]> git.ipfire.org Git - thirdparty/systemd.git/log
thirdparty/systemd.git
4 years agoMerge pull request #13216 from poettering/busctl-format-table
Lennart Poettering [Mon, 29 Jul 2019 18:44:54 +0000 (20:44 +0200)] 
Merge pull request #13216 from poettering/busctl-format-table

port "busctl list" to format-table.h

4 years agoMerge pull request #13217 from poettering/TODO-updates
Lennart Poettering [Mon, 29 Jul 2019 18:44:39 +0000 (20:44 +0200)] 
Merge pull request #13217 from poettering/TODO-updates

udev: warn if rules files are executable

4 years agoMerge pull request #13004 from shinygold/master
Lennart Poettering [Mon, 29 Jul 2019 17:48:13 +0000 (19:48 +0200)] 
Merge pull request #13004 from shinygold/master

cryptsetup: Improve support for keyfiles on removable storage

4 years agoMerge pull request #13201 from yuwata/networkctl-merge-table_add_cell
Lennart Poettering [Mon, 29 Jul 2019 17:32:14 +0000 (19:32 +0200)] 
Merge pull request #13201 from yuwata/networkctl-merge-table_add_cell

networkctl cleanups and improvements

4 years agologind: notify dbus of changes to session State
Thiebaud Weksteen [Mon, 29 Jul 2019 12:24:03 +0000 (14:24 +0200)] 
logind: notify dbus of changes to session State

This adds the option to monitor transitions between the state Opening ->
Active.

4 years agoMerge pull request #13207 from keszybz/symbolic-exit-code-names
Lennart Poettering [Mon, 29 Jul 2019 16:58:06 +0000 (18:58 +0200)] 
Merge pull request #13207 from keszybz/symbolic-exit-code-names

Symbolic exit code names

4 years agoupdate TODO 13217/head
Lennart Poettering [Mon, 29 Jul 2019 16:35:07 +0000 (18:35 +0200)] 
update TODO

4 years agoTODO: drop udev access mode item we just implemented
Lennart Poettering [Mon, 29 Jul 2019 14:00:26 +0000 (16:00 +0200)] 
TODO: drop udev access mode item we just implemented

4 years agoudev: warn on rules files with weird access modes
Lennart Poettering [Mon, 29 Jul 2019 13:59:20 +0000 (15:59 +0200)] 
udev: warn on rules files with weird access modes

4 years agoTODO: remove item implemented in f05e1ae6660
Lennart Poettering [Mon, 29 Jul 2019 13:52:27 +0000 (15:52 +0200)] 
TODO: remove item implemented in f05e1ae6660

4 years agopid1: use LOG_DEBUG/INFO/NOTICE for unit resource consumption message
Zbigniew Jędrzejewski-Szmek [Sat, 27 Jul 2019 21:40:24 +0000 (23:40 +0200)] 
pid1: use LOG_DEBUG/INFO/NOTICE for unit resource consumption message

We now log at LOG_INFO for any unit. Let's vary the log level
a bit, so that for normal short lived-units (less than 1 sec CPU),
we only log if debugging is enabled.

4 years agobusctl: port "busctl list" to format_table.h 13216/head
Lennart Poettering [Mon, 29 Jul 2019 16:39:41 +0000 (18:39 +0200)] 
busctl: port "busctl list" to format_table.h

Among generally being prettier this gives us JSON output for basically
free.

4 years agoformat-table: add TABLE_PID cell type
Lennart Poettering [Mon, 29 Jul 2019 16:39:32 +0000 (18:39 +0200)] 
format-table: add TABLE_PID cell type

4 years agoformat-table: automatically show empty cells in grey
Lennart Poettering [Mon, 29 Jul 2019 16:39:05 +0000 (18:39 +0200)] 
format-table: automatically show empty cells in grey

4 years agoformat-table: add table_fill_empty() to fill in empty cells until the specified colum...
Lennart Poettering [Mon, 29 Jul 2019 16:38:13 +0000 (18:38 +0200)] 
format-table: add table_fill_empty() to fill in empty cells until the specified column is reached

4 years agoformat-table: if NULL is spcified as data, let's patch to an empty cell
Lennart Poettering [Mon, 29 Jul 2019 16:36:59 +0000 (18:36 +0200)] 
format-table: if NULL is spcified as data, let's patch to an empty cell

This should make various calls easier that currently generate either an
empty cell or a regular cell depending on whether they have data to
show.

