Commit Graph
72176 Commits
Author SHA1 Message Date
hulkoba 77d47e6db4 docs/COREDUMP: format text 2024-03-27 07:11:56 +01:00
hulkoba 26dcc13c2c docs/CONVERTING_TO_HOMED: format text 2024-03-27 07:11:56 +01:00
hulkoba 0d8926b1c3 docs/CONTRIBUTING: format text 2024-03-27 07:11:56 +01:00
hulkoba 426d487900 docs/CODE_OF_CONDUCT: format text 2024-03-27 07:11:55 +01:00
hulkoba af31cd6e62 docs/CATALOG: format text 2024-03-27 07:11:55 +01:00
hulkoba 59652fff30 docs/BUILDING_IMAGES: format text 2024-03-27 07:11:55 +01:00
hulkoba e9a55babcd docs/BOOT: format text 2024-03-27 07:11:54 +01:00
hulkoba b7d1e251a2 docs/BACKPORTS: format text 2024-03-27 07:11:54 +01:00
hulkoba 3bfe71098d docs/AUTOPKGTEST: format text 2024-03-27 07:11:53 +01:00
hulkoba 51d8900677 docs/ARCHITECTURE: format text 2024-03-27 07:11:53 +01:00
hulkoba e7f7da45e7 docs/API_FILE_SYSTEM: format text 2024-03-27 07:11:53 +01:00
hulkoba 565e2396fd docs/FAQ: update logind man page link and fix relative link 2024-03-27 07:11:52 +01:00
hulkoba b058563a54 docs/PORTABILITY_AND_STABILITY: update internal links 2024-03-27 07:11:52 +01:00
hulkoba a90c3a9eb2 docs/JOURNAL_FILE_FORMAT: update journal links 2024-03-27 07:11:52 +01:00
hulkoba 2cc483482e docs/INITRD_INTERFACE: update link
separate usr is broken
2024-03-27 07:11:51 +01:00
hulkoba 67ae7f6e73 docs/CONTAINER_INTERACE: update vm-or-container-manager link 2024-03-27 07:11:51 +01:00
hulkoba 9adb7cd99d docs/GROUP_DELEGATION: update links
to The New Control Group Interfaces and Writing VM and Container Managers
2024-03-27 07:11:50 +01:00
hulkoba fd50b326a4 docs/WRITING_RESOLVER_CLIENTS: update manpage link 2024-03-27 07:11:50 +01:00
hulkoba 9f985a6cfc docs/WRITING_RESOLVER_CLIENTS: format text 2024-03-27 07:11:39 +01:00
Mariano Giménez d3421bd4e4 docs: add pax control groups
and adapt links
2024-03-27 06:53:47 +01:00
Mariano Giménez 151c22e873 docs/TIPS_AND_TRICKS: update faq link 2024-03-27 06:53:46 +01:00
Mariano Giménez ed8998d372 docs/DEBUGGING: add screenshot and fix path to it 2024-03-27 06:53:46 +01:00
Mariano Giménez cc7ec2cab4 docs/WRITING VM_AND_CONTAINER_MANAGERS: update manpage link
and container interface link
2024-03-27 06:53:46 +01:00
Mariano Giménez 288816c503 docs/WRITING_NETWORK_CONFIGURATION_MANAGERS: update manpage links 2024-03-27 06:53:45 +01:00
Mariano Giménez b479ff876f docs/WRITING_DISPLAY_MANAGERS: update links
to desktop environments and logind manpage
2024-03-27 06:53:45 +01:00
Mariano Giménez 48c43dbe1c docs/WRITING_DESKTOP_ENV: update links
to 'bus api of logind' and 'inhitor locks'
2024-03-27 06:53:45 +01:00
Mariano Giménez 14ca3f421e docs/THE_CASE_FOR_THE_USR_MERGE): update link to 'seprate usr is broken' 2024-03-27 06:53:44 +01:00
Mariano Giménez cc9977da03 docs/MINIMAL_BUILDS: remove last sentence due to missing link
http://kdzbn.homelinux.net/libcap-add-pkg-config.patch
This link is a 404, so we removed the whole sentence.
2024-03-27 06:53:44 +01:00
Mariano Giménez adf0eb641a docs/INHIBITOR_LOCKS: update logind d-bus api link
and fix freedesktop wiki link
2024-03-27 06:53:44 +01:00
Mariano Giménez f9be794ace docs/CONTROL_GROUP_INTERFACE: update links 2024-03-27 06:53:43 +01:00
Mariano Giménez 5f1b83d240 docs/BOOT: update bootloader specification link 2024-03-27 06:53:43 +01:00
Mariano Giménez 101c4ff939 docs/BACKPORTS: close parenthesis 2024-03-27 06:53:42 +01:00
hulkoba 257889efb3 docs/HACKING: fix jinja link 2024-03-27 06:53:42 +01:00
hulkoba 517fd35f94 docs/HACKING: link mkosi webpage
and remove one of two mkosi github links
2024-03-27 06:53:29 +01:00
hulkoba f757c5a4bf docs/CODING_STYLE: remove whitespace 2024-03-27 06:49:16 +01:00
hulkoba 4ba04a050a docs/ARCHITECTURE: link test/readme.testsuite 2024-03-27 06:49:16 +01:00
Yu Watanabe 93998559f8 Merge pull request #31789 from jsitnicki/socket-pass-fds-to-exec
Pass socket FDs to all ExecXYZ= commands in socket unit but ExecStartPre=
2024-03-27 10:18:13 +09:00
Ronan Pigott 0dfea62ee3 resolved: always return the validated answers when validating
We normally expect sd-resolved only to return the validated subset of a
validated response. In some cases we give up on validating, because we
have enough information already to conclude the answer is bogus.

