with yum --installroot /var/run is a directory, not a symlink
466784c8 22 https://bugzilla.redhat.com/show_bug.cgi?id=975864
55d32caf 23
f38afcd0 24* Fedora: add an rpmlint check that verifies that all unit files in the RPM are listed in %systemd_post macros.
bafb15ba 25
f38afcd0 26* Fedora: post FPC ticket to move add %tmpfiles_create to the packaging guidelines
bafb15ba 27
eb124a97 28Features:
154ff088 29
769918ec
LP
30* consider adding RuntimeDirectoryUser= + RuntimeDirectoryGroup=
31
32* sd-event: define more intervals where we will shift wakeup intervals around in, 1h, 6h, 24h, ...
33
34* maybe add DefaultTimerAccuracySec= as global config option to set AccuracySec='s default value in .timer units
35
2a781fc9
LP
36* mount /sys/fs/cgroup read-only (but leave the subdirs writable)
37
6a3f892a 38* gpt-auto-generator:
2a781fc9
LP
39 - Support LUKS for root devices
40 - Define new partition type for encrypted swap? Support probed LUKS for encrypted swap?
6a3f892a 41 - Make /home automount rather than mount?
6a3f892a 42
efc141b8
LP
43* improve journalctl performance by loading journal files
44 lazily. Encode just enough information in the file name, so that we
45 don't have to open it to know that it is not interesting for us, for
46 the most common operations.
47
726a6e96 48* support transient mount units
7ba4fedb 49
18633fea
LP
50* Imply DevicePolicy=closed when PrivateDevices= is used
51
23fae271
LP
52* add an "input" group to udev logic and add all input devices to it
53
23fae271
LP
54* libsystemd-login: implement getpeer_unit(), get_peer_slice(), ...
55
65026403
LP
56* machined: provide calls GetMachineByAddress() on the manager
57 interface to get the machine for a local IP address, and
58 GetAddress() on the Machine interface to get the Address for a
59 machine. Implement via forking off child process which quickly joins
60 the cotnainer and passes data to parent. Show this in "machinectl
61 status", and use it to implement NSS module to provide automatic
62 name resolution for containers.
63
64* add generator that pulls in systemd-network from containers when
65 CAP_NET_ADMIN is set, more than the loopback device is defined, even
66 when it is otherwise off
f8901862 67
eda8f067
LP
68* MessageQueueMessageSize= and RLimitFSIZE= (and suchlike) should use parse_iec_size().
69
d4fdc205
LP
70* "busctl status" works only as root on dbus1, since we cannot read
71 /proc/$PID/exe
72
7bb29549
LP
73* systemctl (and possibly related tools): support a new switch that
74 allows enumerating units in local containers recursively. "systemctl
75 list-units -R" or so should not only lists on the host, but also the
76 services in all containers in a pretty way, to give an overview of
bddabb57 77 the entire system.
7bb29549 78
af1082b0
LP
79* implement Distribute= in socket units to allow running multiple
80 service instances processing the listening socket, and open this up
81 for ReusePort=
82
488ad3b3
LP
83* socket units: support creating sockets in different namespace,
84 opening it up for JoinsNamespaceOf=. This would require to fork off
85 a tiny process that joins the namespace and creates/binds the socket
86 and passes this back to PID1 via SCM_RIGHTS. This also could be used
87 to allow Chown/chgrp on sockets without requiring NSS in PID 1.
88
47c94a96
LP
89* New service property: maximum CPU and wallclock runtime for a service
90
09ecd746
LP
91* introduce bus call FreezeUnit(s, b), as well as "systemctl freeze
92 $UNIT" and "systemctl thaw $UNIT" as wrappers around this. The calls
93 should SIGSTOP all unit processes in a loop until all processes of
94 it are fully stopped. This can later be used for app management by
95 desktop UIs such as gnome-shell to freeze apps that are not visible
96 on screen, not unlike how job control works on the shell
97
ef417cfd
ZJS
98* completions:
99 - busctl zsh completion is outdated
100 - systemd-nspawn -Z/-L/-q is missing for zsh
ef417cfd 101 - manager property enumeration was broken when systemd moved to /usr/lib/
3333d748 102
f38afcd0 103* cgroups:
f38afcd0
LP
104 - implement per-slice CPUFairScheduling=1 switch
105 - handle jointly mounted controllers correctly
106 - introduce high-level settings for RT budget, swappiness
107 - how to reset dynamically changed unit cgroup attributes sanely?
108 - when reloading configuration, apply new cgroup configuration
109 - when recursively showing the cgroup hierarchy, optionally also show
110 the hierarchies of child processes
0bee65f0 111
f38afcd0
LP
112* transient units:
113 - allow creating auxiliary units with the same call
114 - add field to transient units that indicate whether systemd or somebody else saves/restores its settings, for integration with libvirt
115 - ensure scope units may be started only a single time
ebcf1f97 116
47c94a96
LP
117* Automatically configure swap partition to use for hibernation by looking for largest swap partition on the root disk?
