Yu Watanabe
7de42b787d
cryptsetup: fix 'tpm2-primary-alg' information in 'cryptsetup luksDump' ( #40872 )
...
It was noticed that cryptsetup luksDump outputs
tpm2-primary-alg: ecc
regardless of the actual primary key type. Namely, in the situation when
RSA SRK is passed to 'systemd-cryptenroll', the output is incorrect and
misleading. Turns out 'tpm2-primary-alg' is not currently used for
unsealing as 'tpm2_srk' object has it in its properties but the
misleading information problem stays.
Fix the issue with a two-fold fix:
- Put the SRK primary alg type to the JSON token so 'cryptsetup
luksDump' has a chance to actually print the right information without
the need to inspect SRK.
- Avoid printing 'tpm2-primary-alg' when it is unset in the JSON as the
default 'ECC' may not match the reality.
No real functional change for the sealing/unsealing expected.
2026-03-02 12:40:40 +09:00
Val Markovic
4724cf5526
man: improve documentation for RestartSteps ( #40879 )
...
I found the existing explanation of RestartSteps to be simply
impenetrable. Even providing the full docs context to several of our new
AI overlords resulted in wildly different (and completely incorrect)
explanations of the final restart intervals.
Digging through the code, I found the restart delay computation in
`service_restart_usec_next` in `src/core/service.c`.
I've updated the documentation for RestartSteps with an example,
suggested value range and a detailed enough explanation that accurately
describes the current behavior.
2026-03-02 12:38:35 +09:00
Mario Limonciello
9d3b73d9bf
udev: tag kfd devices for xaccess-render ( #40888 )
...
The kfd device is used for running compute workloads on AMD
GPUs. Users that are logged in should be able to run compute
so tag them like other DRM and ACCEL devices are.
2026-03-02 12:32:50 +09:00
IntenseWiggling
63fbe36d27
hwdb: add one more USB ID for 3D Connexion SpaceMouse Wireless BT ( #40890 )
...
The 3D Connexion SpaceMouse Wireless BT (256f:c63a) has an entry in
`70-mouse.hwdb` already as a bluetooth device, but it can also be
connected as a USB device.
`5-3.3: hwdb modalias key: "usb:v256FpC63A:SpaceMouse Wireless BT"`
Ref:
https://github.com/FreeSpacenav/spacenavd/blob/39856625a6de1e8c4b57c5938e1bf29d13cf1a9f/src/dev.c#L83
2026-03-02 12:31:29 +09:00
dependabot[bot]
298dc78821
build(deps): bump github/codeql-action in the actions group
...
Bumps the actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action ).
Updates `github/codeql-action` from 4.32.0 to 4.32.4
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b20883b0cd1f46c72ae0ba6d1090936928f9fa30...89a39a4e59826350b863aa6b6252a07ad50cf83e )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-02 12:30:25 +09:00
Ronan Pigott
ac4a7a66bd
zsh: add userdbctl completion
2026-03-01 10:26:15 +00:00
Weixie Cui
4980bd05b1
fix: check error with -ENOMEDIUM not ENOMEDIUM
...
Signed-off-by: Weixie Cui <cuiweixie@gmail.com >
2026-03-01 10:24:45 +00:00
Lennart Poettering
d423ec258c
nss-systemd,strv: use a common definition of a non-NULL but empty strv
...
Follow-up for: 239903d44c
2026-03-01 08:51:14 +01:00
Mike Yuan
8df624bfdd
sd-varlink: add missing space
2026-02-28 12:01:06 +01:00
Mike Yuan
7982acff82
shared/pager: do not wait for process again after FORK_WAIT
...
Follow-up for fbd276cb86
Fixes #40873
2026-02-28 12:00:52 +01:00
Mike Yuan
04b3c2d199
tmpfiles: minor logging fixes ( #40875 )
2026-02-28 11:48:43 +01:00
Lennart Poettering
da6162ecff
NEWS: add various more features added in v260, and introduce more sections
2026-02-27 23:57:17 +01:00
Luca Boccassi
92d302570e
Translations update from Fedora Weblate ( #40876 )
...
Translations update from [Fedora
Weblate](https://translate.fedoraproject.org ) for
[systemd/main](https://translate.fedoraproject.org/projects/systemd/main/ ).
