systemd

SymbX/systemd

Fork 0

c86a72af04 ci: drop 'Ex' suffix from transient props Lennart Poettering 2026-02-17 15:03:07 +01:00
e31ee582fc ci: add test for OCI downloading Lennart Poettering 2025-11-26 09:07:28 +01:00
eb581ff6d9 man: document everything we just added Lennart Poettering 2025-11-27 09:36:34 +01:00
cab2caa170 mountpoint-util: fix typo in comment Lennart Poettering 2026-02-18 08:29:13 +01:00
6ebaea6990 portable: fix log levels Lennart Poettering 2026-02-16 09:39:40 +01:00
968f3ebd20 discover-image: make sure we can remove mstacks Lennart Poettering 2025-11-28 18:26:56 +01:00
e93fd71094 core: introduce PinnedResource Lennart Poettering 2025-11-27 08:07:31 +01:00
68ed4f3c66 mountfsd,nsresource: allow recycling mountfsd/nsresourced client connections Lennart Poettering 2025-11-28 16:28:42 +01:00
fe487d3670 namespace: extend bind mount ignore field to permission issues Lennart Poettering 2025-11-28 16:18:07 +01:00
26f80a9d33 namespace: port mount_private_apivfs() to fsopen() and friends Lennart Poettering 2025-11-28 12:21:41 +01:00
051dfed9b6 private Lennart Poettering 2026-02-19 15:03:50 +01:00
6b22ac31af core: add PrivateUsers=managed Lennart Poettering 2025-11-27 08:58:26 +01:00
fbaf05bfeb importctl: add 'pull-oci' client API Lennart Poettering 2025-11-25 15:32:23 +01:00
9628a5ced4 importd: add bus/varlink api for downloading OCIs Lennart Poettering 2025-11-25 15:33:36 +01:00
fe1f8c1acd run: support RootMStack= on the client side for systemd-run Lennart Poettering 2025-11-25 09:01:58 +01:00
38e65b6e4c portable: support .mstack images Lennart Poettering 2025-11-25 09:01:36 +01:00
32b88dd25a pid1: introduce RootMStack= for using an mstack as root dir for a service Lennart Poettering 2025-11-24 22:23:41 +01:00
116394f7ce tree-wide: move logging from varlink clients in nsresource.c/dissect-image.c into callers Lennart Poettering 2026-02-16 09:37:58 +01:00
1bc237dd7a nspawn: add support for running mstack container images Lennart Poettering 2025-11-12 16:46:59 +01:00
8cd29712cb discover-image: add support for discovering mstack images Lennart Poettering 2025-11-12 16:47:57 +01:00
8187cd18d6 add mstack tool for accessing mstacks from the command line Lennart Poettering 2025-11-10 12:13:11 +01:00
944161d0d4 vpick: add generic definition for mstack image pick filters Lennart Poettering 2025-11-18 22:33:59 +01:00
8343032a86 mstack: introduce "mstack" concept Lennart Poettering 2025-11-09 21:16:44 +01:00
a9f6ba0496 pull: add OCI support Lennart Poettering 2025-11-07 08:35:59 +01:00
087f2ec344 core: introduce exec_context_with_rootfs_strict() as a stricter version of exec_context_with_rootfs() Lennart Poettering 2026-02-17 15:46:45 +01:00
6d327e9fdd core: use exec_context_with_rootfs() at one more place Lennart Poettering 2026-02-17 15:46:58 +01:00
6527861039 tar-util: add support for extracting OCI compatible whiteouts, and turn them into overlayfs whiteouts Lennart Poettering 2025-11-07 08:33:32 +01:00
d66e3cc79a pull-job: make sure pull_job_restart() can be used to fetch the same resource again, just with new headers Lennart Poettering 2025-11-07 08:32:39 +01:00
93915ec17a pull-job: add helpers to detect requests for authentication, and accept bearer tokens Lennart Poettering 2025-11-07 08:31:34 +01:00
1f593d2b5e pull-job: add 'description' field to PullJob Lennart Poettering 2025-11-06 10:46:07 +01:00
98b714e0cb pull-job: optionally free userdata when we destroy a PullJob Lennart Poettering 2025-11-06 09:32:56 +01:00
4a886d9ab4 pull-job: add interface for controlling Accept: header sent to http server Lennart Poettering 2025-11-05 16:48:46 +01:00
41b0c68760 pull-job: keep track of content type reported by server Lennart Poettering 2025-11-05 16:47:59 +01:00
