]> git.ipfire.org Git - thirdparty/systemd.git/log
thirdparty/systemd.git
3 months agoTEST-87-AUX-UTILS-VM: make coredumps stored in archived journal file 38372/head
Yu Watanabe [Mon, 28 Jul 2025 07:40:27 +0000 (16:40 +0900)] 
TEST-87-AUX-UTILS-VM: make coredumps stored in archived journal file

Fixes the following race:
```
TEST-87-AUX-UTILS-VM.sh[839]: + coredumpctl -1
TEST-87-AUX-UTILS-VM.sh[1169]: TIME                        PID UID GID SIG     COREFILE EXE             SIZE
TEST-87-AUX-UTILS-VM.sh[1169]: Sun 2025-07-27 23:22:02 UTC 885   0   0 SIGABRT present  /tmp/test-dump 19.9K
TEST-87-AUX-UTILS-VM.sh[839]: + coredumpctl -n 1
TEST-87-AUX-UTILS-VM.sh[1172]: Journal file /var/log/journal/a8285330872602d1377cbaaf68869946/system.journal is truncated, ignoring file.
TEST-87-AUX-UTILS-VM.sh[1172]: No coredumps found.
```

3 months agoTEST-04-JOURNAL: add test case for log filtering through syslog
Yu Watanabe [Sun, 27 Jul 2025 19:52:37 +0000 (04:52 +0900)] 
TEST-04-JOURNAL: add test case for log filtering through syslog

For issue #38361.

3 months agoTEST-04-JOURNAL: several cleanups
Yu Watanabe [Sun, 27 Jul 2025 15:33:28 +0000 (00:33 +0900)] 
TEST-04-JOURNAL: several cleanups

- move scripts from test/units/ to the test specific units directory,
- drop meaningless true from silent-success.service,
- call journalctl from the same bash invocation of echo.

No functional change, just refactoring and preparation for the next
commit.

3 months agojournal: check filtering after parsing timestamp, identifier, pid, and so on
Yu Watanabe [Sun, 27 Jul 2025 15:23:21 +0000 (00:23 +0900)] 
journal: check filtering after parsing timestamp, identifier, pid, and so on

Otherwise, filtering regex with '^' does not work.

Fixes a bug in 87a13dabbd81c2e31fd5ac7b81cce61baf23e59c (v253).
Fixes #38361.

3 months agoinclude: update kernel headers from v6.16-rc7
Yu Watanabe [Sun, 27 Jul 2025 20:42:43 +0000 (05:42 +0900)] 
include: update kernel headers from v6.16-rc7

- netfilter changes in v6.16-rc1 were reverted,
- vm_sockets.h now includes sys/socket.h, hence our workaround is not
  necessary anymore.

3 months agostub: fix passing kernel cmdline when loading via shim
Luca Boccassi [Sun, 27 Jul 2025 19:51:43 +0000 (20:51 +0100)] 
stub: fix passing kernel cmdline when loading via shim

This was mistakenly dropped when the custom PE loader was added.
Add it back, otherwise no smbios/addon cmdline options are passed
through.

Fixes https://github.com/systemd/systemd/issues/38349

Follow-up for 40aabfae72619e313f8bcc038e57e0d3a5433d1a

3 months agoRework file system group magic lookups (#38340)
Yu Watanabe [Sun, 27 Jul 2025 18:39:34 +0000 (03:39 +0900)] 
Rework file system group magic lookups (#38340)

3 months agotest: skip verification for racy test cases
Yu Watanabe [Sun, 27 Jul 2025 12:42:12 +0000 (21:42 +0900)] 
test: skip verification for racy test cases

FORMAT_LIFETIME() internally calls now(), hence we cannot provide any
reliable verifications for finite lifetime.

3 months agoRework file system group lookups 38340/head
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 15:08:56 +0000 (17:08 +0200)] 
Rework file system group lookups

We want to check if the magic we got from statfs() is one of the magics listed
for one of the file systems in the given group. To do this, we'd iteratate over
the file system names, convert each name to an array of magics, and compare
those to the one we got. We were using gperf-generated lookup table for this,
so the string lookups were quick, but still this seems unnecessarily complex.
Let's just generate a simple lookup function, because we can:

$ src/basic/filesystem-sets.py fs-in-group
bool fs_in_group(const struct statfs *st, FilesystemGroups fs_group) {
        switch (fs_group) {
        case FILESYSTEM_SET_BASIC_API:
                return F_TYPE_EQUAL(st->f_type, CGROUP2_SUPER_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, CGROUP_SUPER_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, DEVPTS_SUPER_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, MQUEUE_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, PROC_SUPER_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, SYSFS_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, TMPFS_MAGIC);
        case FILESYSTEM_SET_ANONYMOUS:
                return F_TYPE_EQUAL(st->f_type, ANON_INODE_FS_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, PIPEFS_MAGIC)
                    || F_TYPE_EQUAL(st->f_type, SOCKFS_MAGIC);
...

We flatten the nested lookup of group=>fs=>magic into a single level.
The compiler can work its magic here to make the lookup quick.

3 months agomeson: rework generation of file system lookup helpers
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 14:29:10 +0000 (16:29 +0200)] 
meson: rework generation of file system lookup helpers

Previously, the gperf table was the main "source of truth", and additional
information (e.g. which file system names are obsolete) was scattered in
various files. We would then parse the gperf file, using python, awk, grep, and
bash, and use the results in various ways. This is hard to understand and
maintain. Let's replace all of this with a single python script that generates
the requested outputs as appropriate.

$ diff -u <(git show @{u}:src/basic/filesystems-gperf.gperf) \
          <(src/basic/filesystem-sets.py gperf)
shows that the outputs are the same except for comments.

Similarly, 'src/basic/filesystem-sets.py fs-type-to-string' and
'src/basic/filesystem-sets.py filesystem-sets' can be used to view
the generated code.