118
718db961
LP
119* when we detect low battery and no AC on boot, show pretty splash and refuse boot
120
f38afcd0 121* machined, localed: when we try to kill an empty cgroup, generate an ESRCH error over the bus
718db961
LP
122
123* libsystemd-journal, libsystemd-login, libudev: add calls to easily attach these objects to sd-event event loops
124
966204e0
LP
125* be more careful what we export on the bus as (usec_t) 0 and (usec_t) -1
126
94676f3e 127* unify dispatch table in systemctl_main() and friends
6fd4d020 128
ced4d067
LP
129* Automatically configure swap partition to use for hibernation by looking for largest swap partition on the root disk?
130
af1082b0 131* socket-proxyd: Use sd-resolve to resolve the server address
41644622 132
41644622
LP
133* rfkill,backlight: we probably should run the load tools inside of the udev rules so that the state is properly initialized by the time other software sees it
134
7f79cd71 135* After coming back from hibernation reset hibernation swap partition using the /dev/snapshot ioctl APIs
0aafd43d 136
19aadacf
JE
137* If we try to find a unit via a dangling symlink, generate a clean
138 error. Currently, we just ignore it and read the unit from the search
df5f6971
LP
139 path anyway.
140
fcba531e
LP
141* refuse boot if /etc/os-release is missing or /etc/machine-id cannot be set up
142
8b8f2591
ZJS
143* given that logind now lets PID 1 do all nasty work, we can
144 probably reduce the capability set it retains substantially.
e10e429f 145 (we need CAP_SYS_ADMIN for drmSetMaster(), so maybe not worth it)
e1b7e7ec 146
6aaa8c2f 147* btrfs raid assembly: some .device jobs stay stuck in the queue
c3bb87db 148
e1b7e7ec 149* make sure gdm doesn't use multi-user-x but the new default X configuration file, and then remove multi-user-x from systemd
18d4e7c2 150
bdeeb6b5
LP
151* man: the documentation of Restart= currently is very misleading and suggests the tools from ExecStartPre= might get restarted.
152
153* load .d/*.conf dropins for device units
154
9444b1f2 155* gparted needs to disable auto-activation of mount units somehow, or
69af4503 156 maybe we should stop doing auto-activation of this after boot
9444b1f2 157 entirely. https://bugzilla.gnome.org/show_bug.cgi?id=701676
466784c8
KS
158 Maybe take a BSD lock at the disk device node and teach udev to
159 check for that and suppress event handling.
9444b1f2 160
4e09014d
LP
161* allow implementation of InaccessibleDirectories=/ plus
162 ReadOnlyDirectories=... for whitelisting files for a service.
163
6bb648a1 164* sd-bus:
eb01ba5d 165 - when kdbus doesn't take our message without memfds, try again with memfds
86312ab8 166 - implement monitor logic
f38afcd0 167 - see if we can drop more message validation on the sending side
f38afcd0 168 - add API to clone sd_bus_message objects
bee7e928
LP
169 - systemd-bus-proxyd needs to enforce good old XML policy
170 - upload minimal kdbus policy into the kernel at boot
80caea6c 171 - kdbus: matches against source or destination pids for an "strace -p"-like feel. Problem: The PID info needs to be available in userspace too...
ab9716c2 172 - longer term: priority inheritance
452de75e 173 - check sender of response messages
df98a87b
LP
174 - dbus spec updates:
175 - kdbus mapping
176 - NameLost/NameAcquired obsolete
177 - GVariant
bee7e928 178 - "const" properties (posted)
2ecfc64e 179 - path escaping
00586799 180 - port exit-on-idle logic to byebye ioctl
6a8b5fa4 181 - update systemd.special(7) to mention that dbus.socket is only about the compatibility socket now
ab9716c2
LP
182 - allow updating attach flags during runtime
183 - pid1: peek into activating message when activating a service
69727e6d 184 - test bloom filter generation indexes
2fcb3af6 185 - introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list
0f3e07b7
LP
186 - port to sd-resolve for connecting to TCP dbus servers
187 - constructors for bus messages should probably not be OK with a NULL bus pointer
756461fd 188 - .busname units should not use get_user_creds()/get_cgroup_creds() but instead do NSS only in temporarily forked off child
f38afcd0
LP
189
190* sd-event
12179984 191 - allow multiple signal handlers per signal?
eb01ba5d 192
154ff088
LP
193* in the final killing spree, detect processes from the root directory, and
194 complain loudly if they have argv[0][0] == '@' set.
195 https://bugzilla.redhat.com/show_bug.cgi?id=961044
196
69af4503 197* investigate endianness issues of UUID vs. GUID
e8a7a315 198
461bd8e4
LP
199* dbus: when a unit failed to load (i.e. is in UNIT_ERROR state), we
200 should be able to safely try another attempt when the bus call LoadUnit() is invoked.
201
ab8e074c
LP
202* add a pam module that passes the hdd passphrase into the PAM stack and then expires it, for usage by gdm auto-login.
