diff --git a/NEWS b/NEWS
index 49061c5e11..bc7ee1e2bf 100644
--- a/NEWS
+++ b/NEWS
@@ -3433,7 +3433,7 @@ CHANGES WITH 257:
 
         systemd-importd:
 
-        * A new generator sytemd-import-generator has been added to synthesize
+        * A new generator systemd-import-generator has been added to synthesize
           image download jobs. This provides functionality similar to
           importctl, but is configured via the kernel command line and system
           credentials. It may be used to automatically download sysext,
@@ -4610,7 +4610,7 @@ CHANGES WITH 256:
           OpenSSH 9.4 or newer.
 
         * systemd-sysext gained support for enabling system extensions in
-          mutable fashion, where a writeable upperdir is stored under
+          mutable fashion, where a writable upperdir is stored under
           /var/lib/extensions.mutable/, and a new --mutable= option to
           configure this behaviour. An "ephemeral" mode is not also supported
           where the mutable layer is configured to be a tmpfs that is
@@ -15312,7 +15312,7 @@ CHANGES WITH 231:
 
         * The InaccessableDirectories=, ReadOnlyDirectories= and
           ReadWriteDirectories= unit file settings have been renamed to
-          InaccessablePaths=, ReadOnlyPaths= and ReadWritePaths= and may now be
+          InaccessiblePaths=, ReadOnlyPaths= and ReadWritePaths= and may now be
           applied to all kinds of file nodes, and not just directories, with
           the exception of symlinks. Specifically these settings may now be
           used on block and character device nodes, UNIX sockets and FIFOS as
@@ -20923,7 +20923,7 @@ CHANGES WITH 189:
           udev_device_new_from_device_id() call.
 
         * The logic for file system namespace (ReadOnlyDirectory=,
-          ReadWriteDirectoy=, PrivateTmp=) has been reworked not to
+          ReadWriteDirectories=, PrivateTmp=) has been reworked not to
           require pivot_root() anymore. This means fewer temporary
           directories are created below /tmp for this feature.
 
diff --git a/TODO.md b/TODO.md
index bcfe489151..b785ac6178 100644
--- a/TODO.md
+++ b/TODO.md
@@ -222,8 +222,8 @@ SPDX-License-Identifier: LGPL-2.1-or-later
   - download list + report updates in motd – but do not auto update
   - download list + download new version – but do not apply it
   - download list + download new version + apply it – but do not reboot
-  - download list + donwload new version + apply it + reboot
-  Other things the policy shoudl contain is when to place the reboot.
+  - download list + download new version + apply it + reboot
+  Other things the policy should contain is when to place the reboot.
   This would all decouple the updating of the package list from the application
   of it. Which is great for "countme" style stuff.
 
@@ -359,7 +359,7 @@ SPDX-License-Identifier: LGPL-2.1-or-later
 
 - add bus API to retrieve current unit file contents (i.e. implement "systemctl cat" on the bus only)
 
-- Add ConditionDirectoryNotEmpty= handle non-absoute paths as a search path or add
+- Add ConditionDirectoryNotEmpty= handle non-absolute paths as a search path or add
   ConditionConfigSearchPathNotEmpty= or different syntax? See the discussion starting at
   https://github.com/systemd/systemd/pull/15109#issuecomment-607740136.
 
@@ -1546,7 +1546,7 @@ SPDX-License-Identifier: LGPL-2.1-or-later
   and stick around for the whole system runtime (i.e. root fs storage daemons,
   the bpf loader daemon discussed above, and such) are placed. maybe
   protected.slice or so? Then write docs that suggest that services like this
-  set Slice=protected.sice, RefuseManualStart=yes, RefuseManualStop=yes and a
+  set Slice=protected.slice, RefuseManualStart=yes, RefuseManualStop=yes and a
   couple of other things.
 
 - maybe add call sd_journal_set_block_timeout() or so to set SO_SNDTIMEO for
@@ -1840,7 +1840,7 @@ SPDX-License-Identifier: LGPL-2.1-or-later
 
 - oci: add support for "importctl import-oci" which implements the "OCI layout"
   spec (i.e. acquiring via local fs access), as opposed to the current
-  "importctl pull-oci" which focusses on the "OCI image spec", i.e. downloads
+  "importctl pull-oci" which focuses on the "OCI image spec", i.e. downloads
   from the web (i.e. acquiring via URLs).
 
