summaryrefslogtreecommitdiff
path: root/man
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #27669 from keszybz/man-fixes-254Zbigniew Jędrzejewski-Szmek2023-05-173-33/+45
|\ | | | | Some simple man page fixes to reduce the list of issues tagged for v254
| * man/tmpfiles: fix off-by-one in exampleZbigniew Jędrzejewski-Szmek2023-05-171-1/+1
| | | | | | | | Reported and diagnosed by gitterman. Fixes #26617.
| * man: explain allowed values for /sys/power/{disk,state}Zbigniew Jędrzejewski-Szmek2023-05-171-24/+31
| | | | | | | | | | | | | | Also fix the grammar: "neither" can only be used with two values, and here we have an inderminate number >= 1. Fixes #26460.
| * man: say that ProtectClock= also affects readsZbigniew Jędrzejewski-Szmek2023-05-171-8/+13
| | | | | | | | | | | | | | | | | | | | | | | | Fixes #26413: the docs said that the filter prevents writes, but it just a filter at the system call level, and some of those calls are used for writing and reading. This is confusing esp. when a higher level library call like ntp_gettime() is denied. I don't think it's realistic that we'll make the filter smarter in the near future, so let's change the docs to describe the implementation. Also, split out the advice part into a separate paragraph.
* | man: fixes for assorted issues reported by the manpage-l10n projectZbigniew Jędrzejewski-Szmek2023-05-1719-83/+106
|/ | | | Fixes #26761.
* man/systemd-sysext: correct explanation of confexts directoriesAntonio Alvarez Feijoo2023-05-161-4/+4
|
* Merge pull request #27638 from YHNdnzj/upheldby-unit-fileMike Yuan2023-05-162-22/+26
|\ | | | | unit-file: support UpheldBy= in [Install] settings (adding Upholds= deps from .upholds/)
| * unit-file: support UpheldBy= in [Install] settings (adding Upholds= depsMike Yuan2023-05-152-22/+26
| | | | | | | | | | | | from .upholds/) Closes #26896
* | man: indicate that the JOB parameter to "systemctl cancel" is optionalLennart Poettering2023-05-161-1/+1
| | | | | | | | | | | | As per: https://social.treehouse.systems/@grawity/110376583742207755
* | Merge pull request #27652 from keszybz/readme-moreZbigniew Jędrzejewski-Szmek2023-05-1611-23/+126
|\ \ | | | | | | Add man page for libsystemd, extend readme and stability promise
| * | man: add libsystemd(3)Zbigniew Jędrzejewski-Szmek2023-05-1511-23/+125
| | | | | | | | | | | | | | | | | | | | | | | | Before libsystemd-daemon, libsystemd-journal, libsystemd-id128, etc., were merged into libsystemd, it was enough to have individual man pages for them. But they have been delivered as one thing for many years, so it's better to have a landing page for libsystemd. It mostly directs to individual pages anyway.
| * | meson: add sd_pid_notify_barrier linkZbigniew Jędrzejewski-Szmek2023-05-151-0/+1
| |/ | | | | | | Fixup for 0de343187127f6a5a93602608812e60fc4092c9a.
* | man: use correct name for --bank optionnikstur2023-05-151-1/+1
|/
* core: Try to initialize TERM from systemd.tty.term.console as wellDaan De Meyer2023-05-121-2/+4
| | | | | | We already have the systemd.tty.xxx kernel cmdline arguments for configuring tty's for services, let's make sure the term cmdline argument applies to pid1 as well.
* Merge pull request #27539 from esposem/ukify_pesignLuca Boccassi2023-05-111-3/+31
|\ | | | | ukify: support pesign as alternative to sbsign
| * ukify: support pesign as alternative to sbsignEmanuele Giuseppe Esposito2023-05-101-2/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | sbsign is not available everywhere, for example RHEL does not have it. Add pesign as alternative to it. pesign will use options "--secureboot-certificate-name" (mandatory) and "--secureboot-certificate-dir" (optional), while sbsign will use "--secureboot-private-key" and "--secureboot-certificate". By default, use sbsign. If no key/cert is provided or sbsign is not found, try pesign. Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
| * ukify: typo in doc and print when package is missingEmanuele Giuseppe Esposito2023-05-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | If a package is missing, a subprocess is started with None as command argument. Error raised by subprocess is therefore not helpful at all to understand what needs to be done to fix that error. Also fix doc since systemd-stub will look for .cmdline files, and not .cmdline.efi files. Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
* | tmpfiles: Add merge support for copy files actionDaan De Meyer2023-05-101-9/+9
| | | | | | | | | | If '+' is specified with 'C', let's merge the tree with any existing tree.
* | doc: remove legacy DefaultControlGroup from dbus propertiesMiao Wang2023-05-081-4/+0
|/ | | DefaultControlGroup does not exist any more.
