1
0
mirror of https://github.com/systemd/systemd.git synced 2024-11-06 16:59:03 +03:00
Commit Graph

317 Commits

Author SHA1 Message Date
Lennart Poettering
94959f0fa0 exec: allow passing arbitrary path names to blkio cgroup attributes
If a device node is specified, then adjust the bandwidth/weight of it,
otherwise find the backing block device of the file system the path
refers to and adjust its bandwidth/weight.
2011-08-21 20:07:45 +02:00
Lennart Poettering
9e37286844 exec: add high-level controls for blkio cgroup attributes 2011-08-21 20:07:08 +02:00
Lennart Poettering
ab1f063390 exec: optionally apply cgroup attributes to the cgroups we create 2011-08-20 00:22:02 +02:00
Lennart Poettering
ff01d048b4 exec: introduce PrivateNetwork= process option to turn off network access to specific services 2011-08-02 05:24:58 +02:00
Lennart Poettering
4f755fc6ab man: nspawn fixes 2011-08-02 04:55:10 +02:00
Lennart Poettering
a41fe3a293 nspawn: add new --no-net switch to turn off networking in the container 2011-08-02 04:49:37 +02:00
Miklos Vajna
283ef082ee man: loginctl has lock/unlock with a -session suffix
Hi,

The systemd-loginctl manpage talks about lock/unlock while in fact it1s
lock-sesion/unlock-session. The attached patch fixes this issue.

Thanks.
2011-08-01 23:28:11 +02:00
Ville Skyttä
8b7d221208 man: Fix command name in systemd-tmpfiles example. 2011-08-01 23:28:09 +02:00
Lennart Poettering
260d370833 man: document that we default to 022 as umask 2011-08-01 22:37:45 +02:00
Lennart Poettering
8d41a963d6 machine-id: be nice and generate compliant v4 UUIDs
Newly generated machine IDs now qualify as randomized v4 UUIds. This is
trivial to do and hopefully increases adoption of the ID for various
purposes.
2011-07-25 19:32:43 +02:00
Lennart Poettering
729e3769c3 systemctl: hook up new install logic
This adds a number of new options to systemctl, for presets, reenabling,
masking/unmask, and runtime operations.
2011-07-25 04:58:02 +02:00
Lennart Poettering
e1ea662c33 systemctl: remove monitor command since it is mostly useless 2011-07-23 04:21:47 +02:00
Lennart Poettering
34c4b47b7f systemctl: split --help into multiple sections 2011-07-23 04:20:22 +02:00
Lennart Poettering
253ee27a0c manager: add log control via RT signals 2011-07-23 04:15:38 +02:00
Lennart Poettering
4e2d4c08fc man: add a couple of crosslinks 2011-07-13 22:42:21 +02:00
Lennart Poettering
a61933adac man: add man page for systemd-loginctl 2011-07-13 22:37:53 +02:00
Lennart Poettering
82e487c56d unit: introduce ConditionFileIsExecutable= and use it where we check for a binary we'll spawn 2011-07-12 04:25:02 +02:00
Lennart Poettering
ee17ee7c5c tmpfiles: allow creation of named pipes with tmpfiles 2011-07-12 03:56:56 +02:00
Zbigniew Jędrzejewski-Szmek
4e7f8bc81c man: un-reverse IgnoreOnSnapshot description
I think that snapshots & devices are actually _not_ captured in
snapshots.
2011-07-11 22:09:41 +02:00
Lennart Poettering
69fc152fc1 systemctl: hide all information on --kill-mode= since it is mostly useless 2011-07-07 04:19:03 +02:00
Lennart Poettering
8092a428d4 path,unit: support globbing in conditions and path units 2011-07-07 02:07:39 +02:00
Michal Vyskocil
687d0825a4 nspawn: spawn shell under specified --user
Add -u/--user option, which changes the effective and real user and
group id to the new value. The user must exists in the chroot, otherwise
it will fail. Both username and user id are accepted. The user home is
created as well.

