libidn2. The corresponding meson option '-Dlibidn=' is deprecated
too and will be dropped in a future release.
+ * Required versions of various dependencies have been raised:
+ cryptsetup 2.0.1/2.3.0 → 2.4.0,
+ elfutils 158 → 177,
+ libblkid 2.24 → 2.37,
+ libseccomp 2.3.1 → 2.4.0,
+ glibc 2.31 → 2.34,
+ libxcrypt or libcrypt from glibc → libxcrypt 4.4.0 only,
+ OpenSSL 1.1.0 → 3.0.0.
+
+ The Linux kernel version requirements have been updated too:
+ baseline 5.4 → 5.10, recommended baseline 5.7 → 5.14, 6.6 for full
+ functionality. Code for compatibility with versions older than the
+ baseline has been removed.
+
* The parsing of RootImageOptions= and the mount image parameters of
ExtensionImages= and MountImages= has been changed so that the last
definition for a given partition wins and is applied, rather than the
warnings when non-system accounts are used. This support will be
removed in a future release.
- Changes in other components:
+ New system interfaces and components:
- * New options SYSTEMD_COLORS=auto-16, SYSTEMD_COLORS=auto-256, and
- SYSTEMD_COLORS=auto-24bit have been added. They are like
- SYSTEMD_COLORS=16, SYSTEMD_COLORS=256, and SYSTEMD_COLORS=24bit
- respectively when output is to a non-dumb TTY, and degrade to
- SYSTEMD_COLORS=no otherwise.
+ * The os-release(3) gained a new field FANCY_NAME= that is similar
+ to PRETTY_NAME= but may contain ANSI sequences such as Unicode
+ emojis. The new field is also defined to NOT contain any version
+ specification, providing better separation between the OS name
+ and version.
+
+ The systemd manager, systemd-hostnamed, and hostnamectl will now
+ show FANCY_NAME= in preference to PRETTY_NAME=.
+
+ * The "Portability and Stability" policy has been simplified and
+ updated to strengthen the promises of avoiding user-visible
+ regressions in public interfaces. See
+ https://systemd.io/PORTABILITY_AND_STABILITY/ for details.
+
+ * Services providing a public Varlink interface can be symlinked under
+ /run/varlink/registry/, allowing services to be enumerated.
+ 'varlinkctl list-registry' can be used to list running services.
+
+ * A new "metrics" or "report" framework has been defined. Any component
+ can hook into the reporting framework by providing a varlink endpoint
+ under /run/systemd/report. Such hookup has been added to the manager.
+
+ systemd-report is a new command line tool which collects the reports
+ from all endpoints and prints them in JSON format.
+
+ Changes in the system and user managers:
+
+ * Systemd now uses ANSI CSI 18 sequence to query terminal size. This
+ allows the query to be made without changing the position of the
+ cursor. Terminal emulators which do not yet support the sequence are
+ encouraged to do so.
+
+ * Service units gained a RefreshOnReload= setting that configures
+ whether extensions and credentials are to be refreshed when the unit
+ is reloaded.
+
+ Changes in udev:
+
+ * Persistent network interface naming has bee extended to MCTP devices
+ with the "mc" prefix.
* The minimum backlight brightness value used when restoring backlight
levels at boot has been lowered from 5% to 1%. This lower value
low brightness values at runtime independently of the systemd clamp
which only applies during boot.
+ Changes in systemd-networkd:
+
+ * MultiPathRoute= option now supports interface-bound ECMP routes.
+
+ * systemd-networkd gained integration with ModemManager via the "simple
+ connect" protocol. A new [ModemManager] section has been added with
+ SimpleConnectProprties= (currently apn=, allowed-auth=, user=,
+ password=, ip-type=, allow-roaming=, pin=, and operator-id=),
+ RouteMetric=, and UseGateway= settings. This allows systemd-networkd
+ to establish a cellular modem connection to a broadband network.