Let's be sure to always reply with only the validated subset in these
cases too, so that we don't return bogus answers and confuse primitive
clients that won't see the SERVFAIL rcode.
2024-03-27 10:17:15 +09:00
Ronan Pigott 4001710365 resolved: minor dnssec fixups
Fixes: ce5b9d5b3c ("resolved: request DS with DNSKEY")
2024-03-27 10:16:38 +09:00
Zbigniew Jędrzejewski-Szmek 1e8c0c671e shared/logs-show: restore infinite loop avoidance for corrupted journals
Fixes a bug introduced in e44f06065b: it was
supposed to be a refactoring, but unfortunately FOREACH_ARRAY is implemented
using a for loop, so when the 'goto finish' was replaced by 'break', it only
broke the inner loop, leading to a infinite loop.
2024-03-27 10:16:16 +09:00
Yu Watanabe 193134de54 home: fix typo
Follow-up for 5ec87d577f.
2024-03-27 04:07:51 +09:00
Jakub Sitnicki d1813ba436 test: integration test for PassFileDescriptorsToExec= option
Check if socket file descriptors are passed to ExecXYZ= commands from the
socket unit depending on whether PassFileDescriptorsToExec= option is set.
2024-03-27 01:41:26 +08:00
Jakub Sitnicki 97df75d7bd socket: pass socket FDs to all ExecXYZ= commands but ExecStartPre=
Today listen file descriptors created by socket unit don't get passed to
commands in Exec{Start,Stop}{Pre,Post}= socket options.

This prevents ExecXYZ= commands from accessing the created socket FDs to do
any kind of system setup which involves the socket but is not covered by
existing socket unit options.

One concrete example is to insert a socket FD into a BPF map capable of
holding socket references, such as BPF sockmap/sockhash [1] or
reuseport_sockarray [2]. Or, similarly, send the file descriptor with
SCM_RIGHTS to another process, which has access to a BPF map for storing
sockets.

To unblock this use case, pass ListenXYZ= file descriptors to ExecXYZ=
commands as listen FDs [4]. As an exception, ExecStartPre= command does not
inherit any file descriptors because it gets invoked before the listen FDs
are created.

