mirror of
https://github.com/systemd/systemd
synced 2024-07-21 18:24:38 +00:00
Trim TODO a bit
Let's drop stuff that's already implemented.
This commit is contained in:
parent
e873a9f18a
commit
02c914efe6
40
TODO
40
TODO
|
@ -141,9 +141,6 @@ Features:
|
||||||
way noone can create files there with these uids and we enforce they are only
|
way noone can create files there with these uids and we enforce they are only
|
||||||
used transiently, never persistently.
|
used transiently, never persistently.
|
||||||
|
|
||||||
* set MS_NOSYMFOLLOW for ESP and XBOOTLDR mounts both in gpt-generator and in
|
|
||||||
dissect.c
|
|
||||||
|
|
||||||
* rework loopback support in fstab: when "loop" option is used, then
|
* rework loopback support in fstab: when "loop" option is used, then
|
||||||
instantiate a new systemd-loop@.service for the source path, set the
|
instantiate a new systemd-loop@.service for the source path, set the
|
||||||
lo_file_name field for it to something recognizable derived from the fstab
|
lo_file_name field for it to something recognizable derived from the fstab
|
||||||
|
@ -600,9 +597,6 @@ Features:
|
||||||
sig using squashfs-tools-ng's library. Maybe just systemd-repart called under
|
sig using squashfs-tools-ng's library. Maybe just systemd-repart called under
|
||||||
a new name with a built-in config?
|
a new name with a built-in config?
|
||||||
|
|
||||||
* gpt-auto: generate mount units that reference partitions via
|
|
||||||
/dev/disk/by-diskseq/… so that they can't be swapped out behind our back.
|
|
||||||
|
|
||||||
* lock down acceptable encrypted credentials at boot, via simple allowlist,
|
* lock down acceptable encrypted credentials at boot, via simple allowlist,
|
||||||
maybe on kernel command line:
|
maybe on kernel command line:
|
||||||
systemd.import_encrypted_creds=foobar.waldo,tmpfiles.extra to protect locked
|
systemd.import_encrypted_creds=foobar.waldo,tmpfiles.extra to protect locked
|
||||||
|
@ -617,9 +611,6 @@ Features:
|
||||||
* chase(): refuse resolution if trailing slash is specified on input,
|
* chase(): refuse resolution if trailing slash is specified on input,
|
||||||
but final node is not a directory
|
but final node is not a directory
|
||||||
|
|
||||||
* chase(): add new flag that simply refuses all symlink use in a path,
|
|
||||||
then use that for accessing XBOOTLDR/ESP
|
|
||||||
|
|
||||||
* document in boot loader spec that symlinks in XBOOTLDR/ESP are not OK even if
|
* document in boot loader spec that symlinks in XBOOTLDR/ESP are not OK even if
|
||||||
non-VFAT fs is used.
|
non-VFAT fs is used.
|
||||||
|
|
||||||
|
@ -749,9 +740,6 @@ Features:
|
||||||
|
|
||||||
* implement varlink introspection
|
* implement varlink introspection
|
||||||
|
|
||||||
* we should probably drop all use of prefix_roota() and friends, and use
|
|
||||||
chase() instead
|
|
||||||
|
|
||||||
* make persistent restarts easier by adding a new setting OpenPersistentFile=
|
* make persistent restarts easier by adding a new setting OpenPersistentFile=
|
||||||
or so, which allows opening one or more files that is "persistent" across
|
or so, which allows opening one or more files that is "persistent" across
|
||||||
service restarts, hot reboot, cold reboots (depending on configuration): the
|
service restarts, hot reboot, cold reboots (depending on configuration): the
|
||||||
|
@ -792,7 +780,7 @@ Features:
|
||||||
not unprivileged code.
|
not unprivileged code.
|
||||||
|
|
||||||
* given that /etc/ssh/ssh_config.d/ is a thing now, ship a drop-in for that
|
* given that /etc/ssh/ssh_config.d/ is a thing now, ship a drop-in for that
|
||||||
that hooks up userbdctl ssh-key stuff.