4 years agoformat-table: optionally show a specific string in empty cells
Lennart Poettering [Mon, 29 Jul 2019 16:36:19 +0000 (18:36 +0200)] 
format-table: optionally show a specific string in empty cells

For some cases it might make sense to show "-" instead of just spaces
for empty cells.

4 years agotest-network: add tests for new entries in "networkctl status" 13201/head
Yu Watanabe [Sun, 28 Jul 2019 06:23:39 +0000 (15:23 +0900)] 
test-network: add tests for new entries in "networkctl status"

4 years agonetworkctl : Add support to display vxlan properties
Susant Sahani [Thu, 25 Jul 2019 17:09:34 +0000 (22:39 +0530)] 
networkctl : Add support to display vxlan properties

4 years agonetworkctl: Add support to display bridge properties
Susant Sahani [Thu, 25 Jul 2019 17:09:34 +0000 (22:39 +0530)] 
networkctl: Add support to display bridge properties

4 years agotime-util: introduce jiffies_to_usec()
Yu Watanabe [Mon, 29 Jul 2019 14:47:04 +0000 (23:47 +0900)] 
time-util: introduce jiffies_to_usec()

4 years agotable: add missing NULL initialization
Yu Watanabe [Mon, 29 Jul 2019 14:30:32 +0000 (23:30 +0900)] 
table: add missing NULL initialization

4 years agotable: add TABLE_UINT8 or friends
Yu Watanabe [Sun, 28 Jul 2019 05:14:02 +0000 (14:14 +0900)] 
table: add TABLE_UINT8 or friends

4 years agotable: add TABLE_IN_ADDR and TABLE_IN6_ADDR
Yu Watanabe [Sun, 28 Jul 2019 04:43:28 +0000 (13:43 +0900)] 
table: add TABLE_IN_ADDR and TABLE_IN6_ADDR

4 years agonetworkctl: merge multiple table_add_cell() by using table_add_many()
Yu Watanabe [Sun, 28 Jul 2019 04:07:19 +0000 (13:07 +0900)] 
networkctl: merge multiple table_add_cell() by using table_add_many()

4 years agoanalyze: dot(1) man page link should be urlified
Lennart Poettering [Mon, 29 Jul 2019 09:40:30 +0000 (11:40 +0200)] 
analyze: dot(1) man page link should be urlified

I mean, let's not miss out on this excellent opportunity to use
hyperlinks on terminals.

(Unfortunately not see unless you invoke 'systemd-analyze --no-pager
--help', because 'less' is so much stuck in the past :-(.)

4 years agoMerge pull request #13212 from poettering/sleep-conf-default
Zbigniew Jędrzejewski-Szmek [Mon, 29 Jul 2019 14:03:54 +0000 (16:03 +0200)] 
Merge pull request #13212 from poettering/sleep-conf-default

sleep: document default HibernateDelaySec=

4 years agoNEWS: add entry about exit status changes 13207/head
Zbigniew Jędrzejewski-Szmek [Mon, 29 Jul 2019 13:53:24 +0000 (15:53 +0200)] 
NEWS: add entry about exit status changes

4 years agoanalyze: add exit-codes verb
Zbigniew Jędrzejewski-Szmek [Mon, 29 Jul 2019 13:44:39 +0000 (15:44 +0200)] 
analyze: add exit-codes verb

4 years agounits: use symbolic exit code names
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 13:00:08 +0000 (15:00 +0200)] 
units: use symbolic exit code names

(nspawn uses 133 which doesn't have a name. That's reasonable, because
there's less chance of conflict with a return value from the payload.)

