Merge pull request #16568 from poettering/creds-store

credentials logic to pass privileged data to services

diff --cc TODO
index 179d17e2342d7cc582d1e694248e62b160e020d8,c4c20f71a577c0c81378b3ec1e1a11a239ad4359..e25ca895106f387fabbd2d00a776d1150706119e
--- 1/TODO
--- 2/TODO
+++ b/TODO
@@@ -119,15 -119,25 +119,19 @@@ Features
  
  * seccomp: maybe merge all filters we install into one with that libseccomp API that allows merging.
  
- * per-service credential system. Specifically: add LoadCredential= (for loading
-   cred from file), AcquireCredential= (for asking user for cred, via
-   ask-password), PassCredential= (for passing on credential systemd itself
-   got). Then, place credentials in a per-service, immutable ramfs instance (so
-   that it cannot be swapped out), destroy after use. Also pass via keyring
-   (with graceful fallback to cover for containers). Define CredentialPath= for
-   defining subdir of /run/credentials/ where to place it. Set $CREDENTIAL_PATH
-   env var for services to the result. Also pass via fd passing (optionally).
+ * credentials system:
+   - maybe add AcquireCredential= for querying a cred via ask-password
+   - maybe try to acquire creds via keyring?
+   - maybe try to pass creds via keyring?
+   - maybe optionally pass creds via memfd
+   - maybe add support for decrypting creds via TPM
+   - maybe add support for decrypting/importing creds via pkcs11
+   - make systemd-cryptsetup acquire pw via creds logic
+   - make PAMName= acquire pw via creds logic
+   - make macsec/wireguard code in networkd read key via creds logic
+   - make gatwayd/remote read key via creds logic
+   - add sd_notify() command for flushing out creds not needed anymore
  
 -* homed: add native recovery key support. use 48 lowercase modhex characters
 -  (192bit), show qr code of it, include pattern expression in user record.
 -
 -* homed: introduce "degraded" state for home directories that weren't cleanly
 -  unmounted (use xattr we add and remove on the loop back file)
 -
  * homed: during login resize fs automatically towards size goal. Specifically,
    resize to diskSize if possible, but leave a certain amount (configured by a
    new value diskLeaveFreeSize) of space free on the backing fs.

diff --cc src/basic/path-util.c
Simple merge