summaryrefslogtreecommitdiffstats
path: root/.editorconfig (unfollow)
Commit message (Collapse)AuthorFilesLines
2023-07-07NEWS: mention that gnu-efi is no longer requiredLuca Boccassi1-0/+4
2023-07-07man/systemd.unit: document restart behavior on Upholds=Christian Hesse1-1/+1
Behavior on constantly failing (or oneshot) unit was unclear. Let's document it here.
2023-07-07fstab-generator: unify initrd-root-device.target dependency handling codeLily Foster1-12/+6
This fixes a bug from #26038 where it would actually write generator stuff during sysroot check when it was only supposed to check for daemon reload.
2023-07-07network,ndisc: use ndisc_captive_portal_free() at one more placeYu Watanabe1-1/+1
Fixes another memleak introduced by 64de00c49fde341d09b817164fe8cc8f7da46268. Fixes #28283.
2023-07-06test-network: add one more testcase for DHCPv4 classless routeYu Watanabe1-1/+2
For issue #28280.
2023-07-06network/dhcp4: do not ignore the gateway even if the destination is in the ↵Yu Watanabe1-4/+8
same network Fixes #28280.
2023-07-06test: append to corrupted journalsFrantisek Sumsal3-0/+323
Introduce a manual test tool that creates a journal, corrupts it by flipping bits at given offsets, and then attempts to write to the journal. In ideal case we should handle this gracefully without any crash or memory corruption.
2023-07-06po: Update translation filesWeblate38-9040/+3319
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate. Co-authored-by: Weblate <noreply@weblate.org> Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/ Translation: systemd/main
2023-07-06NEWS: finalize for 254-rc1v254-rc1Luca Boccassi1-1/+1
2023-07-06meson: bump versions for v254-rc1Luca Boccassi1-3/+3
2023-07-06Update translation filesLuca Boccassi38-382/+752
2023-07-06NEWS: update contributors listLuca Boccassi1-26/+31
2023-07-06Update NEWS for latest changesLuca Boccassi1-0/+28
2023-07-06NEWS: rearrange deprecation notices from more imminent to less imminentLuca Boccassi1-10/+10
2023-07-06network,ndisc: use correct free function for captive portalYu Watanabe1-1/+1
Fixes memleak introduced by 64de00c49fde341d09b817164fe8cc8f7da46268. Fixes #28277.
2023-07-06service: fix for RestartMode=direct optionRichard Phibel3-4/+4
With the fix done in PR28215, the unit restart job is created with type JOB_START. Because of that, it is not properly merged anymore with the old one: the merged job has state JOB_RUNNING. It should have state JOB_WAITING. I think that the old job is not cleaned up because we don't go through the failed state. With this fix, the merged job is properly created with state JOB_WAITING.
2023-07-06service: add new RestartMode optionRichard Phibel20-1/+129
When this option is set to direct, the service restarts without entering a failed state. Dependent units are not notified of transitory failure. This is useful for the following use case: We have a target with Requires=my-service, After=my-service. my-service.service is a oneshot service and has Restart=on-failure in its definition. my-service.service can get stuck for various reasons and time out, in which case it is restarted. Currently, when it fails the first time, the target fails, even though my-service is restarted. The behavior we're looking for is that until my-service is not restarted anymore, the target stays pending waiting for my-service.service to start successfully or fail without being restarted anymore.
