summaryrefslogtreecommitdiffstats
path: root/units (follow)
Commit message (Collapse)AuthorAgeFilesLines
* bus-proxy: add ExecReload=David Herrmann2015-08-042-0/+2
| | | | | | | | Make sure we support ExecReload= for bus-proxyd to reload configuration during runtime. This is *really* handy when hacking on kdbus. Package-managers are still recommended to run `busctl --address=unix:path=` directly.
* terminal: drop unfinished codeDavid Herrmann2015-07-272-16/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This drops the libsystemd-terminal and systemd-consoled code for various reasons: * It's been sitting there unfinished for over a year now and won't get finished any time soon. * Since its initial creation, several parts need significant rework: The input handling should be replaced with the now commonly used libinput, the drm accessors should coordinate the handling of mode-object hotplugging (including split connectors) with other DRM users, and the internal library users should be converted to sd-device and friends. * There is still significant kernel work required before sd-console is really useful. This includes, but is not limited to, simpledrm and drmlog. * The authority daemon is needed before all this code can be used for real. And this will definitely take a lot more time to get done as no-one else is currently working on this, but me. * kdbus maintenance has taken up way more time than I thought and it has much higher priority. I don't see me spending much time on the terminal code in the near future. If anyone intends to hack on this, please feel free to contact me. I'll gladly help you out with any issues. Once kdbus and authorityd are finished (whenever that will be..) I'll definitely pick this up again. But until then, lets reduce compile times and maintenance efforts on this code and drop it for now.
* units: add more caps to machinedLennart Poettering2015-07-271-1/+1
| | | | | | | | | | | Otherwise copying full directory trees between container and host won't work, as we cannot access some fiels and cannot adjust the ownership properly on the destination. Of course, adding these many caps to the daemon kinda defeats the purpose of the caps lock-down... but well... Fixes #433
* units: order networkd after sysctlTom Gundersen2015-07-231-1/+1
| | | | | | | This way networkd will correctly and race-freely inherit the default settings applied by sysctl. Suggested in issue #468.
* units: emergency.service: wait for plymouth to shut downMartin Pitt2015-07-101-1/+1
| | | | | | | | | Merely calling "plymouth quit" isn't sufficient, as plymouth needs some time to shut down. This needs plymouth --wait (which is a no-op when it's not running). Fixes invisible emergency shell with plymouth running endlessly. https://launchpad.net/bugs/1471258
* turn kdbus support into a runtime optionKay Sievers2015-06-172-4/+0
| | | | | | | | | | | | | ./configure --enable/disable-kdbus can be used to set the default behavior regarding kdbus. If no kdbus kernel support is available, dbus-dameon will be used. With --enable-kdbus, the kernel command line option "kdbus=0" can be used to disable kdbus. With --disable-kdbus, the kernel command line option "kdbus=1" is required to enable kdbus support.
* Revert "hwdb: actually search /run/udev/hwdb.d"Lennart Poettering2015-06-091-1/+0
|
* hwdb: actually search /run/udev/hwdb.dPeter Hutterer2015-06-091-0/+1
| | | | | The documentation claims hwdb entries may be placed in the volatile /run/udev/hwdb.d directory but nothing actually looked at it.
* udevd: hook up watchdog supportTom Gundersen2015-05-291-0/+1
| | | | | We are already sending watchdog notification, this tells PID1 to actually listen for them and restart udevd in case it gets stuck.
* units: conditionalize audit multicast socket on CAP_AUDIT_READLennart Poettering2015-05-201-0/+1
| | | | | The multicast logic can only work if the capability is available, hence require it.
* units: make sure systemd-nspawn@.slice instances are actually located in ↵Lennart Poettering2015-05-191-0/+1
| | | | | | machine.slice https://plus.google.com/112206451048767236518/posts/SYAueyXHeEX
* Use "new" --job-mode= option in more placesZbigniew Jędrzejewski-Szmek2015-05-182-2/+2
| | | | | | --irreversible/--ignore-dependencies/--fail are deprececated since 4dc5b821ae737914499119e29811fc3346e3d97c. Also add shell completions for --jobs-mode.
