Commit Graph
75870 Commits
Author SHA1 Message Date
Lennart Poettering 88a26e1049 main: generate warning when we cannot reset caps
Follow-up for: #32937
2024-08-22 18:21:56 +02:00
Lennart Poettering b004393d70 core: rename original_ambient_set → saved_ambient_set
We call similar other fields in main.c (notably: rlimit stuff, env vars) "saved",
rather than "original". Hence stick to that kind of naming here too.

Follow-up for: #32937
2024-08-22 18:21:56 +02:00
Daan De Meyer f134a79ff8 mkosi: Update to latest
Should fix the Fedora Rawhide CI failure.
2024-08-22 18:17:07 +02:00
Lennart Poettering d1b04f47e3 man: document .membership files that nss-systemd processes
This has been a glaring omission the docs: when people create
.user/.group/.user-privileged/.group-privileged drop-in files, they
should also create matching .membership files.
2024-08-22 15:16:00 +02:00
Yu Watanabe 80c9c81779 Merge pull request #34051 from rpigott/resolved-demote-fallback
resolved: demote only the fallback servers in the global scope
2024-08-22 20:21:33 +09:00
Daan De Meyer 242bdb6e80 Merge pull request #34033 from DaanDeMeyer/mkosi-cage
mkosi: Update to latest
2024-08-22 12:57:07 +02:00
Daan De Meyer 2dc99fdadb mkosi: Update to latest 2024-08-22 11:39:02 +02:00
Lennart Poettering a7a62c18cb Merge pull request #34076 from yuwata/polkit-message
polkit: add missing period in polkit messages
2024-08-22 10:56:53 +02:00
Daan De Meyer bc07b026f0 mkosi: Improve formatting 2024-08-22 09:50:15 +02:00
Yu Watanabe 04de947eea Merge pull request #34079 from AdrianVovk/sysupdate-fixups
systemd-sysupdated follow-ups
2024-08-22 13:59:55 +09:00
Adrian Vovk d470a6c227 sysupdate: man: Cleanup sections about flags 2024-08-21 22:40:18 -04:00
Adrian Vovk 31fc2fb039 sysupdate: Simplify sysupdate_run_simple callsite
Allows the caller to optionally pass in a target, instead of making
everyone call target_get_argument at the call site.
2024-08-21 22:33:18 -04:00
Adrian Vovk b1bcaa0eb1 sysupdated: Verify inputs more rigorously
Also return better errors
2024-08-21 22:33:17 -04:00
Adrian Vovk e0081f18a0 sysupdated: Fixup redundant constant name
SD_ stands for systemd, so SD_SYSTEMD_* is SYSTEMD_SYSTEMD_*
2024-08-21 22:33:16 -04:00
Adrian Vovk 5256326261 sysupdated: Fixup minor formatting issues 2024-08-21 22:33:14 -04:00
Yu Watanabe 595bd7083d labeler: add more rules 2024-08-22 01:38:51 +02:00
Yu Watanabe 00ed8c6dfa Merge pull request #34072 from yuwata/networkd-routing-policy-rule-follow-up
network/routing-policy-rule: follow up for recent change
2024-08-22 07:17:10 +09:00
Yu Watanabe 20a5465640 po: update Japanese translations 2024-08-22 07:10:47 +09:00
Yu Watanabe cd67b61ff1 polkit: add missing period in messages 2024-08-22 07:08:05 +09:00
Yu Watanabe e1c9c44e95 po: update Japanese translations 2024-08-22 05:03:24 +09:00
Adrian Vovk 38d7b8d3ff Merge pull request #32363 from CodethinkLabs/sysupdate-dbus
sysupdate: Implement dbus service
2024-08-21 15:35:34 -04:00
Yu Watanabe 2ddf5bdece Merge pull request #34053 from YHNdnzj/follow-ups
Two follow-ups for recent PRs
2024-08-22 04:34:11 +09:00
Alyssa Ross 0452779b00 bootctl: don't load etc/machine-info from cwd
arg_root defaults to null, so if --root isn't given, this would try reading
etc/machine-info from the current working directory, which is likely to fail.

Fixes: 77db9ef2ab ("boot: Make sure we take --root into account everywhere.")
2024-08-22 04:30:50 +09:00
A. Wilcox b9d326c568 man: Ensure notify example includes <string.h>
This ensures that memcpy and strerror are defined.  This is especially
important with GCC 14 as implicit function declarations are now an error.
2024-08-22 04:26:32 +09:00
Yu Watanabe 26823f980d hwdb: rename hwdb_bin_paths -> HWDB_BIN_PATHS
We usually use upper letters for constant definitions.
2024-08-22 04:26:07 +09:00
Ivan Shapovalov b73c86c695 core/exec-invoke: document calling setpriority() after sched_setattr()
Fixes: 711a157738 ("core/exec-invoke: call setpriority() after sched_setattr()")
2024-08-22 04:25:29 +09:00
Yu Watanabe cd2a1e2df9 test-network: also test routing policy rules are configured as expected after reconfiguration
For issue #34068.
2024-08-22 04:21:02 +09:00
Yu Watanabe 462be8c957 test-network: find routing policy rule by priority
We usually configure a test rule with a unique priority. Hence, finding
rule by priority reduces the lines of output, and we can debug easily.

Also print short comments on check. That's helpful when the check is
called several times.
2024-08-22 04:16:12 +09:00
Yu Watanabe 04d10fdb1d network/routing-policy-rule: use address family of existing rule when judging if existing rule can be updated
Otherwise, the other RoutingPolicyRule object may not have a valid
address family yet, and the existing rule may be wrongly handled as
that it is not requested by any interface, and it may be removed.

