configure: bump version number

coredump: dump priviliges when processing system coredumps Let's add an extra-safety net and change UID/GID to the "systemd-coredump" user when processing coredumps from system user. For coredumps of normal users we keep the current logic of processing the coredumps from the user id the coredump was created under. Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=87354

configure.ac: Fix help text of --enable-* options Fixes #2567

utf8.[ch] et al: use char32_t and char16_t instead of int, int32_t, int16_t rework C11 utf8.[ch] to use char32_t instead of uint32_t when referring to unicode chars, to make things more expressive. [ @zonque: * rebased to current master * use AC_CHECK_DECLS to detect availibility of char{16,32}_t * make utf8_encoded_to_unichar() return int ]

build-sys: allow building man pages even if disabled in ./configure This is purely for developer convenience: building man pages is slow so people tend to disable them when not working on documentation. But sometimes it is useful to build the man page to look something up, especially when working on an older machine which has outdated documentation, or to test some change to documentation. The rules to build man pages are now outside of the ENABLE_MANPAGES conditional, but they are not used unless manually invoked, and only the inclusion of man pages in build and install targets is affected by the conditional. Also, more generated files are removed in clean, which seems to be good thing, and Makefile.am is simplified.

build-sys: refactor `have_smack` detection

build-sys: fix ./configure --enable-smack Fixes: $ ./configure ... --enable-smack $ make src/core/load-fragment-gperf.c $ grep -i smack src/core/load-fragment-gperf.c {"Swap.SmackProcessLabel", config_parse_warn_compat, DISABLED_CONFIGURATION, 0}, ... should be {"Swap.SmackProcessLabel", config_parse_exec_smack_process_label, 0, offsetof(Swap, exec_context)}, ...

importd: drop dkr support The current code is not compatible with current dkr protocols anyway, and dkr has a different focus ("microservices") than nspawn anyway ("whole machine containers"), hence drop support for it, we cannot reasonably keep this up to date, and it creates the impression we'd actually care for the microservices usecase.

build-sys: libgcrypt error messages make no sense without libgpg-error Hence, pull in this library too, if we need libgcrypt.

build: fix systemd-journal-upload installation Fixes: $ ./configure ... --disable-microhttpd --enable-libcurl --enable-sysusers $ make && make install DESTDIR=$(pwd)/INST $ ls INST/usr/lib/sysusers.d/ basic.conf systemd.conf There is no a file with `systemd-journald-upload`

build: bump version numbers Prepare for v228 release and bump version numbers.

build-sys: temporarily lower libmount version check util-linux 2.27.1's configure.ac still claims to be 2.27.0, which breaks our version check. Lower it back to 2.27.0 until util-linux gets a fixed tarball. See #1754

core: drop check for /etc/mtab util-linux 2.27.1 now entirely stops looking at /etc/mtab, so we don't need to verify /etc/mtab during early boot any more. Later on, tmpfiles.d/etc.conf will fix /etc/mtab anyway, so there's not even a point in warning about it. Drop test_mtab() and bump the util-linux dependency to >= 2.17.1. Fixes #1495

build-sys: enable lz4 by default if available --enable-lz4 can be used to force lz4 requirement, --disable-lz4 can be used to skip lz4 support even if available. Also, make surrounding checks for bzip2, xz, and zlib similar in structure. This fixes the check for requested but missing bzip2.

build: libdl is needed only for libnss_resolve Not everything needs to link to libdl. dlopen+dlsym are used only by libnss_resolve.

build: don't link everything to libcap The intent of the assignments around the check for libcap was obviously to avoid polluting LIBS. To work properly, LIBS must be restored from the save_LIBS variable. The practical effect is small though, because pretty much everything links with libbasic, which links with CAP_LIBS.

build: fix overlinking to libdw We have two AC_CHECK_LIB checks for libdw. The first one has an empty action-if-found, so it defaults to adding "-ldw" to LIBS. LIBS are applied to everything we build. But only systemd-coredump needs libdw. It already links to ELFUTILS_LIBS correctly in Makefile.am. Drop the first AC_CHECK_LIB check. The second check is sufficient. Q: Don't we already use "-Wl,--as-needed" to eliminate overlinking? A: We do, but it is effective only for executables, not for shared libraries. This is due to a libtool bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=347650

build-sys: check for xsltproc when building manpages Only check for xsltproc if it will be used. If not found, complain. https://github.com/systemd/systemd/issues/1521

build-sys: use pkgconfig and lz4 and bump version The new frame api was released in v. 125.

