summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* mkosi: Drop locale workaroundDaan De Meyer2023-02-211-23/+0
| | | | | mkosi will always run all commands with the C.UTF-8 locale so we don't need a workaround in the build script anymore.
* mkosi: Drop ld workaroundDaan De Meyer2023-02-211-12/+0
| | | | | Build scripts will always run in an environment with /etc/ available now, so we don't need this workaround anymore.
* mkosi: Update to latestDaan De Meyer2023-02-211-1/+1
|
* core/manager: falling back to execute generators without sandboxingYu Watanabe2023-02-211-1/+14
| | | | | | | | When running in a container, like podman, docker or so, creating new mount namespace may be disabled. Fixes #26474. Fixes RHBZ#2165004 (https://bugzilla.redhat.com/show_bug.cgi?id=2165004).
* update TODOLennart Poettering2023-02-211-0/+11
|
* man: add DefaultStartupMemoryLow= as term in term listSteve Ramage2023-02-211-1/+1
|
* meson: adjust whitespace handling in jinja2 renderingZbigniew Jędrzejewski-Szmek2023-02-211-2/+5
| | | | | | | | | | | | | | | | | In 6abe882bae1bb12827ef395c60f21ab8bb1bc61b the renderer was made to unconditionally append a newline to output. This works, but is ugly. A nicer solution is to tell jinja2 to not strip the newline in the first place, via keep_trailing_newline=True. It seems that the result is unchanged because all our source files have exactly one trailing newline. Also, enable lstrip_blocks=True. This would cause whitespace on the line before an {%if block to be automatically stripped. It seems reasonable to enable that if trim_blocks=True. Overall, no change is expected, though I didn't test combinations of configurations, so there might be a change in some cases. But now the rules of rendering are more logical, e.g. we should be able to indent nested conditional statements without getting unexpected whitespace in the output.
* Merge pull request #26506 from keszybz/tiny-cleanupsYu Watanabe2023-02-217-30/+38
|\ | | | | Various trivial cleanups and follow-ups
| * TODO: add entry for time-based glob cleanupZbigniew Jędrzejewski-Szmek2023-02-201-4/+3
| |
| * man/tmpfiles.d: adjust the table in synopsis, improve spellingZbigniew Jędrzejewski-Szmek2023-02-201-8/+8
| | | | | | | | | | | | | | r and R take globs, so let's name the argument appropriately in the tl;dr listing. Also, use 'clean-up' in the file name where it represents the verb "clean up", and other minor spelling adjustments.
| * shared/hwdb-util: drop "variable" with a single useZbigniew Jędrzejewski-Szmek2023-02-201-3/+2
| | | | | | | | | | | | In 6a34639e76b8b59233a97533b13836d5a44e8d4a arg_hwdb_bin_dir was replaced by default_hwdb_bin_dir, which is constant. Generally we'd use a #define instead, but since there's just one use, let's just avoid the indirection altogether.
| * efi/measure: adjust formattingZbigniew Jędrzejewski-Szmek2023-02-201-2/+2
| |
| * measure: wrap long lines and avoid one castZbigniew Jędrzejewski-Szmek2023-02-201-11/+19
| |
| * sleep: use shared constant for freeze timeoutZbigniew Jędrzejewski-Szmek2023-02-202-2/+4
| | | | | | | | Let's keep all the timeout definitions in one place.
