update TODO

diff --git a/TODO b/TODO
index 22239961ef69c7fbeddd9eafbe5b6739a7e977d4..5855e36390ab9f5258228c7ebf82d517ebe75d5b 100644 (file)
--- a/TODO
+++ b/TODO
@@ -125,11 +125,21 @@ Features:
 
 * start making use of the new --graceful switch to util-linux' umount command
 
+* sysusers: allow specifying a path to an inode *and* a literal UID in the UID
+  column, so that if the inode exists it is used, and if not the literal UID is
+  used. Use this for services such as the imds one, which run under their own
+  UID in the initrd, and whose data should survive to the host, properly owned.
+
+* add service file setting to force the fwmark (a la SO_MARK) to some value, so
+  that we can allowlist certain services for imds this way.
+
 * make systemd work nicely without /bin/sh, logins and associated shell tools around
   - make sure debug shell service (sushell) has a nice failure mode, prints a message and reboots
   - varlink interface for "systemctl start" and friends
   - https://github.com/util-linux/util-linux/issues/4117
 
+* imds: maybe do smarter api version handling
+
 * drop NV_ORDERLY flag from the product uuid nvpcr. Effect of the flag is that
   it pushes the thing into TPM RAM, but a TPM usually has very little of that,
   less than NVRAM. hence setting the flag amplifies space issues. Unsetting the