summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* resolved: use dns_scope_ifindex() at more placesLennart Poettering2024-09-112-3/+13
| | | | And add a mirroring dns_scope_ifname()
* resolved: simplify initialization of DnsScopeLennart Poettering2024-09-111-4/+3
|
* pcrlock: remove empty components from our listLennart Poettering2024-09-111-14/+30
| | | | | | | This is a rework of e7a93e75219b22424bab95fe45982f5eef21d581: instead of handling components with n_variants being zero at every step of the way, we instead remove it from our list after loading all components, given that such a component simply makes not sense for the rest of our logic.
* resolved: use unlinkat() where appropriateLennart Poettering2024-09-111-8/+2
|
* Merge pull request #34377 from DaanDeMeyer/symlinksDaan De Meyer2024-09-113-20/+172
|\ | | | | repart: Add MakeSymlinks=
| * repart: Add MakeSymlinks=Daan De Meyer2024-09-113-5/+158
| | | | | | | | Similar to MakeDirectories=, but creates symlinks in the filesystem.
| * repart: Add missing parameter commentDaan De Meyer2024-09-111-1/+1
| |
| * repart: Fix memory corruptionDaan De Meyer2024-09-111-2/+3
| |
| * repart: Reuse partition_needs_populate() moreDaan De Meyer2024-09-111-14/+12
| |
* | resolvectl: show DefaultRoute state in per-link DNS staus info tooLennart Poettering2024-09-111-0/+6
| |
* | pcrlock: correct --help text regarding recovery pinLennart Poettering2024-09-111-1/+1
| | | | | | | | Fixes: #33917
* | cryptenroll: don't try to get PCR bank if we know the device keyLennart Poettering2024-09-111-1/+2
| | | | | | | | | | | | | | | | | | | | If we operate in "offline" mode, i.e. know the device key, then we will not have a TPM2 connection, hence don't try to read the PCR bank to use form it. We don't need it anyway because we are not going to test unseal things. Fixes: #33855
* | hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZFilip Lewiński2024-09-111-2/+4
| | | | | | | | Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
* | udev: allow persistent storage rules for zram devicesKarel Zak2024-09-112-2/+2
| | | | | | | | | | | | | | The /dev/zramN devices can be used as regular block devices. They are typically used for swap areas, but it would be beneficial to have LABEL and UUID in the udev database to make it more user-friendly for tools such as lsblk or mount (if used with other filesystems).
* | man: fix help text for systemd-creds tool's "list" verbLennart Poettering2024-09-111-2/+2
| | | | | | | | | | I guess this was copy/pasted from sysupdate? Weird though. Fix it. And also reword "cat" help text to make it more precise.
* | pcrlock: log if we generate an "empty" policyLennart Poettering2024-09-111-0/+3
| | | | | | | | | | | | | | | | | | | | Such a policy won't provide any protection, but it's still entirely fine to have it like this in various contexts, for example at OS install time, to allocate the nvindex and reference it in enrollments. However, it does deserve mention, hence log about it at LOG_NOTICE level. This is based on a similar patch by Arnaud Patard <arnaud.patard@collabora.com> proposed at #33663.
* | man: Correct flag description of systemd-catsinus-x2024-09-111-1/+4
| | | | | | | | | | | | It is not true that "no string" is written to journal; the binary name is used when run via `systemd-cat command`, or `cat` is used when run via `command | systemd-cat`.
* | test: fix TEST_SKIP for test cases with subtestsLuca Boccassi2024-09-111-3/+4
| | | | | | | | | | | | | | TEST-64-UDEV-STORAGE is invoked with the subtest appended, so TEST_SKIP=TEST-64-UDEV-STORAGE does not work. Fix it by using TEST_SKIP as a partial match. Follow-up for ddc91af4eaa32511f92c83b2c24d9cc0425fd5f5
* | tpm2-util: fix whitespaceLennart Poettering2024-09-111-4/+4
|/
* Merge pull request #34353 from yuwata/timesync-bus-documentLennart Poettering2024-09-116-2/+190
|\ | | | | timesync: add document for org.freedesktop.timesync1
| * man: add basic documents for org.freedesktop.timesync1Yu Watanabe2024-09-103-0/+170
| | | | | | | | Closes #34352.
| * timesync: add support of basic command line optionsYu Watanabe2024-09-101-0/+9
| |
| * timesync: use BusObjectImplementationYu Watanabe2024-09-102-2/+11
| |
* | Merge pull request #34348 from poettering/stub-efivar-tweaksLennart Poettering2024-09-116-21/+63
|\ \ | | | | | | sd-stub: report stub location in efi vars
| * | stub: add StubDevicePartUUID/StubImageIdentifierLennart Poettering2024-09-114-1/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These variables closely mirror the existing LoaderDevicePartUUID/LoaderImageIdentifier variables. But the Stub… variables indicate the location of the stub/UKI (i.e. of systemd-stub), while the Loader… variables indicate the location of the boot loader (i.e. of systemd-boot). (Except of course, there is no boot loader used, in which case both sets point to the stub/UKI, as a special case). This actually matters, as we support that sd-boot runs off the ESP, while a UKI then runs off XBOOTLDR, i.e. two distinct partitions.
| * | stub: tweak setting of common Loader* EFI varsLennart Poettering2024-09-111-3/+4
| | | | | | | | | | | | | | | | | | | | | Let's always check if we have data to set *first*, and only then check if an EFI var is already set. Checking for the EFI var is more expensive after all.
| * | man: fix documentation for LoaderDevicePathUUID + LoaderImageIdentifier, in ↵Lennart Poettering2024-09-111-6/+13
| | | | | | | | | | | | | | | | | | | | | systemd-stub man page too Let's fix the version here too, and also clarify that this is usually not necessarily the ESP.