|
that hooks up userdbctl ssh-key stuff.
|
||||||
|
|
||||||
* maybe add support for binding and connecting AF_UNIX sockets in the file
|
* maybe add support for binding and connecting AF_UNIX sockets in the file
|
||||||
system outside of the 108ch limit. When connecting, open O_PATH fd to socket
|
system outside of the 108ch limit. When connecting, open O_PATH fd to socket
|
||||||
|
@ -864,10 +852,6 @@ Features:
|
||||||
signal for setting service log level, that carries the level via the
|
signal for setting service log level, that carries the level via the
|
||||||
sigqueue() data parameter. Enable this via unit file setting.
|
sigqueue() data parameter. Enable this via unit file setting.
|
||||||
|
|
||||||
* firstboot: maybe just default to C.UTF-8 locale if nothing is set, so that we
|
|
||||||
don't query this unnecessarily in entirely uninitialized
|
|
||||||
containers. (i.e. containers with empty /etc).
|
|
||||||
|
|
||||||
* sd_notify/vsock: maybe support binding to AF_VSOCK in Type=notify services,
|
* sd_notify/vsock: maybe support binding to AF_VSOCK in Type=notify services,
|
||||||
then passing $NOTIFY_SOCKET and $NOTIFY_GUESTCID with PID1's cid (typically
|
then passing $NOTIFY_SOCKET and $NOTIFY_GUESTCID with PID1's cid (typically
|
||||||
fixed to "2", i.e. the official host cid) and the expected guest cid, for the
|
fixed to "2", i.e. the official host cid) and the expected guest cid, for the
|
||||||
|
@ -876,8 +860,8 @@ Features:
|
||||||
directly to host service manager.
|
directly to host service manager.
|
||||||
|
|
||||||
* maybe write a tool that binds an AF_VFSOCK socket, then invokes qemu,
|
* maybe write a tool that binds an AF_VFSOCK socket, then invokes qemu,
|
||||||
extending the command line to enable vsock on the VM, and using fw_cfg to
|
extending the command line to enable vsock on the VM, and using SMBIOS
|
||||||
configure socket address.
|
credentials to configure socket address.
|
||||||
|
|
||||||
* sd-boot: add menu item for shutdown? or hotkey?
|
* sd-boot: add menu item for shutdown? or hotkey?
|
||||||
|
|
||||||
|
@ -908,7 +892,7 @@ Features:
|
||||||
|
|
||||||
* sd-boot: maybe add support for embedding the various auxiliary resources we
|
* sd-boot: maybe add support for embedding the various auxiliary resources we
|
||||||
look for right in the sd-boot binary. i.e. take inspiration from sd-stub
|
look for right in the sd-boot binary. i.e. take inspiration from sd-stub
|
||||||
logic: allow combining sd-boot via objcopy with kernels to enumerate, .conf
|
logic: allow combining sd-boot via ukify with kernels to enumerate, .conf
|
||||||
files, drivers, keys to enroll and so on. Then, add whatever we find that way
|
files, drivers, keys to enroll and so on. Then, add whatever we find that way
|
||||||
to the menu. Usecase: allow building a single PE image you can boot into via
|
to the menu. Usecase: allow building a single PE image you can boot into via
|
||||||
UEFI HTTP boot.
|
UEFI HTTP boot.
|
||||||
|
@ -972,8 +956,6 @@ Features:
|
||||||
|
|
||||||
* kernel-install:
|
* kernel-install:
|
||||||
- add --all switch for rerunning kernel-install for all installed kernels
|
- add --all switch for rerunning kernel-install for all installed kernels
|
||||||
- maybe add env var that shortcuts kernel-install for installers that want to
|
|
||||||
call it at the end only
|
|
||||||
|
|
||||||
* doc: prep a document explaining resolved's internal objects, i.e. Query
|
* doc: prep a document explaining resolved's internal objects, i.e. Query
|
||||||
vs. Question vs. Transaction vs. Stream and so on.
