Merge pull request #7381 from poettering/cgroup-unified-delegate-rework

Fix delegation in the unified hierarchy + more cgroup work

diff --cc TODO
index 64fe9559f7db46cf24c5c6fec7a6cd09be098442,b18f8b5aa7296a9a380cfd34b9167ad1994fcf8a..9bd68a0ab1687faadeaef08eac60b3d7c27b6b6c
--- 1/TODO
--- 2/TODO
+++ b/TODO
@@@ -80,16 -83,12 +83,20 @@@ Features
  
  * maybe hook of xfs/ext4 quotactl() with services? i.e. automatically manage
    the quota of a the user indicated in User= via unit file settings, like the
-   other resource management concepts. Would mix nicely with DynamicUser=1
+   other resource management concepts. Would mix nicely with DynamicUser=1. Or
+   alternatively, do this with projids, so that we can also cover services
+   running as root. Quota should probably cover all the special dirs such as
+   StateDirectory=, LogsDirectory=, CacheDirectory=, as well as RootDirectory= if it
+   is set, plus the whole disk space any image configured with RootImage=.
  
 +* Introduce "exit" as an EmergencyAction value, and allow to configure a
 +  per-unit success/failure exit code to configure. This would be useful for
 +  running commands inside of services inside of containers, which could then
 +  propagate their failure state all the way up.
 +
 +* In DynamicUser= mode: before selecting a UID, use disk quota APIs on relevant
 +  disks to see if the UID is already in use.
 +
  * add dissect_image_warn() as a wrapper around dissect_image() that prints
    friendly log messages for the returned errors, so that we don't have to
    duplicate that in nspawn, systemd-dissect and PID 1.

diff --cc src/core/service.c
Simple merge

diff --cc src/core/service.h
Simple merge

diff --cc src/core/socket.c
Simple merge

diff --cc src/core/unit.c
Simple merge

diff --cc src/core/unit.h
Simple merge