1
0
mirror of https://github.com/systemd/systemd.git synced 2025-01-12 13:18:14 +03:00
Commit Graph

66052 Commits

Author SHA1 Message Date
Temuri Doghonadze
73d8e9ccc4 po: Translated using Weblate (Georgian)
Currently translated at 100.0% (227 of 227 strings)

po: Translated using Weblate (Georgian)

Currently translated at 97.3% (221 of 227 strings)

po: Translated using Weblate (Georgian)

Currently translated at 94.2% (214 of 227 strings)

po: Translated using Weblate (Georgian)

Currently translated at 90.3% (205 of 227 strings)

po: Translated using Weblate (Georgian)

Currently translated at 88.9% (202 of 227 strings)

Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/ka/
Translation: systemd/main
2023-07-15 10:00:59 +08:00
Luca Boccassi
5c07c70c5b Update NEWS for v254-rc2
Liberté, égalité, releasé 🇫🇷
2023-07-15 01:18:12 +01:00
Luca Boccassi
34278d1b61
Merge pull request from bluca/rc2
RC2 busywork
2023-07-15 01:15:41 +01:00
Luca Boccassi
d4c124a2af Update NEWS with latest changes 2023-07-15 01:14:55 +01:00
Luca Boccassi
205c1da02f NEWS: update contributors list 2023-07-15 01:14:55 +01:00
Luca Boccassi
e9f2fe9e0f Update hwdb 2023-07-14 23:40:49 +01:00
Temuri Doghonadze
20682fb387 po: Translated using Weblate (Georgian)
Currently translated at 94.2% (214 of 227 strings)

po: Translated using Weblate (Georgian)

Currently translated at 90.3% (205 of 227 strings)

po: Translated using Weblate (Georgian)

Currently translated at 88.9% (202 of 227 strings)

Co-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/ka/
Translation: systemd/main
2023-07-14 23:06:56 +01:00
Luca Boccassi
9027aff9d4
Merge pull request from keszybz/vconsole-reload-again
Restore ordering between vconsole-setup and firstboot services
2023-07-14 23:06:18 +01:00
Luca Boccassi
2c941b4e07
Merge pull request from keszybz/set-console-size
Set console size when we reset it
2023-07-14 23:02:41 +01:00
Luca Boccassi
224029fcaa
Merge pull request from goenkam/maanya/dissect-tool-support-for-confext
systemd-confext: image-based systemd-wide config update including dm-verity support​
2023-07-14 23:01:26 +01:00
Luca Boccassi
ef32125c65
Merge pull request from yuwata/network-route-table-name
network: cleanups for route table name
2023-07-14 22:57:31 +01:00
Yu Watanabe
92ab8058ed po: update Japanese translation 2023-07-14 22:56:41 +01:00
Dan Streetman
730d6ab930 tpm2: handle older tpm enrollments without a saved pcr bank
Older code did not save the pcr bank (i.e. pcr hash algorithm), and instead let
tpm2_unseal() find the best pcr bank to use. In commit
2cd9d57548 we changed tpm2_unseal() to no longer
handle an unset pcr bank. This adds back in the handling of an unset pcr_bank
so older sealed data should continue to work.
2023-07-14 22:55:51 +01:00
Dan Streetman
4916cc4750 test: reduce the number of loops in tpm2 test_tpms_pcr_selection_mask_and_hash()
This test loops through masks, but is a relatively long test due to the
increment size between loops; this slightly increases the increment size (from
3->5) which greatly speeds up the test.
2023-07-14 22:54:58 +01:00
Frantisek Sumsal
be492020ec tree-wide: a bunch of Coccinelle-suggested tweaks
rc2 edition
2023-07-14 22:49:01 +01:00
Luca Boccassi
a4333be63a
Merge pull request from ldv-alt/cname
resolved: fix canonical names returned by hosts lookups
2023-07-14 22:48:23 +01:00
Luca Boccassi
d3634ac46b
Merge pull request from berrange/cvm-lockdown
Avoid using SMBIOS for kernel cmdline injection in sd-stub in confidential VMs
2023-07-14 22:47:37 +01:00
Yu Watanabe
8ced74d76b compare: fix typo 2023-07-15 05:11:30 +09:00
Yu Watanabe
e8e91a81ee network: refuse to override predefined route table name 2023-07-15 02:56:25 +09:00
Yu Watanabe
f4defbdc5d network: do not append table number in TableString field in json output
The json output already contains table number, hence, it is not
necessary to include number in the string.
2023-07-15 02:56:20 +09:00
Maanya Goenka
f92256ace5 confext: test image wide systemd support for confext 2023-07-14 16:59:42 +00:00
Maanya Goenka
484d26dac1 confext: add dissect tool support for confext images
Allow image wide systemd tool support for confext images by adding dissect
tool support for these images
2023-07-14 16:59:34 +00:00
Maanya Goenka
8a324d1648 sysext: change the table lookup string to be more verbose 2023-07-14 16:50:33 +00:00
Piotr Drąg
c62d616d8c catalog: update Polish translation 2023-07-14 18:22:00 +02:00
Luca Boccassi
a9273824d8
Merge pull request from yuwata/unit-skip-battery-check-by-kernel-command-line
unit: skip battery check when systemd.skip-battery-check specified on boot
2023-07-14 15:57:13 +01:00
Yu Watanabe
7cfef4bb48 battery-check: allow to skip by passing systemd.battery-check=0 2023-07-14 15:56:29 +01:00
Daan De Meyer
726f105e6c
Merge pull request from DaanDeMeyer/python-stuff
mkosi: Stop using python3.9 on CentOS 8
2023-07-14 16:21:50 +02:00
Daniel P. Berrangé
4b1153cfcc efi: don't pull kernel cmdline from SMBIOS in a confidential VM
In a confidential VM, the SMBIOS data is not trusted, as it is under the
control of the host OS/admin and not covered by attestation of the machine.

