summaryrefslogtreecommitdiffstats
path: root/configure.ac (follow)
Commit message (Collapse)AuthorAgeFilesLines
* build-sys: Allow disabling installation of pam config snippetFelipe Sateler2016-10-121-1/+2
|
* seccomp: add support for the s390 architecture (#4287)hbrueckner2016-10-051-1/+1
| | | | | | Add seccomp support for the s390 architecture (31-bit and 64-bit) to systemd. This requires libseccomp >= 2.3.1.
* build-sys: drop last reference to --have-kdbusZbigniew Jędrzejewski-Szmek2016-09-091-1/+0
|
* build-sys: clarify that --disable-efi is about sd-boot and bootctlZbigniew Jędrzejewski-Szmek2016-08-141-2/+2
| | | | | | | If wasn't obvious what the effect of --disable-efi was without going through Makefile.am. Fixes #3959.
* nss-systemd: resolve root/nobody staticallyLennart Poettering2016-08-041-1/+21
| | | | | | | | | | Let's extend nss-systemd to also synthesize user/group entries for the UIDs/GIDs 0 and 65534 which have special kernel meaning. Given that nss-systemd is listed in /etc/nsswitch.conf only very late any explicit listing in /etc/passwd or /etc/group takes precedence. This functionality is useful in minimal container-like setups that lack /etc/passwd files (or only have incompletely populated ones).
* build-sys: conditionally disable LTO if requested (#3823)Davide Cavalca2016-07-291-2/+5
| | | | This adds a --disable-lto option to ./configure, but does not change the default behavior.
* build-sys: metadata updates for v231 (#3803)v231Lennart Poettering2016-07-251-1/+1
|
* catalog: make support URL to show in shipped catalog entries configurable ↵Lennart Poettering2016-06-261-0/+9
| | | | | | | | | | | | (#3597) Let's allow distros to change the support URL to expose in catalog entries by default. It doesn't make sense to direct end-users to the upstream project for common errors. This adds a --with-support-url= switch to configure, which allows overriding the default at build-time. Fixes: #2516
* Ensure kdbus isn't used (#3501)Dave Reisner2016-06-181-10/+0
| | | | | | | | Delete the dbus1 generator and some critical wiring. This prevents kdbus from being loaded or detected. As such, it will never be used, even if the user still has a useful kdbus module loaded on their system. Sort of fixes #3480. Not really, but it's better than the current state.
* Merge pull request #3511 from andir/networkd-vrfZbigniew Jędrzejewski-Szmek2016-06-161-0/+1
|\ | | | | networkd: add support for vrf interfaces (#3316)
| * networkd: added support for vrf interfaces (#3316)Andreas Rammhold2016-06-161-0/+1
| |
* | core: set $JOURNAL_STREAM to the dev_t/ino_t of the journal stream of ↵Lennart Poettering2016-06-151-0/+1
|/ | | | | | | | | | executed services This permits services to detect whether their stdout/stderr is connected to the journal, and if so talk to the journal directly, thus permitting carrying of metadata. As requested by the gtk folks: #2473
* build: fix missing symbol for old kernel headers (#3530)Andrew Jeddeloh2016-06-141-0/+1
| | | | | | | Fix issue where IN6_ADDR_GEN_MODE_STABLE_PRIVACY is undefined but IFLA_INET6_ADDR_GEN_MODE is defined and thus the former does not get fixed in missing.h. This occurs with kernel headers new enough to have the IFLA_INET6_ADDR_GEN_MODE but old enough to not yet have IN6_ADDR_GEN_MODE_STABLE_PRIVACY (e.g. 3.18).
* build-sys: bump so versionZbigniew Jędrzejewski-Szmek2016-05-221-1/+1
|
* build-sys: allow references to adm group to be omitted (#3150)Franck Bui2016-05-011-0/+9
|
* build-sys: improve compat with older kernel headersLennart Poettering2016-04-291-1/+1
| | | | | | | | In 4.2 kernel headers, some netlink defines are missing that we need. missing.h already can add them in, but currently makes this dependent on a definition that these kernels already have. Change the check hence to check for the newest definition in the table, so that the whole bunch of definitions as added in on all kernels lacking this.
* build-sys: add --without-kill-user-processes configure optionZbigniew Jędrzejewski-Szmek2016-04-211-102/+113
|
* configure.ac: bump curl dependency to 7.32.0Lukas Nykryn2016-04-061-1/+1
| | | | We are using CURLOPT_XFERINFOFUNCTION which was added in 7.32.0.
* Merge pull request #2947 from keszybz/test-nssLennart Poettering2016-04-061-1/+3
|\ | | | | Add a test for nss modules and some related fixes
| * test-nss: test the resolution of various namesZbigniew Jędrzejewski-Szmek2016-04-061-1/+3
| | | | | | | | | | nss-dns is also "tested". It should be almost always available, and provides a reference for comparison.