It also setup HOME, USER, LOGNAME and SHELL variables .
2011-07-01 23:51:14 +02:00
Lennart Poettering
0aef434548 unit: add three new specifiers to use in unit files 2011-07-01 00:41:18 +02:00
Lennart Poettering
64747e2d4b exec: add ControlGroupModify= switch to allow changing access mode to cgroups fs 2011-06-30 00:11:25 +02:00
Lennart Poettering
c36eecdfcb man: update pam_systemd page to document new behaviour 2011-06-29 02:46:20 +02:00
Lennart Poettering
8fa365e586 logind: add man page for configuration file 2011-06-29 02:27:53 +02:00
Frederic Crozat
be394c48a7 systemctl: add support for --root for systemctl enable/disable/is-enabled
Add --root=<root> for enable/disable/is-enabled systemctl commands. To
be used for easily enable / disable systemd services for a chroot,
without running systemctl inside chroot.
2011-06-27 14:08:16 +02:00
Lennart Poettering
5f4b19f4bc service: check whether sysv scripts where changed 2011-06-21 19:29:45 +02:00
Ville Skyttä
abebb5af9a systemctl: Add SYSTEMD_PAGER for setting the pager to use in systemctl 2011-06-20 17:59:59 +02:00
Ville Skyttä
9f7dad774e man: Documentation spelling fixes 2011-06-20 17:57:22 +02:00
Michal Schmidt
0e318cad06 pam-module: add debug= parameter
It is customary that pam modules do not log debugging information by default.
Usually they offer a 'debug' option.

Add a boolean debug= option to pam_systemd.so.

This will solve bug
https://bugzilla.redhat.com/show_bug.cgi?id=705427

Commit 53d5582fa0 was not sufficient to fix it,
because in Fedora rsyslog is configured to write even LOG_DEBUG messages to
/var/log/secure by default.
2011-06-15 22:23:39 +02:00
Lennart Poettering
f9f0c31ae5 man: clarify os-release in regards to spaces a bit 2011-06-15 21:09:04 +02:00
Ozan Çağlayan
9a66640832 exec: Fix number of unit types
There are four unit types mentioned in here, not three
2011-05-27 08:28:40 +02:00
William Swanson
d636fa3d67 man: update the list of unit search locations 2011-05-25 18:04:53 +02:00
Lennart Poettering
ec6370a22d socket: expose SO_BROADCAST 2011-05-19 18:10:19 +02:00
Lennart Poettering
6b6d2deecc socket: expose IP_TRANSPARENT 2011-05-19 13:22:31 +02:00
Lennart Poettering
6ea832a207 exec: hangup/reset/deallocate VTs in gettys
Explicitly disconnect all clients from a VT when a getty starts/finishes
(requires TIOCVHANGUP, available in 2.6.29).

Explicitly deallocate getty VTs in order to flush scrollback buffer.

Explicitly reset terminals to a defined state before spawning getty.
2011-05-18 01:07:36 +02:00
Lennart Poettering
916abb21d0 socket: add POSIX mqueue support 2011-05-17 19:37:03 +02:00
Lennart Poettering
7a6000a682 unit: make ignoring in snapshots a per unit property, instead of a per unit type property 2011-05-05 10:58:55 +02:00
Tollef Fog Heen
ec43fbc68c man: typo in sd_daemon reference 2011-04-29 14:47:31 +02:00
Lennart Poettering
ecb963cc40 def: lower default timeout to 90s
Almost everybody found 3min too long, so lower it again
2011-04-27 22:30:50 +02:00
Kay Sievers
772f83719e tmpfiles.d: switch to stacked config dirs in /lib, /etc, /run 2011-04-25 21:38:21 +02:00
Kay Sievers
db1413d738 sysctl.d, binfmt.d, modules-load.d: switch to stacked config dirs in /lib, /etc, /run 2011-04-25 20:41:47 +02:00
A. Costa
8f28cbcdfe man: Spelling fixes 2011-04-23 21:56:05 +02:00
Lennart Poettering
811ad2b3a4 man: minor fixes 2011-04-21 01:18:23 +02:00
Lennart Poettering
b0a3f2bc09 socket: support ListeSpecial= sockets 2011-04-20 05:02:23 +02:00
Lennart Poettering
05677bb780 man: fix specification of default timeouts 2011-04-20 00:51:23 +02:00
Lennart Poettering
63415a2d2b man: runlevel 5 is usually more comprehensive, so use it instead of 3 to detect whether a sysv service is enabled 2011-04-16 02:42:23 +02:00
Lennart Poettering
7640a5de1b hostnamed: introduce systemd-hostnamed
http://www.freedesktop.org/wiki/Software/systemd/hostnamed
2011-04-16 02:03:35 +02:00
Lennart Poettering
7f434cf4c9 ask-password: use default timeout 2011-04-16 02:03:34 +02:00
Lennart Poettering
c8f4d7642b manager: introduce IgnoreOnIsolate flag so that we can keep systemd-logger around when isolating 2011-04-16 02:03:34 +02:00
Lennart Poettering
7a22745ac3 socket: support netlink sockets 2011-04-10 03:27:00 +02:00
Lennart Poettering
0e456f9781 path: optionally, create watched directories in .path units 2011-04-10 01:30:14 +02:00
Lennart Poettering
f3bc7fdc7b man: add man page for ask-password 2011-04-08 17:57:17 +02:00
Lennart Poettering
222ae6a8d7 unit: introduce OnFailureIsolate= 2011-04-07 04:11:31 +02:00
Lennart Poettering
4466194c43 units: rename rtc-set.target to time-sync.target and pull it in by hwclock-load.service
On request of Miroslav Lichvar, rename rtc-set.target to
time-sync.target since usually the RTC chip isn't involved at all in NTP
syncs.