4 years agosystemctl: do print all statuses/signals received from pid1
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 11:47:39 +0000 (13:47 +0200)] 
systemctl: do print all statuses/signals received from pid1

If for some reason we do not know some signal, instead of silently
skipping it, let's print it numerically. Likewise, 'show' is not the
right place to do value filtering for exit codes. If pid1 accepted it,
let's just print it with no fuss.

4 years agopid1: fix message about triggers missing services
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 11:00:01 +0000 (13:00 +0200)] 
pid1: fix message about triggers missing services

systemd[1]: systemd-tmpfiles-clean.timer: Refusing to start, unit systemd-tmpfiles-cle
an.timer to trigger not loaded.

4 years agopid1,systemctl: allow symbolic exit code names
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 10:37:31 +0000 (12:37 +0200)] 
pid1,systemctl: allow symbolic exit code names

4 years agoshared/bus-util: fix dbus serialization of {RestartPrevent,RestartForce,Success}ExitS...
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 09:55:49 +0000 (11:55 +0200)] 
shared/bus-util: fix dbus serialization of {RestartPrevent,RestartForce,Success}ExitStatus

We were passing 1/4th of the size in bytes as argument. So depending
on the size of the array, either we'd only transfer a subset of values,
or we'd get an alignment error.

4 years agobus-util: convert bus_log_{parse,create}_error into defines
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 09:43:53 +0000 (11:43 +0200)] 
bus-util: convert bus_log_{parse,create}_error into defines

With SYSTEMD_LOG_LOCATION=1, it is much more useful to see the location
where the call to bus_log_{parse,create}_error() was made, rather then
the one-line body of the helper function. Also, it's our internal code,
so having a one-line non-inline function doesn't make much sense anyway.

4 years agoshared/exit-status: use Bitmap instead of Sets
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 09:14:46 +0000 (11:14 +0200)] 
shared/exit-status: use Bitmap instead of Sets

I opted to embed the Bitmap structure directly in the ExitStatusSet.
This means that memory usage is a bit higher for units which don't define
this setting:

Service changes:
        /* size: 2720, cachelines: 43, members: 73 */
        /* sum members: 2680, holes: 9, sum holes: 39 */
        /* sum bitfield members: 7 bits, bit holes: 1, sum bit holes: 1 bits */
        /* last cacheline: 32 bytes */

        /* size: 2816, cachelines: 44, members: 73 */
        /* sum members: 2776, holes: 9, sum holes: 39 */
        /* sum bitfield members: 7 bits, bit holes: 1, sum bit holes: 1 bits */

But this way the code is simpler and we do less pointer chasing.

4 years agoshared/bitmap: constify various operators which don't modify bitmap
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 09:04:12 +0000 (11:04 +0200)] 
shared/bitmap: constify various operators which don't modify bitmap

4 years agoshared/exit-status: add exit_status_from_string()
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 08:19:53 +0000 (10:19 +0200)] 
shared/exit-status: add exit_status_from_string()

4 years agoshared/exit-status: turn status level into a bitmask, add "test"
Zbigniew Jędrzejewski-Szmek [Sun, 28 Jul 2019 08:13:21 +0000 (10:13 +0200)] 
shared/exit-status: turn status level into a bitmask, add "test"

The "test" doesn't really test much automatically, but it is still useful
to look at the mappings.

