summaryrefslogtreecommitdiffstats
path: root/src/basic/btrfs.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2024-10-29man: fix return parameter type of sd_device_get_device_id()Lennart Poettering1-1/+1
2024-10-28socket: support setting ownership of message queuesDavid Michael3-5/+58
This applies the existing SocketUser=/SocketGroup= options to units defining a POSIX message queue, bringing them in line with UNIX sockets and FIFOs. They are set on the file descriptor rather than a file system path because the /dev/mqueue path interface is an optional mount unit.
2024-10-28update NEWS for v257Lennart Poettering1-103/+411
2024-10-28po: Translated using Weblate (Czech)Pavel Borecki1-7/+6
Currently translated at 86.5% (219 of 253 strings) Co-authored-by: Pavel Borecki <pavel.borecki@gmail.com> Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/cs/ Translation: systemd/main
2024-10-28cgroup: Add support for ProtectControlGroups= private and strictRyan Wilson10-34/+323
This commit adds two settings private and strict to the ProtectControlGroups= property. Private will unshare the cgroup namespace and mount a read-write private cgroup2 filesystem at /sys/fs/cgroup. Strict does the same except the mount is read-only. Since the unit is running in a cgroup namespace, the new root of /sys/fs/cgroup is the unit's own cgroup. We also add a new dbus property ProtectControlGroupsEx which accepts strings instead of boolean. This will allow users to use private/strict via dbus and systemd-run in addition to service files. Note private and strict fall back to no and yes respectively if the kernel doesn't support cgroup2 or system is not using unified hierarchy. Fixes: #34634
2024-10-28core: Refactor ProtectControlGroups= to use enum vs boolRyan Wilson10-25/+85
This commit refactors ProtectControlGroups= from using a boolean in the dbus/execute backend to using an enum. There is no functional change but this will allow adding new non-boolean values (e.g. strict, private) a la PrivateHome.
2024-10-28sd-json,tree-wide: add sd_json_format_enabled() and use it everwhereZbigniew Jędrzejewski-Szmek31-95/+99
We often used a pattern like if (!FLAGS_SET(flags, SD_JSON_FORMAT_OFF)), which is rather verbose and also contains a double negative, which we try to avoid. Add a little helper to avoid an explicit bit check. This change clarifies an aditional thing: in some cases we treated SD_JSON_FORMAT_OFF as a flag (flags & SD_JSON_FORMAT_OFF), while in other cases we treated it as an independent enum value (flags == SD_JSON_FORMAT_OFF). In the first form, flags like SD_JSON_FORMAT_SSE do _not_ turn the json output on, while in the second form they do. Let's use the first form everywhere. No functional change intended. Initially I wasn't sure if this helper should be made public or just internal, but it seems such a common pattern that if we expose the flags, we might just as well expose it too, to make life easier for any consumers.
2024-10-28sd-id128: mark functions as const, not pureZbigniew Jędrzejewski-Szmek1-5/+5
We would need to use pure if the funtion was getting pointers and dereferencing them. But sd128_t is a structure and those functions only access the parameters of the call.
2024-10-28sd-common: add __const__Zbigniew Jędrzejewski-Szmek1-0/+4
const is stronger than pure, see https://gcc.gnu.org/onlinedocs/gcc/Common-Function-Attributes.html#index-pure-function-attribute and https://gcc.gnu.org/onlinedocs/gcc/Common-Function-Attributes.html#index-const-function-attribute.
