SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
52,160 Commits 2 Branches 1 Tag
76a86ffdbee2dd9ef0f2b5338e14eb6ba7671456
Commit Graph
34349 Commits
Author SHA1 Message Date
Lennart Poettering 222633b646 Merge pull request #13823 from anitazha/unpriv_privateusers 
core: PrivateUsers=true for (unprivileged) user managers
 2019-12-19 12:03:06 +01:00
Anita Zhang b6657e2c53 test: add test case for PrivateDevices=y and Group=daemon 
For root, group enforcement needs to come after PrivateDevices=y set up
according to 096424d123. Add a test to
verify this is the case.
 2019-12-18 11:09:30 -08:00
Anita Zhang e5f10cafe0 core: create inaccessible nodes for users when making runtime dirs 
To support ProtectHome=y in a user namespace (which mounts the inaccessible
nodes), the nodes need to be accessible by the user. Create these paths and
devices in the user runtime directory so they can be used later if needed.
 2019-12-18 11:09:30 -08:00
Anita Zhang 5749f855a7 core: PrivateUsers=true for (unprivileged) user managers 
Let per-user service managers have user namespaces too.

For unprivileged users, user namespaces are set up much earlier
(before the mount, network, and UTS namespaces vs after) in
order to obtain capbilities in the new user namespace and enable use of
the other listed namespaces. However for privileged users (root), the
set up for the user namspace is still done at the end to avoid any
restrictions with combining namespaces inside a user namespace (see
inline comments).

Closes #10576
 2019-12-18 11:09:30 -08:00
Topi Miettinen d909b40fda analyze: badness if neither of RootImage and RootDirectory exists 
Instead of requiring both RootImage and RootDirectory directives, give badness
points if neither is present. Fixes conversion in d737b451f.
 2019-12-18 20:38:04 +02:00
Lennart Poettering ecb040643d Merge pull request #14376 from poettering/sd-event-no-stack 
sd-event: don't use stack for event queue array
 2019-12-18 17:18:07 +01:00
Yu Watanabe de697db05b network: introduce AddPrefixRoute= and deprecate PrefixRoute= 
PrefixRoute= was added by e63be0847c,
but unfortunately, the meaning of PrefixRoute= is inverted; when true
IFA_F_NOPREFIXROUTE flag is added. This introduces AddPrefixRoute=
setting.
 2019-12-18 16:32:31 +01:00
Lennart Poettering 0c8e33b6e9 Merge pull request #14377 from keszybz/fixups 
Fixups
 2019-12-18 16:21:20 +01:00
Yu Watanabe 6ff5cc6b7a network: introduce multipath route 
Closes #12541.
 2019-12-18 22:12:57 +09:00
Yu Watanabe 6497a8aa9b sd-netlink: introduce rtattr_append_attribute() 
It will be used in later commit.
 2019-12-18 22:12:57 +09:00
Zbigniew Jędrzejewski-Szmek 9667e10b1a Merge pull request #14365 from yuwata/networkctl-altname 
network, udev: further alternative name support
 2019-12-18 12:44:34 +01:00
Zbigniew Jędrzejewski-Szmek b012a1f455 Make openssl dependency optional again 2019-12-18 11:24:44 +01:00
Jérémy Rosen 3d0205f28b Be more strict about what can be an Alias for template and instances 
* Templates can only use other templates as alisases
* Template instances can use templates or things that expand with an
  instance name
 2019-12-18 11:00:49 +01:00
Lennart Poettering 5cddd924aa sd-event: don't allocate event queue array on stack 
We might have quite a number of event sources, hence allocate this in a
buffer we can reuse on the heap, rather than on the stack.
 2019-12-18 10:59:27 +01:00
Zbigniew Jędrzejewski-Szmek 4023637a8a Restore silent handling of BUS_ERROR_SPEED_METER_INACTIVE 
This only matters for the case where new networkctl is running against older
networkd. We should still handle the old error to avoid unnecessary warning
about speedmeeter being disabled.

This partially reverts commit e813de549b.
 2019-12-18 08:48:33 +01:00
Zbigniew Jędrzejewski-Szmek 1b49e3e3c4 shared/loop-util: rename function 
As suggested in https://github.com/systemd/systemd/pull/14261#pullrequestreview-332398625.
 2019-12-18 08:48:33 +01:00
Topi Miettinen 7a670b1dd9 shared/dropin: fix assert for invalid drop-in 
Don't try to show top level drop-in for non-existent units or when trying to
instantiate non-instantiated units:

$ systemctl cat nonexistent@.service
Assertion 'name' failed at src/shared/dropin.c:143, function unit_file_find_dirs(). Aborting.
$ systemctl cat systemd-journald@.service
Assertion 'name' failed at src/shared/dropin.c:143, function unit_file_find_dirs(). Aborting.
 2019-12-18 08:43:40 +01:00
Yu Watanabe 51692fab56 Merge pull request #14370 from poettering/homed-preparation-misc 
four smaller preparation patches from the homed PR
 2019-12-18 11:17:59 +09:00
Lennart Poettering 9652d74092 varlink: add varlink_close_unref() helper 2019-12-17 20:05:46 +01:00
Lennart Poettering e10720818e chown-recursive: add fd based API 2019-12-17 20:03:40 +01:00
Lennart Poettering 417a6eece8 chown-recursive: move src/core/chown-recursive.[ch] → src/shared/ 
We want to use it outside of the core, hence let's moved it to the
shared code directory.
 2019-12-17 20:03:40 +01:00
Lennart Poettering 845a7c1fc1 basic: add quota-util.[ch] with some helpers for the Linux quotactl() API 2019-12-17 20:03:40 +01:00
Lennart Poettering 6789dd57f0 cryptsetup-pkcs11: just return zero on success, no need to return anything else 2019-12-17 18:54:07 +01:00
Lennart Poettering 3ded1d616a cryptsetup-pkcs11: line break some overly long lines 2019-12-17 18:54:04 +01:00
Lennart Poettering 12f69587e9 cryptsetup-pkcs11: refuse keys above 16MiB size 2019-12-17 18:54:00 +01:00
Lennart Poettering 601f91bec5 time-util: deal with systems where userspace has 64bit time_t but kernel does not 
Fixes: #14362
 2019-12-18 00:38:39 +09:00
Yu Watanabe e7bdadb5c6 network: support alternative name to get bus path for the link 2019-12-18 00:05:50 +09:00
Yu Watanabe f7581ed6e0 networkctl: support alternative name to specify interface 2019-12-18 00:05:50 +09:00
Yu Watanabe 4d016e965b udev: sort alternative names 
Kernel preserves the order of alternative names. So, for user
visibility, let's sort the alternative names.
 2019-12-18 00:05:50 +09:00
Yu Watanabe b04c5e51da sd-netlink: introduce rtnl_resolve_link_alternative_names() 2019-12-18 00:05:50 +09:00
Lennart Poettering 13b6c4c8de Merge pull request #14267 from poettering/pkcs11-cryptsetup 
just the pkcs11 hookup for classic cryptsetup (/etc/crypttab) split out of the homed PR
 2019-12-17 15:30:32 +01:00
Yu Watanabe 6e5df4036f Merge pull request #14337 from yuwata/network-tc-fq-more 
network: tc: introduce more FQ settings
 2019-12-17 23:30:10 +09:00
Anita Zhang 1209ef94bd [import] fix stdin/stdout pipe behavior in import/export tar/raw 
The code existed in machinectl to use stdin/stdout if the path for
import/export tar/raw was empty or dash (-) but a check to
`fd_verify_regular` in importd prevented it from working.

Update the check instead to explicitly check for regular file or
pipe/fifo.

Fixes #14346
 2019-12-17 23:14:53 +09:00
Yu Watanabe 4d92039fce Merge pull request #14352 from yuwata/sd-netlink-tiny-fixes 
sd-netlink: tiny fixes
 2019-12-17 23:10:46 +09:00
Yu Watanabe 3267cb45e9 Merge pull request #14208 from poettering/json-homed-prepare 
json bits from homed PR
 2019-12-17 23:10:08 +09:00
Zbigniew Jędrzejewski-Szmek 0d9ac4ea57 Merge pull request #14360 from yuwata/udev-alternative-names-policy 
udev: introduce AlternativeNamesPolicy= setting
 2019-12-17 12:13:47 +01:00
Bart Willems 4afb4a9cc5 systemctl: show what verbs support --dry-run in the help page 
Signed-off-by: Bart Willems <bwillems@protonmail.com>
 2019-12-17 11:08:00 +01:00
Lennart Poettering c16782577b Merge pull request #14241 from keszybz/resume-timeout 
Bump resume timeout to infinity
 2019-12-17 10:34:43 +01:00
Yu Watanabe 6d185cffb1 sd-netlink: add a whitespce between cast operator and variable 2019-12-17 17:36:08 +09:00
Yu Watanabe f501c25151 sd-netlink: make netlink_container_parse() takes size_t for rt_len 
And use another unsigned short variable for RTA_OK() macro.
 2019-12-17 17:35:25 +09:00
Yu Watanabe ef1d2c07f9 udev: introduce AlternativeNamesPolicy= setting 2019-12-17 15:44:43 +09:00
Yu Watanabe bb181dd4a6 udev: do not fail if kernel does not support alternative names 2019-12-17 15:43:50 +09:00
Yu Watanabe e16f18bddf Merge pull request #14339 from keszybz/invalid-enablement-logs 
Small enhancements to logs for enabling of invalid units
 2019-12-17 15:04:14 +09:00
Yu Watanabe a0f11d1d11 random-util: call initialize_srand() after fork() 2019-12-17 15:03:36 +09:00
Anita Zhang 024941a521 Merge pull request #14351 from yuwata/util-constify-strv-xxx 
util: constify arguments of strv_xxx()
 2019-12-16 18:08:04 -08:00
Yu Watanabe 78f8849f84 udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ 2019-12-17 11:04:11 +09:00
Lennart Poettering 861f178905 efivars: properly NUL terminate EFI variables when reading 
A follow-up for 35b9eb0a72.
 2019-12-16 15:35:31 +01:00
Thomas Haller e40b4caa1f basic/tmpfile: avoid maybe-uninitialized warning in mkostemp_safe() 
The variable is always initialized, but the compiler might not notice
that. With gcc-9.2.1-1.fc31:

    $ CFLAGS='-Werror=maybe-uninitialized -Og' meson build
    $ ninja -C build
    [...]
    ../src/basic/tmpfile-util.c: In function ‘mkostemp_safe’:
    ../src/basic/tmpfile-util.c:76:12: error: ‘fd’ may be used uninitialized in this function [-Werror=maybe-uninitialized]
       76 |         if (fd < 0)
          |            ^
 2019-12-16 14:25:31 +01:00
Zbigniew Jędrzejewski-Szmek e51712963b shared/install: log syntax error for invalid DefaultInstance= 
Ideally, we would want to report this over back over dbus. But that is pretty hard,
because the unitfile parsing logic doesn't provide any feedback.
systemd-analyze verify also doesn't notice the issue, because it doesn't look
at the [Install] section at all. Let's print a message in the logs at least.
 2019-12-16 14:19:49 +01:00
Lennart Poettering c84d9b3b71 Merge pull request #14261 from keszybz/loop-utils-and-efivars 
Fixes for networkd, shared/loop-util, basic/efivars
 2019-12-16 09:27:46 +01:00