Commit Graph

  • 63bf3ca8b0 tar-util: recognize hardlinks when generating tarballs Lennart Poettering 2025-08-21 14:27:54 +02:00
  • d4d94fceba tar-util: include xattrs in generated tarballs Lennart Poettering 2025-08-21 12:28:06 +02:00
  • f89c914968 acl-util: add new acl_set_perm() helper Lennart Poettering 2025-08-22 11:04:56 +02:00
  • 570eae5007 sysext: Check for /etc/initrd-release in given --root= tree Kai Lueke 2025-10-28 20:56:45 +09:00
  • 6649562924 test: Add missing test cleanup for the last sysext test Kai Lueke 2025-10-29 00:08:42 +09:00
  • 030f239a19 varlink-idl: add infra to test our enum parsers against varlink IDL enums Lennart Poettering 2025-11-04 10:35:00 +01:00
  • ca8658120e TEST-80-NOTIFYACCESS: add test case for #37515 Mike Yuan 2025-10-22 01:34:04 +02:00
  • b03e1b09af core/service: rework ExecReload= + Type=notify-reload interaction, add ExecReloadPost= Mike Yuan 2025-10-19 23:23:17 +02:00
  • b3c6709fde macro: add 21st case for IN_SET Mike Yuan 2025-10-20 01:03:12 +02:00
  • 48632305c7 man/org.freedesktop.systemd1: fix typo (ExecStop -> -Post) Mike Yuan 2025-10-20 01:35:08 +02:00
  • 1b4cf02ada core/service: fix missing error handling for refresh-extensions control process Mike Yuan 2025-10-20 01:42:57 +02:00
  • 5fb8387c67 core/service: reset all reload-related states once a cycle completes Mike Yuan 2025-10-19 22:34:42 +02:00
  • 584e89f26e core/service: consolidate where to initialize reload_result Mike Yuan 2025-10-19 22:33:03 +02:00
  • 98734ac74d core/service: forbid reverting STOPPING=1 Mike Yuan 2025-10-19 21:35:52 +02:00
  • ed834f11cb core/service: split out service_notify_message_process_state() Mike Yuan 2025-10-19 21:32:59 +02:00
  • 3d888e2dad core/service: add missing serialization for notify_state Mike Yuan 2025-10-19 21:56:33 +02:00
  • 38ea58a907 core/service: remove effectively unused NOTIFY_UNKNOWN state Mike Yuan 2025-10-19 21:47:54 +02:00
  • 1b5a9a7d56 core/service: avoid duplicate unit_add_to_dbus_queue() call Mike Yuan 2025-10-19 21:26:48 +02:00
  • 1b272d778a core/service: introduce SERVICE_STATE_WITH_WATCHDOG Mike Yuan 2025-10-19 20:27:42 +02:00
  • 1773d2a207 core: drop redundant pidref_done() calls Mike Yuan 2025-10-19 20:14:08 +02:00
  • 16a0cbe915 core/service: merge service_enter_reload_mounting() into _refresh_extensions() Mike Yuan 2025-10-19 19:41:13 +02:00
  • 2e43eee666 core/service: restore spuriously changed comment Mike Yuan 2025-10-19 20:16:05 +02:00
  • aebe553db3 core/service: do not set reload_begin_usec when refreshing confexts Mike Yuan 2025-10-19 18:37:41 +02:00
  • af3a197515 core/service: no need for STATUS_TEXT_MAX to reside in header Mike Yuan 2025-10-19 21:43:27 +02:00
  • 969c8050d8 core/job: use UNIT_IS_* helpers Mike Yuan 2025-10-22 20:16:55 +02:00
  • b1947bf6e3 core/job: drop pure qualifier for static inline functions Mike Yuan 2025-10-22 20:53:15 +02:00
  • 1fa9473b07 core/job: mark job_type_lookup_merge() and _is_redundant() as const Mike Yuan 2025-10-22 20:50:17 +02:00
  • 79dd24cf14 core: Add UserNamespacePath= Quentin Deslandes 2025-10-17 15:37:02 +02:00
  • d98c783516 sysupdated: port to sd_json_parse_file_at() Mike Yuan 2025-11-03 22:16:46 +01:00
  • 89b9a68e5f sd-json: accept NULL path in sd_json_parse_file_at() too Mike Yuan 2025-11-03 22:06:53 +01:00
  • eaebc33220 fileio: mask off O_NOFOLLOW in xfopenat_regular() for fd_reopen() Mike Yuan 2025-11-03 21:59:34 +01:00
  • 9218e4eacc mkosi: update fedora commit reference to 8e2833a5b64f7e2ce62ea0a2d0ec9e393e718dfa Zbigniew Jędrzejewski-Szmek 2025-11-03 12:19:37 +01:00
  • 10cdb58690 backlight: fix typo jouyouyun 2025-11-03 16:04:33 +08:00
  • 49ca2d8778 bootctl: fix typo jouyouyun 2025-11-03 14:17:35 +08:00
  • f8fcf7de7c kernel-install: move staging area to /var/tmp/ Lennart Poettering 2025-11-02 09:32:16 +01:00
  • 8f62d20b73 Add support for nvindex-based additional PCRs for TPM2, aka "NvPCRs" (#39463) Lennart Poettering 2025-11-03 09:00:41 +01:00
