Tom Gundersen [Fri, 9 Oct 2015 19:37:04 +0000 (21:37 +0200)]
sd-netlink: add support for subscribing to ROUTE messages
Also, explicitly don't support subscribing to GET or SET messages, as these will
never be emitted by the kernel.
Tom Gundersen [Fri, 9 Oct 2015 16:52:35 +0000 (18:52 +0200)]
sd-netlink: rtnl - add route_get_{scope,tos,table,protocol}()
Tom Gundersen [Thu, 1 Oct 2015 19:51:49 +0000 (21:51 +0200)]
sd-ipv4ll: allow initial address to be set explicitly
This is useful in case the daemon is restarted and the state of the IPv4LL client should
be serialized/deserialized.
Tom Gundersen [Wed, 30 Sep 2015 17:37:52 +0000 (19:37 +0200)]
networkd: link/network - correctly align log messages
Tom Gundersen [Fri, 25 Sep 2015 15:41:09 +0000 (17:41 +0200)]
libsystemd-network: limit accuracy of timestamps in logging
We don't care about timestamps down to the last usec, round to the closest sec
as that will be plenty for debugging purposes.
Tom Gundersen [Tue, 22 Sep 2015 15:54:27 +0000 (17:54 +0200)]
networkd: address - add hash helpers for Address objects
Add compare_func and hash_func for the Address object. The notion of
address equality is the same as in the kernel, and hashing preserves
preserves equality.
Two addresses are considered equal if:
- they have the same address family, and
- they are neither IPv4 nor IPv6 addresses, or
- the local addresses are identical, and
- they are IPv6 addresses, or
- they have the same prefixlength, and
- their peer prefixes are identical
This fixes a bug in the old equality check, which got the local address
and the peer prefix mixed up.
Tom Gundersen [Fri, 9 Oct 2015 19:36:04 +0000 (21:36 +0200)]
networkd: manager - free bus after own objects
Freeing links/addresses may trigger sending signals over the bus, so let's make sure
the bus stays around until our own objects have been freed.
Tom Gundersen [Mon, 21 Sep 2015 13:53:40 +0000 (15:53 +0200)]
networkd: route/address - simplify and unify creators
Rename new_dynamic() to simply _new() and reuse that from new_static().
Lennart Poettering [Fri, 9 Oct 2015 15:45:42 +0000 (18:45 +0300)]
Merge pull request #1510 from mirco/fix-nspawn
nspawn: create /sys/fs/cgroup for unified hierarchy as well
Martin Pitt [Fri, 9 Oct 2015 15:32:30 +0000 (17:32 +0200)]
Merge pull request #1516 from poettering/dontisolaterootslice
Don't isolate `-.slice`
Lennart Poettering [Fri, 9 Oct 2015 15:18:18 +0000 (17:18 +0200)]
core: ignore -.slice and init.scope when isolating
Otherwise, we might end up trying to isolate it away when starting user
instances.
While we are at it, also prohibit manual start/stop of these two units.
Fixes: #1507
Lennart Poettering [Fri, 9 Oct 2015 15:17:28 +0000 (17:17 +0200)]
sd-daemon: simply code simplification
No change in behaviour, just make the code more obvious.
Lennart Poettering [Fri, 9 Oct 2015 15:16:12 +0000 (17:16 +0200)]
core: remove taint flag about /etc/mtab not being a symlink.
We already stop boot if /etc/mtab is not a symlink right now, and most
likely we'll stop referecing it at all in the future, either way there's
no point in keeping it around as taint flag.
Lennart Poettering [Fri, 9 Oct 2015 15:15:24 +0000 (17:15 +0200)]
zsh: don't mention /etc/mtab
The file is obsolete, use /proc/self/mounts instead.
Also, yuck, the code is so awful...
