TODO: fix formatting inconsistencies

Normalize section header capitalization, add missing colons to
sub-topic headers, replace bullet character variants with dashes,
and fix sub-item indentation to use two spaces consistently.

Signed-off-by: Christian Brauner <brauner@kernel.org>
This commit is contained in:
Christian Brauner
2026-03-30 10:28:41 +02:00
parent 771800a403
commit 1b9c63de7a
+63 -63
View File
@@ -13,8 +13,8 @@ External:
* Fedora: add an rpmlint check that verifies that all unit files in the RPM are listed in %systemd_post macros.
* dbus:
- natively watch for dbus-*.service symlinks (PENDING)
- teach dbus to activate all services it finds in /etc/systemd/services/org-*.service
- natively watch for dbus-*.service symlinks (PENDING)
- teach dbus to activate all services it finds in /etc/systemd/services/org-*.service
* fedora: suggest auto-restart on failure, but not on success and not on coredump. also, ask people to think about changing the start limit logic. Also point people to RestartPreventExitStatus=, SuccessExitStatus=
@@ -63,7 +63,7 @@ Regularly:
* link up selected blog stories from man pages and unit files Documentation= fields
Janitorial Clean-ups:
Janitorial Cleanups:
* machined: make remaining machine bus calls compatible with unpriv machined +
unpriv npsawn: GetAddresses(), GetSSHInfo(), GetOSRelease(), OpenPTY(),
@@ -93,7 +93,7 @@ Janitorial Clean-ups:
* use CHASE_MUST_BE_DIRECTORY and CHASE_MUST_BE_REGULAR at more places (the
majority of places that currently employ chase() probably should use this)
Deprecations and removals:
Deprecations and Removals:
* Remove any support for booting without /usr pre-mounted in the initrd entirely.
Update INITRD_INTERFACE.md accordingly.
@@ -159,7 +159,7 @@ Features:
possibly up to 100ms supposedly)
* instead of going directly for DefineSpace when initializing nvpcrs, check if
they exist first. apparently DEfineSpace is broken on some tpms, and also
they exist first. apparently DefineSpace is broken on some tpms, and also
creates log spam if the nvindex already exists.
* on first login of a user, measure its identity to some nvpcr
@@ -308,7 +308,7 @@ Features:
not
* automatically reset specific EFI vars on factory reset (make this generic
enough so that infrac can be used to erase shim's mok vars?)
enough so that infra can be used to erase shim's mok vars?)
* similar: add a plugin for factory reset logic that erases certain parts of
the ESP, but leaves others in place.
@@ -424,7 +424,7 @@ Features:
* maybe introduce a new partition that we can store debug logs and similar at
the very last moment of shutdown. idea would be to store reference to block
device (major + minor + partition id + diskeq?) in /run somewhere, than use
device (major + minor + partition id + diskseq?) in /run somewhere, than use
that from systemd-shutdown, just write a raw JSON blob into the partition.
Include timestamp, boot id and such, plus kmsg. on next boot immediately
import into journal. maybe use timestamp for making clock more monotonic.
@@ -571,7 +571,7 @@ Features:
* Reset TPM2 DA bit on each successful boot
* systemd-repart: add --installer or so, that will intractively ask for a
* systemd-repart: add --installer or so, that will interactively ask for a
target disk, maybe ask for confirmation, and install something on disk. Then,
hook that into installer.target or so, so that it can be used to
install/replicate installs
@@ -634,14 +634,14 @@ Features:
cgroup information. This way if a service consisting of many logging
processes can take benefit of the cgroup caching.
* system lsmbpf policy that prohibits creating files owned by "nobody"
* system LSFMMBPF policy that prohibits creating files owned by "nobody"
system-wide
* system lsmpbf policy that prohibits creating or opening device nodes outside
* system LSFMMBPF policy that prohibits creating or opening device nodes outside
of devtmpfs/tmpfs, except if they are the pseudo-devices /dev/null,
/dev/zero, /dev/urandom and so on.