2023-07-06udev: add 'conf-virt' constant for confidential virtualization techDaniel P. Berrangé2-0/+11
Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generatorsDaniel P. Berrangé2-0/+22
This reports the confidential virtualization type that was detected Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06core: log detected confidential virtualization typeDaniel P. Berrangé1-0/+5
Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06dbus: add 'ConfidentialVirtualization' property to manager objectDaniel P. Berrangé2-0/+33
This property reports whether the system is running inside a confidential virtual machine. Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06unit: add "cvm" option for ConditionSecurityDaniel P. Berrangé3-2/+14
The "cvm" flag indicates whether the OS is running inside a confidential virtual machine. Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06detect-virt: add --list-cvm optionDaniel P. Berrangé3-1/+15
The --list-cvm option reports the known types of confidential virtualization technology that can be detected. Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06detect-virt: add --cvm optionDaniel P. Berrangé3-1/+29
The --cvm option detects whether the OS is running inside a confidential virtual machine. Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06add APIs for detecting confidential virtualizationDaniel P. Berrangé4-0/+321
This code uses various CPUID checks to be able to identify * AMD SEV * AMD SEV-ES * AMD SEV-SNP * Intel TDX On HyperV/Azure, it has special checks for detecting SEV-SNP since the normal CPUID is blocked. Related: https://github.com/systemd/systemd/issues/27604 Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-06shared: add libpasswdqc supportEgor Ignatov8-3/+196
Co-authored-by: Dmitry V. Levin <ldv@altlinux.org> Resolves: #15055
2023-07-06treewide: fix "an" before consonant U soundsJoerg Behrmann21-27/+27
The article "a" goes before consonant sounds and "an" goes before vowel sounds. This commit changes an to a for UKI, UDP, UTF-8, URL, UUID, U-Label, UI and USB, since they start with the sound /ˌjuː/.
2023-07-06shared: add password quality check abstraction layer to support both ↵Egor Ignatov12-47/+54
pwquality and passwdqc Co-authored-by: Dmitry V. Levin <ldv@altlinux.org>
2023-07-06homed: change user_record_quality_check_password to use quality_check_passwordDmitry V. Levin1-19/+17
With this change, the only direct users of libpwquality functions are those defined in pwquality-util.
2023-07-06pwquality: add old password argument to quality_check_passwordDmitry V. Levin4-6/+6
This would allow to use quality_check_password() in user_record_quality_check_password() which still uses sym_pwquality_check() directly.
2023-07-06pwquality: do not log password suggestionsDmitry V. Levin1-1/+1
As logging password suggestions might leak sensitive information, print it instead. Suggested-by: Yu Watanabe <watanabe.yu+github@gmail.com>
2023-07-06pwquality: fix quality_check_password return valueDmitry V. Levin3-8/+15
quality_check_password() used to return the same value 0 in two different cases: when pwq_allocate_context() failed with a ERRNO_IS_NOT_SUPPORTED() code, and when pwquality_check() rejected the password. As result, users of quality_check_password() used to report password weakness also in case when the underlying library was not available. Fix this by changing quality_check_password() to forward the ERRNO_IS_NOT_SUPPORTED() code to its callers, and change the callers to handle this case gracefully.
2023-07-06pwquality: fix use of ERRNO_IS_NOT_SUPPORTEDDmitry V. Levin1-6/+8
Given that ERRNO_IS_*() also match positive values, call ERRNO_IS_NOT_SUPPORTED() only if the value returned by pwq_allocate_context() is negative.
2023-07-06Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272)Andrew Baxter1-0/+11