* units: make networkd pull in its own .busname unitTom Gundersen2015-05-152-0/+8
| | | | | | | | The daemon requires the busname unit to operate (on kdbus systems), since it contains the policy that allows it to acquire its service name. This fixes https://bugs.freedesktop.org/show_bug.cgi?id=90287
* units: fix typo in systemd-resolved.serviceLennart Poettering2015-05-141-1/+1
| | | | | | There's no network.service unit, we actually mean network.target here. Reported by Fco. Eduardo Ramírez.
* units: order nspawn containers after network.targetLennart Poettering2015-05-111-0/+1
| | | | | | | | This way we know that any bridges and other user-created network devices are in place, and can be properly added to the container. In the long run this should be dropped, and replaced by direct calls inside nspawn that cause the devices to be created when necessary.
* nspawn: make sure we install the device policy if nspawn is run as unit as ↵Lennart Poettering2015-04-281-0/+14
| | | | on the command line
* fsck: remove fsckd again, but keep the door open for external replacementLennart Poettering2015-04-285-37/+1
| | | | | | | | | | | | | | | | | For a longer discussion see this: http://lists.freedesktop.org/archives/systemd-devel/2015-April/030175.html This introduces /run/systemd/fsck.progress as a simply AF_UNIX/SOCK_STREAM socket. If it exists and is connectable we'll connect fsck's -c switch with it. If external programs want to get progress data they should hence listen on this socket and will get all they need via that socket. To get information about the connecting fsck client they should use SO_PEERCRED. Unless /run/systemd/fsck.progress is around and connectable this change reverts back to v219 behaviour where we'd forward fsck output to /dev/console on our own.
* units: specify timeouts for more oneshot servicesZbigniew Jędrzejewski-Szmek2015-04-288-0/+8
| | | | | | | | | Even trivial service occasionally get stuck, for example when there's a problem with the journal. There's nothing more annoying that looking at the cylon eye for a job with an infinite timeout. Use standard 90s for jobs that do some work, and 30s for those which should be almost instantenous.
* shutdownd: kill the old implementationDaniel Mack2015-04-243-34/+0
| | | | | | Not that all functionality has been ported over to logind, the old implementation can be removed. There goes one of the oldest parts of the systemd code base.
* units: set KillMode=mixed for our daemons that fork worker processesLennart Poettering2015-04-242-0/+2
| | | | | | | The daemons should really have the time to kill the workers first, before systemd does it, hence use KillMode=mixed for these daemons. https://bugs.freedesktop.org/show_bug.cgi?id=90051
* importd: add CAP_DAC_OVERRIDE capabilityLubomir Rintel2015-04-211-1/+1
| | | | | | | | | | | Fedora's filesystem package ships /usr/bin (and other directories) which are not writable by its owner. machinectl pull-dkr (and possibly others) are not able to extract those: 14182 mkdirat(3, "usr", 0700) = 0 14182 mkdirat(3, "usr/bin", 0500) = 0 14182 openat(3, "usr/bin/[", O_WRONLY|O_CREAT|O_EXCL|O_NOCTTY|O_NONBLOCK|O_CLOEXEC, 0700) = -1 EACCES (Permission denied) ...
* units: explicitly require /var, /tmp and /var/tmp to be mounted before ↵Lennart Poettering2015-04-031-3/+5
| | | | | | | | | | | | basic.target We support /var, /tmp and /var/tmp on NFS. NFS shares however are by default ordered only before remote-fs.target which is a late-boot service. /var, /tmp, /var/tmp need to be around earlier though, hence explicitly order them before basic.target. Note that this change simply makes explicit what was implicit before, since many early-boot services pulled in parts of /var anyway early.
* units: explicitly order systemd-user-sessions.service after ↵Lennart Poettering2015-04-031-1/+1
| | | | | | nss-user-lookup.target We should not allow logins before NIS/LDAP users are available.
