update TODO

update TODO

update TODO

update TODO This gets rid of the private DNSSEC TODO and moves it in the main TODO dump site, as the DNSSEC implementation is pretty complete now, and the remaining bits are low-priority.

shutdown: complain if process excluded from killing spree runs of the same rootfs as PID1

TODO: remove syslog broadcasting This should most likely be implemented as part of journal-netlogd (https://github.com/systemd/systemd/pull/1890), which it seems is not going to be merged. systemctl edit was mentioned twice.

Remove TODO entry Feature was introduced by 06af2a0

Update TODO

update TODO

TODO

importd: drop dkr support The current code is not compatible with current dkr protocols anyway, and dkr has a different focus ("microservices") than nspawn anyway ("whole machine containers"), hence drop support for it, we cannot reasonably keep this up to date, and it creates the impression we'd actually care for the microservices usecase.

update TODO

update TODO

update TODO

TODO: sort

update TODO

update TODO

execute: Add new PassEnvironment= directive This directive allows passing environment variables from the system manager to spawned services. Variables in the system manager can be set inside a container by passing `--set-env=...` options to systemd-spawn. Tested with an on-disk test.service unit. Tested using multiple variable names on a single line, with an empty setting to clear the current list of variables, with non-existing variables. Tested using `systemd-run -p PassEnvironment=VARNAME` to confirm it works with transient units. Confirmed that `systemctl show` will display the PassEnvironment settings. Checked that man pages are generated correctly. No regressions in `make check`.

update TODO

TODO: remove SYSTEMD_PAGER This is already done in Fedora rawhide.

update TODO

man: describe the reason why runlevels are obsolete Put it at the top of the file, where it's hard to miss. Also add the mapping of runlevel → target because since it is now static. I'm not adding runlevel(7), because we do not want to make obsolete stuff even more prominent.

man: tweak description of machinectl show Also, machinectl status is anything but terse. Remove "terse".

TODO: update for lz4/xz stuff No point in fixing xz now that lz4 is the default.

doc: correct orthography, word forms and missing/extraneous words

Revert "utf8.[ch]: use char32_t and char16_t instead of int, int32_t, int16_t"

update TODO - inotify utab has been removed and we use libmount now - x-systemd.requires= fstab option has been implemented to specify dependencies in fstab

utf8.[ch]: use char32_t and char16_t instead of int, int32_t, int16_t rework C11 utf8.[ch] to use char32_t instead of uint32_t when referring to unicode chars, to make things more expressive.

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

TODO

update TODO

update TODO

TODO: update networkd section Remove two freshly implemented features, and add TSO support as a new one.

update TODO

update TODO

update TODO

update TODO

TODO

update TODO

update TODO

strv: convert strv_split_quotes into a generic strv_split_extract strv_split_extract is to strv_split_quotes as extract_first_word was to unquote_first_word. Now there's extract_first_word for extracting a single argument, extract_many_words for extracting a bounded number of arguments, and strv_split_extract for extracting an arbitrary number of arguments.

util: change unquote_*_word to extract_*_word It now takes a separators argument, which defaults to WHITESPACE if NULL is passed.

update TODO

TODO: remove obsolete fedup related todos Fedup is being replaced by a dnf plugin that relies on systemd offline updates as per https://fedoraproject.org/wiki/Changes/DNF_System_Upgrades

TODO

resolved: rr - print formated timestamps in RRSIG

resolved: use one UDP socket per transaction We used to have one global socket, use one per transaction instead. This has the side-effect of giving us a random UDP port per transaction, and hence increasing the entropy and making cache poisoining significantly harder to achieve. We still reuse the same port number for packets belonging to the same transaction (resent packets).

resolved: implement RFC5452 This improves the resilience against cache poisoning by being stricter about only accepting responses that match precisely the requst they are in reply to. It should be noted that we still only use one port (which is picked at random), rather than one port for each transaction. Port randomization would improve things further, but is not required by the RFC.

resolved: rr - print DNSKEY and RRSIG in base64 As mandated by RFC4034.