dbf13060e1 uid-range: add uid_range_base() that returns the lowest entry Lennart Poettering 2026-02-19 15:02:48 +01:00
4c701125df basic: define Architecture typedef in basic-forward.h Lennart Poettering 2026-02-16 09:34:37 +01:00
1e6854e112 udev: grant read access to PTP devices for unprivileged users Carolina Jubran 2026-02-16 11:24:53 +02:00
dbc83d6353 NEWS: mention python requirement bump Yu Watanabe 2026-02-19 22:23:04 +09:00
bad16f324a openssl-util: pass the UI callback for interactive PIN prompts Kai Lüke 2026-02-19 16:01:06 +09:00
8df975bb67 xorg/50-systemd-user: import XAUTHORITY only if set Dmytro Bagrii 2026-02-19 02:27:47 +02:00
b3a2444ba5 pe-binary: wrap remaining LE fields with byte-swap macros Oblivionsage 2026-02-18 18:22:48 +01:00
81cef494a6 vpick: Make suffix a single string again instead of a strv Daan De Meyer 2026-02-18 21:27:45 +01:00
17a3b387ae udev: rules: integration add spi bus for input dev David Santamaría Rogado 2026-02-18 21:24:16 +01:00
9204838724 test: skip dnf signature checks in TEST-88-UPGRADE Luca Boccassi 2026-02-18 19:55:41 +00:00
db73f1b4c6 test: assorted fixes for integration tests (#40737) Luca Boccassi 2026-02-18 20:42:15 +00:00
db1689e69c machined: Skip root user namespace check for user managers Daan De Meyer 2026-02-18 15:58:39 +01:00
0b7d5a2844 pcrextend: fix memory leak Lennart Poettering 2026-02-18 16:54:58 +01:00
e30c044c23 Tag accel devices for uaccess-render Mario Limonciello (AMD) 2026-02-15 07:28:47 -06:00
af9a5121a1 test: cover both verity verification mechanisms in TEST-70-TPM2-nvpcr Luca Boccassi 2026-02-18 16:20:33 +00:00
b9813d6c95 test: move check for verity kernel keyring support to util.sh Luca Boccassi 2026-02-18 16:11:34 +00:00
7112e4755e test: do not fail TEST-86-MULTI-PROFILE-UKI if full TPM2 support not available Luca Boccassi 2026-02-18 15:39:11 +00:00
1cd2ff3cca stub: more hardening against malformed images Luca Boccassi 2026-02-18 15:05:44 +00:00
cec9eb5e7e vmspawn: Don't keep tpmstate around in auto mode if ephemeral Daan De Meyer 2026-02-18 14:02:53 +01:00
ba67af7efb Bump minimum version of python to 3.9 (#40711) Zbigniew Jędrzejewski-Szmek 2026-02-18 13:33:29 +01:00
a23d89065a bash completion: various machinectl/portablectl fixes (#40719) Luca Boccassi 2026-02-18 11:08:29 +00:00
20b2224a7c build(deps): bump super-linter/super-linter in the actions group dependabot[bot] 2026-02-18 10:42:50 +00:00
5137d58c22 bash completion: add --user/--system to portablectl Luca Boccassi 2026-02-17 21:53:14 +00:00
28846f4e62 bash completion: add missing machinectl parameters Luca Boccassi 2026-02-17 21:50:59 +00:00
3f618b8851 bash completion: fix machinectl completion when mixing machines and files Luca Boccassi 2026-02-17 20:56:16 +00:00
5b6516f81e bash completion: add --system/--user to machinectl Luca Boccassi 2026-02-17 20:59:50 +00:00
6fdc22f933 ci: set dependabot cooldown period, disable persisting credentials for actions/checkout (#40728) Luca Boccassi 2026-02-18 10:39:11 +00:00
d0e1f58200 metrics: add networkd related metrics (#40619) Yu Watanabe 2026-02-18 19:26:55 +09:00
ef6c8c79dc Revert "check-os-release.py compatible with Python < 3.8" Yu Watanabe 2026-02-17 20:40:55 +09:00
08719d0e78 Revert "tools: make update-dbus-docs compatible with Python 3.7" Yu Watanabe 2026-02-17 20:40:24 +09:00
7ff27c8012 Revert "generate-bpf-delegate-configs: fix compatibility with Python 3.7" Yu Watanabe 2026-02-17 20:33:54 +09:00
3aaa9d9882 Revert "meson: fix compatibility with Python 3.7" Yu Watanabe 2026-02-17 20:31:10 +09:00
761f1ef2f3 Bump minimum version of python to 3.9 Jörg Behrmann 2026-02-17 10:20:05 +01:00
582d499e32 meson: ukify unconditionally requires pefile module Yu Watanabe 2026-02-17 21:07:27 +09:00
