1
0
mirror of https://github.com/systemd/systemd synced 2024-07-09 04:26:06 +00:00
Commit Graph

74426 Commits

Author SHA1 Message Date
Daan De Meyer
d49c09474d mkosi: Stop skipping pkcs11 test on opensuse
A fix was made to the softhsm package so the test now passes.
2024-06-06 18:59:44 +02:00
Luca Boccassi
71ca56efac NEWS: update contributors 2024-06-06 17:57:47 +01:00
Luca Boccassi
bed6e7c8b4 Update syscalls tables
ninja -C build update-syscall-tables update-syscall-header
2024-06-06 17:56:12 +01:00
Luca Boccassi
8559030b33 Update hwdb
ninja -C build update-hwdb
2024-06-06 17:54:03 +01:00
Zbigniew Jędrzejewski-Szmek
152c8946b3
Revert "network: add "mac" to alternatives name policy by default" (#33227)
This reverts commit 0f5a529217.

As discussed in https://github.com/systemd/systemd/issues/33104,
that patch caused problems in Debian which has a udev drop-in with

  [Match]
  Path=*-usb-*

  [Link]
  NamePolicy=mac

The rename fails:
   eth0: Policy *mac* yields "enx00*".
   eth0: /usr/lib/udev/rules.d/80-net-setup-link.rules:11 NAME 'enx00*'
   eth0: /usr/lib/udev/rules.d/99-systemd.rules:69 RUN '/usr/lib/systemd/systemd-sysctl --prefix=/net/ipv4/conf/$name --prefix=/net/ipv4/neigh/$
   eth0: sd-device: Created database file '/run/udev/data/n9' for '/devices/pci0000:00/0000:00:1c.4/0000:02:00.0/0000:03:01.0/0000:05:00.0/0000:
   eth0: Failed to rename network interface 9 from 'eth0' to 'enx00*': File exists
   eth0: sd-device: Created database file '/run/udev/data/n9' for '/devices/pci0000:00/0000:00:1c.4/0000:02:00.0/0000:03:01.0/0000:05:00.0/0000:
   eth0: Failed to process device, ignoring: File exists

Two network interfaces have the same MAC and it's not marked NET_ADDR_STOLEN.
In this case the conflict is very visible because it causes the rename to fail,
but it would also occur in other cases, for alternative names.

A patch has been submitted for r8152 to properly set NET_ADDR_STOLEN:
https://lore.kernel.org/linux-usb/20240605153340.25694-1-gmazyland@gmail.com/T/#u

Let's revert this now to avoid a regression. We can try again after the kernel
issue is resolved.

Closes https://github.com/systemd/systemd/issues/33104.
2024-06-06 17:35:46 +01:00
Daan De Meyer
9f2c92e3ba
Merge pull request #33218 from DaanDeMeyer/initrd-modules
mkosi: Include fewer modules in the initramfs
2024-06-06 18:01:00 +02:00
Luca Boccassi
b06ab6b92b
Merge pull request #33189 from bluca/fscrypt_flush
homed: flush fscrypt key on lock/deactivate
2024-06-06 16:34:20 +01:00
Daan De Meyer
0731321d14 mkosi: Include fewer modules in the initramfs
Let's only use mkosi's default list of modules instead of all of
them.
2024-06-06 16:44:00 +02:00
Daan De Meyer
20be62e4b9 mkosi: Update to latest 2024-06-06 16:43:58 +02:00
Luca Boccassi
c4b5de7eff homed: flush fscrypt key on lock/deactivate
The fscrypt key is added to the user keyring, and needs to be flushed out too.

Fixes https://github.com/systemd/systemd/issues/33138
2024-06-06 13:52:26 +01:00
Luca Boccassi
b99dc98780 mkosi: do a sparse checkout of debian/ubuntu packaging repo
The repository on Salsa includes the full upstream sources, which means
they are duplicated, taking extra space and showing duplicated grep results.
But we only need the debian/ subfolder, so do a sparse clone and checkout.
2024-06-06 12:16:03 +01:00
Luca Boccassi
67dfbe021c util: add keyring_describe helper and move to basic
So that it can be used from libsystemd. No external dependencies.
2024-06-06 11:39:56 +01:00
Yu Watanabe
01420b2db5 network/ndisc: use router lifetime as one for redirect route
Previously, we did not set lifetime for redirect route, and redirect
routes were removed only when received a RA from the target address.
Thus, routes that redirect on-link addresses were never removed.

RFCs mention nothing about the lifetime of redirection. But the previous
implementation does not pass the IPv6 Core Conformance Tests.

This makes
- remember all received RAs and manage them by the sender address
  (previously, remembered only one with the highest preference),
- then use the router lifetime as one for redirect route,
- remove redirect route also when the router corresponds to the sender
  address is dropped (previously, considered only target address).

