1
0
mirror of https://github.com/systemd/systemd.git synced 2025-01-18 10:04:04 +03:00

74722 Commits

Author SHA1 Message Date
David Joaquín Shourabi Porcel
697d247e30 man: machinectl(1): Fix description of subcommand poweroff
(cherry picked from commit a41da1e7037dc36a601d3428343bbc7f0eed3e20)
2024-11-13 19:48:10 +00:00
David Joaquín Shourabi Porcel
5a2f94d2da man: systemd-nspawn(1): Fix some typos
(cherry picked from commit f4e3c6e5b318d22a9c40144c6d52ae68a70c264c)
2024-11-13 19:48:10 +00:00
Yu Watanabe
b64601d454 test: add test cases for timestamp with time zone
(cherry picked from commit 25999f868fe0e9684af7a364224ac42071b70f74)
2024-11-13 19:48:10 +00:00
Yu Watanabe
38d55448b9 time-util: copy input string before fork()
Fixes #34670.

(cherry picked from commit 6d3012bab4ce4c1ed260598d05b4e9f2ea471658)
2024-11-13 19:48:10 +00:00
Yu Watanabe
c7a00c4cae time-util: fix parsing timestamp with NZ timezone
Fixes a bug caused by ef658a63f8163607d9e04f710cd26c0d36ff68ce.

(cherry picked from commit eb87d3e1e9210d9387536cc3ece4e32aacdc5009)
2024-11-13 19:48:10 +00:00
Lennart Poettering
964f7772ad resolved: fix fastopen fallback
We should not invalidate the socket address size before we use it.

Fixes: #34579
(cherry picked from commit 5699e4c2d470a12c922c4b7c86a8987837911626)
2024-11-13 19:48:10 +00:00
Vito Caputo
5e45c58274 mmap-cache: add some stats about files/windows/unused
Let's give some visibility into the ratio of files:windows:unused
by the time we're done using the cache.

(cherry picked from commit 284802c597aa0194dc1504db65ee24941d9721eb)
2024-11-13 19:48:10 +00:00
Vito Caputo
3dcde32fed mmap-cache: enforce an unused windows minimum
With many fds the global windows count generally exceeds the
minimum.   This results in always reusing the unused entry if
there is one, which becomes a sort of degenerate case where we're
just constantly unmapping->mapping.

Instead let's try always have at least several unused windows on
the unused list before we resort to churning through it.

Fixes #34516

(cherry picked from commit 176f73272e6e3116caab3900eb553be54f520a68)
2024-11-13 19:48:10 +00:00
Daan De Meyer
933686348b
Merge pull request #34728 from DaanDeMeyer/backport-logging-improvements
Backport logging improvements to v256-stable
2024-10-11 20:40:07 +02:00
Daan De Meyer
814be7116d core: Log in more scenarios about which process initiated an operation
Exit/Reboot/Poweroff and similar operations are invasive enough that
logging about who initiated them is very useful to debug issues.

(cherry picked from commit acb0f501f4291efce82bcf89d4ad92b6a895f4fa)
2024-10-11 18:14:45 +02:00
Daan De Meyer
31e38b55b2 core: Bump log level of reexecute request to notice
A daemon-reload is important enough to deserve logging at notice
level.

(cherry picked from commit 4ee41be82507348fbbc9d3ab28aae6330eb51663)
2024-10-11 18:13:35 +02:00
Daan De Meyer
871ee2f087 bus-util: Log more information when connecting to a bus socket fails
Let's log about which bus we're trying to connect to and what transport
we're using to do it.

(cherry picked from commit d8a77d55e6ad7f251ae0eb6758af6bba111095df)
2024-10-11 18:12:38 +02:00
Frantisek Sumsal
c5baa5d9d9 test: drop removed SCSI passthrough feature
This feature has been deprecated since QEMU 5.0 and finally removed in
QEMU 9.1 [0] which now causes issues when running the storage tests on
latest Arch:

------ testcase_long_sysfs_path: BEGIN ------
...
qemu-system-x86_64: -device virtio-blk-pci,drive=drive0,scsi=off,bus=pci_bridge25: Property 'virtio-blk-pci.scsi' not found
E: qemu failed with exit code 1

