SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
65,868 Commits 2 Branches 1 Tag
eed3d044cd8b6bba62c49363a93fe3920c7d9518
Commit Graph
65868 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Luca Boccassi eed3d044cd meson: bump versions for v254-rc1 2023-07-06 20:57:13 +01:00
Luca Boccassi 8392979e49 Update translation files 2023-07-06 20:57:13 +01:00
Luca Boccassi 6f19cce983 NEWS: update contributors list 2023-07-06 20:38:52 +01:00
Luca Boccassi 305bea82c1 Update NEWS for latest changes 2023-07-06 20:37:56 +01:00
Luca Boccassi 3e938f1df1 NEWS: rearrange deprecation notices from more imminent to less imminent 2023-07-06 20:37:56 +01:00
Luca Boccassi b2deaaf01b Merge pull request #27584 from rphibel/add-restartquick-option 
service: add new RestartMode option
 2023-07-06 20:37:31 +01:00
Luca Boccassi 25cae3e7bb Merge pull request #20425 from Blarse/passwdqc-pr 
Add passwdqc support
 2023-07-06 20:36:04 +01:00
Yu Watanabe 535134bc51 network,ndisc: use correct free function for captive portal 
Fixes memleak introduced by 64de00c49f.
Fixes #28277.
 2023-07-06 20:30:22 +01:00
Luca Boccassi f00022eb86 Merge pull request #28242 from berrange/cond-sec-cvm 
Detect and expose the confidential virtualization technology in various places
 2023-07-06 19:14:26 +01:00
Luca Boccassi b9b0f338be Merge pull request #28274 from DaanDeMeyer/dissect-root 
dissect: Allow a few verbs to operate on directories as well as image files
 2023-07-06 14:41:48 +01:00
Richard Phibel 2a39b91459 service: fix for RestartMode=direct option 
With the fix done in PR28215, the unit restart job is created with type JOB_START.
Because of that, it is not properly merged anymore with the old one: the
merged job has state JOB_RUNNING. It should have state JOB_WAITING.

I think that the old job is not cleaned up because we don't go through the failed state.

With this fix, the merged job is properly created with state JOB_WAITING.
 2023-07-06 14:35:33 +02:00
Richard Phibel e568fea9fc service: add new RestartMode option 
When this option is set to direct, the service restarts without entering a failed
state. Dependent units are not notified of transitory failure.

This is useful for the following use case:

We have a target with Requires=my-service, After=my-service.
my-service.service is a oneshot service and has Restart=on-failure in
its definition.

my-service.service can get stuck for various reasons and time out, in
which case it is restarted. Currently, when it fails the first time, the
target fails, even though my-service is restarted.

The behavior we're looking for is that until my-service is not restarted
anymore, the target stays pending waiting for my-service.service to
start successfully or fail without being restarted anymore.
 2023-07-06 14:33:52 +02:00
Daniel P. Berrangé 6e2e83b487 udev: add 'conf-virt' constant for confidential virtualization tech 
Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 0895124572 core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators 
This reports the confidential virtualization type that was detected

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 024469ddb9 core: log detected confidential virtualization type 
Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 1257274ad8 dbus: add 'ConfidentialVirtualization' property to manager object 
This property reports whether the system is running inside a confidential
virtual machine.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 95d043b159 unit: add "cvm" option for ConditionSecurity 
The "cvm" flag indicates whether the OS is running inside a confidential
virtual machine.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé f460fec915 detect-virt: add --list-cvm option 
The --list-cvm option reports the known types of confidential virtualization
technology that can be detected.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé 5e0c61f64d detect-virt: add --cvm option 
The --cvm option detects whether the OS is running inside a confidential
virtual machine.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Daniel P. Berrangé a577a61625 add APIs for detecting confidential virtualization 
This code uses various CPUID checks to be able to identify

 * AMD SEV
 * AMD SEV-ES
 * AMD SEV-SNP
 * Intel TDX

On HyperV/Azure, it has special checks for detecting SEV-SNP
since the normal CPUID is blocked.

