1
1
mirror of https://github.com/systemd/systemd-stable.git synced 2024-12-23 17:34:00 +03:00
Commit Graph

127 Commits

Author SHA1 Message Date
Lennart Poettering
a7b1c3971a README: document that we still encourage people to turn off audit when they want to use containers 2014-03-11 05:40:36 +01:00
Lennart Poettering
47bc23c18c README: document that /var/run must be a symlink → /run 2014-02-26 02:54:37 +01:00
Kay Sievers
952d1536f4 sd-damon is LGPL now 2014-02-19 18:23:14 +01:00
Kay Sievers
5d31974e44 README: mention libudev's requirement 2014-02-15 17:21:49 +01:00
Ronny Chevalier
c0467cf387 syscallfilter: port to libseccomp 2014-02-12 18:30:36 +01:00
Zbigniew Jędrzejewski-Szmek
32dcef3ab1 build-sys: make lxml required when generating indices
Since the manpage indices generated without lxml would be missing some
parts, it doesn't make sense to keep lxml optional anymore.
2014-02-12 03:04:57 -05:00
Zbigniew Jędrzejewski-Szmek
39c4ead232 build-sys: default to gold linker
gold doesn't exhibit the problems with linking of compatibility
libraries.

It is also slightly faster:

make clean && make -j5   bfd       gold

real                   34.885s     33.707s
user                   34.486s     32.189s
sys                    9.929s      10.845s

real                   35.128s     33.508s
user                   34.660s     31.858s
sys                    10.798s     10.341s

real                   35.405s     33.748s
user                   34.765s     32.384s
sys                    11.635s     10.998s

real                   35.250s     33.795s
user                   34.704s     32.253s
sys                    11.220s     11.469s

touch src/libsystemd/sd-bus.c && make -j5
                        bfd        gold

real                   10.224s      9.030s
user                   11.664s      9.877s
sys                    3.431s       2.878s

real                   10.021s      9.165s
user                   11.526s      9.990s
sys                    3.061s       3.015s

real                   10.233s      8.961s
user                   11.657s      9.973s
sys                    3.467s       2.202s

real                   10.160s      9.086s
user                   11.637s      9.950s
sys                    3.188s       2.859s
2014-01-25 18:10:08 -05:00
Kay Sievers
c2cb7cbbd5 README: list CONFIG_FHANDLE in main section 2014-01-14 22:59:07 +08:00
Umut Tezduyar Lindskog
0018092829 readme: CONFIG_FHANDLE is a requirement 2014-01-14 22:59:07 +08:00
Lennart Poettering
b67f541f13 bus: switch kdbus bloom filter over to SipHash (from MurmurHash3)
Let's try to standardize on a single non-cryptographic hash algorithm,
and for that SipHash appears to be the best answer.

With this change there are two other hash functions left in systemd: an
older version of MurmurHash embedded into libudev for the bloom filters
in udev messages (which is hard to update, given that the we probably
should stay compatible with older versions of the library). And lookup3
in the journal files (which we could replace for new files, but which is
probably not worth the work).
2013-12-23 04:20:55 +01:00
Kay Sievers
57d0e6b273 libudev: ship the original MurmurHash2.[ch] file 2013-12-23 02:55:06 +01:00
Zbigniew Jędrzejewski-Szmek
8be1284842 Update README with test/ requirements 2013-12-10 20:38:33 -05:00
Shawn Landden
06d461ee6f update README to not suggest that systemd works without procfs 2013-12-10 07:40:55 -05:00
Thomas Hindoe Paaboel Andersen
a65c89bbb0 README: remove obsolete paragraph about D-Bus 2013-12-04 23:00:05 +01:00
Tom Gundersen
df41776d66 TODO: add dbus runtime depedency 2013-11-27 16:50:53 +01:00
Kay Sievers
ff70c61b6f TODO: remove dbus requirement 2013-11-27 13:15:10 +01:00
Lukasz Skalski
4ec181a006 updates for TODO and README
* library support for setns() system call was added to glibc
version 2.14 (setns() call is use in src/machine/machinectl.c
and src/libsystemd-bus-container.c)

* utf8 validation call are already exported (via sd-utf8.c file) -
commit - 369c583b3f
2013-11-27 13:14:24 +01:00
Jan Engelhardt
19aadacf92 man: wording and grammar updates
This is a recurring submission and includes corrections to various
issue spotted.
2013-10-21 20:50:46 -04:00
Tom Gundersen
a18535d9e1 static-nodes: don't call mkdir
This is no longer necessary with kmod-15. Bump the requirement.
2013-10-17 19:53:44 +02:00
Kay Sievers
a5c724b25b README: add SCSI BSG option 2013-09-15 07:29:25 +02:00
Kay Sievers
85424725d1 README: update list of used LICENSEs 2013-08-14 22:59:55 +02:00
Jesper Larsen
e946948eff README: Bump to Linux 3.0
Support for writing to cgroup.procs was introduced in 3.0
2013-07-24 12:42:07 +02:00
Michael Biebl
f4f8f7b546 README Bump minimum required version of kmod
See edeb68c53f.
2013-07-23 05:02:54 +02:00
Lennart Poettering
77b6e19458 audit: since audit is apparently never going to be fixed for containers tell the user what's going on
Let's try to be helpful to the user and give him a hint what he can do
to make nspawn work with normal OS containers.

