Ludwig Nussel
a9c3cc8db0
systemctl: add shutdown --show option
...
Shows the scheduled shutdown action and time if there's one.
2021-12-09 15:07:40 +01:00
Yu Watanabe
b55093ce88
network: dhcp: make IPServiceType= accept "none" to disable tos in the outgoing packet
...
Fixes #9874 .
2021-12-09 15:06:20 +01:00
Zbigniew Jędrzejewski-Szmek
93485626a1
Merge pull request #21700 from keszybz/v250-hwdb
...
Update hwdb
2021-12-09 15:05:19 +01:00
Daan De Meyer
808b23ecf6
mkosi: Build Fedora 35 images
2021-12-09 15:05:01 +01:00
Yu Watanabe
71df07760e
network: sd-ipv4ll and sd-ipv4acd only support ethernet interfaces
...
The deny list in link_ipv4ll_enabled() are mostly non-ethernet type,
whose link->iftype are not ARPHRD_ETHER, e.g. ARPHRD_NONE for bareudp,
ARPHRD_WIREGURAD for wireguard, ARPHRD_GRE for gre, and so on.
Only the exception is vrf, which is ARPHRD_ETHER, but seems not to
support ARP.
2021-12-09 15:04:43 +01:00
Zbigniew Jędrzejewski-Szmek
014e7dffd4
Merge pull request #21697 from keszybz/run-more-inodes
...
Allow more inodes in /dev and /tmp
2021-12-09 15:04:16 +01:00
Zbigniew Jędrzejewski-Szmek
2b3a481f8d
Merge pull request #21696 from keszybz/openssl-suppress-warnings
...
Suppress openssl-3.0 warnings
2021-12-09 13:25:14 +01:00
Zbigniew Jędrzejewski-Szmek
6abe882bae
meson: add missing final newline in jinja2 outputs
...
I think this might be caused by trim_blocks=True. We were
missing the final newline everywhere.
2021-12-09 12:46:19 +01:00
Yu Watanabe
01081e2eab
Merge pull request #21692 from yuwata/network-wireguard-allow-to-start-ndisc-or-radv
...
network: wireguard: allow to start ndisc or radv
2021-12-09 19:53:58 +09:00
Yu Watanabe
63b7d34716
NEWS: add more entries for v250
2021-12-09 19:40:38 +09:00
Daan De Meyer
6959a051cf
NEWS file additions
2021-12-09 11:30:00 +01:00
Zbigniew Jędrzejewski-Szmek
cac372a801
Bump the max number of inodes for /tmp to a million too
...
Fixes #21626 . (The bug report talks about /run, but the issue is actually with
/tmp.) People use /tmp for various things that fit in memory, e.g. unpacking
packages, and 400k is not much. Let's raise is a bit.
2021-12-09 11:27:58 +01:00
Zbigniew Jędrzejewski-Szmek
a420bbb6e2
hwdb: update for v250
...
As usual, there are mostly additions of new entries, and some spelling
correction and company renames, no big removals.
2021-12-09 11:05:15 +01:00
Zbigniew Jędrzejewski-Szmek
2fc5b264c5
hwdb: ninja -C build update-hwdb-autosuspend
2021-12-09 11:00:56 +01:00
Zbigniew Jędrzejewski-Szmek
6a4457fd9d
Revert "ci: temporarily set -Wno-deprecated-declarations in Packit"
...
This reverts commit 684e0a5605 .
The warnigs are not suppressed in the C code.
2021-12-09 10:27:18 +01:00
Zbigniew Jędrzejewski-Szmek
acfdfb8620
openssl: supress warnings about functions deprecated by openssl 3.0
...
We get warnings for RSA_free(), EC_KEY_free(), EC_KEY_new(), etc. Those
functions are now deprecated and we're supposed to use the new "EVP API" that
is all the rage in openssl 3.0.