* units: move After=systemd-hwdb-update.service dependency from udev to ↵Lennart Poettering2015-04-032-2/+2
| | | | | | | | | | udev-trigger Let's move the hwdb regeneration a bit later. Given that hwdb is non-essential it should be OK to allow udev to run without it until we do the full trigger. http://lists.freedesktop.org/archives/systemd-devel/2015-April/030074.html
* resolved: Do not add .busname dependencies, when compiling without kdbus.Dimitri John Ledkov2015-03-192-0/+3
|
* console-getty.service: don't start when /dev/console is missingJan Pazdziora2015-03-171-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Create minimal image which runs systemd FROM rhel7.1 RUN yum install -y /usr/bin/ps ENV container docker CMD [ "/usr/sbin/init" ] When you run the container without -t, the process /sbin/agetty --noclear --keep-baud console 115200 38400 9600 is not happy and checking the journal in the container, there is a stream of Mar 13 04:50:15 11bf07f59fff agetty[66]: /dev/console: No such file or directory Mar 13 04:50:25 11bf07f59fff systemd[1]: console-getty.service holdoff time over, scheduling restart. Mar 13 04:50:25 11bf07f59fff systemd[1]: Stopping Console Getty... Mar 13 04:50:25 11bf07f59fff systemd[1]: Starting Console Getty... Mar 13 04:50:25 11bf07f59fff systemd[1]: Started Console Getty. Mar 13 04:50:25 11bf07f59fff agetty[67]: /dev/console: No such file or directory Mar 13 04:50:35 11bf07f59fff systemd[1]: console-getty.service holdoff time over, scheduling restart. Mar 13 04:50:35 11bf07f59fff systemd[1]: Stopping Console Getty... Mar 13 04:50:35 11bf07f59fff systemd[1]: Starting Console Getty... Mar 13 04:50:35 11bf07f59fff systemd[1]: Started Console Getty. Mar 13 04:50:35 11bf07f59fff agetty[74]: /dev/console: No such file or directory Mar 13 04:50:45 11bf07f59fff systemd[1]: console-getty.service holdoff time over, scheduling restart. Mar 13 04:50:45 11bf07f59fff systemd[1]: Stopping Console Getty... Mar 13 04:50:45 11bf07f59fff systemd[1]: Starting Console Getty...
* timesyncd: enable timesyncd in virtual machinesKay Sievers2015-03-151-1/+1
| | | | | | | | | | | | | | | | | On Fri, Mar 13, 2015 at 8:25 PM, Michael Marineau <michael.marineau@coreos.com> wrote: > Currently systemd-timesyncd.service includes > ConditionVirtualization=no, disabling it in both containers and > virtual machines. Each VM platform tends to deal with or ignore the > time problem in their own special ways, KVM/QEMU has the kernel time > source kvm-clock, Xen has had different schemes over the years, VMware > expects a userspace daemon sync the clock, and other platforms are > content to drift with the wind as far as I can tell. > > I don't know of a robust way to know if a platform needs a little > extra help from userspace to keep the clock sane or not but it seems > generally safer to try than to risk drifting. Does anyone know of a > reason to leave timesyncd off by default? Otherwise switching to > ConditionVirtualization=!container should be reasonable.
* units: there is no systemd-udev-hwdb-update.serviceZbigniew Jędrzejewski-Szmek2015-03-151-1/+1
|
* fsckd: make sure unprivileged clients cannot play games with fsckdLennart Poettering2015-03-091-0/+1
|
* units: add missing unit fileLennart Poettering2015-02-241-0/+16
|
* importd: create a loopback btrfs file system for /var/lib/machines, if necessaryLennart Poettering2015-02-241-3/+0
| | | | | | | | | | | | | | | | | When manipulating container and VM images we need efficient and atomic directory snapshots and file copies, as well as disk quota. btrfs provides this, legacy file systems do not. Hence, implicitly create a loopback file system in /var/lib/machines.raw and mount it to /var/lib/machines, if that directory is not on btrfs anyway. This is done implicitly and transparently the first time the user invokes "machinectl import-xyz". This allows us to take benefit of btrfs features for container management without actually having the rest of the system use btrfs. The loopback is sized 500M initially. Patches to grow it dynamically are to follow.
* Add man page and references to it.Didier Roche2015-02-182-1/+2
| | | | | | Add man page explaining the plymouth theme protocol, usage of the daemon as well as the socket activation part. Adapt existing fsck man page.
* Add fsckd service and socket, retarget systemd-fsckDidier Roche2015-02-185-3/+35
| | | | | systemd-fsckd can be socket-activated by systemd-fsck process. Reflect that in the different unit files.
* machined: move logic for bind mounting into containers from machinectl to ↵Lennart Poettering2015-02-171-6/+5
| | | | | | | machined This extends the bus interface, adding BindMountMachine() for bind mounting directories from the host into the container.
* units: turn on --network-veth by default for systemd-nspawn@.serviceLennart Poettering2015-02-131-1/+1
| | | | | Given the recent improvements in networkd, it's probably the better default now.
