]> git.ipfire.org Git - thirdparty/systemd.git/commit
portable: Enable unpriv operation 40091/head
authorDaan De Meyer <daan.j.demeyer@gmail.com>
Tue, 2 Dec 2025 10:17:13 +0000 (11:17 +0100)
committerDaan De Meyer <daan.j.demeyer@gmail.com>
Wed, 21 Jan 2026 14:09:46 +0000 (15:09 +0100)
commit824fcb95c9e66abe6b350ebab6e0593498ff7aa1
treeb0f6a2d188089b9ad8310acaedd5258baacda496
parent1a239eae8e47c5ff4b34687819d10876f1c67664
portable: Enable unpriv operation

This does not yet support directory images properly
as systemd itself does not support unpriv directory
images properly yet.

The user profiles are a copy of the system profiles but without
DynamicUser=yes (can't be used by user managers) and without
ProtectHome=yes (this masks /home which breaks StateDirectory= which
is lcoated inside /home)
34 files changed:
docs/PORTABLE_SERVICES.md
man/os-release.xml
meson.build
mkosi/mkosi.images/minimal-0/mkosi.extra/usr/lib/systemd/user/minimal-app0.service [new file with mode: 0644]
mkosi/mkosi.images/minimal-0/mkosi.postinst
mkosi/mkosi.images/minimal-1/mkosi.extra/usr/lib/systemd/user/minimal-app0.service [new file with mode: 0644]
mkosi/mkosi.images/minimal-1/mkosi.postinst
src/analyze/analyze-security.c
src/libsystemd/sd-path/path-lookup.c
src/portable/meson.build
src/portable/org.freedesktop.portable1.service-for-session [new file with mode: 0644]
src/portable/portable.c
src/portable/portable.h
src/portable/portablectl.c
src/portable/portabled-bus.c
src/portable/portabled-image-bus.c
src/portable/portabled.c
src/portable/portabled.h
src/portable/profile/system/default/service.conf [moved from src/portable/profile/default/service.conf with 100% similarity]
src/portable/profile/system/nonetwork/service.conf [moved from src/portable/profile/nonetwork/service.conf with 100% similarity]
src/portable/profile/system/strict/service.conf [moved from src/portable/profile/strict/service.conf with 100% similarity]
src/portable/profile/system/trusted/service.conf [moved from src/portable/profile/trusted/service.conf with 100% similarity]
src/portable/profile/user/default/service.conf [new file with mode: 0644]
src/portable/profile/user/nonetwork/service.conf [new file with mode: 0644]
src/portable/profile/user/strict/service.conf [new file with mode: 0644]
src/portable/profile/user/trusted/service.conf [new file with mode: 0644]
src/shared/discover-image.c
src/shared/dissect-image.c
src/shared/portable-util.c
src/shared/portable-util.h
test/units/TEST-29-PORTABLE.user.sh [new file with mode: 0755]
test/units/util.sh
units/user/meson.build
units/user/systemd-portabled.service.in [new file with mode: 0644]