configure.ac: bump version number

ask-password: add support for caching passwords in the kernel keyring This adds support for caching harddisk passwords in the kernel keyring if it is available, thus supporting caching without Plymouth being around. This is also useful for hooking up "gdm-auto-login" with the collected boot-time harddisk password, in order to support gnome keyring passphrase unlocking via the HDD password, if it is the same. Any passwords added to the kernel keyring this way have a timeout of 2.5min at which time they are purged from the kernel.

missing.h : add bridge params

build-sys: only use AM_PATH_LIBGCRYPT macro if it exists If gcrypt's m4 macro files aren't installed, with this change, gcrypt will be disabled --- unless gcrypt support was explicitly requested by passing --enable-gcrypt to configure, in which case it will fail. Without this change, autoconf would fail either way with not being able to resolve AM_PATH_LIBGCRYPT.

build: remove AC_FUNC_MALLOC What is the rationale to have AC_FUNC_MALLOC? It does not actually abort the configure run if an "unsuitable" malloc was found, and instead just replaces malloc by rpl_malloc, for which systemd however has no definition, either. Remove the call.

build-sys: Check behavior of -Werror=shadow before deciding to use it gcc versions 4.6 and earlier used to complain when a local variable shadows a global function, 4.7 and above only complain if a local variable shadows a global variable. Fix this by checking whether gcc 4.7+ behavior is in place before deciding to use -Werror=shadow in $(CFLAGS), by using a custom test program source that shadows a global function with a local variable and confirming that -Werror=shadow does not make the compile to break. Tested: - On gcc 4.7 and 4.8, confirmed nothing changed (other than the order of the -Werror=shadow argument, going to the end of CFLAGS.) - On gcc 4.6, confirmed by looking at the config.log output that the check for -Werror=shadow failed and it was not included in CFLAGS. - Ran `make V=1` to confirm -Werror=shadow was still in use, introduced a bogus shadowing issue and confirmed it was caught when building with a recent gcc.

mount: use libmount to monitor mountinfo & utab The current implementation directly monitor /proc/self/mountinfo and /run/mount/utab files. It's really not optimal because utab file is private libmount stuff without any official guaranteed semantic. The libmount since v2.26 provides API to monitor mount kernel & userspace changes and since v2.27 the monitor is usable for non-root users too. This patch replaces the current implementation with libmount based solution. Signed-off-by: Karel Zak <kzak@redhat.com>

smack: label /etc/mtab as "_" when '--with-smack-run-label' is enabled. /etc/mtab should be labeled as "_", even though systemd has its own smack label using '--with-smack-run-label' configuration. This is mainly because all processes could read that file and the origin of this file (i.e. /proc/mounts) is labeled as "_". This labels /etc/mtab as "_" when '--with-smack-run-label' is enabled.

build: prepare for v226 Bump version info and update NEWS for the upcoming release.

build-sys: remove sphinx binary from configure summary We no longer use sphinx as part of the build process so remove it from the configure summary as well. This is a leftover from commit 2799e519cabb6dfa99341b9a56ebd4dc2a4ec22a.

build-sys: Look for gcc-* binutils wrappers only if we're using GCC If we don't look for them, LT_INIT will and default to the unprefixed tools. Apparently clang doesn't like the wrappers being used. Should fix #1077.

build-sys: bump versions

build-sys: line-wrap message about google servers This way it is more readable in a wall of configure output.

build-sys: allow skipping installation of completions ./configure --with-bashcompletiondir=no or --without-bashcompletiondir now works as expected. Similarly for zsh. https://github.com/systemd/systemd/issues/533

build: bump version to 224 Prepare for bug-fix release and bump versions.

build-sys: use 'test -f' instead of AC_CHECK_FILE AC_CHECK_FILE fails when cross-compiling. It is intended to be used to check for files that are used at runtime during build time (e.g. /etc/passwd, /dev/*) [1]. For files which are only used at build time 'test -f' is sufficient. [1]: https://lists.gnu.org/archive/html/autoconf/2000-10/msg00018.html

build: bump version info Bump version to 223 and increase libsystemd libtool-info as we added a structure-member (without increasing structure size) to sd-bus-vtable.

terminal: drop unfinished code This drops the libsystemd-terminal and systemd-consoled code for various reasons: * It's been sitting there unfinished for over a year now and won't get finished any time soon. * Since its initial creation, several parts need significant rework: The input handling should be replaced with the now commonly used libinput, the drm accessors should coordinate the handling of mode-object hotplugging (including split connectors) with other DRM users, and the internal library users should be converted to sd-device and friends. * There is still significant kernel work required before sd-console is really useful. This includes, but is not limited to, simpledrm and drmlog. * The authority daemon is needed before all this code can be used for real. And this will definitely take a lot more time to get done as no-one else is currently working on this, but me. * kdbus maintenance has taken up way more time than I thought and it has much higher priority. I don't see me spending much time on the terminal code in the near future. If anyone intends to hack on this, please feel free to contact me. I'll gladly help you out with any issues. Once kdbus and authorityd are finished (whenever that will be..) I'll definitely pick this up again. But until then, lets reduce compile times and maintenance efforts on this code and drop it for now.

