Commit graph

73573 commits

Author SHA1 Message Date
David Tardon ac10f7e28c main: pass the right error variable 2024-05-07 13:18:10 +02:00
David Tardon bad6cb5ae8 bless-boot: pass the right error variable 2024-05-07 13:16:30 +02:00
David Tardon 47eab95ea8 journal-remote-main: pass the right error variable 2024-05-07 13:13:24 +02:00
David Tardon cc4482ee23 discover-image: pass the right error variable 2024-05-07 12:44:03 +02:00
dependabot[bot] 5fc0b2f9da build(deps): bump pkg/debian from 50b20e2 to 7cc898c
Bumps pkg/debian from `50b20e2` to `7cc898c`.

---
updated-dependencies:
- dependency-name: pkg/debian
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-07 12:43:35 +02:00
Daan De Meyer b1670c52ad mkosi: Switch to fedora 40
Enable updates-testing and use the most recent mirror to make sure
we get util-linux 2.40.1 which contains a crucial fix to make sure
the serial terminal in virtual machines works properly.
2024-05-07 11:51:29 +02:00
Vladimir Stoiakin ca6cb9c089 cryptsetup: make type-specific checks for PKCS#11 private keys 2024-05-07 11:07:01 +02:00
Luca Boccassi 5dbc2b21dc
Merge pull request #32677 from keszybz/wording-fixes
Wording fixes
2024-05-07 11:03:44 +02:00
Adrian Wannenmacher 3a1694803b docs: minor improvements to CREDENTIALS.md
This commit fixes two instances of a miscount. As the number is not important in either case, and seemingly subject to changes, it was removed entirely.

Another sentence was reworded to improve readability.
2024-05-07 11:02:31 +02:00
Luca Boccassi d78b695217
Merge pull request #32635 from poettering/cryptenroll-no-pcrlock-conflict
cryptenroll: don't try to use pcrlock in combination with signed PCR policy if both are available, because we don't actually support that right now
2024-05-07 09:49:30 +02:00
Zbigniew Jędrzejewski-Szmek 71322b95ad manager: resolve verb/noun mixup in log message
The word is used in "%s requested" so it should be a noun.
2024-05-07 09:42:47 +02:00
Moritz Sanft 34c3d57474 repart: respect SOURCE_DATE_EPOCH on mkdir_p_root
This let's systemd-repart respect the `SOURCE_DATE_EPOCH` environment
variable when creating directories in the local tree through `CopyFiles`
or `MakeDirectories`.

To do this, we pass a timestamp `ts` to `mkdir_p_root`, which it will
use to fix up `mtime` and `atime` of the directory it creates as
well as the `mtime` of the directory it creates the other directory *in*,
as the `mtime` of the latter is modified when creating a directory in it.

For the same reason, it also needs to fixup the `mtime` of the upper
directory when copying a file into it through `CopyFiles`.

If `SOURCE_DATE_EPOCH`, times are left as is. (`UTIME_OMIT`)
2024-05-07 09:29:58 +02:00
Luca Boccassi 4dc1be99d6
Merge pull request #32673 from DaanDeMeyer/mkosi
Various mkosi fixes
2024-05-07 09:25:59 +02:00
Zbigniew Jędrzejewski-Szmek b36a3f0aea man: reword text and fix tense in description of sd_event_source_set_io_fd
Follow-up for 2fa480592d.
2024-05-07 08:53:58 +02:00
Takashi Sakamoto 9223a4993a hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII
Jörg M. Sigle contriutes configuration ROM image for Tascam IF-FW/DM mkII,
which includes a quirk that the values of model fields in both root and
unit directory entries are different. In device attributes, it appears
that the value of model attribute in unit device is different from the one
in node device.