Lennart Poettering [Fri, 9 Oct 2015 14:06:22 +0000 (17:06 +0300)]
Merge pull request #1512 from evverx/systemd-run-syslog-properties
systemd-run can launch units with SyslogIdentifier and SyslogLevelPrefix
Lennart Poettering [Fri, 9 Oct 2015 14:04:36 +0000 (17:04 +0300)]
Merge pull request #1501 from fbuihuu/fix-requires-mounts-for-directives
Make sure the mount units pulled by 'RequiresMountsFor=' are loaded, if they exist
Evgeny Vereshchagin [Fri, 9 Oct 2015 12:42:34 +0000 (12:42 +0000)]
shell-completion: systemd-run: add new properties
Evgeny Vereshchagin [Fri, 9 Oct 2015 12:37:50 +0000 (12:37 +0000)]
systemd-run can now launch units with SyslogIdentifier
Evgeny Vereshchagin [Fri, 9 Oct 2015 12:17:41 +0000 (12:17 +0000)]
systemd-run can now launch units with SyslogLevelPrefix
Mirco Tischler [Fri, 9 Oct 2015 11:12:08 +0000 (13:12 +0200)]
nspawn: create /sys/fs/cgroup for unified hierarchy as well
Daniel Mack [Fri, 9 Oct 2015 06:52:55 +0000 (08:52 +0200)]
Merge pull request #1504 from evverx/systemd-run-new-properties
shell-completion: systemd-run: add new properties
Evgeny Vereshchagin [Fri, 9 Oct 2015 03:48:31 +0000 (06:48 +0300)]
shell-completion: systemd-run: add new properties
See:
*
602b83559a7cfcd3eee05
*
b9c50073fcc1460ca1ff3
Franck Bui [Thu, 8 Oct 2015 17:06:06 +0000 (19:06 +0200)]
Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist)
We should make sure that mount units involved by 'RequiresMountsFor='
directives are really loaded if not required by any others units so
that Requires= dependencies on the mount units are applied and thus
the mount unit dependencies are started.
Lennart Poettering [Thu, 8 Oct 2015 16:57:36 +0000 (19:57 +0300)]
Merge pull request #1499 from evverx/system-conf-update
core: system.conf: add DefaultTasksAccounting
Evgeny Vereshchagin [Thu, 8 Oct 2015 14:48:45 +0000 (17:48 +0300)]
core: system.conf: add DefaultTasksAccounting
Daniel Mack [Thu, 8 Oct 2015 14:09:09 +0000 (16:09 +0200)]
Merge pull request #1496 from poettering/stdin-fd
allow passing in fds for stdin/stdout/stderr for transient services
Tom Gundersen [Thu, 8 Oct 2015 13:57:23 +0000 (15:57 +0200)]
Merge pull request #1497 from bengal/lldp-rename-struct
lldp: rename publicly visible structure
Beniamino Galvani [Thu, 8 Oct 2015 13:26:43 +0000 (15:26 +0200)]
lldp: rename publicly visible structure
Rename struct 'tlv_packet' to 'sd_lldp_packet' and struct
'tlv_section' to 'sd_lldp_section' since the former is referenced in
public header sd-lldp.h.
Signed-off-by: Beniamino Galvani <bgalvani@redhat.com>
Lennart Poettering [Thu, 8 Oct 2015 13:14:27 +0000 (15:14 +0200)]
shell-completion: add pseudo machine ".host" to shell completion
Lennart Poettering [Thu, 8 Oct 2015 13:07:06 +0000 (16:07 +0300)]
Merge pull request #1492 from evverx/manager-dbus-properties
core: manager: add some missing properties
Lennart Poettering [Thu, 8 Oct 2015 13:05:27 +0000 (16:05 +0300)]
Merge pull request #1494 from reverendhomer/patch-1
networkd-link: remove unused variable assignment in link_save()
Lennart Poettering [Thu, 8 Oct 2015 13:01:42 +0000 (15:01 +0200)]
run: various modernizations and smaller fixes
Including a fix for properly freeing a calendarspec object after use.