Also, pull it in by hwclock-load.service.
2011-04-06 19:18:17 +02:00
Lennart Poettering
100fd5676c man: fix description of systemctl reload-or-try-restart 2011-04-05 23:41:27 +02:00
Lennart Poettering
3d57c6ab80 exec: support unlimited resources 2011-04-04 18:15:13 +02:00
Lennart Poettering
c91faef3b3 man: document /etc/sysctl.d/ 2011-04-04 03:48:09 +02:00
Lennart Poettering
151b190e79 binfmt: add binfmt tool to set up binfmt_misc at boot 2011-04-04 03:36:42 +02:00
Lennart Poettering
d24e1b4806 condition: use 'selinux' rather than 'SELinux' as preferred spelling
The virtualization condition and others use lowercase identifiers, so
for the sake of keeping things least surprising, use lowercase
identifiers here too.
2011-04-03 22:18:39 +02:00
Michal Schmidt
69528c31c6 man: document ConditionSecurity 2011-04-03 22:16:50 +02:00
Lennart Poettering
bb29785e0d general: replace a few uses of /var/run by /run 2011-04-01 15:25:46 +02:00
Lennart Poettering
c61e77d3ea man: document ConditionPathIsDirectory= 2011-04-01 00:42:57 +02:00
Lennart Poettering
7602c46fe6 man: uinput.ko is a bad example 2011-03-31 18:19:59 +02:00
Lennart Poettering
cd25cce98f exec: drop process group kill mode since it has little use and confuses the user 2011-03-29 23:31:38 +02:00
Lennart Poettering
1ead1cad4b man: really fix all LC_MESSAGE to LC_MESSAGES
https://bugs.freedesktop.org/show_bug.cgi?id=35534
2011-03-29 12:12:31 +02:00
Lennart Poettering
2d87855ae8 man: fix references to systemd.unit= on the kernel cmdline
https://bugs.freedesktop.org/show_bug.cgi?id=35720
2011-03-28 23:39:18 +02:00
Kay Sievers
2b583ce657 use /run instead of /dev/.run
Instead of the /dev/.run trick we have currently implemented, we decided
to move the early-boot runtime dir to /run.

An existing /var/run directory is bind-mounted to /run. If /var/run is
already a symlink, no action is taken.

An existing /var/lock directory is bind-mounted to /run/lock.
If /var/lock is already a symlink, no action is taken.

To implement the directory vs. symlink logic, we have a:
  ConditionPathIsDirectory=
now, which is used in the mount units.

Skipped mount unit in case of symlink:
  $ systemctl status var-run.mount
  var-run.mount - Runtime Directory
    Loaded: loaded (/lib/systemd/system/var-run.mount)
    Active: inactive (dead)
            start condition failed at Fri, 25 Mar 2011 04:51:41 +0100; 6min ago
     Where: /var/run
      What: /run
    CGroup: name=systemd:/system/var-run.mount

The systemd rpm needs to make sure to add something like:
  %pre
  mkdir -p -m0755 /run >/dev/null 2>&1 || :
or it needs to be added to filesystem.rpm.

Udev -git already uses /run if that exists, and is writable at bootup.
Otherwise it falls back to the current /dev/.udev.

Dracut and plymouth need to be adopted to switch from /dev/.run to run
too.