Related: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
 2023-07-06 12:20:04 +01:00
Egor IgnatovandDmitry V. Levin 1d8aae4327 shared: add libpasswdqc support 
Co-authored-by: Dmitry V. Levin <ldv@altlinux.org>
Resolves: #15055
 2023-07-06 10:59:41 +00:00
Joerg Behrmann 5bc9ea070f treewide: fix "an" before consonant U sounds 
The article "a" goes before consonant sounds and "an" goes before vowel
sounds. This commit changes an to a for UKI, UDP, UTF-8, URL, UUID, U-Label, UI
and USB, since they start with the sound /ˌjuː/.
 2023-07-06 11:59:41 +01:00
Egor IgnatovandDmitry V. Levin d34b1823ca shared: add password quality check abstraction layer to support both pwquality and passwdqc 
Co-authored-by: Dmitry V. Levin <ldv@altlinux.org>
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 6377f57fa7 homed: change user_record_quality_check_password to use quality_check_password 
With this change, the only direct users of libpwquality functions
are those defined in pwquality-util.
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin bc0ef0e2c0 pwquality: add old password argument to quality_check_password 
This would allow to use quality_check_password() in
user_record_quality_check_password() which still uses
sym_pwquality_check() directly.
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 0351d560a2 pwquality: do not log password suggestions 
As logging password suggestions might leak sensitive information,
print it instead.

Suggested-by: Yu Watanabe <watanabe.yu+github@gmail.com>
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 7fc3f9c032 pwquality: fix quality_check_password return value 
quality_check_password() used to return the same value 0 in two
different cases: when pwq_allocate_context() failed with a
ERRNO_IS_NOT_SUPPORTED() code, and when pwquality_check() rejected the
password.  As result, users of quality_check_password() used to report
password weakness also in case when the underlying library was not
available.

Fix this by changing quality_check_password() to forward the
ERRNO_IS_NOT_SUPPORTED() code to its callers, and change the callers
to handle this case gracefully.
 2023-07-06 10:59:41 +00:00
Dmitry V. Levin 29dd2e253c pwquality: fix use of ERRNO_IS_NOT_SUPPORTED 
Given that ERRNO_IS_*() also match positive values, call
ERRNO_IS_NOT_SUPPORTED() only if the value returned by
pwq_allocate_context() is negative.
 2023-07-06 10:59:41 +00:00
Andrew Baxter 1b91662ca0 Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) 
* Hwdb: Add Sanwa Direct 400-MA128 external trackpad

```
$ udevadm info /dev/input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse
P: /devices/pci0000:00/0000:00:07.1/0000:28:00.3/usb5/5-1/5-1.4/5-1.4.4/5-1.4.4.1/5-1.4.4.1:1.1/0003:258A:0501.0097/input/input256/event15
M: event15
R: 15
U: input
D: c 13:79
N: input/event15
L: 0
S: input/by-id/usb-SINO_WEALTH_USB_TOUCHPAD-if01-event-mouse
S: input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse
E: DEVPATH=/devices/pci0000:00/0000:00:07.1/0000:28:00.3/usb5/5-1/5-1.4/5-1.4.4/5-1.4.4.1/5-1.4.4.1:1.1/0003:258A:0501.0097/input/input256/event15
E: DEVNAME=/dev/input/event15
E: MAJOR=13
E: MINOR=79
E: SUBSYSTEM=input
E: USEC_INITIALIZED=3436890430330
E: ID_INPUT=1
E: ID_INPUT_TOUCHPAD=1
E: ID_INPUT_WIDTH_MM=106
E: ID_INPUT_HEIGHT_MM=77
E: ID_BUS=usb
E: ID_MODEL=USB_TOUCHPAD
E: ID_MODEL_ENC=USB\x20TOUCHPAD
E: ID_MODEL_ID=0501
E: ID_SERIAL=SINO_WEALTH_USB_TOUCHPAD
E: ID_VENDOR=SINO_WEALTH
E: ID_VENDOR_ENC=SINO\x20WEALTH
E: ID_VENDOR_ID=258a
E: ID_REVISION=0521
E: ID_TYPE=hid
E: ID_USB_MODEL=USB_TOUCHPAD
E: ID_USB_MODEL_ENC=USB\x20TOUCHPAD
E: ID_USB_MODEL_ID=0501
E: ID_USB_SERIAL=SINO_WEALTH_USB_TOUCHPAD
E: ID_USB_VENDOR=SINO_WEALTH
E: ID_USB_VENDOR_ENC=SINO\x20WEALTH
E: ID_USB_VENDOR_ID=258a
E: ID_USB_REVISION=0521
E: ID_USB_TYPE=hid
E: ID_USB_INTERFACES=:030101:030000:
E: ID_USB_INTERFACE_NUM=01
E: ID_USB_DRIVER=usbhid
E: ID_PATH=pci-0000:28:00.3-usb-0:1.4.4.1:1.1
E: ID_PATH_TAG=pci-0000_28_00_3-usb-0_1_4_4_1_1_1
E: ID_INPUT_TOUCHPAD_INTEGRATION=internal
E: LIBINPUT_DEVICE_GROUP=3/258a/501:usb-0000:28:00.3-1.4.4
E: DEVLINKS=/dev/input/by-id/usb-SINO_WEALTH_USB_TOUCHPAD-if01-event-mouse /dev/input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse
```
Link to product: https://www.amazon.co.jp/gp/product/B07Z5HCMFP
 2023-07-06 11:42:33 +01:00
Thomas GentyandYu Watanabe 7d06cd73c2 hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) 
Co-authored-by: Yu Watanabe <watanabe.yu+github@gmail.com>
 2023-07-06 18:39:28 +08:00
Daan De Meyer 12d58b6c74 dissect: Add --mtree-hash= option 
Let's make including hashes in the mtree output configurable to allow
speeding up the --mtree command in cases where file hashes are not
required.
 2023-07-06 12:11:45 +02:00
Daan De Meyer 2292fa1e31 dissect: Allow a few verbs to operate on directories as well as image files 
--copy-to, --copy-from, --list and --mtree are useful for image directories
as well as image files, so for those verbs, let's check if we were passed
a directory and skip all the image file setup if that's the case.
 2023-07-06 12:11:42 +02:00
Antonio Alvarez Feijoo 0a3d108f46 tpm2-util: remove unnecessary semicolon 2023-07-06 10:44:23 +01:00
Yu Watanabe efa5521be8 network/json: introduce PreferredLifetimeUSec and ValidLifetimeUSec 2023-07-06 11:41:49 +02:00
Lennart Poettering 9103278ff7 Merge pull request #28265 from yuwata/network-captive-portal-follow-ups 
network: several follow-ups for captive portal support
 2023-07-06 11:39:24 +02:00
Lennart Poettering 4ab426bf56 service: explicitly cast float to usec_t 
Let's cast these floats explicitly to usec_t, since implicit
float-to-integer casts are dangerous business, and we should underline
that there's a cast happening here.
 2023-07-06 11:21:35 +02:00
Yu Watanabe ea792cacb9 core/service: make restart delay increase more smoothly 
Suggested in https://github.com/systemd/systemd/pull/26902#issuecomment-1620400583.
 2023-07-06 11:20:13 +02:00
Lennart Poettering eade959b90 NEWS: more preparation for 254-rc1 2023-07-06 11:16:16 +02:00
Lennart Poettering a130b09513 Merge pull request #27713 from ddstreet/tpm2_replace_make_primary 
Tpm2 replace make primary
 2023-07-06 10:22:12 +02:00
Lennart Poettering e40cad1f3c Merge pull request #28243 from bluca/sbat_initrd 
ukify: enable --sbat for UKIs too
 2023-07-06 10:21:44 +02:00
Yu Watanabe 52ee8ecf07 networkctl: urlify captive portal entry 2023-07-06 14:55:58 +09:00
Yu Watanabe 62eaf8d039 test-network: drop ExecReload= in networkd.service and udevd.service 
Follow-up for 0e07cdb0e7 and
f84331539d.
 2023-07-06 14:55:58 +09:00
Yu Watanabe 2c5bca1734 network/ndisc: downgrade log level 
The failures may be critical for per-link operation, but not critical
for the service.
 2023-07-06 14:55:58 +09:00
Yu Watanabe 64de00c49f network: handle captive portal with multiple routers 
Before this patch, if a network has multiple routers and one of them
provides a captive portal, then the portal was overwritten or cleared
when another RA from another router is received.