The check that the kernel doesn't define any new file system magics is
converted into a normal test. It doesn't seem necessary to fail the build
when that happens.

3 months agobasic/stat-util: avoid access syscall
Zbigniew Jędrzejewski-Szmek [Thu, 24 Jul 2025 13:09:58 +0000 (15:09 +0200)] 
basic/stat-util: avoid access syscall

I was looking at strace for systemd-getty-generator and noticed the call to
faccessat2(3</sys>, "", W_OK, AT_EMPTY_PATH), even though we already did
fstatfs(3</sys>), which should give us all the necessary information. Let's
only do this additional check when it's likely to yield something useful, i.e.
for network fses and otherwise skip the syscall.

The call to statvfs is replaced by statfs because that gives us the .f_type
field and allows is_network_fs() to be called.

I'm a bit worried that the is_network_fs() is somewhat costly. This will be
improved in later commits.

3 months agopo: Translated using Weblate (Chinese (Simplified) (zh_CN))
Jesse Guo [Sun, 27 Jul 2025 09:55:23 +0000 (09:55 +0000)] 
po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 100.0% (264 of 264 strings)

po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 100.0% (264 of 264 strings)

po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Jesse Guo <jesseguotech@outlook.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main

3 months agosd-bus: escape invalid characters in error message
Yu Watanabe [Sat, 26 Jul 2025 18:55:16 +0000 (03:55 +0900)] 
sd-bus: escape invalid characters in error message

At many places, we pass arguments of dbus method calls to
sd_bus_error_setf(), and produces unprintable log messages.
Let's always escape the generated error message.

This fixes something like the following:
```
[ 1921.875668] systemd-logind[611]: Got message type=method_call sender=:1.46 destination=:1.6 path=/org/freedesktop/login1 interface=org.freedesktop.login1.Manager member=GetSeat  cookie=1344 reply_cookie=0 signature=s error-name=n/a error-message=n/a
[ 1921.875758] systemd-logind[611]: [725B blob data]
[ 1921.875777] systemd-logind[611]: [768B blob data]
```

3 months agoTEST-21-DFUZZER: improve stability of the test, and enable services to be tested...
Luca Boccassi [Sun, 27 Jul 2025 09:33:12 +0000 (10:33 +0100)] 
TEST-21-DFUZZER: improve stability of the test, and enable services to be tested (#37862)

Fixes #37834.

3 months agoNEWS: announce legacy iptables/libiptc support will be dropped in v259
Yu Watanabe [Fri, 25 Jul 2025 19:18:37 +0000 (04:18 +0900)] 
NEWS: announce legacy iptables/libiptc support will be dropped in v259

nftables is available since kernel 3.13 (released on 19 January 2014).
Major distributions have already provided nftables, and marked/called
iptables as deprecated or legacy.

Moreover, currently, iptables/libiptc backend does not support IPv6.

Hence, it is not necessary to keep iptables/libiptc backend anymore.
Let's drop it in the next release.

Note, fedora/centos have already disabled iptables/libiptc support since v249.

3 months agopcrlock: Return positive exit status
Valentin David [Sat, 26 Jul 2025 10:36:18 +0000 (12:36 +0200)] 
pcrlock: Return positive exit status

Follow-up for 89e83aada829a6d92e29f321168d2bb1462c678d.

`is-supported` expects to return a positive exit status.
To achieve that, verb_make_policy() needs to return 0 on success.

Finishes the fix for #38019.

Co-authored-by: Yu Watanabe <watanabe.yu+github@gmail.com>
3 months agoTEST-04-JOURNAL: add more test cases for LogFilterPatterns=
Yu Watanabe [Sat, 26 Jul 2025 22:10:36 +0000 (07:10 +0900)] 
TEST-04-JOURNAL: add more test cases for LogFilterPatterns=

For issue #38361.

3 months agotest: several cleanups for TEST-74-AUX-UTILS.socket-activate.sh
Yu Watanabe [Sat, 26 Jul 2025 21:56:02 +0000 (06:56 +0900)] 
test: several cleanups for TEST-74-AUX-UTILS.socket-activate.sh

- wait after kill,
- try --now only once,
- ignore error in reading /proc/$PID/comm when --now is set,
  as the process may be already died.

Follow-up for 9e0d0c3fdfe5043d71a8d54f1e6fcc152fbc3e58.

Hopefully fixes #38352.

3 months agolocale: escape invalid keymap on logging
Yu Watanabe [Sat, 26 Jul 2025 19:04:27 +0000 (04:04 +0900)] 
locale: escape invalid keymap on logging

The keymap string may come from dbus method and may contain invalid
characters.

3 months agoman/repart: fix the required btrfs-progs version
Yu Watanabe [Sat, 26 Jul 2025 19:30:40 +0000 (04:30 +0900)] 
man/repart: fix the required btrfs-progs version

Follow-up for 12c29e5b3a1d9294f2a1c0a4a83335fa23c272b8.

Prompted by #38355.

3 months agoTEST-21-DFUZZER: suppress debugging logs from homed, nsresourced, and userdbd 37862/head
Yu Watanabe [Sat, 26 Jul 2025 14:19:50 +0000 (23:19 +0900)] 
TEST-21-DFUZZER: suppress debugging logs from homed, nsresourced, and userdbd

3 months agoTEST-21-DFUZZER: enable services to be tested
Yu Watanabe [Mon, 16 Jun 2025 18:17:36 +0000 (03:17 +0900)] 
TEST-21-DFUZZER: enable services to be tested

