Commit Graph

66847 Commits

Author SHA1 Message Date
Yu Watanabe
fbaf3b23ae core: set $CREDENTIALS_DIRECTORY only when we set up credentials
It is not necessary to set the environment variable on an execution step
we do not support credentials.
2023-08-22 11:39:08 +09:00
Yu Watanabe
7d202fb35d core/credential: split out unit_add_default_credential_dependencies()
No functional change, just refactoring.
2023-08-22 11:39:08 +09:00
Yu Watanabe
602c74cf78 core: split out functions and definitions from execute.[ch] to credential.[ch]
The functions and definitions related to credential consume about 1000
lines in execute.c. Let's split out them to dedicated files.
2023-08-22 11:39:08 +09:00
Lennart Poettering
b022ea0476 efi: add comment clarifying we should not use EV_IPL anymore 2023-08-21 23:18:28 +02:00
Lennart Poettering
1126841553 man: mention two more things logind does
Prompted by: #28902
2023-08-21 23:15:57 +02:00
Lennart Poettering
afa303254d Merge pull request #28907 from poettering/have-seccomp-tweaks
reduce HAVE_SECCOMP ifdeffery
2023-08-21 23:15:39 +02:00
Lennart Poettering
cf1ab844a9 tree-wide: drop "static inline" use in .c files
"static inline" makes sense in .h files. But in .c files it's useless
decoration, the compiler should just make its own decisions there, and
it can do that.

hence, replace all remaining uses of "static line" by a simple" static"
in all .c files (but keep them in .h files, where they make sense)
2023-08-21 23:15:12 +02:00
Frantisek Sumsal
252adedaaf Merge pull request #28911 from weblate/weblate-systemd-master
Translations update from Fedora Weblate
2023-08-21 17:57:40 +00:00
Jan Kuparinen
e86ecf931d po: Translated using Weblate (Finnish)
Currently translated at 100.0% (227 of 227 strings)

Co-authored-by: Jan Kuparinen <copper_fin@hotmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/fi/
Translation: systemd/main
2023-08-21 19:21:12 +02:00
Maarten
74fb028878 po: Translated using Weblate (Dutch)
Currently translated at 100.0% (227 of 227 strings)

Co-authored-by: Maarten <maarten@posteo.de>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/nl/
Translation: systemd/main
2023-08-21 19:21:12 +02:00
Lennart Poettering
e2fc0a7222 tree-wide: don't ifdef seccomp-util.h, drop seccomp.h inclusion everywhere
seccomp-util.h doesn't need ifdeffing, hence don't. It has worked since
quite a while with HAVE_SECCOMP is off, hence use it everywhere.

Also drop explicit seccomp.h inclusion everywhere (which needs
HAVE_SECCOMP ifdeffery everywhere). seccomp-util.h includes it anyway,
automatically, which we can just rely on, and it deals with HAVE_SECCOMP
at one central place.
2023-08-21 18:50:29 +02:00
Lennart Poettering
65a57927ad seccomp: move seccomp_parse_errno_or_action() into common definitions
Let's remove some HAVE_SECCOMP ifdeffery by simply defining the funcion
in question (seccomp_parse_errno_or_action() + related calls) into
common code that is also compiled if HAVE_SECCOMP is off.

This is generally the better approach anyway, since we want as much as
possible and easily feasible parsers work even if the code implementing
them is disabled. THis is easy to achieve here, hence do.
2023-08-21 18:50:29 +02:00
Luca Boccassi
2322c6c735 sd-mount: allow creating tmpfs
Mount units can do it, but the command line tool cannot, as it needs a
valid 'what'. If --tmpfs/-T if passed, parse the argument as 'where'
and send a literal 'tmpfs' as the 'what' if not specified.
2023-08-21 11:45:15 +02:00
Susant Sahani
9175002864 network: ndisc - Allow to use ICMP6 rate limit from received RA 2023-08-21 11:14:42 +02:00
Mathieu Tortuyaux
41712cd1c0 sysext: support EXTENSION_RELOAD_MANAGER metadata
This metadata (EXTENSION_RELOAD_MANAGER) can be set to "1" to reload the manager
when merging/refreshing/unmerging a system extension image. This can be useful in case the sysext
image provides systemd units that need to be loaded.

With `--no-reload`, one can deactivate the EXTENSION_RELOAD_MANAGER metadata interpretation.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
2023-08-21 11:13:54 +02:00
Mike Yuan
121ce4a687 generators: use generator_open_unit_file where appropriate 2023-08-19 01:15:01 +01:00
Luca Boccassi
2c29591c7e Merge pull request #28871 from ssahani/route-hoplimit
network: static route - Allow to configure per route hop liimt
2023-08-19 01:12:01 +01:00
Lennart Poettering
5227b72db3 update TODO 2023-08-18 19:24:01 +02:00
Daan De Meyer
3c1c52f2c9 install: Drop install_info_may_process() from unit_file_get_default()
This currently makes unit_file_get_default() fail if the default
target is transient which shouldn't make us fail to get the default
unit.
2023-08-18 20:48:47 +08:00
Lennart Poettering
8fc798a9ad homed: reuse openssl-util.h cleanup helpers 2023-08-18 13:44:19 +01:00
Mike Yuan
d7686126ea Merge pull request #28884 from poettering/tpm2-pcr6-name
tpm2: give PCR 6 a name
2023-08-18 20:19:51 +08:00
Susant Sahani
288f58c0b4 CI: network - Add test for route hoplimit 2023-08-18 15:52:14 +05:30
Lennart Poettering
f51ed26b38 tpm2-util: add _const_/_pure_ to a couple of to_string()/from_string() functions 2023-08-18 11:54:25 +02:00
Lennart Poettering
b060b9a492 tpm2-util: give PCR 6 a name too
The specs call this TCG PC Client Platform Firmware Profile
Specification says this PCR is owned by the Host Platform Manufacturer,
at various places. Hence let's give it that name.
2023-08-18 11:54:19 +02:00
Susant Sahani
88c0642358 network: static route - Allow to configure per route hop liimt 2023-08-18 14:46:37 +05:30
Mike Yuan
c068650fcf core/socket: don't consider service active when in SERVICE_AUTO_RESTART_QUEUED
Follow-up for 09d04ad325

