Lennart Poettering
934277fe6a
core: add a property that shows the current memory usage of a unit
...
This is exposed the memory.usage_in_bytes cgroup property on the bus,
and makes "systemctl status" show it in its default output.
2015-01-23 03:00:15 +01:00
Zbigniew Jędrzejewski-Szmek
da41abc52c
cgroup-show: remove duplicated check
...
After 3637713a20
it is not necessary anymore.
2015-01-22 20:03:58 -05:00
Lennart Poettering
9ba762cdd7
update TODO
2015-01-23 01:44:14 +01:00
Lennart Poettering
c0534580ac
nspawn: when mounting the cgroup hierarchies, use the exact same mount options for the superblock as the host
...
Otherwise we'll generate kernel runtime warnings about non-matching
mount options.
2015-01-23 01:43:16 +01:00
Lennart Poettering
bbb99c30d0
nspawn: mount /tmp in the container, don't leave this to the container's init
...
We really want /tmp to be properly mounted, especially in containers
that lack CAP_SYS_ADMIN or that are not fully booted up and only get a
shell, hence let's do so in nspawn already.
2015-01-23 01:27:06 +01:00
Alban Crequy
05e7da5afa
nspawn: allow bind-mounting char and block files
2015-01-23 01:22:55 +01:00
Lennart Poettering
24fdceabbf
update TODO
2015-01-23 01:20:16 +01:00
Lennart Poettering
7079cfeffb
importd: when listing transfers, show progress percentage
...
With this change the pull protocol implementation processes will pass
progress data to importd which then passes this information on via the
bus. We use sd_notify() as generic transport for this communication,
making importd listen to them, while matching the incoming messages to
the right transfer.
2015-01-23 01:17:55 +01:00
Lennart Poettering
a92ccc5ba2
importd: fix bus policy
2015-01-23 01:17:55 +01:00
Lennart Poettering
56e6c2abb8
machinectl: fix handling of --verify= argument for dkr downloads
2015-01-23 01:17:55 +01:00
Lennart Poettering
6cd37a5e59
sd-bus: fix handling of double parameters in sd_bus_message_append()
...
We really need to use va_arg() with the right type here as uint64_t and
double might have the same size, but are passed differently as
arguments.
2015-01-23 01:17:55 +01:00
Lennart Poettering
e026c242af
import: we need CAP_DAC_OVERRIDE for untarring systems after all
2015-01-23 01:17:55 +01:00
Lennart Poettering
d875aa8ce1
core: zero size notify messages are OK
2015-01-23 01:17:55 +01:00
Ronny Chevalier
0c0cdb06c1
tests: use assert_se instead of assert
...
Otherwise they can be optimized away with -DNDEBUG
2015-01-22 23:10:56 +01:00
Sylvain Plantefève
714af6af8a
po: update french translation
2015-01-22 22:44:41 +01:00
Sylvain Plantefève
06d99637b8
catalog: update french translation
2015-01-22 22:44:41 +01:00
Ronny Chevalier
9b0374e954
man: fix typos
2015-01-22 22:44:07 +01:00
Tom Gundersen
5bac523593
sd-dhcp-client: use RFC4361-complient ClientID by default
...
In addition to the benefits listed in the RFC, this allows DHCP to work also in
case several interfaces share the same MAC address on the same link (IPVLAN).
Note that this will make the ClientID (so probably the assigned IP address)
change on upgrades. If it is desired to avoid that we would have to remember and
write back the ID (which the library supports, but networkd currently does not).
2015-01-22 21:29:42 +01:00
Tom Gundersen
4086286641
dhcp-identifier: create IAID even if no udev device can be found
...
This is useful for testing.
2015-01-22 21:29:42 +01:00
Susant Sahani
b16492f86f
networkd: Introduce ip6gre and ip6gretap
...
This patch introduces ipv6 gre and gretap.
test:
ip6gre.netdev:
[NetDev]
Name=ip6gretap
Kind=ip6gretap
[Tunnel]
Local=2a00:ffde:4567:edde::4987
Remote=2001:473:fece:cafe::5179
ip6gre.network:
[Match]
Name=eno16777736
[Network]
Tunnel=ip6gretap
ip link
6: ip6gre@eno16777736: <POINTOPOINT,NOARP> mtu 1448 qdisc noop state
DOWN mode DEFAULT group default
link/gre6 2a:00:ff🇩🇪 45:67:ed🇩🇪 00:00:00:00:00:00:49:87 peer
20:01:04:73:fe:ce:ca:fe:00:00:00:00:00:00:51:79
2015-01-22 21:29:42 +01:00
Susant Sahani
855ee1a1d2
networkd: Introduce IP6 tunnel
...
This patch enables networkd to create IP6 tunnels
example conf:
ipip6.netdev:
[NetDev]
Name=ipip6-tunnel
Kind=ip6tnl
[Tunnel]
Mode=ip4ipv6
Local=2a00:ffde:4567:edde::4987
Remote=2001:473:fece:cafe::5179
ipip6.network
[Match]
Name=wlan0
[Network]
Tunnel=ipip6-tunnel
23: ipip6-tunnel@wlan0: <POINTOPOINT,NOARP> mtu 1452 qdisc noop state
DOWN mode DEFAULT group default
link/tunnel6 2a00:ffde:4567:edde::4987 peer 2001:473:fece:cafe::5179
2015-01-22 21:29:42 +01:00
Susant Sahani
1af2536acf
networkd: introduce gretap
...
