summaryrefslogtreecommitdiff
path: root/man
Commit message (Collapse)AuthorAgeFilesLines
* analyze: merge {get,set}-log-{level,target} to log-{level,target} (#8020)Yu Watanabe2018-01-271-31/+16
| | | | Also, service-watchdogs now shows current watchdog state when no optional argument is provided.
* Merge pull request #7973 from mvo5/sysusers-uid-gidYu Watanabe2018-01-271-1/+4
|\ | | | | sysusers: allow uid:gid in sysusers.conf files
| * sysusers: ensure GID in uid:gid syntax existsMichael Vogt2018-01-251-1/+1
| | | | | | | | | | | | Ensure that the GID already exists or is created when the new "uid:gid" syntax is used. This ensures the behaviour is always predictable.
| * sysusers: allow uid:gid in sysusers.conf filesMichael Vogt2018-01-251-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR allows to write sysuser.conf lines like: ``` u games 5:60 - ``` This will create an a "games" user with uid 5 and games group with gid 60. This is arguable ugly, however it is required to represent certain configurations like the default passwd file on Debian and Ubuntu. When the ":" syntax is used and there is a group with the given gid already then no new group is created. This allows writing the following: ``` g unrelated 60 u games 5:60 - ``` which will create a "games" user with the uid 5 and the primary gid 60. No group games is created here (might be useful for [1]). [1] https://pagure.io/packaging-committee/issue/442
* | Revert "man: mention that systemctl is-active or is-failed do not load units"Lennart Poettering2018-01-251-11/+0
|/ | | | This reverts commit c7612b20052d9151f60a96623b8743cbac88390d.
* tmpfiles: make "f" lines behaviour match what the documentation saysLennart Poettering2018-01-241-18/+10
| | | | | | | | | | | | | | | | | | | | CHANGE OF BEHAVIOUR — with this commit "f" line's behaviour is altered to match what the documentation says: if an "argument" string is specified it is written to the file only when the file didn't exist before. Previously, it would be appended to the file each time systemd-tmpfiles was invoked — which is not a particularly useful behaviour as the tool is not idempotent then and the indicated files grow without bounds each time the tool is invoked. I did some spelunking whether this change in behaviour would break things, but afaics nothing relies on the previous O_APPEND behaviour of this line type, hence I think it's relatively safe to make "f" lines work the way the docs say, rather than adding a new modifier for it or so. Triggered by: https://lists.freedesktop.org/archives/systemd-devel/2018-January/040171.html
* tmpfiles: create parent directories if they are missing for more line typesLennart Poettering2018-01-231-0/+7
| | | | | | | | | | | | | | | Currently, we create leading directories implicitly for all lines that create directory or directory-like nodes. With this, we also do the same for a number of other lines: f/F, C, p, L, c/b (that is regular files, pipes, symlinks, device nodes as well as file trees we copy). The leading directories are created with te default access mode of 0755. If something else is desired, users should simply declare appropriate "d" lines. Fixes: #7853
* man: it appears the description of async signal safety has its own man page nowLennart Poettering2018-01-233-10/+10
| | | | Let's refer to the new page.
* man: document explicitly that sd_journal_stream_fd() never shares fdsLennart Poettering2018-01-231-0/+4
| | | | | Also, clarify that O_NONBLOCK is turned off and that the fd is only half-open.
* systemd-analyze: add service-watchdogs verbJan Klötzke2018-01-221-2/+16
| | | | | | New debug verb that enables or disables the service runtime watchdogs and emergency actions during runtime. This is the systemd-analyze version of the systemd.service_watchdogs command line option.
* pid1: add option to disable service watchdogsJan Klötzke2018-01-222-0/+23
| | | | | Add a "systemd.service_watchdogs=" option to the command line which disables all service runtime watchdogs and emergency actions.