 - oci: add support for blake hashes for layers
diff --git a/catalog/systemd.catalog.in b/catalog/systemd.catalog.in
index 68ef28d197..30da7bd5aa 100644
--- a/catalog/systemd.catalog.in
+++ b/catalog/systemd.catalog.in
@@ -455,7 +455,7 @@ Support: %SUPPORT_URL%
 
 The directory @WHERE@ is specified as the mount point (second field in
 /etc/fstab or Where= field in systemd unit file) and is not empty.
-This does not interfere with mounting, but the pre-exisiting files in
+This does not interfere with mounting, but the pre-existing files in
 this directory become inaccessible. To see those over-mounted files,
 please manually mount the underlying file system to a secondary
 location.
diff --git a/man/sd_id128_to_string.xml b/man/sd_id128_to_string.xml
index 1d6301ec61..f5b6c9490f 100644
--- a/man/sd_id128_to_string.xml
+++ b/man/sd_id128_to_string.xml
@@ -72,7 +72,7 @@
 
     <para><function>sd_id128_to_uuid_string()</function> and <function>SD_ID128_TO_UUID_STRING()</function>
     are similar to these two functions/macros, but format the 128-bit values as RFC4122 UUIDs, i.e. a series
-    of 36 lowercase hexadeciaml digits and dashes, terminated by a <constant>NUL</constant> byte.</para>
+    of 36 lowercase hexadecimal digits and dashes, terminated by a <constant>NUL</constant> byte.</para>
 
     <para><function>sd_id128_from_string()</function> implements the reverse operation: it takes a 33
     character string with 32 hexadecimal digits (either lowercase or uppercase, terminated by
diff --git a/po/es.po b/po/es.po
index 6e63046582..7be1c80413 100644
--- a/po/es.po
+++ b/po/es.po
@@ -1054,7 +1054,7 @@ msgstr "Necesita autenticarse para restablecer la configuración de DNS."
 
 #: src/network/org.freedesktop.network1.policy:143
 msgid "DHCP server sends force renew message"
-msgstr "El servidor DCHP envía un mensaje de renovación forzada"
+msgstr "El servidor DHCP envía un mensaje de renovación forzada"
 
 #: src/network/org.freedesktop.network1.policy:144
 #, fuzzy
diff --git a/rules.d/82-net-auto-link-local.rules b/rules.d/82-net-auto-link-local.rules
index 88ac7bc1be..88e581c16c 100644
--- a/rules.d/82-net-auto-link-local.rules
+++ b/rules.d/82-net-auto-link-local.rules
@@ -4,7 +4,7 @@ ACTION=="remove", GOTO="net_link_local_end"
 SUBSYSTEM!="net", GOTO="net_link_local_end"
 
 # Network interfaces for which only Link-Local communication (i.e. IPv4LL, …)
-# makes sense, because they almost certainy will point to another host, not an
+# makes sense, because they almost certainly will point to another host, not an
 # internet router.
 
 # (Note: matches against VID/PID go into 82-net-auto-link-local.hwdb instead)
diff --git a/shell-completion/zsh/_resolvectl b/shell-completion/zsh/_resolvectl
index 3d28f1b410..dc9a9f1e06 100644
--- a/shell-completion/zsh/_resolvectl
+++ b/shell-completion/zsh/_resolvectl
@@ -56,7 +56,7 @@
             query:"Resolve domain names, IPv4 and IPv6 addresses"
             reset-server-features:"Flushes all feature level information the resolver has learned about specific servers"
             reset-statistics:"Resets the statistics counter shown in statistics to zero"
-            revert:"Revert the per-interfce DNS configuration"
+            revert:"Revert the per-interface DNS configuration"
             service:"Resolve DNS-SD and SRV services"
             show-cache:"Show the current cache contents"
             show-server-state:"Show servers state"
diff --git a/src/core/dbus.c b/src/core/dbus.c
index dba79b8602..659965e4e6 100644
--- a/src/core/dbus.c
+++ b/src/core/dbus.c
@@ -1060,7 +1060,7 @@ int bus_fdset_add_all(Manager *m, FDSet *fds) {
 
         /* When we are about to reexecute we add all D-Bus fds to the
          * set to pass over to the newly executed systemd. They won't
-         * be used there however, except thatt they are closed at the
+         * be used there however, except that they are closed at the
          * very end of deserialization, those making it possible for
          * clients to synchronously wait for systemd to reexec by
          * simply waiting for disconnection */
diff --git a/src/core/ipe-setup.c b/src/core/ipe-setup.c
index f263117018..7b684e34b7 100644
--- a/src/core/ipe-setup.c
+++ b/src/core/ipe-setup.c
@@ -23,7 +23,7 @@ int ipe_setup(void) {
         _cleanup_strv_free_ char **policies = NULL;
         int r;
 