Since e19e17df579823093238edb60470b29a2c5e24a6, timesyncd is disabled by
default, and fuzzing for timesyncd failed.

```
[  754.247451] TEST-21-DFUZZER.sh[658]: Bus: org.freedesktop.timesync1 (system)
[  754.247725] TEST-21-DFUZZER.sh[658]: + systemd-run --pipe --wait -- dfuzzer -b 10000 -n org.freedesktop.timesync1
[  754.282237] TEST-21-DFUZZER.sh[3236]: Running as unit: run-p3236-i3237.service
[  754.348983] TEST-21-DFUZZER.sh[3238]: [SESSION BUS]
[  754.350443] TEST-21-DFUZZER.sh[3238]: Bus not found.
[  754.350705] TEST-21-DFUZZER.sh[3238]: [SYSTEM BUS]
[  754.359249] TEST-21-DFUZZER.sh[3238]: Error while calling method 'GetConnectionUnixProcessID': GDBus.Error:org.freedesktop.DBus.Error.NameHasNoOwner: The connection does not exist
[  754.359520] TEST-21-DFUZZER.sh[3238]: Couldn't get the PID of the tested process
[  754.359764] TEST-21-DFUZZER.sh[3238]: Exit status: 4
[  754.386721] TEST-21-DFUZZER.sh[3236]:           Finished with result: exit-code
[  754.387331] TEST-21-DFUZZER.sh[3236]: Main processes terminated with: code=exited, status=4/NOPERMISSION
[  754.387537] TEST-21-DFUZZER.sh[3236]:                Service runtime: 74ms
[  754.387706] TEST-21-DFUZZER.sh[3236]:              CPU time consumed: 21ms
[  754.389210] TEST-21-DFUZZER.sh[3236]:                    Memory peak: 12.9M (swap: 0B)
```

Also, create dummy interface for networkd and resolved.

Fixes #37834.

3 months agoTEST-21-DFUZZER: first test session bus, then service bus, finally system bus
Yu Watanabe [Thu, 19 Jun 2025 10:01:57 +0000 (19:01 +0900)] 
TEST-21-DFUZZER: first test session bus, then service bus, finally system bus

3 months agoTEST-21-DFUZZER: update the list of destructive methods
Yu Watanabe [Thu, 19 Jun 2025 09:42:03 +0000 (18:42 +0900)] 
TEST-21-DFUZZER: update the list of destructive methods

3 months agopo: Translated using Weblate (Chinese (Simplified) (zh_CN))
Jesse Guo [Sat, 26 Jul 2025 20:30:00 +0000 (20:30 +0000)] 
po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 100.0% (264 of 264 strings)

po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Jesse Guo <jesseguotech@outlook.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main

3 months agopo: Translated using Weblate (Chinese (Simplified) (zh_CN))
Jesse Guo [Sat, 26 Jul 2025 19:27:30 +0000 (19:27 +0000)] 
po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 100.0% (264 of 264 strings)

po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Jesse Guo <jesseguotech@outlook.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main

3 months agopo: Translated using Weblate (Chinese (Simplified) (zh_CN))
Jesse Guo [Sat, 26 Jul 2025 18:51:46 +0000 (18:51 +0000)] 
po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 99.6% (263 of 264 strings)

Co-authored-by: Jesse Guo <jesseguotech@outlook.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main

3 months agopo: Translated using Weblate (Chinese (Simplified) (zh_CN))
Jesse Guo [Sat, 26 Jul 2025 15:53:09 +0000 (15:53 +0000)] 
po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 99.2% (262 of 264 strings)

Co-authored-by: Jesse Guo <jesseguotech@outlook.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main

3 months agopo: Translated using Weblate (Chinese (Simplified) (zh_CN))
Jesse Guo [Sat, 26 Jul 2025 15:17:14 +0000 (15:17 +0000)] 
po: Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 98.8% (261 of 264 strings)

Co-authored-by: Jesse Guo <jesseguotech@outlook.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main

3 months agoTEST-64-UDEV-STORAGE: wait for partition devices being created before calling udevadm...
Yu Watanabe [Sat, 26 Jul 2025 06:08:21 +0000 (15:08 +0900)] 
TEST-64-UDEV-STORAGE: wait for partition devices being created before calling udevadm trigger

