Commit Graph
86995 Commits
Author SHA1 Message Date
dependabot[bot] 298dc78821 build(deps): bump github/codeql-action in the actions group
Bumps the actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.32.0 to 4.32.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b20883b0cd1f46c72ae0ba6d1090936928f9fa30...89a39a4e59826350b863aa6b6252a07ad50cf83e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-02 12:30:25 +09:00
Mike Yuan eb8df25a37 core/exec-invoke: make fd array sizing less error-prone
History has clearly shown that we're terrible at keeping
the size of the dont_close array up-to-date. Hence let's
step away from a hardcoded max size for that, instead
always collect all fds in the array initializer and
let compiler figure it out, taking advantage of the fact
that close_all_fds() gracefully handles invalid fds in
the 'except' array.
2026-03-01 13:55:39 +01:00
Mike Yuan f2e7ba1074 core/exec-invoke: drop duplicate addition of handoff_timestamp_fd to dont_close array
Follow-up for 12001b1bf0

It is part of the keep_fds array already, which is intended
for fds that need to survive until the very end of executor
runtime, i.e. across the second close_all_fds() call.
2026-03-01 13:55:39 +01:00
Mike Yuan 0aa70bef5e core/exec-invoke: correct size for dont_close array in close_remaining_fds()
Follow-up for 79dd24cf14
2026-03-01 13:55:39 +01:00
Mike Yuan ec93edc4ca core/exec-invoke: fix potential double close of socket/bpffs fds on failure
The owned fds should be closed before close_all_fds() along the lines
of exec_params/runtime_close(), otherwise they would be left dangling
afterwards.
2026-03-01 13:55:39 +01:00
Mike Yuan b702bbc31c core/execute: drop redundant close of root_directory_fd
exec_params_shallow_clear() will take care of it.
2026-03-01 13:55:30 +01:00
Mike Yuan abffc0ef43 process-util: leave actual log fd closing to close_all_fds() if the latter will be done anyways 2026-03-01 13:18:19 +01:00
Ronan Pigott ac4a7a66bd zsh: add userdbctl completion 2026-03-01 10:26:15 +00:00
Weixie Cui 4980bd05b1 fix: check error with -ENOMEDIUM not ENOMEDIUM
Signed-off-by: Weixie Cui <cuiweixie@gmail.com>
2026-03-01 10:24:45 +00:00
Lennart Poettering d423ec258c nss-systemd,strv: use a common definition of a non-NULL but empty strv
Follow-up for: 239903d44c
2026-03-01 08:51:14 +01:00
Mike Yuan 8df624bfdd sd-varlink: add missing space 2026-02-28 12:01:06 +01:00
Mike Yuan 7982acff82 shared/pager: do not wait for process again after FORK_WAIT
Follow-up for fbd276cb86

Fixes #40873
2026-02-28 12:00:52 +01:00
Mike Yuan 04b3c2d199 tmpfiles: minor logging fixes (#40875) 2026-02-28 11:48:43 +01:00
Lennart Poettering da6162ecff NEWS: add various more features added in v260, and introduce more sections 2026-02-27 23:57:17 +01:00
Luca Boccassi 92d302570e Translations update from Fedora Weblate (#40876)
Translations update from [Fedora
Weblate](https://translate.fedoraproject.org) for
[systemd/main](https://translate.fedoraproject.org/projects/systemd/main/).



