summaryrefslogtreecommitdiff
path: root/man
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #11021 from ssahani/isatapYu Watanabe2018-12-051-0/+7
|\ | | | | networkd: Add support to configure ISATAP tunnel
| * networkd: Add support to configure ISATAP tunnelSusant Sahani2018-12-031-0/+7
| | | | | | | | | | | | | | Let's just reuse the code of sit tunnel to create a ISATAP tunnel. Matter of turning a flag Please see https://elixir.bootlin.com/linux/v4.19.6/source/net/ipv6/sit.c#L208
* | man/daemon.xml: use AM_DISTCHECK_CONFIGURE_FLAGSOliver Smith2018-12-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | Change the man page to recommend setting AM_DISTCHECK_CONFIGURE_FLAGS instead of DISTCHECK_CONFIGURE_FLAGS. This is the recommended way from the automake manual, as otherwise the flag can't be overridden by the user with something like: DISTCHECK_CONFIGURE_FLAGS=--some-additional-flags make distcheck References: https://www.gnu.org/software/automake/manual/html_node/Checking-the-Distribution.html https://osmocom.org/issues/3718
* | cgroup: Use varname for cgroup_disable documentationChris Down2018-12-041-6/+6
| | | | | | | | | | | | | | | | The current use of literal + replaceable is pretty ugly as it usually ends up with cgroup_disable= rendered in quotes, which looks really weird, and this doesn't conform with others of a similar type (for example, the earlier `DefaultDependencies=no` discussion in the same file.
* | cgroup: Add DisableControllers= directive to disable controller in subtreeChris Down2018-12-031-0/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some controllers (like the CPU controller) have a performance cost that is non-trivial on certain workloads. While this can be mitigated and improved to an extent, there will for some controllers always be some overheads associated with the benefits gained from the controller. Inside Facebook, the fix applied has been to disable the CPU controller forcibly with `cgroup_disable=cpu` on the kernel command line. This presents a problem: to disable or reenable the controller, a reboot is required, but this is quite cumbersome and slow to do for many thousands of machines, especially machines where disabling/enabling a stateful service on a machine is a matter of several minutes. Currently systemd provides some configuration knobs for these in the form of `[Default]CPUAccounting`, `[Default]MemoryAccounting`, and the like. The limitation of these is that Default*Accounting is overrideable by individual services, of which any one could decide to reenable a controller within the hierarchy at any point just by using a controller feature implicitly (eg. `CPUWeight`), even if the use of that CPU feature could just be opportunistic. Since many services are provided by the distribution, or by upstream teams at a particular organisation, it's not a sustainable solution to simply try to find and remove offending directives from these units. This commit presents a more direct solution -- a DisableControllers= directive that forcibly disallows a controller from being enabled within a subtree.
* | network: make IPProtocol= also accept IP protocol numberYu Watanabe2018-12-021-1/+3
| |
* | network: rename Protocol= in [RoutingPolicyRule] to IPProtocol=Yu Watanabe2018-12-021-2/+2
| |
* | man: document systemd-analyze securityLennart Poettering2018-11-301-0/+29
|/
* Merge pull request #10989 from keszybz/nss-manLennart Poettering2018-11-291-6/+78
|\ | | | | Add example to nss-mymachines(8)
| * man: add an extensive example to nss-mymachines(8)Zbigniew Jędrzejewski-Szmek2018-11-291-6/+78
| | | | | | | | | | The man page didn't really say what we are mapping and with what patterns. Let's fix that.
* | Merge pull request #10357 from poettering/import-fsZbigniew Jędrzejewski-Szmek2018-11-291-38/+18
|\ \ | |/ |/| machinectl import-fs command and other fixes
| * import: drop logic of setting up /var/lib/machines as btrfs loopback mountLennart Poettering2018-11-261-34/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Let's simplify things and drop the logic that /var/lib/machines is setup as auto-growing btrfs loopback file /var/lib/machines.raw. THis was done in order to make quota available for machine management, but quite frankly never really worked properly, as we couldn't grow the file system in sync with its use properly. Moreover philosophically it's problematic overriding the admin's choice of file system like this. Let's hence drop this, and simplify things. Deleting code is a good feeling. Now that regular file systems provide project quota we could probably add per-machine quota support based on that, hence the btrfs quota argument is not that interesting anymore (though btrfs quota is a bit more powerful as it allows recursive quota, i.e. that the machine pool gets an overall quota in addition to per-machine quota).
