Lennart Poettering
e93fd71094
This introduces PinnedResources as a structure combining pinned references to a root directory, root image, or root mstack. This is not only easier to work with, but essential to make certain unpriv things work, as we need some mechanism to pin resources before we drop into a userns which might possibly not provide access anymore to those resources. Hence this does two things: introduce the new structure, and immediately hook it up so that we pin things properly before dropping into userns, and then makes use of this after dropping the right way, and enables unpriv userns operation. The concept is generic enough to eventually implement extension images + mount images with the same structure, but in order to keep the changes managable this is left for another time. (This also makes one further clean-up: client-side verity-reuse checks are moved server side if we are unpriv. Previously we'd do them client side, but they were doomed to fail because of lack of privs. Hence let's drop the client side if we are unpriv and purely do them server-side in that case.)
System and Service Manager
Details
Most documentation is available on systemd's web site.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Code Map for information about this repository's layout and content.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list, join our IRC channel #systemd on libera.chat or Matrix channel
Stable branches with backported patches are available in the stable repo.
We have a security bug bounty program sponsored by the Sovereign Tech Fund hosted on YesWeHack
Repositories with distribution packages built from git main are available on OBS, and also repositories with packages built from the latest stable release