SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
65,879 Commits 2 Branches 1 Tag
24752c41a4609326f740eb785a47f89ae59b2a85
Commit Graph
65879 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Christian Hesse 24752c41a4 man/systemd.unit: document restart behavior on Upholds= 
Behavior on constantly failing (or oneshot) unit was unclear. Let's
document it here.
 2023-07-07 10:10:56 +01:00
Lily Foster 9cf2203524 fstab-generator: unify initrd-root-device.target dependency handling code 
This fixes a bug from #26038 where it would actually write generator
stuff during sysroot check when it was only supposed to check for daemon
reload.
 2023-07-07 11:58:43 +09:00
Yu Watanabe 14be337d04 Merge pull request #28233 from mrc0mmand/append-to-corrupted-journals 
test: append to corrupted journals
 2023-07-07 11:51:02 +09:00
Yu Watanabe d859cf15eb Merge pull request #28286 from yuwata/network-dhcp4-classless-static-routes 
network,dhcp4: do not ignore gateway in classless static routes option
 2023-07-07 10:12:06 +09:00
Yu Watanabe 75a9122678 network,ndisc: use ndisc_captive_portal_free() at one more place 
Fixes another memleak introduced by 64de00c49f.
Fixes #28283.
 2023-07-07 09:18:25 +09:00
Yu Watanabe 86f6760038 test-network: add one more testcase for DHCPv4 classless route 
For issue #28280.
 2023-07-07 06:57:08 +09:00
Yu Watanabe 77451f654a network/dhcp4: do not ignore the gateway even if the destination is in the same network 
Fixes #28280.
 2023-07-07 06:56:30 +09:00
Frantisek Sumsal 29bdeb5cb3 test: append to corrupted journals 
Introduce a manual test tool that creates a journal, corrupts it by
flipping bits at given offsets, and then attempts to write to the journal.
In ideal case we should handle this gracefully without any crash or
memory corruption.
 2023-07-06 22:41:27 +02:00
Weblate 19731f4a7b po: Update translation files 
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Co-authored-by: Weblate <noreply@weblate.org>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/
Translation: systemd/main
 2023-07-07 05:24:53 +09:00
Luca Boccassi 115a2efbf0 NEWS: finalize for 254-rc1 2023-07-06 20:57:13 +01:00
Luca Boccassi eed3d044cd meson: bump versions for v254-rc1 2023-07-06 20:57:13 +01:00
Luca Boccassi 8392979e49 Update translation files 2023-07-06 20:57:13 +01:00
Luca Boccassi 6f19cce983 NEWS: update contributors list 2023-07-06 20:38:52 +01:00
Luca Boccassi 305bea82c1 Update NEWS for latest changes 2023-07-06 20:37:56 +01:00
Luca Boccassi 3e938f1df1 NEWS: rearrange deprecation notices from more imminent to less imminent 2023-07-06 20:37:56 +01:00
Luca Boccassi b2deaaf01b Merge pull request #27584 from rphibel/add-restartquick-option 
service: add new RestartMode option
 2023-07-06 20:37:31 +01:00
Luca Boccassi 25cae3e7bb Merge pull request #20425 from Blarse/passwdqc-pr 
Add passwdqc support
 2023-07-06 20:36:04 +01:00
Yu Watanabe 535134bc51 network,ndisc: use correct free function for captive portal 
Fixes memleak introduced by 64de00c49f.
Fixes #28277.
 2023-07-06 20:30:22 +01:00
Luca Boccassi f00022eb86 Merge pull request #28242 from berrange/cond-sec-cvm 
Detect and expose the confidential virtualization technology in various places
 2023-07-06 19:14:26 +01:00
Luca Boccassi b9b0f338be Merge pull request #28274 from DaanDeMeyer/dissect-root 
dissect: Allow a few verbs to operate on directories as well as image files
 2023-07-06 14:41:48 +01:00
Richard Phibel 2a39b91459 service: fix for RestartMode=direct option 
With the fix done in PR28215, the unit restart job is created with type JOB_START.
Because of that, it is not properly merged anymore with the old one: the
merged job has state JOB_RUNNING. It should have state JOB_WAITING.

I think that the old job is not cleaned up because we don't go through the failed state.

With this fix, the merged job is properly created with state JOB_WAITING.
 2023-07-06 14:35:33 +02:00
Richard Phibel e568fea9fc service: add new RestartMode option 
When this option is set to direct, the service restarts without entering a failed
state. Dependent units are not notified of transitory failure.