Add bridge NL params to missing.h

Tunnel NL params: Add to missing.h

add NL parameters to missing.h

build-sys: Use slim LTO objects if possible While 235c6e6 gets LTO builds running again, it goes back to using fat LTO objects instead of using gcc-{ar,nm,ranlib}. Building these fat objects takes significantly more time. Use the suggested solution and look for gcc-{ar,nm,ranlib}, which launch the binutils tools with the appropriate --plugin parameter. GCC versions that do not ship these should either default to -ffat-lto-objects or do not support LTO at all. On another note, nm from binutils 2.25 seems to be smart enough to load the LTO plugin when needed without having to specify --plugin.

build-sys: warn if people don't change the default NTP servers when building systemd Also, explain the situation in the docs. Relates to #437

Bump version to 222

Remove python-systemd python-system has moved to it's own repository: https://github.com/systemd/python-systemd

smack: add default smack process label config Similar to SmackProcessLabel=, if this configuration is set, systemd executes processes with given SMACK label. If unit has SmackProcessLabel=, this config is overwritten. But, do NOT be confused with SMACK64EXEC of execute file. This default execute process label(and also label which is set by SmackProcessLabel=) is set fork-ed process SMACK subject label and used to access the execute file. If the execution file has also SMACK64EXEC, finally executed process has SMACK64EXEC subject. While if the execution file has no SMACK64EXEC, the executed process has label of this config(or label which is set by SmackProcessLabel=). Because if execution file has no SMACK64EXEC then excuted process inherits label from caller process(in this case, the caller is systemd).

build-sys: bring back an intltool-update workaround Currently, 'make distcheck' fails with an error such as this: srcdir=../../po /usr/bin/intltool-update -m The following files contain translations and are currently not in use. Please consider adding these to the POTFILES.in file, located in the po/ directory. build2/src/core/org.freedesktop.systemd1.policy.in build3/src/core/org.freedesktop.systemd1.policy.in [...] This is caused by a new behavior of autmake 1.15 which changed the location of the build tree during 'make distcheck', and the fact that intltool doesn't yet ignore that paths. We used to have a workaround in configure.ac that makes the failing call a no-op, but it was accidentially removed in 23756070 ("remove gudev and gtk-doc"). Bring back that snipet for now, until intltool and automake sorted out their issues and like each other again. Also see https://bugs.launchpad.net/intltool/+bug/1117944

build-sys: bump versions and sonames

turn kdbus support into a runtime option ./configure --enable/disable-kdbus can be used to set the default behavior regarding kdbus. If no kdbus kernel support is available, dbus-dameon will be used. With --enable-kdbus, the kernel command line option "kdbus=0" can be used to disable kdbus. With --disable-kdbus, the kernel command line option "kdbus=1" is required to enable kdbus support.

build-sys: Drop include_prefix Appears to be unused and a leftover from the udev merge.

build-sys: simplify lib dependencies

build-sys: suppress warnings of unused results Unfortunately, gcc keeps warning about those even when we use an explicit (void) cast to indicate we are not interested in the result. LLVM's clang does not have that issue and works fine with the casts. GCC bug being tracked at: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66425 Until that GCC bug is fixed (and the version with the fix is in many/most distributions) or we switch to LLVM as the default compiler, it looks like we'll have to disable this warning by default... Tested by building files known to present warnings about unused results without the suppression, confirmed that the warnings were no longer present with this patch applied. This partially reverts commit 00c11bc53a1d37 ("build-sys: don't suppress irrelevant warnings").

build-sys: upgrade shadow variable warnings to errors

build-sys: turn some warnings into errors Make the build sys error out on missing function prototypes, missing variable declarations, implicit function declarations or forgotten return statements. None of these conditions are acceptable, and by making them hard errors, the build bots can detect them earlier.

build-sys: don't suppress irrelevant warnings We do not trigger these warnings so no need to suppress them.

build-sys: disable gc-sections if optimization is disabled This way, development builds will not rely on gc-sections to paper over cyclic link dependencies. Newly introduced broken link requirements will immediatley fail.