* networkd: DHCPv6 client allow to configure Rapid Commit (#6930)Susant Sahani2018-01-221-0/+14
| | | | | | | | | | | The DHCPv6 client can obtain configuration parameters from a DHCPv6 server through a rapid two-message exchange solicit and reply). When the rapid commit option is enabled by both the DHCPv6 client and the DHCPv6 server, the two-message exchange is used, rather than the default four-method exchange (solicit, advertise, request, and reply). The two-message exchange provides faster client configuration and is beneficial in environments in which networks are under a heavy load. Closes #5845
* man: document that sd_j_stream_fd is signal safe (#7942)Zbigniew Jędrzejewski-Szmek2018-01-211-0/+8
| | | Fixes #7912.
* man: document signal unsafeness of journal functionsZbigniew Jędrzejewski-Szmek2018-01-201-0/+14
| | | | Fixes #7912.
* man: sd_journal_stream_fd: no, fds are not shared (#7926)Alan Jenkins2018-01-201-2/+1
| | | | | | | | | | | | sd_journal_stream_fd() does not return the same file descriptor across different calls. It can't possibly do so, because the file descriptor is created using certain parameters passed by the caller. Also the implementation clearly isn't doing this, it's just connecting to a unix socket. It opens exactly one file descriptor, and does not close it unless there is a write failure. Nothing like "temporarily multiple file descriptors may be open".
* man: fix typo (#7937)Yu Watanabe2018-01-201-1/+1
| | | Reported by Дилян Палаузов (https://github.com/dilyanpalauzov) in #7870.
* Merge pull request #7934 from keszybz/man-improvementsYu Watanabe2018-01-207-50/+60
|\ | | | | Man page improvements
| * man: clarify that Requires stop propagation only applies to explit requestsZbigniew Jędrzejewski-Szmek2018-01-201-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Follow-up for e79eabdb1becc93cf4afc909aa18dc40c931eab5. There was an apparent contradiction: man/systemd.unit says for Requires=: Besides, with or without specifying After=, this unit will be deactivated if one of the other units get deactivated. Also, some unit types may deactivate on their own (for example, a service process may decide to exit cleanly, or a device may be unplugged by the user), which is not propagated to units having a Requires= dependency. Fixes #7870.
| * man: alphabetize and move targets to proper sections in systemd.specialZbigniew Jędrzejewski-Szmek2018-01-201-34/+34
| |
| * man: fix example formatting in systemd.presetZbigniew Jędrzejewski-Szmek2018-01-202-12/+17
| | | | | | | | | | Repeating "example" everywhere was not useful, so remove that and improve the formatting a bit.
| * man: document default for WakeOnLanZbigniew Jędrzejewski-Szmek2018-01-201-0/+2
| |
| * man: add a note where coredump default values areZbigniew Jędrzejewski-Szmek2018-01-201-0/+3
| | | | | | | | | | I don't want to include all the default values in the man page because that's bound to get out of date…
| * man: fix _STREAM_ID, _LINE_BREAK descriptionsZbigniew Jędrzejewski-Szmek2018-01-201-2/+2
| | | | | | | | | | Pointed out by Дилян Палаузов (https://github.com/dilyanpalauzov). Fixes #7870.
* | networkd: add quickack option to route (#7896)Susant Sahani2018-01-201-0/+7
| | | | | | | | This patch adds quickack option to enable/disable TCP quick ack mode for per-route.
* | man: make clear that accessing network and mounting filesystems is not ↵Michal Sekletar2018-01-201-0/+3
|/ | | | | | | | | supported in udev rules (#7916) These restrictions are implied by systemd options used for systemd-udevd.service, i.e. MountFlags=slave and IPAddressDeny=any. However, there are users out there getting tripped by this, so let's make things clear in the man page so the actual restrictions we implement by default have better visibility.
* man: systemd-nspawn: fix list of default capabilities (#7925)Alan Jenkins2018-01-191-15/+10
| | | | | | * Sort them alphabetically. * Add CAP_MKNOD (commit 7f112f50fe added it). the list is now in sync with the one at the top of nspawn.c
* man: mention that systemctl is-active or is-failed do not load unitsYu Watanabe2018-01-161-0/+11
| | | | See the discussion in the issue #7875.
* man: remove duplicated lineYu Watanabe2018-01-161-1/+0
| | | | Follow-up for c46bc7e2162d774f55847c1a8cb9d49085cf89bb.