2024-10-28meson: add loongarch64's definition to cpu_arch_definesZhou Qiankang1-7/+8
The default definition to add is `-D__loongarch64__`, which is not searched in [bpf_tracing.h](https://github.com/libbpf/libbpf/blob/09b9e83102eb8ab9e540d36b4559c55f3bcdb95d/src/bpf_tracing.h#L68) This may avoid `error: Must specify a BPF target arch via __TARGET_ARCH_xxx` in loongarch64 Signed-off-by: Zhou Qiankang <wszqkzqk@qq.com>
2024-10-27po: Translated using Weblate (Indonesian)Andika Triwidada1-50/+33
Currently translated at 100.0% (253 of 253 strings) Co-authored-by: Andika Triwidada <andika@gmail.com> Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/id/ Translation: systemd/main
2024-10-27core: Add RootDirectory= path to error message if directory does not existRyan Wilson1-10/+26
A colleague reported when RootDirectory= does not exist, systemd reports an error like: ``` Failed to set up mount namespacing: No such file or directory ``` Unfortunately, with large spec files, it can be hard to diagnose which path systemd is talking about. Thus, to make the error message more helpful and similar to mount error messages, we add the root directory/image path into the error message like: ``` Failed to set up mount namespacing: /tmp/thisdoesnotexist: No such file or directory ```
2024-10-27core/execute: Rename error_path -> reterr_path/ret_path per coding guidelinesRyan Wilson3-18/+18
This is a non-functional change to ensure error_path used to print out the offending mount causing an error follows coding guidelines.
2024-10-26core/cgroup: rename CGROUP_PRESSURE_WATCH_ON/OFF -> CGROUP_PRESSURE_WATCH_YES/NOYu Watanabe4-21/+20
No functional change, but let's print yes/no rather than on/off in systemd-analyze. Similar to 2e8a581b9cc1132743c2341fc334461096266ad4 and edd3f4d9b7a63dc9a142ef20119e80d1d9527f2f. (Note, the commit messages of those commits are wrong, as parse_boolean() supports on/off anyway.)
2024-10-26hwdb: add Stream Deck Neo (#34903)Sascha Mester1-0/+4
2024-10-26sd-event: fix memleak when built without assertionYu Watanabe1-5/+8
Fixes a bug introduced by baf3fdec27f0b3a1f3d39c7def2a778824cbee51. This also adds several assertions at the beginning of the function. Fixes #34899.
2024-10-26man: fix typoYu Watanabe1-1/+1
Follow-up for 115fac3c29c80d8917158df2275d45fee118d61f.
2024-10-26basic/missing: add short comment about when CLONE_NEWCGROUP is addedYu Watanabe1-0/+1
2024-10-26tree-wide: replace for loop with FOREACH_ELEMENT or FOREACH_ARRAY macros ↵Integral46-269/+249
(#34893)
2024-10-25machine: operation should not send a response when 'done' callback setIvan Kruglov1-14/+17
2024-10-25test: add brief testcase for systemd-run disconnect handlingLennart Poettering1-0/+3
2024-10-25run: reconnect if our dbus connection is terminatedLennart Poettering1-57/+196
We must be prepared that systemd temporarily drops off the bus or disconnects our direct connections (due to systemctl daemon-reexec or so). Hence automatically reconnect when we watch the unit status, and handle this case gracefully. Fixes: #32906 #27204
2024-10-25update TODOLennart Poettering1-3/+0
2024-10-25run: drop "-" prefix from command line when generating unit descriptionLennart Poettering1-1/+13
Let's not confuse users with the login shell indicator and drop it from the description. This means a run0 session will now usually show up with a description of "[run0] /bin/bash" rather than "[run0] -/bin/bash".
2024-10-25run: prefix unit description with our own process nameLennart Poettering1-2/+4
I think we should try to communicate clearly if something is a run0 session, or a systemd-run invocation. Hence, let's initialize the description so that the command is prefixed by program_invocation_short_name. Effectively this means that our run0 sessions now appear as services with a description of "[run0] -/bin/bash"
2024-10-25run: tweak how we name our transient unitsLennart Poettering1-54/+22
The current logic is a bit complex how systemd-run units are called. It used to be just the unique ID of the dbus connection. Which was nice, since its system-widely, uniquely assigned to us. But this didn't work out well, due to direct connections to PID 1 and due to soft reboots. We nowadays have a better ID to use though, with nicer properties: the kernel manages a pidfd ID for every process after all, and it's globally unique, for any process, and regardless of soft reboots. Hence use that for naming preferably, and just keep one branch with a randomized name as fallback.