build-sys: drop references to gobject-introspection It has been removed alongside gudev

build-sys: Work around --with-rootprefix= (empty) not producing / Since we introduced AX_NORMALIZE_PATH, using --with-rootprefix=/ does produce an empty string, but using --with-rootprefix= (empty) now produces "." instead which is wrong. Work around it until we can find a better solution for AX_NORMALIZE_PATH upstream at autoconf-archive. Bug: https://github.com/systemd/systemd/issues/54

configure.ac: add missing komma

point to github issues instead of freedesktop bugzilla

remove gudev and gtk-doc The library moved to: https://git.gnome.org/browse/libgudev/

build-sys: Normalize paths of configure options Strip trailing slashes from options such as --with-rootprefix, so that building with rootprefix="/" results in paths like "/lib" instead of "//lib". Also handle paths such as "/usr/" gracefully. Use m4/ax_normalize_path.m4 from the autoconf-archive project, which is now included in our tree as per usual practices in using autoconf-archive macros. Tested with the following configure options: ./configure \ --with-rootprefix=/ \ --with-rootlibdir=/lib64/ \ --prefix=/usr/ \ --libdir=/lib/ \ --with-bashcompletiondir=/bash-completion/completions/ (The "prefix" and "libdir" are already automatically normalized by Autoconf, this command is testing the others.) Compared the config.log and resulting trees (in particular man pages) to confirm double slashes were not present in the latter. Also tested that a configuration using default options is not affected and that `make distcheck` still works as expected.

build-sys: pass originally configured --enable-split-usr to distcheck Previously we always ran distcheck with --disable-split-usr. This caused test-path-util to fail with Assertion 'fsck_exists("minix") == 0' failed at ../src/test/test-path-util.c:224, function test_fsck_exists(). Aborting. as looking up fsck.minix would only look into DEFAULT_PATH_NORMAL, but on these systems fsck is in /sbin/.

systemctl: drop hardcoded chkconfig invocation Introduce /usr/lib/systemd/systemd-sysv-install [--root=] <action> <name> abstraction, replacing the direct calling of chkconfig. This allows distributions to call their specific tools like update-rc.d without patching systemd. Ship systemd-sysv-install.SKELETON as an example for packagers how to implement this. Drop the --enable-chkconfig configure option. Document this in README and point to it in NEWS.

missing: add more IFLA_VXLAN_* defines Otherwise building faild with kernel headers < v3.16

missing: add more IFLA_VXLAN_* defines Otherwise building faild with kernel headers < v3.16

build-sys: bump library and package versions

Default to /usr/bin/u?mount, configurable, rather than hard-coded /bin/u?mount.

journal: add int↔audit type name mapping

build-sys: efi - use $EFI_LIB_DIR https://bugs.freedesktop.org/show_bug.cgi?id=89982

build: allow setting OBJCOPY

configure: allow setting EFI_CC

efi: use EFI_CC

build: add AARCH64 efi support This is just plumbing to add ARCH_AARCH64 EFI support for makefile tests and defining the machine name.

configure: sign-compare is part of extra Remove sign-compare as we already get it from extra

missing.h: define IFA_FLAGS if it is missing

missing.h: add NDA_* This is necessary to build with older kernel headers. NDA_VLAN was introduced in v3.9 and NDA_PORT, NDA_VNI and NDA_IFINDEX in v3.10

build-sys: fix check for efi-lds file Using the DIR macro breaks caching and has no benefit as it only offers performance improvements when AS_FOR is used with a single element list. Also --with-lds-dir= was broken as we never set have_efi_lds in this case. Fix this and check if PATH actually contains the efi-lds file.

build-sys: allow lto and FORTIFY_SOURCE with -O[sz] https://bugs.freedesktop.org/show_bug.cgi?id=89382

build-sys: fail if gnuefi files are not found The build would fail later anyway, so it is better to bail out early. Also check for the second bios file only if the first one was not found. I'm not sure which one is preferred. If the other one, the order should be flipped.

build: add -Wno-format-signedness gcc5 introduced this option (gcc4 silently ignores it, which is fine). Given that gcc5 thinks 'unsigned char'/'unsigned short' is promoted to 'int' for var-args, stuff like this spits out warnings: uint8_t x; printf("%" PRIu8", x); gcc5 promots 'x' to 'int', instead of 'unsigned int' and thus gets a signedness-warnings as it expects an 'unsigned int'. glibc states otherwise: unsigneds are always promoted to 'unsigned int'. Until gcc and glibc figure this out, lets just ignore that warning (which is totally useless in its current form).