203
204* add a pam module that on password changes updates any LUKS slot where the password matches
205
b454b112
LP
206* maybe add a generator that looks for "systemd.run=" on the kernel cmdline for container usercases...
207
208* timedatctl, localectl: possibly make some commands work without the daemon, for chroot situations...
209
06db8540
LP
210* timedatectl: print a nicer message when enabling ntp fails because ntpd/chrony are not installed
211
4ff49cb6
LP
212* cgtop: make cgtop useful in a container
213
fff87a35
ZJS
214* test/:
215 - add 'set -e' to scripts in test/
216 - make stuff in test/ work with separate output dir
b8b4d3dd 217
b8b4d3dd
LP
218* systemctl delete x.snapshot leaves no trace in logs (at least at default level).
219
3df82d5a
LP
220* make the coredump collector tool move itself into the user's cgroup
221 so that the coredump is properly written to the user's own journal
222 file.
223
b5c03638
LP
224* seems that when we follow symlinks to units we prefer the symlink
225 destination path over /etc and /usr. We shouldn't do that. Instead
226 /etc should always override /run+/usr and also any symlink
227 destination.
228
eece8c6f
LP
229* when isolating, try to figure out a way how we implicitly can order
230 all units we stop before the isolating unit...
231
356ce991
LP
232* teach ConditionKernelCommandLine= globs or regexes (in order to match foobar={no,0,off})
233
09f727ee
LP
234* after all byte-wise realloc() is slow, even on glibc, so i guess we
235 need manual exponential loops after all
236
795607b2
LP
237* BootLoaderSpec: drop allowing ext234 for $BOOT. Clarify that the
238 kernel has to be in $BOOT. Clarify that the boot loader should be
239 installed to the ESP. Define a way how an installer can figure out
240 whether a BLS compliant boot loader is installed.
241
0be8342c
LP
242* think about requeuing jobs when daemon-reload is issued? usecase:
243 the initrd issues a reload after fstab from the host is accessible
244 and we might want to requeue the mounts local-fs acquired through
245 that automatically.
246
e5ec62c5 247* systemd-inhibit: make taking delay locks useful: support sending SIGINT or SIGTERM on PrepareForSleep()
54c31a79 248
826872b6
LP
249* journal-or-kmsg is currently broken? See reverted commit 4a01181e460686d8b4a543b1dfa7f77c9e3c5ab8.
250
54c31a79 251* remove any syslog support from log.c -- we probably can't do this before split-off udev is gone for good
826872b6 252
3679d112
LP
253* shutdown logging: store to EFI var, and store to USB stick?
254
3679d112
LP
255* write UI tool that pops up emergency messages from the journal as notification
256
257* think about window-manager-run-as-user-service problem: exit 0 → activate shutdown.target; exit != 0 → restart service
258
cbb77121
LP
259* use "log level" rather than "log priority" everywhere
260
d01a73b6
LP
261* timedate: have global on/off switches for auto-time (NTP), and auto-timezone that connman can subscribe to.
262
356ce991 263* merge unit_kill_common() and unit_kill_context()
490b7e47 264
81d112a8 265* introduce ExecCondition= in services
490b7e47 266
b44be3ec 267* EFI:
b44be3ec 268 - write man page for efi boot generator
b44be3ec
LP
269 - honor language efi variables for default language selection (if there are any?)
270 - honor timezone efi variables for default timezone selection (if there are any?)
466784c8 271 - change bootctl to be backed by systemd-bootd to control temporary and persistent default boot goal plus efi variables
e4181484 272
c0fe5db5 273* maybe do not install getty@tty1.service symlink in /etc but in /usr?
e9fd44b7 274
b44be3ec 275* re-enable "make check" for gtk-doc (broken for unknown reason)
e9fd44b7 276
b44be3ec
LP
277* fstab: add new mount option x-systemd-after=/foobar/waldo to allow manual dependencies to other mount points
278 https://bugzilla.redhat.com/show_bug.cgi?id=812826
3040728b 279
b44be3ec 280* print a nicer explanation if people use variable/specifier expansion in ExecStart= for the first word
8ed20651 281
b44be3ec 282* mount: turn dependency information from /proc/self/mountinfo into dependency information between systemd units.
e6c6e7af 283
b44be3ec
LP
284* logind:
285 - logind: optionally, ignore idle-hint logic for autosuspend, block suspend as long as a session is around
286 - When we update the kernel all kind of hibernation should be prohibited until shutdown/reboot
287 - logind: wakelock/opportunistic suspend support
288 - Add pretty name for seats in logind
289 - logind: allow showing logout dialog from system?
b44be3ec 290 - logind: add equivalent to sd_pid_get_owner_uid() to the D-Bus API
e5ec62c5 291 - we should probably handle SIGTERM/SIGINT to not leave dot files around, just in case
f38afcd0
LP
292 - session scopes/user unit: add RequiresMountsFor for the home directory of the user
293 - add Suspend() bus calls which take timestamps to fix double suspend issues when somebody hits suspend and closes laptop quickly.
294 - if pam_systemd is invoked by su from a process that is outside of a
295 any session we should probably just become a NOP, since that's
296 usually not a real user session but just some system code that just
297 needs setuid().
e673ad04 298
b44be3ec 299* exec: when deinitializating a tty device fix the perms and group, too, not only when initializing. Set access mode/gid to 0620/tty.
e673ad04 300
b44be3ec 301* service: watchdog logic: for testing purposes allow ping, but do not require pong
e673ad04 302
b44be3ec 303* journal:
c06bf414 304 - import and delete pstore filesystem content at startup
b44be3ec
LP
305 - journald: also get thread ID from client, plus thread name
306 - journal: when waiting for journal additions in the client always sleep at least 1s or so, in order to minimize wakeups
307 - add API to close/reopen/get fd for journal client fd in libsystemd-journal.
308 - fallback to /dev/log based logging in libsystemd-journal, if we can't log natively?
309 - declare the local journal protocol stable in the wiki interface chart
310 - journal: reuse XZ context
311 - sd-journal: speed up sd_journal_get_data() with transparent hash table in bg
312 - journald: when dropping msgs due to ratelimit make sure to write
313 "dropped %u messages" not only when we are about to print the next
314 message that works, but alraedy after a short tiemout
315 - check if we can make journalctl by default use --follow mode inside of less if called without args?
316 - maybe add API to send pairs of iovecs via sd_journal_send
317 - journal: when writing journal auto-rotate if time jumps backwards
f47ec8eb 318 - journal: add a setgid "systemd-journal" utility to invoke from libsystemd-journal, which passes fds via STDOUT and does PK access
b44be3ec
LP
319 - journactl: support negative filtering, i.e. FOOBAR!="waldo",
320 and !FOOBAR for events without FOOBAR.
b44be3ec 321 - journal: send out marker messages every now and then, and immediately sync with fdatasync() afterwards, in order to have hourly guaranteed syncs.
b44be3ec
LP
322 - journal-send.c, log.c: when the log socket is clogged, and we drop, count this and write a message about this when it gets unclogged again.
323 - journal: find a way to allow dropping history early, based on priority, other rules
324 - journal: When used on NFS, check payload hashes
b44be3ec 325 - journald: check whether it is OK if the client can still modify delivered journal entries
f47ec8eb 326 - journal live copy, based on libneon (client) and libmicrohttpd (server)
b44be3ec
LP
327 - journald: add kernel cmdline option to disable ratelimiting for debug purposes
328 - refuse taking lower-case variable names in sd_journal_send() and friends.
329 - journald: we currently rotate only after MaxUse+MaxFilesize has been reached.
330 - journal: deal nicely with byte-by-byte copied files, especially regards header
b44be3ec
LP
331 - journal: store euid in journal if it differs from uid
332 - journal: sanely deal with entries which are larger than the individual file size, but where the components would fit
601d9d6f 333 - Replace utmp, wtmp, btmp, and lastlog completely with journal
f38afcd0 334 - journalctl: instead --after-cursor= maybe have a --cursor=XYZ+1 syntax?
f38afcd0
LP
335 - tmpfiles: when applying ownership to /run/log/journal, also do this for the journal fails contained in it
336 - when a kernel driver logs in a tight loop, we should ratelimit that too.
337 - journald: optionally, log debug messages to /run but everything else to /var
338 - journald: when we drop syslog messages because the syslog socket is
339 full, make sure to write how many messages are lost as first thing
340 to syslog when it works again.
341 - journald: make sure ratelimit is actually really per-service with the new cgroup changes
342 - change systemd-journal-flush into a service that stays around during
343 boot, and causes the journal to be moved back to /run on shutdown,
344 so that we don't keep /var busy. This needs to happen synchronously,
345 hence doing this via signals is not going to work.
b44be3ec
LP
346
347* document:
8b8f2591 348 - document that deps in [Unit] sections ignore Alias= fields in
b44be3ec
LP
349 [Install] units of other units, unless those units are disabled
350 - man: clarify that time-sync.target is not only sysv compat but also useful otherwise. Same for similar targets
b44be3ec 351 - document the exit codes when services fail before they are exec()ed
b44be3ec 352 - document that service reload may be implemented as service reexec
eb124a97 353 - document in wiki how to map ical recurrence events to systemd timer unit calendar specifications
f38afcd0
LP
354 - add a man page containing packaging guidelines and recommending usage of things like Documentation=, PrivateTmp=, PrivateNetwork= and ReadOnlyDirectories=/etc /usr.
355 - document systemd-journal-flush.service properly
f38afcd0
LP
356 - documentation: recommend to connect the timer units of a service to the service via Also= in [Install]
357 - man: document the very specific env the shutdown drop-in tools live in
358 - man: extend runlevel(8) to mention that runlevels suck, and are dead. Maybe add runlevel(7) with a note about that too
359 - man: add more examples to man pages
360 - man: maybe sort directives in man pages, and take sections from --help and apply them to man too
b44be3ec
LP
361
362* systemctl:
363 - systemctl list-jobs - show dependencies
364 - add systemctl switch to dump transaction without executing it
365 - Add a verbose mode to "systemctl start" and friends that explains what is being done or not done
366 - "systemctl disable" on a static unit prints no message and does
367 nothing. "systemctl enable" does nothing, and gives a bad message
368 about it. Should fix both to print nice actionable messages.
369 - print nice message from systemctl --failed if there are no entries shown, and hook that into ExecStartPre of rescue.service/emergency.service
370 - add new command to systemctl: "systemctl system-reexec" which reexecs as many daemons as virtually possible
371 - systemctl enable: improve the success messages (i.e. more human readable, less shell-like)
372 - systemctl enable: fail if target to alias into doesn't exist? maybe show how many units are enabled afterwards?
373 - systemctl: "Journal has been rotated since unit was started." message is misleading
374 - support "systemctl stop foobar@.service" to stop all units matching a certain template
375 - Something is wrong with symlink handling of "autovt@.service" in "systemctl list-unit-files"
f38afcd0 376 - rework wait filter to not require match callback
f38afcd0
LP
377 - better error message if you run systemctl without systemd running
378 - systemctl status output should should include list of triggering units and their status
8b8f2591 379 - in systemctl list-timers show time triggering units ran last
f38afcd0
LP
380
381* unit install:
382 - "systemctl mask" should find all names by which a unit is accessible
383 (i.e. by scanning for symlinks to it) and link them all to /dev/null
384 - "systemctl disable" of a unit instance removes all symlinks, but should
385 only remove the instance symlink (systemctl disable of a template
386 unit however should remove them all).
387 - systemctl list-unit-files should list generated files (and probably with a new state "generated" for them, or so)
388 - systemctl: maybe add "systemctl add-wants" or so...
8b04b925 389
e673ad04
LP
390* introduce ntp.service (or suchlike) as symlink that is used to arbitrate between various NTP implementations
391
b44be3ec
LP
392* deal with sendmail/postfix exclusivity
393
394* timer units:
b44be3ec
LP
395 - timer events with system resume
396 - timer units should get the ability to trigger when:
397 o CLOCK_REALTIME makes jumps (TFD_TIMER_CANCEL_ON_SET)
398 o DST changes
eb124a97 399 - Support 2012-02~4 as syntax for specifying the fourth to last day of the month.
f38afcd0
LP
400 - calendarspec: support value ranges with ".." notation. Example: 2013-4..8-1
401 - when parsing calendar timestamps support the UTC timezone (even if we won't support arbitrary timezone specs, support UTC itself certainly makes sense), also support syntaxes such as +0200
90e071d1
LP
402 - Modulate timer frequency based on battery state
403 - anacron-like feature
d2e83c23
KS
404
405* update the kernel's TZ (sys_tz) when DST changes
406
407* sync down the system time to the RTC when:
f6113d42
KS
408 - CLOCK_REALTIME makes jumps (the user explicitely requested a time set)
409 - DST/timezone changes && ntp is active && RTC-in-localtime (never do it without ntp)
d2e83c23 410 This takes care of syncing ntpdate updates to the RTC, and DST updates for localtime
7a43e910 411 mode, it will never touch the RTC if the no reliable time source is active or the
d2e83c23 412 user did not request anything like it.
c55b1b59 413
e707c494
LP
414* libunwind support for coredump pattern hook, and includes this in
415 the message for coredumps. After all, libunwind is now capable to
416 unwind coredumps since a few weeks ago. This probably requires that
7f873283
LP
417 we have nice support for multi-line messages on display in
418 logs-show.c. Alternatively: use libelfutil, which seems to be the
419 better supported alternative.
e707c494 420
a19554ed
LP
421* add libsystemd-password or so to query passwords during boot using the password agent logic
422
1cb88f2c
LP
423* If we show an error about a unit (such as not showing up) and it has no Description string, then show a description string generated form the reverse of unit_name_mangle().
424
425* fedup: add --unit to systemctl switch-root somehow
426* fedup: don't delete initrd on switch-root
427* fedup: generator
603cd8fe 428
f38afcd0 429* timedated: refuse time changes when NTP is on
6d0274f1 430
a7a3f28b
LP
431* clean up date formatting and parsing so that all absolute/relative timestamps we format can also be parsed
432
b44be3ec 433* on shutdown: move utmp, wall, audit logic all into PID 1 (or logind?), get rid of systemd-update-utmp-runlevel
08f95888 434
7d8197d1
KS
435* add "provisioning" instructions to setup an empty /etc + /var
436 - used to setup a new container from a shared /usr
437 - superset of tmpfiles model
438 - instructions shipped by packages and stored in /usr/lib/
439 - compose /etc/passwd and /etc/group, copy files
440 - able to create uid + gid used by packages, for file ownership
441
9ee58bdd
KS
442* make repeated alt-ctrl-del presses printing a dump, or even force a reboot without
443 waiting for the timeout
dcfc4b2e 444
71ef24d0
LP
445* hostnamed: before returning information from /etc/machine-info.conf check the modification data and reread. Similar for localed, ...