For some reasons, kernel or sfdisk once remove the created partitions
and recreated them. And if 'udevadm trigger' triggers devices currently
being removed, the udevd does not receive the triggered events, and the
command stuck.

```
[   33.150452] TEST-64-UDEV-STORAGE.sh[546]: + sfdisk --wipe=always /dev/md/mdmirpar
[   33.478336] systemd-udevd[442]: md127: Device is queued (SEQNUM=2163, ACTION=change)
[   33.480153] kernel:  md127: p1 p2 p3
[   33.483772] systemd-udevd[442]: md127p1: Device is queued (SEQNUM=2164, ACTION=add)
[   33.483914] systemd-udevd[442]: md127p2: Device is queued (SEQNUM=2165, ACTION=add)
[   33.484999] systemd-udevd[442]: md127p3: Device is queued (SEQNUM=2166, ACTION=add)
[   33.485564] systemd-udevd[442]: md127: Received inotify event of watch handle 164.
[   33.503016] TEST-64-UDEV-STORAGE.sh[546]: + SYSTEMD_LOG_LEVEL=debug
[   33.503016] TEST-64-UDEV-STORAGE.sh[546]: + timeout 30 udevadm trigger --settle --parent-match /dev/md/mdmirpar
[   33.485905] systemd-udevd[442]: Successfully forked off '(udev-synth)' as PID 3208.
[   33.486067] systemd-udevd[442]: md127: Removing watch handle 164.
[   33.489035] systemd-udevd[442]: md127p1: Device is queued (SEQNUM=2167, ACTION=remove)
[   33.489048] systemd-udevd[442]: Received inotify event about removal of watch handle 164.
[   33.489507] systemd-udevd[442]: md127p2: Device is queued (SEQNUM=2168, ACTION=remove)
[   33.496298] systemd-udevd[442]: md127p3: Device is queued (SEQNUM=2169, ACTION=remove)
[   33.500628] systemd-udevd[442]: md127: Device is queued (SEQNUM=2170, ACTION=change)
[   33.502355] systemd-udevd[442]: md127p1: Device is queued (SEQNUM=2171, ACTION=add)
[   33.509371] TEST-64-UDEV-STORAGE.sh[3211]: md127: Triggered device with action 'change'.
[   33.509371] TEST-64-UDEV-STORAGE.sh[3211]: md127p1: Triggered device with action 'change'.
[   33.509371] TEST-64-UDEV-STORAGE.sh[3211]: md127p2: Triggered device with action 'change'.
[   33.512532] systemd-udevd[442]: md127: Device is queued (SEQNUM=2172, ACTION=change, UUID=a0b75692-08ad-428a-859b-9ef8772874d7)
[   33.512666] systemd-udevd[442]: md127p1: Device is queued (SEQNUM=2173, ACTION=change, UUID=4cd75a91-aa5b-4678-878c-0420b6c2e1e9)
[   33.512796] systemd-udevd[442]: md127p2: Device is queued (SEQNUM=2174, ACTION=add)
[   33.512910] systemd-udevd[442]: md127p3: Device is queued (SEQNUM=2175, ACTION=add)
[   33.531834] TEST-64-UDEV-STORAGE.sh[3211]: md127: Got uevent without UUID, ignoring: No such file or directory
[   33.553563] TEST-64-UDEV-STORAGE.sh[3211]: md127p1: Got uevent without UUID, ignoring: No such file or directory
[   33.561262] TEST-64-UDEV-STORAGE.sh[3211]: md127p2: Got uevent without UUID, ignoring: No such file or directory
[   33.562468] TEST-64-UDEV-STORAGE.sh[3211]: md127p2: Got uevent without UUID, ignoring: No such file or directory
[   33.563143] TEST-64-UDEV-STORAGE.sh[3211]: md127p3: Got uevent without UUID, ignoring: No such file or directory
[   33.564174] TEST-64-UDEV-STORAGE.sh[3211]: md127p1: Got uevent without UUID, ignoring: No such file or directory
[   33.567614] TEST-64-UDEV-STORAGE.sh[3211]: md127p3: Got uevent without UUID, ignoring: No such file or directory
[   33.597750] TEST-64-UDEV-STORAGE.sh[3211]: md127: Got uevent without UUID, ignoring: No such file or directory
[   33.623522] TEST-64-UDEV-STORAGE.sh[3211]: md127p1: Got uevent without UUID, ignoring: No such file or directory
[   33.676268] TEST-64-UDEV-STORAGE.sh[3211]: md127p3: Got uevent without UUID, ignoring: No such file or directory
[   33.686088] TEST-64-UDEV-STORAGE.sh[3211]: md127p2: Got uevent without UUID, ignoring: No such file or directory
```

Let's wait for partition devices being actually created, and wait for
all queued events being processed. Then, call 'udevadm trigger'.

3 months agotree-wide: bunch of fixlets raised by coverity (#38341)
Luca Boccassi [Sat, 26 Jul 2025 10:10:00 +0000 (11:10 +0100)] 
tree-wide: bunch of fixlets raised by coverity (#38341)

3 months agopo: Translated using Weblate (Korean)
김인수 [Sat, 26 Jul 2025 09:04:14 +0000 (09:04 +0000)] 
po: Translated using Weblate (Korean)

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: 김인수 <simmon@nplob.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ko/
Translation: systemd/main

3 months agofs-util: avoid overflow in MODE_TO_PTR() with MODE_INVALID 38341/head
Yu Watanabe [Fri, 25 Jul 2025 18:38:56 +0000 (03:38 +0900)] 
fs-util: avoid overflow in MODE_TO_PTR() with MODE_INVALID

Note, currently MODE_TO_PTR() and PTR_TO_MODE() are only used in
src/udev/udev-rules.c .

Fixes CID#1548060.

3 months agoinstall: skip later first_word() calls if one of earlier calls passes
Yu Watanabe [Fri, 25 Jul 2025 18:24:51 +0000 (03:24 +0900)] 
install: skip later first_word() calls if one of earlier calls passes

Prompted by CID#1587764, that is false-positive.

3 months agofuzz-efi-string: add missing OOM check
Yu Watanabe [Fri, 25 Jul 2025 18:05:20 +0000 (03:05 +0900)] 
fuzz-efi-string: add missing OOM check

Fixes CID#1610113 and CID#1610114.

3 months agodelta: add missing error check
Yu Watanabe [Fri, 25 Jul 2025 18:02:50 +0000 (03:02 +0900)] 
delta: add missing error check

Follow-up for 59829bb37a44a01c4394301fd65478037e6b01d8.
Fixes CID#1611425.

3 months agoordered-set: avoid overflow
Yu Watanabe [Fri, 25 Jul 2025 17:58:01 +0000 (02:58 +0900)] 
ordered-set: avoid overflow

Previously, ordered_set_put_strdupv() and friends returns the number of
pushed entries, but that is potentially larger than INT_MAX (of course,
realistically, OOM is triggered in that case).

No caller uses the number of the new entries. Let's return 1 when at
least one element is added.

Fixes CID#1611523.

3 months agotest: add explicit test cases for cpu_set_add() and cpu_set_add_range()
Yu Watanabe [Fri, 25 Jul 2025 17:31:37 +0000 (02:31 +0900)] 
test: add explicit test cases for cpu_set_add() and cpu_set_add_range()

cpu_set_add_range() is used in parse_cpu_set(), hence already tested.
But it is better to test these functions explicitly.

For CID#1611787 and CID#1611788, that should be false-positive.

3 months agocpu-set-util: check if cpu set is already allocated
Yu Watanabe [Fri, 25 Jul 2025 17:23:52 +0000 (02:23 +0900)] 
cpu-set-util: check if cpu set is already allocated

Prompted by CID#1611789, CID#1611790, and CID#1611791.