https://bugzilla.redhat.com/show_bug.cgi?id=893751
2013-05-10 00:17:36 +02:00
Zbigniew Jędrzejewski-Szmek
80cb917e62 man: use lxml for faster generation and pretty printing 2013-03-09 08:47:50 -05:00
Nathaniel Chen
ffbd2c4d45 core: mount and initialize Smack
SMACK is the Simple Mandatory Access Control Kernel, a minimal
approach to Access Control implemented as a kernel LSM.

The kernel exposes the smackfs filesystem API through which access
rules can be loaded. At boot time, we want to load the access rules
as early as possible to ensure all early boot steps are checked by Smack.

This patch mounts smackfs at the new location at /sys/fs/smackfs for
kernels 3.8 and above. The /smack mountpoint is not supported.
After mounting smackfs, rules are loaded from the usual location.

For more information about Smack see:
  http://www.kernel.org/doc/Documentation/security/Smack.txt
2013-03-07 20:53:14 +01:00
Kay Sievers
f28cbd0382 README: more CONFIG_* updates 2013-03-06 20:02:14 +01:00
Kay Sievers
41938693e7 README: remove CONFIG_HOTPLUG, add CONFIG_NET 2013-03-06 19:51:52 +01:00
Kay Sievers
713bc0cfa4 README: add kernel config options 2013-03-06 19:36:57 +01:00
Michael Biebl
1a9ce3f766 Fix typos 2013-03-05 19:19:26 +01:00
Lennart Poettering
37495eede9 journal: make gatewayd run under its own user ID 2013-03-05 19:15:31 +01:00
Kay Sievers
37c0e8f35e README: add udev goups 2013-03-05 19:04:48 +01:00
Lennart Poettering
a24c64f03f journald: introduce new "systemd-journal" group and make it own the journal files
Previously all journal files were owned by "adm". In order to allow
specific users to read the journal files without granting it access to
the full "adm" powers, introduce a new specific group for this.

"systemd-journal" has to be created by the packaging scripts manually at
installation time. It's a good idea to assign a static UID/GID to this
group, since /var/log/journal might be shared across machines via NFS.

This commit also grants read access to the journal files by default to
members of the "wheel" and "adm" groups via file system ACLs, since
these "almost-root" groups should be able to see what's going on on the
system. These ACLs are created by "make install". Packagers probably
need to duplicate this logic in their postinst scripts.

This also adds documentation how to grant access to the journal to
additional users or groups via fs ACLs.
2013-03-05 18:59:03 +01:00
Kay Sievers
8ab85e2d2d ProFUSION got bought by Intel 2013-03-04 16:13:19 +01:00
Zbigniew Jędrzejewski-Szmek
9015fa646e python: build html docs using sphinx
Build instructions:
   make
   make DESTIDIR=/tmp/... install
   make DESTIDIR=/tmp/... sphinx-html sphinx-man sphinx-epub ...
2013-02-22 16:57:43 +01:00
Zbigniew Jędrzejewski-Szmek
f1c24fea94 man: move bootchart README to manpage, docbooksify 2013-02-16 15:10:40 -05:00
Lennart Poettering
46ba8aae2b build-sys: make PolicyKit support compile-time optional (was runtime-optional already) 2013-02-13 23:08:25 +01:00
Kay Sievers
bf9e477c92 README: remove mentioning of nss-myhostname "package" 2013-01-24 10:33:52 +01:00
Tom Gundersen
c3d2d86d4f README - dependencies: unify and add util-linux reference
Use '>=' everywhere for consistency and point out that new util-linux
provides sulogin.
2012-11-25 21:59:00 +01:00
Zbigniew Jędrzejewski-Szmek
2cc86f094a README: mention dependency on libpython 2012-11-25 17:29:49 +01:00
Tom Gundersen
e30431623a build-sys: make loadable module support optional
kmod is unecessary if loadable module support is disabled in the kernel,
so make the dependency optional.
2012-11-20 19:35:27 +01:00
Lennart Poettering
b603662c41 README: don't list libgcrypt twice as dep 2012-11-14 22:21:16 +01:00
Thomas Hindoe Paaboel Andersen
edca2e2348 README,TODO: typo fixes 2012-11-05 21:13:28 +01:00
Lennart Poettering
fb0951b02e journal: implement time-based rotation/vacuuming
This also enables time-based rotation (but not vacuuming) after 1month,
so that not more one month of journal is lost at a time per vacuuming.
2012-10-16 22:58:07 +02:00
Zbigniew Jędrzejewski-Szmek
1b4bb4fdac journal: fix build in VALGRIND compatibility mode 2012-10-13 14:40:32 +02:00
Kay Sievers
cc30f5f388 README: update 2012-10-08 22:02:01 +02:00
Lennart Poettering
7b17a7d72f journal: add minimal journal gateway daemon based on GNU libmicrohttpd
This minimal HTTP server can serve journal data via HTTP. Its primary
purpose is synchronization of journal data across the network. It serves
journal data in three formats:

       text/plain: the text format known from /var/log/messages
       application/json: the journal entries formatted as JSON
       application/vnd.fdo.journal: the binary export format of the journal

The HTTP server also serves a small HTML5 app that makes use of the JSON
serialization to present the journal data to the user.