[0] a271b8d7b2

(cherry picked from commit cd57920fbf6a8f7769a82cfc9bebc12965de0199)
2024-10-09 15:32:29 +01:00
Luca Boccassi
abd44e2654 doc-sync: strip point release from version before uploading
We create subdirectories for each major release, but not for point releases
so strip the suffix if it is present

(cherry picked from commit 59e6059513ea53954176096152b8c04f20198cbf)
2024-10-08 16:47:25 +01:00
Luca Boccassi
7635d01869 meson: bump version to 256.7 v256.7 2024-10-08 16:42:30 +01:00
Yu Watanabe
259a8413a6 test: add test cases for --volatile= with -U
For issue #34254.

(cherry picked from commit 48878074d69a558484348f14e8887ce132938377)
2024-10-08 16:39:12 +01:00
Yu Watanabe
8f31e8ca84 nspawn: only remount /usr/ with idmap when --volatile=yes
The root directory is already mounted with a picked UID shift, hence
it is not necessary to remount with idmap. However, /usr/ is a bind-mount,
hence it must be remounted with idmap.

With this change, now '-U --volatile=yes' works fine.

Fixes #34254.

(cherry picked from commit 025be2361b3ee7cc3732fb3963d36b8583842064)
2024-10-08 16:39:12 +01:00
Yu Watanabe
8c31367d23 nspawn: mount /var/ after remount_idmap() when --volatile=state
Previously, remount_idmap() failed as /var/ was already mounted, thus
remounting (strictly speaking, unmounting old root directory) failed
with -EBUSY.

As tmpfs /var/ is mounted with picked UID shift, it should not be
remounted with idmap, but needs to be mounted after the root directory
being remounted.

This makes '-U --volatile=state' work as expected.

(cherry picked from commit 2c2511aa734c507e04e06d273b474acacac9d486)
2024-10-08 16:39:12 +01:00
Yu Watanabe
8aedc1fe29 nspawn: use strv_extend() and friends to build directories passed to remount_idmap()
No functional change, just refactoring and preparation for later change.

(cherry picked from commit 21cd84df6931a358714af9d1f8cc54b26fef1a39)
2024-10-08 16:39:12 +01:00
Lennart Poettering
c5169b4441 meson: tweak meson conditionalization for ssh{d,}_config drop-ins
Let's make sure "no" is an acceptable setting for these paths.

(cherry picked from commit a8ea7c19400363847bcd62f3b9ee533fbab0e658)
2024-10-08 16:39:12 +01:00
Ronan Pigott
5dc97968d6 load-fragment: terminate the specifier table (#34421)
Otherwise an invalid specifier iterates over uninitialized data.

Fixes a bug introduced by 0b40688d1830abc6f59b1f1f67eccd757c23eb09 (v254).

(cherry picked from commit 32b8065e876c6f89f55b1bb30eeb442d3921fb3a)
2024-10-08 16:39:12 +01:00
Mike Yuan
4296a567d4 various: correct laccess() error check
laccess is our own macro that uses RET_NERRNO.

(cherry picked from commit 7c1dd9e288047a69d4a6a6dd6585725410cfdadd)
2024-10-08 16:39:12 +01:00
Daan De Meyer
902877d55e Fix generator logging
log_setup() overrides the previously set log target again so we
can't use it in log_setup_generator().