3 months agobootctl: automatically set --graceful when running in chroot
Luca Boccassi [Fri, 25 Jul 2025 10:30:51 +0000 (11:30 +0100)] 
bootctl: automatically set --graceful when running in chroot

Installing stuff in a chroot should not fail because efivars are
not available. When running in a container touching efivars is
completely disabled, but there are some cases (recovery) where
it is needed to touch them in a chroot, so don't disable them but
avoid failing the run instead.

3 months agocgroup-util: enforce alignment of f_handle
Luca Boccassi [Fri, 25 Jul 2025 14:16:22 +0000 (15:16 +0100)] 
cgroup-util: enforce alignment of f_handle

The change in 4d2e61211df7244fae6aaeb8cae0916b4a0e78bd
broke armv7 where uintptr_t is 4 bytes:

/* test_id */
Assertion '((uintptr_t) _p) % alignof(uint64_t) == 0' failed at src/basic/cgroup-util.c:108, function cg_get_cgroupid_at(). Aborting.

(gdb) p (uintptr_t)fh.file_handle.f_handle % _Alignof(uint64_t)
$9 = 4

Enforce that the structure is aligned as expected

Follow-up for 4d2e61211df7244fae6aaeb8cae0916b4a0e78bd

3 months agocpu-set-util: fix identical ternary expression
Yu Watanabe [Fri, 25 Jul 2025 17:15:56 +0000 (02:15 +0900)] 
cpu-set-util: fix identical ternary expression

Follow-up for fe3ada076ea8799a4d75f2e63adf540992d6fbb2.
Fixes CID#1611792.

3 months agocore/exec-invoke: check size of read size
Yu Watanabe [Fri, 25 Jul 2025 17:06:45 +0000 (02:06 +0900)] 
core/exec-invoke: check size of read size

Even though we do not use the read data, it is better to check the size
to prevent something spurious going.

Fixes CID#1612155.

3 months agoresolved: use usec_add() at one more place
Yu Watanabe [Fri, 25 Jul 2025 17:00:55 +0000 (02:00 +0900)] 
resolved: use usec_add() at one more place

Follow-up for 8458b7fb91ea5e5109b6f3c94f8a781a120c798b.
Fixes CID#1612580.

3 months agosyscalls table: add sh (#38338)
Luca Boccassi [Fri, 25 Jul 2025 18:23:00 +0000 (19:23 +0100)] 
syscalls table: add sh (#38338)

3 months agosyscalls-table: add sh and regenerated table 38338/head
Luca Boccassi [Fri, 25 Jul 2025 11:04:44 +0000 (12:04 +0100)] 
syscalls-table: add sh and regenerated table

3 months agoMeson: clean up "finding" of helper scripts (#38335)
Luca Boccassi [Fri, 25 Jul 2025 16:10:27 +0000 (17:10 +0100)] 
Meson: clean up "finding" of helper scripts (#38335)

Simplify meson definitions and use `files()` instead of `find_program()`
for internal scripts to make build logs cleaner.

3 months agomeson: add instructions for adding new arch to syscall.h
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 15:35:34 +0000 (17:35 +0200)] 
meson: add instructions for adding new arch to syscall.h

3 months agogetty-generator: improve debugging messages
Zbigniew Jędrzejewski-Szmek [Thu, 24 Jul 2025 12:31:46 +0000 (14:31 +0200)] 
getty-generator: improve debugging messages

We generally log what happens, but we didn't log anything about checking credentials,
so add that.

The error message when we cannot acces /proc/1/environ was confusing.

3 months agomeson: indent find_program() calls for readability 38335/head
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 10:18:40 +0000 (12:18 +0200)] 
meson: indent find_program() calls for readability

3 months agomeson: use files() not find_program() for helper scripts
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 10:18:19 +0000 (12:18 +0200)] 
meson: use files() not find_program() for helper scripts

We went back and forth between 'prog.sh', files('prog.sh'), and
find_program('prog.sh'). We want to use files() or find_program() so that we
get a good error message if the file is missing. Behaviour of meson changed
over time, and in the past not all forms could be used in all places. For
example 0f4c4f3824891aea6a76b2e861f38a6045b2a246 added find_program() in many
places to avoid repeated messages. But it seems that all recent meson versions
work fine with files().

find_program prints silly messages:
  Program tools/make-man-index.py found: YES
       (/home/zbyszek/src/systemd/tools/make-man-index.py)
  Program tools/meson-render-jinja2.py found: YES
       (/home/zbyszek/src/systemd/tools/meson-render-jinja2.py)
  ...
We know that those files will be found, they are part of the git checkout.
With files() this is gone and the meson output is easier to read.

3 months agotools: make all .py program files executable
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 10:12:08 +0000 (12:12 +0200)] 
tools: make all .py program files executable

All those files are standalone programs that can be executed directly.
Some .py files were marked executable, others weren't, probably accidentally.
Mark them all as executable in preparation for subsequent changes.

3 months agotools: consistently use #!/usr/bin/env python3
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 10:09:46 +0000 (12:09 +0200)] 
tools: consistently use #!/usr/bin/env python3

It's ugly, but it's better to be consistently ugly.

3 months agoman: consistently use #!/usr/bin/python
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 10:06:14 +0000 (12:06 +0200)] 
man: consistently use #!/usr/bin/python

Some files were using that, others weren't. Since those are user-facing
docs, we should use the nice clean form, not the workaround for strange
systems that we use in other places.

3 months agomeson: inline output file names
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 09:37:29 +0000 (11:37 +0200)] 
meson: inline output file names

Before 7d247d3cb875e1778e6cc81dbf255b13092b29e0, we needed the file name
twice. But now we only need it once, so no need to overcomplicate things
by defining a variable with a single use.

When a variable is used, it's also easier to make a mistake and e.g.
accidentally reuse the variable later.