Cheers,
Kay
2011-03-28 23:00:00 +02:00
Lennart Poettering
f9276855a1 man: explain a couple of default dependencies 2011-03-28 21:36:13 +02:00
Andrey Borzenkov
2fccaefffe man: no keep-root in pam_systemd anymore 2011-03-22 20:31:10 +03:00
Lennart Poettering
28cf382a0a man: document pidns containers 2011-03-18 04:53:31 +01:00
Lennart Poettering
e2130f189a units: deemphesize Names= settings, and explain why nobody whould use them 2011-03-18 04:53:31 +01:00
Lennart Poettering
f1dd0c3f9b syslog: rework syslog detection so that we need no compile-time option what the name of the syslog implementation is 2011-03-18 04:53:31 +01:00
Lennart Poettering
0732ec002e man: document .requires/ directories 2011-03-18 04:53:12 +01:00
Lennart Poettering
177b3ffedb special: get rid of dbus.target 2011-03-18 04:53:12 +01:00
Lennart Poettering
260abb780a exec: properly apply capability bounding set, add inverted bounding sets 2011-03-18 04:52:45 +01:00
Andrey Borzenkov
f1f8cfd0a2 man: fix systemctl try-restart description
It is no more error when service is not running.
2011-03-16 03:54:59 +01:00
Lennart Poettering
8f7a3c1402 man: document systemd-nspawn 2011-03-15 20:51:59 +01:00
Lennart Poettering
91b22f21f3 core: move abstract namespace sockets to /dev/.run
Now that we have /dev/.run there's no need to use abstract namespace
sockets. So, let's move things to /dev/.run, to make things more easily
discoverable and improve compat with chroot() and fs namespacing.
2011-03-14 03:12:25 +01:00
Lennart Poettering
a8f11321c2 systemctl: support remote and privileged systemctl access via SSH and pkexec
This adds support for executing systemctl operations remotely or as
privileged user while still running systemctl itself unprivileged and
locally.

This currently requires a D-Bus patch to work properly.

https://bugs.freedesktop.org/show_bug.cgi?id=35230
2011-03-12 01:07:17 +01:00
Andrey Borzenkov
756a8d17bb man: trivial typo in systemd(1) 2011-03-10 20:48:12 +01:00
Lennart Poettering
b925e72633 dev: use /dev/.run/systemd as runtime directory, instead of /dev/.systemd 2011-03-09 22:45:47 +01:00
Lennart Poettering
267632f0ab unit: distuingish mandatory from triggering conditions 2011-03-08 03:04:47 +01:00
Lennart Poettering
d7ccca2e3f main: introduce /etc/machine-id
This is supposed to play the same roles /var/lib/dbus/machine-id,
however fixes a couple of problems:

- It is available during early boot since it is stored in /etc

- Removes the ID from the D-Bus context and moves it into a system
  context, thus hopefully lowering hesitation by people to use it.

- It is generated at installation time. If the file is empty at boot
  time it will be mounted over with a randomly generated ID, which is
  not saved to disk. This is useful to support state-less machines with
  no transient or writable /etc configuration.
2011-03-04 21:53:19 +01:00
Lennart Poettering
f1779fd27b man: document changed EnvironmentFile= behaviour 2011-03-04 14:13:47 +01:00
Lennart Poettering
6221fcdf2e man: fix chkconfig syntax to use --level 3 2011-03-01 22:18:49 +01:00
Lennart Poettering
039655a40c unit: introduce ConditionVirtualization= 2011-02-21 22:07:55 +01:00
Mike Kazantsev
48c4fad950 man: fixed typo in SyslogIdentifier= 2011-02-19 14:32:44 +01:00
Lennart Poettering
d12d0e647a man: don't do more reloads than necessary in spec files 2011-02-18 02:25:18 +01:00
Lennart Poettering
e67c3609b1 systemctl: introduce --ignore-dependencies 2011-02-16 21:59:31 +01:00
Lennart Poettering
30732560c4 systemctl: introduce --failed to show only failed services 2011-02-16 20:34:59 +01:00
Lennart Poettering
934da03599 service: change default std output to inherit 2011-02-15 12:28:01 +01:00
Lennart Poettering
0a494f1ff3 exec: introduce global defaults for the standard output of services 2011-02-15 11:52:29 +01:00
Lennart Poettering
28dbc1e80b execute: optionally forward program output to /dev/console in addition to syslog/kmsg 2011-02-15 01:27:53 +01:00
Lennart Poettering
3185a36b05 service: make main pid guessing optional, and reread pid file after reloads 2011-02-13 18:51:30 +01:00
Lennart Poettering
e9fbc77c8f pam: introduce whitelist and blacklist user list feature
This is useful to exclude root from the session logout killings or to
limit killing to the selinux guest users.
2011-02-13 18:21:18 +01:00
Lennart Poettering
522d4a495a systemd: document systemd-tmpfiles 2011-02-13 15:08:15 +01:00
Lennart Poettering
b8bb3e8f34 tmpfiles: support globs 2011-02-12 09:31:25 +01:00
Lennart Poettering
70e911eaeb man: document SYSTEMD_READY= 2011-02-09 15:02:03 +01:00