Follow-up for aa976d87889ae22b7347787a1ebd03a31dcc0a9e

(cherry picked from commit b3ebd480d6674ce4f66200858c88557595713bd5)
2024-10-08 16:39:12 +01:00
Luca Boccassi
86a9eea94c mkosi: update debian commit reference
* cb00be93e5 Upstream profile: skip dh_strip_nondeterminism
* c948e192a8 autopkgtest: skip gdm3 on armel for smoke tests
* e12116becb initramfs-tools: ensure rules file exists before invoking chzdev
* c8904f67e9 Filter out zdev rules in the initramfs hook (LP: #2044104)
* 9967984fc8 salsa-ci: test the stage1 build profile
* 2c81f4a6cc d/e/checkout-upstream: undo quilt patches before switching debian branch
* e75197fa10 d/e/checkout-upstream: do not rebase on main when building stable branches
* 7989319bca Drop patch merged upstream
* b7127a0725 Depend on new linux-bpf-dev package where available
* 7966d2543f autopkgtest: use hint-testsuite-triggers to ensure other packages changes trigger our testsuite
* 777af76cae autopkgtest: run upstream test last
* f257c53fe3 Stop installing legaly pkla file in upstream CI too
* a4b54fd693 Use d/not-installed instead of manual removals
* e0fdbb4496 Stop shipping empty /etc/init.d directory
* 202c7fc8f9 Use debian/clean instead of override in d/rules
* ba81ea64a6 Drop redundant pot build
* 9152d0e064 autopkgtest: allow localectl in localed tests
* 319a078b8e Fix D-Bus policy for locale1 blocking
* 28daa8b37b Drop last patch, all merged upstream
* 7bf7bf6f4e Drop out-of-tree localed patch and use D-Bus policy instead
* 409028b7e6 Drop /etc/sysctl.d/99-sysctl.conf symlink
* 6f37d3cb3e d/e/checkout-upstream: switch packaging branch on upstream stable PRs
* b7e53c00b2 d/e/checkout-upstream: do not fail if rebase fails
* 1364bb81d4 d/e/checkout-upstream: fix shellcheck warnings
* 796d133b0c initramfs-tools: copy network drop-ins too
2024-10-08 16:39:12 +01:00
Luca Boccassi
906a3d37ce mkosi: mark test as skipped when QEMU crashes
On Ubuntu/Debian infrastructure QEMU crashes a lot, so mark the test
as skipped in that case as there's nothing we can do about it and
we shouldn't mark runs as failed

(cherry picked from commit 0d7f5a9ae6f5fc70c5ad23398c2b7a515e9b1982)
2024-10-08 16:39:12 +01:00
Luca Boccassi
966d8a90ca semaphore: do not build docs
There are other CI runs that build manpages, speed up build which is close to 1hr limit

(cherry picked from commit d58a904d35d3abcb7265b28b14aac596631e27d6)
2024-10-08 16:39:12 +01:00
Luca Boccassi
52afaa8034 semaphore: stop building and running extra unit tests
This slows down the build, which is often near the 1hr limit. There are
other jobs running the extra unit tests.

(cherry picked from commit 3bc5480bac474263881e4c5919d5cce0debf3c40)
2024-10-08 16:39:12 +01:00
Luca Boccassi
bc0102b0ca Semaphore: switch from /tmp to /var/tmp to avoid disk space issues
Builds have been failing as we run out of space in /tmp/, move to
/var/tmp

(cherry picked from commit 0c7b5dad33ee01b7ff6b7a8c583a7e2c27ac0673)
2024-10-08 16:39:12 +01:00
Thomas Blume
7c399a4003 test: set TEST_NESTED_KVM as default
(cherry picked from commit 5540c37bb8b275cb58b1c936ff701d1c80503e9b)
2024-10-08 16:39:12 +01:00
Daan De Meyer
8bf57b2f83 mkosi: Switch to Fedora 41
It's due for release soon and will fix the flakyness of TEST-58-REPART
so let's bump the Fedora 40 job to Fedora 41.

(cherry picked from commit 12a1b02b528e1802025fdc7e3ac9de9426a14391)
2024-10-08 16:39:12 +01:00
Lukas Nykryn
7ac58949a3 core: warn if a generator is world-writable
... because that is obviously a security risk.

(cherry picked from commit da32cac8a014ddf048fc7bad84dafdbc204d4dc8)
2024-10-08 16:39:12 +01:00
Yu Watanabe
7b9e412d8a test: add test case for issue #34637
(cherry picked from commit 88d186e4829bc7ef4a4253fe2bf4857903bca830)
2024-10-08 16:39:12 +01:00
Yu Watanabe
02a5e5a323 udev-node: skip stack directory creation for diskseq
The disk/by-diskseq symlink should not be shared with multiple block
devices. Hence, it is not necessary to create stack directory for the
symlink that manages which device owns the symlink.

This is not just a optimization.
If a service unit tries to mount a disk image but the service fails, then
the diskseq of the loop device for the image may be continuously increased
during restart, and inodes in /run may increase rapidly, as the stack
directories are cleaned up only when udev queue is empty.