23c639be6d metrics: add networkd related metrics Yaping Li 2026-02-09 17:08:01 -08:00
69f75cd896 network: use higher log level when we cannot bind resolve hook varlink socket Yu Watanabe 2026-02-18 17:53:35 +09:00
6109cf8b61 meson,test: sort unit files Yu Watanabe 2026-02-18 12:10:50 +09:00
6461eccacb github/workflows: disable persisting credentials for actions/checkout Dmitry V. Levin 2026-02-18 08:00:00 +00:00
31fc68a69a github/dependabot: set cooldown period Dmitry V. Levin 2026-02-18 08:00:00 +00:00
43c4ecc951 bootspec: add missing else Yu Watanabe 2026-02-18 10:53:57 +09:00
cad60201fc udev: rules: integration fix David Santamaría Rogado 2026-02-17 23:57:49 +01:00
10eaca4159 sysupdate: Use partition types for pending/partial partitions Daan De Meyer 2026-02-17 20:57:01 +01:00
d8da141348 README: mention about musl requirements Yu Watanabe 2026-02-18 11:03:18 +09:00
02cab70acf pe-binary: fix missing le16toh() on NumberOfSections in pe_hash/uki_hash Oblivionsage 2026-02-17 19:39:05 +01:00
a3af68b84d verity: measure all root hashes as we activate to a new NvPCR (#40648) Lennart Poettering 2026-02-17 23:44:46 +01:00
3821e4d8fb update TODO Lennart Poettering 2026-02-11 18:27:42 +01:00
521a523ce0 ci: add simple test that ensures the verity nvpcr measurements are made Lennart Poettering 2026-02-17 21:59:30 +01:00
a450fab9c6 gpt-auto-generator: enable nvpcr logic by default Lennart Poettering 2026-02-11 16:29:59 +01:00
85d7fb2247 veritysetup: optionally measure Verity once we activated it Lennart Poettering 2026-02-11 13:13:21 +01:00
32f405074a dissect-image: measure Verity before making use of them Lennart Poettering 2026-02-11 13:12:26 +01:00
71ca7532de pcrextend-util: add helpers for measuring roothash/signature of Verity volumes Lennart Poettering 2026-02-11 13:11:38 +01:00
3f31c8ff46 pkcs7-util: add helpers for extracting signer info from PKCS7 signatures Lennart Poettering 2026-02-11 13:10:47 +01:00
8485bba53d tpm2-setup: introduce nvpcr for measuring Verity images Lennart Poettering 2026-02-11 13:13:00 +01:00
0a8f393c64 cryptsetup: extend HAVE_TPM2 conditioning to cover more Lennart Poettering 2026-02-11 13:10:05 +01:00
be36f69c90 pcrextend: allow access to the userspace event type field when measuring something Lennart Poettering 2026-02-11 14:28:02 +01:00
d84d17853e cryptsetup: move default choice of nvpcr for keyslots from generator into cryptsetup Lennart Poettering 2026-02-11 16:29:19 +01:00
450e0dce02 systemd-boot: add a preferred setting that's similar to default but avoids booting known-bad entries r-vdp 2026-01-11 19:49:34 +01:00
78a61335e3 boot: Fix UKI boot for kernels with non-zero ImageBase (#40429) Yu Watanabe 2026-02-18 03:27:41 +09:00
e38fac0cc5 sd-bus: Make sure we can connect to user machines as well (#40698) Daan De Meyer 2026-02-17 19:13:40 +01:00
a5e6f4f81d include: update kernel headers from v6.19 Yu Watanabe 2026-02-18 02:45:58 +09:00
353701b07e boot: drop now-unused image_base param Zbigniew Jędrzejewski-Szmek 2026-02-17 18:21:45 +01:00
7496163080 dbus/varlink: do not skip privilege check when polkit support is disabled Luca Boccassi 2026-02-17 14:37:43 +00:00
6119252f5a sd-bus: Don't fork unnecessarily to connect to container Daan De Meyer 2026-02-16 13:14:58 +01:00
a12c5bf4f5 sd-bus: Make sure we can connect to user machines as well Daan De Meyer 2026-02-16 11:27:21 +01:00
8d11835397 namespace-util: Do is_our_namespace() checks first in namespace_enter() Daan De Meyer 2026-02-17 15:36:00 +01:00
b96f417ea6 xaccess: Rework from boolean into a list of tags (#40645) Yu Watanabe 2026-02-18 01:24:59 +09:00
bdf8bbf713 NEWS: clarify the change for non-system accounts in v260 vs. v259 Zbigniew Jędrzejewski-Szmek 2026-02-17 17:13:11 +01:00