* Hwdb: Add Sanwa Direct 400-MA128 external trackpad ``` $ udevadm info /dev/input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse P: /devices/pci0000:00/0000:00:07.1/0000:28:00.3/usb5/5-1/5-1.4/5-1.4.4/5-1.4.4.1/5-1.4.4.1:1.1/0003:258A:0501.0097/input/input256/event15 M: event15 R: 15 U: input D: c 13:79 N: input/event15 L: 0 S: input/by-id/usb-SINO_WEALTH_USB_TOUCHPAD-if01-event-mouse S: input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse E: DEVPATH=/devices/pci0000:00/0000:00:07.1/0000:28:00.3/usb5/5-1/5-1.4/5-1.4.4/5-1.4.4.1/5-1.4.4.1:1.1/0003:258A:0501.0097/input/input256/event15 E: DEVNAME=/dev/input/event15 E: MAJOR=13 E: MINOR=79 E: SUBSYSTEM=input E: USEC_INITIALIZED=3436890430330 E: ID_INPUT=1 E: ID_INPUT_TOUCHPAD=1 E: ID_INPUT_WIDTH_MM=106 E: ID_INPUT_HEIGHT_MM=77 E: ID_BUS=usb E: ID_MODEL=USB_TOUCHPAD E: ID_MODEL_ENC=USB\x20TOUCHPAD E: ID_MODEL_ID=0501 E: ID_SERIAL=SINO_WEALTH_USB_TOUCHPAD E: ID_VENDOR=SINO_WEALTH E: ID_VENDOR_ENC=SINO\x20WEALTH E: ID_VENDOR_ID=258a E: ID_REVISION=0521 E: ID_TYPE=hid E: ID_USB_MODEL=USB_TOUCHPAD E: ID_USB_MODEL_ENC=USB\x20TOUCHPAD E: ID_USB_MODEL_ID=0501 E: ID_USB_SERIAL=SINO_WEALTH_USB_TOUCHPAD E: ID_USB_VENDOR=SINO_WEALTH E: ID_USB_VENDOR_ENC=SINO\x20WEALTH E: ID_USB_VENDOR_ID=258a E: ID_USB_REVISION=0521 E: ID_USB_TYPE=hid E: ID_USB_INTERFACES=:030101:030000: E: ID_USB_INTERFACE_NUM=01 E: ID_USB_DRIVER=usbhid E: ID_PATH=pci-0000:28:00.3-usb-0:1.4.4.1:1.1 E: ID_PATH_TAG=pci-0000_28_00_3-usb-0_1_4_4_1_1_1 E: ID_INPUT_TOUCHPAD_INTEGRATION=internal E: LIBINPUT_DEVICE_GROUP=3/258a/501:usb-0000:28:00.3-1.4.4 E: DEVLINKS=/dev/input/by-id/usb-SINO_WEALTH_USB_TOUCHPAD-if01-event-mouse /dev/input/by-path/pci-0000:28:00.3-usb-0:1.4.4.1:1.1-event-mouse ``` Link to product: https://www.amazon.co.jp/gp/product/B07Z5HCMFP
2023-07-06hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270)Thomas Genty1-0/+4
Co-authored-by: Yu Watanabe <watanabe.yu+github@gmail.com>
2023-07-06dissect: Add --mtree-hash= optionDaan De Meyer3-2/+21
Let's make including hashes in the mtree output configurable to allow speeding up the --mtree command in cases where file hashes are not required.
2023-07-06dissect: Allow a few verbs to operate on directories as well as image filesDaan De Meyer3-107/+152
--copy-to, --copy-from, --list and --mtree are useful for image directories as well as image files, so for those verbs, let's check if we were passed a directory and skip all the image file setup if that's the case.
2023-07-06tpm2-util: remove unnecessary semicolonAntonio Alvarez Feijoo1-1/+1
2023-07-06network/json: introduce PreferredLifetimeUSec and ValidLifetimeUSecYu Watanabe1-2/+4
2023-07-06service: explicitly cast float to usec_tLennart Poettering1-2/+2
Let's cast these floats explicitly to usec_t, since implicit float-to-integer casts are dangerous business, and we should underline that there's a cast happening here.
2023-07-06core/service: make restart delay increase more smoothlyYu Watanabe1-4/+10
Suggested in https://github.com/systemd/systemd/pull/26902#issuecomment-1620400583.
2023-07-06NEWS: more preparation for 254-rc1Lennart Poettering2-2/+117
2023-07-06networkctl: urlify captive portal entryYu Watanabe1-2/+9
2023-07-06test-network: drop ExecReload= in networkd.service and udevd.serviceYu Watanabe1-9/+1
Follow-up for 0e07cdb0e77d0322bc866b5e13abbe38e988059d and f84331539deae28fbeb42d45ad0c8d583b3372a3.
2023-07-06network/ndisc: downgrade log levelYu Watanabe1-41/+41
The failures may be critical for per-link operation, but not critical for the service.
2023-07-06network: handle captive portal with multiple routersYu Watanabe5-42/+144
Before this patch, if a network has multiple routers and one of them provides a captive portal, then the portal was overwritten or cleared when another RA from another router is received. This makes captive portals managed in the similar way as DNS servers or DNS domains. So now captive portal can safely handled even if a network has multiple routers.
2023-07-06network: update commentYu Watanabe1-2/+2
2023-07-06network: introduce link_get_captive_portal()Yu Watanabe4-51/+66
Then, downgrade log level of the message about mis-match of captive portals in different protocols.
2023-07-05tpm2: remove tpm2_make_primary()Dan Streetman1-163/+25
Replace use of tpm2_make_primary() with tpm2_create_loaded()
2023-07-05tpm2: move local vars in tpm2_unseal() to point of useDan Streetman1-7/+6
No functional change; cosmetic only.