-        /* Very quick smoke tests first: this is in the citical, sequential boot path, and in most cases it
+        /* Very quick smoke tests first: this is in the critical, sequential boot path, and in most cases it
          * is unlikely this will be configured, so do the fastest existence checks first and immediately
          * return if there's nothing to do. */
 
diff --git a/src/home/homework-luks.c b/src/home/homework-luks.c
index e85153d61d..9cd0f2dc00 100644
--- a/src/home/homework-luks.c
+++ b/src/home/homework-luks.c
@@ -631,7 +631,7 @@ static int fs_validate(
                 sd_id128_t *ret_found_uuid) {
 
         _cleanup_free_ char *fstype = NULL;
-        sd_id128_t u = SD_ID128_NULL; /* avoid false maybe-unitialized warning */
+        sd_id128_t u = SD_ID128_NULL; /* avoid false maybe-uninitialized warning */
         int r;
 
         assert(dm_node);
diff --git a/src/libsystemd/sd-varlink/sd-varlink-idl.c b/src/libsystemd/sd-varlink/sd-varlink-idl.c
index be66fb34af..55f9b8b1d0 100644
--- a/src/libsystemd/sd-varlink/sd-varlink-idl.c
+++ b/src/libsystemd/sd-varlink/sd-varlink-idl.c
@@ -389,7 +389,7 @@ static int varlink_idl_format_symbol(
                  * https://github.com/varlink/varlink.github.io/issues/26 – but for now export this as a
                  * comment.
                  *
-                 * Until this is resolved upsteam, consider this comment part of the API (i.e. don't change
+                 * Until this is resolved upstream, consider this comment part of the API (i.e. don't change
                  * only extend). It is used by tools like varlink-http-bridge. */
                 if ((symbol->symbol_flags & (SD_VARLINK_REQUIRES_MORE|SD_VARLINK_SUPPORTS_MORE)) != 0) {
                         fputs(colors[COLOR_COMMENT], f);
diff --git a/src/locale/localed-util.c b/src/locale/localed-util.c
index 4cddfc32d9..25c361d400 100644
--- a/src/locale/localed-util.c
+++ b/src/locale/localed-util.c
@@ -412,7 +412,7 @@ static bool locale_encoding_is_utf8_or_unspecified(const char *locale) {
 }
 
 static int locale_gen_locale_supported(const char *locale_entry) {
-        /* Returns an error valus <= 0 if the locale-gen entry is invalid or unsupported,
+        /* Returns an error value <= 0 if the locale-gen entry is invalid or unsupported,
          * 1 in case the locale entry is valid, and -EOPNOTSUPP specifically in case
          * the distributor has not provided us with a SUPPORTED file to check
          * locale for validity. */
diff --git a/src/network/netdev/bareudp.c b/src/network/netdev/bareudp.c
index 9dd70296bc..2183e11661 100644
--- a/src/network/netdev/bareudp.c
+++ b/src/network/netdev/bareudp.c
@@ -49,7 +49,7 @@ static int netdev_bare_udp_verify(NetDev *netdev, const char *filename) {
 
         if (u->dest_port == 0)
                 return log_netdev_warning_errno(netdev, SYNTHETIC_ERRNO(EINVAL),
-                                                "%s: BareUDP DesinationPort= is not set. Ignoring.", filename);
+                                                "%s: BareUDP DestinationPort= is not set. Ignoring.", filename);
 
         if (u->iftype == _BARE_UDP_PROTOCOL_INVALID)
                 return log_netdev_warning_errno(netdev, SYNTHETIC_ERRNO(EINVAL),
diff --git a/src/network/networkd-wwan-bus.c b/src/network/networkd-wwan-bus.c
index 19fcf081ae..13a860e2dc 100644
--- a/src/network/networkd-wwan-bus.c
+++ b/src/network/networkd-wwan-bus.c
@@ -1182,7 +1182,7 @@ int manager_match_mm_signals(Manager *manager) {
                         /* install_callback= */ NULL,
                         manager);
         if (r < 0)
-                return log_error_errno(r, "Failed to request signal for IntefaceAdded");
+                return log_error_errno(r, "Failed to request signal for InterfaceAdded");
 
         r = sd_bus_match_signal_async(
                         manager->bus,
@@ -1195,7 +1195,7 @@ int manager_match_mm_signals(Manager *manager) {
                         /* install_callback= */ NULL,
                         manager);
         if (r < 0)
-                return log_error_errno(r, "Failed to request signal for IntefaceRemoved");
+                return log_error_errno(r, "Failed to request signal for InterfaceRemoved");
 
