diff --git a/TODO b/TODO index b375327fe0d..eed88de0cbb 100644 --- a/TODO +++ b/TODO @@ -1302,12 +1302,6 @@ Features: CapabilityQuintet we already have. (This likely allows us to drop libcap dep in the base OS image) -* add concept for "exitrd" as inverse of "initrd", that we can transition to at - shutdown, and has similar security semantics. This should then take the place - of dracut's shutdown logic. Should probably support sysexts too. Care needs - to be taken that the resulting logic ends up in RAM, i.e. is copied out of - on-disk storage. - * userdbd: implement an additional varlink service socket that provides the host user db in restricted form, then allow this to be bind mounted into sandboxed environments that want the host database in minimal form. All diff --git a/man/bootup.xml b/man/bootup.xml index c942bab3442..e753ec74895 100644 --- a/man/bootup.xml +++ b/man/bootup.xml @@ -344,6 +344,17 @@ systemd-reboot.service | | | | shutdown phase described above. + + The exitrd + + The "exitrd" is a concept symmetrical to the initrd. When the system manager is shutting down and + /run/initramfs/shutdown exists, it will switch root to + /run/initramfs/ and execute /shutdown. This program runs from + the tmpfs mounted on /run/, so it can unmount the old root file system and perform + additional steps, for example dismantle complex storage or perform additional logging about the shutdown. + + + See Also diff --git a/man/os-release.xml b/man/os-release.xml index afdb21fc57b..1a3087a1049 100644 --- a/man/os-release.xml +++ b/man/os-release.xml @@ -88,10 +88,10 @@ <filename>/etc/initrd-release</filename> - In the initrd, + In the initrd + and exitrd, /etc/initrd-release plays the same role as os-release in the - main system. Additionally, the presence of that file means that the system is in the initrd phase. + main system. Additionally, the presence of that file means that the system is in the initrd/exitrd phase. /etc/os-release should be symlinked to /etc/initrd-release (or vice versa), so programs that only look for /etc/os-release (as described above) work correctly.