systemd-stable/units/sys-kernel-config.mount

#  SPDX-License-Identifier: LGPL-2.1-or-later
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Kernel Configuration File System
Documentation=https://www.kernel.org/doc/Documentation/filesystems/configfs/configfs.txt
Documentation=https://www.freedesktop.org/wiki/Software/systemd/APIFileSystems
DefaultDependencies=no
ConditionPathExists=/sys/kernel/config
ConditionCapability=CAP_SYS_RAWIO
Before=sysinit.target

# These dependencies are used to make certain that the module is fully
# loaded. Indeed udev starts this unit when it receives an uevent for the
# module but the kernel sends it too early, ie before the init() of the module
# is fully operational and /sys/kernel/config is created, see issue#17586.

After=modprobe@configfs.service
Requires=modprobe@configfs.service

[Mount]
What=configfs
Where=/sys/kernel/config
Type=configfs
Options=nosuid,nodev,noexec
license: LGPL-2.1+ -> LGPL-2.1-or-later 2020-11-09 13:23:58 +09:00			`# SPDX-License-Identifier: LGPL-2.1-or-later`
Add SPDX license headers to unit files 2017-11-18 17:35:03 +01:00			`#`
units: Add support for automounting configfs, ala debugfs, etc. 2011-09-13 11:01:56 -04:00			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
relicense to LGPLv2.1 (with exceptions) We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends. 2012-04-12 00:20:58 +02:00			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
units: Add support for automounting configfs, ala debugfs, etc. 2011-09-13 11:01:56 -04:00			`# (at your option) any later version.`

			`[Unit]`
units: make descriptions of api filesystems less generic (#5914) All those names were very generic. Fixes #5911. 2017-05-10 07:09:52 -04:00			`Description=Kernel Configuration File System`
man: add Documentation= tags to all kinds of missing units 2012-06-27 01:07:04 +02:00			`Documentation=https://www.kernel.org/doc/Documentation/filesystems/configfs/configfs.txt`
units: use https for the freedesktop url (#6227) 2017-06-29 04:54:12 +02:00			`Documentation=https://www.freedesktop.org/wiki/Software/systemd/APIFileSystems`
units: Add support for automounting configfs, ala debugfs, etc. 2011-09-13 11:01:56 -04:00			`DefaultDependencies=no`
units: restore sysfs conditions in sys-fs-fuse-connections.mount and sys-kernel-config.mount Commit 42cc2855ba2fe4c6f5d incorrectly removed the condition on sysfs in both sys-fs-fuse-connections.mount and sys-kernel-config.mount. However there are still needed in case modprobe of one of these modules is intentionally skipped (due to lack of privs for example). This patch restores the 2 conditions which should be safe for the common case, since all conditions are only checked after all deps ordered before are complete. Follow-up for 42cc2855ba2fe4c6f5dc863507a1c843611350a0. 2020-11-20 11:52:36 +01:00			`ConditionPathExists=/sys/kernel/config`
units: conditionalize configfs and debugfs with CAP_SYS_RAWIO We really don't want these in containers as they provide a too lowlevel look on the system. Conditionalize them with CAP_SYS_RAWIO since that's required to access /proc/kcore, /dev/kmem and similar, which feel similar in style. Also, npsawn containers lack that capability. 2014-07-04 03:10:09 +02:00			`ConditionCapability=CAP_SYS_RAWIO`
units: drop automount unit for /sys/kernel/debug Since debugfs cannot be compiled as module there's little benefit in having it as autofs mount point. 2011-09-21 03:20:28 +02:00			`Before=sysinit.target`
units: Add support for automounting configfs, ala debugfs, etc. 2011-09-13 11:01:56 -04:00
units: wait until some fs modules are entirely loaded before mounting their corresponding filesystem udev requests to start the fs mount units when their respective module is loaded. For that it monitors uevents of type "ADD" for the relevant fs modules. However the uevent is sent by the kernel too early, ie before the init() of the module is called hence before directories in /sys/fs/ are created. This patch workarounds adds "Requires/After=modprobe@<fs-module>.service" to the mount unit, which means that modprobe(8) will be called once the fs module is announced to be loaded. This sounds pointless, but given that modprobe only returns after the initialization of the module is complete, it should workaround the issue. As a side effect, the module will be automatically loaded if the mount unit is started manually. Fixes #17586. 2020-11-19 09:17:19 +01:00			`# These dependencies are used to make certain that the module is fully`
			`# loaded. Indeed udev starts this unit when it receives an uevent for the`
			`# module but the kernel sends it too early, ie before the init() of the module`
			`# is fully operational and /sys/kernel/config is created, see issue#17586.`

			`After=modprobe@configfs.service`
			`Requires=modprobe@configfs.service`

units: Add support for automounting configfs, ala debugfs, etc. 2011-09-13 11:01:56 -04:00			`[Mount]`
			`What=configfs`
			`Where=/sys/kernel/config`
			`Type=configfs`
units: set nodev,nosuid,noexec flags for various secondary API VFS A couple of API VFS we mount via .mount units. Let's set the three flags for those too, just in case. This is just paranoia, nothing else, but shouldn't hurt. 2019-03-25 19:39:00 +01:00			`Options=nosuid,nodev,noexec`