         /* N.B. We need "path_namespace" for bearers, not "path", */
         r = sd_bus_add_match_async(
diff --git a/src/network/wait-online/wait-online-manager.c b/src/network/wait-online/wait-online-manager.c
index b5ca38cbe2..70e2b45f00 100644
--- a/src/network/wait-online/wait-online-manager.c
+++ b/src/network/wait-online/wait-online-manager.c
@@ -68,7 +68,7 @@ static const LinkOperationalStateRange* get_state_range(Manager *m, Link *l, con
                 if (operational_state_range_is_valid(range))
                         return range;
 
-        /* l->requred_operstate should be always valid. */
+        /* l->required_operstate should be always valid. */
         assert_not_reached();
 }
 
diff --git a/src/nspawn/nspawn-network.c b/src/nspawn/nspawn-network.c
index 6949ecac72..ad506cfaf4 100644
--- a/src/nspawn/nspawn-network.c
+++ b/src/nspawn/nspawn-network.c
@@ -499,7 +499,7 @@ static int netns_child_begin(int netns_fd, int *ret_original_netns_fd) {
         if (r < 0)
                 return log_error_errno(r, "Failed to mount sysfs on /sys/: %m");
 
-        /* udev_avaliable() might be called previously and the result may be cached.
+        /* udev_available() might be called previously and the result may be cached.
          * Now, we (re-)mount sysfs. Hence, we need to reset the cache. */
         reset_cached_udev_availability();
 
diff --git a/src/nsresourced/nsresourcework.c b/src/nsresourced/nsresourcework.c
index 3b2450529c..91b3645809 100644
--- a/src/nsresourced/nsresourcework.c
+++ b/src/nsresourced/nsresourcework.c
@@ -1925,7 +1925,7 @@ static void hash_ether_addr(UserNamespaceInfo *userns_info, const char *ifname,
         siphash24_compress_byte(0, &state); /* separator */
         siphash24_compress_string(strempty(ifname), &state);
         siphash24_compress_byte(0, &state); /* separator */
-        n = htole64(n); /* add the 'index' to the mix in an endianess-independent fashion */
+        n = htole64(n); /* add the 'index' to the mix in an endianness-independent fashion */
         siphash24_compress_typesafe(n, &state);
 
         h = htole64(siphash24_finalize(&state));
diff --git a/src/pcrlock/pcrlock.c b/src/pcrlock/pcrlock.c
index 09f49b2ed2..63af144fe0 100644
--- a/src/pcrlock/pcrlock.c
+++ b/src/pcrlock/pcrlock.c
@@ -1947,7 +1947,7 @@ static int event_log_match_component_variant(
                 return r;
 
         if (assign) {
-                /* Take ownership (Note we allow multiple components and variants to take owneship of the same record!) */
+                /* Take ownership (Note we allow multiple components and variants to take ownership of the same record!) */
                 if (!GREEDY_REALLOC(el->records[i]->mapped, el->records[i]->n_mapped+1))
                         return log_oom();
 
diff --git a/src/portable/portable.c b/src/portable/portable.c
index 3f3c0cda48..f9f47f2e0f 100644
--- a/src/portable/portable.c
+++ b/src/portable/portable.c
@@ -2431,7 +2431,7 @@ int portable_detach(
                         portable_changes_add_with_prefix(changes, n_changes, PORTABLE_UNLINK, where, md, NULL);
         }
 
-        /* Now, also drop any image symlink or copy, for images outside of the sarch path */
+        /* Now, also drop any image symlink or copy, for images outside of the search path */
         SET_FOREACH(item, markers) {
                 _cleanup_free_ char *target = NULL;
 
diff --git a/src/resolve/resolved-dns-cache.c b/src/resolve/resolved-dns-cache.c
index 5540ce5c05..6a7967842d 100644
--- a/src/resolve/resolved-dns-cache.c
+++ b/src/resolve/resolved-dns-cache.c
@@ -68,7 +68,7 @@ struct DnsCacheItem {
 };
 