3 months agoLogging fixlets (#38313)
Zbigniew Jędrzejewski-Szmek [Fri, 25 Jul 2025 10:27:24 +0000 (12:27 +0200)] 
Logging fixlets (#38313)

3 months agotest-sd-device: filter out dm block devices at several more places
Yu Watanabe [Fri, 25 Jul 2025 00:30:01 +0000 (09:30 +0900)] 
test-sd-device: filter out dm block devices at several more places

Follow-up for 911a52b769e477fd13fbc84d9ac098b8c0298eaf.

Fixes #38332.

3 months agotest: modernize test-oomd-util (#38329)
Luca Boccassi [Fri, 25 Jul 2025 10:01:32 +0000 (11:01 +0100)] 
test: modernize test-oomd-util (#38329)

3 months agotest: stop firewalld and friends to make them not disturb test-firewall-util
Yu Watanabe [Thu, 24 Jul 2025 20:55:20 +0000 (05:55 +0900)] 
test: stop firewalld and friends to make them not disturb test-firewall-util

Hopefully fixes #35526.

3 months agotest: wait for userspace mount options applied (#38327)
Luca Boccassi [Fri, 25 Jul 2025 09:57:13 +0000 (10:57 +0100)] 
test: wait for userspace mount options applied (#38327)

Hopefully fixes #32712.

3 months agosysupdate: Prevent unnecessary failure when a transfer Path is not present
Nick Labich [Thu, 24 Jul 2025 19:25:58 +0000 (15:25 -0400)] 
sysupdate: Prevent unnecessary failure when a transfer Path is not present

Fixes https://github.com/systemd/systemd/issues/38007

3 months agoerrno-list: fallback to use our errno name table
Yu Watanabe [Fri, 25 Jul 2025 00:40:00 +0000 (09:40 +0900)] 
errno-list: fallback to use our errno name table

Some architecture specific errno may not be known by glibc.
Let's fallback to our table when strerrorname_np() returns NULL.

Fixes the following error in mips:
```
src/test/test-errno-list.c:14: Assertion failed: Expected "errno_to_name(i) == errno_names[i]", got "(null) != EINIT"
```

Follow-up for 03ccee19396ae604d9ac1570dddb8b41ec0e7253.

3 months agopo: Translated using Weblate (Slovenian)
Martin Srebotnjak [Fri, 25 Jul 2025 00:08:00 +0000 (00:08 +0000)] 
po: Translated using Weblate (Slovenian)

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Martin Srebotnjak <miles@filmsi.net>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/sl/
Translation: systemd/main

3 months agotest: modernize tests.c and tests.h 38329/head
Yu Watanabe [Thu, 24 Jul 2025 23:50:11 +0000 (08:50 +0900)] 
test: modernize tests.c and tests.h

- use ASSERT_OK() and friends,
- use mkdtemp_malloc(),
- use pidref_safe_fork() and pidref_wait_for_terminate_and_check().

3 months agotest: modernize test-oomd-util
Yu Watanabe [Thu, 24 Jul 2025 21:15:38 +0000 (06:15 +0900)] 
test: modernize test-oomd-util

- use DEFINE_TEST_MAIN() macro,
- use ASSERT_OK() and friends,
- drop restriction that the test must run as root,
- replace sleep(2) with loop of shorter sleep and cg_is_empty(),
- applied several coding style cleanups.

3 months agotest: several fixlets for journal related failures (#38308)
Yu Watanabe [Thu, 24 Jul 2025 23:03:08 +0000 (08:03 +0900)] 
test: several fixlets for journal related failures (#38308)

Hopefully fixes #37818, #37143, #38287.

3 months agocore/dbus-manager: validate unit type before calling into service-specific methods...
Luca Boccassi [Thu, 24 Jul 2025 22:17:41 +0000 (23:17 +0100)] 
core/dbus-manager: validate unit type before calling into service-specific methods (#38323)

Fixes #38320

3 months agoTEST-10-MOUNT: wait for userspace mount options being loaded 38327/head
Yu Watanabe [Thu, 24 Jul 2025 19:12:10 +0000 (04:12 +0900)] 
TEST-10-MOUNT: wait for userspace mount options being loaded

When a device is mounted with userspace options such as _netdev, even when the mount event source is
triggered, only /proc/self/mountinfo may be updated, and /run/mount/utab may not be updated yet.
Hence, the mount unit may be created/updated without the userspace options. In that case, the mount
event source will be retriggered when /run/mount/utab is updated, and the mount unit will be updated
again with the userspace options. Typically, the window between the two calls is very short, but when
the mount event source is ratelimited after the first event, processing the second event may be delayed
about 1 secound. Hence, here we need to wait for a while.

By adding a debugging logs in mount_setup_unit(), the userspace mount is
not obtained in the first event, and the second event is delayed by the ratelimit.
```
[   20.023086] H TEST-10-MOUNT.sh[446]: + mount -t ext4 -o _netdev /dev/loop1p1 /tmp/deptest
[   20.026255] H kernel: EXT4-fs (loop1p1): mounted filesystem c1fa00ea-2ba8-46b2-9002-2ac997f4cda9 r/w with ordered data mode. Quota mode: none.
[   20.026537] H TEST-10-MOUNT.sh[446]: + timeout 10 bash -c 'until systemctl -q is-active tmp-deptest.mount; do sleep .1; done'
[   20.032293] H systemd[1]: tmp-deptest.mount: mount_setup_unit: proc: yes, netdev: no
[   20.035978] H systemd[1]: Unit blockdev@dev-loop1p1.target has alias blockdev@.target.
[   20.039765] H systemd[1]: tmp-deptest.mount: Changed dead -> mounted
[   20.046598] H systemd[1]: Event source 0x7c73093e05e0 (mount-monitor-dispatch) entered rate limit state.
```

Hopefully fixes #32712.