* crypttab: Support for VeraCrypt PIM and detached headers for ↵Klaus Zipfel2023-05-061-5/+23
| | | | | TrueCrypt/VeraCrypt (#27548) * Added veracrypt-pim=<PIM> LUKS option for crypttab
* Merge pull request #27262 from keszybz/ukify-installZbigniew Jędrzejewski-Szmek2023-05-061-194/+325
|\ | | | | Add kernel-install plugin that calls ukify
| * man: describe all the changes to ukifyZbigniew Jędrzejewski-Szmek2023-05-051-194/+325
| | | | | | | | | | | | | | | | | | | | | | | | | | | | As in mkosi(1), let's describe the config file and commandline options together. This is nice for us, because we don't need to duplicate descriptions and we're less likely to forget to update one place or the other. This is also nice for users, because they can easily figure out what can be configured where. The options are now ordered by config file section. --summary was not described before. More examples are added.
* | man: small fixes to systemd.time Calendar EventsChristopher Gurnee2023-05-051-2/+2
| |
* | sd-daemon: add sd_pid_notify_barrier() call and use it in systemd-notifyLennart Poettering2023-05-031-2/+12
|/ | | | | Previously we'd honour --pid= from the main notification we send, but not from the barrier. This is confusing at best. Let's fix that.
* man: clarify RoutingPolicyRule.TypeOfService docsBrad Fitzpatrick2023-04-301-1/+10
|
* core/systemctl: when switching root default to /sysroot/Lennart Poettering2023-04-281-9/+10
| | | | | | | | | We hardcode the path the initrd uses to prepare the final mount point at so many places, let's also imply it in "systemctl switch-root" if not specified. This adds the fallback both to systemctl and to PID 1 (this is because both to — different – checks on the path).
* Merge pull request #25622 from YHNdnzj/tmpfiles-X-bit-supportMike Yuan2023-04-271-7/+9
|\ | | | | tmpfiles: add conditionalized execute permission (X) support
| * tmpfiles: add conditionalized execute bit (X) supportMike Yuan2023-04-271-7/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to setfacl(1), "the character X stands for the execute permission if the file is a directory or already has execute permission for some user." After this commit, parse_acl() would return 3 acl objects. The newly-added acl_exec object contains entries that are subject to conditionalized execute bit mangling. In tmpfiles, we would iterate the acl_exec object, check the permission of the target files, and remove the execute bit if necessary. Here's an example entry: A /tmp/test - - - - u:test:rwX Closes #25114
* | core: add DelegateSubgroup= settingLennart Poettering2023-04-272-4/+56
|/ | | | | | | | | | | | | | | This implements a minimal subset of #24961, but in a lot more restrictive way: we only allow one level of subcgroup (as that's enough to address the no-processes in inner cgroups rule), and does not change anything about threaded cgroup logic or similar, or make any of this new behaviour mandatory. All this does is this: all non-control processes we invoke for a unit we'll invoke in a subgroup by the specified name. We'll later port all our current services that use cgroup delegation over to this, i.e. user@.service, systemd-nspawn@.service and systemd-udevd.service.
* man: use ukify more in systemd-measure examplesZbigniew Jędrzejewski-Szmek2023-04-272-71/+90
| | | | | | | | | | | | | | | | ukify supports signing with multiple keys, so show an example of this, and just let ukify print the calls to systemd-measure that will be done. This also does other small cleanups: - Use more realistic names in examples - Use $ as the prompt for commands that don't require root (most don't). Once we switch to operations that don't require a TPM, we should be able to get rid of the remaining calls that require root. - Ellipsize or linebreak various parts - Use --uname. We warn if it is not specified and we have to do autodetection, so let's nudge people towards including it rather than not. Follow-up for e069c57f0616d39363d36ac7f9c3e6ec8be01ab1.
* ukify: allow building PE addonLuca Boccassi2023-04-261-9/+24
| | | | | Make the kernel optional too, so that we can easily build and sign a PE addon, that can be used to carry extra command line options.
* Merge pull request #27398 from yuwata/udev-rule-negative-matchZbigniew Jędrzejewski-Szmek2023-04-261-6/+9
|\ | | | | udev-rule: fix negative match
| * udev-rules: fix negative match rule for SYMLINK and TAGYu Watanabe2023-04-261-6/+9
| | | | | | | | Fixes #27396.