Fixes: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-14 14:18:09 +01:00
Daniel P. Berrangé
b354a2cafc efi: add helper API for detecting confidential virtualization
This helper is a simplified version of detect_confidential_virtualization()
that merely returns a boolean status flag reflecting whether we are believed
to be running inside a confidential VM.

This flag can be used for turning off features that are inappropriate to
use from a CVM, but must not be used for releasing sensitive data. The
latter must only be done in response to an attestation for the environment.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-14 14:18:09 +01:00
Dmitry V. Levin
1ddc2f7fbc resolved: fix the canonical name returned by hosts lookup by name
In etc_hosts_lookup_by_name(), return the canonical name of the resolved
address instead of the name used to obtain that address.

Resolves: 
2023-07-14 13:13:53 +00:00
Luca Boccassi
0865c465ca
Merge pull request from dtardon/multiple-polkit-calls
Allow D-Bus methods to auth. for more than one polkit action
2023-07-14 14:13:53 +01:00
Dmitry V. Levin
0ff8f2a33a resolved: fix the canonical name returned by hosts lookup by address
In etc_hosts_lookup_by_address(), make sure the canonical name of the given
address is returned first in the list of names that address resolves to.

Resolves: 
2023-07-14 13:13:53 +00:00
Dmitry V. Levin
1bd76a6217 resolved: keep track of first names listed for each address in /etc/hosts
These names will be used later in responses as canonical names.
2023-07-14 13:13:53 +00:00
Daniel P. Berrangé
129b9e3f42 fundamental: share constants for confidential virt detection
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2023-07-14 14:06:51 +01:00
Daan De Meyer
8229217327 mkosi: Move settings to right sections 2023-07-14 14:53:53 +02:00
Daan De Meyer
3e0718f282 mkosi: Stop using python3.9 on CentOS 8
Let's get rid of all the complexity and just not build ukify on
CentOS Stream 8.
2023-07-14 14:52:08 +02:00
Daan De Meyer
2defccf3e1 mkosi: Drop kernel command line arguments that are set by mkosi
mkosi sets these by default now so let's drop them from our
configuration.
2023-07-14 14:51:42 +02:00
Daan De Meyer
5b79e9d7a9 mkosi: Update to latest
mkosi now supports CentOS SIGs natively so we drop our own definition
of that and use the mkosi builtin one. We also enable hyperscale for
both CentOS 8 and CentOS 9 for consistency and add epel-next as well
which is a requirement for Hyperscale.
2023-07-14 14:47:45 +02:00
Daan De Meyer
09444a2e76 elf2efi: Make compatible with python 3.6 again
CentOS 8 ships python 3.6 so let's try and stay compatible with that
since the only feature we're using that requires python 3.9 is the
streamlined type annotations which are trivial to convert back to
the older stuff to stay compatible with python 3.6.
2023-07-14 14:41:19 +02:00
Yuri Chornoivan
11696fbbd1 po: Translated using Weblate (Ukrainian)
Currently translated at 100.0% (227 of 227 strings)

po: Translated using Weblate (Ukrainian)

Currently translated at 93.8% (213 of 227 strings)

Co-authored-by: Yuri Chornoivan <yurchor@ukr.net>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/uk/
Translation: systemd/main
2023-07-14 11:55:07 +00:00
Weblate
64efe0bfa1 po: Update translation files
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Co-authored-by: Weblate <noreply@weblate.org>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/master/
Translation: systemd/main
2023-07-14 12:51:32 +01:00
Frantisek Sumsal
f1adb4a2ea packit: temporarily use older Rawhide spec
Until [0] is deployed to production.

[0] 2bdcec3db5
2023-07-14 20:47:19 +09:00
Daan De Meyer
a061312324 kernel-install: Avoid reopening file descriptor via /proc
kernel-install used to work without /proc mounted before the rewrite
in C. Let's restore that property by making sure we don't reopen
file descriptors via /proc. In this case, parse_env_file_fdv() calls
fdopen_independent() to get a FILE * for the given file descriptor
(which itself calls fd_reopen()). Let's avoid the call to
fdopen_independent() by using chase_and_fopenat_unlocked() which
gives us a FILE * immediately without having to reopen any file
descriptors.
2023-07-14 12:28:26 +02:00
Luca Boccassi
7f92564b38
Merge pull request from bluca/homed_translate
homed: make all pam_prompt strings translatable
2023-07-14 10:35:58 +01:00
Luca Boccassi
1118a39a77 po: add homed file and regenerate pot 2023-07-14 10:32:54 +01:00
Daan De Meyer
6d4f612c70
Merge pull request from yuwata/json_append
Use json_append() and json_variant_append_array()
2023-07-14 10:07:48 +02:00
Yu Watanabe
dc32de3924 network: check lifetime of address and route before configure
Otherwise, we may configure a route that depends on the existence
of an address or another route, and may fail when lifetime of one
of them are already zero.

Hopefully fixes .
2023-07-14 10:01:20 +02:00
Yu Watanabe
4cbabc195c sd-journal: fix 'the the' 2023-07-14 16:53:41 +09:00
Daan De Meyer
95b8bf9df2 mkosi: Set systemd.early_core_pattern=/core
This makes sure we get pid1 coredumps during early boot.
2023-07-14 09:13:10 +02:00
Daan De Meyer
102f36efd1 terminal-util: Document boolean parameter in one more place 2023-07-14 09:12:54 +02:00