Examples:

This downloads the journal in text format:

 # systemctl start systemd-journal-gatewayd.service
 # wget http://localhost:19531/entries

Same for JSON:

 # curl -H"Accept: application/json" http://localhost:19531/entries

Access via web browser:

 $ firefox http://localhost:19531/
2012-09-28 00:55:24 +02:00
Lennart Poettering
feb12d3ed2 journal: make libgcrypt dependency optional 2012-08-20 16:51:46 +02:00
Zbigniew Jędrzejewski-Szmek
19d5d4cb6a Add a few more dependencies to README 2012-07-31 01:22:53 +02:00
Ville Skyttä
49f43d5f91 Spelling fixes. 2012-07-16 12:16:29 +02:00
Kay Sievers
26cbf29c52 delete plymouth units; moved to plymouth 2012-06-07 19:27:17 +02:00
Kay Sievers
7c09aafd26 README: update udev requirements 2012-04-14 19:25:28 +02:00
Lennart Poettering
5430f7f2bc relicense to LGPLv2.1 (with exceptions)
We finally got the OK from all contributors with non-trivial commits to
relicense systemd from GPL2+ to LGPL2.1+.

Some udev bits continue to be GPL2+ for now, but we are looking into
relicensing them too, to allow free copy/paste of all code within
systemd.

The bits that used to be MIT continue to be MIT.

The big benefit of the relicensing is that closed source code may now
link against libsystemd-login.so and friends.
2012-04-12 00:24:39 +02:00
Michal Schmidt
ee4cbc2c85 remove GTK pieces
They've moved to systemd-ui.
2012-03-20 13:10:22 +01:00
Lennart Poettering
d657c51f14 README: update header line 2012-01-25 02:20:38 +01:00
Kay Sievers
9fa2f41077 README: fix git URLs 2012-01-22 18:40:13 +01:00
Lennart Poettering
0df4f9d669 README: correct license claims 2012-01-05 18:25:36 +01:00
Lennart Poettering
b7f44df59a README: explain dependency on cgroups 2011-11-01 13:52:46 +01:00
Lennart Poettering
6705c2df46 update README 2011-08-24 23:29:28 +02:00
Kay Sievers
a63599edcc README: we need Linux 2.6.39 2011-08-11 14:26:39 +02:00
Michael Biebl
b62cfcea00 build-sys: make gperf configure check fatal
and document the new build requirement.
2011-08-03 17:11:13 +02:00
Kay Sievers
ae446765eb libsystemd-daemon: support installation in --with-rootlibdir 2011-07-15 01:31:06 +02:00
Lennart Poettering
673eab9bf0 README: document license 2011-07-14 23:53:53 +02:00
Lennart Poettering
fff2e5b58b README: document relation to nss-myhostname 2011-05-17 19:35:56 +02:00
Lennart Poettering
aa1671320d main: add link to wiki page with longer explanation of the /usr madness 2011-03-04 05:07:01 +01:00
Lennart Poettering
ed1c99fcc1 s/seperate/separate/ 2011-03-04 03:58:52 +01:00
Lennart Poettering
fc7a744cc4 README: refer to profusion if people ask for consulting/engineering services 2011-03-01 23:46:01 +01:00
Lennart Poettering
21bc923aa3 ask-password: supported plymouth cached passwords 2011-02-23 01:12:07 +01:00
Lennart Poettering
67d6a9abac README: document that we need ipv6 2011-02-21 22:40:56 +01:00
Lennart Poettering
3ede835a04 README: update requirements 2011-02-16 19:34:38 +01:00
Kay Sievers
fc00b89add update README 2010-12-01 21:02:46 +01:00
Kay Sievers
c1c8ca815b update README 2010-11-26 20:48:29 +01:00
Lennart Poettering
ef9ffbd806 shutdown: create /var/run/nologin instead of /etc/nologin which is supported since PAM 1.1.2 2010-10-07 20:46:02 +02:00
Fabiano Fidencio
b02b72cf0e README: Check for libudev-160, as in configure.ac 2010-10-07 19:23:56 +02:00
Lennart Poettering
647f1fafb5 README: mention libcap dependency
https://bugs.freedesktop.org/show_bug.cgi?id=30060
2010-10-05 23:41:27 +02:00
Lennart Poettering
42e39f0b32 build-sys: remove vala generated sources only when valac is around 2010-05-18 00:28:39 +02:00
Lennart Poettering
31cee6f634 build-sys: include README and LICENSE in tarball 2010-05-13 03:30:21 +02:00