sysext: support ImagePolicy global config option

Just as Mutable=, support ImagePolicy in systemd/{sysext/confext}.conf and
dropins in systemd/{sysext.confext}.conf.d/* configs.

diff --git a/man/sysext.conf.xml b/man/sysext.conf.xml
index cdd88f24474f7f16edf3df71a07a660f99c768e7..f717b74426ae721e894d7c1ef6673d8a4f026a16 100644 (file)
--- a/man/sysext.conf.xml
+++ b/man/sysext.conf.xml
@@ -73,6 +73,18 @@
           <xi:include href="version-info.xml" xpointer="v259"/>
           </listitem>
         </varlistentry>
+
+        <varlistentry>
+          <term><varname>ImagePolicy=</varname></term>
+          <listitem><para>Set the image policy. Takes an image policy string as argument, as per
+          <citerefentry><refentrytitle>systemd.image-policy</refentrytitle><manvolnum>7</manvolnum></citerefentry>.
+          For details, see the <option>--image-policy=</option> option in
+          <citerefentry><refentrytitle>systemd-sysext</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
+          </para>
+
+          <xi:include href="version-info.xml" xpointer="v259"/>
+          </listitem>
+        </varlistentry>
       </variablelist>
     </refsect2>
   </refsect1>

diff --git a/src/sysext/sysext.c b/src/sysext/sysext.c
index a4512d48e55bae987e47cb947494f00f02be9258..15a00237e420e93fdb74d25e293ebc174ecb62d8 100644 (file)
--- a/src/sysext/sysext.c
+++ b/src/sysext/sysext.c
@@ -155,6 +155,7 @@ static int parse_config_file(ImageClass image_class) {
         const char *section = image_class == IMAGE_SYSEXT ? "SysExt" : "ConfExt";
         const ConfigTableItem items[] = {
                 { section, "Mutable",           config_parse_mutable_mode,      0,      &arg_mutable            },
+                { section, "ImagePolicy",       config_parse_image_policy,      0,      &arg_image_policy       },
                 {}
         };
         _cleanup_free_ char *config_file = NULL;