446
1b89884b
LP
447* currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab isn't
448
b44be3ec 449* nspawn:
b44be3ec 450 - nspawn: --read-only is not applied recursively to submounts
b44be3ec 451 - bind mount read-only the cgroup tree higher than nspawn
9e281251 452 - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters
9cb74bcb 453 - refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK).
a56b63f4 454 - support taking a btrfs snapshot at startup and dropping it afterwards
af1082b0 455 - maybe: hookup nspawn and PrivateNetwork=yes with "ip netns"
474cba1c
TG
456 - generate predictable mac addresses for the netdev we create (host0), maybe based on guest's machine
457 name and machine-id of host (?)
b44be3ec
LP
458
459* cryptsetup:
b44be3ec
LP
460 - cryptsetup-generator: allow specification of passwords in crypttab itself
461 - move cryptsetup key caching into kernel keyctl?
462 https://bugs.freedesktop.org/show_bug.cgi?id=54982
5f1dac6b 463 - support rd.luks.allow-discards= kernel cmdline params in cryptsetup generator
f8019684 464
424a19f8 465* hw watchdog: optionally try to use the preset watchdog timeout instead of always overriding it
41f9172f 466 https://bugs.freedesktop.org/show_bug.cgi?id=54712
424a19f8
LP
467
468* after deserializing sockets in socket.c we should reapply sockopts and things
469
a1cccad1
LP
470* make timer units go away after they elapsed
471
8556879e 472* http://lists.freedesktop.org/archives/systemd-devel/2012-September/006502.html
d05c556b 473 (network and remote-fs on shutdown)
8556879e 474
8556879e
LP
475* come up with a nice way to write queue/read_ahead_kb for a block device without interfering with readahead
476
4a30847b
LP
477* move PID 1 segfaults to /var/lib/systemd/coredump?
478
5e8b2883
LP
479* create /sbin/init symlinks from the build system
480
d87be9b0
LP
481* Query Paul Moore about relabelling socket fds while they are open
482
38a60d71
LP
483* allow writing multiple conditions in unit files on one line
484
d8b78264
LP
485* explore multiple service instances per listening socket idea
486
68f16003 487* MountFlags=shared acts as MountFlags=slave right now.
0790b9fe 488
5a7e9599
LP
489* ReadOnlyDirectories= is not applied recursively to submounts
490
68f16003
LP
491* drop PID 1 reloading, only do reexecing (difficult: Reload()
492 currently is properly synchronous, Reexec() is weird, because we
493 can't delay the response properly until we are back, so instead of
494 being properly synchronous we just keep open the fd and close it
edca2e23 495 when done. That means clients don't get a successful method reply,
68f16003 496 but much rather a disconnect on success.
0790b9fe 497
fd4d89b2
LP
498* properly handle loop back mounts via fstab, especially regards to fsck/passno
499
8230e26d
LP
500* allow services with no ExecStart= but with an ExecStop=
501
4d9909c9
LP
502* dracut-shutdown needs to be ordered before unmounting /boot
503
47ae7201
LP
504* initialize the hostname from the fs label of /, if /etc/hostname does not exist?
505
88a6c589 506* rename "userspace" to "core-os"
8351ceae 507
9946996c
LP
508* load-fragment: when loading a unit file via a chain of symlinks
509 verify that it isn't masked via any of the names traversed.
510
3471bedc
LP
511* introduce Type=pid-file
512
59cea26a 513* change Requires=basic.target to RequisiteOverride=basic.target
35eb6b12 514
5b40d337
LP
515* when breaking cycles drop sysv services first, then services from /run, then from /etc, then from /usr
516
d3a3f222
KS
517* automount: implement expire:
518 - set superblock timeout AUTOFS_DEV_IOCTL_TIMEOUT_CMD
519 - periodically run AUTOFS_DEV_IOCTL_EXPIRE_CMD
520 - every timeout/4 (original autofs logic)
521 - blocking, needs a thread
522 - run until -EAGAIN
523 - receive expire packet on pipe if kernel tells the timeout is over
524 - call umount
525 - answer expire packet on pipe with AUTOFS_DEV_IOCTL_{READY,FAIL}_CMD
526 - AUTOFS_DEV_IOCTL_EXPIRE_CMD returns
465349c0 527
e01a15b7 528* ExecOnFailure=/usr/bin/foo
a888b352 529
abd55b16 530* udev:
3f60bcb5 531 - remove src/udev/udev-builtin-firmware.c (CONFIG_FW_LOADER_USER_HELPER=n)
abd55b16 532 - move to LGPL
abd55b16
KS
533 - kill scsi_id
534 - add trigger --subsystem-match=usb/usb_device device
e8d842a0 535 - reimport udev db after MOVE events for devices without dev_t
b8217b7b 536
169c4f65
LP
537* when a service has the same env var set twice we actually store it twice and return that in systemctl show -p... We should only show the last setting
538
fb0864e7
LP
539* introduce mix of BindTo and Requisite
540
9586cdfa
LP
541* add DeleteSocketsOnStop=yes|no option to socket units
542
7f110ff9
LP
543* There's currently no way to cancel fsck (used to be possible via C-c or c on the console)
544
d0e5a333
LP
545* add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/
546
d0e5a333
LP
547* default unix qlen is too small (10). bump sysctl? add sockopt?