Lennart Poettering [Thu, 8 Oct 2015 12:49:24 +0000 (14:49 +0200)]
shell-completion: add "machinectl shell" to bash completion logic
Lennart Poettering [Thu, 8 Oct 2015 12:36:47 +0000 (14:36 +0200)]
util: minor modernization of vt_disallocate()
Lennart Poettering [Thu, 8 Oct 2015 12:33:53 +0000 (14:33 +0200)]
util: do not reset terminal in acquire_terminal()
Before, we'd always reset acquired terminals, which is not really
desired, as we expose a setting TTYReset= which is supposed to control
whether the TTY is reset or not. Previously that setting would only
enable a second resetting of the TTY, which is of course pointless...
Hence, move the implicit resetting out of acquire_terminal() and make
the callers do it if they need it.
Lennart Poettering [Wed, 7 Oct 2015 21:38:20 +0000 (23:38 +0200)]
machined: when opening a shell via machined, pass tty fds in
With this change we'll open the shell's tty right from machined and then
pass it to the transient unit we create. This way we make sure the pty
is opened exactly as long as the transient service is around, and no
longer, and vice versa. This way pty forwarders do not have to deal with
EIO problems due to vhangup, as the pty is open all the time from the
point we set things up to the point where the service goes away.
reverendhomer [Thu, 8 Oct 2015 11:43:03 +0000 (14:43 +0300)]
networkd-link: remove unused variable assignment in link_save()
fixes Coverity #1317207
Lennart Poettering [Wed, 7 Oct 2015 21:07:39 +0000 (23:07 +0200)]
core: add support for setting stdin/stdout/stderr for transient services
When starting a transient service, allow setting stdin/stdout/stderr fds
for it, by passing them in via the bus.
This also simplifies some of the serialization code for units.
Lennart Poettering [Wed, 7 Oct 2015 20:45:48 +0000 (22:45 +0200)]
basic: move two more terminal-related calls into terminal-util.[ch]
Lennart Poettering [Thu, 8 Oct 2015 10:44:57 +0000 (12:44 +0200)]
update CODING_STYLE
Daniel Mack [Thu, 8 Oct 2015 09:32:05 +0000 (11:32 +0200)]
Merge pull request #1491 from Danielmachon/danish-translation
po: added danish translation
Danielmachon [Wed, 7 Oct 2015 20:39:12 +0000 (22:39 +0200)]
po: added danish translation for systemd
po: added danish translation for systemd
Update da.po
fixed syntax errors
Evgeny Vereshchagin [Thu, 8 Oct 2015 04:35:36 +0000 (07:35 +0300)]
core: manager: add some missing dbus properties
Martin Pitt [Thu, 8 Oct 2015 03:33:14 +0000 (05:33 +0200)]
keymap: Update Thinkpad Yoga 12 (2015)
Follow-up commit to
e1fd19958: Add d8 scan code as well.
Fixes #1440
Daniel Mack [Wed, 7 Oct 2015 20:01:53 +0000 (22:01 +0200)]
Merge pull request #1490 from poettering/machinectl-shell-race-fix
machinectl shell race fix
Lennart Poettering [Wed, 7 Oct 2015 19:38:29 +0000 (21:38 +0200)]
update TODO
Lennart Poettering [Wed, 7 Oct 2015 18:10:48 +0000 (20:10 +0200)]
machinectl: fix race when opening new shells with "machinectl shell"
Previously, we'd allocate the TTY, spawn a service on it, but
immediately start processing the TTY and forwarding it to whatever the
commnd was started on. This is however problematic, as the TTY might get
actually opened only much later by the service. We'll hence first get
EIOs on the master as the other side is still closed, and hence
considered it hung up and terminated the session.
With this change we add a flag to the pty forwarding logic:
PTY_FORWARD_IGNORE_INITIAL_VHANGUP. If set, we'll ignore all hangups
(i.e. EIOs) on the master PTY until the first byte is successfully read.
From that point on we consider a hangup/EIO a regular connection termination. This
way, we handle the race: when we get EIO initially we'll ignore it,
until the connection is properly set up, at which time we start
honouring it.