Current translation status:

2026-02-27 17:27:30 +00:00
lumingzh
037dac9236
po: Translated using Weblate (Chinese (Simplified) (zh_CN))
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: lumingzh <lumingzh@qq.com >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main
2026-02-27 16:58:42 +00:00
김인수
dee7df17e9
po: Translated using Weblate (Korean)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: 김인수 <simmon@nplob.com >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ko/
Translation: systemd/main
2026-02-27 16:58:42 +00:00
Léane GRASSER
be935ed628
po: Translated using Weblate (French)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Léane GRASSER <leane.grasser@proton.me >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/fr/
Translation: systemd/main
2026-02-27 16:58:42 +00:00
Efstathios Iosifidis
c9954f682b
po: Translated using Weblate (Greek)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Efstathios Iosifidis <eiosifidis@yandex.com >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/el/
Translation: systemd/main
2026-02-27 16:58:41 +00:00
Mike Yuan
476d0d7643
tmpfiles: downgrade log level for non-existent symlink target
...
I'm seeing a *lot* of noise induced by missing varlink sockets
under /run/host/ after 3363693935 .
2026-02-27 17:11:41 +01:00
Mike Yuan
b1c6bcf949
tmpfiles: fix doubled "/" in root + path logging
2026-02-27 17:07:43 +01:00
Vitaly Kuznetsov
4883ef8aae
cryptsetup-tokens: Print tpm2-primary-alg: only when it is known
...
When 'tpm2-primary-alg' is missing in LUKS JSON token, the output of
'cryptsetup luksDump' is always:
tpm2-primary-alg: ecc
because tpm2_parse_luks2_json() returns the default (TPM2_ALG_ECC). This can be
misleading and wrong. Make tpm2_parse_luks2_json() return the reality and move
the default to tpm2_unseal().
2026-02-27 14:22:22 +01:00
Vitaly Kuznetsov
295affa3f7
cryptenroll: Save primary algorithm type to the LUKS token
...
'tpm2-primary-alg' field is currently unset in LUKS JSON token both for the
case when SRK was used for enrolling (--tpm2-device-key=) and for the case when
SRK was obtained/generated (--tpm2-device=). While this information is not
really needed for unsealing (the sealed object itself has key type in it), it
may be convenient to see key type in e.g. 'cryptsetup luksDump' in the
situations where key type matters. Since 'tpm2-primary-alg' is already defined,
just set it properly in all cases.
2026-02-27 14:01:10 +01:00
Mike Yuan
0dbd116351
shared/dropin: use set_contains() where appropriate
2026-02-27 08:50:37 +01:00
noxiouz
3d9191cd5c
shared: fix sysext ImageType IDL missing mstack value, add enum IDL test
...
Add the missing 'mstack' value to the ImageType enum in the
io.systemd.sysext Varlink IDL — image_type_table in discover-image.c
already defines IMAGE_MSTACK = "mstack" but it was absent from the IDL.
Export vl_type_ImageType so the test can reference it, and add
TEST_IDL_ENUM(ImageType, ...) to the enums_idl test to catch
similar regressions in the future.
2026-02-27 08:49:54 +01:00
noxiouz
37b8cd71cd
shared: fix comment typos in Udev and AskPassword Varlink IDL
2026-02-27 08:49:21 +01:00
noxiouz
54796ea3b2
mountfsd: include imageName in MountImage Varlink reply
2026-02-27 08:48:48 +01:00
noxiouz
c22a131e74
import: fix AlreadyInProgress Varlink error missing remote field
...
The handler sends the remote URL as a parameter via sd_varlink_errorbo()
but the IDL declared the error with no fields, making the payload
undiscoverable via introspection.
2026-02-27 08:48:25 +01:00
noxiouz
56d44e8a02
hostname: fix OperatingSystemImageID/Version Varlink IDL
...
Both fields are populated from IMAGE_ID/IMAGE_VERSION in os-release,
which are plain strings.
Fix typo in include.
2026-02-27 04:09:15 +01:00
Luca Boccassi
231f2bcd40
tpm2-setup: make NV index space exhaustion issues more discoverable ( #40841 )
2026-02-26 23:52:28 +00:00
Christopher Cooper
e3a4f8d804
NEWS: fix manpage section for os-release
2026-02-26 20:13:15 +00:00
Luca Boccassi
783ee9d60d
Small hwdb cleanups ( #40854 )
2026-02-26 20:12:47 +00:00
Zbigniew Jędrzejewski-Szmek
62338aeadf
hwdb: use more modern python syntax in one more place
2026-02-26 19:02:03 +01:00
Zbigniew Jędrzejewski-Szmek
6c17dfa5c3
hwdb: fix typos reported by Copilot, reword comment
2026-02-26 19:01:45 +01:00
Zbigniew Jędrzejewski-Szmek
d0a4c607ad
hwdb: drop trailing whitespace
...
