1
0
mirror of https://github.com/systemd/systemd.git synced 2025-03-06 00:58:29 +03:00

72010 Commits

Author SHA1 Message Date
Mike Yuan
ac97053618
analyze: refuse --global dot/verify
I don't quite understand the rationale of making these
verbs work with --global back in the day. But realistically
they interact with/spawn manager, while there's no
--global runtime scope manager. And to verify/inspect user
units it's sufficient to just use --user.

Fixes #31911
2024-03-24 01:28:28 +08:00
Mike Yuan
147e7b4446
analyze-dot: also show BindsTo= in --require 2024-03-24 01:28:28 +08:00
Mike Yuan
de91848c3a
analyze-dot: minor modernization 2024-03-24 01:28:28 +08:00
Mike Yuan
3efb597b07
analyze-security: use FOREACH_ARRAY 2024-03-24 01:11:14 +08:00
Michael Biebl
1df021927f Fix bpf-framework build failure with gcc-bpf
The -mkernel option was dropped in
da445a5858

We also need to ensure that the include paths are properly set for the
linux kernel headers.

Fixes: #31869
2024-03-23 12:06:22 +01:00
Zbigniew Jędrzejewski-Szmek
da867fa3c3
Merge pull request #31907 from mrc0mmand/efi-shenanigans
efi: check if all sections of our EFI binaries are properly aligned
2024-03-23 12:04:14 +01:00
Zbigniew Jędrzejewski-Szmek
9a50330476
Merge pull request #31779 from keszybz/elf2efi-clang-18
Make elf2efi work with clang-18
2024-03-23 12:02:34 +01:00
Adrian Vovk
9a077230a4 homed: Ensure closed FD is handled before bus req
Before this fix, the following sequence of events was possible:
1. A client holding a Ref() FD closes their FD
2. kernel sends notification that all clients closed their FDs
3. Another client obtains its own Ref() FD from homed
4. homed handles the notification that all clients have closed their
   Ref() FDs. Thus it loses track of the fact that the session is
   actually still being held open by the client from step 3

This change makes sure that homed won't respond to bus messages (and
thus won't open more Ref() FDs) until it has handled all notifications
about the existing FDs being closed.

logind has had a very similar fix applied to it in
e11544a8305ab9dea097c74bb16e296150c9cc10

Fixes https://github.com/systemd/systemd/issues/31518
2024-03-23 01:04:51 +00:00
Luca Boccassi
1b5f3f5662
Merge pull request #31670 from CodethinkLabs/vmspawn/generate_ssh_keys
vmspawn: generate ssh keys
2024-03-22 16:28:03 +00:00
Luca Boccassi
5bd9a430f7
Merge pull request #31908 from DaanDeMeyer/mkosi
Various mkosi fixes
2024-03-22 16:22:42 +00:00
Daan De Meyer
d0327823d8 mkosi: Switch to Arch Linux packaging sources main branch
https://gitlab.archlinux.org/archlinux/packaging/packages/systemd/-/merge_requests/8
was merged so let's switch branches to the main branch.
2024-03-22 16:51:37 +01:00
Daan De Meyer
97b191c49b mkosi: Disable debug package generation on Arch Linux
This is extremely slow since the latest pacman release, and since
we don't strip binaries, not really needed either.
2024-03-22 16:49:10 +01:00
Zbigniew Jędrzejewski-Szmek
125f06dd1c tools/elf2efi: elif→if to make pylint happy 2024-03-22 15:44:17 +01:00
Zbigniew Jędrzejewski-Szmek
6d03e5523c tools/elf2efi: skip empty .got section and its .relro_padding
Resolves https://github.com/systemd/systemd/issues/31637.

lld-18 does the section setup differently than older versions. There is a bunch
of ordering chagnes, but it also inserts the following:

Sections:
Idx Name          Size      VMA               LMA               File off  Algn
...
  9 .got          00000000  00000000000283c0  00000000000283c0  000283c0  2**3
                  CONTENTS, ALLOC, LOAD, DATA
 10 .relro_padding 00000c40  00000000000283c0  00000000000283c0  000283c0  2**0
                  ALLOC
 11 .data         00000024  00000000000293c0  00000000000293c0  000283c0  2**4
                  CONTENTS, ALLOC, LOAD, DATA
...