Note, even if we recieve a new RA, we do not update existing redirect
routes. The lifetime of the redirect route is updated only when a new
Redirect message is received.

Closes #32527.
2024-06-06 11:19:55 +01:00
Jörg Behrmann
02f35b1c90 man: document /usr/local/lib in search paths 2024-06-06 12:07:08 +02:00
Luca Boccassi
0bec281d29
Merge pull request #33198 from keszybz/update-distro-hash
Add helper script to update distro packaging hashes
2024-06-06 10:22:15 +01:00
Zbigniew Jędrzejewski-Szmek
531e0f5481 mkosi: update fedora commit reference
* 1f94b56cee Partially backport PR #33016 to fix crashes in KDE 6.3.0
2024-06-06 10:02:23 +02:00
Zbigniew Jędrzejewski-Szmek
7d3cc45a53 mkosi: update debian commit reference
* 5b9607385d debian/tests/storage: without scsi_debug, skip test
* 8a195a6327 debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service
* 5436d49288 debian/extra: use a drop-in resolved.conf to configure Cache=no-negative
* 596a99d2d3 debian/extra: set ManagedOOMSwap=auto on -.slice
* 07ba81b14d LimitCORE: restore default hard limit to infinity
* df3a9a91e8 Restart managers on libc-upgrade dpkg trigger
2024-06-06 10:02:23 +02:00
Zbigniew Jędrzejewski-Szmek
2f3ae702a1 mkosi: set -o nounset for scripts
Those scripts are written with the expectation that all input variables are set
and will not behave correctly if something is ommitted. In particular, the
non-chrooted scripts (mkosi.clean, mkosi.sync) might wreak havoc if called
without the full environment.
2024-06-06 10:02:23 +02:00
Zbigniew Jędrzejewski-Szmek
35f6e5c327 tools/update-distro-hash: add a helper script to sync submodule 2024-06-06 10:02:23 +02:00
hanjinpeng
8f1bf5613d po: update and correction translation (Chinese (Traditional) (zh_TW)) 2024-06-06 09:55:26 +09:00
Daan De Meyer
60a20eff80 Revert "mkosi: Don't install wireguard-tools on Debian"
wireguard-tools was added back to debian testing.

This reverts commit 8c335463d9.
2024-06-05 19:36:05 +02:00
Daan De Meyer
a743cacd7b mkosi: Disable scratch device by default
We include scratch space in the rootfs image itself so we don't have
need for the scratch device so let's disable it by default.
2024-06-05 18:59:41 +02:00
Luca Boccassi
e5058834cf
Merge pull request #33197 from poettering/cryptsetup-fallback-tweak
cryptsetup: unset an unlock path on each unlock retry
2024-06-05 17:41:55 +01:00
Daan De Meyer
1a48d8549f core: Fix CPUQuotaPerSecUSec unit file serialization
CPUQuota= can deal with float percentages perfectly fine these days
(up to two places after the dot), so let's take that into account
when serializing the value to the transient unit file so we don't lose
precision when specifying e.g. "CPUQuota=0.5%".
2024-06-05 16:50:36 +02:00
Kamil Szczęk
80313c5577 json: use secure un{base64,hex}mem for sensitive variants
While tracing a LUKS code path in homework, I've noticed that we don't
erase buffers when doing unbase64 or unhex on JSON variants, even if the
variant is marked as sensitive.
2024-06-05 14:44:58 +01:00
Zbigniew Jędrzejewski-Szmek
455a2eb953 timesync: make public defines for clock epoch files
No functional change yet, just moving stuff around and message format
adjustments.

EPOCH_CLOCK_FILE is also made public for consistency, even though I don't
plan to use it outside of the one location.
2024-06-05 14:35:56 +02:00
Zbigniew Jędrzejewski-Szmek
f11aaf7dfb man/systemd: reorder content a bit
Section "Description" didn't actually say what systemd does. And we had a giant
"Concepts" section that actually described units types and other details about
them. So let's move the basic description of functionality to "Description" and
rename the following section to "Units".

The link to the Original Design Document is moved to "See Also", it is of
historical interest mostly at this point.

The only actual change is that when talking about API filesystems, /dev is also
mentioned. (I think /sys+/proc+/dev are the canonical set and should be always
listed on one breath.)
2024-06-05 14:34:12 +02:00
Yu Watanabe
8b439af2c0 network/route: fix condition in route_can_update()
An existing route with lifetime can be always updated with a new
finite lifetime. As the comment in the code says, we cannot disable the
lifetime. So, the condition must be '==', rather than '!='.