This is useful for the following use case:

We have a target with Requires=my-service, After=my-service.
my-service.service is a oneshot service and has Restart=on-failure in
its definition.

my-service.service can get stuck for various reasons and time out, in
which case it is restarted. Currently, when it fails the first time, the
target fails, even though my-service is restarted.

The behavior we're looking for is that until my-service is not restarted
anymore, the target stays pending waiting for my-service.service to
start successfully or fail without being restarted anymore.
 2023-07-06 14:33:52 +02:00
Daniel P. Berrangé 6e2e83b487 udev: add 'conf-virt' constant for confidential virtualization tech 
Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 0895124572 core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators 
This reports the confidential virtualization type that was detected

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 024469ddb9 core: log detected confidential virtualization type 
Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 1257274ad8 dbus: add 'ConfidentialVirtualization' property to manager object 
This property reports whether the system is running inside a confidential
virtual machine.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 95d043b159 unit: add "cvm" option for ConditionSecurity 
The "cvm" flag indicates whether the OS is running inside a confidential
virtual machine.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé f460fec915 detect-virt: add --list-cvm option 
The --list-cvm option reports the known types of confidential virtualization
technology that can be detected.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 5e0c61f64d detect-virt: add --cvm option 
The --cvm option detects whether the OS is running inside a confidential
virtual machine.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé a577a61625 add APIs for detecting confidential virtualization 
This code uses various CPUID checks to be able to identify

 * AMD SEV
 * AMD SEV-ES
 * AMD SEV-SNP
 * Intel TDX

On HyperV/Azure, it has special checks for detecting SEV-SNP
since the normal CPUID is blocked.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Egor IgnatovandDmitry V. Levin 1d8aae4327 shared: add libpasswdqc support 
Co-authored-by: Dmitry V. Levin <ldv@altlinux.org>
Resolves: #15055
 2023-07-06 10:59:41 +00:00
Joerg Behrmann 5bc9ea070f treewide: fix "an" before consonant U sounds 
The article "a" goes before consonant sounds and "an" goes before vowel
sounds. This commit changes an to a for UKI, UDP, UTF-8, URL, UUID, U-Label, UI
and USB, since they start with the sound /ˌjuː/.
 2023-07-06 11:59:41 +01:00
Egor IgnatovandDmitry V. Levin d34b1823ca shared: add password quality check abstraction layer to support both pwquality and passwdqc 
Co-authored-by: Dmitry V. Levin <ldv@altlinux.org>
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 6377f57fa7 homed: change user_record_quality_check_password to use quality_check_password 
With this change, the only direct users of libpwquality functions
are those defined in pwquality-util.
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin bc0ef0e2c0 pwquality: add old password argument to quality_check_password 
This would allow to use quality_check_password() in
user_record_quality_check_password() which still uses
sym_pwquality_check() directly.
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 0351d560a2 pwquality: do not log password suggestions 
As logging password suggestions might leak sensitive information,
print it instead.

Suggested-by: Yu Watanabe <watanabe.yu+github@gmail.com>
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 7fc3f9c032 pwquality: fix quality_check_password return value 
quality_check_password() used to return the same value 0 in two
different cases: when pwq_allocate_context() failed with a
ERRNO_IS_NOT_SUPPORTED() code, and when pwquality_check() rejected the
password.  As result, users of quality_check_password() used to report
password weakness also in case when the underlying library was not
available.