This causes a problem for us, because we try to map the .got to .rodata,
and the subsequent .data to .data, and round down the VMA to the nearest
page, which causes the PE sections to overlap.

https://github.com/llvm/llvm-project/pull/66042 adds .relro_padding to make
sure that the RELRO segment is properly write protected and allocated. For our
binaries, the .got section is empty, so we can skip it safely, and the
.relro_padding section is not useful once .got has been dropped.

We don't expect .got sections, but they are apparently inserted on i386 and
aarch64 builds. Emit a warning until we figure out why they are there.
2024-03-22 15:42:57 +01:00
Daan De Meyer
1bee93c4c7 mkosi: Enable log context 2024-03-22 15:15:01 +01:00
Daan De Meyer
2d0b8e9fb6 mkosi: Make sure man and man-db are installed everywhere 2024-03-22 15:12:20 +01:00
Daan De Meyer
27add528d7 test: Install test journals
Let's package these just like we package other test data.
2024-03-22 15:11:39 +01:00
Daan De Meyer
16f182e59a
Merge pull request #31839 from DaanDeMeyer/log
log: Add per target log levels
2024-03-22 15:11:11 +01:00
Frantisek Sumsal
7ff3b88396 efi: check if all sections of our EFI binaries are properly aligned 2024-03-22 14:02:03 +01:00
Unique-Usman
5f0e4d2fb4 Added more ASSERT macro and also make some test file to use them 2024-03-22 12:31:14 +00:00
Luca Boccassi
3be1ebcb4d
Merge pull request #31902 from YHNdnzj/swap-followup
core: some follow-ups
2024-03-22 12:08:53 +00:00
Daan De Meyer
e8815abff6 log: Add per target log levels
For CI in mkosi, I want to configure systemd to log at debug level
to the journal, but not to the console. While we already have max
level settings for journald's forwarding settings, not every log line
goes to the journal, specifically during early boot and when units
are connected directly to the console (think systemd-firstboot), so
let's extend the log level options we already have to allow specifying
a comma separated list of values and lets allow prefixing values with
the log target they apply to to make this possible.
2024-03-22 12:46:32 +01:00
Frantisek Sumsal
a00dedf802 efi: fix mixed indent 2024-03-22 12:11:49 +01:00
Yu Watanabe
1aa6af6bcc
Merge pull request #31900 from DaanDeMeyer/dissect
nspawn logging fix
2024-03-22 20:07:34 +09:00
Mike Yuan
f1dfc20a4a
core/mount: use ASSERT_PTR in mount_setup_new_unit 2024-03-22 18:36:01 +08:00
Mike Yuan
ba31a5018f
core/swap: fix memory management in swap_setup_unit
Follow-up for e9fa1bf704ad2f0a7e257e29889315118b0df459
2024-03-22 18:30:39 +08:00
Daan De Meyer
50814ebede nspawn: Use dissect_image_mount_and_warn() 2024-03-22 10:48:46 +01:00
Daan De Meyer
12473f3a4a dissect-image: Improve error messages 2024-03-22 10:48:35 +01:00
Luca Boccassi
9773f5860f
Merge pull request #31868 from bluca/test_cleanup
test: delete private images on clean-again
2024-03-21 23:45:49 +00:00
Yu Watanabe
431f2ffbea
Merge pull request #31892 from YHNdnzj/machinectl-minor-cleanup
machinectl: minor modernization, use FOREACH_ARRAY
2024-03-22 08:10:39 +09:00
Gerd Hoffmann
57ea8012d6 sd-boot: add support for support enrolling dbx
usage:
  (1) get latest revocation list for your architecture
      from https://uefi.org/revocationlistfile
  (2) copy the file to $ESP/loader/keys/$name/dbx.auth
2024-03-21 23:03:42 +00:00
Daan De Meyer
e33d43b059 docs: Add one more git submodule setting to configure 2024-03-21 23:02:52 +00:00
Mike Yuan
66d826026e cgroup-util: use path_find_first_component where appropriate
Prompted by 8922a728f732a716ecd17dd67cd39bc1a0fc4aa5
2024-03-22 08:00:55 +09:00
Yu Watanabe
d3aa0af31a
Merge pull request #31890 from YHNdnzj/ASSERT_PTR
core: use ASSERT_PTR and RET_GATHER more
2024-03-22 07:57:46 +09:00
Daan De Meyer
f680c4c95e dbus-exporter: Set explicit mode on output directory
Otherwise the created directory might have the sticky bit or the setgid
bit set as these are inherited from the parent directory.
2024-03-22 07:54:25 +09:00
Mike Yuan
7312b0397c
machinectl: minor modernization, use FOREACH_ARRAY
Prompted by 237bbec1173b41c0e0f2eaf9c30e19ab82073b8d
2024-03-22 01:54:31 +08:00
Mike Yuan
51e0149173
nulstr-util: minor cleanup 2024-03-22 01:44:45 +08:00
Mike Yuan
4ecb673e6f
core: use RET_GATHER more 2024-03-22 01:36:37 +08:00
Mike Yuan
e9fa1bf704
core: use ASSERT_PTR(CAST(u)) everywhere 2024-03-22 01:36:37 +08:00
Yu Watanabe
ec0bc263d7
Merge pull request #31880 from yuwata/network-varlink-trivial-cleanups
network: trivial varlink cleanups
2024-03-21 22:00:52 +09:00
dependabot[bot]
11a9c575ed build(deps): bump pkg/fedora from 2822a03 to 2e32a33
Bumps pkg/fedora from `2822a03` to `2e32a33`.