This patch introdeces gretap to networkd
2015-01-22 21:29:41 +01:00
Lennart Poettering
34109a531f
update TODO
2015-01-22 18:55:30 +01:00
Lennart Poettering
e57565dd5b
importd: run daemon at minimal capabilities
2015-01-22 18:55:08 +01:00
Lennart Poettering
3637713a20
cgroup-show: don't hit assert, when the extra pids array is empty
2015-01-22 18:54:48 +01:00
Lennart Poettering
57d8a552af
importd: fix path to download binary
2015-01-22 18:38:51 +01:00
Lennart Poettering
7315edd36a
import: lock tar into its own private network namespace
...
That way it cannot get access to the network
2015-01-22 18:19:58 +01:00
Lennart Poettering
2c140ded48
import: drop all capabilities when invoking tar
2015-01-22 18:12:31 +01:00
Lennart Poettering
a8683176ee
update TODO
2015-01-22 17:50:50 +01:00
Lennart Poettering
b9a5f8588f
import: only define the _to_string() enum mapping function, thus making gcc shut up
2015-01-22 17:50:50 +01:00
Lennart Poettering
aa9bd4992f
import: now that the worker binary is called "systemd-pull" we can shorten the verbs
...
Atfer all "systemd-pull pull-tar" is unnecessarily redundant, over
"systemd-pull tar"...
2015-01-22 17:50:50 +01:00
Lennart Poettering
ff828763c4
importd: try to minimize confusion by renaming "systemd-import" binary to "systemd-pull"
...
This way "systemd-importd" is the daemon that uses "systemd-pull" as
backend worker.
2015-01-22 17:50:50 +01:00
Lennart Poettering
6adf7b5e46
machinectl: when downloading an image, clarify that C-c will not cancel the download, but continue it in the background
2015-01-22 17:50:50 +01:00
Lennart Poettering
813c65c34b
machinectl: minor simplification
2015-01-22 17:50:50 +01:00
Lennart Poettering
6e18cc9fa0
machinectl: parse verify setting client-side
2015-01-22 17:50:50 +01:00
Lennart Poettering
09d46cfd41
importd: minor log improvements
2015-01-22 17:50:50 +01:00
Lennart Poettering
1c49d1ba85
import: make the user verficiation keyring override the vendor keyring, instead of extending it
...
This way the user has the ability to remove keys from the
vendor-supplied keyring if he intends so.
2015-01-22 17:50:50 +01:00
Peter Hutterer
8dbce34b03
logind: fix sd_eviocrevoke ioctl call
...
If the third argument is non-null, the kernel will always error out with
EINVAL and devices won't get revoked.
Reported-by: Benjamin Tissoires <benjamin.tissoires@gmail.com>
Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
2015-01-22 10:53:29 -05:00
Lennart Poettering
b5b38b41c3
machinectl: various minor updates to the --help text
2015-01-22 15:14:36 +01:00
Lennart Poettering
7f444afa1b
import: rename --verify=sum to --verify=checksum
...
This is how we call it internally, and also a bit more descriptive.
2015-01-22 15:14:36 +01:00
Lennart Poettering
e0ea94c1e2
man: document new download magic
2015-01-22 15:14:36 +01:00
Piotr Drąg
838d5f0298
import: add org.freedesktop.import1.policy.in to POTFILES.in
...
https://bugs.freedesktop.org/show_bug.cgi?id=88705
2015-01-22 09:02:33 -05:00
Mindaugas Baranauskas
534644b7be
kbd-model-map: add more mappings for Slovak, Lithuanian, and Khmer
...
https://bugs.freedesktop.org/show_bug.cgi?id=88545
2015-01-22 01:14:54 -05:00
Marko Myllynen
25b47f96d9
Use eurlatgr as the example console font
...
See https://fedoraproject.org/wiki/Changes/NewDefaultConsoleFont
https://bugzilla.redhat.com/show_bug.cgi?id=1182529
2015-01-22 01:14:53 -05:00
Cristian Rodríguez
0814f65ec6
sysv-generator: only allow regular files in enumerate_sysv()
...
Otherwise, if the directory contains other directories we fail
at fopen in load_sysv() with EISDIR.
2015-01-22 01:14:53 -05:00
Lucas De Marchi
3a5afdec90
build: export symbols to integrate mainloops
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
614cc34f3a
TODO: tmpfiles
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
dd4105b0a9
shared/acl-util: add mask only when needed, always add base ACLs
...
For ACLs to be valid, a set of entries for user, group, and other
must be always present. Always add those entries.
While at it, only add the mask ACL if it is actually required, i.e.
when at least on ACL for non-owner group or user exists.
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
a48a62a1af
tmpfiles: use ACL magic on journal directories
2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek
50d9e46dbb
tmpfiles: implement augmenting of existing ACLs
...
This is much more useful in practice (equivalent to setfacl -m).
2015-01-22 01:14:53 -05:00