This website requires JavaScript.
2e43eee666
core/service: restore spuriously changed comment
Mike Yuan
2025-10-19 20:16:05 +02:00
aebe553db3
core/service: do not set reload_begin_usec when refreshing confexts
Mike Yuan
2025-10-19 18:37:41 +02:00
af3a197515
core/service: no need for STATUS_TEXT_MAX to reside in header
Mike Yuan
2025-10-19 21:43:27 +02:00
969c8050d8
core/job: use UNIT_IS_* helpers
Mike Yuan
2025-10-22 20:16:55 +02:00
b1947bf6e3
core/job: drop pure qualifier for static inline functions
Mike Yuan
2025-10-22 20:53:15 +02:00
1fa9473b07
core/job: mark job_type_lookup_merge() and _is_redundant() as const
Mike Yuan
2025-10-22 20:50:17 +02:00
79dd24cf14
core: Add UserNamespacePath=
Quentin Deslandes
2025-10-17 15:37:02 +02:00
d98c783516
sysupdated: port to sd_json_parse_file_at()
Mike Yuan
2025-11-03 22:16:46 +01:00
89b9a68e5f
sd-json: accept NULL path in sd_json_parse_file_at() too
Mike Yuan
2025-11-03 22:06:53 +01:00
eaebc33220
fileio: mask off O_NOFOLLOW in xfopenat_regular() for fd_reopen()
Mike Yuan
2025-11-03 21:59:34 +01:00
9218e4eacc
mkosi: update fedora commit reference to 8e2833a5b64f7e2ce62ea0a2d0ec9e393e718dfa
Zbigniew Jędrzejewski-Szmek
2025-11-03 12:19:37 +01:00
10cdb58690
backlight: fix typo
jouyouyun
2025-11-03 16:04:33 +08:00
49ca2d8778
bootctl: fix typo
jouyouyun
2025-11-03 14:17:35 +08:00
f8fcf7de7c
kernel-install: move staging area to /var/tmp/
Lennart Poettering
2025-11-02 09:32:16 +01:00
8f62d20b73
Add support for nvindex-based additional PCRs for TPM2, aka "NvPCRs" (#39463 )
Lennart Poettering
2025-11-03 09:00:41 +01:00
330e66f15e
doc: document NvPCRs briefly
Lennart Poettering
2025-10-31 18:16:07 +01:00
34c687f2b3
ci: add some test for the new nvpcr infra
Lennart Poettering
2025-10-27 12:55:02 +01:00
a9d02df0c7
ci: never go to raw tpm device, always go via resource manager
Lennart Poettering
2025-10-27 16:15:41 +01:00
d73d369133
analyze: add new verb for determining NvPCR values
Lennart Poettering
2024-06-04 11:03:39 +02:00
e5a2e78665
cryptsetup: automatically measure used keyslot and mechanism (i.e. fido2, tpm2, pkcs11) to an NvPCR
Lennart Poettering
2024-06-10 18:24:58 +02:00
8a6e77f1a8
tpm2-setup: measure "anchor" extension early at boot into nvpcrs
Lennart Poettering
2024-06-04 18:16:03 +02:00
2da86d62ff
tpm2-setup: split out SRK setup into a function of its own
Lennart Poettering
2024-06-04 16:36:39 +02:00
0196abbd10
pcrextend: automatically measure SMBIOS product ID at boot
Lennart Poettering
2024-06-04 12:01:10 +02:00
2b90bf1730
pcrextend: make use new nvindex-based PCRs
Lennart Poettering
2024-06-03 21:44:50 +02:00
f5f26332fa
catalog: improve PCR extended catalog entry
Lennart Poettering
2025-10-31 17:56:41 +01:00
b0c5c6aad8
tpm2-util: add infra for allocating nvindex-based PCRs (aka "NvPCRs")
Lennart Poettering
2024-06-10 15:55:54 +02:00
b7e072f3fa
tpm2-util: move parse for tpm2 hash algorithms up
Lennart Poettering
2024-06-03 21:40:52 +02:00
260b9e8489
tpm2-util: make tpm2_undefine_policy_nv_index() generic
Lennart Poettering
2024-06-03 17:56:35 +02:00
d412b1629c
tpm2-util: rename tpm2_extend_bytes()→tpm2_pcr_extend_bytes() and make it take struct iovec
Lennart Poettering
2024-06-03 17:44:15 +02:00
b95912446e
pcrlock: make sure we can parse nv_index measurement records in TCG CEL
Lennart Poettering
2024-06-05 21:45:50 +02:00
3e9ff7c0d8
creds-util: initialize default PCR mask in encrypt_credential_and_warn()
Lennart Poettering
2024-06-10 14:58:52 +02:00
ffe958b98f
creds-util: add helper for querying system credential dirs
Lennart Poettering
2024-06-10 14:53:38 +02:00
c30e3d7290
creds-util: add automatic mode for tpm2 based creds
Lennart Poettering
2024-06-06 11:25:50 +02:00
d2d1fc59b4
conf-files: optionally truncate suffix from discovered files
Lennart Poettering
2025-10-27 12:22:02 +01:00
86279dc970
