This is now implemented: sysupdate calls out to the
/run/systemd/sysupdate/notify/ Varlink directory on completion, and bootctl
binds a socket there that links a UKI plus extras staged below
/var/lib/systemd/uki/ (with .v/ vpick support) via "bootctl link-auto".
This is supposed to protect our SMBIOS type 11 importing for
credentials. Note that firmwares are supposed to measure SMBIOS anyway
to PCR 1. Alas firmware doesn't really do that in various cases. Hence
let's do so again, for select objects.
This closes a gap where some of the input for OS (i.e. system
credentials places in smbios11) isn't measured properly.
(I really want this to get into v261, because this will fuck up the PCRs
a bit more, and we already have the new separator measurement in v261,
hence there's value in getting this merged at the same time, so that we
don't break the measurements a 2nd time)
It'd be nice if we could not repeat the information about the option
list a second time. But I don't see a nice way to do this, since
(by design) with the macro approach, the macros must be intertwined
with the parse_argv() code. But that code in turn refers to a bunch
of variables, so lifting out the function is not immediately possible.
So I think it's best to keep the existing approach where we provide
a list of options, without additional context, and skip them using
a custom routine.
- Document the new --bind-volume= option in systemd-vmspawn(1) and
the new bind-volume / unbind-volume verbs in machinectl(1).
- Add an integration test
(TEST-87-AUX-UTILS-VM.bind-volume.sh) covering boot-time attach
via --bind-volume, runtime attach via 'machinectl bind-volume',
runtime detach via 'machinectl unbind-volume', the StorageImmutable
rejection of attempts to detach boot-time volumes, and the
NoSuchStorage rejection of detach on unknown names.
- Strike "hook-up in systemd-vmspawn" from TODO.md; the nspawn and
service-manager hookups remain.
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
Records the still-missing StorageProvider integrations (nspawn,
vmspawn, service-manager BindVolume=) and replaces the now-obsolete
generic "storage API via varlink" entry with a NetworkProvider
proposal modelled on it.
This is something that should be fixed for usability, but it's something
between a missing feature and a bug. Since nobody has complained about
this, it probably can wait.
- Fix "d-nspawn" → "systemd-nspawn" (prefix was incorrectly stripped
when merging into the nspawn grouped section)
- Fix "LSFMMBPF" → "LSM BPF" (the original informal abbreviations
"lsmbpf"/"lsmpbf" were incorrectly "corrected")
- Restore the dropped "portabled: similar" reference by folding it
into the ConcurrencyHardMax=/ConcurrencySoftMax= item
Signed-off-by: Christian Brauner <brauner@kernel.org>
Add YAML frontmatter matching the style of other docs in the tree.
Bold grouped section topic names to make them visually distinct
from standalone items. Escape angle-bracket placeholders so GitHub
does not swallow them as HTML.
Signed-off-by: Christian Brauner <brauner@kernel.org>
Rename TODO to TODO.md and convert to proper markdown format:
section headers become ## headings and bullet items use - instead
of *.
Signed-off-by: Christian Brauner <brauner@kernel.org>
Lennart Poettering
Michael Vogt
Zbigniew Jędrzejewski-Szmek
Luca Boccassi
Yu Watanabe
Christian Brauner
Diego Viola