Luca Boccassi 8cceaab8f5 ukify: generate initrd policy digests for offline signing ...

When --sign-initrd-pcrs is used with --policy-digest, generate the
extra enter-initrd policy with the "initrd" policy reference. This
matches the policy produced when ukify signs with a private key.

Fixes building UKIs with offline signing (e.g.: on OBS) and using
NVPCRs.

Follow-up for f0f3687700

2026-09-03 12:55:15 +02:00

..

ac-power

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

analyze

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

ask-password

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

backlight

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

basic

Tweak the hostname-worldlist code (#43599)

2026-09-03 06:29:25 +09:00

battery-check

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

binfmt

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

bless-boot

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

boot

boot: Update aa64 hwids

2026-09-01 18:13:50 +01:00

bootctl

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

bpf

bpf-restrict-fsaccess: enforce W^X on file mappings

2026-08-31 23:33:40 +02:00

busctl

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

cgls

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

cgtop

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

clonesetup

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

core

Extend W^X memory protection mechanism for RestrictFileSystemAccess (#43511)

2026-09-01 07:12:13 +02:00

coredump

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

coverage

…

creds

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

cryptenroll

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

cryptsetup

Typo fix: "tempered" -> "tampered"

2026-08-31 16:01:41 +02:00

debug-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

delta

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

detect-virt

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

dissect

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

environment-d-generator

tree-wide: add missing assertions

2026-08-18 06:30:10 +09:00

escape

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

factory-reset

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

firstboot

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

fsck

fsck: don't apply invalid mode or repair values

2026-07-08 12:13:43 +01:00

fstab-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

fundamental

Revert "macro: EDG compiler frontends doesn't support enum types"

2026-08-04 22:46:13 +09:00

fuzz

fuzz: add a fuzzer for the decompression entrypoints

2026-09-01 11:41:19 -04:00

getty-generator

getty-generator: strip whitespace from getty.auto credential

2026-08-14 11:59:58 +02:00

gpt-auto-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

growfs

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

hibernate-resume

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

home

tests: convert manual test binaries to VERB_COMMAND and --introspect-cli

2026-08-28 14:50:10 +02:00

hostname

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

hwdb

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

id128

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

imds

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

import

fuzz: add a fuzzer for the qcow2 converter

2026-09-01 11:41:19 -04:00

include

include: update Linux kernel headers from v7.3-rc1

2026-08-31 19:43:10 +09:00

integritysetup

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

journal

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

journal-remote

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

kernel-install

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

keyutil

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

libc

libc: call epoll_pwait2 syscall directly instead of resolving glibc symbols

2026-08-28 06:19:13 +09:00

libsystemd

tests: convert manual test binaries to VERB_COMMAND and --introspect-cli

2026-08-28 14:50:10 +02:00

libsystemd-network

ndisc: fix an out of memory condition

2026-09-03 05:53:35 +09:00

libudev

options: introduce OPTION_COMMON_VERSION_WITH_V and version_only()

2026-08-29 07:40:35 +09:00

locale

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

login

pam: use "pam_rootok" rather than "pam_deny" in the "auth" stacks of our PAM configs

2026-08-31 12:06:43 +02:00

machine

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

machine-id-setup

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

measure

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

modules-load

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

mount

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

mountfsd

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

mstack

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

mute-console

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

network

networkd: allow systemd-network user to control ModemManager

2026-09-03 18:05:17 +09:00

notify

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

nspawn

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

nsresourced

nsresourced: Fix reading from NULL pointers (#43566)

2026-08-31 17:10:20 +09:00

nss-myhostname

nss-myhostname: keep IPv6 probe result stable

2026-07-11 17:09:14 +01:00

nss-mymachines

…

nss-resolve

…

nss-systemd

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

oom

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

path

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

pcrextend

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

pcrlock

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

portable

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

pstore

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

ptyfwd

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

quotacheck

quotacheck: don't apply an invalid quotacheck.mode= value

2026-07-01 18:18:00 +01:00

random-seed

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

remount-fs

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

repart

repart: clamp copied timestamps to $SOURCE_DATE_EPOCH

2026-08-28 11:16:29 +02:00

reply-password

…

report

report-sign-tpm2: convert to VERB_COMMAND and add --introspect-cli

2026-08-28 14:50:10 +02:00

resolve

resolve: fix use-after-free of the service browser in mDNS maintenance

2026-09-03 06:37:53 +09:00

rfkill

…

rpm

…

run

core: minor PAM fixes (#43576)

2026-08-31 16:57:19 +01:00

run-generator

…

sbsign

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

shared

Tweak the hostname-worldlist code (#43599)

2026-09-03 06:29:25 +09:00

shutdown

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

sleep

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

socket-activate

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

socket-proxy

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

ssh-generator

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

stdio-bridge

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

storage

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

storagetm

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

sulogin-shell

…

sysctl

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

sysext

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

sysinstall

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

system-update-generator

…

systemctl

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

systemd

Revert "macro: EDG compiler frontends doesn't support enum types"

2026-08-04 22:46:13 +09:00

sysupdate

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

sysusers

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

test

Tweak the hostname-worldlist code (#43599)

2026-09-03 06:29:25 +09:00

timedate

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

timesync

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

tmpfiles

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

tpm2-setup

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

tty-ask-password-agent

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

udev

options: introduce OPTION_COMMON_VERSION_WITH_V and version_only()

2026-08-29 07:40:35 +09:00

ukify

ukify: generate initrd policy digests for offline signing

2026-09-03 12:55:15 +02:00

update-done

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

update-utmp

update-utmp: shorten comm on boot/shutdown

2026-07-29 11:41:17 +09:00

user-sessions

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

userdb

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

validatefs

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

varlinkctl

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

vconsole

vconsole: allow to control font scaling

2026-08-25 06:58:06 +09:00

veritysetup

shared/verbs: turn verb argument specification into nulstr

2026-08-28 09:29:04 +02:00

version

…

vmspawn

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

volatile-root

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

vpick

tree-wide: format man page references as foo(1)

2026-08-28 06:34:45 +09:00

xdg-autostart-generator

tree-wide: add missing assertions

2026-08-18 06:30:10 +09:00