3 months agoTEST-10-MOUNT: make cleanup function run on error
Yu Watanabe [Thu, 24 Jul 2025 16:17:44 +0000 (01:17 +0900)] 
TEST-10-MOUNT: make cleanup function run on error

3 months agoTEST-60-MOUNT-RATELIMIT: use reload to make new config applied
Yu Watanabe [Thu, 24 Jul 2025 15:17:08 +0000 (00:17 +0900)] 
TEST-60-MOUNT-RATELIMIT: use reload to make new config applied

3 months agotest: move testcase_dependencies() to TEST-10-MOUNT
Yu Watanabe [Thu, 24 Jul 2025 15:14:59 +0000 (00:14 +0900)] 
test: move testcase_dependencies() to TEST-10-MOUNT

TEST-60-MOUNT_RATELIMIT is run on nspawn by default, and currently run
on vm only on arch mkosi. Let's move the test case to new TEST-10-MOUNT,
which always run on vm.

3 months agointegration-test: mention TEST_SAVE_JOURNAL in README
Yu Watanabe [Thu, 24 Jul 2025 17:50:06 +0000 (02:50 +0900)] 
integration-test: mention TEST_SAVE_JOURNAL in README

3 months agointegration-test: show journalctl command for showing saved journal when TEST_SAVE_JO...
Yu Watanabe [Thu, 24 Jul 2025 17:46:07 +0000 (02:46 +0900)] 
integration-test: show journalctl command for showing saved journal when TEST_SAVE_JOURNAL=1

3 months agoNEWS: document BPF delegate options
Matteo Croce [Thu, 24 Jul 2025 12:43:23 +0000 (14:43 +0200)] 
NEWS: document BPF delegate options

Document the new BPF delegate options, AKA BPF tokens.

3 months agopo: Translated using Weblate (Arabic)
joo es [Thu, 24 Jul 2025 14:54:26 +0000 (14:54 +0000)] 
po: Translated using Weblate (Arabic)

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: joo es <jonnyse@users.noreply.translate.fedoraproject.org>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ar/
Translation: systemd/main

3 months agopo: Translated using Weblate (Georgian)
Temuri Doghonadze [Thu, 24 Jul 2025 14:54:26 +0000 (14:54 +0000)] 
po: Translated using Weblate (Georgian)

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ka/
Translation: systemd/main

3 months agopo: Translated using Weblate (Portuguese)
Américo Monteiro [Thu, 24 Jul 2025 14:54:25 +0000 (14:54 +0000)] 
po: Translated using Weblate (Portuguese)

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Américo Monteiro <a_monteiro@gmx.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/pt/
Translation: systemd/main

3 months agopo: Translated using Weblate (Polish)
Piotr Drąg [Thu, 24 Jul 2025 14:54:25 +0000 (14:54 +0000)] 
po: Translated using Weblate (Polish)

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Piotr Drąg <piotrdrag@gmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/pl/
Translation: systemd/main

3 months agopo: Translated using Weblate (French)
Léane GRASSER [Thu, 24 Jul 2025 14:54:25 +0000 (14:54 +0000)] 
po: Translated using Weblate (French)

Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: Léane GRASSER <leane.grasser@proton.me>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/fr/
Translation: systemd/main

3 months agovmspawn: add machine types for m68k/sparc64 and default to 'none' if unknown
Luca Boccassi [Thu, 24 Jul 2025 13:13:11 +0000 (14:13 +0100)] 
vmspawn: add machine types for m68k/sparc64 and default to 'none' if unknown

Qemu has a 'none' machine that can be used for very basic booting
on weird arches, just default to that unless otherwise specified

3 months agotpm2-clear: build only if bootloader/openssl are enabled
Luca Boccassi [Thu, 24 Jul 2025 12:15:32 +0000 (13:15 +0100)] 
tpm2-clear: build only if bootloader/openssl are enabled

The tpm2-clear units are only installed if tpm/bootloader/ssl are
enabled. The tpm2-setup binary/units are built and installed only
if tpm/bootloader/ssl are enabled.
Do the same for the tpm2-clear binary to keep it consistent.

3 months agoTEST-07-PID1: add test case for #38320 38323/head
Mike Yuan [Thu, 24 Jul 2025 14:29:41 +0000 (16:29 +0200)] 
TEST-07-PID1: add test case for #38320

3 months agotest: various cleanups for TEST-04-JOURNAL.journal-reload.sh 38308/head
Yu Watanabe [Wed, 23 Jul 2025 20:04:52 +0000 (05:04 +0900)] 
test: various cleanups for TEST-04-JOURNAL.journal-reload.sh

- rename to TEST-04-JOURNAL.reload.sh,
- use trap to call cleanup(),
- use systemd-run to write journals, to make each journal entries to be
  distinguished by the service name,
- greatly simplifies verify_journals(),
- drop unnecessary calls of sleep command, etc, etc.

Follow-ups for df5b3426f60bb626f46f93fbdacecae274c1645b.
Hopefully fixes #38287.

3 months agocore/dbus-manager: validate unit type before calling into service-specific methods
Mike Yuan [Thu, 24 Jul 2025 13:55:29 +0000 (15:55 +0200)] 
core/dbus-manager: validate unit type before calling into service-specific methods

Fixes #38320

3 months agocore/dbus-manager: don't ever try to dump fdstore for units not properly loaded
Mike Yuan [Thu, 24 Jul 2025 14:07:28 +0000 (16:07 +0200)] 
core/dbus-manager: don't ever try to dump fdstore for units not properly loaded

3 months agojournal: clear cached journal storage space before vacuum journals
Yu Watanabe [Thu, 24 Jul 2025 12:14:13 +0000 (21:14 +0900)] 
journal: clear cached journal storage space before vacuum journals

Otherwise, the cached storage space may be calculated based on the old
journald.conf settings.

Follow-up for 922d037f349b72139480cdded41b3fa23a3001be and
df5b3426f60bb626f46f93fbdacecae274c1645b.

3 months agoTEST-04-JOURNAL: use bash to make builtin echo command used
Yu Watanabe [Wed, 23 Jul 2025 18:34:26 +0000 (03:34 +0900)] 
TEST-04-JOURNAL: use bash to make builtin echo command used

When non-builtin echo command is used, then the command may exit before
journald find the source of the stream, and the log filtering may not be
applied.