* system lsmbpf policy that enforces that block device backed mounts may only
* system LSFMMBPF policy that enforces that block device backed mounts may only
be established on top of dm-crypt or dm-verity devices, or an allowlist of
file systems (which should probably include vfat, for compat with the ESP)
@@ -825,7 +825,7 @@ Features:
* add a new specifier to unit files that figures out the DDI the unit file is
from, tracing through overlayfs, DM, loopback block device.
* importd/importctl
* importd/importctl:
- complete varlink interface
- download images into .v/ dirs
@@ -884,7 +884,7 @@ Features:
* introduce mntid_t, and make it 64bit, as apparently the kernel switched to
64bit mount ids
* mountfsd/nsresourced
* mountfsd/nsresourced:
- userdb: maybe allow callers to map one uid to their own uid
- bpflsm: allow writes if resulting UID on disk would be userns' owner UID
- make encrypted DDIs work (password…)
@@ -1518,20 +1518,20 @@ Features:
should probably also one you can use to get a remote attestation quote.
* Process credentials in:
• crypttab-generator: allow defining additional crypttab-like volumes via
- crypttab-generator: allow defining additional crypttab-like volumes via
credentials (similar: verity-generator, integrity-generator). Use
fstab-generator logic as inspiration.
• run-generator: allow defining additional commands to run via a credential
• resolved: allow defining additional /etc/hosts entries via a credential (it
- run-generator: allow defining additional commands to run via a credential
- resolved: allow defining additional /etc/hosts entries via a credential (it
might make sense to then synthesize a new combined /etc/hosts file in /run
and bind mount it on /etc/hosts for other clients that want to read it.
• repart: allow defining additional partitions via credential
• timesyncd: pick NTP server info from credential
• portabled: read a credential "portable.extra" or so, that takes a list of
- repart: allow defining additional partitions via credential
- timesyncd: pick NTP server info from credential
- portabled: read a credential "portable.extra" or so, that takes a list of
file system paths to enable on start.
• make systemd-fstab-generator look for a system credential encoding root= or
- make systemd-fstab-generator look for a system credential encoding root= or
usr=
• in gpt-auto-generator: check partition uuids against such uuids supplied via
- in gpt-auto-generator: check partition uuids against such uuids supplied via
sd-stub credentials. That way, we can support parallel OS installations with
pre-built kernels.
@@ -1965,7 +1965,7 @@ Features:
* augment CODE_FILE=, CODE_LINE= with something like CODE_BASE= or so which
contains some identifier for the project, which allows us to include
clickable links to source files generating these log messages. The identifier
could be some abberviated URL prefix or so (taking inspiration from Go
could be some abbreviated URL prefix or so (taking inspiration from Go
imports). For example, for systemd we could use
CODE_BASE=github.com/systemd/systemd/blob/98b0b1123cc or so which is
sufficient to build a link by prefixing "http://" and suffixing the
@@ -2107,7 +2107,7 @@ Features:
* define gpt header bits to select volatility mode
* ProtectClock= (drops CAP_SYS_TIMES, adds seecomp filters for settimeofday, adjtimex), sets DeviceAllow o /dev/rtc
* ProtectClock= (drops CAP_SYS_TIMES, adds seccomp filters for settimeofday, adjtimex), sets DeviceAllow o /dev/rtc
* ProtectTracing= (drops CAP_SYS_PTRACE, blocks ptrace syscall, makes /sys/kernel/tracing go away)
@@ -2400,11 +2400,11 @@ Features:
- add API to clone sd_bus_message objects
- longer term: priority inheritance
- dbus spec updates:
- NameLost/NameAcquired obsolete
- path escaping
- NameLost/NameAcquired obsolete
- path escaping
- update systemd.special(7) to mention that dbus.socket is only about the compatibility socket now
* sd-event
* sd-event:
- allow multiple signal handlers per signal?
- document chaining of signal handler for SIGCHLD and child handlers
- define more intervals where we will shift wakeup intervals around in, 1h, 6h, 24h, ...
@@ -2427,7 +2427,7 @@ Features:
* EFI:
- honor language efi variables for default language selection (if there are any?)
