summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* pam_systemd: Forward systemd.runtime_max_sec setting to session scopePhilip Withnall2019-10-282-3/+36
| | | | | | | | | | | Allow earlier PAM modules to set `systemd.runtime_max_sec`. If they do, parse it and set it as the `RuntimeMaxUSec=` property of the session scope, to limit the maximum lifetime of the session. This could be useful for time-limiting login sessions, for example. Signed-off-by: Philip Withnall <withnall@endlessm.com> Fixes: #12035
* scope: Support RuntimeMaxSec= directive in scope unitsPhilip Withnall2019-10-289-2/+65
| | | | | | | | | | | | Just as `RuntimeMaxSec=` is supported for service units, add support for it to scope units. This will gracefully kill a scope after the timeout expires from the moment the scope enters the running state. This could be used for time-limited login sessions, for example. Signed-off-by: Philip Withnall <withnall@endlessm.com> Fixes: #12035
* scope: Refactor timer handling on coldplugPhilip Withnall2019-07-291-5/+17
| | | | | | | Factor it out into a helper function which is a bit easier to expand in future. This introduces no functional changes. Signed-off-by: Philip Withnall <withnall@endlessm.com>
* shared: Factor out bus_append_scope_property() for scopesPhilip Withnall2019-07-291-4/+12
| | | | | | | This introduces no functional changes, but will make some upcoming changes a little clearer. Signed-off-by: Philip Withnall <withnall@endlessm.com>
* dbus-scope: Factor out common UNIT(s) castPhilip Withnall2019-07-291-4/+5
| | | | | | This introduces no functional changes. Signed-off-by: Philip Withnall <withnall@endlessm.com>
* systemd-sleep: use swaps in priority orderZach Smith2019-07-293-33/+67
| | | | | | | | In situations where hibernation is requested but resume= and resume_offset= kernel parameters are not configured, systemd will attempt to locate a suitable swap location by inspecting /proc/swaps. This change will use the first suitable swap with the highest configured priority.
* more 243 newsLennart Poettering2019-07-291-20/+51
|
* man: document the kernel command line options to use when logging to kmsgLennart Poettering2019-07-291-13/+17
| | | | | | Prompted by: https://lists.freedesktop.org/archives/systemd-devel/2019-July/043149.html
* news corrections and improvements (#13200)Clinton Roy2019-07-291-35/+36
| | | | | | | | * missing whitespace. * NEWS: some small fixes (?) and improvements (???). * a number of small corrections and (hopefully) improvements
* Merge pull request #13203 from yuwata/update-ja-poZbigniew Jędrzejewski-Szmek2019-07-292-8/+104
|\ | | | | po: include network1.policy and update ja.po
| * po: update ja.poYu Watanabe2019-07-281-8/+103
| |
| * po: include network1.policy in the list for generating .pot fileYu Watanabe2019-07-281-0/+1
| |
* | catalog: update Polish translationPiotr Drąg2019-07-291-0/+9
| |
* | Update Touchpad for g6Network Silence2019-07-291-5/+5
|/
* Merge pull request #13120 from keszybz/journal-min-useZbigniew Jędrzejewski-Szmek2019-07-271-53/+55
|\ | | | | Increase journald min_use value
| * journald: lower keep_free to 5% and raise min_use to 2%Zbigniew Jędrzejewski-Szmek2019-07-261-49/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://bugzilla.redhat.com/show_bug.cgi?id=1715699 > /dev/mapper/live-rw 6.4G 5.7G 648M 91% / > systemd-journald[905]: Fixed min_use=1.0M max_use=648.7M max_size=81.0M min_size=512.0K keep_free=973.1M n_max_files=100 When journald is started, we pick keep_free as 15% of the disk size. When the fs is almost filled, we will only keep one journal file around and rotate very often (because min_size is very small). Let's set min use to something reasonable, so that we get more useful logs that will cover at least the full boot. Some cases considered in the PR: > /dev/mapper/live-rw 6.4G 5.7G 648M 91% / keep_free→MIN(327,100)→100 MB. min_use→16MB. effective range: 16 MB – 548 MB > /dev/mapper/fedora_krowka-root 78G 69G 5.7G 93% / keep_free → MIN(4GB, 100MB)→100MB min_use→16MB effective range: 16 MB – 5.6 GB (but then there's the max_use limit, which cuts the range down) > 4TB, 4GB free keep_free → MIN(209715, 100) → 100 MB min_use→16MB effective range: 16 MB – 4.9 GB (also effectively limited by max_use) Also replace unneeded width suffixes with spaces, I think this is more readable, and drop DEFAULT_ prefixes in cases where this setting is simply a bound, and cannot be overridden by user config, hence is not a default.