* man: fix broken kernel document links (#7892)John Lin2018-01-164-4/+4
|
* machined: use getent to get default shell for machinectl shell (#7684)Shawn Landden2018-01-161-2/+3
| | | Closes: https://github.com/systemd/systemd/issues/1395
* man: fix typoДилян Палаузов2018-01-161-1/+1
| | | | Closes #7866.
* man: logind: update referenceYu Watanabe2018-01-161-3/+4
| | | | Fixes #7858.
* Merge pull request #7582 from pfl/dhcp6_prefix_delegationLennart Poettering2018-01-151-2/+10
|\ | | | | DHCPv6 prefix delegation
| * man: Update man page regarding DHCPv6 Prefix DelegationPatrik Flykt2018-01-041-2/+10
| |
* | man: --this-boot is deprecated (#7880)Zbigniew Jędrzejewski-Szmek2018-01-151-1/+1
| | | | | | This removes the last public reference. Follow-up for #7844.
* | Merge pull request #7816 from poettering/chase-pidZbigniew Jędrzejewski-Szmek2018-01-152-10/+17
|\ \ | | | | | | Make MAINPID= and PIDFile= handling more restrictive (and other stuff)
| * | core: be stricter when handling PID files and MAINPID sd_notify() messagesLennart Poettering2018-01-111-10/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Let's be more restrictive when validating PID files and MAINPID= messages: don't accept PIDs that make no sense, and if the configuration source is not trusted, don't accept out-of-cgroup PIDs. A configuratin source is considered trusted when the PID file is owned by root, or the message was received from root. This should lock things down a bit, in case service authors write out PID files from unprivileged code or use NotifyAccess=all with unprivileged code. Note that doing so was always problematic, just now it's a bit less problematic. When we open the PID file we'll now use the CHASE_SAFE chase_symlinks() logic, to ensure that we won't follow an unpriviled-owned symlink to a privileged-owned file thinking this was a valid privileged PID file, even though it really isn't. Fixes: #6632
| * | notify: add new --uid= commandLennart Poettering2018-01-111-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | The new --uid= switch allows selecting the UID from which the notificaiton messages shall originate. This is primarily useful for testing purposes, but might have other uses.
* | | Merge pull request #7844 from yuwata/bash-completionZbigniew Jędrzejewski-Szmek2018-01-153-1/+3
|\ \ \ | |/ / |/| | update bash completions
| * | man: run: add missing optionYu Watanabe2018-01-101-0/+1
| | |
| * | man: nspawn: add missing optionYu Watanabe2018-01-101-0/+1
| | |
| * | man: machinectl: fix typoYu Watanabe2018-01-101-1/+1
| | |
* | | networkd: initcwn/initwnd use the right parsersSusant Sahani2018-01-111-7/+8
|/ / | | | | | | Closes #7765
* | Merge pull request #7191 from Mic92/systemdZbigniew Jędrzejewski-Szmek2018-01-092-0/+127
|\ \ | | | | | | | | | | | | The change in netdev.c done in the merge is necessary to avoid crashing in cleanup. This is a follow-up for f3c33b234d9f0256805722f02c7b4c4b59fd6de6.
| * | networkd: add support for wireguard interface typeJörg Thalheim2018-01-092-0/+127
| | | | | | | | | | | | More information may be found at wireguard.com.
* | | man: document all the new APIs we addedLennart Poettering2018-01-058-95/+908
| | |
* | | man: let's drop references to /var/run in public man pagesLennart Poettering2018-01-051-3/+2
| | | | | | | | | | | | /var/run is a legacy compatibility feature, let's avoid mentioning it.
* | | busctl: add a new --watch-bind switchLennart Poettering2018-01-051-0/+10
| |/ |/| | | | | This is useful for testing, and early-boot scripting.
* | man: drop --arch from debootstrap invocationZbigniew Jędrzejewski-Szmek2018-01-041-1/+1
| | | | | | | | | | | | Nowadays people use systemd on many different architectures, so we shouldn't presuppose that they are using amd64. debootstrap defaults to the native architecture and this should be good enough.
* | Merge pull request #7759 from yuwata/dbus-apiLennart Poettering2018-01-031-2/+0
|\ \ | |/ |/| DBus-API: add more options in transient units