With some effort I converted dnssec_rsa_verify_raw() to use the new API. The
code is significantly longer and, if anything, less readable. The EC code is
more complicated and I assume that the EVP API version will be even more
complex. It is possiblet that I'm missing some way to call the new functions in
a better way, but the documentation is abysmal, so it's really hard to figure
out the best way. Of course there are almost no examples, and the ones that are
there are not terribly useful and are also stubs that don't do interesting
things, don't implement error handling, or memory cleanup. I'll submit my
conversion draft as a separate PR. Maybe somebody who knows openssl better
will pick it up and write a proper solution.
For now, let's just use the existing code, but suppress the warnings. The
new version just came out, so it's unlikely that the deprecated functions will
be removed any time soon.
Fixes #21666 .
2021-12-09 10:27:18 +01:00
Zbigniew Jędrzejewski-Szmek
e98d0662ff
Bump the max number of inodes for /dev to a million
...
4c733d3046 shows that 95k can be used easily on a large
system. Let's bump it up even more so that we have some "breathing room".
2021-12-09 10:09:17 +01:00
Zbigniew Jędrzejewski-Szmek
0c62d52fe6
Merge pull request #21691 from yuwata/network-route-prefix-length
...
network: route: several tiny cleanups
2021-12-09 09:24:36 +01:00
Yu Watanabe
ab8a8a4e77
libsystemd-network: ignore -ENETDOWN or friends in recv()
...
And this makes most errors in io events ignored.
2021-12-09 09:10:51 +01:00
Yu Watanabe
d2d602f4b4
network: refuse empty or numeric route table names
2021-12-09 09:06:41 +01:00
Yu Watanabe
283f7c9872
doc: fix typo
2021-12-09 08:50:19 +01:00
Yu Watanabe
e096cab2f3
network: wireguard: allow to run NDisc and RADV when IPv6LL address is manually configured
...
Fixes #17380 .
2021-12-09 15:57:47 +09:00
Yu Watanabe
78ef25a5aa
network: address: add scope in debugging logs
2021-12-09 15:28:06 +09:00
Yu Watanabe
20228b6d96
network: address: also adjust scope when address is link local address
...
But again only when Scope= is not explicitly specified.
2021-12-09 15:25:19 +09:00
Yu Watanabe
8f8dc32cc9
network: address: do not adjust user specified scope
...
This reverts cd1caf30c0 .
I cannot remember why such change was made.
At least, the kernel does not refuse to set IPv4 localhost address with
non-host scope, e.g. global.
2021-12-09 15:25:05 +09:00
Yu Watanabe
72fa19239d
network: route: mask lower bits of destination or source prefix
...
Let's gracefully handle user's misconfiguration, e.g.
Destination=192.168.0.1/24
2021-12-09 07:02:59 +09:00
Yu Watanabe
e944711fba
network: json: add src address when its prefix length is non-zero
...
This should not change anything. Just for consistency with
route_set_netlink_message(), which sets RTA_SRC attribute when prefix
length is non-zero.
2021-12-09 07:02:29 +09:00
Yu Watanabe
7cf0ed03f2
network: route: show prefix length of the source in debugging logs
...
Similar fix to b489d6a26e .
2021-12-09 06:52:01 +09:00
Дамјан Георгиевски
12caf72716
bootctl: optionally install .signed efi file
...
if /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed exists
install that instead of /usr/lib/systemd/boot/efi/systemd-bootx64.efi
the idea is that SecureBoot tooling can create the efi.signed file
whenever /usr/lib/systemd/boot/efi/systemd-bootx64.efi from the package
is updated.
2021-12-08 22:21:34 +01:00
Yu Watanabe
0264c60d44
Merge pull request #21686 from yuwata/network-wlan-fix-reconfigure
...
network: do not reconfigure wireless interface when previously not connected to any APs
2021-12-09 05:57:12 +09:00
Daan De Meyer
8097f80500
Merge pull request #21637 from nabijaczleweli/EBA
...
kernel-install: export BOOT_ROOT instead of hacking it in hooks, note KERNEL_INSTALL_* ABI
2021-12-08 20:15:38 +00:00
Yu Watanabe
c923992c5c
Merge pull request #21678 from keszybz/sysusers-work
...