 /* Returns true if this is a cache item created as result of an explicit lookup, or created as "side-effect"
- * of another request. "Primary" entries will carry the full answer data (with NSEC, …) that can aso prove
+ * of another request. "Primary" entries will carry the full answer data (with NSEC, …) that can also prove
  * wildcard expansion, non-existence and such, while entries that were created as "side-effect" just contain
  * immediate RR data for the specified RR key, but nothing else. */
 #define DNS_CACHE_ITEM_IS_PRIMARY(item) (!!(item)->answer)
diff --git a/src/resolve/test-dns-packet-extract.c b/src/resolve/test-dns-packet-extract.c
index ca90afb7eb..28a510dea6 100644
--- a/src/resolve/test-dns-packet-extract.c
+++ b/src/resolve/test-dns-packet-extract.c
@@ -400,7 +400,7 @@ TEST(packet_validate_query_too_many_questions) {
         ASSERT_ERROR(dns_packet_validate_query(packet), EBADMSG);
 }
 
-TEST(packet_validate_query_with_anwser) {
+TEST(packet_validate_query_with_answer) {
         _cleanup_(dns_packet_unrefp) DnsPacket *packet = NULL;
 
         ASSERT_OK(dns_packet_new(&packet, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX));
diff --git a/src/run/run.c b/src/run/run.c
index afae5b2d94..60f3bf7405 100644
--- a/src/run/run.c
+++ b/src/run/run.c
@@ -962,7 +962,7 @@ static int parse_argv_sudo_mode(int argc, char *argv[]) {
                 arg_stdio = isatty_safe(STDIN_FILENO) && isatty_safe(STDOUT_FILENO) && isatty_safe(STDERR_FILENO) ? ARG_STDIO_PTY : ARG_STDIO_DIRECT;
         log_debug("Using %s stdio mode.", arg_stdio == ARG_STDIO_PTY ? "pty" : "direct");
         if (arg_pty_late < 0)
-                arg_pty_late = arg_ask_password; /* for run0 this defaults to on, except if --no-ask-pasword is used */
+                arg_pty_late = arg_ask_password; /* for run0 this defaults to on, except if --no-ask-password is used */
 
         arg_expand_environment = false;
         arg_send_sighup = true;
diff --git a/src/shared/bus-polkit.c b/src/shared/bus-polkit.c
index 78e9ed377f..1373dba0ed 100644
--- a/src/shared/bus-polkit.c
+++ b/src/shared/bus-polkit.c
@@ -346,7 +346,7 @@ static int async_polkit_process_reply(sd_bus_message *reply, AsyncPolkitQuery *q
         if (r < 0)
                 return r;
 
-        /* Now, let's dispatch the original message a second time be re-enqueing. This will then traverse the
+        /* Now, let's dispatch the original message a second time be re-enqueuing. This will then traverse the
          * whole message processing again, and thus re-validating and re-retrieving the "userdata" field
          * again.
          *
diff --git a/src/shared/bus-unit-util.c b/src/shared/bus-unit-util.c
index 440c6ced29..7076322d2d 100644
--- a/src/shared/bus-unit-util.c
+++ b/src/shared/bus-unit-util.c
@@ -2144,7 +2144,7 @@ static int bus_append_protect_hostname(sd_bus_message *m, const char *field, con
         int r;
 
         /* The command-line field is called "ProtectHostname". We also accept "ProtectHostnameEx" as the
-         * field name for backward compatibility. We set ProtectHostame or ProtectHostnameEx. */
+         * field name for backward compatibility. We set ProtectHostname or ProtectHostnameEx. */
 
         r = parse_boolean(eq);
         if (r >= 0)
diff --git a/src/shared/calendarspec.c b/src/shared/calendarspec.c
index 771363517b..225d811d19 100644
--- a/src/shared/calendarspec.c
+++ b/src/shared/calendarspec.c
@@ -1127,7 +1127,7 @@ static int find_matching_component(
 
         assert(val);
 
