diff --git a/NEWS b/NEWS index d703acef483..6df17aa599c 100644 --- a/NEWS +++ b/NEWS @@ -2,6 +2,38 @@ systemd System and Service Manager CHANGES WITH 253 in spe: + Announcements of Future Feature Removals and Incompatible Changes: + + * We intend to remove cgroup v1 support from systemd release after the + end of 2023. If you run services that make explicit use of cgroup v1 + features (i.e. the "legacy hierarchy" with separate hierarchies for + each controller), please implement compatibility with cgroup v2 (i.e. + the "unified hierarchy") sooner rather than later. Most of Linux + userspace has been ported over already. + + * We intend to remove support for split-usr (/usr mounted separately + during boot) and unmerged-usr (parallel directories /bin and + /usr/bin, /lib and /usr/lib, etc). This will happen in the second + half of 2023, in the first release that falls into that time window. + For more details, see: + https://lists.freedesktop.org/archives/systemd-devel/2022-September/048352.html + + * We intend to change behaviour w.r.t. units of the per-user service + manager and sandboxing options, so that they work without having to + manually enable PrivateUsers= as well, which is not required for + system units. To make this work, we will implicitly enable user + namespaces (PrivateUsers=yes) when a sandboxing option is enabled in a + user unit. The drawback is that system users will no longer be visible + (and appear as 'nobody') to the user unit when a sandboxing option is + enabled. By definition a sandboxed user unit should run with reduced + privileges, so impact should be small. This will remove a great source + of confusion that has been reported by users over the years, due to + how these options require an extra setting to be manually enabled when + used in the per-user service manager, as opposed as to the system + service manager. We plan to enable this change in the next release + later this year. For more details, see: + https://lists.freedesktop.org/archives/systemd-devel/2022-December/048682.html + Deprecations and incompatible changes: * systemctl will now warn when invoked without /proc/ mounted