Fixes #34637.

(cherry picked from commit 09373c1a50297079e6b0447ea97af4e9a60f77fa)
2024-10-08 16:39:12 +01:00
Daniel Martinez
d65b7426e9 Use case insensitive comparison for the machine's architechture
boot loader specification states:

architecture: refers to the architecture this entry is for. The argument
should be an architecture identifier, using the architecture vocabulary
defined by the EFI specification (i.e. IA32, x64, IA64, ARM, AA64, …).
If specified and it does not match the local system architecture this
entry should be hidden. The comparison should be done case-insensitively.

Example: architecture aa64

https://uapi-group.org/specifications/specs/boot_loader_specification/#type-1-boot-loader-entry-keys
(cherry picked from commit f819a516dbbddb16724f33dcef5badcb6fe8b80b)
2024-10-08 16:39:12 +01:00
Michal Koutný
84cd501ae4 test: Add test for per-device cgroup properties
Reported in #34126

(cherry picked from commit 321637743313f896e275fd038996b8cfb5a070b3)
2024-10-08 16:39:12 +01:00
Daan De Meyer
83f7bced66 chase: Fix shortcut
We can't shortcut chaseat() if CHASE_PARENT is set.

(cherry picked from commit 87333bd1dc69195b93e9aee9b91c06fb167b152e)
2024-10-08 16:39:12 +01:00
Daan De Meyer
52fa3b52bd repart: Don't copy root directory mode from source file
If the source is a file, don't copy the mode and such from it to
the root directory, even if the target is /.

(cherry picked from commit 413d3ce1b76b42ba691eea54cd1704b14602442e)
2024-10-08 16:39:12 +01:00
Jörg Behrmann
5b5f5666b2 man: Use proper conjunction and remove superfluous or
(cherry picked from commit 56f32d9e782f8ba43f17cb04687c915a7e41d10e)
2024-10-08 16:39:12 +01:00
Daan De Meyer
5a2e875837 repart: Handle empty arg_copy_source in file_is_denylisted()
(cherry picked from commit 7cd56ec9515a7ffc4edbd7d10ab7d001129abf57)
2024-10-08 16:39:12 +01:00
Luca Boccassi
1075727f7f man: consolidate list of active unit states into a shared table
Avoids the need to maintain the same list over and over again, and
link it to the defition table in the implementation as a reminder
too

(cherry picked from commit 3509fe124d3a4fe2934028f83ae156ade050c8fe)
2024-10-08 16:39:12 +01:00
Michael Ferrari
c3c4dfdfb1 repart: open target devices before UUID creation
This is to ensure that the UUIDs from the CopyBlocks= devices are copied
to the corresponding new partition instead of creating a new UUID for
it. With this verity partitions can be copied, keeping their UUIDs to
ensure that they still match up with what is specified in roothash=.

(cherry picked from commit f106fd2dbdbd9debfc2d2ed4d96ae3108a29c79b)
2024-10-08 16:39:12 +01:00
Zbigniew Jędrzejewski-Szmek
0f716efc23 homectl: fix inverted table footer condition
Fixup for 2413a0fab4fdad7eef3ce1d4b57664be5795b002.

(cherry picked from commit 3be87dca031956bc0f7744d0bb9e1fea04acd945)
2024-10-08 16:39:12 +01:00
Daan De Meyer
7f6f146df6 nsresourced: Fix declaration of bpf_rdonly_cast()
Fixes compilation error