-        /* Finds the *earliest* matching time specified by one of the CalendarCompoment items in chain c.
+        /* Finds the *earliest* matching time specified by one of the CalendarComponent items in chain c.
          * If no matches can be found, returns -ENOENT.
          * Otherwise, updates *val to the matching time. 1 is returned if *val was changed, 0 otherwise.
          */
diff --git a/src/shared/copy.c b/src/shared/copy.c
index 3ac05c15b7..a8e2b68db1 100644
--- a/src/shared/copy.c
+++ b/src/shared/copy.c
@@ -652,7 +652,7 @@ static int hardlink_context_setup(
          * <= 0, because in that case we will not actually allocate the hardlink inode lookup table directory
          * on disk (we do so lazily, when the first candidate with .n_link > 1 is seen). This means, in the
          * common case where hardlinks are not used at all or only for few files the fact that we store the
-         * table on disk shouldn't matter perfomance-wise. */
+         * table on disk shouldn't matter performance-wise. */
 
         if (!FLAGS_SET(copy_flags, COPY_HARDLINKS))
                 return 0;
diff --git a/src/shared/dissect-image.c b/src/shared/dissect-image.c
index e69c644f58..fcd809b0e6 100644
--- a/src/shared/dissect-image.c
+++ b/src/shared/dissect-image.c
@@ -2298,7 +2298,7 @@ int partition_pick_mount_options(
         case PARTITION_XBOOTLDR:
                 flags |= MS_NOSUID|MS_NOEXEC|MS_NOSYMFOLLOW;
 
-                /* The ESP might contain a pre-boot random seed. Let's make this unaccessible to regular
+                /* The ESP might contain a pre-boot random seed. Let's make this inaccessible to regular
                  * userspace. ESP/XBOOTLDR is almost certainly VFAT, hence if we don't know assume it is. */
                 if (!fstype || fstype_can_fmask_dmask(fstype))
                         if (!strextend_with_separator(&options, ",", "fmask=0177,dmask=0077"))
diff --git a/src/shared/firewall-util.c b/src/shared/firewall-util.c
index 4693972ff2..441e137ec0 100644
--- a/src/shared/firewall-util.c
+++ b/src/shared/firewall-util.c
@@ -1026,7 +1026,7 @@ int fw_nftables_add_masquerade(
          * Note that this doesn't protect against external sabotage such as a
          * 'while true; nft flush ruleset; done'. There is nothing that could be done about that short
          * of extending the kernel to allow tables to be owned by stystemd-networkd and making them
-         * non-deleteable except by the 'owning process'. */
+         * non-deletable except by the 'owning process'. */
 
         r = fw_nftables_init_family(nfnl, af);
         if (r < 0)
diff --git a/src/shared/ipvlan-util.c b/src/shared/ipvlan-util.c
index 1906c8026f..5c271ba4b6 100644
--- a/src/shared/ipvlan-util.c
+++ b/src/shared/ipvlan-util.c
@@ -12,7 +12,7 @@ static const char* const ipvlan_mode_table[_NETDEV_IPVLAN_MODE_MAX] = {
 DEFINE_STRING_TABLE_LOOKUP(ipvlan_mode, IPVlanMode);
 
 static const char* const ipvlan_flags_table[_NETDEV_IPVLAN_FLAGS_MAX] = {
-        [NETDEV_IPVLAN_FLAGS_BRIGDE] = "bridge",
+        [NETDEV_IPVLAN_FLAGS_BRIDGE] = "bridge",
         [NETDEV_IPVLAN_FLAGS_PRIVATE] = "private",
         [NETDEV_IPVLAN_FLAGS_VEPA] = "vepa",
 };
diff --git a/src/shared/ipvlan-util.h b/src/shared/ipvlan-util.h
index 4cb74f3dcb..194e5cea04 100644
--- a/src/shared/ipvlan-util.h
+++ b/src/shared/ipvlan-util.h
@@ -14,7 +14,7 @@ typedef enum IPVlanMode {
 } IPVlanMode;
 
 typedef enum IPVlanFlags {
-        NETDEV_IPVLAN_FLAGS_BRIGDE,
+        NETDEV_IPVLAN_FLAGS_BRIDGE,
         NETDEV_IPVLAN_FLAGS_PRIVATE = IPVLAN_F_PRIVATE,
         NETDEV_IPVLAN_FLAGS_VEPA = IPVLAN_F_VEPA,
         _NETDEV_IPVLAN_FLAGS_MAX,
diff --git a/src/shared/libfido2-util.c b/src/shared/libfido2-util.c
index cc00006af9..c25019e6b0 100644
--- a/src/shared/libfido2-util.c
+++ b/src/shared/libfido2-util.c
@@ -361,7 +361,7 @@ static int fido2_is_cred_in_specific_token(
         /* According to CTAP 2.1 specification, to do pre-flight we need to set up option to false
          * with optionally pinUvAuthParam in assertion[1]. But for authenticator that doesn't support
          * user presence, once up option is present, the authenticator may return CTAP2_ERR_UNSUPPORTED_OPTION[2].
-         * So we simplely omit the option in that case.
+         * So we simply omit the option in that case.
          * Reference:
          * 1: https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#pre-flight
          * 2: https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorGetAssertion (in step 5)
diff --git a/src/shared/specifier.c b/src/shared/specifier.c
index 5951603522..9d2066899f 100644
--- a/src/shared/specifier.c
+++ b/src/shared/specifier.c
@@ -347,7 +347,7 @@ int specifier_user_name(char specifier, const void *data, const char *root, cons
          * to be able to run this in PID 1, where our user ID is 0, but where NSS lookups are not allowed.
 