|
vs. Question vs. Transaction vs. Stream and so on.
|
||||||
|
@ -1224,7 +1206,7 @@ Features:
|
||||||
|
|
||||||
* introduce a new group to own TPM devices
|
* introduce a new group to own TPM devices
|
||||||
|
|
||||||
* cyptsetup: add option for automatically removing empty password slot on boot
|
* cryptsetup: add option for automatically removing empty password slot on boot
|
||||||
|
|
||||||
* cryptsetup: optionally, when run during boot-up and password is never
|
* cryptsetup: optionally, when run during boot-up and password is never
|
||||||
entered, and we are on battery power (or so), power off machine again
|
entered, and we are on battery power (or so), power off machine again
|
||||||
|
@ -1951,11 +1933,6 @@ Features:
|
||||||
|
|
||||||
* mount: turn dependency information from /proc/self/mountinfo into dependency information between systemd units.
|
* mount: turn dependency information from /proc/self/mountinfo into dependency information between systemd units.
|
||||||
|
|
||||||
* systemd-firstboot: make sure to always use chase() before
|
|
||||||
reading/writing files
|
|
||||||
|
|
||||||
* firstboot: make it useful to be run immediately after yum --installroot to set up a machine. (most specifically, make --copy-root-password work even if /etc/passwd already exists
|
|
||||||
|
|
||||||
* EFI:
|
* EFI:
|
||||||
- honor language efi variables for default language selection (if there are any?)
|
- honor language efi variables for default language selection (if there are any?)
|
||||||
- honor timezone efi variables for default timezone selection (if there are any?)
|
- honor timezone efi variables for default timezone selection (if there are any?)
|
||||||
|
@ -2025,7 +2002,7 @@ Features:
|
||||||
- check if we can make journalctl by default use --follow mode inside of less if called without args?
|
- check if we can make journalctl by default use --follow mode inside of less if called without args?
|
||||||
- maybe add API to send pairs of iovecs via sd_journal_send
|
- maybe add API to send pairs of iovecs via sd_journal_send
|
||||||
- journal: add a setgid "systemd-journal" utility to invoke from libsystemd-journal, which passes fds via STDOUT and does PK access
|
- journal: add a setgid "systemd-journal" utility to invoke from libsystemd-journal, which passes fds via STDOUT and does PK access
|
||||||
- journactl: support negative filtering, i.e. FOOBAR!="waldo",
|
- journalctl: support negative filtering, i.e. FOOBAR!="waldo",
|
||||||
and !FOOBAR for events without FOOBAR.
|
and !FOOBAR for events without FOOBAR.
|
||||||
- journal: store timestamp of journal_file_set_offline() in the header,
|
- journal: store timestamp of journal_file_set_offline() in the header,
|
||||||
so it is possible to display when the file was last synced.
|
so it is possible to display when the file was last synced.
|
||||||
|
@ -2254,11 +2231,6 @@ Features:
|
||||||
properties as JSON, similar to busctl's new JSON output. In contrast to that
|
properties as JSON, similar to busctl's new JSON output. In contrast to that
|
||||||
it should skip the variant type string though.
|
it should skip the variant type string though.
|
||||||
|
|
||||||
* add an explicit "vertical" mode to format-table, so that "systemctl
|
|
||||||
status"-like outputs (i.e. with a series of field names left and values
|
|
||||||
right) become genuine first class citizens, and we gain automatic, sane JSON
|
|
||||||
output for them.
|
|
||||||
|
|
||||||
* Add a "systemctl list-units --by-slice" mode or so, which rearranges the
|
* Add a "systemctl list-units --by-slice" mode or so, which rearranges the
|
||||||
output of "systemctl list-units" slightly by showing the tree structure of
|
output of "systemctl list-units" slightly by showing the tree structure of
|
||||||
the slices, and the units attached to them.
|
the slices, and the units attached to them.
|
||||||
|
|
Loading…
Reference in a new issue