This commit adds hwdb entry for the model.
2024-05-07 14:13:03 +09:00
Luca Boccassi 72558b03d4 doc: mention that units can be masked via credentials 2024-05-07 08:17:25 +08:00
Daan De Meyer 7681a8ee58 ci: Disable RuntimeBuildSources=
We build with debuginfo, so there's no point to starting virtiofsd
to mount the sources and build directory into the VM, so let's
disable that.
2024-05-06 22:23:37 +02:00
Daan De Meyer 8f59b036de mkosi: Install dhcp-server on OpenSUSE
Required for systemd-networkd-tests.py.
2024-05-06 20:21:32 +02:00
Daan De Meyer f3548f28b3 meson: Fix formatting 2024-05-06 18:16:24 +02:00
Daan De Meyer 2c5dc1df1d mkosi: Install python3-psutil
Required to run systemd-networkd-tests.py. Already a dependency of
systemd-tests on Fedora so we don't add it there as it'll be pulled
in via the prepare script.
2024-05-06 18:15:54 +02:00
Daan De Meyer 15526060cc mkosi: Install radvd
Required for networkd integration tests.
2024-05-06 18:15:54 +02:00
Lennart Poettering 3f2402171b tpm2-util: tweak JSON condition check
As for the other fields let's check if the actual variable we serialize
is set before serializing it.

This shouldn't make any difference, since the pubkey and the PCR mask
should always be set together or neither, but I think it's easier to
grok this way, and makes the function nicely "dumb": it serializes what
is specified, without trying to be smart by suppressng specified fields.
2024-05-06 16:15:16 +02:00
Lennart Poettering e6ca81d434 cryptenroll: determine TPM enrollment parmaeters only if we actually do TPM enrollments
Otherwise we'll do work (and possibly generate fatal errors) where we
really shouldn't.
2024-05-06 16:15:14 +02:00
Lennart Poettering 27f42786fe cryptenroll: do not combine pcrlock and signed PCR policies in TPM mode
We currently do not support pcrlock policies and signed PCR policies in
combination. Hence, when we auto-discover both, let's disable signed PCR
policies if pcrlock is available too (simple because that covers more
ground).

Fixes: #32565
2024-05-06 16:15:11 +02:00
Daan De Meyer 3d320785c4
Merge pull request #32664 from DaanDeMeyer/no-build
mkosi: Skip build if NO_BUILD is set
2024-05-06 16:01:24 +02:00
Daan De Meyer fdf3820e54 mkosi: Configure coredump to store coredumps in the journal.
Makes it easier to debug coredumps that happen in CI as we can retrieve
them via the journal.
2024-05-06 14:44:43 +02:00
Daan De Meyer 71b7156bd3 mkosi: Add missing SPDX line 2024-05-06 14:44:27 +02:00
Daan De Meyer 21e9282bc2 mkosi: Only look for services in /usr and /etc 2024-05-06 14:40:29 +02:00
Daan De Meyer bda54ae03f mkosi: Skip build if NO_BUILD is set
This allows running the integration tests against the distro's packaged
version of systemd.
2024-05-06 14:40:26 +02:00
Daan De Meyer 453ce77c07
Merge pull request #32606 from DaanDeMeyer/mkosi
mkosi: Enable more integration tests
2024-05-06 13:11:43 +02:00
Nicolas Bouchinet a23a59b324 systemd-boot: Allow key enroll in AuditMode
Since AuditMode automatically switches SetupMode on, it should be
authorized to enroll SecureBoot keys.

Signed-off-by: Nicolas Bouchinet <nicolas.bouchinet@ssi.gouv.fr>
2024-05-06 13:09:03 +02:00
Daan De Meyer 77962e1242 mkosi: Enable more integration tests 2024-05-06 11:57:09 +02:00
Daan De Meyer eabf46ef89 ci: Reduce the number of integration tests we run concurrently
Since there's a bunch of CPU hungry systemd-journal-remote processes
running on the host to received the forwarded logs, by running as many
test as the VM has cores we overload the available resources. Let's leave
use the number of cores - 1 to reduce resource contention.
2024-05-06 11:57:09 +02:00
Daan De Meyer 1f2c9bda49 test: Default to linux qemu firmware
Direct kernel boot results in much faster boot times so let's use
it by default.

