]> git.ipfire.org Git - thirdparty/systemd.git/commit - NEWS
cgroup: remove support for NetClass= directive 2574/head
authorDaniel Mack <daniel@zonque.org>
Wed, 10 Feb 2016 14:44:01 +0000 (15:44 +0100)
committerDaniel Mack <daniel@zonque.org>
Wed, 10 Feb 2016 15:38:56 +0000 (16:38 +0100)
commit50f48ad37aad99c54de4db34b07c3825cdedcf41
treec0a07c9391acf5d1aa9968cd9e25eda9eab58785
parent16a798deb3b560f8b27848fe292a76b362c0b581
cgroup: remove support for NetClass= directive

Support for net_cls.class_id through the NetClass= configuration directive
has been added in v227 in preparation for a per-unit packet filter mechanism.
However, it turns out the kernel people have decided to deprecate the net_cls
and net_prio controllers in v2. Tejun provides a comprehensive justification
for this in his commit, which has landed during the merge window for kernel
v4.5:

  https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bd1060a1d671

As we're aiming for full support for the v2 cgroup hierarchy, we can no
longer support this feature. Userspace tool such as nftables are moving over
to setting rules that are specific to the full cgroup path of a task, which
obsoletes these controllers anyway.

This commit removes support for tweaking details in the net_cls controller,
but keeps the NetClass= directive around for legacy compatibility reasons.
13 files changed:
NEWS
man/systemd.resource-control.xml
shell-completion/zsh/_systemd
src/basic/cgroup-util.c
src/basic/cgroup-util.h
src/core/cgroup.c
src/core/cgroup.h
src/core/dbus-unit.c
src/core/load-fragment-gperf.gperf.m4
src/core/load-fragment.c
src/core/manager.c
src/core/manager.h
src/core/unit.c