Tobias Fleig
d380337dc5
ukify: Add support for .ucode UKI section
...
This commit teaches ukify how to build a .ucode section into UKIs. This
section is functionally an initrd, intended for microcode updates.
2024-04-19 06:28:47 -07:00
Daan De Meyer
792eb0f440
mkosi: Build command line into the image
...
This allows using systemd-vmspawn itself while still getting a decent
experience.
2024-04-19 15:05:19 +02:00
Tobias Fleig
590ac4bd27
measure: Add .ucode UKI section support
...
This commit adds support for the new ".ucode" UKI section to
systemd-measure. It is functionally an initrd and is treated as such by
measure.
2024-04-19 05:58:56 -07:00
Tobias Fleig
aea81bc0ff
stub: Add support for .ucode UKI section
...
This commit adds support for loading, measuring and handling a ".ucode"
UKI section. This section is functionally an initrd, intended for
microcode updates. As such it will always be passed to the kernel first.
2024-04-19 05:58:46 -07:00
Luca Boccassi
8257508c58
portable: support vpick
...
Resolve at attach/detach/inspect time, so that the image is pinned and requires
re-attaching on update, given files are extracted from it so just passing
img.v/ to RootImage= is not enough to get a portable image updated
2024-04-19 13:25:32 +01:00
Luca Boccassi
421a4ba7e4
vpick: add pick_filter_image_any filter that matches both dirs and images
2024-04-19 13:25:32 +01:00
Luca Boccassi
14f75708e2
Merge pull request #32349 from yuwata/sd-event-source-get-inotify-path
...
sd-event: introduce sd_event_source_get_inotify_path()
2024-04-19 12:19:06 +02:00
Luca Boccassi
87544df83c
Merge pull request #32345 from yuwata/sd-radv-send
...
sd-radv: introduce sd_radv_send(), and reset timer on sending unsplicited RA
2024-04-19 11:59:08 +02:00
Luca Boccassi
5dcd6b1d55
Merge pull request #31978 from nolange/fix_openssl_deprecations
...
Fix openssl deprecations
2024-04-19 11:20:44 +02:00
Yu Watanabe
d5f24a0ea9
sd-event,sd-journal: fix error handling of inotify_add_watch_fd()
...
Fixes a bug in 97ef539169 and
858749f731 .
2024-04-19 11:10:55 +02:00
Lennart Poettering
3f011540fd
update TODO
2024-04-19 10:54:22 +02:00
Krzesimir Nowak
d74d69ae53
test: Make the sysext test to run with --root and without
...
I was bitten several times by testing things only with --root flag, so this
commit prepares the existing test cases to run on / too. This required the test
cases to clean up after themselves, thus I have put each test case in a
separate subshell and used traps to do the cleanups.
I needed to change the hierarchy used by the test extension to /opt, because
unmounting /usr often failed with EBUSY.
2024-04-19 10:24:17 +02:00
Daan De Meyer
a2574ebf4d
mkosi: Fix FORTIFY_SOURCE (again)
...
CentOS/Fedora use annobin which will complain if FORTIFY_SOURCE=0
is used so we disable those checks to avoid the warnings.
We also make sure that when we query the compilation flags so we can
add more, we set _fortify_level=0 and undefine _lto_flags so that we
don't get those flags in the result.
2024-04-19 10:17:09 +02:00
Krzesimir Nowak
d3577fb7ba
sysext: Determine extensions earlier
...
Before any directory in root filesystem is potentially made.
2024-04-19 10:01:19 +02:00
Krzesimir Nowak
b2370203d9
sysext: Use EPROTO for child failure
2024-04-19 08:59:10 +02:00
Krzesimir Nowak
90ace86359
sysext: Use the new path-util helper
2024-04-19 08:33:04 +02:00
Krzesimir Nowak
581d8a1470
path-util: Add a helper for checking paths
...
The difference with the already existing path_equal_or_inode_same function is
that the new one does not swallow errors.
2024-04-19 08:30:40 +02:00
Yu Watanabe
74c4231ce5
sd-event: introduce sd_event_source_get_inotify_path()
...
This may be useful when there are multiple inotify event sources exist.
Without this, users need to manage the event sources and paths.
2024-04-19 14:23:11 +09:00
Yu Watanabe
fc6ec43c02
man: drop spurious version info for error code
...
Follow-up for 87fe0a6960 .
2024-04-19 14:23:08 +09:00
Krzesimir Nowak
55c28a88f1
sysext: Make static const a macro instead
2024-04-19 07:21:35 +02:00
Krzesimir Nowak
3e8f4d92b4
sysext: Use string table for parsing mutable mode
2024-04-19 07:21:02 +02:00
Krzesimir Nowak
60c335a4bc
test: Do not limit hierarchies
2024-04-19 07:20:52 +02:00
Krzesimir Nowak
080203639b
sysext: Fix ephemeral-import mode for unused hierarchies
2024-04-19 07:20:49 +02:00
Krzesimir Nowak
fe01b0d8c1
sysext: Code style fixes
2024-04-19 07:19:09 +02:00
Krzesimir Nowak
140f834333
test: Add sysext test case for checking valid mutable directory mode
2024-04-19 07:18:38 +02:00
Krzesimir Nowak
e30623b79d
sysext: Check if preexisting mutable directory has a valid mode
...