---
updated-dependencies:
- dependency-name: pkg/fedora
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-21 13:48:13 +01:00
dependabot[bot]
55c03cb539 build(deps): bump pkg/debian from 86cd356 to 3b47281
Bumps pkg/debian from `86cd356` to `3b47281`.

---
updated-dependencies:
- dependency-name: pkg/debian
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-21 13:47:20 +01:00
Luca Boccassi
437eddcb41 test: run clean-again between tests, not at the end
So that we free up space for the next run, as we are seeing disk space
issues on Ubuntu CI due to the many images built and left around
2024-03-21 11:11:01 +00:00
Luca Boccassi
a82cf4902d test: delete private images on clean-again
Private images are not reused, they are unique to tests, so delete them
as they take a lot of disk space, and we are starting to run in /var/tmp
space issues on the Ubuntu CI
2024-03-21 11:08:18 +00:00
Yu Watanabe
1015742878 varlink: use varlink_server_description() 2024-03-21 19:54:25 +09:00
Yu Watanabe
2858d92914 network: set varlink description 2024-03-21 19:52:31 +09:00
Yu Watanabe
7742d03e8d networkctl: use varlink_flush_close_unrefp() 2024-03-21 19:45:03 +09:00
Mike Yuan
16f5baa247
Merge pull request #31861 from yuwata/journalctl-fix-until
journalctl: make --until work again with --after-cursor and --lines
2024-03-21 18:05:36 +08:00
Evgeny Vereshchagin
ae0e1cb989 CI: revert the mmap_rnd_bits kludge
This reverts commit 2e0c2fb8fb15faeedf213930a4c2a3a6d584101f and commit
b7c7498de814b1e9825b43c28e307a7f0af8ffd2 now that
https://github.com/actions/runner-images/issues/9491 is closed.
2024-03-21 10:22:43 +01:00
Markus Merklinger
c9f1a0536f Update USB ids of hwdb 2024-03-21 15:29:48 +09:00