Fixes #28856
2023-08-18 09:24:27 +01:00
Luca Boccassi
f9e653cfb7 Merge pull request #28870 from ssahani/rto-min-network
network: Route - allow to set TCP RTO
2023-08-18 09:23:45 +01:00
Luca Boccassi
eb2f0b2b3a Merge pull request #28846 from ssahani/custom-duid-dhcp4-26745
network: DHCP6 client- Allow to send manual DUID
2023-08-18 09:23:30 +01:00
Luca Boccassi
b24d10e35a Merge pull request #28697 from 1awesomeJ/new_bsod
systemd-bsod: Add "--continuous" option
2023-08-18 00:20:04 +01:00
OMOJOLA JOSHUA
5ae58e8fca Make systemd-bsod not a public binary 2023-08-17 22:07:16 +01:00
Daan De Meyer
47838b55c8 dissect: Set SYSTEMD_DISSECT_DEVICE to path of loop device
For some use cases we want to operate on the loop device that
systemd-dissect has attached the loop device to, so let's make that
easily accessible.
2023-08-17 20:36:51 +02:00
Susant Sahani
543d2a4d45 CI: network dhcp6 - Add test for custom client identifier 2023-08-17 23:52:33 +05:30
Susant Sahani
89e73ce86f network: DHCP6 client- Allow to send manual DUID
```
[DHCPv6]
DUIDType=custom
DUIDRawData=00:00:ab:11:f9:2a:c2:77:29:f9:5c:00
```

```
Client Identifier
    Option: Client Identifier (1)
    Length: 12
    DUID: 0000ab11f92ac27729f95c00
    DUID Type: Unknown (0)
```
2023-08-17 23:52:22 +05:30
Susant Sahani
1791956e9c CI: network - Add test for route TCP RTO 2023-08-17 23:49:32 +05:30
Susant Sahani
1412d4a4fe network: Route - allow to set TCP RTO 2023-08-17 23:47:13 +05:30
Johannes Segitz
5f22d16bb3 test: Check that SELinux policy is available before running SELinux test (#28868)
* test: Check that SELinux policy is available before running SELinux test

---------

Co-authored-by: Frantisek Sumsal <frantisek@sumsal.cz>
2023-08-17 18:04:53 +01:00
Luca Boccassi
f1a621b09b Merge pull request #28832 from dtardon/list-clear
Add LIST_CLEAR() helper that empties the list
2023-08-17 16:27:43 +01:00
Daan De Meyer
be7d808c1c Merge pull request #28869 from DaanDeMeyer/repart-trailing
repart: Make sure we keep trailing slashes in ExcludeFiles=
2023-08-17 14:55:03 +02:00
OMOJOLA JOSHUA
77d0917ea3 systemd-bsod: Add "--continuous" option 2023-08-17 13:13:54 +01:00
Luca Boccassi
13f008272a Merge pull request #28751 from yuwata/mount-revert
Revert "mount: check right before invoking /bin/umount if it makes sense"
2023-08-17 13:03:36 +01:00
Daan De Meyer
cc2a0d85d2 meson: Use rsync to copy test data directories
install_subdir() does not copy symlinks but copies the file they
point to. We also get a very ugly warning in the meson install
output:

"""
Warning: trying to copy a symlink that points to a file. This will copy the file,
but this will be changed in a future version of Meson to copy the symlink as is. Please update your
build definitions so that it will not break when the change happens.
"""

Let's fix both problems at once by using rsync which does the right
thing. Verified by running systemd-dissect --mtree on both the install
output before and after and all the symlinks are now correctly preserved.
2023-08-17 13:50:26 +02:00
Daan De Meyer
d10eccbd77 repart: Make sure we keep trailing slashes in ExcludeFiles=
We conditionalize behavior based on whether these paths have trailing
slashes or not, so let's make sure we keep them intact.
2023-08-17 13:23:39 +02:00
Daan De Meyer
ce60b3a40a parse-helpers: Add PATH_KEEP_TRAILING_SLASH 2023-08-17 13:23:39 +02:00
Daan De Meyer
4541d045b2 path-util: Add path_simplify_full()
Sometimes its useful to keep a trailing slash in the path so let's
add path_simplify_full() and a flag to do just that.
2023-08-17 13:23:36 +02:00
David Tardon
45b1c015b0 bus-polkit: don't propagate error from polkit
An error reply from polkit is a valid case and should not be propagated
as failure of async_polkit_callback(). It should only be saved here.
It'll be returned by bus_verify_polkit_async() later, when it's called
for the same method again.

Follow-up for #26365.
2023-08-17 12:08:32 +02:00
Emanuele Giuseppe Esposito
fab0eeb72b systemd-stub: ignore EFI shell unauthenticated kernel command line if we are in confidential vms 2023-08-17 11:31:43 +02:00
David Tardon
01d3fe43e2 open-file: add missing assert 2023-08-17 09:48:17 +02:00
David Tardon
6e8c5e9766 systemctl-show: rename cleanup function 2023-08-17 09:48:17 +02:00
David Tardon
52e3671bf7 tree-wide: use LIST_POP() 2023-08-17 09:48:17 +02:00
David Tardon
9aad490e53 tree-wide: use LIST_CLEAR() 2023-08-17 09:48:17 +02:00