Lennart Poettering [Wed, 7 Oct 2015 18:08:49 +0000 (20:08 +0200)]
util: always enforce O_NOCTTY and O_CLOEXEC in openpt_in_namespace()
The child process is shortliving, hence always set O_NOCTTY so that the
tty doesn't quickly become controlling TTY and then gives it up again.
Also set O_CLOEXEC, because it's cleaner, and doesn't affect the parent
anyway.
Lennart Poettering [Wed, 7 Oct 2015 15:06:22 +0000 (17:06 +0200)]
build-sys: bump library version
Lennart Poettering [Wed, 7 Oct 2015 15:04:39 +0000 (17:04 +0200)]
build-sys: add sd_listen_fds_with_name() to .sym file
Daniel Mack [Wed, 7 Oct 2015 14:39:59 +0000 (16:39 +0200)]
configure.ac: bump version number
Daniel Mack [Wed, 7 Oct 2015 14:00:38 +0000 (16:00 +0200)]
update NEWS
Daniel Mack [Wed, 7 Oct 2015 13:55:10 +0000 (15:55 +0200)]
NEWS: re-order entries slightly
Also, the release is actually done in Berlin ;)
Lennart Poettering [Wed, 7 Oct 2015 13:48:58 +0000 (15:48 +0200)]
Update NEWS
Lennart Poettering [Wed, 7 Oct 2015 13:45:25 +0000 (15:45 +0200)]
analyze: trivial code cleanups
Lennart Poettering [Wed, 7 Oct 2015 13:45:04 +0000 (15:45 +0200)]
update NEWS
Daniel Mack [Wed, 7 Oct 2015 13:32:42 +0000 (15:32 +0200)]
Merge pull request #1484 from poettering/ask-pass-kernel-keyring
cache harddisk passwords in the kernel keyring
Lennart Poettering [Wed, 7 Oct 2015 12:59:51 +0000 (15:59 +0300)]
Merge pull request #1485 from jsynacek/machine-long-filename-v5
import: hash URL in paths if they are too long
Lennart Poettering [Wed, 7 Oct 2015 12:54:04 +0000 (15:54 +0300)]
Merge pull request #1487 from michich/fix-env-expansion
Fix env expansion
Lennart Poettering [Wed, 7 Oct 2015 12:53:21 +0000 (15:53 +0300)]
Merge pull request #1486 from michich/crash-handler
core: crash handler changes, CrashChangeVT parsing fix
Michal Schmidt [Wed, 7 Oct 2015 12:40:54 +0000 (14:40 +0200)]
man: fix typo ('and' -> 'are')
Michal Schmidt [Wed, 7 Oct 2015 12:40:44 +0000 (14:40 +0200)]
basic: fix env expansion for strings leading with two dollar signs
The way to escape a literal dollar sign is to write "$$". But this does
not work right if it's at the beginning of the argument. Fix it.
Michal Schmidt [Wed, 30 Sep 2015 15:08:04 +0000 (17:08 +0200)]
core: always let the kernel reap zombies when we're about to freeze
Regardless of whether we're going to spawn a crash shell or not, let the
kernel reap zombies. It's more consistent this way.
Michal Schmidt [Wed, 30 Sep 2015 13:12:19 +0000 (15:12 +0200)]
core: change how crash_shell and crash_reboot interact
Instead of freezing in PID1 and letting the forked child freeze or
reboot when exec("/bin/sh") fails, just wait for the child's
exit and then do the freeze_or_reboot in PID1 as usual.
This means that when both crash_shell and crash_reboot are enabled, the
system will reboot after the shell exits.
Michal Schmidt [Wed, 7 Oct 2015 11:56:43 +0000 (13:56 +0200)]
core: remove spurious assert in parsing CrashChangeVT=
"data" is always NULL (and unused) in config_parse_crash_chvt().
Jan Synacek [Fri, 2 Oct 2015 09:00:19 +0000 (11:00 +0200)]
import: hash URL in paths if they are too long
https://bugzilla.redhat.com/show_bug.cgi?id=1266775
Michal Schmidt [Wed, 30 Sep 2015 12:42:27 +0000 (14:42 +0200)]
core: adjust error message about /etc/mtab
Since having /etc/mtab as a regular file is now a fatal error, stop
mentioning irrelevant minor consequences.