Hopefully fixes #37143.

3 months agoTEST-07-PID: journalctl -u may not work for short living processes
Yu Watanabe [Wed, 23 Jul 2025 18:16:11 +0000 (03:16 +0900)] 
TEST-07-PID: journalctl -u may not work for short living processes

Hopefully fixes #37818.

3 months agotest: drop executable flag from prefix-shell.service
Yu Watanabe [Wed, 23 Jul 2025 18:11:47 +0000 (03:11 +0900)] 
test: drop executable flag from prefix-shell.service

3 months agotest-memstream-util.c: Migrate to new assertion macros
Yaping Li [Wed, 23 Jul 2025 21:16:03 +0000 (14:16 -0700)] 
test-memstream-util.c: Migrate to new assertion macros

We recently added a new set of assertion macros such as ASSERT_GE, ASSERT_OK, ASSERT_EQ, ... which show not
only the expression that failed but also the values of the arguments of the expression. Let's use them.

3 months agoLICENSES/README: update file paths after moves
Luca Boccassi [Thu, 24 Jul 2025 11:20:26 +0000 (12:20 +0100)] 
LICENSES/README: update file paths after moves

Follow-up for 1a60b97524d8408e5f059b09ae316987c698e671

3 months agoFix typos found by Lintian
Luca Boccassi [Thu, 24 Jul 2025 08:00:25 +0000 (09:00 +0100)] 
Fix typos found by Lintian

3 months agoudev: downgrade ENOMEDIUM warnings 38313/head
Zbigniew Jędrzejewski-Szmek [Thu, 24 Jul 2025 08:42:50 +0000 (10:42 +0200)] 
udev: downgrade ENOMEDIUM warnings

I noticed similar warnings in many VM boots:
  fedora (udev-worker)[475]: sr0: Failed to open device node: No medium found
This particular one is from src/udev/udev-builtin-uaccess.c:125, but I think the
same principle should be used in all places: if we are ignoring errors that the
device has been removed, we should also ignore ENOMEDIUM.

3 months agocore/socket: shorten/reword message about restarted sockets
Zbigniew Jędrzejewski-Szmek [Thu, 24 Jul 2025 08:25:59 +0000 (10:25 +0200)] 
core/socket: shorten/reword message about restarted sockets

log_unit_warning() already prints the full unit name, so we don't need to say
that it is a socket unit. And in technical messages articles like "the" are
generally skipped to make the messages shorter. Use simpler tense and simpler
wording.

Example from log: fedora.local systemd[1]: systemd-initctl.socket: Socket unit
        configuration has changed while unit has been running, no open socket file
        descriptor left. The socket unit is not functional until restarted.
This is just too wordy and says "socket" four times.

3 months agoNEWS: add description for DHCPv6 SIP feature
Zbigniew Jędrzejewski-Szmek [Thu, 24 Jul 2025 06:53:19 +0000 (08:53 +0200)] 
NEWS: add description for DHCPv6 SIP feature

Also move the description of IPv4DuplicateAddressDetectionTimeoutSec=
to the section about systemd-networkd. The change of the timeout doesn't
have to be described as "incompatible". It's more of a bugfix, the previous
timeout was just strangely large and hopefully nobody relied on this detail
of implementation.

Also, reword to say that MPLSRouting= just controls enablement, nothing more.

3 months agoNEWS: some typos and whitespace fixes
Zbigniew Jędrzejewski-Szmek [Wed, 23 Jul 2025 21:05:16 +0000 (23:05 +0200)] 
NEWS: some typos and whitespace fixes

3 months agotest-unit-serialize.c: Migrate to new assertion macros
Yaping Li [Wed, 23 Jul 2025 00:30:35 +0000 (17:30 -0700)] 
test-unit-serialize.c: Migrate to new assertion macros

We recently added a new set of assertion macros such as ASSERT_GE, ASSERT_OK, ASSERT_EQ, ... which show not
only the expression that failed but also the values of the arguments of the expression. Let's use them.

3 months agomeson: Detect ELF ABI version for bpf build on ppc64 (#38307)
Cosima Neidahl [Wed, 23 Jul 2025 20:42:13 +0000 (22:42 +0200)] 
meson: Detect ELF ABI version for bpf build on ppc64 (#38307)

On 64-bit POWER, there are multiple versions of the ELF ABI in use.

- little-endian powerpc64 is ELFv2
- big-endian powerpc64 is
  - ELFv2 when using musl
  - either ELFv1 or ELFv2 when using glibc

Previously, the BPF build was hard-coding `-D_CALL_ELF=2`, which is
ELFv2. This makes the build fail on ELFv1, similarly to the original
issue that necessitated the addition of this flag on powerpc64le.

To fix this:

1. Use ELFv1 as the default (when `_CALL_ELF` is not defined, this is
the assumption that should be made about the ABI version).
2. Check if the C compiler has `_CALL_ELF` defined, and if it does,
override the default with that.
That's technically not the *correct* compiler in this situation, but I'm
unsure how to get a compiler object for the BPF one from Meson to do the
`*_define('_CALL_ELF')` checks with, and they *should* both be targeting
the same ABI version anyway.
3. Add the ABI version to the `_CALL_ELF` definition for the BPF
compiler flags.

This makes a BPF-enabled build succeed on powerpc64 w/ ELFv1 glibc.

3 months agopo: update Japanese translations
Yu Watanabe [Wed, 23 Jul 2025 17:29:57 +0000 (02:29 +0900)] 
po: update Japanese translations

3 months agopo: Update translation files
Weblate [Wed, 23 Jul 2025 16:54:47 +0000 (16:54 +0000)] 
po: Update translation files

Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Co-authored-by: Weblate <noreply@weblate.org>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/
Translation: systemd/main