* | basic/missing: add copy_file_rangeZbigniew Jędrzejewski-Szmek2016-03-171-2/+13
| | | | | | | | | | syscall numbers based on: https://fedora.juszkiewicz.com.pl/syscalls.html
* | Enable test-ipcrm, test-hostname in unsafe testsZbigniew Jędrzejewski-Szmek2016-03-051-2/+4
|/
* Remove systemd-bootchartDaniel Mack2016-02-231-9/+0
| | | | | | | This commit rips out systemd-bootchart. It will be given a new home, outside of the systemd repository. The code itself isn't actually specific to systemd and can be used without systemd even, so let's put it somewhere else.
* missing.h: Explicitly check for IFLA_BRPORT_PROXYARPDaniel Mack2016-02-221-0/+1
| | | | | | | | | | | | | | | RHEL explicitly disables IFLA_BRPORT_PROXYARP by renaming the enum value. In order to support unpatched builds, we have two options: a) redefine the enum value through missing.h and ignore the fact that it is really unsupported, or b) omit that enum value on rtnl_prot_info_bridge_port_types[] As we are not actually using this netlink type anywhere, and because it is only hooked up for the sake of completeness, this patch opts for the former.
* Merge pull request #2621 from keszybz/wheel-groupMartin Pitt2016-02-181-0/+9
|\ | | | | build-sys: allow wheel group name to be specified
| * build-sys: allow references to wheel group to be omittedZbigniew Jędrzejewski-Szmek2016-02-181-0/+9
| | | | | | | | https://github.com/systemd/systemd/issues/2492
* | build-sys: fix type detectionLennart Poettering2016-02-161-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | Before this patch existence of char16_t, char32_t, key_serial_t was checked with AC_CHECK_DECLS() which doesn't actually work for types. Correct this to use AC_CHECK_TYPES() instead. Also, while we are at it, change the check for memfd_create() to use AC_CHECK_DECLS() instead of AC_CHECK_FUNCS(). This is a better choice, since a couple of syscalls are defined by glibc but not exported in the header files (pivot_root() for example), and we hence should probably be more picky with memfd_create() too, which glibc might decide to expose one day, but not necessarily in the headers too.
* | resolved: turn on DNSSEC by default, unless configured otherwiseLennart Poettering2016-02-161-2/+17
|/ | | | | | | | | | | | | | | | Let's make sure DNSSEC gets more testing, by defaulting DNSSEC to "allow-downgrade" mode. Since distros should probably not ship DNSSEC enabled by default add a configure switch to disable this again. DNSSEC in "allow-downgrade" mode should mostly work without affecting user experience. There's one exception: some captive portal systems rewrite DNS in order to redirect HTTP traffic to the captive portal. If these systems implement DNS servers that are otherwise DNSSEC-capable (which in fact is pretty unlikely, but still...), then this will result in the captive portal being inaccessible. To fix this support in NetworkManager (or any other network management solution that does captive portal detection) is required, which simply turns off DNSSEC during the captive portal detection, and resets it back to the default (i.e. on) after captive portal authentication is complete.
* build-sys: drop libsystemd-{id128,daemon,login,journal}.so compat libsLennart Poettering2016-02-131-12/+0
| | | | | They have long been obsolete, and upstream distros and packages have mostly switched over, let's get rid of it for good.
* Merge pull request #2587 from haraldh/tpmv3Lennart Poettering2016-02-111-0/+23
|\ | | | | sd-boot: put hashed kernel command line in a PCR of the TPM
| * sd-boot: put hashed kernel command line in a PCR of the TPMHarald Hoyer2016-02-111-0/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The UEFI BIOS already hashes the contents of the loaded image, so the initrd and the command line of the binary are recorded. Because manually added LoadOptions are not taken into account, these should be recorded also. This patch logs and extends a TPM PCR register with the LoadOptions. This feature can be enabled with configure --enable-tpm The PCR register index can be specified with configure --with-tpm-pcrindex=<NUM>
* | configure: bump version numberv229Lennart Poettering2016-02-111-1/+1
|/
* coredump: dump priviliges when processing system coredumpsLennart Poettering2016-02-101-0/+1
| | | | | | | | Let's add an extra-safety net and change UID/GID to the "systemd-coredump" user when processing coredumps from system user. For coredumps of normal users we keep the current logic of processing the coredumps from the user id the coredump was created under. Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=87354
* configure.ac: Fix help text of --enable-* optionsDaniel Mack2016-02-101-2/+2
| | | | Fixes #2567
* utf8.[ch] et al: use char32_t and char16_t instead of int, int32_t, int16_tShawn Landden2016-01-271-1/+2
| | | | | | | | | | | | rework C11 utf8.[ch] to use char32_t instead of uint32_t when referring to unicode chars, to make things more expressive. [ @zonque: * rebased to current master * use AC_CHECK_DECLS to detect availibility of char{16,32}_t * make utf8_encoded_to_unichar() return int ]
* build-sys: allow building man pages even if disabled in ./configureZbigniew Jędrzejewski-Szmek2016-01-181-1/+1
| | | | | | | | | | | | | | This is purely for developer convenience: building man pages is slow so people tend to disable them when not working on documentation. But sometimes it is useful to build the man page to look something up, especially when working on an older machine which has outdated documentation, or to test some change to documentation. The rules to build man pages are now outside of the ENABLE_MANPAGES conditional, but they are not used unless manually invoked, and only the inclusion of man pages in build and install targets is affected by the conditional. Also, more generated files are removed in clean, which seems to be good thing, and Makefile.am is simplified.