4 years agoMerge pull request #13209 from poettering/nspawn-volatile-merged-usr
Lennart Poettering [Mon, 29 Jul 2019 12:25:04 +0000 (14:25 +0200)] 
Merge pull request #13209 from poettering/nspawn-volatile-merged-usr

make incompatibility of non-/usr-merged distros with --volatile=yes more discoverable

4 years agoMerge pull request #13184 from poettering/nspawn-usr-root
Lennart Poettering [Mon, 29 Jul 2019 11:40:23 +0000 (13:40 +0200)] 
Merge pull request #13184 from poettering/nspawn-usr-root

Allow "systemd-nspawn -D / --volatile=yes" to work

4 years agosystemd-sleep: use swaps in priority order
Zach Smith [Mon, 15 Jul 2019 03:01:20 +0000 (20:01 -0700)] 
systemd-sleep: use swaps in priority order

In situations where hibernation is requested but resume= and
resume_offset= kernel parameters are not configured, systemd
will attempt to locate a suitable swap location by inspecting
/proc/swaps. This change will use the first suitable swap with
the highest configured priority.

4 years agoman: document default HibernateDelaySec= setting 13212/head
Lennart Poettering [Mon, 29 Jul 2019 10:49:38 +0000 (12:49 +0200)] 
man: document default HibernateDelaySec= setting

4 years agoupdate TODO
Lennart Poettering [Mon, 29 Jul 2019 10:49:13 +0000 (12:49 +0200)] 
update TODO

4 years agoman: document that --volatile=yes is not supported for split /usr systems 13209/head
Lennart Poettering [Mon, 29 Jul 2019 07:45:11 +0000 (09:45 +0200)] 
man: document that --volatile=yes is not supported for split /usr systems

4 years agonspawn: print an explanatory error when people try to use --volatile=yes on distros...
Lennart Poettering [Mon, 29 Jul 2019 07:14:17 +0000 (09:14 +0200)] 
nspawn: print an explanatory error when people try to use --volatile=yes on distros that are not /usr-merged

4 years agomore 243 news
Lennart Poettering [Mon, 29 Jul 2019 08:20:43 +0000 (10:20 +0200)] 
more 243 news

4 years agoman: document the kernel command line options to use when logging to kmsg
Lennart Poettering [Mon, 29 Jul 2019 07:24:09 +0000 (09:24 +0200)] 
man: document the kernel command line options to use when logging to kmsg

Prompted by:

https://lists.freedesktop.org/archives/systemd-devel/2019-July/043149.html

4 years agonspawn: when operating on the host image, let's move the root to a different director... 13184/head
Lennart Poettering [Thu, 25 Jul 2019 11:03:50 +0000 (13:03 +0200)] 
nspawn: when operating on the host image, let's move the root to a different directory first, via a bind mount

4 years agoshared: allow LOCK_SH locks on the host root in OS images
Lennart Poettering [Thu, 25 Jul 2019 10:58:01 +0000 (12:58 +0200)] 
shared: allow LOCK_SH locks on the host root in OS images

See the add comments for the justification.

4 years agonspawn: always take exclusive locks of ephemeral OS tree copies
Lennart Poettering [Thu, 25 Jul 2019 09:17:23 +0000 (11:17 +0200)] 
nspawn: always take exclusive locks of ephemeral OS tree copies

4 years agonspawn: don't look for .nspawn file above the top-level directory, it makes no sense
Lennart Poettering [Thu, 25 Jul 2019 09:16:50 +0000 (11:16 +0200)] 
nspawn: don't look for .nspawn file above the top-level directory, it makes no sense

4 years agonspawn: allow --volatile=yes instances of -D /
Lennart Poettering [Wed, 24 Jul 2019 15:32:09 +0000 (17:32 +0200)] 
nspawn: allow --volatile=yes instances of -D /

4 years agonews corrections and improvements (#13200)
Clinton Roy [Mon, 29 Jul 2019 07:35:25 +0000 (17:35 +1000)] 
news corrections and improvements (#13200)

* missing whitespace.

* NEWS: some small fixes (?) and improvements (???).