Fixes #33210.
2024-06-05 13:04:52 +01:00
hanjinpeng
3523d28b97 po: Translated using Weblate (Chinese (Simplified) (zh_CN))
Currently translated at 100.0% (233 of 233 strings)

Co-authored-by: hanjinpeng <hanjinpeng127@gmail.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/zh_CN/
Translation: systemd/main
2024-06-05 18:04:45 +09:00
Luca Boccassi
d494d6688d cryptsetup: check keyring cache passphrase at least once
The first try will be on the TPM2, so in practice this was always skipped
as it happens only on the first try. Use a different bool to track this.
2024-06-04 23:18:13 +01:00
Lennart Poettering
64f2e1ff05 cryptsetup: unset an unlock path on each unlock retry
If we couldn't unlock a device with the chosen unlock path, let's not
fall back to the lowest one right away, but only flush out one path, and
try the next.

Fixes: #30425
Follow-up-for: #30185
Alternative-to: #33183
2024-06-04 20:42:19 +01:00
David Seifert
80159df741 libpasswdqc: add missing #include "dlfcn-util.h" 2024-06-04 18:29:12 +01:00
Luca Boccassi
35c562a049
Merge pull request #33199 from DaanDeMeyer/optimization
mkosi: Build with -O0 by default
2024-06-04 16:37:53 +01:00
Edson Juliano Drosdeck
3cffbd37c0 Fix key toggle touchpad and programmable buttom for Positivo N14AP7 2024-06-04 15:23:30 +01:00
Daan De Meyer
0c639a9010 mkosi: Stop sourcing /etc/makepkg.conf
We don't need this anymore since we now just do delayed evaluation
of $CFLAGS in /etc/makepkg.conf and it imports $CFLAGS into the
script environment which messes everything up.
2024-06-04 16:03:45 +02:00
Daan De Meyer
f57cd0afbf mkosi: Build with -O0 by default
This was accidentally removed in https://github.com/systemd/systemd/pull/33193
2024-06-04 15:53:06 +02:00
Luca Boccassi
0af5114534
Merge pull request #33193 from DaanDeMeyer/fortify
mkosi: Disable FORTIFY_SOURCE when building without optimizations or with sanitizers
2024-06-04 13:38:00 +01:00
Luca Boccassi
b1213ef738
Merge pull request #33192 from DaanDeMeyer/packaging
mkosi: Various opensuse improvements
2024-06-04 11:32:27 +01:00
Daan De Meyer
d56cf40dd7 mkosi: Build Arch Linux image with -D_FORTIFY_SOURCE=3
_FORTIFY_SOURCE requires optimizations to be enabled so we set -O2
as well.
2024-06-04 12:27:29 +02:00
Daan De Meyer
cbbffa8355 mkosi: Drop $OPTIMIZATION variable
Let's instead just use $CFLAGS to override the optimization level.
2024-06-04 12:20:19 +02:00
Daan De Meyer
98a0e73b45 mkosi: Use __meson_verbose in opensuse build script
OpenSUSE Tumbleweed now ships meson 1.4.0 which ships the new
__meson_verbose macro.
2024-06-04 11:04:46 +02:00
Daan De Meyer
a16c186667 mkosi: Use meson_extra_configure_options for opensuse
This is now available so let's use it.
2024-06-04 11:00:53 +02:00
Daan De Meyer
21b338de4c mkosi: Update opensuse commit to latest 2024-06-04 11:00:38 +02:00
Luna Jernberg
e1c3ac1f67 po: Translated using Weblate (Swedish)
Currently translated at 100.0% (233 of 233 strings)

Co-authored-by: Luna Jernberg <bittin@reimu.nl>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/sv/
Translation: systemd/main
2024-06-04 16:11:56 +09:00
Pierre GRASSER
32aaf60e83 po: Translated using Weblate (French)
Currently translated at 100.0% (233 of 233 strings)

Co-authored-by: Pierre GRASSER <pierre.grasser@proton.me>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/fr/
Translation: systemd/main
2024-06-04 16:11:56 +09:00
Luca Boccassi
64531ad1ac
Merge pull request #33173 from yuwata/test-network
test-network: several  cleanups
2024-06-03 22:48:11 +01:00
Yu Watanabe
dadf2bd4f4 test-network: introduce a .network file to protect existing interfaces 2024-06-03 18:41:26 +01:00
Yu Watanabe
653c38b3eb test-network: show PID and Invocation ID of networkd
Then, we can easily find relevant journal entry on failure.
This is especially useful when the test is running with --no-journal.
2024-06-03 18:41:26 +01:00
Yu Watanabe
6fec598290 test-network: flush stream buffer and journals before/after running test 2024-06-03 18:41:26 +01:00
Yu Watanabe
22fa8f6724 test-network: generate debugging logs of networkd-persistent-storage.service 2024-06-03 18:41:26 +01:00