Fixup for f6f695ba5a and
774e805959 .
2026-02-26 18:12:03 +01:00
Zbigniew Jędrzejewski-Szmek
60c2448096
Fixes for yeswehack reports ( #40840 )
2026-02-26 17:55:52 +01:00
Luca Boccassi
0d7c5fa4a8
Translations update from Fedora Weblate ( #40842 )
...
Translations update from [Fedora
Weblate](https://translate.fedoraproject.org ) for
[systemd/main](https://translate.fedoraproject.org/projects/systemd/main/ ).
Current translation status:

2026-02-26 14:47:39 +00:00
joo es
4be5de8290
po: Translated using Weblate (Arabic)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: joo es <jonnyse@users.noreply.translate.fedoraproject.org >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ar/
Translation: systemd/main
2026-02-26 13:58:31 +00:00
Daniel Nylander
25ee7ec62d
po: Translated using Weblate (Swedish)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Daniel Nylander <po@danielnylander.se >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/sv/
Translation: systemd/main
2026-02-26 13:58:31 +00:00
Américo Monteiro
3865da9a0d
po: Translated using Weblate (Portuguese)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Américo Monteiro <a_monteiro@gmx.com >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/pt/
Translation: systemd/main
2026-02-26 13:58:30 +00:00
Yuri Chornoivan
fb8051a091
po: Translated using Weblate (Ukrainian)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Yuri Chornoivan <yurchor@ukr.net >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/uk/
Translation: systemd/main
2026-02-26 13:58:30 +00:00
Baurzhan Muftakhidinov
f5647f6b69
po: Translated using Weblate (Kazakh)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Baurzhan Muftakhidinov <baurthefirst@gmail.com >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/kk/
Translation: systemd/main
2026-02-26 13:58:30 +00:00
Oğuz Ersen
a9bba2cc6c
po: Translated using Weblate (Turkish)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Oğuz Ersen <oguz@ersen.moe >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/tr/
Translation: systemd/main
2026-02-26 13:58:29 +00:00
Temuri Doghonadze
07f1fb3c3d
po: Translated using Weblate (Georgian)
...
Currently translated at 100.0% (266 of 266 strings)
Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com >
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ka/
Translation: systemd/main
2026-02-26 13:58:29 +00:00
Mike Yuan
efa6ba2ab6
core: validate input cgroup path more prudently
2026-02-26 14:23:25 +01:00
Mike Yuan
42aee39107
core/cgroup: avoid one unnecessary strjoina()
2026-02-26 14:23:23 +01:00
Mike Yuan
679e738bf4
core/dbus-unit: query sender uid only once, validate unit uid early
...
Follow-up for 05f5156ad1
2026-02-26 14:23:23 +01:00
Mike Yuan
4e6e3b8707
sd-json: fix off-by-one issue when updating parent for array elements
...
Follow-up for 8525bb369a
2026-02-26 14:23:12 +01:00
Lennart Poettering
ac8266c7c2
tpm2-setup: make NV index space exhaustion issues more discoverable
...
Let's log about this explicitly, and include a message catalog entry for
it.
2026-02-26 11:34:59 +01:00
Lennart Poettering
a01912ef29
tpm2-util: fix log level of one log call
2026-02-26 11:34:59 +01:00
Zbigniew Jędrzejewski-Szmek
13167bfc2f
core/socket: fix reversed symlink direction in error message
...
After the update to 260-rc1 in Fedora Rawhide, we get a lot of messages like
this:
systemd[1]: systemd-resolved-monitor.socket:
Failed to create symlink /run/systemd/resolve/io.systemd.Resolve.Monitor →
/run/varlink/registry/io.systemd.Resolve.Monitor, ignoring: Permission denied
The actual issue will need to be fixed too, but let's fix the message first.
While at it, let's rename the variables to be meaningful.
2026-02-26 11:34:22 +01:00
Zbigniew Jędrzejewski-Szmek
8a2b2828cc
test-qr-code: allow specifying the text to encode
2026-02-26 09:20:59 +01:00