* a number of small corrections and (hopefully) improvements

4 years agoMerge pull request #13203 from yuwata/update-ja-po
Zbigniew Jędrzejewski-Szmek [Mon, 29 Jul 2019 07:31:07 +0000 (09:31 +0200)] 
Merge pull request #13203 from yuwata/update-ja-po

po: include network1.policy and update ja.po

4 years agocatalog: update Polish translation
Piotr Drąg [Sun, 28 Jul 2019 12:46:26 +0000 (14:46 +0200)] 
catalog: update Polish translation

4 years agoUpdate Touchpad for g6
Network Silence [Mon, 29 Jul 2019 01:45:35 +0000 (21:45 -0400)] 
Update Touchpad for g6

4 years agopo: update ja.po 13203/head
Yu Watanabe [Sun, 28 Jul 2019 13:07:05 +0000 (22:07 +0900)] 
po: update ja.po

4 years agopo: include network1.policy in the list for generating .pot file
Yu Watanabe [Sun, 28 Jul 2019 13:11:54 +0000 (22:11 +0900)] 
po: include network1.policy in the list for generating .pot file

4 years agoMerge pull request #13120 from keszybz/journal-min-use
Zbigniew Jędrzejewski-Szmek [Sat, 27 Jul 2019 19:00:38 +0000 (21:00 +0200)] 
Merge pull request #13120 from keszybz/journal-min-use

Increase journald min_use value

4 years agoerrno-util: return const string from strerror_safe()
Thomas Haller [Fri, 26 Jul 2019 08:57:26 +0000 (10:57 +0200)] 
errno-util: return const string from strerror_safe()

C's strerror() function does not return a "const char *" pointer
for the string. That has historic reasons and C99 even comments
that "[t]he array pointed to shall not be modified by the program".

Make the strerror_safe() wrapper correct this and be more strict
in this regard.

4 years agoMerge pull request #13194 from keszybz/chase-symlinks-testing
Lennart Poettering [Fri, 26 Jul 2019 16:42:31 +0000 (18:42 +0200)] 
Merge pull request #13194 from keszybz/chase-symlinks-testing

Chase symlinks testing

4 years agoMerge pull request #13195 from keszybz/minor-rewordings
Lennart Poettering [Fri, 26 Jul 2019 16:42:16 +0000 (18:42 +0200)] 
Merge pull request #13195 from keszybz/minor-rewordings

Minor rewordings

4 years agojournald: lower keep_free to 5% and raise min_use to 2% 13120/head
Zbigniew Jędrzejewski-Szmek [Fri, 19 Jul 2019 16:42:46 +0000 (18:42 +0200)] 
journald: lower keep_free to 5% and raise min_use to 2%

https://bugzilla.redhat.com/show_bug.cgi?id=1715699

> /dev/mapper/live-rw  6.4G  5.7G  648M  91% /
> systemd-journald[905]: Fixed min_use=1.0M max_use=648.7M max_size=81.0M min_size=512.0K keep_free=973.1M n_max_files=100

When journald is started, we pick keep_free as 15% of the disk size. When the
fs is almost filled, we will only keep one journal file around and rotate very
often (because min_size is very small).

Let's set min use to something reasonable, so that we get more useful logs that
will cover at least the full boot.

Some cases considered in the PR:

> /dev/mapper/live-rw 6.4G 5.7G 648M 91% /

keep_free→MIN(327,100)→100 MB.
min_use→16MB.
effective range: 16 MB – 548 MB

> /dev/mapper/fedora_krowka-root 78G 69G 5.7G 93% /

keep_free → MIN(4GB, 100MB)→100MB
min_use→16MB
effective range: 16 MB – 5.6 GB
(but then there's the max_use limit, which cuts the range down)

> 4TB, 4GB free

keep_free → MIN(209715, 100) → 100 MB
min_use→16MB
effective range: 16 MB – 4.9 GB
(also effectively limited by max_use)

Also replace unneeded width suffixes with spaces, I think this is more
readable, and drop DEFAULT_ prefixes in cases where this setting is
simply a bound, and cannot be overridden by user config, hence is not
a default.