* | Merge pull request #26499 from mrc0mmand/assorted-tweaksYu Watanabe2023-02-212-0/+6
|\ \ | | | | | | A couple of test tweaks for recent CI fails
| * | test: ignore missing coverage in TEST-78Frantisek Sumsal2023-02-201-0/+2
| | | | | | | | | | | | | | | | | | gcov is incompatible with DynamicUser=true without additional tweaks, so let's ignore its complaints in this test, as working around it is not worth it (in this case).
| * | test: disable pipefail when testing interactive firstbootFrantisek Sumsal2023-02-201-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise we might get unexpected test fails due to SIGPIPE: ``` [ 14.334917] testsuite-74.sh[565]: + grep -q '^root:.*:0:0:.*:/bin/fooshell$' test-root/etc/passwd [ 14.335670] testsuite-74.sh[681]: + systemd-firstboot --root=test-root --prompt-root-shell [ 14.336382] testsuite-74.sh[680]: + echo -ne '\n/bin/barshell\n' [ 14.336980] testsuite-74.sh[680]: .//usr/lib/systemd/tests/testdata/units/testsuite-74.firstboot.sh: line 166: echo: write error: Broken pipe ```
* | | ukify: Set fast_load option when parsing PE filesDaan De Meyer2023-02-201-2/+2
| | | | | | | | | | | | | | | | | | Let's skip parsing of some irrelevant information that we don't use to speed up building UKIs with large initrds from +-15s to less than 1s.
* | | Merge pull request #26508 from poettering/cap-fixesLennart Poettering2023-02-2010-95/+135
|\ \ \ | | | | | | | | various fixes to capability handling
| * | | capability-util: use UINT32_MAX as shortcut where appropriateaLennart Poettering2023-02-201-2/+2
| | | |
| * | | capability-util: add macro for largest cap we're willing to acceptLennart Poettering2023-02-203-10/+16
| | | | | | | | | | | | | | | | Let's hide the hard to grasp 62 behind a name.
| * | | capability-util: add CAP_MASK_ALL + CAP_MASK_UNSET macrosLennart Poettering2023-02-205-23/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We should be more careful with distinguishing the cases "all bits set in caps mask" from "cap mask invalid". We so far mostly used UINT64_MAX for both, which is not correct though (as it would mean AmbientCapabilities=~0 followed by AmbientCapabilities=0) would result in capability 63 to be set (which we don't really allow, since that means unset).
| * | | cap-list: make sure never to accidentally return more than 63 capsLennart Poettering2023-02-201-5/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The rest of our codebase stores caps masks in a uint64_t, and also assumes UINT64_MAX was a suitable value for "unset mask". Hence refuse any caps outside of 0…62. (right now the kernel knows 40 caps, hence 22 more to go before we have to reconsider our life's choices.)
| * | | cap-list: rework capability_set_to_string()Lennart Poettering2023-02-201-22/+15
| | | | | | | | | | | | | | | | Let's use strextend_with_separator() and CAPABILITY_TO_STRING().
| * | | cap-list: add CAPABILITY_TO_STRING() macro using compound initialization to ↵Lennart Poettering2023-02-203-1/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | allocate fallback buffer Let's add a helper that can return a numeric string in case we don't recognize a name for a capability.
| * | | cap-list: refuse parsing numeric capability 63Lennart Poettering2023-02-203-10/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We refuse it otherwise currently, simply because we cannot store it in a uint64_t caps mask value anymore while retaining the ability to use UINT64_MAX as "unset" marker. The check actually was in place already, just one off.
| * | | cap-list: modernize capability_set_from_string() a bitLennart Poettering2023-02-203-19/+20
| | | | | | | | | | | | | | | | | | | | Make return parameter optional. And return whether there were any caps we didn't recognize via 0/1 return value.
| * | | cap-list: rename capability_set_to_string_alloc() → capability_set_to_string()Lennart Poettering2023-02-206-10/+9
|/ / / | | | | | | | | | | | | We typically don't use the _alloc() suffix anymore for anything, hence drop it here too.