This new behavior can potentially break existing configurations. Commands
invoked from ExecXYZ= might not expect to inherit file descriptors through
sd_listen_fds protocol.

To prevent breakage, add a new socket unit parameter,
PassFileDescriptorsToExec=, to control whether ExecXYZ= programs inherit
listen FDs.

[1] https://docs.kernel.org/bpf/map_sockmap.html
[2] https://lore.kernel.org/r/20180808075917.3009181-1-kafai@fb.com
[3] https://man.archlinux.org/man/socket.7#SO_INCOMING_CPU
[4] https://www.freedesktop.org/software/systemd/man/latest/sd_listen_fds.html
2024-03-27 01:41:26 +08:00
Yu Watanabe d30d0b04ae Merge pull request #31951 from bluca/resolve_reload
resolved: support reloading configuration at runtime
2024-03-27 02:37:52 +09:00
Yu Watanabe 18640f8211 Merge pull request #31959 from YHNdnzj/execute-pass-fds
core/execute: check if EXEC_PASS_FDS is set if got exec_params.fds
2024-03-27 02:37:23 +09:00
Yu Watanabe 5c7292fa80 Merge pull request #31960 from YHNdnzj/capsule-followup
Some follow-ups for capsule
2024-03-27 02:34:43 +09:00
Antonio Alvarez Feijoo dde1931b06 dissect: fix memory leak 2024-03-27 02:33:00 +09:00
Antonio Alvarez Feijoo f0896ca557 efi: skip check-alignment-* tests if pefile is not installed
Otherwise, when building with ukify disabled, no one else requires pefile, and
if it is not installed, those tests fail:

```
================================== 12/1212 ===================================
test:         systemd:efi / check-alignment-systemd-bootx64.efi
start time:   14:21:54
duration:     0.08s
result:       exit status 1
command:      /mnt/work/systemd/upstream-fork/main/tools/check-efi-alignment.py /mnt/work/systemd/upstream-fork/main/build/src/boot/efi/systemd-bootx64.efi
----------------------------------- stderr -----------------------------------
Traceback (most recent call last):
  File "/mnt/work/systemd/upstream-fork/main/tools/check-efi-alignment.py", line 7, in <module>
    import pefile
ModuleNotFoundError: No module named 'pefile'
==============================================================================

================================== 13/1212 ===================================
test:         systemd:efi / check-alignment-linuxx64.efi.stub
start time:   14:21:54
duration:     0.08s
result:       exit status 1
command:      /mnt/work/systemd/upstream-fork/main/tools/check-efi-alignment.py /mnt/work/systemd/upstream-fork/main/build/src/boot/efi/linuxx64.efi.stub
----------------------------------- stderr -----------------------------------
Traceback (most recent call last):
  File "/mnt/work/systemd/upstream-fork/main/tools/check-efi-alignment.py", line 7, in <module>
    import pefile
ModuleNotFoundError: No module named 'pefile'
==============================================================================

================================== 14/1212 ===================================
test:         systemd:efi / check-alignment-addonx64.efi.stub
start time:   14:21:54
duration:     0.07s
result:       exit status 1
command:      /mnt/work/systemd/upstream-fork/main/tools/check-efi-alignment.py /mnt/work/systemd/upstream-fork/main/build/src/boot/efi/addonx64.efi.stub
----------------------------------- stderr -----------------------------------
Traceback (most recent call last):
  File "/mnt/work/systemd/upstream-fork/main/tools/check-efi-alignment.py", line 7, in <module>
    import pefile
ModuleNotFoundError: No module named 'pefile'
==============================================================================
```

Follow-up for 7ff3b88396
2024-03-27 02:32:42 +09:00
Luxiter 33243f7374 hwdb: fix Asus T300FA rotation matrix (#31973)
Closes #31972.
2024-03-27 02:32:03 +09:00
Yu Watanabe 17c512f1cc Merge pull request #31879 from yuwata/journalctl-split
journalctl: split journalctl.c into small pieces
2024-03-26 23:45:20 +09:00