4 years agofs-util: CHASE_NOFOLLOW is not limited to CHASE_OPEN 13194/head
Zbigniew Jędrzejewski-Szmek [Thu, 18 Jul 2019 11:18:36 +0000 (13:18 +0200)] 
fs-util: CHASE_NOFOLLOW is not limited to CHASE_OPEN

$ build/test-chase-symlinks /etc/os-release
/etc/os-release → /usr/lib/os-release

$ build/test-chase-symlinks --nofollow /etc/os-release /etc/../etc/os-release /etc/../etc/./././os-release
/etc/os-release → /etc/os-release
/etc/../etc/os-release → /etc/os-release
/etc/../etc/./././os-release → /etc/os-release

4 years agotest-chase-symlinks: manual test to call chase_symlinks()
Zbigniew Jędrzejewski-Szmek [Thu, 18 Jul 2019 11:16:57 +0000 (13:16 +0200)] 
test-chase-symlinks: manual test to call chase_symlinks()

v2:
- print --help to stdout, use size_t

4 years agobootctl: log message tweaks 13195/head
Zbigniew Jędrzejewski-Szmek [Fri, 26 Jul 2019 13:05:18 +0000 (15:05 +0200)] 
bootctl: log message tweaks

Follow-up for e44c3229f22459b189c1e79cb01fdb156672eb93.

4 years agoman: reword description of "-" for sysctl.d
Zbigniew Jędrzejewski-Szmek [Fri, 26 Jul 2019 13:01:36 +0000 (15:01 +0200)] 
man: reword description of "-" for sysctl.d

Follow-up for e08be64937.

4 years agoMerge pull request #13191 from poettering/sysctl-no-fail
Zbigniew Jędrzejewski-Szmek [Fri, 26 Jul 2019 12:57:56 +0000 (14:57 +0200)] 
Merge pull request #13191 from poettering/sysctl-no-fail

allow sysctl assignments to fail

4 years agoMerge pull request #13137 from poettering/efi-random
Zbigniew Jędrzejewski-Szmek [Fri, 26 Jul 2019 10:43:32 +0000 (12:43 +0200)] 
Merge pull request #13137 from poettering/efi-random

beef up random seed logic, add boot loader entropy privisioning, improve docs about it

4 years agoMerge pull request #13186 from keszybz/tmpfiles-postponement
Lennart Poettering [Fri, 26 Jul 2019 07:41:00 +0000 (09:41 +0200)] 
Merge pull request #13186 from keszybz/tmpfiles-postponement

Create less stuff when systemd-tmpfiles --create is executed (during installation or otherwise)

4 years agoMerge pull request #13188 from yuwata/news-igmp-version
Lennart Poettering [Fri, 26 Jul 2019 07:40:21 +0000 (09:40 +0200)] 
Merge pull request #13188 from yuwata/news-igmp-version

network: rename `IGMPVersion=` to `MulticastIGMPVersion=`

4 years agoNEWS: mention SpeedMeter=
Yu Watanabe [Fri, 26 Jul 2019 02:15:29 +0000 (11:15 +0900)] 
NEWS: mention SpeedMeter=

4 years agoNEWS: mention the new sysctl.d/ - prefix 13191/head
Lennart Poettering [Fri, 26 Jul 2019 07:28:43 +0000 (09:28 +0200)] 
NEWS: mention the new sysctl.d/ - prefix

4 years agosysctl: prefix ping port range setting with a dash
Lennart Poettering [Fri, 26 Jul 2019 07:26:07 +0000 (09:26 +0200)] 
sysctl: prefix ping port range setting with a dash

Fixes: #13177
4 years agoRevert "Revert "sysctl: Enable ping(8) inside rootless Podman containers""
Lennart Poettering [Fri, 26 Jul 2019 07:25:09 +0000 (09:25 +0200)] 
Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers""

This reverts commit be74f51605b4c7cb74fec3a50cd13b67598a8ac1.

Let's add this again. With the new sysctl "-" thing we can make this
work.