* units: fix systemd-networkd.service in containers lacking CAP_NET_ADMINLennart Poettering2015-02-131-0/+1
|
* Revert "units: add SecureBits"Lennart Poettering2015-02-1113-13/+0
| | | | | | | | This reverts commit 6a716208b346b742053cfd01e76f76fb27c4ea47. Apparently this doesn't work. http://lists.freedesktop.org/archives/systemd-devel/2015-February/028212.html
* units: add SecureBitsTopi Miettinen2015-02-1113-0/+13
| | | | | | No setuid programs are expected to be executed, so add SecureBits=noroot noroot-locked to unit files.
* units: networkd - fix busname to work on kdbusTom Gundersen2015-02-061-0/+6
|
* networkd: exit on idleTom Gundersen2015-02-051-1/+1
| | | | | | We will be woken up on rtnl or dbus activity, so let's just quit if some time has passed and that is the only thing that can happen. Note that we will always stay around if we expect network activity (e.g. DHCP is enabled), as we are not restarted on that.
* networkd: add basic dbus APITom Gundersen2015-02-051-0/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Only the very basics, more to come. For now: $ busctl tree org.freedesktop.network1 └─/org/freedesktop/network1 └─/org/freedesktop/network1/link ├─/org/freedesktop/network1/link/1 ├─/org/freedesktop/network1/link/2 ├─/org/freedesktop/network1/link/3 ├─/org/freedesktop/network1/link/4 ├─/org/freedesktop/network1/link/5 ├─/org/freedesktop/network1/link/6 ├─/org/freedesktop/network1/link/7 ├─/org/freedesktop/network1/link/8 └─/org/freedesktop/network1/link/9 $ busctl introspect org.freedesktop.network1 /org/freedesktop/network1 NAME TYPE SIGNATURE RESULT/VALUE FLAGS org.freedesktop.network1.Manager interface - - - .OperationalState property s "carrier" emits-change $ busctl introspect org.freedesktop.network1 /org/freedesktop/network1/link/1 NAME TYPE SIGNATURE RESULT/VALUE FLAGS org.freedesktop.network1.Link interface - - - .AdministrativeState property s "unmanaged" emits-change .OperationalState property s "carrier" emits-change
* units: so far we defaulted to 90s as default timeout for most things, let's ↵Lennart Poettering2015-02-023-3/+3
| | | | | | do so for our oneshot services too Fewer surprises, and stuff...
* networkd: support socket activationTom Gundersen2015-02-022-0/+21
| | | | | Still keep the non-socket activation code around for starting from the commandline, but will likely drop that too in the future.
* units: set TimeoutSec on some oneshot servicesZbigniew Jędrzejewski-Szmek2015-02-013-0/+3
| | | | | | | | | | Services which are not crucial to system bootup, and have Type=oneshot can effectively "hang" the system if they fail to complete for whatever reason. To allow the boot to continue, kill them after a timeout. In case of systemd-journal-flush the flush will continue in the background, and in the other two cases the job will be aborted, but this should not result in any permanent problem.
* units: turn on watchdog for resolvedLennart Poettering2015-01-271-0/+1
|
* units: fix all TTY paths for container gettysLennart Poettering2015-01-271-2/+2
| | | | | | Spotted by Christian Seiler: http://lists.freedesktop.org/archives/systemd-devel/2015-January/027441.html
* build-sys: lookup for sulogin, it might not be in /sbinCristian Rodríguez2015-01-233-3/+3
|
* importd: run daemon at minimal capabilitiesLennart Poettering2015-01-221-1/+2
|
* import: introduce new mini-daemon systemd-importd, and make machinectl a ↵Lennart Poettering2015-01-223-0/+34
| | | | | | | | | | | | | | client to it The old "systemd-import" binary is now an internal tool. We still use it as asynchronous backend for systemd-importd. Since the import tool might require some IO and CPU resources (due to qcow2 explosion, and decompression), and because we might want to run it with more minimal priviliges we still keep it around as the worker binary to execute as child process of importd. machinectl now has verbs for pulling down images, cancelling them and listing them.
* bus-proxy: turn into multi-threaded daemonDavid Herrmann2015-01-177-31/+23
| | | | | | Instead of using Accept=true and running one proxy for each connection, we now run one proxy-daemon with a thread per connection. This will enable us to share resources like policies in the future.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-02 08:08:48 +0100