TODO: remove DHCP override hostname

update TODO

update TODO

TODO: remove ipv6 Ipv6 privacy extensions

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

remove gudev and gtk-doc The library moved to: https://git.gnome.org/browse/libgudev/

update TODO

update TODO

update TODO

TODO: add --merge support for sd-j-remote

update TODO

Update TODO

update TODO

update TODO

update TODO

core: Execute first boot presets in an enable-only preset-mode. This means any existing enabled units well be preserved and no pre-created symlinks will be removed. This is done on first boot, when the assumption is that /etc is not populated at all (no machine-id setup). For minimal containers that gives a significant first boot speed up, approximately ~20ms / ~16% in my trials.

networkd: network_get - allow udev_device to be NULL In containers we never have udev devices, so drop the assert. This fixes an assertion introduced in af3aa302741b6edb0729925febb5f8bc26721fe3.

update TODO

update TODO

Generate systemd-fsck-root.service in the initramfs In the initrafms, generate a systemd-fsck-root.service to replace systemd-fsck@<sysroot-device>.service. This way, after we transition to the real root, systemd-fsck-root.service is marked as already done. This introduces an unnecessary synchronization point, because systemd-fsck@* is ordered after systemd-fsck-root also in the initramfs. In practice this shouldn't be a problem. https://bugzilla.redhat.com/show_bug.cgi?id=1201979 C.f. 956eaf2b8d6c9999024705ddadc7393bc707de02.

Update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

TODO: split out issues to fix before 220

TODO: drop journal blocker This got fixed via a cleanup by Zbigniew, see: http://lists.freedesktop.org/archives/systemd-devel/2015-April/031348.html

update TODO

update TODO

update TODO

Update TODO

update TODO

update TODO

Update TODO

update TODO

update TODO

TODO: add 13790add4 as blocker for v220

update TODO

update TODO

update TODO

update TODO

TODO: yeah, now it makes sense

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

TODO: Nothing to be done for IPv6 DAD, handled by kernel

TODO

TODO

tmpfiles: port to unquote_many_words()

update TODO

add REMOTE_ADDR and REMOTE_PORT for Accept=yes

update TODO

update TODO

update TODO

update TODO

Update TODO

timedated: when performing "SetTime" compensate for program lag (David: fix up compile-failure and simplify code a bit)

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

TODO

Update TODO

TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

networkd-wait-online: add timeout Default to timing out after 120 seconds without a network connection. Setting a timeout of 0 disables the timeout.

networkd-wait-online: support globbing for ignored devices

TODO

systemctl: refuse --host with cat This might be fixed one day, but for now it's better to fail. https://bugzilla.redhat.com/show_bug.cgi?id=1186952

update TODO

update TODO

build-sys: add check for --help width

update TODO

update TODO

update TODO

TODO: remove laccess conversion I looked over all access invocations, and I think are using access() correctly. Accepting dangling symlinks makes sense only in special circumstances. So far we do not allow "flag" files like "/fastboot" to be dangling symlinks. We could, but I don't see a reason to.

update TODO

update TODO

update TODO

treewide: fix multiple typos

update TODO

update TODO

update TODO

update TODO

update TODO

TODO: tmpfiles

update TODO

update TODO

update TODO

update TODO

TODO: update

update TODO

update TODO

update TODO

TODO: DHCPv6 Information Request has been implemented

update TODO

Remove some fixed items from TODO

TODO: update

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

Update TODO

update TODO

Update TODO

update TODO

update TODO

tree-wide: spelling fixes https://github.com/vlajos/misspell_fixer https://github.com/torstehu/systemd/commit/b6fdeb618cf2f3ce1645b3315f15f482710c7ffa Thanks to Torstein Husebo <torstein@huseboe.net>.

update TODO

Update TODO

update TODO

update TODO

build-sys: do not use pkgconfig dbus-1.pc to find dbus directories Do not use the dbus-1.pc pkgconfig settings to determine dbus directories. Use directories relative to ${sysconfdir} and ${datadir} instead. This approach was suggested by Simon McVittie in: http://lists.freedesktop.org/archives/systemd-devel/2014-October/024388.html Tested by building and installing systemd without the dbus-devel installed. Without this patch, the dbus files and directories end up in the root of the filesystem. With this patch, they end up in the same locations as previously (assuming default ${sysconfdir} and ${datadir}) whether dbus-devel is present or not. Also made sure that `make check` works without dbus-devel installed.