format-table: add field type that outputs hex values prefixed with 0x
Lennart Poettering
2024-06-04 11:04:01 +02:00
7ecc69c33b
fileio: add new flag READ_FULL_FILE_VERIFY_REGULAR() that checks if file we operate on is regular
Lennart Poettering
2024-06-10 14:55:24 +02:00
1acec1c890
fileio: make filename/path argument optional in xfopenat_full(), read_full_file_full()
Lennart Poettering
2024-06-10 14:56:11 +02:00
5fa2fb65a6
Enhance docs for ukify and direct kernel boots (#39516 )
Zbigniew Jędrzejewski-Szmek
2025-11-02 18:04:15 +01:00
cde713bfe4
man: say "systemd-boot" instead of "sd-boot" consistently
Zbigniew Jędrzejewski-Szmek
2025-11-02 15:20:59 +01:00
02539f008d
man/ukify: mention all functionality in intro, add example of direct boot
Zbigniew Jędrzejewski-Szmek
2025-11-01 13:05:41 +01:00
4808c1686b
man/sd-boot: add some meat to the direct kernel boot example
Zbigniew Jędrzejewski-Szmek
2025-11-01 12:15:49 +01:00
a4dae3c118
rules.d/60-block.rules: fix typo
Mike Yuan
2025-11-02 10:56:31 +01:00
c29e304562
Several OpenSSL related cleanups (#39455 )
Yu Watanabe
2025-11-02 17:21:51 +09:00
ab1f4e506f
repart: support "nodatacow" in btrfs subvolumes
Alberto Planas
2025-06-04 19:56:18 +02:00
eeedea94da
repart: fix typo
Yu Watanabe
2025-11-02 17:03:00 +09:00
4f589e8a50
resolvectl: fix typo
Yu Watanabe
2025-11-02 17:00:21 +09:00
b7d752a67e
openssl-util: drop unnecessary functions when OpenSSL support is disabled
Yu Watanabe
2025-10-26 22:06:35 +09:00
84946f12b5
openssl-util: sort cleanup functions
Yu Watanabe
2025-11-02 16:00:55 +09:00
c604b78b92
repart: drop OpenSSL specific logics when OpenSSL support is disabled
Yu Watanabe
2025-10-26 21:44:59 +09:00
e3ae29ead7
repart: merge common conditions
Yu Watanabe
2025-10-26 21:42:26 +09:00
6e91c5d8ea
repart: make sign_verity_roothash() take Context
Yu Watanabe
2025-10-26 21:40:42 +09:00
0158eabb01
repart: load x509 certificate and private key after Context is allocated
Yu Watanabe
2025-10-26 18:27:51 +09:00
219a67c131
bootctl: return earlier when secure boot auto-enrollment is requested but OpenSSL support is disabled
Yu Watanabe
2025-10-26 16:58:09 +09:00
1b48b63b51
bootctl: move conditions into corresponding functions
Yu Watanabe
2025-10-26 16:57:07 +09:00
61d1f394cc
openssl-util: drop unused fake type definitions when OpenSSL is disabled
Yu Watanabe
2025-10-26 16:22:42 +09:00
09ae1c8ade
pe-binary: drop pe_hash() and friends when OpenSSL support is disabled
Yu Watanabe
2025-10-26 16:33:11 +09:00
ab9b3bec6a
openssl-util: drop unused string_hashsum() and friends when OpenSSL is disabled
Yu Watanabe
2025-10-26 16:19:47 +09:00
a47a403ca2
resolvectl: return earlier from openpgp command when OpenSSL support is disabled
Yu Watanabe
2025-10-26 16:15:56 +09:00
a7807e66b7
coredump: several cleanups, modernizations, fixlets for corner cases (#39418 )
Yu Watanabe
2025-11-02 10:13:53 +09:00
32f4e30be5
docs: add comment about requiring the mount hierarchy to be mounted MS_SHARED
Lennart Poettering
2025-11-01 22:21:32 +01:00
ee3cd7890d
Several cleanups for libcryptsetup dependency (#39452 )
Yu Watanabe
2025-11-02 08:07:15 +09:00
d714edd26c
repart: varlink support (#39421 )
Lennart Poettering
2025-11-01 23:21:37 +01:00
a983cf253f
doc: indicate Type=oneshot also detects invocation failures
Christoph Anton Mitterer
2025-10-20 03:30:58 +02:00
d1aa3860b2
ci: add testcases for recently added stuff
Lennart Poettering
2025-10-23 09:26:37 +02:00
5f076e44fe
repart: report vendor/model/subsystem fields in ListCandidateDevices
Lennart Poettering
2025-10-24 17:18:51 +02:00
ea94a05f8a
blockdev-list: switch to log_device_xyz() style logging
Lennart Poettering
2025-10-24 17:18:31 +02:00
2103067f25
udev: introduce ID_BLOCK_SUBSYSTEM property
Lennart Poettering
2025-10-24 17:13:12 +02:00
63b9c8611d
repart: sort input before output parameters in varlink IDL
Lennart Poettering
