Mariano Giménez
1c4f6bb60a
add administrators blog series links to extra_pages.json
2024-02-22 10:11:08 +01:00
Mariano Giménez
65c63edcd9
add videos and presentations
2024-02-22 10:11:07 +01:00
Mariano Giménez
7d4afa76e3
add publications to extra_pages.json
2024-02-22 10:11:05 +01:00
Yu Watanabe
be66a80bc2
Merge pull request #31409 from ssahani/macvlan
...
netdev: macvlan - Allow to set the broadcast queueing threshold
2024-02-22 12:40:54 +09:00
Susant Sahani
2b98febe9d
test-network: add test for macvlan BroadcastQueueMulticastLength= and BroadcastQueueThreashold=
2024-02-22 09:46:55 +09:00
Yu Watanabe
0183d48ddb
test-network: use assertIn()
2024-02-22 09:46:45 +09:00
Susant Sahani
9adafeddac
netdev/macvlan: allow to set the broadcast queueing threshold
...
Allow to set the broadcast queueing threshold
on macvlan devices. This controls which multicast packets will be
processed in a workqueue instead of inline.
2024-02-22 09:36:19 +09:00
Yu Watanabe
9a7c555c68
Merge pull request #31429 from poettering/pcrlock-hash-order-fix
...
pcrlock: handle cases where order of hash algs in firmware binary logs differs in header and records
2024-02-22 08:29:56 +09:00
Yu Watanabe
0584e2aa7c
Merge pull request #31425 from YHNdnzj/fd-util-followup
...
fd-util: introduce fd_verify_safe_flags
2024-02-22 08:29:11 +09:00
Yu Watanabe
46be112082
Merge pull request #31403 from yuwata/pam-sd-bus-session
...
pam_systemd_home: close sd-bus connection on failure
2024-02-22 08:28:38 +09:00
Yu Watanabe
c6939752c1
basic/linux: update kernel headers from v6.8-rc5
2024-02-22 06:22:22 +08:00
Mike Yuan
f5cbe31374
journal-native: ignore server_process_native_file error on caller's side
...
Also, stop saying ", ignoring". It is unclear whether the message
or the error is ignored. "ignoring message" or "refusing" is OK.
2024-02-22 06:17:54 +08:00
Mike Yuan
14f38d179d
fd-util: introduce fd_verify_safe_flags
...
As per https://github.com/systemd/systemd/pull/31419#discussion_r1496921074
2024-02-22 06:17:54 +08:00
medusalix
ca4b6b269d
hwdb: Add headset form-factor override for Xbox Wireless Dongle
...
The Xbox Wireless Headset does not get assigned a sound form factor
when connected via the dongle using the `xone` driver.
Add USB IDs for the old & new dongle and built-in variants.
2024-02-22 06:36:38 +09:00
Yu Watanabe
6e2343c714
network/json: use DUID obtained by sd_dhcp6_client_get_duid()
...
Follow-up for e5aa8c193d
2024-02-22 05:58:59 +09:00
Lennart Poettering
04a3af3c6d
tree-wide: be more careful when passing literal integers to "t" bus message fields
...
Since we use varargs for sd_message_append() we need to make sure the
parameters we pass are actually 64bit wide, if "t" is used. Hence cast
appropriately if necessary.
I went through the whole tree, and in most cases we got it right, but
there are some cases we missed so far.
Inspired by: #31420
2024-02-22 04:31:50 +09:00
Frantisek Sumsal
ff80bd2d6d
test: temporarily enable session lingering for the test user #2
...
Similarly to bbac11c993user@4711.service ...
[ 31.103541] systemd[392]: Activating special unit exit.target...
[ 31.108359] systemd[392]: Stopped target default.target.
[ 31.109798] systemd[392]: Stopped target timers.target.
[ 31.110790] systemd[392]: Stopping testsuite-55-testchill.service...
[ 31.112154] systemd[392]: Stopped testsuite-55-testchill.service.
[ 31.114033] systemd[392]: Removed slice testsuite-55-workload.slice.
[ 31.114971] systemd[392]: Removed slice testsuite-55.slice.
[ 31.115858] systemd[392]: Removed slice testsuite.slice.
...
[ 31.475949] testsuite-55.sh[403]: + systemctl --machine testuser@.host --user status testsuite-55-testchill.service
[ 31.490464] systemd[1]: session-3.scope: Deactivated successfully.
[ 31.565929] systemd[1]: Started run-u33.service.
[ 31.592437] (o-bridge)[583]: pam_unix(login:session): session opened for user testuser(uid=4711) by testuser(uid=0)
[ 31.610210] systemd[1]: Started session-5.scope.