Current translation status:

![Weblate translation
status](https://translate.fedoraproject.org/widget/systemd/main/horizontal-auto.svg)
2026-02-27 17:27:30 +00:00
lumingzh 037dac9236 po: Translated using Weblate (Chinese (Simplified) (zh_CN))
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: lumingzh <lumingzh@qq.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main
2026-02-27 16:58:42 +00:00
김인수 dee7df17e9 po: Translated using Weblate (Korean)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: 김인수 <simmon@nplob.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ko/
Translation: systemd/main
2026-02-27 16:58:42 +00:00
Léane GRASSER be935ed628 po: Translated using Weblate (French)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Léane GRASSER <leane.grasser@proton.me>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/fr/
Translation: systemd/main
2026-02-27 16:58:42 +00:00
Efstathios Iosifidis c9954f682b po: Translated using Weblate (Greek)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Efstathios Iosifidis <eiosifidis@yandex.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/el/
Translation: systemd/main
2026-02-27 16:58:41 +00:00
Mike Yuan 476d0d7643 tmpfiles: downgrade log level for non-existent symlink target
I'm seeing a *lot* of noise induced by missing varlink sockets
under /run/host/ after 3363693935.
2026-02-27 17:11:41 +01:00
Mike Yuan b1c6bcf949 tmpfiles: fix doubled "/" in root + path logging 2026-02-27 17:07:43 +01:00
Vitaly Kuznetsov 4883ef8aae cryptsetup-tokens: Print tpm2-primary-alg: only when it is known
When 'tpm2-primary-alg' is missing in LUKS JSON token, the output of
'cryptsetup luksDump' is always:

	tpm2-primary-alg: ecc

because tpm2_parse_luks2_json() returns the default (TPM2_ALG_ECC). This can be
misleading and wrong. Make tpm2_parse_luks2_json() return the reality and move
the default to tpm2_unseal().
2026-02-27 14:22:22 +01:00
Pontus Lundkvist 352bb934fe mountpoint-util: remove duplicate check in fstype_is_api_vfs()
devtmpfs is part of the @basic-api filesystem-set
2026-02-27 14:10:27 +01:00
Pontus Lundkvist d4acc09d9d mountpoint-util: add exempt for overlay in fstype_is_blockdev_backed()
This allows `systemd-mount` to be used with --type overlay
2026-02-27 14:06:09 +01:00
Vitaly Kuznetsov 295affa3f7 cryptenroll: Save primary algorithm type to the LUKS token
'tpm2-primary-alg' field is currently unset in LUKS JSON token both for the
case when SRK was used for enrolling (--tpm2-device-key=) and for the case when
SRK was obtained/generated (--tpm2-device=). While this information is not
really needed for unsealing (the sealed object itself has key type in it), it
may be convenient to see key type in e.g. 'cryptsetup luksDump' in the
situations where key type matters. Since 'tpm2-primary-alg' is already defined,
just set it properly in all cases.
2026-02-27 14:01:10 +01:00
Mike Yuan 0dbd116351 shared/dropin: use set_contains() where appropriate 2026-02-27 08:50:37 +01:00
noxiouz 3d9191cd5c shared: fix sysext ImageType IDL missing mstack value, add enum IDL test
Add the missing 'mstack' value to the ImageType enum in the
io.systemd.sysext Varlink IDL — image_type_table in discover-image.c
already defines IMAGE_MSTACK = "mstack" but it was absent from the IDL.

Export vl_type_ImageType so the test can reference it, and add
TEST_IDL_ENUM(ImageType, ...) to the enums_idl test to catch
similar regressions in the future.
2026-02-27 08:49:54 +01:00
noxiouz 37b8cd71cd shared: fix comment typos in Udev and AskPassword Varlink IDL 2026-02-27 08:49:21 +01:00
noxiouz 54796ea3b2 mountfsd: include imageName in MountImage Varlink reply 2026-02-27 08:48:48 +01:00
noxiouz c22a131e74 import: fix AlreadyInProgress Varlink error missing remote field
The handler sends the remote URL as a parameter via sd_varlink_errorbo()
but the IDL declared the error with no fields, making the payload
undiscoverable via introspection.
2026-02-27 08:48:25 +01:00
noxiouz 56d44e8a02 hostname: fix OperatingSystemImageID/Version Varlink IDL
Both fields are populated from IMAGE_ID/IMAGE_VERSION in os-release,
which are plain strings.