Fix this by changing quality_check_password() to forward the
ERRNO_IS_NOT_SUPPORTED() code to its callers, and change the callers
to handle this case gracefully.
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 29dd2e253c pwquality: fix use of ERRNO_IS_NOT_SUPPORTED 
Given that ERRNO_IS_*() also match positive values, call
ERRNO_IS_NOT_SUPPORTED() only if the value returned by
pwq_allocate_context() is negative.
 2023-07-06 10:59:41 +00:00
Andrew Baxter 1b91662ca0 Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) 
* Hwdb: Add Sanwa Direct 400-MA128 external trackpad

```
$ udevadm info /dev/input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse
P: /devices/pci0000:00/0000:00:07.1/0000:28:00.3/usb5/5-1/5-1.4/5-1.4.4/5-1.4.4.1/5-1.4.4.1:1.1/0003:258A:0501.0097/input/input256/event15
M: event15
R: 15
U: input
D: c 13:79
N: input/event15
L: 0
S: input/by-id/usb-SINO_WEALTH_USB_TOUCHPAD-if01-event-mouse
S: input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse
E: DEVPATH=/devices/pci0000:00/0000:00:07.1/0000:28:00.3/usb5/5-1/5-1.4/5-1.4.4/5-1.4.4.1/5-1.4.4.1:1.1/0003:258A:0501.0097/input/input256/event15
E: DEVNAME=/dev/input/event15
E: MAJOR=13
E: MINOR=79
E: SUBSYSTEM=input
E: USEC_INITIALIZED=3436890430330
E: ID_INPUT=1
E: ID_INPUT_TOUCHPAD=1
E: ID_INPUT_WIDTH_MM=106
E: ID_INPUT_HEIGHT_MM=77
E: ID_BUS=usb
E: ID_MODEL=USB_TOUCHPAD
E: ID_MODEL_ENC=USB\x20TOUCHPAD
E: ID_MODEL_ID=0501
E: ID_SERIAL=SINO_WEALTH_USB_TOUCHPAD
E: ID_VENDOR=SINO_WEALTH
E: ID_VENDOR_ENC=SINO\x20WEALTH
E: ID_VENDOR_ID=258a
E: ID_REVISION=0521
E: ID_TYPE=hid
E: ID_USB_MODEL=USB_TOUCHPAD
E: ID_USB_MODEL_ENC=USB\x20TOUCHPAD
E: ID_USB_MODEL_ID=0501
E: ID_USB_SERIAL=SINO_WEALTH_USB_TOUCHPAD
E: ID_USB_VENDOR=SINO_WEALTH
E: ID_USB_VENDOR_ENC=SINO\x20WEALTH
E: ID_USB_VENDOR_ID=258a
E: ID_USB_REVISION=0521
E: ID_USB_TYPE=hid
E: ID_USB_INTERFACES=:030101:030000:
E: ID_USB_INTERFACE_NUM=01
E: ID_USB_DRIVER=usbhid
E: ID_PATH=pci-0000:28:00.3-usb-0:1.4.4.1:1.1
E: ID_PATH_TAG=pci-0000_28_00_3-usb-0_1_4_4_1_1_1
E: ID_INPUT_TOUCHPAD_INTEGRATION=internal
E: LIBINPUT_DEVICE_GROUP=3/258a/501:usb-0000:28:00.3-1.4.4
E: DEVLINKS=/dev/input/by-id/usb-SINO_WEALTH_USB_TOUCHPAD-if01-event-mouse /dev/input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse
```
Link to product: https://www.amazon.co.jp/gp/product/B07Z5HCMFP
 2023-07-06 11:42:33 +01:00
Thomas GentyandYu Watanabe 7d06cd73c2 hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) 
Co-authored-by: Yu Watanabe <watanabe.yu+github@gmail.com>
 2023-07-06 18:39:28 +08:00
Daan De Meyer 12d58b6c74 dissect: Add --mtree-hash= option 
Let's make including hashes in the mtree output configurable to allow
speeding up the --mtree command in cases where file hashes are not
required.
 2023-07-06 12:11:45 +02:00
Daan De Meyer 2292fa1e31 dissect: Allow a few verbs to operate on directories as well as image files 
--copy-to, --copy-from, --list and --mtree are useful for image directories
as well as image files, so for those verbs, let's check if we were passed
a directory and skip all the image file setup if that's the case.
 2023-07-06 12:11:42 +02:00
Antonio Alvarez Feijoo 0a3d108f46 tpm2-util: remove unnecessary semicolon 2023-07-06 10:44:23 +01:00
Yu Watanabe efa5521be8 network/json: introduce PreferredLifetimeUSec and ValidLifetimeUSec 2023-07-06 11:41:49 +02:00
Lennart Poettering 9103278ff7 Merge pull request #28265 from yuwata/network-captive-portal-follow-ups 
network: several follow-ups for captive portal support
 2023-07-06 11:39:24 +02:00
Lennart Poettering 4ab426bf56 service: explicitly cast float to usec_t 
Let's cast these floats explicitly to usec_t, since implicit
float-to-integer casts are dangerous business, and we should underline
that there's a cast happening here.
 2023-07-06 11:21:35 +02:00
Yu Watanabe ea792cacb9 core/service: make restart delay increase more smoothly 
Suggested in https://github.com/systemd/systemd/pull/26902#issuecomment-1620400583.
 2023-07-06 11:20:13 +02:00
Lennart Poettering eade959b90 NEWS: more preparation for 254-rc1 2023-07-06 11:16:16 +02:00
Lennart Poettering a130b09513 Merge pull request #27713 from ddstreet/tpm2_replace_make_primary 
Tpm2 replace make primary
 2023-07-06 10:22:12 +02:00
Lennart Poettering e40cad1f3c Merge pull request #28243 from bluca/sbat_initrd 
ukify: enable --sbat for UKIs too
 2023-07-06 10:21:44 +02:00