| * journal: emit debug log about settings only once (or when changed)Zbigniew Jędrzejewski-Szmek2019-07-191-4/+17
| | | | | | | | | | | | | | | | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902795 https://bugzilla.redhat.com/show_bug.cgi?id=1715699 report "thousands" of those messages. I think this occurs when journald rotates files very quickly. Nevertheless, logging this over and over is not useful, let's do it just once.
* | errno-util: return const string from strerror_safe()Thomas Haller2019-07-261-1/+1
| | | | | | | | | | | | | | | | | | C's strerror() function does not return a "const char *" pointer for the string. That has historic reasons and C99 even comments that "[t]he array pointed to shall not be modified by the program". Make the strerror_safe() wrapper correct this and be more strict in this regard.
* | Merge pull request #13194 from keszybz/chase-symlinks-testingLennart Poettering2019-07-264-17/+129
|\ \ | | | | | | Chase symlinks testing
| * | fs-util: CHASE_NOFOLLOW is not limited to CHASE_OPENZbigniew Jędrzejewski-Szmek2019-07-261-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | $ build/test-chase-symlinks /etc/os-release /etc/os-release → /usr/lib/os-release $ build/test-chase-symlinks --nofollow /etc/os-release /etc/../etc/os-release /etc/../etc/./././os-release /etc/os-release → /etc/os-release /etc/../etc/os-release → /etc/os-release /etc/../etc/./././os-release → /etc/os-release
| * | test-chase-symlinks: manual test to call chase_symlinks()Zbigniew Jędrzejewski-Szmek2019-07-262-0/+110
| | | | | | | | | | | | | | | v2: - print --help to stdout, use size_t
| * | fs-util: adjust punctuation in commentsZbigniew Jędrzejewski-Szmek2019-07-192-17/+18
| | |
* | | Merge pull request #13195 from keszybz/minor-rewordingsLennart Poettering2019-07-262-5/+7
|\ \ \ | | | | | | | | Minor rewordings
| * | | bootctl: log message tweaksZbigniew Jędrzejewski-Szmek2019-07-261-2/+2
| | | | | | | | | | | | | | | | Follow-up for e44c3229f22459b189c1e79cb01fdb156672eb93.
| * | | man: reword description of "-" for sysctl.dZbigniew Jędrzejewski-Szmek2019-07-261-3/+5
|/ / / | | | | | | | | | Follow-up for e08be64937.
* | | Merge pull request #13191 from poettering/sysctl-no-failZbigniew Jędrzejewski-Szmek2019-07-264-38/+107
|\ \ \ | | | | | | | | allow sysctl assignments to fail
| * | | NEWS: mention the new sysctl.d/ - prefixLennart Poettering2019-07-261-0/+3
| | | |
| * | | sysctl: prefix ping port range setting with a dashLennart Poettering2019-07-261-1/+1
| | | | | | | | | | | | | | | | Fixes: #13177
| * | | Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers""Lennart Poettering2019-07-262-0/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit be74f51605b4c7cb74fec3a50cd13b67598a8ac1. Let's add this again. With the new sysctl "-" thing we can make this work.
| * | | man: document the new sysctl.d/ - prefixLennart Poettering2019-07-261-0/+4
| | | |
| * | | sysctl: if options are prefixed with "-" ignore write errorsLennart Poettering2019-07-261-34/+80
| | | |
| * | | sysctl: reset 'r' only where neededLennart Poettering2019-07-261-2/+2
| | | |
| * | | sysctl: switch to log_syntax()Lennart Poettering2019-07-261-2/+1
| | | | | | | | | | | | | | | | | | | | With @keszybz' recent work this will give us clickable links in the journalctl output.