  • 330e66f15e doc: document NvPCRs briefly Lennart Poettering 2025-10-31 18:16:07 +01:00
  • 34c687f2b3 ci: add some test for the new nvpcr infra Lennart Poettering 2025-10-27 12:55:02 +01:00
  • a9d02df0c7 ci: never go to raw tpm device, always go via resource manager Lennart Poettering 2025-10-27 16:15:41 +01:00
  • d73d369133 analyze: add new verb for determining NvPCR values Lennart Poettering 2024-06-04 11:03:39 +02:00
  • e5a2e78665 cryptsetup: automatically measure used keyslot and mechanism (i.e. fido2, tpm2, pkcs11) to an NvPCR Lennart Poettering 2024-06-10 18:24:58 +02:00
  • 8a6e77f1a8 tpm2-setup: measure "anchor" extension early at boot into nvpcrs Lennart Poettering 2024-06-04 18:16:03 +02:00
  • 2da86d62ff tpm2-setup: split out SRK setup into a function of its own Lennart Poettering 2024-06-04 16:36:39 +02:00
  • 0196abbd10 pcrextend: automatically measure SMBIOS product ID at boot Lennart Poettering 2024-06-04 12:01:10 +02:00
  • 2b90bf1730 pcrextend: make use new nvindex-based PCRs Lennart Poettering 2024-06-03 21:44:50 +02:00
  • f5f26332fa catalog: improve PCR extended catalog entry Lennart Poettering 2025-10-31 17:56:41 +01:00
  • b0c5c6aad8 tpm2-util: add infra for allocating nvindex-based PCRs (aka "NvPCRs") Lennart Poettering 2024-06-10 15:55:54 +02:00
  • b7e072f3fa tpm2-util: move parse for tpm2 hash algorithms up Lennart Poettering 2024-06-03 21:40:52 +02:00
  • 260b9e8489 tpm2-util: make tpm2_undefine_policy_nv_index() generic Lennart Poettering 2024-06-03 17:56:35 +02:00
  • d412b1629c tpm2-util: rename tpm2_extend_bytes()→tpm2_pcr_extend_bytes() and make it take struct iovec Lennart Poettering 2024-06-03 17:44:15 +02:00
  • b95912446e pcrlock: make sure we can parse nv_index measurement records in TCG CEL Lennart Poettering 2024-06-05 21:45:50 +02:00
  • 3e9ff7c0d8 creds-util: initialize default PCR mask in encrypt_credential_and_warn() Lennart Poettering 2024-06-10 14:58:52 +02:00
  • ffe958b98f creds-util: add helper for querying system credential dirs Lennart Poettering 2024-06-10 14:53:38 +02:00
  • c30e3d7290 creds-util: add automatic mode for tpm2 based creds Lennart Poettering 2024-06-06 11:25:50 +02:00
  • d2d1fc59b4 conf-files: optionally truncate suffix from discovered files Lennart Poettering 2025-10-27 12:22:02 +01:00
  • 86279dc970 format-table: add field type that outputs hex values prefixed with 0x Lennart Poettering 2024-06-04 11:04:01 +02:00
  • 7ecc69c33b fileio: add new flag READ_FULL_FILE_VERIFY_REGULAR() that checks if file we operate on is regular Lennart Poettering 2024-06-10 14:55:24 +02:00
  • 1acec1c890 fileio: make filename/path argument optional in xfopenat_full(), read_full_file_full() Lennart Poettering 2024-06-10 14:56:11 +02:00
  • 5fa2fb65a6 Enhance docs for ukify and direct kernel boots (#39516) Zbigniew Jędrzejewski-Szmek 2025-11-02 18:04:15 +01:00
  • cde713bfe4 man: say "systemd-boot" instead of "sd-boot" consistently Zbigniew Jędrzejewski-Szmek 2025-11-02 15:20:59 +01:00
  • 02539f008d man/ukify: mention all functionality in intro, add example of direct boot Zbigniew Jędrzejewski-Szmek 2025-11-01 13:05:41 +01:00
  • 4808c1686b man/sd-boot: add some meat to the direct kernel boot example Zbigniew Jędrzejewski-Szmek 2025-11-01 12:15:49 +01:00
  • a4dae3c118 rules.d/60-block.rules: fix typo Mike Yuan 2025-11-02 10:56:31 +01:00
  • c29e304562 Several OpenSSL related cleanups (#39455) Yu Watanabe 2025-11-02 17:21:51 +09:00
  • ab1f4e506f repart: support "nodatacow" in btrfs subvolumes Alberto Planas 2025-06-04 19:56:18 +02:00
  • eeedea94da repart: fix typo Yu Watanabe 2025-11-02 17:03:00 +09:00
  • 4f589e8a50 resolvectl: fix typo Yu Watanabe 2025-11-02 17:00:21 +09:00
  • b7d752a67e openssl-util: drop unnecessary functions when OpenSSL support is disabled Yu Watanabe 2025-10-26 22:06:35 +09:00