| * machine: add support for importing containers from plain directoriesLennart Poettering2018-11-261-0/+9
| | | | | | | | | | | | | | | | | | Fixes: #2728 This is also supposed to be preparation for doing #10234 eventually, where a very similar operation is requested: instead of importing a tree to /var/lib/machines it would need to be imported into /var/lib/portables/.
| * man: document that machinectl is also happy with block devices these daysLennart Poettering2018-11-261-4/+5
| |
* | Merge pull request #10797 from poettering/run-generatorZbigniew Jędrzejewski-Szmek2018-11-284-4/+114
|\ \ | | | | | | add new "systemd-run-generator" for running arbitrary commands from the kernel command line as system services using the "systemd.run=" kernel command line switch
| * | man: document systemd-run-generatorLennart Poettering2018-11-273-0/+94
| | |
| * | man: document FailureActionExitStatus=/SuccessActionExitStatus=Lennart Poettering2018-11-271-4/+20
| | |
* | | networkd: add support to configure ip rule port range and protocol.Susant Sahani2018-11-281-0/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | Please see: iprule: support for ip_proto, sport and dport match options https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=f686f764682745daf6a93b0a6330ba42a961f858 Closes 10622
* | | man,factory: update factory config for nsswitch.conf to match the man pagesZbigniew Jędrzejewski-Szmek2018-11-274-0/+4
| | | | | | | | | | | | | | | Also add a note in the man pages to remind people to adjust the factory config and other man pages at the same time.
* | | Merge pull request #10813 from poettering/cgroup-exec-start-preLennart Poettering2018-11-271-0/+3
|\ \ \ | | | | | | | | make sure ExecStartPre= and Delegate=yes mix well
| * | | man: link Delegate= documentation up with the markdown docsLennart Poettering2018-11-261-0/+3
| | |/ | |/|
* | | man: update explanation for boolean optionsYu Watanabe2018-11-273-102/+93
| | |
* | | man: improve the explanation of "Defaults to unset"Yu Watanabe2018-11-273-40/+38
| |/ |/|
* | networkd: Add support for ERSPAN tunnelSusant Sahani2018-11-271-0/+21
|/ | | | | | | | | | | | | | | | | Please see: https://patchwork.ozlabs.org/patch/800327/ ``` [NetDev] Name=erspan-test Kind=erspan [Tunnel] Independent=true ERSPANIndex=123 Local = 172.16.1.200 Remote = 172.16.1.100 Key=101 SerializeTunneledPackets=true ```
* man: systemd-boot does not read loader.conf.d/*.confYu Watanabe2018-11-261-4/+4
| | | | Fixes #10923.
* run: add new --shell switch for spawning a shell as serviceLennart Poettering2018-11-231-0/+9
| | | | | | | | | I keep running "systemd-run -t /bin/bash" to quickly get a shell running in service context. I suspect I am not the only one, hence let's add a shortcut for it. While we are at it, let's make it smarter, and automatically inherit the $SHELL of the invoking user as well as the working directory, and let's imply --pty. --shell (or -S) is hence equivalent to "-t -d $SHELL".
* run: add a switch for specifiying the working directory of a serviceLennart Poettering2018-11-231-0/+17
| | | | | | | | | | | | I find myself testing service management quite often with "systemd-run -t /bin/bash". For that it is handy if the invoked shell would use the working directory I am currently in. Hence introduce a shorthand for that: $ systemd-run -dt /bin/bash This will automatically insert a WorkingDirectory= property into the transient service, pointing to the working directory of the caller.
* man: update description of Description=Zbigniew Jędrzejewski-Szmek2018-11-221-9/+15
| | | | | | The way this is used drifted a bit from the original intent. Let's update the description and add some examples to inspire people to texts that look less bad during initial boot.
* man: minor fixesLennart Poettering2018-11-201-3/+3
| | | | | | As suggested here: https://github.com/systemd/systemd/pull/10538#pullrequestreview-176710207
* Merge pull request #10538 from poettering/tmpfiles-reorderZbigniew Jędrzejewski-Szmek2018-11-202-33/+20
|\ | | | | tmpfiles: remove children before their parents plus other fixlets
| * man: document that for removal tmpfiles.d prefix is run after suffixLennart Poettering2018-11-081-22/+14
| |
| * man: document that removal/clean-up is done before creation in systemd-tmpfilesLennart Poettering2018-11-081-5/+3
| |
| * man: stop mentioning /var/run in tmpfiles.d(5)Lennart Poettering2018-11-081-6/+3
| | | | | | | | | | | | It's obsolete, stop mentioning it. Let's not confuse people suggests it would be OK to use that, because it really isn't anymore, and it gives us trouble with merging idenctical lines.