2025-10-24 16:16:11 +02:00
0f9d58cc36
repart: add knobs for automatically deferring all partitions marked as empty or for factory reset
Lennart Poettering
2025-09-16 13:26:42 +02:00
1c76e204d3
repart: send out progress information via varlink (if more flag is given)
Lennart Poettering
2025-09-12 21:23:57 +02:00
15734190c7
repart: add Varlink call that runs repart's engine
Lennart Poettering
2025-08-28 15:49:46 +02:00
2ecfea7491
repart: if device node is specified as "-", calculate needed disk space
Lennart Poettering
2025-08-29 10:40:24 +02:00
0eab6d2960
repart: split out main function that ponders about placement of partitions
Lennart Poettering
2025-08-28 15:44:13 +02:00
a47cbb6d9d
repart: move definitions + dry_run + empty fields into Context
Lennart Poettering
2025-08-28 15:28:20 +02:00
eccd8d9a57
repart: use SD_JSON_BUILD_UNSIGNED for disk sizes, as we should
Lennart Poettering
2025-10-24 11:13:14 +02:00
b64eb98054
sd-varlink: fix sd_varlink_collect() with empty replies
Lennart Poettering
2025-10-23 11:07:16 +02:00
633a4b8839
man: add documentation for the various sd_json_dispatch_xyz() calls
Lennart Poettering
2025-10-24 10:22:36 +02:00
db1f63463a
cryptsetup-util: sym_crypt_free() and friends are unused when libcryptsetup is disabled
Yu Watanabe
2025-10-26 14:32:41 +09:00
6afaa7fb3a
cryptsetup-util: sort loaded function prototypes
Yu Watanabe
2025-10-26 14:02:45 +09:00
f8c33b1274
libcryptsetup: drop several unnecessary checks for existences of functions by libcryptsetyp
Yu Watanabe
2025-10-26 13:12:01 +09:00
93317e9c17
sd-json: parse signals also in string format
Lennart Poettering
2025-10-24 11:10:31 +02:00
786aaed943
sd-json: parse uid_t/gid_t as uint32_t first
Lennart Poettering
2025-10-24 11:09:01 +02:00
e01f8990f1
sd-json: make sure all dispatch helpers do something sensible in case of "null" JSON value
Lennart Poettering
2025-10-24 09:57:48 +02:00
3cc3b469cc
Ignore --now when systemctl enable is called in a chroot (#39456 )
Yu Watanabe
2025-11-02 04:48:53 +09:00
10e82fde7b
parse-util: Add parse_capability_set()
Daan De Meyer
2025-10-29 22:39:48 +01:00
1a3b3c57c6
test: migrate test-load-fragment to use ASSERT_* macros
Daan De Meyer
2025-10-29 20:43:28 +01:00
10fc43e504
test: add test case for verity deferred removal without sharing
Luca Boccassi
2025-10-31 16:46:49 +00:00
7517e41a49
resolvectl: do not use strjoina() on user provided strings
Lennart Poettering
2025-11-01 16:29:39 +01:00
77a1cc8fa0
systemctl: downgrade or silence warnings for --now
Zbigniew Jędrzejewski-Szmek
2025-10-26 11:57:56 +01:00
0ff5985176
systemctl: convert return value of install_client_side() to enum
Zbigniew Jędrzejewski-Szmek
2025-10-26 11:34:22 +01:00
25a507d290
build(deps): bump softprops/action-gh-release from 2.2.2 to 2.4.1
dependabot[bot]
2025-11-01 09:01:19 +00:00
61f7ec3fc5
build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler
dependabot[bot]
2025-11-01 09:01:14 +00:00
7829c9cc48
discover-image: introduce bus_property_get_image_is_read_only() with BUS_DEFINE_PROPERTY_GET() macro
Yu Watanabe
2025-10-31 20:33:34 +09:00
cbd8a12bce
Several cleanups around strv_extendf() (#39508 )
Yu Watanabe
2025-11-01 18:10:42 +09:00
dd15dd1a58
core: Add RootDirectoryFileDescriptor= (#39480 )
Daan De Meyer
2025-10-31 22:30:46 +01:00
23fbaa463a
analyze: add missing help entry
Yu Watanabe
2025-11-01 00:51:34 +09:00
f8574e252a
core/exec-invoke: correct fd array size for collect_open_file_fds()
Mike Yuan
2025-10-31 16:09:54 +01:00
f2875c73a2
man: fix outdated link to freedesktop.org documentation (#39511 )
Florian
2025-10-31 18:03:43 +01:00
9011b1cfc0
reread-partition-table: take exclusive lock when requested
Yu Watanabe
2025-10-31 23:03:14 +09:00
154de15bdf
vmspawn: replace strv_extendf() with strv_extend_joined() when concatenating strings
Yu Watanabe
2025-10-31 22:46:42 +09:00