We disable it for tests that need to reboot because +-50% of the
time, doing a reboot when using direct kernel boot causes qemu to
hang on reboot. Until we figure that out, let's use UEFI for the
tests that need to reboot.
2024-05-06 11:57:09 +02:00
Daan De Meyer a90bba42f4 TEST-46-HOMED: Skip barely fits test on ext4
For some reason this fails on ext4 with "No space left on device".
Until we figure out why, let's skip the test on ext4 (which is reported
as ext2/ext3 by stat).
2024-05-06 11:57:09 +02:00
Daan De Meyer 7a273d6570 TEST-46-HOMED: Only run resize tests on btrfs
Other filesystems do not support online shrinking.
2024-05-06 11:57:09 +02:00
Daan De Meyer 6ff6b2e29b TEST-53-ISSUE-16347: Add rtc configuration for qemu 2024-05-06 11:57:09 +02:00
Daan De Meyer 9e71acab00 TEST-55-OOMD: Configure init.scope credential in mkosi image 2024-05-06 11:57:09 +02:00
Daan De Meyer 8f5095ff74 TEST-55-OOMD: Skip on opensuse
opensuse does not have the stress tool packaged.
2024-05-06 11:57:09 +02:00
Richard Maw 9be49de41f TEST-55-OOMD: swapoff before adding new swapfile
When running test images built with read-only /usr
a swap partition is likely so needs to be turned off first.
2024-05-06 11:57:09 +02:00
Daan De Meyer f1d3962e61 TEST-04-JOURNAL: Skip bsod test if systemd-bsod is not installed
systemd is built without qrencode support on CentOS which means
systemd-bsod will not be installed. Let's skip the test if that's
the case.
2024-05-06 11:57:09 +02:00
Daan De Meyer f74fb048f9 TEST-04-JOURNAL: Run with persistent journal
This test depends on having the journal in /var/log/journal.
2024-05-06 11:57:09 +02:00
Daan De Meyer 0214a8fd75 TEST-04-JOURNAL: Make more robust
Avoid hitting https://github.com/systemd/systemd/issues/2913 by adding
some more sleeps. This is required to make the test pass when executed
with mkosi on my machine.
2024-05-06 11:57:09 +02:00
Daan De Meyer e86afb0314 TEST-07-PID1: Schedule exit on successful execution
The test unit has RemainAfterExit=yes so let's schedule our own
shutdown from the test itself once we finish running.
2024-05-06 11:57:09 +02:00
Richard Maw c5073aa204 TEST-07-PID1: Test access to allocated loop instead of loop0
loop0 and 1 can be used by systemd-repart and vanish
but we can guarantee that $LODEV was allocated and is available.
2024-05-06 11:57:09 +02:00
Daan De Meyer 733d0594f0 TEST-07-PID1: Lower TriggerLimitIntervalSec= unconditionally
It shouldn't hurt to do this when KVM is enabled or we're not collecting
coverage so let's just always lower the trigger limit interval.
2024-05-06 11:57:09 +02:00
Richard Maw 7590e1d037 TEST-07-PID1: Move mount units to test dir
To load the units it is sufficient to add them to the units directory
and it's a step towards not needing any customisations for this test.
2024-05-06 11:57:09 +02:00
Daan De Meyer b95bb3b3bb TEST-70-TPM2: Call udevadm wait after attaching disk image
Otherwise /dev/loop0p1 might not exist when calling
systemd-cryptsetup attach.
2024-05-06 11:57:09 +02:00
Daan De Meyer 6b146cef3f TEST-70-TPM2: Add dependency on tpm2.target
Let's make sure the TPM is available before running the test as the
test makes use of it.
2024-05-06 11:57:09 +02:00
Daan De Meyer e631cc91e0 TEST-74-AUX-UTILS: Use persistent journal
This test depends on having the journal in /var/log/journal.
2024-05-06 11:57:09 +02:00