* | creds: make --pretty behave in a slightly more expected mannerFrantisek Sumsal2023-04-251-1/+2
| |
* | Support /etc/system-update for OSTree systemsEric Curtin2023-04-253-25/+32
| | | | | | | | | | | | This is required when / is immutable and cannot be written at runtime. Co-authored-by: Richard Hughes <richard@hughsie.com>
* | Merge pull request #27347 from bluca/sd_bus_nonceLennart Poettering2023-04-2544-44/+44
|\ \ | | | | | | sd: avoid closing sd-bus in a fork, store module-global id for sd-bus/sd-session/sd-journal
| * | sd-event: store and compare per-module static origin idLuca Boccassi2023-04-2521-21/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | sd-event objects use hashmaps, which use module-global state, so it is not safe to pass a sd-event object created by a module instance to another module instance (e.g.: when two libraries static linking sd-event are pulled in a single process). Initialize a random per-module origin id and store it in the object, and compare it when entering a public API, and error out if they don't match, together with the PID.
| * | sd-journal: store and compare per-module static origin idLuca Boccassi2023-04-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | sd-journal objects use hashmaps, which use module-global state, so it is not safe to pass a sd-journal object created by a module instance to another module instance (e.g.: when two libraries static linking sd-journal are pulled in a single process). Initialize a random per-module origin id and store it in the object, and compare it when entering a public API, and error out if they don't match, together with the PID.
| * | sd-bus: store and compare per-module static origin idLuca Boccassi2023-04-2522-22/+22
| |/ | | | | | | | | | | | | | | | | sd-bus objects use hashmaps, which use module-global state, so it is not safe to pass a sd-bus object created by a module instance to another module instance (e.g.: when two libraries static linking sd-bus are pulled in a single process). Initialize a random per-module origin id and store it in the object, and compare it when entering a public API, and error out if they don't match, together with the PID.
* | sd-daemon: add sd_pid_notifyf_with_fds()Lennart Poettering2023-04-252-7/+24
| | | | | | | | | | | | | | | | | | | | | | | | I guess it was only a question of time until we need to add the final frontier of notification functions: one that combines the features of all the others: 1. specifiying a source PID 2. taking a list of fds to send along 3. accepting a format string for the status string Hence, let's add it.
* | man: /usr/lib/systemd/random-seed -> /usr/lib/systemd/systemd-random-seedVitaly Kuznetsov2023-04-251-1/+1
| | | | | | | | | | | | /usr/lib/systemd/random-seed is not a thing. Signed-off-by: Vitaly Kuznetsov <vkuznets@redhat.com>
* | sd-login: add SetTTY session object #26611Thorsten Kukuk2023-04-251-0/+8
|/
* Merge pull request #27113 from keszybz/variable-expansion-reworkZbigniew Jędrzejewski-Szmek2023-04-241-1/+62
|\ | | | | Rework serialization of command lines in pid1 and make run not expand variables
| * run: expand variables also with --scopeZbigniew Jędrzejewski-Szmek2023-04-241-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes syntax be the same for commands which are started by the manager and those which are spawned directly (when --scope is used). Before: $ systemd-run -q -t echo '$TERM' xterm-256color $ systemd-run -q --scope echo '$TERM' $TERM Now: $ systemd-run -q --scope echo '$TERM' xterm-256color Previous behaviour can be restored via --expand-environment=no: $ systemd-run -q --scope --expand-environment=no echo '$TERM' $TERM Fixes #22948. At some level, this is a compat break. Fortunately --scope is not very widely used, so I think we can get away with this. Having different syntax depending on whether --scope was used or not was bad UX. A NEWS entry will be required.
| * man/systemd-run: add examples explaining how variable expansion is performedZbigniew Jędrzejewski-Szmek2023-04-241-0/+36
| |
| * run: add --expand-environment=no to disable server-side envvar expansionZbigniew Jędrzejewski-Szmek2023-04-241-1/+25
| | | | | | | | | | | | | | | | | | | | This uses StartExecEx to get the equivalent of ExecStart=:. StartExecEx was added in b3d593673c5b8b0b7d781fd26ab2062ca6e7dbdb, so this will not work with older systemds. A hint is emitted if we get an error indicating lack of support. PID1 returns SD_BUS_ERROR_PROPERTY_READ_ONLY, but I'm checking for SD_BUS_ERROR_UNKNOWN_PROPERTY too for safety.
* | man: fix LogControl1 manpage exampleLuca Boccassi2023-04-241-8/+8
| | | | | | | | Follow-up for c6b8fffdfaf1f7c9a1dac73e1e54993a06c766c0
* | man: clarify sd_bus_defaultLuca Boccassi2023-04-221-7/+8
| | | | | | | | It picks the bus based on the cgroup slice.
* | man: add working example to LogControl1 manpageLuca Boccassi2023-04-222-0/+246
| | | | | | | | Add fully working and documented example that can be copied and pasted
* | Merge pull request #27349 from mrc0mmand/codespellLuca Boccassi2023-04-206-6/+6
|\ \ | | | | | | tree-wide: code spelling fixes
View Lorry Controller Status