  • 84946f12b5 openssl-util: sort cleanup functions Yu Watanabe 2025-11-02 16:00:55 +09:00
  • c604b78b92 repart: drop OpenSSL specific logics when OpenSSL support is disabled Yu Watanabe 2025-10-26 21:44:59 +09:00
  • e3ae29ead7 repart: merge common conditions Yu Watanabe 2025-10-26 21:42:26 +09:00
  • 6e91c5d8ea repart: make sign_verity_roothash() take Context Yu Watanabe 2025-10-26 21:40:42 +09:00
  • 0158eabb01 repart: load x509 certificate and private key after Context is allocated Yu Watanabe 2025-10-26 18:27:51 +09:00
  • 219a67c131 bootctl: return earlier when secure boot auto-enrollment is requested but OpenSSL support is disabled Yu Watanabe 2025-10-26 16:58:09 +09:00
  • 1b48b63b51 bootctl: move conditions into corresponding functions Yu Watanabe 2025-10-26 16:57:07 +09:00
  • 61d1f394cc openssl-util: drop unused fake type definitions when OpenSSL is disabled Yu Watanabe 2025-10-26 16:22:42 +09:00
  • 09ae1c8ade pe-binary: drop pe_hash() and friends when OpenSSL support is disabled Yu Watanabe 2025-10-26 16:33:11 +09:00
  • ab9b3bec6a openssl-util: drop unused string_hashsum() and friends when OpenSSL is disabled Yu Watanabe 2025-10-26 16:19:47 +09:00
  • a47a403ca2 resolvectl: return earlier from openpgp command when OpenSSL support is disabled Yu Watanabe 2025-10-26 16:15:56 +09:00
  • a7807e66b7 coredump: several cleanups, modernizations, fixlets for corner cases (#39418) Yu Watanabe 2025-11-02 10:13:53 +09:00
  • 32f4e30be5 docs: add comment about requiring the mount hierarchy to be mounted MS_SHARED Lennart Poettering 2025-11-01 22:21:32 +01:00
  • ee3cd7890d Several cleanups for libcryptsetup dependency (#39452) Yu Watanabe 2025-11-02 08:07:15 +09:00
  • d714edd26c repart: varlink support (#39421) Lennart Poettering 2025-11-01 23:21:37 +01:00
  • a983cf253f doc: indicate Type=oneshot also detects invocation failures Christoph Anton Mitterer 2025-10-20 03:30:58 +02:00
  • d1aa3860b2 ci: add testcases for recently added stuff Lennart Poettering 2025-10-23 09:26:37 +02:00
  • 5f076e44fe repart: report vendor/model/subsystem fields in ListCandidateDevices Lennart Poettering 2025-10-24 17:18:51 +02:00
  • ea94a05f8a blockdev-list: switch to log_device_xyz() style logging Lennart Poettering 2025-10-24 17:18:31 +02:00
  • 2103067f25 udev: introduce ID_BLOCK_SUBSYSTEM property Lennart Poettering 2025-10-24 17:13:12 +02:00
  • 63b9c8611d repart: sort input before output parameters in varlink IDL Lennart Poettering 2025-10-24 16:16:11 +02:00
  • 0f9d58cc36 repart: add knobs for automatically deferring all partitions marked as empty or for factory reset Lennart Poettering 2025-09-16 13:26:42 +02:00
  • 1c76e204d3 repart: send out progress information via varlink (if more flag is given) Lennart Poettering 2025-09-12 21:23:57 +02:00
  • 15734190c7 repart: add Varlink call that runs repart's engine Lennart Poettering 2025-08-28 15:49:46 +02:00
  • 2ecfea7491 repart: if device node is specified as "-", calculate needed disk space Lennart Poettering 2025-08-29 10:40:24 +02:00
  • 0eab6d2960 repart: split out main function that ponders about placement of partitions Lennart Poettering 2025-08-28 15:44:13 +02:00
  • a47cbb6d9d repart: move definitions + dry_run + empty fields into Context Lennart Poettering 2025-08-28 15:28:20 +02:00
  • eccd8d9a57 repart: use SD_JSON_BUILD_UNSIGNED for disk sizes, as we should Lennart Poettering 2025-10-24 11:13:14 +02:00
  • b64eb98054 sd-varlink: fix sd_varlink_collect() with empty replies Lennart Poettering 2025-10-23 11:07:16 +02:00
  • 633a4b8839 man: add documentation for the various sd_json_dispatch_xyz() calls Lennart Poettering 2025-10-24 10:22:36 +02:00
  • db1f63463a cryptsetup-util: sym_crypt_free() and friends are unused when libcryptsetup is disabled Yu Watanabe 2025-10-26 14:32:41 +09:00
  • 6afaa7fb3a cryptsetup-util: sort loaded function prototypes Yu Watanabe 2025-10-26 14:02:45 +09:00