* | | | Merge pull request #13137 from poettering/efi-randomZbigniew Jędrzejewski-Szmek2019-07-2633-214/+2239
|\ \ \ \ | | | | | | | | | | beef up random seed logic, add boot loader entropy privisioning, improve docs about it
| * | | | update TODOLennart Poettering2019-07-251-1/+8
| | | | |
| * | | | TODO: remove apparently fixed issue from TODOLennart Poettering2019-07-251-5/+0
| | | | |
| * | | | docs: add longer document about systemd and random number seedsLennart Poettering2019-07-255-3/+433
| | | | |
| * | | | man: extend on the --print-boot-path description a bitLennart Poettering2019-07-251-2/+11
| | | | |
| * | | | bootctl: add is-installed verbLennart Poettering2019-07-252-9/+58
| | | | | | | | | | | | | | | | | | | | Fixes: #9428
| * | | | man: document the systemd-random-seed reworkLennart Poettering2019-07-256-31/+243
| | | | |
| * | | | docs: document new random seed EFI vars as part of the boot loader interfaceLennart Poettering2019-07-251-1/+25
| | | | |
| * | | | random-seed: rework systemd-random-seed.service substantiallyLennart Poettering2019-07-252-35/+197
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes two major changes to the way systemd-random-seed operates: 1. We now optionally credit entropy if this is configured (via an env var). Previously we never would do that, with this change we still don't by default, but it's possible to enable this if people acknowledge that they shouldn't replicate an image with a contained random seed to multiple systems. Note that in this patch crediting entropy is a boolean thing (unlike in previous attempts such as #1062), where only a relative amount of bits was credited. The simpler scheme implemented here should be OK though as the random seeds saved to disk are now written only with data from the kernel's entropy pool retrieved after the pool is fully initialized. Specifically: 2. This makes systemd-random-seed.service a synchronization point for kernel entropy pool initialization. It was already used like this, for example by systemd-cryptsetup-generator's /dev/urandom passphrase handling, with this change it explicitly operates like that (at least systems which provide getrandom(), where we can support this). This means services that rely on an initialized random pool should now place After=systemd-random-seed.service and everything should be fine. Note that with this change sysinit.target (and thus early boot) is NOT systematically delayed until the entropy pool is initialized, i.e. regular services need to add explicit ordering deps on this service if they require an initialized random pool. Fixes: #4271 Replaces: #10621 #4513
| * | | | random-seed: drop falling back to O_WRONLY if O_RDWR on /dev/urandom doesn't ↵Lennart Poettering2019-07-251-7/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | work There's no reason why writing should work if reading and writing doesn't. Let's simplify this hence. /dev/urandom is generally an r/w device, and everything else would be a serious system misconfiguration.
| * | | | random-seed: reduce scope of variableLennart Poettering2019-07-251-2/+2
| | | | |
| * | | | units: automatically initialize the system token if that makes senseLennart Poettering2019-07-252-0/+36
| | | | |
| * | | | bootctl: show random seed stateLennart Poettering2019-07-251-0/+16
| | | | |
| * | | | bootctl: add new verb for initializing a random seed in the ESPLennart Poettering2019-07-251-50/+253
| | | | |
| * | | | random-seed: move pool size determination to random-util.[ch]Lennart Poettering2019-07-253-18/+35
| | | | | | | | | | | | | | | | | | | | That way we can reuse it elsewhere.
| * | | | core: take random seed from boot loader and credit it to kernel entropy poolLennart Poettering2019-07-254-1/+121
| | | | |
| * | | | sd-boot: read random seed from ESP and pass it to OSLennart Poettering2019-07-254-2/+397
| | | | |
View Lorry Controller Status