| * | man: fix LoaderDevicePathUUID + LoaderImageIdentifier descriptionsLennart Poettering2024-09-111-11/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | First of all, these were always set, i.e. since sd-boot was merged into our tree, i.e. v220. Let's say so explicitly. Also, let's be more accurate, regarding which partition this referes to: it's usually "the" ESP, but given that you can make firmware boot from arbitrary disks, it could be any other partition too. Hence, be explicit on this. Also, clarify tha sd-stub will set this too, if sd-boot never set it.
| * | bootctl: show new sd-boot/sd-stub feature flagsLennart Poettering2024-09-111-0/+2
| | |
* | | Change OS X to macOS in BOOT.md (#34358)Skye Chappelle2024-09-111-1/+1
|/ /
* | src/sysext: Use versioned names when logging extensions used for merge operationMaanya Goenka2024-09-111-3/+15
| | | | | | | | | | | | If this is not done, and there are two images, image_1.raw and image_2.raw under an image.raw.v folder, then the log will say "Using extensions image" instead of using "Using extensions image_2.raw" which is the desired behavior for v-picked extensions.
* | tmpfiles: add separate fragment for stuff we copy from .extra/ into /run/systemdLennart Poettering2024-09-103-15/+30
| | | | | | | | | | | | | | | | | | | | | | Let's move copying out the PCR signature/key into its own tmpfiles snippet. And then let's add support for copying out the profile + os-release information systemd-stub now places in the invoked initrd. That way these four pieces of information are available even after the initrd→host transition.
* | meson: increase default number of available sections for the stubLennart Poettering2024-09-102-2/+14
|/ | | | | | | | | | | Now that we have multi-profile UKIs people likely want to stick more PE sections into them than before. Hence, bump the number of available PE section slots to 30 (up from 15). Also, make this configurable at build time since some folks probably want even more, and others don't want this at all. (pre-allocating too many shouldn't matter too much btw, I'd advise everyone to overshoot, except maybe on the tiniest of embedded boards)
* doc-sync: strip point release from version before uploadingLuca Boccassi2024-09-101-0/+2
| | | | | We create subdirectories for each major release, but not for point releases so strip the suffix if it is present
* cryptsetup: use the new crypt_token_set_external_path() API if availableLennart Poettering2024-09-103-36/+23
| | | | | | | | | Let's make use of libcryptsetup's new crypt_token_set_external_path() API in place of the interposition stuff we have been doing before. Let's kill it entirely, given that this was a developer feature only anyway (and guarded by an appropriate ifdef). Fixes: #30098
* homectl: when chainloading a shell, prefix "-" rather than overriding first charLennart Poettering2024-09-101-2/+7
| | | | | | | | | | | | Login shells are supposed to marked via a dash as first char. We follow that logic, but right now we simply overwrite the first char of the shell. That might not be the right choice, given that this turns "zsh" into "-sh", which suggests some bourne shell process. Hence, let's correct things, and instead prefix a dash, which should be safer. Inspired by findings on https://github.com/systemd/systemd/issues/34153#issuecomment-2338104907
* Merge pull request #34339 from poettering/uki-with-many-bootLennart Poettering2024-09-105-139/+247
|\ | | | | sd-boot: synthesize one menu entry for each profile of multi-profile UKIs
| * boot: don't hardcode drop-in paths at multiple placesLennart Poettering2024-09-101-6/+12
| | | | | | | | | | Instead, let's define them once, and pass them through as parameters everywhere.
| * boot: synthesize a separate menu entry from each .profile sectionLennart Poettering2024-09-103-93/+201
| | | | | | | | | | | | This iterates through the .profile sections a UKI provides and uses it to generate multiple menu entries from them, one for each .profile section.
| * boot: only open type2 ukis once when parsingLennart Poettering2024-09-103-51/+45
| |
* | hwdb: death to tabs!Lennart Poettering2024-09-101-15/+15
| | | | | | | | | | Some tabs snuck in here, but we don't like tabs in our codebase. Fix them.
* | Merge pull request #34331 from yuwata/network-netdev-cleanupsYu Watanabe2024-09-1013-124/+610
|\ \ | | | | | | network/netdev: several cleanups for attaching/detaching netdev, and setting/getting ifindex from netdev
| * | test-network: add test more cases for assigned units for each interfaceYu Watanabe2024-09-101-0/+135
| | |
| * | network/state-file: save assigned .netdev file even if the interface is ↵Yu Watanabe2024-09-101-6/+6
| | | | | | | | | | | | | | | | | | unmanaged Follow-up for 2cf9b1a0eed7bcd85543e19ba6f0d26767fe1163.
| * | network/vxcan: also manage peer interface name by managerYu Watanabe2024-09-102-0/+66
| | | | | | | | | | | | | | | Then, the Link object for the peer interface can have a reference to the corresponding NetDev object.
| * | network/vxcan: refuse when peer and the main interface names are equivalentYu Watanabe2024-09-101-0/+4
| | |
| * | network/l2tp: manage l2tp session name by ManagerYu Watanabe2024-09-102-0/+80
| | | | | | | | | | | | | | | Then, Link object for an L2TP session can have reference to the corresponding NetDev object.
| * | network/l2tp: refuse duplicated session nameYu Watanabe2024-09-101-2/+15
| | |
| * | network/l2tp: downgrade log level of several messagesYu Watanabe2024-09-101-21/+21
| | | | | | | | | | | | Also, use log_section_warning_errno() where applicable.
| * | network/veth: also manage peer name by ManagerYu Watanabe2024-09-102-0/+67
| | | | | | | | | | | | | | | Then, the Link object for the peer interface can have a reference to the corresponding NetDev object.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-04 23:44:29 +0100