          * We don't use getusername_malloc() here, because we don't want to look at $USER, to remain
-         * consistent with specifer_user_id() below.
+         * consistent with specifier_user_id() below.
          */
 
         t = uid_to_name(uid);
diff --git a/src/shared/tests.c b/src/shared/tests.c
index 8111d481e4..84945343a4 100644
--- a/src/shared/tests.c
+++ b/src/shared/tests.c
@@ -361,7 +361,7 @@ const char* ci_environment(void) {
         if (getenv("SALSA_CI_IMAGES"))
                 return (ans = "salsa-ci");
 
-        FOREACH_STRING(var, "CI", "CONTINOUS_INTEGRATION") {
+        FOREACH_STRING(var, "CI", "CONTINUOUS_INTEGRATION") {
                 /* Those vars are booleans according to Semaphore and Travis docs:
                  * https://docs.travis-ci.com/user/environment-variables/#default-environment-variables
                  * https://docs.semaphoreci.com/ci-cd-environment/environment-variables/#ci
diff --git a/src/shared/tpm2-util.c b/src/shared/tpm2-util.c
index 091a4dba89..4557ad3f41 100644
--- a/src/shared/tpm2-util.c
+++ b/src/shared/tpm2-util.c
@@ -819,7 +819,7 @@ static bool tpm2_supports_tpmt_sym_def(Tpm2Context *c, const TPMT_SYM_DEF *param
         assert(c);
         assert(parameters);
 
-        /* Unfortunately, TPMT_SYM_DEF and TPMT_SYM_DEF_OBEJECT are separately defined, even though they are
+        /* Unfortunately, TPMT_SYM_DEF and TPMT_SYM_DEF_OBJECT are separately defined, even though they are
          * functionally identical. */
         TPMT_SYM_DEF_OBJECT object = {
                 .algorithm = parameters->algorithm,
diff --git a/src/shared/user-record.c b/src/shared/user-record.c
index cf33d92215..191870c8ea 100644
--- a/src/shared/user-record.c
+++ b/src/shared/user-record.c
@@ -2489,7 +2489,7 @@ int user_record_self_changes_allowed(UserRecord *current, UserRecord *incoming)
          *    `selfModifiableFields` fields are unset in their record.
          * 2) This user crafts a request to add the following to their record:
          *    { "memberOf": ["wheel"], "selfModifiableFields": ["memberOf", "selfModifiableFields"] }
-         * 3) We remove the `mebmerOf` and `selfModifiabileFields` fields from `incoming`
+         * 3) We remove the `memberOf` and `selfModifiabileFields` fields from `incoming`
          * 4) `current` and `incoming` compare as equal, so we let the change happen
          * 5) the user has granted themselves administrator privileges
          */
diff --git a/src/shared/varlink-io.systemd.Import.c b/src/shared/varlink-io.systemd.Import.c
index b4e2ab03e2..13d239b9da 100644
--- a/src/shared/varlink-io.systemd.Import.c
+++ b/src/shared/varlink-io.systemd.Import.c
@@ -87,7 +87,7 @@ static SD_VARLINK_DEFINE_METHOD_FULL(
                 SD_VARLINK_DEFINE_INPUT_BY_TYPE(verify, ImageVerify, SD_VARLINK_NULLABLE),
                 SD_VARLINK_FIELD_COMMENT("If true, an existing image by the local name is deleted. Defaults to false."),
                 SD_VARLINK_DEFINE_INPUT(force, SD_VARLINK_BOOL, SD_VARLINK_NULLABLE),
-                SD_VARLINK_FIELD_COMMENT("Whether to make the image read-only after downloading. Defaults ot false."),
+                SD_VARLINK_FIELD_COMMENT("Whether to make the image read-only after downloading. Defaults to false."),
                 SD_VARLINK_DEFINE_INPUT(readOnly, SD_VARLINK_BOOL, SD_VARLINK_NULLABLE),
                 SD_VARLINK_FIELD_COMMENT("Whether to keep a pristine copy of the download separate from the locally installed image. Defaults to false."),
                 SD_VARLINK_DEFINE_INPUT(keepDownload, SD_VARLINK_BOOL, SD_VARLINK_NULLABLE),
diff --git a/src/systemctl/systemctl-util.c b/src/systemctl/systemctl-util.c
index b278f784ba..8e8d718112 100644
--- a/src/systemctl/systemctl-util.c
+++ b/src/systemctl/systemctl-util.c
@@ -508,7 +508,7 @@ int unit_find_paths(
          * Finds where the unit is defined on disk. Returns 0 if the unit is not found. Returns 1 if it is
          * found, and sets:
          *
-         * - the path to the unit in *ret_frament_path, if it exists on disk,
+         * - the path to the unit in *ret_fragment_path, if it exists on disk,
          *
          * - and a strv of existing drop-ins in *ret_dropin_paths, if the arg is not NULL and any dropins
          *   were found.
diff --git a/test/test-network/systemd-networkd-tests.py b/test/test-network/systemd-networkd-tests.py
index 0db4830848..6917c2f697 100755
--- a/test/test-network/systemd-networkd-tests.py
+++ b/test/test-network/systemd-networkd-tests.py
@@ -9332,7 +9332,7 @@ class NetworkdDHCPPDTests(unittest.TestCase, Utilities):
 