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

import: rename 'poll-dck' to 'pull-dkr' I figure "pull-dck" is not a good name, given that one could certainly read the verb in a way that might be funny for 16year-olds. ;-) Also, don't hardcode the index URL to use, make it runtime and configure time configurable instead.

update TODO

update TODO

update TODO

update TODO

Update TODO

update TODO

update TODO

update TODO

update TODO

TODO: update Drop resolved kdbus issues.

update TODO

update TODO

update TODO

TODO

update TODO

mount: clarify that we really need to replace the utab inotify code with the native API for this in libmount, as soon as that's stable

shell-completion: systemctl edit

NEWS: prepare NEWS for new release

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

systemctl: add edit verb It helps editing units by either creating a drop-in file, like /etc/systemd/system/my.service.d/override.conf, or by copying the original unit from /usr/lib/systemd/ to /etc/systemd/ if the --full option is specified. It invokes an editor on temporary files related to the unit files and if the editor exited successfully, then it renames the temporary files to their original names (e.g. my.service or override.conf) and daemon-reload is invoked. If the temporary file is empty the modification is canceled. See https://bugzilla.redhat.com/show_bug.cgi?id=906824

update TODO

update TODO

update TODO

update TODO

update TODO

Update TODO kdbus eavesdropping was fixed!

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

reorder TODO a bit

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

test: support empty environment variables in unit files Also update TODO, empty environment variables in Environment= and EnvironmentFile= options work.

update TODO

update TODO

udev: switch to systemd logging functions

Update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

s/commandline/command line/g

update TODO

TODO: update

update TODO

update TODO

update TODO

TODO

Use log "level" instead of "priority" The term "priority" is misleading because higher levels have lower priority. "Level" is clearer and shorter. This commit touches only the textual descriptions, not function and variable names themselves. "Priority" is used in various command-line switches and protocol constants, so completly getting rid of "priority" is hard. I also left "priority" in various places where the clarity suffered when it was removed.

remove references of readahead

update TODO

update TODO

core: send sigabrt on watchdog timeout to get the stacktrace if sigabrt doesn't do the job, follow regular shutdown routine, sigterm > sigkill.

update TODO

update TODO

update TODO

update TODO

shell-completion: systemctl set-default,get-default,is-system-running

login: remove multi-seat-x

update TODO

update TODO

update TODO

update TODO

update TODO

TODO

update TODO

update TODO

update TODO

update TODO

update TODO

Update TODO

update TODO

update TODO

update TODO

update TODO

Set $NOTIFY_SOCKET for control procs if NotifyAccess=all

Update TODO

update TODO

update TODO

Update TODO

systemctl: add add-wants and add-requires verbs

Update TODO

Update TODO

update TODO

TODO: Remove Elapsed Time DHCPv6 option as it is done

TODO

update TODO

networkd: link - do not manage loopback links Fixes https://bugs.freedesktop.org/show_bug.cgi?id=83134.

Update TODO

update TODO

update TODO Yum was creating <container>/var/run/yum.pid and hence this directory was created before filesystem package could create the symlink /var/run -> /run. This should be now fixed in yum.

udev: remove userspace firmware loading support

update TODO

nspawn: fix --network-interface Use SETLINK when modifying an existing link.

update TODO

TODO

tmpfiles: make resolv.conf entry conditional on resolved support

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

Update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

timer: order OnCalendar units after timer-sync.target if DefaultDependencies=no Avoids triggering timers prematurely on systems with significantly inaccurate clocks, or some embedded platforms that lack one entirely.

update TODO

TODO

TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

resolved: RRSIG records

resolved: add identifiers for dnssec algorithms

update TODO

TODO

update TODO

update TODO

update TODO

update TODO

TODO: update resolved

TODO

update TODO

update TODO

update TODO

Update TODO

update TODO

shell-completion: systemd-analyze verify, systemctl link Some zsh completion helpers were not installed, so completion was broken. Add systemd-analyze verify. Make systemctl link complete only unit names.

sd-network: drop get_ifindices People should use rtnl for this, and then only query sd-network by the ifindices it finds.