Fix typo in include.
2026-02-27 04:09:15 +01:00
Luca Boccassi 231f2bcd40 tpm2-setup: make NV index space exhaustion issues more discoverable (#40841) 2026-02-26 23:52:28 +00:00
Christopher Cooper e3a4f8d804 NEWS: fix manpage section for os-release 2026-02-26 20:13:15 +00:00
Luca Boccassi 783ee9d60d Small hwdb cleanups (#40854) 2026-02-26 20:12:47 +00:00
Zbigniew Jędrzejewski-Szmek 62338aeadf hwdb: use more modern python syntax in one more place 2026-02-26 19:02:03 +01:00
Zbigniew Jędrzejewski-Szmek 6c17dfa5c3 hwdb: fix typos reported by Copilot, reword comment 2026-02-26 19:01:45 +01:00
Zbigniew Jędrzejewski-Szmek d0a4c607ad hwdb: drop trailing whitespace
Fixup for f6f695ba5a and
774e805959.
2026-02-26 18:12:03 +01:00
Zbigniew Jędrzejewski-Szmek 60c2448096 Fixes for yeswehack reports (#40840) 2026-02-26 17:55:52 +01:00
Luca Boccassi 0d7c5fa4a8 Translations update from Fedora Weblate (#40842)
Translations update from [Fedora
Weblate](https://translate.fedoraproject.org) for
[systemd/main](https://translate.fedoraproject.org/projects/systemd/main/).



Current translation status:

![Weblate translation
status](https://translate.fedoraproject.org/widget/systemd/main/horizontal-auto.svg)
2026-02-26 14:47:39 +00:00
joo es 4be5de8290 po: Translated using Weblate (Arabic)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: joo es <jonnyse@users.noreply.translate.fedoraproject.org>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ar/
Translation: systemd/main
2026-02-26 13:58:31 +00:00
Daniel Nylander 25ee7ec62d po: Translated using Weblate (Swedish)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Daniel Nylander <po@danielnylander.se>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/sv/
Translation: systemd/main
2026-02-26 13:58:31 +00:00
Américo Monteiro 3865da9a0d po: Translated using Weblate (Portuguese)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Américo Monteiro <a_monteiro@gmx.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/pt/
Translation: systemd/main
2026-02-26 13:58:30 +00:00
Yuri Chornoivan fb8051a091 po: Translated using Weblate (Ukrainian)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Yuri Chornoivan <yurchor@ukr.net>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/uk/
Translation: systemd/main
2026-02-26 13:58:30 +00:00
Baurzhan Muftakhidinov f5647f6b69 po: Translated using Weblate (Kazakh)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Baurzhan Muftakhidinov <baurthefirst@gmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/kk/
Translation: systemd/main
2026-02-26 13:58:30 +00:00
Oğuz Ersen a9bba2cc6c po: Translated using Weblate (Turkish)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Oğuz Ersen <oguz@ersen.moe>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/tr/
Translation: systemd/main
2026-02-26 13:58:29 +00:00
Temuri Doghonadze 07f1fb3c3d po: Translated using Weblate (Georgian)
Currently translated at 100.0% (266 of 266 strings)

Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/ka/
Translation: systemd/main
2026-02-26 13:58:29 +00:00
Mike Yuan efa6ba2ab6 core: validate input cgroup path more prudently 2026-02-26 14:23:25 +01:00
Mike Yuan 42aee39107 core/cgroup: avoid one unnecessary strjoina() 2026-02-26 14:23:23 +01:00
Mike Yuan 679e738bf4 core/dbus-unit: query sender uid only once, validate unit uid early
Follow-up for 05f5156ad1
2026-02-26 14:23:23 +01:00
Mike Yuan 4e6e3b8707 sd-json: fix off-by-one issue when updating parent for array elements
Follow-up for 8525bb369a
2026-02-26 14:23:12 +01:00