* | | Merge pull request #26437 from DaanDeMeyer/repart-excludeDaan De Meyer2023-02-203-41/+128
|\ \ \ | | | | | | | | repart: Add ExcludeFiles= option
| * | | repart: Add ExcludeFiles= optionDaan De Meyer2023-02-203-39/+126
| | | |
| * | | repart: Make config_parse_copy_files() more genericDaan De Meyer2023-02-161-3/+3
| | | |
* | | | man: document DefaultStartupMemoryLow=Luca Boccassi2023-02-201-1/+2
| | | | | | | | | | | | | | | | Fixes https://github.com/systemd/systemd/issues/26493
* | | | Merge pull request #26465 from DaanDeMeyer/openat-helpersDaan De Meyer2023-02-208-30/+57
|\ \ \ \ | |_|_|/ |/| | | Add more openat() helpers of utility functions
| * | | smack-util: Add renameat_and_apply_smack_floor_label()Daan De Meyer2023-02-202-13/+19
| | | | | | | | | | | | | | | | | | | | Also add mac_smack_apply_at() as its a requirement for renameat_and_apply_smack_floor_label().
| * | | tmpfile-util-label: Add fopen_temporary_at_label()Daan De Meyer2023-02-202-4/+10
| | | |
| * | | copy: Add copy_file_at()Daan De Meyer2023-02-202-8/+18
| | | |
| * | | env-file: Add write_env_file_at()Daan De Meyer2023-02-202-5/+10
| | | |
* | | | udev-node: make stack_directory_read_one() accept NULL for devnodeYu Watanabe2023-02-201-2/+11
| | | | | | | | | | | | | | | | | | | | No functional change, as currently the function is always called with non-NULL argument. Just a preparation for #26048 or #25839.
* | | | Merge pull request #26479 from yuwata/exec-util-miscLennart Poettering2023-02-202-9/+8
|\ \ \ \ | | | | | | | | | | exec-util: several cleanups
| * | | | exec-util: use TAKE_FD()Yu Watanabe2023-02-191-4/+2
| | | | |
| * | | | exec-util: propagate error in wait_for_terminate_and_check()Yu Watanabe2023-02-191-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | Then, the two error handlings becomes consistent with the one in execute_directories().
| * | | | process-util: show requested process name in the logYu Watanabe2023-02-191-1/+1
| | | | | | | | | | | | | | | | | | | | This is useful for debugging issues like #26474.
* | | | | udev-node: drop unnecessary initializationYu Watanabe2023-02-201-1/+1
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The priority of device node symlink can be negative. So the initialization is confusing. Fortunately, this changes no functionality, as we only compare the priorities of symlinks only when we parsed at least one device node and its priority.
* | | | core: permit sending augmented enable/disable methodsRonan Pigott2023-02-201-0/+12
|/ / / | | | | | | | | | | | | systemctl disable some.service fails to acquire interactive permission because the DisableUnitFilesWithFlagsAndInstallInto method isn't permitted
* | | systemctl: edit: fix double free of instanced nameRonan Pigott2023-02-191-3/+3
| | | | | | | | | | | | | | | There is a double free of unit_name when an instance is used, causing systemctl --user edit service@instance to abort.
* | | journalctl: fix output when --lines is used with --grepMike Yuan2023-02-192-2/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously, we skip the entries before arg_lines unconditionally, which doesn't behave correctly when used with --grep. After this commit, when a pattern is specified, we don't skip the entries early, but rely on the count of the lines shown to tell us when to stop. To achieve that we would have to search backwards instead. Fixes #25147
* | | loop-util: fix error condition and return valueYu Watanabe2023-02-191-2/+2
| | | | | | | | | | | | Fixes a bug introduced by da4fd28871227d23d4719e30da03af5a71f47e5a.
* | | shared: move psi-util.[ch] to basic/ so that we can use it in sd-eventLennart Poettering2023-02-174-1/+1
| | |
* | | util: move mallinfo compat glue from selinux code into generic codeLennart Poettering2023-02-172-21/+25
| | |
* | | hashmap: fix build with valgrindYu Watanabe2023-02-171-1/+1
| | | | | | | | | | | | Follow-up for a2b052b29f8bc141e94a4af95d1653a38a57eaeb.