         # ipv4masklen: 8
         # 6rd-prefix: 2001:db8::/32
-        # br-addresss: 10.0.0.1
+        # br-address: 10.0.0.1
 
         start_dnsmasq('--dhcp-option=212,08:20:20:01:0d:b8:00:00:00:00:00:00:00:00:00:00:00:00:0a:00:00:01',
                       ipv4_range='10.100.100.100,10.100.100.200',
diff --git a/test/units/TEST-36-NUMAPOLICY.sh b/test/units/TEST-36-NUMAPOLICY.sh
index 71fcdb4524..1e2d7ac8ac 100755
--- a/test/units/TEST-36-NUMAPOLICY.sh
+++ b/test/units/TEST-36-NUMAPOLICY.sh
@@ -34,7 +34,7 @@ testUnitNUMAConf="$testUnitFile.d/numa.conf"
 sleepAfterStart=3
 
 # Journal cursor for easier navigation
-journalCursorFile="jounalCursorFile"
+journalCursorFile="journalCursorFile"
 
 startStrace() {
     coproc strace -qq -p 1 -o "$straceLog" -e set_mempolicy -s 1024 ${1:+"$1"}
diff --git a/test/units/TEST-53-TIMER.RandomizedDelaySec-persistent.sh b/test/units/TEST-53-TIMER.RandomizedDelaySec-persistent.sh
index af22daecc7..e3005fe0f5 100755
--- a/test/units/TEST-53-TIMER.RandomizedDelaySec-persistent.sh
+++ b/test/units/TEST-53-TIMER.RandomizedDelaySec-persistent.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # SPDX-License-Identifier: LGPL-2.1-or-later
 #
-# Persistent timers (i.e. timers with Persitent=yes) save their last trigger timestamp to a persistent
+# Persistent timers (i.e. timers with Persistent=yes) save their last trigger timestamp to a persistent
 # storage (a stamp file), which is loaded during subsequent boots. As mentioned in the man page, such timers
 # should be still affected by RandomizedDelaySec= during boot even if they already elapsed and would be then
 # triggered immediately.
diff --git a/test/units/TEST-87-AUX-UTILS-VM.pstore.sh b/test/units/TEST-87-AUX-UTILS-VM.pstore.sh
index be5297fa52..d05c99b150 100755
--- a/test/units/TEST-87-AUX-UTILS-VM.pstore.sh
+++ b/test/units/TEST-87-AUX-UTILS-VM.pstore.sh
@@ -44,7 +44,7 @@ random_efi_timestamp() { printf "%0.10d" "$((1000000000 + RANDOM))"; }
 # The dmesg- filename contains the backend-type and the Common Platform Error Record, CPER,
 # record id, a 64-bit number.
 #
-# Files are processed in reverse lexigraphical order so as to properly reconstruct original dmesg.
+# Files are processed in reverse lexicographical order so as to properly reconstruct original dmesg.
 
 prepare_efi_logs() {
     local file="${1:?}"