Lennart Poettering [Wed, 7 Oct 2015 09:26:10 +0000 (11:26 +0200)]
ask-password: add support for caching passwords in the kernel keyring
This adds support for caching harddisk passwords in the kernel keyring
if it is available, thus supporting caching without Plymouth being
around.
This is also useful for hooking up "gdm-auto-login" with the collected
boot-time harddisk password, in order to support gnome keyring
passphrase unlocking via the HDD password, if it is the same.
Any passwords added to the kernel keyring this way have a timeout of
2.5min at which time they are purged from the kernel.
Daniel Mack [Wed, 7 Oct 2015 09:37:21 +0000 (11:37 +0200)]
Merge pull request #1481 from again4you/devel/smack_sysuser_#4
smack: label /etc/passwd and friends as '_' smack label when --with-smack-run-label' is enabled (v3)
Daniel Mack [Wed, 7 Oct 2015 09:36:29 +0000 (11:36 +0200)]
Merge pull request #1478 from steelman/analyze-without-hostnamed-fix
analyze: minor fixes according to review
Daniel Mack [Wed, 7 Oct 2015 09:18:27 +0000 (11:18 +0200)]
Merge pull request #1483 from reverendhomer/patch-2
service: fix memory leak in service_add_fd_store()
Daniel Mack [Wed, 7 Oct 2015 09:16:08 +0000 (11:16 +0200)]
Merge pull request #1482 from reverendhomer/patch-1
strv: fix infinite loop in strv_extend_n()
reverendhomer [Wed, 7 Oct 2015 08:55:31 +0000 (11:55 +0300)]
service: fix memory leak in service_add_fd_store()
fixes Coverity #1325767
reverendhomer [Wed, 7 Oct 2015 08:52:10 +0000 (11:52 +0300)]
strv: fix infinite loop in strv_extend_n()
Fixes Coverity #1325768
Sangjung Woo [Tue, 6 Oct 2015 10:08:16 +0000 (19:08 +0900)]
smack: label /etc/passwd and friends as '_' smack label when --with-smack-run-label' is enabled
systemd-sysusers.service unit creates system users and groups and it
could update /etc/passwd, /etc/group, /etc/shadow and /etc/gshadow.
Those files should have '_' smack label because of accessibility.
However, if systemd has its own smack label using '--with-smack-run-label'
configuration, systemd-sysusers process spawned by systemd(pid:1) has
its parent smack label and eventually updated files also is set as its
parent smack label.
This patch fixes that bug by labeling updated files as '_' smack label
when --with-smack-run-label' is enabled.
Łukasz Stelmach [Wed, 7 Oct 2015 06:02:31 +0000 (08:02 +0200)]
analyze: minor fixes according to review
+ use _cleanup_host_info in acquire_host_info()
+ revert the first strempty() to show "Linux" string in case
os_pretty_name is missing.
Daniel Mack [Tue, 6 Oct 2015 16:23:02 +0000 (18:23 +0200)]
Merge pull request #1475 from steelman/analyze-without-hostnamed
Analyze without hostnamed [V3]
Daniel Mack [Tue, 6 Oct 2015 16:12:25 +0000 (18:12 +0200)]
Merge pull request #1474 from teg/siphash24
siphash: style fixes
Łukasz Stelmach [Fri, 2 Oct 2015 07:45:49 +0000 (09:45 +0200)]
analyze: replace isempty()+ternary with strempty()
Łukasz Stelmach [Wed, 23 Sep 2015 15:20:59 +0000 (17:20 +0200)]
analyze: do not require information from hostnamed
Łukasz Stelmach [Tue, 6 Oct 2015 13:57:14 +0000 (15:57 +0200)]
analyze: introduce _cleanup_host_info_
Tom Gundersen [Tue, 6 Oct 2015 14:31:58 +0000 (16:31 +0200)]
siphash24: coding-style fixes
Drop custom types. Drop unnecessary macros. Fix whitespace. Add asserts.