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

TODO

networkd: make metric of routes configurable Now route metric can be configuted via conf file: example conf: [Match] Name=em1 [Route] Gateway=192.168.1.12 Metric=10 Test: ip route output default via 192.168.1.12 dev em1 metric 10 [tomegun: squash TODO update and reword man page a bit]

TODO: update networkd

update TODO

update TODO

update TODO

networkd TODO: add more bonding options Add more bonding option in TODO section

networkd todo : remove tun/tap Remove tun/tap from todo

update TODO

update TODO

update TODO

update TODO

update TODO

networkd: netdev - add dummy support

update TODO

update TODO

networkd: link - ignore missing MAC address Currently DHCP/IPv4LL only works on ethernet devices, but no reason not to otherwise manage them.

update TODO

update TODO

update TODO

networkd: dhcp - use same metric for all DHCP-related routes

update TODO

update TODO

update TODO

update TODO

TODO: Add items for the DHCPv6 implementation

update TODO

update TODO

Trim TODO

core/snapshot: log info when snapshots are created and removed Snapshot mechanism is not used very much, but snapshot creation/destruction should be at least as verbose as normal unit starting/stopping.

core/transaction: avoid misleading error message when unit not found There's no point in telling the user to look at the logs when an attempt to load the unit file failed with ENOENT. https://bugzilla.redhat.com/show_bug.cgi?id=996133

update TODO

update TODO

update TODO

TODO: update

TODO: update

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

fsck: disable "-l" option for now https://bugs.freedesktop.org/show_bug.cgi?id=79576#c5

update TODO

update TODO

update TODO

sd-dhcp-client: factor out dhcp packet allocation

TODO IFLA_IPTUN_PMTUDISC IFLA_IPTUN_FLAGS (ISA_TAP) FLA_IPTUN_6RD_PREFIX FLA_IPTUN_6RD_RELAY_PREFIX IFLA_IPTUN_6RD_PREFIXLEN IFLA_IPTUN_6RD_RELAY_PREFIXLEN

networkd-wait-online: wait for addresses to be configured

timesyncd: only attempt to connect when an address is configured For now, we accept both link-local and routable addresses, maybe we want to restrict ourselves to routable addresses only.

update TODO

update TODO

update TODO

TODO

TODO

Update TODO

update TODO

Make systemctl --root look for files in the proper places Running systemctl enable/disable/set-default/... with the --root option under strace reveals that it accessed various files and directories in the main fs, and not underneath the specified root. This can lead to correct results only when the layout and configuration in the container are identical, which often is not the case. Fix this by adding the specified root to all file access operations. This patch does not handle some corner cases: symlinks which point outside of the specified root might be interpreted differently than they would be by the kernel if the specified root was the real root. But systemctl does not create such symlinks by itself, and I think this is enough of a corner case not to be worth the additional complexity of reimplementing link chasing in systemd. Also, simplify the code in a few places and remove an hypothetical memory leak on error.

core: sysvcompat - $network should be equivalent to network-online, rather than network target Most likely the facility needed is actual connectivity, rather than whether or not the network managment daemon is running. We also need to explicitly pull in the network-online.target, as it is not active by default. This means {systemd-networkd,NetworkManager}-wait-online.service, can be enabled by default as part of network-online.target, and only delay boot when some service actively pulls it in. See: <https://bugzilla.gnome.org/show_bug.cgi?id=728965> Cc: Pavel Šimerda <psimerda@redhat.com> Cc: Michal Sekletar <msekleta@redhat.com>

networkd: Add todo patch kernel for tunnel module alias Add to todo : 1. Patch kernel to support module alias for tunnel device 2. Remove libkmod dependency from networkd

doc: typographical fine tuning

doc: use non-contracted forms in written documents

update TODO

update TODO

update TODO

update TODO

TODO

update TODO

update TODO

TODO: network

networkd: update TODO

update TODO

update TODO

update TODO

update TODO

systemctl: add --recursive for list-timers

update TODO

update TODO

journal: properly detect language specified in line ... it turns out that the duplicates in our own catalog were not real duplicates, but translations.

systemctl: update NAME to PATTERN in help() Previously the man page was modified, but not help().

networkd: smooth transition from ipv4ll to dhcp address Currently when both ipv4ll and dhcp are enabled, ipv4ll address (if one has been claimed) is removed when dhcp address is aquired. This is not the best thing to do since there might be clients unaware of the removal trying to communicate. This patch provides a smooth transition between ipv4ll and dhcp. If ipv4ll address was claimed [1] before dhcp, address is marked as deprecated. Deprecated address is still a valid address and packets can be received on it but address cannot be selected as a source address. If dhcp lease cannot be extended, then ipv4ll address is marked as valid again. [1] If there is no collision, claiming IPv4LL takes between 4 to 7 seconds.