Add gettext support

sd-boot: add EFI boot manager and stub loader

sd-rtnl: add missing IFLA_INET6_ADDR_GEN_MODE definition Add missing IFLA_INET6_ADDR_GEN_MODE definition so we can build with kernel headers < 3.17

build-sys: already bump package version in preparation for next release (don't misunderstand this, the release is still out quite a bit...)

build-sys: make xz and zlib build-time optional again

build-sys: make bzip2 really optional

build-sys: unbundle unifont We should prefer the unifont.hex file from the system, instead of our own. Upstream has made a few releases since our version was included, and we should follow upstream changes. But adding 2.6MB to our source repo every time upstream releases is not nice.

build-sys: lookup for sulogin, it might not be in /sbin

tmpfiles: use ACL magic on journal directories

import: introduce new mini-daemon systemd-importd, and make machinectl a client to it The old "systemd-import" binary is now an internal tool. We still use it as asynchronous backend for systemd-importd. Since the import tool might require some IO and CPU resources (due to qcow2 explosion, and decompression), and because we might want to run it with more minimal priviliges we still keep it around as the worker binary to execute as child process of importd. machinectl now has verbs for pulling down images, cancelling them and listing them.

build: Add parallel-tests automake option We use PY_LOG_COMPILER in Makefile.am for running *.py tests, which requires automake's parallel test runner. This has only been the default from 1.13 on. As we only require automake 1.11, add it as an option explicitly.

import: support downloading bzip2-encoded images This way, we can import CoreOS images unmodified.

networkd: netdev - add ipvlan support

import: support importing qcow2 images With this change the import tool will now unpack qcow2 images into normal raw disk images, suitable for usage with nspawn. This allows has the benefit of also allowing importing Ubuntu Cloud images for usage with nspawn.

shared: add minimal firewall manipulation helpers for establishing NAT rules, using libiptc

build: print conditions of ldconfig, hibernate configs

util: make use of kcmp() to compare fds, if it is available

machinectl/machined: implement "rename", "clone", "read-only" verbs for machine images

configure.ac: keep posix compat for string tests '==' and '=' are equivalent in /bin/bash, but POSIX compliant shells do not understand '==.'

build-sys: remove references to dbusinterfacedir This directory is not used by systemd. Tested by running a full build, running `make install` and comparing the file list in the target trees and making sure that `make distcheck` still works.

build-sys: do not use pkgconfig dbus-1.pc to find dbus directories Do not use the dbus-1.pc pkgconfig settings to determine dbus directories. Use directories relative to ${sysconfdir} and ${datadir} instead. This approach was suggested by Simon McVittie in: http://lists.freedesktop.org/archives/systemd-devel/2014-October/024388.html Tested by building and installing systemd without the dbus-devel installed. Without this patch, the dbus files and directories end up in the root of the filesystem. With this patch, they end up in the same locations as previously (assuming default ${sysconfdir} and ${datadir}) whether dbus-devel is present or not. Also made sure that `make check` works without dbus-devel installed.

import: rename 'poll-dck' to 'pull-dkr' I figure "pull-dck" is not a good name, given that one could certainly read the verb in a way that might be funny for 16year-olds. ;-) Also, don't hardcode the index URL to use, make it runtime and configure time configurable instead.

build: add option to disable hwdb [tomegun: fix Makefile-man.am, based on fix from Michael Biebl]

blkid: Warn when rejecting a superblock with a bad csum Bump libblkid requirement from 2.20 to 2.24. util-linux 2.25 is actually required since fdbbad981cc5da8bb4ed7e9b6646e7a114745ec5

journal: add debug mode for mmap-cache (--enable-debug=mmap-cache) This is useful for exposing unsafe access to mmapped objects after the context that they were mapped in was already moved. For example: journal_file_move_to_object(f1, OBJECT_DATA, p1, &o1); journal_file_move_to_object(f2, OBJECT_DATA, p2, &o2); t = o1->object.type; /* this usually works, but is unsafe */

configure.ac: add a generic --enable-debug, replace --enable-hashmap-debug There will be more debugging options later. --enable-debug will enable them all. --enable-debug=hashmap will enable only hashmap debugging. Also rename the C #define to ENABLE_DEBUG_* pattern.

build-sys: bump package and library versions in preparation for 218 release

bus-proxy: cloning smack label When dbus client connects to systemd-bus-proxyd through Unix domain socket proxy takes client's smack label and sets for itself. It is done before and independent of dropping privileges. The reason of such soluton is fact that tests of access rights performed by lsm may take place inside kernel, not only in userspace of recipient of message. The bus-proxyd needs CAP_MAC_ADMIN to manipulate its label. In case of systemd running in system mode, CAP_MAC_ADMIN should be added to CapabilityBoundingSet in service file of bus-proxyd. In case of systemd running in user mode ('systemd --user') it can be achieved by addition Capabilities=cap_mac_admin=i and SecureBits=keep-caps to user@.service file and setting cap_mac_admin+ei on bus-proxyd binary.

