From 70879f6ccd79613bc68dedf819640c5204d685d5 Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Wed, 8 Feb 2023 13:38:15 +0000 Subject: [PATCH 1/2] NEWS: copy future incompatible changes notice from 252 These are in the future, so it's good to re-emphasize on every release until they actually happen --- NEWS | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/NEWS b/NEWS index d703acef48..fc9d100257 100644 --- a/NEWS +++ b/NEWS @@ -2,6 +2,22 @@ systemd System and Service Manager CHANGES WITH 253 in spe: + Announcements of Future Feature Removals and Incompatible Changes: + + * We intend to remove cgroup v1 support from systemd release after the + end of 2023. If you run services that make explicit use of cgroup v1 + features (i.e. the "legacy hierarchy" with separate hierarchies for + each controller), please implement compatibility with cgroup v2 (i.e. + the "unified hierarchy") sooner rather than later. Most of Linux + userspace has been ported over already. + + * We intend to remove support for split-usr (/usr mounted separately + during boot) and unmerged-usr (parallel directories /bin and + /usr/bin, /lib and /usr/lib, etc). This will happen in the second + half of 2023, in the first release that falls into that time window. + For more details, see: + https://lists.freedesktop.org/archives/systemd-devel/2022-September/048352.html + Deprecations and incompatible changes: * systemctl will now warn when invoked without /proc/ mounted From 318c257835ab070d83c023c2a35c76708e08a0f8 Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Wed, 8 Feb 2023 13:38:38 +0000 Subject: [PATCH 2/2] NEWS: note about future implicit PrivateUsers= in user units --- NEWS | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/NEWS b/NEWS index fc9d100257..6df17aa599 100644 --- a/NEWS +++ b/NEWS @@ -18,6 +18,22 @@ CHANGES WITH 253 in spe: For more details, see: https://lists.freedesktop.org/archives/systemd-devel/2022-September/048352.html + * We intend to change behaviour w.r.t. units of the per-user service + manager and sandboxing options, so that they work without having to + manually enable PrivateUsers= as well, which is not required for + system units. To make this work, we will implicitly enable user + namespaces (PrivateUsers=yes) when a sandboxing option is enabled in a + user unit. The drawback is that system users will no longer be visible + (and appear as 'nobody') to the user unit when a sandboxing option is + enabled. By definition a sandboxed user unit should run with reduced + privileges, so impact should be small. This will remove a great source + of confusion that has been reported by users over the years, due to + how these options require an extra setting to be manually enabled when + used in the per-user service manager, as opposed as to the system + service manager. We plan to enable this change in the next release + later this year. For more details, see: + https://lists.freedesktop.org/archives/systemd-devel/2022-December/048682.html + Deprecations and incompatible changes: * systemctl will now warn when invoked without /proc/ mounted