4 years agoman: document the new sysctl.d/ - prefix
Lennart Poettering [Fri, 26 Jul 2019 07:24:11 +0000 (09:24 +0200)] 
man: document the new sysctl.d/ - prefix

4 years agosysctl: if options are prefixed with "-" ignore write errors
Lennart Poettering [Fri, 26 Jul 2019 07:17:01 +0000 (09:17 +0200)] 
sysctl: if options are prefixed with "-" ignore write errors

4 years agosysctl: reset 'r' only where needed
Lennart Poettering [Fri, 26 Jul 2019 07:04:15 +0000 (09:04 +0200)] 
sysctl: reset 'r' only where needed

4 years agosysctl: switch to log_syntax()
Lennart Poettering [Fri, 26 Jul 2019 07:03:06 +0000 (09:03 +0200)] 
sysctl: switch to log_syntax()

With @keszybz' recent work this will give us clickable links in the
journalctl output.

4 years agoRevert "sysctl: Enable ping(8) inside rootless Podman containers"
Evgeny Vereshchagin [Thu, 25 Jul 2019 21:58:42 +0000 (21:58 +0000)] 
Revert "sysctl: Enable ping(8) inside rootless Podman containers"

This reverts commit 90ce7627dfe824ff6e7c0ca5f96350fbcfec7118.

See https://github.com/systemd/systemd/issues/13177#issuecomment-514931461

4 years agoNEWS: mention Bridge.MulticastIGMPVersion= 13188/head
Yu Watanabe [Fri, 26 Jul 2019 01:13:58 +0000 (10:13 +0900)] 
NEWS: mention Bridge.MulticastIGMPVersion=

4 years agonetwork: slightly update log message
Yu Watanabe [Fri, 26 Jul 2019 01:59:36 +0000 (10:59 +0900)] 
network: slightly update log message

4 years agonetwork: rename IGMPVersion= -> MulticastIGMPVersion=
Yu Watanabe [Fri, 26 Jul 2019 01:58:34 +0000 (10:58 +0900)] 
network: rename IGMPVersion= -> MulticastIGMPVersion=

4 years agosd-boot: silence one warning about pointer cast
Zbigniew Jędrzejewski-Szmek [Thu, 25 Jul 2019 13:55:13 +0000 (15:55 +0200)] 
sd-boot: silence one warning about pointer cast

It doesn't matter either way. Fixes #13174.

4 years agoupdate TODO
Lennart Poettering [Thu, 25 Jul 2019 17:25:50 +0000 (19:25 +0200)] 
update TODO

4 years agotmpfiles: copy files to /etc only on boot 13186/head
Zbigniew Jędrzejewski-Szmek [Thu, 25 Jul 2019 17:13:41 +0000 (19:13 +0200)] 
tmpfiles: copy files to /etc only on boot

We'd copy /etc/nsswitch.conf, /etc/pam.d/, and /etc/issue (*) on every
tmpfiles --create run. I think we should only do this at boot, so if
people install systemd.rpm in a larger transaction and want to create those
files at a later step, we don't interfere with that.

(Stuff like /etc/os-release and /etc/mtab is not really configurable,
we might as was create it uncondtionally.)

(Seemingly, the alternative approach might be to not call
systemd-tmpfiles --create in systemd.rpm %post. But this wouldn't have much
effect, because various packages call it anyway, and our
%tmpfiles_create_package macro does too.  So we need to change the
configuration instead.)

(*) We don't provide /usr/share/factory/issue, so normally this fails, but
somebody else might provide that file, so it seems useful to keep the
C line.

4 years agotmpfiles: stop creating /etc/localtime symlink
Zbigniew Jędrzejewski-Szmek [Thu, 25 Jul 2019 17:12:02 +0000 (19:12 +0200)] 
tmpfiles: stop creating /etc/localtime symlink

If the symlink is not present, UTC is the default. There *is* a slight
advantage to it: humans might expect it to be present and look in /etc.
But it might interfere with post-install scripts and it doesn't serve
any technical purpose. Let's not create it. Fixes #13183.