build-sys: configure the list of system users, files and directories Choose which system users defined in sysusers.d/systemd.conf and files or directories in tmpfiles.d/systemd.conf, should be provided depending on comile-time configuration.

mount: use libmount to enumerate /proc/self/mountinfo This lets libmount add in user options from /run/mount/utab, like _netdev which is needed to get proper ordering against remote-fs.target

terminal/idev: add compose-file support Add support for compose files to idev-keyboard. This requires libxkbcommon-0.5.0, which is pretty new, but should be fine. We don't use the compose-files, yet. Further commits will put life into them.

localed: validate xkb keymaps Introduce a new optional dependency on libxkbcommon for systemd-localed. Whenever the x11 keymap settings are changed, use libxkbcommon to compile the keymap. If the compilation fails, print a warning so users will get notified. On compilation failure, we still update the keymap settings for now. This patch just introduces the xkbcommon infrastructure to have keymap validation in place. We can later decide if/how we want to enforce this.

missing: add IFLA_BRPORT_LEARNING and friends IFLA_BRPORT_LEARNING was added in v3.10-rc4-583-g9ba18891f7, and IFLA_BRPORT_UNICAST_FLOOD in v3.10-rc4-584-g867a59436f.

configure.ac: add --enable-hashmap-debug option The option simply enables hashmap debugging by defining ENABLE_HASHMAP_DEBUG. I suggest developing new code with it enabled, to have the iterator checks.

util: make use of the new getrandom() syscall if it is available when needing entropy Doesn't require an fd, and could be a bit faster, so let's make use of it, if it is available.

build-sys: bump version number in preparation for release

login: remove multi-seat-x

missing: remove fanotify It was only used in readahead.

build-sys: use -Wno-gnu-variable-sized-type-not-at-end under clang Otherwise we get useless warnings about journal code.

build-sys: use -Wno-typedef-redefinition only for clang Our checks for -Wno-xxx switches do not work with gcc [1]. [1] https://gcc.gnu.org/wiki/FAQ#wnowarning

build-sys: use linux/memfd.h if available linux/memfd.h was added linux 3.17, so it might not be widely available for a while. Also, check if memfd_create is defined, for the HAVE_LINUX_MEMFD_H check to have a chance of succeeding. Also, collapse all ifdefs for memfd-related stuff, because they were all added together so there's no need to check separately.

make utmp/wtmp support configurable This adds --disable-utmp option to configure. If it is used, all utmp-related functionality, including querying runlevel support, is removed.

readahead: wipe out readahead

terminal: add graphics interface The grdev layer provides graphics-device access via the libsystemd-terminal library. It will be used by all terminal helpers to actually access display hardware. Like idev, the grdev layer is built around session objects. On each session object you add/remove graphics devices as they appear and vanish. Any device type can be supported via specific card-backends. The exported grdev API hides any device details. Graphics devices are represented by "cards". Those are hidden in the session and any pipe-configuration is automatically applied. Out of those, we configure displays which are then exported to the API user. Displays are meant as lowest hardware entity available outside of grdev. The underlying pipe configuration is fully hidden and not accessible from the outside. The grdev tiling layer allows almost arbitrary setups out of multiple pipes, but so far we only use a small subset of this. More will follow. A grdev-display is meant to represent real connected displays/monitors. The upper level screen arrangements are user policy and not controlled by grdev. Applications are free to apply any policy they want. Real card-backends will follow in later patches.

build: colorize gcc only if on tty Rather than forcing gcc to always produce colorized error messages whether on tty or not, enable automatic colorization by ensuring GCC_COLORS is set to a non-empty string. Doing it this way removes the need for workarounds in ~/.emacs or ~/.vimrc for "M-x compile" or ":make", respectively, to work.

build-sys: configure option to disable hibernation

udev: remove userspace firmware loading support

terminal: add xkb-based keyboard devices to idev The idev-keyboard object provides keyboard devices to the idev interface. It uses libxkbcommon to provide proper keymap support. So far, the keyboard implementation is pretty straightforward with one keyboard device per matching evdev element. We feed everything into the system keymap and provide proper high-level keyboard events to the application. Compose-features and IM need to be added later.

terminal: add evdev elements to idev The evdev-element provides linux evdev interfaces as idev-elements. This way, all real input hardware devices on linux can be used with the idev interface. We use libevdev to interface with the kernel. It's a simple wrapper library around the kernel evdev API that takes care to resync devices after kernel-queue overflows, which is a rather non-trivial task. Furthermore, it's a well tested interface used by all other major input users (Xorg, weston, libinput, ...). Last but not least, it provides nice keycode to keyname lookup tables (and vice versa), which is really nice for debugging input problems.