Tom Gundersen [Tue, 6 Oct 2015 13:04:42 +0000 (15:04 +0200)]
siphash24: unify API
Make the API of the new helpers more similar to the old wrapper.
In particular we now return the hash as a byte string to avoid
any endianness problems.
Lennart Poettering [Tue, 6 Oct 2015 14:27:24 +0000 (16:27 +0200)]
ask-password: various modernizations
Primarily clean-up error logging: log either all or no error messages in
the various functions. Mostly this means the actual password querying
calls no longer will log on their own, but the callers have to do so.
Contains various other fixes too, for example ports some code over to
use the clean-up macro.
Should contain no functional changes.
Lennart Poettering [Tue, 6 Oct 2015 14:18:20 +0000 (17:18 +0300)]
Merge pull request #1473 from michich/test-hashmap
test: hashmap - increase number of entries for crippled hash test
Lennart Poettering [Tue, 6 Oct 2015 13:52:03 +0000 (15:52 +0200)]
update CODING_STYLE
Daniel Mack [Tue, 6 Oct 2015 12:59:24 +0000 (14:59 +0200)]
Merge pull request #1469 from poettering/even-more-fixed
Even more fixes
Michal Schmidt [Tue, 6 Oct 2015 12:56:33 +0000 (14:56 +0200)]
test: hashmap - increase number of entries for crippled hash test
The purpose of testing with the crippled hash function is to cover
the otherwise very unlikely codepath in bucket_calculate_dib() where
it has to fall back to recomputing the hash value.
This unlikely path was not covered by test-hashmap anymore after
57217c8f "test: hashmap - cripple the hash function by truncating the
input rather than the output".
Restore the test coverage by increasing the number of entries in the test.
The number was determined empirically by checking with lcov.
Lennart Poettering [Tue, 6 Oct 2015 11:02:10 +0000 (14:02 +0300)]
Merge pull request #1465 from teg/siphash24
hashmap/siphash24: refactor hash functions
Lennart Poettering [Tue, 6 Oct 2015 10:33:25 +0000 (12:33 +0200)]
update NEWS
Lennart Poettering [Tue, 6 Oct 2015 10:33:14 +0000 (12:33 +0200)]
util: some comment fixes in fdname_is_valid()
Lennart Poettering [Tue, 6 Oct 2015 10:32:50 +0000 (12:32 +0200)]
strv: properly return ENOMEM where we should in strv_extend_n()
Lennart Poettering [Tue, 6 Oct 2015 10:32:31 +0000 (12:32 +0200)]
activate: validate fdname when accepting it
Lennart Poettering [Tue, 6 Oct 2015 10:32:15 +0000 (12:32 +0200)]
man: use <function> where we refer to functions
Tom Gundersen [Tue, 6 Oct 2015 10:11:44 +0000 (12:11 +0200)]
NEWS
Tom Gundersen [Tue, 6 Oct 2015 10:06:56 +0000 (12:06 +0200)]
Merge pull request #1468 from poettering/fdnames
Add support for naming fds for socket activation and more
Tom Gundersen [Tue, 6 Oct 2015 09:58:52 +0000 (11:58 +0200)]
Merge pull request #1467 from jacob-keller/master
networkd: document ability to disable MACAddressPolicy
Tom Gundersen [Tue, 6 Oct 2015 09:57:53 +0000 (11:57 +0200)]
Merge pull request #1466 from kaysievers/wip
libsystemd: sd-device - translate / vs. ! in sysname
Tom Gundersen [Tue, 6 Oct 2015 09:54:14 +0000 (11:54 +0200)]
NEWS
Lennart Poettering [Tue, 6 Oct 2015 08:24:02 +0000 (10:24 +0200)]
unit: give systemd-networkd.socket a better description
Usually we try to properly uppercase first characters in the
description, do so here, too. Also, keep it close to the string used in
systemd-networkd.service.