Follow-up for 727235006a.
Fixes #34068.
2024-08-22 04:11:52 +09:00
Ronan Pigott d229e282d6 resolved: demote the fallback dns servers
This softens the behavior originally introduced in eded61e410 to apply
only to the fallback dns servers.

The intent is that the global FallbackDNS (instead of DNS) can now be
used in conjunction with the per-link dns, providing a fallback behavior
without introducing a scope overlap.

References: eded61e410 (resolved: demote the global unicast scope, 2024-08-19)
2024-08-21 10:27:07 -07:00
Ronan Pigott 760fa203c2 resolved: use the fallback servers when no default dns is configured
This expands the role of fallback servers so they are applied not only
when there are no dns servers configured, but when all the configured
dns servers are configured only for non-default-route links.
2024-08-21 09:51:42 -07:00
Ronan Pigott 73e566bf16 resolved: introduce link_set_default_route 2024-08-21 09:51:42 -07:00
Ronan Pigott c00157ddc2 resolved: introduce dns_server_is_fallback 2024-08-21 09:51:42 -07:00
Yu Watanabe a3e4dc6762 Merge pull request #34055 from whot/wip/eviocrevoke-warnings
Update warnings for failed EVIOCREVOKE invocations
2024-08-22 01:34:35 +09:00
Yu Watanabe 2276483a7d Merge pull request #34054 from yuwata/network-failed-state
network: several fixlets for reconfiguration after entered failed state
2024-08-22 01:22:29 +09:00
Yu Watanabe 1bf49198b5 networkctl: split networkctl.c into small pieces
No functional change, just refactoring.
2024-08-22 01:12:39 +09:00
Daan De Meyer 148b16cb2a Merge pull request #33498 from DaanDeMeyer/btrfs
repart: Allow Subvolumes= when running offline
2024-08-21 17:19:09 +02:00
Ronan Pigott bebec88653 Revert "resolved: demote the global unicast scope"
This commit may have been a breaking change for sd-resolved foreign
resolv.conf mode, where a legacy network management daemon directly
modifies resolv.conf and sd-resolved consumes that.

This reverts commit eded61e410.
2024-08-21 06:59:22 -07:00
Mike Yuan e06c5be29a process-util: always retry with pidfd_spawn() w/o cgroup first
Follow-up for 7ac58157ca

With the mentioned commit, iff E2BIG we'd retry pidfd_spawn()
with POSIX_SPAWN_SETCGROUP disabled. However, the same strategy
should actually apply to EOPNOTSUPP/ENOSYS/EPERM too -
they can mean two things here: no clone3() or no CLONE_PIDFD.
Therefore, let's first try clone() + CLONE_PIDFD, and fall further back
to plain clone() (posix_spawn()) only as last resort. Plus, record
the fact so that we don't unnecessarily retry every single time
if CLONE_PIDFD is the one that's unavailable.
2024-08-21 15:27:57 +02:00
Mike Yuan df99a8ef3d process-util: check the flag instead of 'cgroup' param
We might skip CLONE_INTO_CGROUP wholly if not supported.
2024-08-21 15:17:05 +02:00
Mike Yuan 988ca0953e man: use standard-options for --no-ask-password everywhere 2024-08-21 15:17:02 +02:00
Daan De Meyer 1ce69e0661 Revert "cgroup-util: Don't try to open pidfd for kernel threads"
The kernel patch was reverted so let's try again to open pidfds
for kernel threads.

This reverts commit ead48ec35c.
2024-08-21 14:32:54 +02:00
Luca Boccassi bdf75118ba Merge pull request #34049 from yuwata/network-routing-policy-rule
network: further rework for routing policy rule
2024-08-21 12:46:37 +02:00
Daan De Meyer eca3d07dd1 repart: Allow Subvolumes= and DefaultSubvolume= when running offline
mkfs.btrfs has recently learned new options --subvol and --default-subvol
so let's stop failing when Subvolumes= and DefaultSubvolume= are used offline
and use the new --subvol and --default-subvol options instead to create subvolumes
in the generated root filesystem without root privileges or loop devices.
2024-08-21 11:29:47 +02:00
Daan De Meyer f75641b772 repart: Don't add same dir to MakeDirectories= or Subvolumes= twice 2024-08-21 11:29:47 +02:00
Daan De Meyer 531c6506c2 repart: Constify partition_needs_populate() 2024-08-21 11:29:47 +02:00
Daan De Meyer 9fb5d912f5 repart: Use loop_device_error_is_fatal() in one more place 2024-08-21 11:29:47 +02:00
Tom Coldrick b8b38e3da6 sysupdate: Add integration test for updatectl updates 2024-08-21 09:31:41 +01:00
ec15bb71c2 sysupdate: Implement updatectl
This is the command-line tool to manage systemd-sysudpated

Co-authored-by: Tom Coldrick <thomas.coldrick@codethink.co.uk>
Co-authored-by: Abderrahim Kitouni <abderrahim.kitouni@codethink.co.uk>
2024-08-21 09:31:41 +01:00
bf2c741fd7 sysupdate: Implement systemd-sysupdated dbus service
Co-authored-by: Tom Coldrick <thomas.coldrick@codethink.co.uk>
Co-authored-by: Abderrahim Kitouni <abderrahim.kitouni@codethink.co.uk>
2024-08-21 09:31:41 +01:00