Preexisting mutable directory is likely set by the admin, so we expect it to be
set up properly instead of changing the mode of the directory behind admin's
back.
2024-04-19 07:18:34 +02:00
Krzesimir Nowak
6aab53b175
test: Add sysext test-cases for checking mode preservation
2024-04-19 07:15:01 +02:00
Krzesimir Nowak
3de7ce7fe7
sysext: Make sure that merged hierarchy does not change its permissions
...
The merged overlayfs filesystem mountpoint has a mode of its top layer. We have
been creating all the directories to be used as layers with mode 0700, so the
result was a merged hierarchy with such mode - it rendered the merged hierarchy
to be accesible only by root.
Change the mode of a directory serving as the top layer to match the hierarchy
to avoid such situations.
2024-04-19 07:15:01 +02:00
Krzesimir Nowak
cb409e9074
sysext: Fix some small issues in error cases
2024-04-19 07:15:01 +02:00
Yu Watanabe
c1ab4458f2
sd-event: rename argument for storing result
2024-04-19 13:59:26 +09:00
Yu Watanabe
ff5b9aeeda
Merge pull request #32340 from YHNdnzj/wait-for-unit-cleanup
...
bus-wait-for-units: some cleanup
2024-04-19 12:36:48 +09:00
Yu Watanabe
2a1e890943
sd-radv: reset timer on sending unsolicited RA
...
Addresses https://github.com/systemd/systemd/pull/32267#discussion_r1567078807 .
2024-04-19 12:05:41 +09:00
Yu Watanabe
16e4dce6e8
sd-radv: expose sd_radv_send()
...
To allow library users manually send RA.
Currently, this is not used, but will be used later.
2024-04-19 12:04:58 +09:00
Yu Watanabe
8276dd9ef2
Merge pull request #32290 from yuwata/network-conf-parser-cleanups
...
network,nspawn: several cleanups for conf-parsers
2024-04-19 11:53:22 +09:00
Yu Watanabe
ba5dc3afad
sd-radv: set router preference gracefully
...
Rather than refusing to set non-zero preference, when lifetime is zero,
let's handle that gracefully on send.
2024-04-19 11:44:59 +09:00
Yu Watanabe
03401969d4
sd-radv: allow to modify RA header elements without stopping sd-radv
...
This also makes too large retransmit time handled gracefully,
as even if a too large value is specified, usec_to_be32_msec() in
radv_send_router() will handle it gracefully anyway.
Note, networkd still refuses such invalid values. Hence, this does not
change any effective behavior.
2024-04-19 11:44:59 +09:00
Mike Yuan
61cd6c4db7
bus-wait-for-units: simplify property_map_job_id
2024-04-19 10:08:37 +08:00
Mike Yuan
ac21fafbea
bus-wait-for-units: drop 'current' field
...
This is not used anywhere.
2024-04-19 10:08:37 +08:00
Mike Yuan
cc6978d6ae
bus-wait-for-units: check for existing unit first, use hashmap_ensure_put
2024-04-19 10:08:36 +08:00
Mike Yuan
df0183d8f1
bus-wait-for-units: make callback type end with "_t"
2024-04-19 10:08:36 +08:00
Mike Yuan
4b8fdb4681
bus-wait-for-units: drop ready_callback
...
This is never used, and given that bus_wait_for_units_run
returns BusWaitForUnits.state it's not really useful.
2024-04-19 10:08:36 +08:00
Mike Yuan
ad6b84d960
systemctl-start-unit: Subscribe() is unnecessary if we RefUnit explicitly
...
Subscribe() enables full signal delivery on API bus. But aside from
that, if a unit/job is explicitly Ref()'d, manager also emits the
signal. See bus_foreach_bus() for details.
bus-wait-for-units refs every unit to wait for, so there's no need
to Subscribe() on top of that. In verb_clean_or_freeze() Subscribe()
is not called either.
2024-04-19 10:08:36 +08:00
Mike Yuan
848cdaa6dd
systemctl: use FOREACH_ARRAY and FOREACH_ELEMENT more
2024-04-19 10:08:35 +08:00
Mike Yuan
8c8687852a
core/dbus: modernize bus_foreach_bus
2024-04-19 10:08:35 +08:00
Mike Yuan
fcd7aef724
core/unit: use UNIT_IS_INACTIVE_OR_FAILED at one more place
2024-04-19 10:08:35 +08:00
Luca Boccassi
2ca6bd9b77
test: initialize _cleanup_ variables
...
Missed one in a previous PR.
Follow-up for e5689f04dd
2024-04-19 10:26:43 +09:00
Yu Watanabe
f72e851fd3
conf-parser: move config_parse_timezone() to conf-parser.[ch]
...
Even though it is currently only used by networkd, the parser itself
is quite generic. Let's move it to the shared library.
2024-04-19 10:23:01 +09:00
Yu Watanabe
6d06b76710
nspawn: rename config_parse_timezone() -> config_parse_timezone_mode()
...
The parser does not parse timezone, but timezone mode. Let's rename the
parser to more specific name.
2024-04-19 10:23:01 +09:00
Yu Watanabe
760c2724a3
nspawn: align tables
2024-04-19 10:23:00 +09:00
Yu Watanabe
d12fb2bc7b
network: introduce link_get_use_ntp()
...
No functional change, just refactoring.
2024-04-19 10:23:00 +09:00