- honor timezone efi variables for default timezone selection (if there are any?)
* bootctl
* bootctl:
- recognize the case when not booted on EFI
* bootctl:
@@ -2870,54 +2870,54 @@ Features:
- add -n as shortcut for --dry-run in tmpfiles & sysusers & possibly other places
* udev-link-config:
- Make sure ID_PATH is always exported and complete for
network devices where possible, so we can safely rely
on Path= matching
- Make sure ID_PATH is always exported and complete for
network devices where possible, so we can safely rely
on Path= matching
* sd-rtnl:
- add support for more attribute types
- inbuilt piping support (essentially degenerate async)? see loopback-setup.c and other places
- add support for more attribute types
- inbuilt piping support (essentially degenerate async)? see loopback-setup.c and other places
* networkd:
- add more keys to [Route] and [Address] sections
- add support for more DHCPv4 options (and, longer term, other kinds of dynamic config)
- add reduced [Link] support to .network files
- properly handle routerless dhcp leases
- work with non-Ethernet devices
- dhcp: do we allow configuring dhcp routes on interfaces that are not the one we got the dhcp info from?
- the DHCP lease data (such as NTP/DNS) is still made available when
a carrier is lost on a link. It should be removed instantly.
- expose in the API the following bits:
- option 15, domain name
- option 12, hostname and/or option 81, fqdn
- option 123, 144, geolocation
- option 252, configure http proxy (PAC/wpad)
- provide a way to define a per-network interface default metric value
for all routes to it. possibly a second default for DHCP routes.
- allow Name= to be specified repeatedly in the [Match] section. Maybe also
support Name=foo*|bar*|baz ?
- whenever uplink info changes, make DHCP server send out FORCERENEW
- add more keys to [Route] and [Address] sections
- add support for more DHCPv4 options (and, longer term, other kinds of dynamic config)
- add reduced [Link] support to .network files
- properly handle routerless dhcp leases
- work with non-Ethernet devices
- dhcp: do we allow configuring dhcp routes on interfaces that are not the one we got the dhcp info from?
- the DHCP lease data (such as NTP/DNS) is still made available when
a carrier is lost on a link. It should be removed instantly.
- expose in the API the following bits:
- option 15, domain name
- option 12, hostname and/or option 81, fqdn
- option 123, 144, geolocation
- option 252, configure http proxy (PAC/wpad)
- provide a way to define a per-network interface default metric value
for all routes to it. possibly a second default for DHCP routes.
- allow Name= to be specified repeatedly in the [Match] section. Maybe also
support Name=foo*|bar*|baz ?
- whenever uplink info changes, make DHCP server send out FORCERENEW
* in networkd, when matching device types, fix up DEVTYPE rubbish the kernel passes to us
* Figure out how to do unittests of networkd's state serialization
* dhcp:
- figure out how much we can increase Maximum Message Size
- figure out how much we can increase Maximum Message Size
* dhcp6:
- add functions to set previously stored IPv6 addresses on startup and get
them at shutdown; store them in client->ia_na
- write more test cases
- implement reconfigure support, see 5.3., 15.11. and 22.20.
- implement support for temporary addresses (IA_TA)
- implement dhcpv6 authentication
- investigate the usefulness of Confirm messages; i.e. are there any
situations where the link changes without any loss in carrier detection
or interface down
- some servers don't do rapid commit without a filled in IA_NA, verify
this behavior
- RouteTable= ?
- add functions to set previously stored IPv6 addresses on startup and get
them at shutdown; store them in client->ia_na
- write more test cases
- implement reconfigure support, see 5.3., 15.11. and 22.20.
- implement support for temporary addresses (IA_TA)
- implement dhcpv6 authentication
- investigate the usefulness of Confirm messages; i.e. are there any
situations where the link changes without any loss in carrier detection
or interface down
- some servers don't do rapid commit without a filled in IA_NA, verify
this behavior
- RouteTable= ?
* shared/wall: Once more programs are taught to prefer sd-login over utmp,
switch the default wall implementation to wall_logind