4 years agoupdate TODO 13137/head
Lennart Poettering [Mon, 22 Jul 2019 08:22:56 +0000 (10:22 +0200)] 
update TODO

4 years agoTODO: remove apparently fixed issue from TODO
Lennart Poettering [Mon, 22 Jul 2019 08:22:47 +0000 (10:22 +0200)] 
TODO: remove apparently fixed issue from TODO

4 years agodocs: add longer document about systemd and random number seeds
Lennart Poettering [Mon, 22 Jul 2019 16:13:26 +0000 (18:13 +0200)] 
docs: add longer document about systemd and random number seeds

4 years agoman: extend on the --print-boot-path description a bit
Lennart Poettering [Mon, 22 Jul 2019 13:24:49 +0000 (15:24 +0200)] 
man: extend on the --print-boot-path description a bit

4 years agobootctl: add is-installed verb
Lennart Poettering [Mon, 22 Jul 2019 13:05:29 +0000 (15:05 +0200)] 
bootctl: add is-installed verb

Fixes: #9428
4 years agoman: document the systemd-random-seed rework
Lennart Poettering [Mon, 22 Jul 2019 12:19:33 +0000 (14:19 +0200)] 
man: document the systemd-random-seed rework

4 years agodocs: document new random seed EFI vars as part of the boot loader interface
Lennart Poettering [Mon, 22 Jul 2019 12:00:25 +0000 (14:00 +0200)] 
docs: document new random seed EFI vars as part of the boot loader interface

4 years agorandom-seed: rework systemd-random-seed.service substantially
Lennart Poettering [Mon, 22 Jul 2019 11:51:30 +0000 (13:51 +0200)] 
random-seed: rework systemd-random-seed.service substantially

This makes two major changes to the way systemd-random-seed operates:

1. We now optionally credit entropy if this is configured (via an env
var). Previously we never would do that, with this change we still don't
by default, but it's possible to enable this if people acknowledge that
they shouldn't replicate an image with a contained random seed to
multiple systems. Note that in this patch crediting entropy is a boolean
thing (unlike in previous attempts such as #1062), where only a relative
amount of bits was credited. The simpler scheme implemented here should
be OK though as the random seeds saved to disk are now written only with
data from the kernel's entropy pool retrieved after the pool is fully
initialized. Specifically:

2. This makes systemd-random-seed.service a synchronization point for
kernel entropy pool initialization. It was already used like this, for
example by systemd-cryptsetup-generator's /dev/urandom passphrase
handling, with this change it explicitly operates like that (at least
systems which provide getrandom(), where we can support this). This
means services that rely on an initialized random pool should now place
After=systemd-random-seed.service and everything should be fine. Note
that with this change sysinit.target (and thus early boot) is NOT
systematically delayed until the entropy pool is initialized, i.e.
regular services need to add explicit ordering deps on this service if
they require an initialized random pool.

Fixes: #4271
Replaces: #10621 #4513

4 years agorandom-seed: drop falling back to O_WRONLY if O_RDWR on /dev/urandom doesn't work
Lennart Poettering [Mon, 22 Jul 2019 08:24:50 +0000 (10:24 +0200)] 
random-seed: drop falling back to O_WRONLY if O_RDWR on /dev/urandom doesn't work

There's no reason why writing should work if reading and writing
doesn't. Let's simplify this hence. /dev/urandom is generally an r/w
device, and everything else would be a serious system misconfiguration.

4 years agorandom-seed: reduce scope of variable
Lennart Poettering [Mon, 22 Jul 2019 08:24:26 +0000 (10:24 +0200)] 
random-seed: reduce scope of variable

4 years agounits: automatically initialize the system token if that makes sense
Lennart Poettering [Fri, 19 Jul 2019 16:06:00 +0000 (18:06 +0200)] 
units: automatically initialize the system token if that makes sense

4 years agobootctl: show random seed state
Lennart Poettering [Fri, 19 Jul 2019 17:13:24 +0000 (19:13 +0200)] 
bootctl: show random seed state