+
+ * systemd-networkd now provides a varlink interface and varlinkctl
+ now uses varlink to connect to the daemon.
+
+ Changes in systemd-boot and the stub:
+
+ * The timeout in the boot menu can be configured with the
+ io.systmed.boot.timeout= SMBIOS type 11 string.
+
+ Changes in libsystemd:
+
+ * The varlink implementation now supports SD_VARLINK_ANY as a wildcard
+ type. This is useful to declare generic interfaces which need to
+ support multiple types.
+
+ Changes in systemd-resolved:
+
+ * Queries done through nss-resolve can be limited to a specific
+ interface with the $SYSTEMD_NSS_RESOLVE_INTERFACE environment
+ variable.
+
+ * systemd-resolved now supports marking of packets used for DNS
+ requests with a firewall mark.
+
+ * resolvectl now uses varlink to connect to systemd-resolved.
+
+ Changes in other components:
+
+ * systemd-repart gained basic support for integrity checks of encrypted
+ volumes. Two new options Integrity= and IntegrityAlgorithm= can be
+ used to configure integrity checks for LUKS volumes.
+
+ * Image dissection policies have been extended to allow restricting
+ file system types and requiring integrity checks for encrypted volumes
+ with a new 'encryptedwithinegrity' policy.
+
+ * systemd-dissect gained a --copy-ownership= switch to configure
+ ownership of copied files.
+
+ * systemd-portabled now runs also as a user service. Unprivileged users
+ can run portable services (on sufficiently fresh kernels).
+
+ * systemd-portabled will now generate a policy and pin the image for a
+ portable service, so that the image cannot be changed later without a
+ reattach.
+
+ * systemd-keytil gained an 'extract-certicate' verb to print the X.509
+ certificate.
+
+ * bootctl is now also available as service over varlink. The new
+ systemd-bootctl.socket unit spawns systemd-bootctl@.service instances
+ to handle individual connections.
+
+ * systemd-sysupdate gained a new 'acquire' verb, allowing the download
+ and installation or update steps to be done separately.
+
+ * Support for polkit authorization has been added to systemd-sysext and
+ varlinkctl.
+
+ * A polkit policy was added for systemd-ask-password, allowing it to be
+ used by unprivileged callers.
+
+ * systemd-inhibit --list option gained support for JSON output
+ and filtering with --what= , --who=, --why=, and --mode=.
+
+ * systemd-vmspawn gained support for registring with systemd-machined
+ in the user session. New options --user/--system control which
+ instance is used.
+
+ * systemd-vmspawn gained support for ephemeral machines via a new
+ --ephemeral option. This is similar to the functionality provided via
+ the same switch in systemd-nspawn.
+
+ * New options SYSTEMD_COLORS=auto-16, SYSTEMD_COLORS=auto-256, and
+ SYSTEMD_COLORS=auto-24bit have been added. They are like
+ SYSTEMD_COLORS=16, SYSTEMD_COLORS=256, and SYSTEMD_COLORS=24bit
+ respectively when output is to a non-dumb TTY, and degrade to
+ SYSTEMD_COLORS=no otherwise.
+
+ * Standalone versions of the systemd-sysusers and systemd-tmpfiles
+ binaries now support full functionality. (Previously, those tools
+ were compiled without features which would require libmount and pull
+ in a lot of dependencies. After the conversion to dlopen the option
+ whether to support features requiring libmount is made by providing
+ libmount or not, at install time.)
+
+ * Internal code dealing with processes has been updated to use pidfds
+ in many places.
+
+ Changes in units:
+
+ * systemd-portabled now runs also in the user session in the new
+ systemd-portabled.service unit.
+
+ * New system units sysystemd-bootctl.socket, systemd-bootctl@.service
+ have been added.
+
+ * getty@.service gained an [Install] and must now be explicitly enabled
+ to be active.
+
+
CHANGES WITH 259:
Announcements of Future Feature Removals and Incompatible Changes: