Susant Sahani
1af2536acf
networkd: introduce gretap
...
This patch introdeces gretap to networkd
2015-01-22 21:29:41 +01:00
Lennart Poettering
34109a531f
update TODO
2015-01-22 18:55:30 +01:00
Lennart Poettering
e57565dd5b
importd: run daemon at minimal capabilities
2015-01-22 18:55:08 +01:00
Lennart Poettering
3637713a20
cgroup-show: don't hit assert, when the extra pids array is empty
2015-01-22 18:54:48 +01:00
Lennart Poettering
57d8a552af
importd: fix path to download binary
2015-01-22 18:38:51 +01:00
Lennart Poettering
7315edd36a
import: lock tar into its own private network namespace
...
That way it cannot get access to the network
2015-01-22 18:19:58 +01:00
Lennart Poettering
2c140ded48
import: drop all capabilities when invoking tar
2015-01-22 18:12:31 +01:00
Lennart Poettering
a8683176ee
update TODO
2015-01-22 17:50:50 +01:00
Lennart Poettering
b9a5f8588f
import: only define the _to_string() enum mapping function, thus making gcc shut up
2015-01-22 17:50:50 +01:00
Lennart Poettering
aa9bd4992f
import: now that the worker binary is called "systemd-pull" we can shorten the verbs
...
Atfer all "systemd-pull pull-tar" is unnecessarily redundant, over
"systemd-pull tar"...
2015-01-22 17:50:50 +01:00
Lennart Poettering
ff828763c4
importd: try to minimize confusion by renaming "systemd-import" binary to "systemd-pull"
...
This way "systemd-importd" is the daemon that uses "systemd-pull" as
backend worker.
2015-01-22 17:50:50 +01:00
Lennart Poettering
6adf7b5e46
machinectl: when downloading an image, clarify that C-c will not cancel the download, but continue it in the background
2015-01-22 17:50:50 +01:00
Lennart Poettering
813c65c34b
machinectl: minor simplification
2015-01-22 17:50:50 +01:00
Lennart Poettering
6e18cc9fa0
machinectl: parse verify setting client-side
2015-01-22 17:50:50 +01:00
Lennart Poettering
09d46cfd41
importd: minor log improvements
2015-01-22 17:50:50 +01:00
Lennart Poettering
1c49d1ba85
import: make the user verficiation keyring override the vendor keyring, instead of extending it
...
This way the user has the ability to remove keys from the
vendor-supplied keyring if he intends so.
2015-01-22 17:50:50 +01:00
Peter Hutterer
8dbce34b03
logind: fix sd_eviocrevoke ioctl call
...
If the third argument is non-null, the kernel will always error out with
EINVAL and devices won't get revoked.
Reported-by: Benjamin Tissoires <benjamin.tissoires@gmail.com >
Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net >
2015-01-22 10:53:29 -05:00
Lennart Poettering
b5b38b41c3
machinectl: various minor updates to the --help text
2015-01-22 15:14:36 +01:00
Lennart Poettering
7f444afa1b
import: rename --verify=sum to --verify=checksum
...
This is how we call it internally, and also a bit more descriptive.
2015-01-22 15:14:36 +01:00
Lennart Poettering
e0ea94c1e2
man: document new download magic
2015-01-22 15:14:36 +01:00
Piotr Drąg
838d5f0298
import: add org.freedesktop.import1.policy.in to POTFILES.in
...
https://bugs.freedesktop.org/show_bug.cgi?id=88705
2015-01-22 09:02:33 -05:00
Mindaugas Baranauskas
534644b7be
kbd-model-map: add more mappings for Slovak, Lithuanian, and Khmer
...
https://bugs.freedesktop.org/show_bug.cgi?id=88545
2015-01-22 01:14:54 -05:00
Marko Myllynen
25b47f96d9
Use eurlatgr as the example console font
...
See https://fedoraproject.org/wiki/Changes/NewDefaultConsoleFont
https://bugzilla.redhat.com/show_bug.cgi?id=1182529
2015-01-22 01:14:53 -05:00
Cristian Rodríguez
0814f65ec6
sysv-generator: only allow regular files in enumerate_sysv()
...
Otherwise, if the directory contains other directories we fail
at fopen in load_sysv() with EISDIR.
2015-01-22 01:14:53 -05:00
Lucas De Marchi
3a5afdec90
build: export symbols to integrate mainloops
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
614cc34f3a
TODO: tmpfiles
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
dd4105b0a9
shared/acl-util: add mask only when needed, always add base ACLs
...
For ACLs to be valid, a set of entries for user, group, and other
must be always present. Always add those entries.
While at it, only add the mask ACL if it is actually required, i.e.
when at least on ACL for non-owner group or user exists.
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
a48a62a1af
tmpfiles: use ACL magic on journal directories
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
50d9e46dbb
tmpfiles: implement augmenting of existing ACLs
...
This is much more useful in practice (equivalent to setfacl -m).
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
b705ab6a83
tmpfiles: make t and a globby, add their recursive versions T and A
...
For types which adapt existing files it is generally more useful to accept
globs.
In analogy to z and Z, add recursive versions using uppercase letters.
Technically, making a accept globs is backwards incompatible, but in
practice it probably isn't yet widely used and we can assume that most
people don't create files with wildcards in names.
Functions which are used as callbacks, but not directly on items, are
renamed not to have "item_" prefix.
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
081043cf06
tmpfiles: make recursive operation generic
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
f8eeeaf9b7
tmpfiles: add 'a' type to set ACLs
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
3f93da9879
tmpfiles: attach an array of items to each path
...
The data structure used by tmpfiles is changed: instead of hashmaps
mapping {path → Item*} we now have hashmaps containing
{path -> ItemArray}, where ItemArray contains a pointer
to an array of Items.
For current code it doesn't matter much, but when we add new types it
is easier to simply add a new Item for a given path, then to coalesce
multiple lines into one Item.
In the future, this change will also make it possible to remember the
file and line where each Item originates, and use that in reporting
errors. Currently this is not possible, since each Item can be created
from multiple lines.
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
222c47f476
tmpfiles: make sure not to concatenate non-absolute path
...
If the path is absolute was only checked later.
Also do not check if path if absolute if we just
specified it starting with a slash.
2015-01-22 01:14:52 -05:00
Zbigniew Jędrzejewski-Szmek
5f255144ae
tmpfiles: detect all combinations of + and !
...
The same algorithm as with - and @ in ExecStart= is used.
2015-01-22 01:14:52 -05:00
Zbigniew Jędrzejewski-Szmek
505ef0e36c
tmpfiles: simplification
...
Certain conditions were checked more than once. Warning message
is improved.
2015-01-22 01:14:52 -05:00
Rafael Ferreira
158bffeb43
catalog: update pt_BR translation
...
Brazilian Portuguese update for CATALOG patch, according to commit
2057124e79 ("Grammar changes to catalog")
https://bugs.freedesktop.org/show_bug.cgi?id=88588
2015-01-22 01:14:52 -05:00
Zbigniew Jędrzejewski-Szmek
3da7a50f84
shared/cgroup-show: simplify show_pid_array()
...
int[] should not be used as pid_t[], even if happens to be same thing.
Also deduplicating in a quadratic loop right before sorting is unnecessary.
Remove custom greedy_realloc implementation.
2015-01-22 01:14:52 -05:00
Zbigniew Jędrzejewski-Szmek
1fa2f38f0f
Assorted format fixes
...
Types used for pids and uids in various interfaces are unpredictable.
Too bad.
2015-01-22 01:14:52 -05:00
Zbigniew Jędrzejewski-Szmek
8facc3498e
Fix some format strings for enums, they are signed
2015-01-22 00:39:30 -05:00
Zbigniew Jędrzejewski-Szmek
213c305a2f
shared/util: use signed printf format for PIDs
...
gcc 5 started warning about this.
2015-01-22 00:39:30 -05:00
Lennart Poettering
da36017e05
update TODO
2015-01-22 04:02:07 +01:00
Lennart Poettering
3d7415f43f
import: introduce new mini-daemon systemd-importd, and make machinectl a client to it
...
The old "systemd-import" binary is now an internal tool. We still use it
as asynchronous backend for systemd-importd. Since the import tool might
require some IO and CPU resources (due to qcow2 explosion, and
decompression), and because we might want to run it with more minimal
priviliges we still keep it around as the worker binary to execute as
child process of importd.
machinectl now has verbs for pulling down images, cancelling them and
listing them.
2015-01-22 04:02:07 +01:00
Lennart Poettering
f4c135bf2f
impot: minor cleanups
2015-01-22 04:02:07 +01:00
Lennart Poettering
aca83a53ee
log: add new log output mode, that prints to console, but prefixes with syslog priority
...
This is useful when we execute our own programs, reading output from its
STDERR, and want to retain priority information.
2015-01-22 04:02:07 +01:00
Tom Gundersen
07e10d1a7c
networkd: plug lldp leak
2015-01-21 23:02:22 +01:00
Tom Gundersen
cfb5b38057
network: dhcp - split out dhcp_identifier_set_{iaid,duid_en} from dhcp6-client
...
This will also be used in dhcp4-client.
2015-01-21 22:57:55 +01:00
Tom Gundersen
764aad6258
network: dhcp - split out the duid structure into a new header file
...
We will use the same in both dhcp4 and dhcp6.
2015-01-21 22:57:55 +01:00
Lennart Poettering
7687f85ea6
update TODO
2015-01-21 20:05:31 +01:00
Lennart Poettering
ff2670ad11
import: simplify dkr importer, by making use of generic import-job logic, used by the raw and tar importers
...
This gets us progress output as well xz/bzip2 support.
2015-01-21 20:05:31 +01:00