"""
[780/3171] /usr/bin/clang -std=gnu11 -Wno-compare-distinct-pointer-types -fno-stack-protector -O2 -target bpf -g -c -D__aarch64__ -I. -isystem /usr/include/ -idirafter /usr/include ../src/nsresourced/bpf/userns_restrict/userns-restrict.bpf.c -o src/nsresourced/bpf/userns_restrict/userns-restrict.bpf.unstripped.o -I/usr/src/kernels/6.11.1-0.hs1.hs+fb.el9.aarch64
FAILED: src/nsresourced/bpf/userns_restrict/userns-restrict.bpf.unstripped.o
/usr/bin/clang -std=gnu11 -Wno-compare-distinct-pointer-types -fno-stack-protector -O2 -target bpf -g -c -D__aarch64__ -I. -isystem /usr/include/ -idirafter /usr/include ../src/nsresourced/bpf/userns_restrict/userns-restrict.bpf.c -o src/nsresourced/bpf/userns_restrict/userns-restrict.bpf.unstripped.o -I/usr/src/kernels/6.11.1-0.hs1.hs+fb.el9.aarch64
../src/nsresourced/bpf/userns_restrict/userns-restrict.bpf.c:27:7: error: conflicting types for 'bpf_rdonly_cast'
   27 | void *bpf_rdonly_cast(void *, __u32) __ksym;
      |       ^
/usr/src/kernels/6.11.1-0.hs1.hs+fb.el9.aarch64/vmlinux.h:143063:14: note: previous declaration is here
 143063 | extern void *bpf_rdonly_cast(const void *obj__ign, u32 btf_id__k) __weak __ksym;
        |              ^
1 error generated.
"""

(cherry picked from commit 33f1c5287f6c5b1b02324bbbb5aafb27d34b00cb)
2024-10-08 16:39:12 +01:00
Lukas Nykryn
adc57cd81c man: using WantedBy=default.target is not a good idea
We had several users, that wrote their unit files with
WantedBy=default.target because it should be started "every time".
But for example in Fedora/CentOS/RHEL, this often breaks for
example selinux relabels (where we just want to do a relabel and reboot).

(cherry picked from commit 67b6404b80cf8078f3d9ec6d4c2f34ac25b15077)
2024-10-08 16:39:12 +01:00
Daan De Meyer
9f513b1397 mkosi: Stop installing bpftrace
bpftrace nudges the Fedora Rawhide images towards compiler-rt18 while the
sanitizer builds pull in clang19, leading to the sanitizer libraries
not being found at runtime. Let's drop bpftrace for now so that compiler-rt19
is pulled in in the main image.

(cherry picked from commit d98b6c66ffaccbef1c86fc729f2f9601bfb02fd5)
2024-10-08 16:39:12 +01:00
Daan De Meyer
fbdbe4334e mkosi: Pass ASAN_OPTIONS to subimages
systemd built with sanitizers is installed in subimages and tools
might get invoked in postinstall scripts so we have to disable ASAN
in the subimages as well during the image build.

(cherry picked from commit 345a4fcbb6ed16ab19d0d5b0c7344e5cdfe29efd)
2024-10-08 16:39:12 +01:00
Daan De Meyer
6c08649846 mkosi: Don't sync if the packaging specs repo is dirty
(cherry picked from commit 9c7762c943bd5612f02a93b2ec986141fcb5226d)
2024-10-08 16:39:12 +01:00
Daan De Meyer
e129e3a861 tree-wide: Fix Wformat warnings
The latest clang has started catching more integer promotions which
cause us to pass the wrong type to printf() format specifiers so let's
fix those.

(cherry picked from commit c73d14c43e7998ca54011875ad25afc634d57498)
2024-10-08 16:39:12 +01:00
Lennart Poettering
96c0549bda man: drop reference to /bin/ from docs regarding binary search path
We don't support "split /usr" systems anymore, hence no point in
mentioning /bin/ anymore as being part of the binary search path.

(cherry picked from commit f39e66b85a4a97818a618758e34019d052aeb772)
2024-10-08 16:39:12 +01:00
Lennart Poettering
aeda397aed man: soft deprecate use of ";" for separating multiple command lines in ExecStart=
So far we supported this syntax:

    ExecStart=foo ; bar

as equivalent to:

    ExecStart=foo
    ExecStart=bar

With this change we'll "soft" deprecate the first syntax. i.e. it's
still supported in code, but not documented anymore.

The concept was originally added to make things easier for 3rd party
.ini readers, as it allowed writing unit files with a .ini framework
that doesn't allow multiple assignments for the same key. But frankly,
this is kinda pointless, as so many other of our knobs require the
double assignment.

Hence, let's just stop advertising the concept, let's simplify the docs,
by removing one entirely redundant feature from it.

Replaces: #34570
(cherry picked from commit 225f18b9a9d39331ea862478ab2ff893678e249d)
2024-10-08 16:39:12 +01:00