548
87a8baa3
LP
549* save coredump in Windows/Mozilla minidump format
550
551* support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting)
552
65c0cf71
LP
553* default to actual 32bit PIDs, via /proc/sys/kernel/pid_max
554
f957632b
KS
555* be able to specify a forced restart of service A where service B depends on, in case B
556 needs to be auto-respawned?
557
ad740100
LP
558* when a bus name of a service disappears from the bus make sure to queue further activation requests
559
f38afcd0
LP
560* tmpfiles:
561 - check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar
562 - apply "x" on "D" too (see patch from William Douglas)
7d441ddb 563
b44be3ec 564* for services: don't set $HOME in services unless requested
14e639ae 565
ff01d048
LP
566* hide PAM/TCPWrap options in fragment parser when compile time disabled
567
d3c7d7dd 568* when we automatically restart a service, ensure we restart its rdeps, too.
72b9ed82 569
1d6702e8
LP
570* allow Type=simple with PIDFile=
571 https://bugzilla.redhat.com/show_bug.cgi?id=723942
572
71092d70
LP
573* move PAM code into its own binary
574
1258097c
LP
575* implement Register= switch in .socket units to enable registration
576 in Avahi, RPC and other socket registration services.
577
a4c279f8
LP
578* make sure systemd-ask-password-wall does not shutdown systemd-ask-password-console too early
579
7c697168 580* support sd_notify() style notification when reload begins (RELOADING=1), reload is finished (READY=1), and add ReloadSignal= then to use in combination
253ee27a 581
71092d70 582* support sd_notify() style notification when shutting down, to make auto-exit bus services work (STOPPING=1)
8d0e38a2 583
f28f1daf
LP
584* verify that the AF_UNIX sockets of a service in the fs still exist
585 when we start a service in order to avoid confusion when a user
586 assumes starting a service is enough to make it accessible
587
f38afcd0 588* support User= and Group= attributes for AF_UNIX sockets. (difficult, requires NSS from PID 1?)
a012ab52 589
88a07670
LP
590* Make it possible to set the keymap independently from the font on
591 the kernel cmdline. Right now setting one resets also the other.
592
71092d70 593* and a dbus call to generate target from current state
916abb21 594
b44be3ec
LP
595* readahead:
596 - drop /.readahead on bigger upgrades with yum
597 - move readahead files into /var (look for them with .path units?)
598 - readahead: use BTRFS_IOC_DEFRAG_RANGE instead of BTRFS_IOC_DEFRAG ioctl, with START_IO
599 - readahead: when bumping /sys readahead variable save mtime and compare later to detect changes
600 - readahead: make use of EXT4_IOC_MOVE_EXT, as used by http://e4rat.sourceforge.net/
b23de6af 601
21bdae12
LP
602* add support for /bin/mount -s
603
9534ce54
LP
604* GC unreferenced jobs (such as .device jobs)
605
68c7d001 606* write blog stories about:
796b06c2 607 - hwdb: what belongs into it, lsusb
68c7d001
LP
608 - enabling dbus services
609 - status update
7a2a0b90 610 - how to make changes to sysctl and sysfs attributes
253ee27a 611 - remote access
5d0fcd7c
LP
612 - how to pass throw-away units to systemd, or dynamically change properties of existing units
613 - how to integrate cgconfig and suchlike with systemd
8bbabc44 614 - testing with Harald's awesome test kit
f530371f 615 - auto-restart
e707c494 616 - how to develop against journal browsing APIs
a19554ed 617 - the journal HTTP iface
a73d88fa 618 - non-cgroup resource management
a74a8793 619 - dynamic resource management with cgroups
3040728b 620 - refreshed, longer missions statement
3679d112
LP
621 - calendar time events
622 - init=/bin/sh vs. "emergency" mode, vs. "rescue" mode, vs. "multi-user" mode, vs. "graphical" mode, and the debug shell
623 - how to create your own target
624 - instantiated apache, dovecot and so on
625 - hooking a script into various stages of shutdown/rearly booot
73090dc8 626
44143309 627* allow port=0 in .socket units
3d57c6ab 628
71092d70 629* support systemd.mask= on the kernel command line.