tmpfiles: make resolv.conf entry conditional on resolved support

build-sys: update versions for upcoming release

hashmap: try to use the existing 64bit hash functions for dev_t if it is 64bit

ldconfig: add configure option to disable

resolved: handle IDNA domains Make sure we format UTF-8 labels as IDNA when writing them to DNS packets, and as native UTF-8 when writing them to mDNS or LLMNR packets. When comparing or processing labels always consider native UTF-8 and IDNA formats equivalent.

build-sys: check for intltool also when polkit is enabled intltool is needed for nls _and_ polkit, thus the check needs to be changed to do the test whenever one of them is enables. Without this build fails when configured with --disable-nls --enable-polkit

configure: add -Wno-typedef-redefinition Message-ID: <CAJ+BJsz9Qy-JU25dUuGT2n0LMNzcOpoJNGNtbf_boSuT_6hONw@mail.gmail.com>

Add IFLA_VTI defines to missing.h

ui/term: add line/cell/char handling for terminal pages This commit introduces libsystemd-ui, a systemd-internal helper library that will contain all the UI related functionality. It is going to be used by systemd-welcomed, systemd-consoled, systemd-greeter and systemd-er. Further use-cases may follow. For now, this commit only adds terminal-page handling based on lines only. Follow-up commits will add more functionality.

missing.h: add IFLA_MACVLAN_FLAGS Now we are getting into kernel < 3.4 territory... https://bugs.freedesktop.org/show_bug.cgi?id=80095

journal-remote: add units and read certs from default locations

build-sys: add check for libcurl

Fix build without any compression enabled

firstboot: add new component to query basic system settings on first boot, or when creating OS images offline A new tool "systemd-firstboot" can be used either interactively on boot, where it will query basic locale, timezone, hostname, root password information and set it. Or it can be used non-interactively from the command line when prepareing disk images for booting. When used non-inertactively the tool can either copy settings from the host, or take settings on the command line. $ systemd-firstboot --root=/path/to/my/new/root --copy-locale --copy-root-password --hostname=waldi The tool will be automatically invoked (interactively) now on first boot if /etc is found unpopulated. This also creates the infrastructure for generators to be notified via an environment variable whether they are running on the first boot, or not.

journal: add LZ4 as optional compressor Add liblz4 as an optional dependency when requested with --enable-lz4, and use it in preference to liblzma for journal blob and coredump compression. To retain backwards compatibility, XZ is used to decompress old blobs. Things will function correctly only with lz4-119. Based on the benchmarks found on the web, lz4 seems to be the best choice for "quick" compressors atm. For pkg-config status, see http://code.google.com/p/lz4/issues/detail?id=135.

build-sys: bump package and library versions

build-sys: disable NLS support if intltool is not found IT_PROG_INTLTOOL makes configure fail if intltool is not present. If we can not find intltool, then disable NLS (otherwise make in po/ fails since MSGFMT will not be defined.) Tested: Built it on a host without intltool. $ ./configure --enable-nls ... checking for intltool-merge... no configure: error: --enable-nls requested but intltool not found $ ./configure --disable-polkit ... checking for intltool-merge... no configure: WARNING: *** Disabling NLS support because intltool was not found checking whether NLS is requested... no ... $ make https://bugs.freedesktop.org/show_bug.cgi?id=79692

build-sys: add explicit support for --disable-nls In particular, disable intltool when --disable-nls is passed to configure. Tested: Built it on a host without intltool or gettext. $ ./configure --disable-nls --disable-polkit $ make

build-sys: require elfutils >= 158 The recently added stacktrace support in 8d4e028f uses functions added in elfutils 158. Check for one of the new functions to avoid attempting to build against older versions.

missing.h: add various network enums We used to check if e.g. IFLA_BOND_MAX is defined and provide fallback values in missing.h is it wasn't. But over time, various kernel versions added IFLA_* defines, so checking for IFLA_BOND_MAX is not enough if the kernel is new enough to have some of them but too old to have all. In case we detect that the latest known enum value is missing, #define most of them. https://bugs.freedesktop.org/show_bug.cgi?id=80095

build-sys: fail if python support requested but not found

build-sys: add verbosity to python-lxml detection in ./configure Be verbose when checking if Python module lxml is available. Also warn that Python support will be disabled when the lxml module is not present. Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=80005 Tested: - Without python-lxml package installed: $ ./configure checking for python extension module directory... ${exec_prefix}/lib64/python2.7/site-packages checking for python lxml module... no configure: WARNING: *** python support requires python-xml module installed - With python-lxml package installed: $ ./configure checking for python extension module directory... ${exec_prefix}/lib64/python2.7/site-packages checking for python lxml module... yes checking for PYTHON_DEVEL... yes ... Python: yes Python Headers: yes

coredump: include stacktrace of coredumps in the log message elfutils' libdw is maintained, can read DWARF debug data and appears to be the library of choice for generating backtraces today.