[ 31.616960] testsuite-55.sh[578]: ○ testsuite-55-testchill.service - No memory pressure
[ 31.616960] testsuite-55.sh[578]: Loaded: loaded (/usr/lib/systemd/tests/testdata/units/testsuite-55-testchill.service; static)
[ 31.616960] testsuite-55.sh[578]: Active: inactive (dead)
[ 31.617438] (sd-pam)[586]: pam_unix(login:session): session closed for user testuser
Addresses https://github.com/systemd/systemd/pull/31426#issuecomment-1956436844 .
2024-02-21 18:24:25 +00:00
Lennart Poettering
05b924048d
update TODO
2024-02-21 15:46:20 +01:00
Susant Sahani
09584d7afb
network: JSON - Export DHCPv4 client ID
...
Allow networkd to export the DHCP4 client ID which right now we don't support.
2024-02-21 13:52:47 +00:00
Luca Boccassi
14975aaef8
Merge pull request #31326 from CodethinkLabs/vmspawn/extra_drives
...
vmspawn: add --extra-drive= and correctly escape ',' in certain qemu arguments
2024-02-21 13:52:22 +00:00
Lennart Poettering
e90a255e55
pcrlock: handle measurement logs where hash algs in header are announced in different order than in records
...
Apparently on HyperV the measurement logs announce the hash algs in a
different order in the header than the records have them. Let's handle
this gracefully
2024-02-21 14:45:30 +01:00
Lennart Poettering
0691d0e5a1
pcrlock: document the env vars we honour to find measurement logs
...
This env vars have been supported for a while, let's document them where
we usually document them.
2024-02-21 14:45:19 +01:00
hulkoba
eafadb91ce
docs: show mkosi project on website
2024-02-21 13:08:08 +01:00
Luca Boccassi
2e904f58e6
Merge pull request #31426 from YHNdnzj/logind-minor-cleanup
...
logind: some cleanups
2024-02-21 11:35:34 +00:00
Martin Ivicic
ea932bd34d
networkd: support setting dhcp server port
2024-02-21 19:33:27 +09:00
Susant Sahani
e5aa8c193d
network: DHCP6 Allow to export DHCP6 DUID ( #31355 )
...
We did not support the export of DHCP6 DUID. Let's add this. Some
applications may use it.
2024-02-21 19:32:27 +09:00
Antonio Alvarez Feijoo
68ad9e43f6
cryptsetup-tokens: fix typo in comments
2024-02-21 10:23:43 +00:00
Sam Leonard
1ec3218e82
vmspawn: add --extra-drive=
2024-02-21 10:22:40 +00:00
Sam Leonard
018cc9eaf6
vmspawn: correctly escape ',' in certain values passed to qemu
2024-02-21 10:22:40 +00:00
Frantisek Sumsal
8f0dbbd758
homectl: make sure we sent the full 8 bytes as flags
...
Otherwise weird stuff happens on the other side:
[1217111.957263] testsuite-46.sh[61]: + homectl create test-user --disk-size=min --luks-discard=yes --image-path=/home/test-user.home --luks-pbkdf-type=pbkdf2 --luks-pbkdf-time-cost=1ms
[1217112.598219] homectl[66]: Operation on home test-user failed: Provided flags are unsupported (0ad2578000000000).
(taken from TEST-46-HOME run on armv7l)
Fixes issue mentioned in https://github.com/systemd/systemd/pull/31419#issuecomment-1955117397 .
2024-02-21 10:14:51 +00:00
Mike Yuan
de53c661bc
logind-dbus: clean up manager_{start,stop,kill}_unit
2024-02-21 15:55:01 +08:00
Mike Yuan
783e816e81
logind-dbus: rearrange functions
2024-02-21 15:50:13 +08:00
Mike Yuan
d536e8b5e9
logind-session-dbus: drop unneeded unref_and_replace
...
If there's pending s->upgrade_message, we already return early
above.
2024-02-21 15:37:33 +08:00
Yu Watanabe
3c6d9d1c39
Merge pull request #31405 from yuwata/network-ndisc-reachable-time
...
network/ndisc: set neighbor reachable time
2024-02-21 14:29:01 +09:00
Mike Yuan
e404ca3eb7
Merge pull request #31419 from AdrianVovk/fixup-largefile-define
...
Fixup largefile define
2024-02-21 13:12:30 +08:00
Yu Watanabe
a6a6197e9d
pam_systemd_home: always close already opened bus connection in open_session()
...
Fixes #31375 .