3f7a8c4e 630
260abb78 631* recreate systemd's D-Bus private socket file on SIGUSR2
2791a8f8 632
a8f11321
LP
633* Support --test based on current system state
634
21bdae12
LP
635* investigate whether the gnome pty helper should be moved into systemd, to provide cgroup support.
636
c32e0c40
LP
637* maybe introduce ExecRestartPre=
638
59fee421
LP
639* dot output for --test showing the 'initial transaction'
640
71092d70 641* fingerprint.target, wireless.target, gps.target, netdevice.target
246756ca 642
50f2a90d 643* io priority during initialization
8fe914ec 644
9534ce54
LP
645* drop cap bounding set in readahead and other services
646
7ba97195 647* systemd-python:
7ba97195
ZJS
648 - figure out a simple way to wait for journal events in a way that
649 works with ^C
b04c8c83 650 - add documentation to systemd.daemon
7ba97195 651
8973790e
LP
652* bootchart:
653 - plot per-process IO utilization
654 - group processes based on service association (cgroups)
655 - document initcall_debug
8973790e
LP
656 - kernel cmdline "bootchart" option for simplicity?
657
af6f0d42
TG
658* udev-link-config:
659 - Make sure ID_PATH is always exported and complete for
660 network devices where possible, so we can safely rely
661 on Path= matching
af6f0d42 662
88e4d1d7 663* sd-rtnl:
32216660 664 - add support for exiting containers without reading them fully first
88e4d1d7
TG
665 - add support for more attribute types
666
0a4b9a07 667* networkd:
c74ecd71
TG
668 - add more keys to [Route] and [Address] sections
669 - add support for more DHCPv4 options (and, longer term, other kinds of dynamic config)
0a4b9a07 670 - add proper initrd support (in particular generate .network/.link files based on /proc/cmdline)
e8d842a0 671 - add reduced [Link] support to .network files
5c1d3fc9 672 - add IPv4LL tests (inspire by DHCP)
5c1d3fc9
UTL
673 - add Scope= parsing option for [Network]
674 - change LL address generation and make it predictable like get_mac() (link-config.c)
675 - have smooth transition from LL to routable address, without disconnecting clients.
0a4b9a07 676
2f8cd170 677External:
74fe1fe3 678
cc9784c6 679* dbus:
3377af3e 680 - natively watch for dbus-*.service symlinks (PENDING)
b44be3ec 681 - teach dbus to activate all services it finds in /etc/systemd/services/org-*.service
cc9784c6 682
71092d70
LP
683* fix alsa mixer restore to not print error when no config is stored
684
74fe1fe3
LP
685* make cryptsetup lower --iter-time
686
9096ad36 687* patch kernel for xattr support in /dev, /proc/, /sys?
06ae4bfe 688
69b1c674
KS
689* NTP: the kernel's 11-minutes-mode syncs the system time to the RTC, but only
690 in an ~30 minutes window. It does not adjust larger differences. Find a way
691 to tell the kernel, to always do a full time sync when the RTC is in UTC and
692 we are in 11-minutes-mode. When we trust the system time to NTP we also want
693 the RTC to sync up.
694
71092d70 695* kernel: add device_type = "fb", "fbcon" to class "graphics"
14bd37fe 696
8973790e
LP
697* drop accountsservice's StandardOutput=syslog and Type=dbus fields
698
699* dbus upstream still refers to dbus.target and shouldn't
700
701* dbus: in fedora, make /var/lib/dbus/machine-id a symlink to /etc/machine-id
702
703* add "# export SYSTEMD_PAGER=" to bash login
704
705* /usr/bin/service should actually show the new command line
706
d2bbca68 707* fedora: suggest auto-restart on failure, but not on success and not on coredump. also, ask people to think about changing the start limit logic. Also point people to RestartPreventExitStatus=, SuccessExitStatus=
8973790e
LP
708
709* fedora: F20: go timer units all the way, leave cron.daily for cron
710
711* neither pkexec nor sudo initialize environ[] from the PAM environment?
b1ce67bf 712
4641a16b 713* fedora: update policy to declare access mode and ownership of unit files to root:root 0644, and add an rpmlint check for it
19aa7c4f 714
129126f3 715Regularly:
874aa2cc 716
129126f3 717* look for close() vs. close_nointr() vs. close_nointr_nofail()
5021be21 718
129126f3 719* check for strerror(r) instead of strerror(-r)
5b6319dc
LP
720
721* Use PR_SET_PROCTITLE_AREA if it becomes available in the kernel
8c6db833 722
444a79d3
LP
723* pahole
724
71092d70 725* set_put(), hashmap_put() return values check. i.e. == 0 doesn't free()!
a3a3e5b6 726
4db17f29 727* use secure_getenv() instead of getenv() where appropriate
88fae6e0 728
d05c556b
ZJS
729* link up selected blog stories from man pages and unit files Documentation= fields
730
9e5f3dbb 731Scheduled for removal or fixing:
a3a3e5b6 732
9e5f3dbb 733* xxxOverridable dependencies (probably: fix)