17 Commits

Author	SHA1	Message	Date
Lennart Poettering	a0f4426d0f	tmpfiles: automatically provision /etc/issue.d/ + /etc/motd.d/ + /etc/hosts from credentials	2022-07-21 00:06:22 +02:00
Lennart Poettering	1d77721f30	tmpfiles: accept additional tmpfiles lines via credential	2022-07-20 23:53:22 +02:00
Lennart Poettering	3acb6edef3	sysusers: allow defining additional sysusers lines via credentials	2022-07-16 00:47:22 +09:00
Lennart Poettering	4f80cfca5e	pid1: add mechanism for conditionalizing units/network/netdev/link based on credentials passed in ... This is useful when provisioning systems via nspawn/qemu and running specific services only if specific data is passed into the system.	2022-07-15 10:53:45 +02:00
Lennart Poettering	8de7de462b	pid1: import creds from SMBIOS too, not just qemu's fw_cfg ... This imports credentials also via SMBIOS' "OEM vendor string" section, similar to the existing import logic from fw_cfg. Functionality-wise this is very similar to the existing fw_cfg logic, both of which are easily settable on the qemu command line. Pros and cons of each: SMBIOS OEM vendor strings: - pro: fast, because memory mapped - pro: somewhat VMM independent, at least in theory - pro: qemu upstream sees this as the future - pro: no additional kernel module needed - con: strings only, thus binary data is base64 encoded fw_cfg: - pro: has been supported for longer in qemu - pro: supports binary data - con: slow, because IO port based - con: only qemu - con: requires qemu_fw_cfg.ko kernel module - con: qemu upstream sees this as legacy	2022-07-15 08:31:34 +09:00
Lennart Poettering	39f0d1d2e7	sysctl: also process sysctl requests via the "sysctl.extra" credential	2022-07-14 18:02:58 +02:00
Lennart Poettering	93a1f57db8	test: test new credential features	2022-04-28 18:12:00 +02:00
Lennart Poettering	42a3f23cc1	test: also test nspawn system→service inheritance of creds	2022-04-22 11:32:47 +02:00
Lennart Poettering	6d085447fa	test: make sure that SetCredential=/LoadCredential fallback won#t regress	2022-04-22 11:32:47 +02:00
Albert Brox	3989bdc1ad	core: teach LoadCredential= to load from a directory	2022-01-08 13:17:51 +00:00
Zbigniew Jędrzejewski-Szmek	7b3cec95db	tests: add spdx headers to scripts and Makefiles	2021-10-18 09:04:45 +02:00
Frantisek Sumsal	1c3f490f23	test: shellcheck-ify test scripts	2021-09-30 12:12:00 +02:00
Lennart Poettering	c69620ef7f	test: extend credentials test to cover encrypted credentials	2021-07-08 09:31:14 +02:00
Frantisek Sumsal	084575ff91	test: use set -eux and set -o pipefail everywhere ... This should make the scripts more robust.	2021-04-13 12:08:01 +02:00
Zbigniew Jędrzejewski-Szmek	0ee994836c	TEST-*: use spacing before redirection operator, but not after ... << EOF → <<EOF > foo < bar → >foo <bar	2021-04-08 20:21:50 +02:00
Zbigniew Jędrzejewski-Szmek	4e20fe2795	TEST-*: make failure tests actually fail on failure ... Here the intent was actually correct, and the tests still pass when the check is made effective.	2021-04-08 20:21:50 +02:00
Lennart Poettering	30dd9f7391	test: add test suite for new credentials logic	2020-08-25 19:46:36 +02:00