2024-02-21 13:22:54 +09:00
Yu Watanabe
0324e3d045
pam_systemd_home: open sd-bus session when necessary
...
No functional change, just refactoring.
2024-02-21 12:45:32 +09:00
Yu Watanabe
9891f1d371
pam-util: add one more debugging log about sd-bus connection
...
Continuation of b5b2510800
2024-02-21 12:09:21 +09:00
Yu Watanabe
9e39d0a32a
Merge pull request #31408 from mrc0mmand/verify-unit-files-v2
...
test: verify our own units (where applicable)
2024-02-21 12:01:48 +09:00
Luca Boccassi
5605b7d61a
Merge pull request #31400 from poettering/askpw-rework
...
Password Asking rework
2024-02-20 23:45:52 +00:00
Adrian Vovk
e4d0606c2b
fd-util: Add helpers to check if FD flags are safe
...
Adds a SAFE_FD_FLAGS define to list out all the safe FD flags, and also
an UNSAFE_FD_FLAGS() macro to strip out the safe flags and leave only
the unsafe flags. This can be used to quickly check if any unsafe flags
are set and print them for diagnostic purposes
2024-02-20 15:01:37 -05:00
Adrian Vovk
9e3db91f2f
missing_fcntl: Fix RAW_O_LARGEFILE
...
This value is actually arch-specific, so this commit defines it for all
the arches that set it to some custom value
Fixes https://github.com/systemd/systemd/issues/31417
2024-02-20 15:01:36 -05:00
Zbigniew Jędrzejewski-Szmek
0615abef62
analyze: always recommend saving the output to a file
...
The command will refuse to write to a TTY, so give a strong hint
that redirecting to a file is recommended. This makes the synopsis,
man page text, and --help output consistent.
Also drop the space after the redirection operator everywhere.
2024-02-20 19:35:58 +00:00
Lennart Poettering
b2ac928088
cryptsetup: drop "headless" bool, make it a flag in AskPasswordFlags instead
...
This bool controls whether we should interactively ask for a password,
which is pretty much what the ask_password-api.c APIs are about. Hence,
just make the bool a flag in AskPasswordFlags enum, and use it
everywhere.
This still catches the flag early in upper levels of the codebase,
exactly as before, but if the flag is still present in the lower layers
it's also handled there and results in ENOEXEC if seen.
This is mostly an excercise in simplifying our ridiculously long
function call parameter lists a bit.
2024-02-20 16:50:04 +01:00
Lennart Poettering
732285eb8c
man: tweak cryptsetup credentials docs a bit
...
Let's bring the credentials into a better order, in order of relevance.
Also, let's clarify what the generic LUKS PIN is about.
Finally, list the credentials in system-credentials(7) too, after all
people might want to unlock a disk with this via SMBIOS Type 11 or so.
2024-02-20 16:50:00 +01:00
Lennart Poettering
0fceb5539d
man: now that the crdentials used by systemd-cryptenroll are in order, document them
...
Replaces: #31370
2024-02-20 16:50:00 +01:00
Lennart Poettering
1c12daa46f
cryptsetup-pkcs11: also plug credential name to use to credential plugin
2024-02-20 16:50:00 +01:00
Lennart Poettering
b3a635841a
cryptenroll,cryptsetup: clean up unlock credential for TPM2 + FIDO2
...
Let's make sure that when cryptenroll asks for the TPM2 or FIDO2 token
PIN it uses cryptenroll.* credential namespace, and cryptsetup uses
cryptsetup.*.
2024-02-20 16:50:00 +01:00
Lennart Poettering
a96c284f10
pkcs11-util: clean up credential handling for PKCS11 PIN
...
similar as the previous commit, let's clean up the credential name we
use. Use home.token-pin in case of homectl, and cryptenroll.pkcs11-pin
in case of cryptenroll.
2024-02-20 16:50:00 +01:00
Lennart Poettering
7252be6083
cryptenroll: use a different credential for new new PIN
...
The TPM2 enrollment is the only of the three token enrollments where the
user picks a PIN at enrollment time (the others have a PIN set for the
token, not for the enrollment). Let's make sure it uses a different
credential for retrieving this PIN, in order to make sure people can
programmatically change PINs via credentials (in which case they need to
supply both).
2024-02-20 16:50:00 +01:00
Mariano Giménez
Yu Watanabe
Susant Sahani
Mike Yuan
medusalix
Lennart Poettering
Frantisek Sumsal
Luca Boccassi
hulkoba
Martin Ivicic
Antonio Alvarez Feijoo
Sam Leonard
Adrian Vovk
Zbigniew Jędrzejewski-Szmek