* | cgroup v2: DefaultCPUAccounting=yes if CPU controller isn't requiredChris Down2018-11-181-2/+3
| | | | | | | | | | | | | | | | We now don't enable the CPU controller just for CPU accounting if we are on 4.15+ and using pure unified hierarchy, as this is provided externally to the CPU controller. This makes CPUAccounting=yes essentially free, so enabling it by default when it's cheap seems like a good idea.
* | Merge pull request #10805 from poettering/migrate-boot-loader-interfaceLennart Poettering2018-11-162-7/+5
|\ \ | | | | | | migrate boot loader interface doc from wiki into markdown (split out of #10495)
| * | docs: migrate boot loader interface from fdo wiki to gitLennart Poettering2018-11-162-7/+5
| | | | | | | | | | | | | | | | | | | | | This imports https://www.freedesktop.org/wiki/Software/systemd/BootLoaderInterface/ into our sources, and extends it substantially with various variables now supported.
* | | Merge pull request #10785 from poettering/cgroup-join-removalLennart Poettering2018-11-161-23/+0
|\ \ \ | | | | | | | | remove JoinControllers= setting
| * | | core: remove JoinControllers= configuration settingLennart Poettering2018-11-161-23/+0
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes the ability to configure which cgroup controllers to mount together. Instead, we'll now hardcode that "cpu" and "cpuacct" are mounted together as well as "net_cls" and "net_prio". The concept of mounting controllers together has no future as it does not exist to cgroupsv2. Moreover, the current logic is systematically broken, as revealed by the discussions in #10507. Also, we surveyed Red Hat customers and couldn't find a single user of the concept (which isn't particularly surprising, as it is broken...) This reduced the (already way too complex) cgroup handling for us, since we now know whenever we make a change to a cgroup for one controller to which other controllers it applies.
* | | Merge pull request #10802 from poettering/hide-only-onLennart Poettering2018-11-161-18/+0
|\ \ \ | | | | | | | | man: let's deprecate PermissionsStartOnly=
| * | | man: let's deprecate PermissionsStartOnly=Lennart Poettering2018-11-161-18/+0
| |/ / | | | | | | | | | | | | | | | The concept is redundant and predates the special chars that do the same in ExecStar=. Let's settle on advertising just the latter, and hide PermissionsStartOnly= from the docs (even if we continue supporting it).
* | | sd-boot: add new EFI variable exposing feature set of boot loaderLennart Poettering2018-11-161-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | We keep adding new features, let's advertise to the host OS what these are in a new variable LoaderFeatures. It works a bit like OsIndicationsSupported, but is about Loader features.
* | | sd-boot: introduce a one-time override for the boot menu timeoutLennart Poettering2018-11-161-2/+6
|/ / | | | | | | | | This is useful to allow userspace to request a "boot into boot menu" feature.
* | sd-event: make sd_event_source_get_enabled return more infoZbigniew Jędrzejewski-Szmek2018-11-161-6/+8
| |
* | Merge pull request #10753 from keszybz/pager-no-interruptLennart Poettering2018-11-144-16/+23
|\ \ | | | | | | Add mode in journalctl where ^C is handled by the pager
| * | man: use <keycombo> moreZbigniew Jędrzejewski-Szmek2018-11-143-15/+16
| | |
| * | basic/pager: ignore ^C when piping to less and K is not setZbigniew Jędrzejewski-Szmek2018-11-141-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | Normally, we want to immediately quit on ^C. But when we are running under less, people may set SYSTEMD_LESS without K, in which case they can use ^C to communicate with less, and e.g. start and stop following input. Fixes #6405.
* | | Merge pull request #10759 from keszybz/udevd-more-configurationLennart Poettering2018-11-141-1/+50
|\ \ \ | | | | | | | | Udevd more configuration options
| * | | udev: also allow resolve_names= to be specified in udev.confZbigniew Jędrzejewski-Szmek2018-11-131-0/+13
| | | |
| * | | udevd: allow more parameters to be set through udev.confZbigniew Jędrzejewski-Szmek2018-11-131-1/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rebooting to set change the kernel command line to set some udev parameters is inconvenient. Let's allow setting more stuff in the config file. Also drop quotes from around "info" in udev.conf. We need to accept them for compatibility, but there is no reason to use them.
* | | | man: document that env vars are not suitable for passing secretsLennart Poettering2018-11-141-1/+7
|/ / / | | | | | | | | | | | | | | | Prompted by the thread around: https://lists.freedesktop.org/archives/systemd-devel/2018-November/041665.html
View Lorry Controller Status