SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NEWS: update up to 9064524e44

Browse Source
This commit is contained in:
Luca Boccassi
2026-09-01 11:42:23 +02:00
committed by Lennart Poettering
parent 7021a61392
commit 72f3a4a73c
1 changed files with 37 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+37 -5
View File
@@ -44,8 +44,8 @@ CHANGES WITH 262:
"systemd-sysupdate@.service" unit for varlink activation of sysupdate.
* The default OpenPGP keyring lookup now combines the vendor keyring in
/usr with the local keyring in /etc. Deployments that relied on a
single /etc keyring to exclude vendor trust should set
/usr/ with the local keyring in /etc/. Deployments that relied on a
single /etc/ keyring to exclude vendor trust should set
$SYSTEMD_OPENPGP_KEYRING explicitly.
* TPM-sealed credentials are now pinned to the TPM's SRK. This prevents
@@ -285,8 +285,9 @@ CHANGES WITH 262:
Changes in systemd-networkd:
* The IPv6ProxyNDPAddress= setting in the [Network] section of .network
files has been renamed to ProxyNeighbor=. The setting can now also be
used to add IPv4 addresses to the kernel's IPv4 neighbor proxy table.
files has been renamed to ProxyNeighbor=, and remains accepted as a
deprecated alias. ProxyNeighbor= can add both IPv4 and IPv6 addresses
to the kernel's neighbor proxy tables.
* "networkctl reload" gained --no-reconfigure to reload .network and
.netdev files from disk without reconfiguring existing links. It uses
@@ -318,6 +319,21 @@ CHANGES WITH 262:
backlog and then keeps the method call open, streaming new matching
entries like journalctl -f until the client disconnects.
Changes in systemd-coredump and coredumpctl:
* systemd-coredump now supports the kernel coredump socket protocol
available since Linux 6.17. On supported kernels,
systemd-coredumpd.service listens on
/run/systemd/coredumpd/kernel, and
systemd-coredump-register.service registers the socket through
kernel.core_pattern. Older kernels continue to use the per-coredump
systemd-coredump@.service path. Changes to coredump.conf require
reloading systemd-coredumpd.service, and deployments that set a
custom kernel.core_pattern should mask or stop that service.
* The coredumpctl dump and debug commands now honor --json= and include
the selected coredump's metadata in the requested JSON format.
Changes in systemd-resolved and resolvectl:
* 'resolvectl openpgp' and 'resolvectl tlsa' now support --json= when
@@ -468,6 +484,21 @@ CHANGES WITH 262:
additional sizing details such as currentSizeBytes, minimalSizeBytes
and needFreeBytes where appropriate.
* systemd-repart now honors $SOURCE_DATE_EPOCH while populating images.
Timestamps copied from source trees are clamped to the epoch, and a
validated value is forwarded to mkfs and mtools, improving
reproducibility of generated file systems. Byte-for-byte
reproducibility may still require --offline=yes and suitable
file-system tooling.
Changes in systemd-nspawn:
* When systemd-nspawn creates both user and network namespaces, it now
initializes net.ipv4.ping_group_range from the container's mapped GID
range. This permits unprivileged container users to create ICMP echo
sockets when their GIDs are mapped. Externally supplied network
namespaces are left unchanged.
Changes in systemd-vmspawn:
* systemd-vmspawn --coco= now supports Intel TDX in addition to
@@ -582,7 +613,8 @@ CHANGES WITH 262:
primary key, allowing signing-key rotation without distributing each
subkey separately. $SYSTEMD_OPENPGP_KEYRING may select a custom
keyring for unprivileged pulls or custom sysupdate definitions. When
unset, the existing system keyring lookup remains unchanged.
unset, the vendor keyring in /usr/ and the local keyring in /etc/ are
combined.
* New dm-clone boot integration was added. /etc/clonetab entries are
translated by systemd-clonesetup-generator into