2024-10-25run0: optionally show superhero emoji on each shell promptLennart Poettering5-18/+89
This makes use of the infra introduced in 229d4a980607e9478cf1935793652ddd9a14618b to indicate visually on each prompt that we are in superuser mode temporarily. pick ad5de3222f userdbctl: add some basic client-side filtering
2024-10-25ci: add some basic testing of the new --pty and --pipe switchesLennart Poettering2-0/+19
2024-10-25run0: add options to force allocation of PTY or of pipe useLennart Poettering2-1/+42
Fixes: #33033
2024-10-25tree-wide: use isatty_safe() everywhereLennart Poettering2-6/+6
2024-10-25update TODOLennart Poettering1-0/+5
2024-10-24test: add quick test to verify the PAM stack really ran in all run0 modes of ↵Lennart Poettering1-1/+4
operation
2024-10-24core: make sure that if PAMName= is set we always do the full user changing ↵Lennart Poettering1-3/+18
even if no user is specified explicitly When PAMName= is set this should be enough to go through our entire user changing story, so that PAM is definitely run, and environment variables definitely pulled in and so on. Previously, it would happen that under some circumstances we might no do this when transitioning from root to root itself even though PAM was enabled. Fixes: #34682
2024-10-24user-util: tighten shell validation a tiny bitLennart Poettering3-9/+30
2024-10-24ci: give new userdbctl some CI exposureLennart Poettering1-0/+14
2024-10-24user-record: fix indentationLennart Poettering1-24/+24
2024-10-24userdbctl: set shell/home cell type to TABLE_PATHLennart Poettering1-2/+2
This only matters for sorting, and we currently don't support sorting by path, hence this is of no real effect, but it certainly is more correct.
2024-10-24userdbctl: grey out nologin shell in tabular outputLennart Poettering1-4/+8
2024-10-24userdbctl: optionally hide UID range boundaries in outputLennart Poettering2-25/+67
2024-10-24userdbctl: add some basic client-side filteringLennart Poettering6-9/+288
This adds some basic client-side user/group filtering to "userdbctl": 1. by uid/gid min/max 2. by user "disposition" (i.e. show only regular users with "userdbctl user -R") 3. by fuzzy name (i.e. search by substring/levenshtein of user name, real name, and other identifiers of the user/group record). In the long run we also want to support this server side, but let's start out with doing this client-side, since many backends won't support server-side filtering anytime soon anyway, so we need it in either case.
2024-10-24veritysetup-generator: remove unused codeAntonio Alvarez Feijoo1-9/+0
2024-10-24man/veritysetup-generator: document veritytab kernel command line optionAntonio Alvarez Feijoo1-2/+14
2024-10-24man: fix links to veritysetup(8)Antonio Alvarez Feijoo3-4/+4
2024-10-24man: insert a comma before 'and'Yu Watanabe1-1/+1
Follow-up for bd91f23acfecc92ede6965d752540a758b3e6c79.
2024-10-24Revert "TEST-55-OOMD: workaround for kernel regression in 6.12-rcX"Yu Watanabe1-18/+3
This reverts commit 88bbf187a9b2ebe0732caa1e886616ae5f8186da. The kernel regression has been hopefully fixed by https://github.com/torvalds/linux/commit/c6508124193d42bbc3224571eb75bfa4c1821fbb which is included in 6.12-rc4. Let's drop the workaround.
2024-10-24po: Translated using Weblate (Swedish)Anders Jonsson1-4/+4
Currently translated at 100.0% (253 of 253 strings) Co-authored-by: Anders Jonsson <anders.jonsson@norsjovallen.se> Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/sv/ Translation: systemd/main
2024-10-23docs: Mention that a local build might be required to use mkosiDaan De Meyer1-26/+31
Currently we need ukify with support for --profile and --join-profile which isn't in an official release yet so mention that a local build from source might be required.
2024-10-23man/network: suggest to not request IA_NA when received RA with Managed bit ↵Yu Watanabe1-0/+2
unset Follow-up for 1f5a052963464755e87a075f6f4a8867b2199311.
2024-10-23core: don't forget about fallback_smack_process_labelŁukasz Stelmach1-1/+1
Call setup_smack() also when only fallback_smack_process_label is set. Fixes: 75689fb2d41f
2024-10-23core/namespace: replace MOUNT_PRIVATE_TMP_READ_ONLY with MOUNT_PRIVATE_TMP ↵Yu Watanabe1-10/+5
with .read_only = true