TODO

completions: fix/augment zsh completions for systemd-nspawn, busctl, loginctl, hostnamectl, localectl, machinectl

update TODO

update TODO

core: remove tcpwrap support tcpwrap is legacy code, that is barely maintained upstream. It's APIs are awful, and the feature set it exposes (such as DNS and IDENT access control) questionnable. We should not support this natively in systemd. Hence, let's remove the code. If people want to continue making use of this, they can do so by plugging in "tcpd" for the processes they start. With that scheme things are as well or badly supported as they were from traditional inetd, hence no functionality is really lost.

update TODO

sd-bus: mark sd_bus_unref() as broken regarding self-refs If you allocate a message with bus==NULL and then unref the main bus, it will free your message underneath and your program will go boom! To fix that, we really need to figure out what the semantics for self-references (m->bus) should be and when/where/what accesses are actually allowed. Same is true for the pseudo-thread-safety we employ..

sd-ipv4ll/networkd: generate predictable addresses Increase the chance of using the same link local address between reboots. The pseudo random sequence of addresses we attempt is now seeded with data that is very likely to stay the same between reboots, but at the same time be unique to the specific machine/nic. First we try to use the ID_NET_NAME_* data from the udev db combined with the machin-id, which is guaranteed to be unique and persistent, if available. If that is not possible (e.g., in containers where we don't have access to the udev db) we fallback to using the MAC address of the interface, which is guaranteed to be unique, and likely to be persistent. [tomegun: three minor changes: - don't expose HASH_KEY in the siphash24 header - get rid of some compile-warnings (and some casts at the same time), by using uint8_t[8] rather than uint64_t in the api - added commit message]

update TODO

TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

udate TODO

update TODO

update TODO

update TODO

networkd: netdev - support joining already existing netdevs

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

man: ipv4 link-local

update TODO

update TODO

update TODO

sd-network: IPv4 link-local support [v2] Implements IPv4LL with respect to RFC 3927 (http://tools.ietf.org/rfc/rfc3927.txt) and integrates it with networkd. Majority of the IPv4LL state machine is taken from avahi (http://avahi.org/) project's autoip. IPv4LL can be enabled by IPv4LL=yes under [Network] section of .network file. IPv4LL works independent of DHCP but if DHCP lease is aquired, then LL address will be dropped. [tomegun: removed a trailing newline and a compiler warning]

update TODO

update TODO

update TODO

TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

manager: be more precise in message about restart

update TODO

update TODO

update TODO

update TODO

update TODO

update TODO

net-match: fix Driver= match It should match on the driver of the parent device.

update TODO

Update TODO

TODO: remove done item strv_append was removed in e3e45d4f82daa5cd85ba40dde9127df900096c0c

nspawn: add new --network-bridge= switch This adds the host side of the veth link to the given bridge. Also refactor the creation of the veth interfaces a bit to set it up from the host rather than the container. This simplifies the addition to the bridge, but otherwise the behavior is unchanged.

sd-rtnl: message_open_container - don't take a 'size' argument We can always know the size based on the type, so let's do this inside the library.

update TODO

update TODO

update TODO

syscallfilter: port to libseccomp

update TODO (add section for things to fix before 209)

update TODO

update TODO

core: do not print invalid utf-8 in error messages

nspawn: rename --file-label to --apifs-label since it's really just about the API file systems, nothing else

core: when an already abandoned unit gets abandoned again generate a clean error

TODO: update sd-rtnl section

update TODO

bus: reorder a few things

resolve: update sd-resolve to match the other APIs in style and functionality

bus: when we cannot bus activate a service because we go down, drop one message from the queue

TODO: update ps can display slice unit for a process. https://gitorious.org/procps/procps/commit/93e7872995d0d1ae850e12fb5fdd64928e2d5e60

bus: change API to expose "inverted" no_reply and no_auto_start message flags non-inverted

update TODO

bus: temporarily disable faking of seclabels, as this is broken in kdbus right now

TODO: update

update TODO

update TODO

sd-resolve: rename get_next() and get_n_queries() + cleanup

sd-resolve: get rid of sd_resolve_freeanswer()

Update TODO

update TODO

libsystemd-bus: rename to libsystemd Documentation was updated to refer to either 'libsystemd' or 'sd-bus' in place of libsystemd-bus.