* build-sys: refactor `have_smack` detectionEvgeny Vereshchagin2015-12-121-6/+3
|
* build-sys: fix ./configure --enable-smackEvgeny Vereshchagin2015-12-121-1/+1
| | | | | | | | | | | | | | Fixes: $ ./configure ... --enable-smack $ make src/core/load-fragment-gperf.c $ grep -i smack src/core/load-fragment-gperf.c {"Swap.SmackProcessLabel", config_parse_warn_compat, DISABLED_CONFIGURATION, 0}, ... should be {"Swap.SmackProcessLabel", config_parse_exec_smack_process_label, 0, offsetof(Swap, exec_context)}, ...
* importd: drop dkr supportLennart Poettering2015-12-101-9/+0
| | | | | | | | The current code is not compatible with current dkr protocols anyway, and dkr has a different focus ("microservices") than nspawn anyway ("whole machine containers"), hence drop support for it, we cannot reasonably keep this up to date, and it creates the impression we'd actually care for the microservices usecase.
* Merge pull request #2129 from poettering/dnssec3Tom Gundersen2015-12-101-4/+14
|\ | | | | Third DNSSEC patch series
| * build-sys: libgcrypt error messages make no sense without libgpg-errorLennart Poettering2015-12-101-4/+14
| | | | | | | | Hence, pull in this library too, if we need libgcrypt.
* | build: fix systemd-journal-upload installationEvgeny Vereshchagin2015-12-091-13/+22
|/ | | | | | | | | | | | Fixes: $ ./configure ... --disable-microhttpd --enable-libcurl --enable-sysusers $ make && make install DESTDIR=$(pwd)/INST $ ls INST/usr/lib/sysusers.d/ basic.conf systemd.conf There is no a file with `systemd-journald-upload`
* build: bump version numbersv228David Herrmann2015-11-181-1/+1
| | | | Prepare for v228 release and bump version numbers.
* build-sys: temporarily lower libmount version checkMartin Pitt2015-11-031-1/+1
| | | | | | | util-linux 2.27.1's configure.ac still claims to be 2.27.0, which breaks our version check. Lower it back to 2.27.0 until util-linux gets a fixed tarball. See #1754
* core: drop check for /etc/mtabMartin Pitt2015-11-021-1/+1
| | | | | | | | | | util-linux 2.27.1 now entirely stops looking at /etc/mtab, so we don't need to verify /etc/mtab during early boot any more. Later on, tmpfiles.d/etc.conf will fix /etc/mtab anyway, so there's not even a point in warning about it. Drop test_mtab() and bump the util-linux dependency to >= 2.17.1. Fixes #1495
* Merge pull request #1527 from keszybz/lz4Lennart Poettering2015-10-151-20/+26
|\ | | | | Using lz4 frame api for coredump files
| * build-sys: enable lz4 by default if availableZbigniew Jędrzejewski-Szmek2015-10-151-19/+25
| | | | | | | | | | | | | | | | --enable-lz4 can be used to force lz4 requirement, --disable-lz4 can be used to skip lz4 support even if available. Also, make surrounding checks for bzip2, xz, and zlib similar in structure. This fixes the check for requested but missing bzip2.
| * build-sys: use pkgconfig and lz4 and bump versionZbigniew Jędrzejewski-Szmek2015-10-111-2/+2
| | | | | | | | The new frame api was released in v. 125.
* | build: libdl is needed only for libnss_resolveMichal Schmidt2015-10-141-3/+4
| | | | | | | | | | Not everything needs to link to libdl. dlopen+dlsym are used only by libnss_resolve.
* | build: don't link everything to libcapMichal Schmidt2015-10-141-0/+1
| | | | | | | | | | | | | | | | | | The intent of the assignments around the check for libcap was obviously to avoid polluting LIBS. To work properly, LIBS must be restored from the save_LIBS variable. The practical effect is small though, because pretty much everything links with libbasic, which links with CAP_LIBS.