Make it easier to figure out what sysusers is doing and why
2021-12-09 04:35:50 +09:00
Yu Watanabe
d9910948eb
network: do not reconfigure wireless interface when previously not connected to any APs
...
Follow-up for 6706ce2fd2 .
Fixes #21685 .
2021-12-09 03:04:24 +09:00
Yu Watanabe
da94e4ddf5
network: wifi: ssid may be NULL
...
This fixes the following log message:
systemd-networkd[888]: wlan0: nl80211: received new_interface(7) message: iftype=station, ssid=(null)
2021-12-09 02:43:29 +09:00
Luca Boccassi
c65a0cf62f
Merge pull request #21667 from yuwata/resolve-do-not-re-read-settings-from-networkd-when-unmodified
...
resolve: do not re-read settings from networkd when link state file is unmodified
2021-12-08 13:28:15 +00:00
Daan De Meyer
ecfa85e9e1
docs: Clarify that the fd store is discarded when a service is stopped
2021-12-08 13:27:28 +00:00
Frantisek Sumsal
52e4ac691e
Merge pull request #21676 from keszybz/rename-variables-to-make-codeql-happy
...
Rename variables to make codeql happy
2021-12-08 13:24:17 +00:00
наб
a96fc72dbf
journal: succes[s]fully typo
...
As found by fossies codespell:
https://fossies.org/linux/test/systemd-main.bb916f3.211208.tar.gz/codespell.html
2021-12-08 13:23:56 +00:00
наб
b51e71b2d2
kernel-install: note $KERNEL_INSTALL_{MACHINE_ID,BOOT_ROOT}= ABI
2021-12-08 13:44:27 +01:00
наб
9e82a74cb0
kernel-install: export $BOOT_ROOT and use it in downstreams
...
The previous approach, to strip "$MACHINE_ID/$KERNEL_VERSION" from the
end, is pretty bad and encourages this for users, which makes them
inflexible to this being modified locally
2021-12-08 13:43:19 +01:00
Frantisek Sumsal
efea45f19c
ci: ignore FIXME alerts in the CodeQL Action
...
We already track them in LGTM and it unnecessarily clutters the Security
page.
2021-12-08 12:42:28 +00:00
Zbigniew Jędrzejewski-Szmek
5374bc7cb4
sysusers: raise level of message about UID/GID being already used
...
It can be quite important that a different value was used, so let's
log this by default.
2021-12-08 11:47:29 +01:00
Zbigniew Jędrzejewski-Szmek
9a5af4b7ac
sysusers: improve message about conflicting entries
...
Without any markup, the sentence could be quite confusing:
g user 55
g user 56
→
"Two or more conflicting lines for user configured"
It also wasn't clear which line is ignored.
Inspired by https://github.com/systemd/systemd/pull/21156 .
2021-12-08 11:47:15 +01:00
Zbigniew Jędrzejewski-Szmek
64fe10957b
sysusers: add --dry-run
2021-12-08 11:46:33 +01:00
Zbigniew Jędrzejewski-Szmek
98167876a0
sysusers: use ordered_hashmap_isempty()
2021-12-08 11:46:33 +01:00
Yu Watanabe
bb916f350a
network: call link_check_ready() when all stacked netdevs are created
...
Follow-up for 879377cad5 .
Otherwise, the underlying interface may stuck in configuring state.
2021-12-08 18:40:13 +09:00
Yu Watanabe
214db8eb5d
resolve: do not re-read settings from networkd if link state file is unmodified
...
If many interface creation/deletion occurs continuously, then resolved
becomes easily busy. Let's slightly optimize the event triggered by
sd-network.
2021-12-08 18:34:08 +09:00
Yu Watanabe
8e0bacab6e
sd-network: introduce sd_network_link_get_stat()
2021-12-08 18:34:04 +09:00
Yu Watanabe
f4af5f0010
sd-network: drop unnecessary +1 for buffer size
2021-12-08 18:33:35 +09:00
Daan De Meyer
9872fe44cb
Merge pull request #21527 from vcaputo/journal-file-mfd-centric
...
journal-file: get rid of JournalFile.mmap
2021-12-08 09:26:53 +00:00