This makes captive portals managed in the similar way as DNS servers or
DNS domains. So now captive portal can safely handled even if a network
has multiple routers.
 2023-07-06 14:55:58 +09:00
Yu Watanabe 04eaf63c66 network: update comment 2023-07-06 14:55:58 +09:00
Yu Watanabe 6341ea5467 network: introduce link_get_captive_portal() 
Then, downgrade log level of the message about mis-match of captive
portals in different protocols.
 2023-07-06 14:55:46 +09:00
Yu Watanabe 21da5178ec Merge pull request #28262 from YHNdnzj/transaction-followup 
Follow-ups for PropagatesStopTo= fix
 2023-07-06 12:55:25 +09:00
Dan Streetman 20988602ff tpm2: remove tpm2_make_primary() 
Replace use of tpm2_make_primary() with tpm2_create_loaded()
 2023-07-05 17:39:33 -04:00
Dan Streetman 98497426d6 tpm2: move local vars in tpm2_unseal() to point of use 
No functional change; cosmetic only.
 2023-07-05 17:39:18 -04:00
Dan Streetman cea525a902 tpm2: add tpm2_get_or_create_srk() 
Add function to simplify getting the TPM SRK; if one exists, it is provided,
otherwise one is created and then the new SRK provided.

This also add tpm2_create_loaded() and updates tpm2_seal() to use the new
functions instead of tpm2_make_primary().
 2023-07-05 17:39:18 -04:00