sysuser: generate default snippet incorporating TTY_GID properly When the user specifies --with-tty-gid= then we should honour that and write it to the snippet, too.

sysusers: add minimal tool to reconstruct /etc/passwd and /etc/group from static files systemd-sysusers is a tool to reconstruct /etc/passwd and /etc/group from static definition files that take a lot of inspiration from tmpfiles snippets. These snippets should carry information about system users only. To make sure it is not misused for normal users these snippets only allow configuring UID and gecos field for each user, but do not allow configuration of the home directory or shell, which is necessary for real login users. The purpose of this tool is to enable state-less systems that can populate /etc with the minimal files necessary, solely from static data in /usr. systemd-sysuser is additive only, and will never override existing users. This tool will create these files directly, and not via some user database abtsraction layer. This is appropriate as this tool is supposed to run really early at boot, and is only useful for creating system users, and system users cannot be stored in remote databases anyway. The tool is also useful to be invoked from RPM scriptlets, instead of useradd. This allows moving from imperative user descriptions in RPM to declarative descriptions. The UID/GID for a user/group to be created can either be chosen dynamic, or fixed, or be read from the owner of a file in the file system, in order to support reconstructing the correct IDs for files that shall be owned by them. This also adds a minimal user definition file, that should be sufficient for most basic systems. Distributions are expected to patch these files and augment the contents, for example with fixed UIDs for the users where that's necessary.

build-sys: update library versions

NEWS: add section about udev locking

build-sys: accommodate gcc-4.9.0 link-time optimization (LTO) changes systemd fails to build (symbols not found/resolved during cgls link step) under gcc-4.9.0 due to link-time optimization (lto) changes, in particular from gcc-4.9.0/NEWS: + When using a linker plugin, compiling with the -flto option now generates slim objects files (.o) which only contain intermediate language representation for LTO. Use -ffat-lto-objects to create files which contain additionally the object code. To generate static libraries suitable for LTO processing, use gcc-ar and gcc-ranlib; to list symbols from a slim object file use gcc-nm. (Requires that ar, ranlib and nm have been compiled with plugin support.) Both -flto and -ffat-lto-objects are now needed when building and linking against static libs w/LTO.

configure: networkd no longer requires kmod Reported by Samuli Suominen.

virt: rework container detection logic Instead of accessing /proc/1/environ directly, trying to read the $container variable from it, let's make PID 1 save the contents of that variable to /run/systemd/container. This allows us to detect containers without the need for CAP_SYS_PTRACE, which allows us to drop it from a number of daemons and from the file capabilities of systemd-detect-virt. Also, don't consider chroot a container technology anymore. After all, we don't consider file system namespaces container technology anymore, and hence chroot() should be considered a container even less.

build-sys: use glibc's xattr support instead of requiring libattr

build-sys: bump package and library version

build-sys: fix typo in variable name

logind: don't apply RemoveIPC= to system users We shouldn't destroy IPC objects of system users on logout. http://lists.freedesktop.org/archives/systemd-devel/2014-April/018373.html This introduces SYSTEM_UID_MAX defined to the maximum UID of system users. This value is determined compile-time, either as configure switch or from /etc/login.defs. (We don't read that file at runtime, since this is really a choice for a system builder, not the end user.) While we are at it we then also update journald to use SYSTEM_UID_MAX when we decide whether to split out log data for a specific client.

resolved: add daemon to manage resolv.conf Also remove the equivalent functionality from networkd.

build: Compile everything with PIE

networkd: also add IPv6 DNS servers by default

networkd: hardcode a set of default dns servers Similarly to NTP servers, this can be set at compile-time.

build-sys: at configure check for verifying that ln supports --relative

network: fix build failure, missing KMOD_XXX flags - Add KMOD_CFLAGS and KMOD_LIBS where appropiate - networkd now requires kmod. make --disable-kmod --enable-networkd to raise an error.

networkd, build-sys: spelling fix

Remove unnecessary casts in printfs No functional change expected :)

timesyncd: never accept NTP time from server that is older than systemd's release time

timesyncd: read server settings from a configuration file Also, allow compiling in a default server list via a configure command line item.

build-sys: enable timesyncd by default

timesyncd: add unit and man page

rename timedate-sntp to timesync

build-sys: add configure switch for -fsanitize=undefined --enable-undefined-sanitizer mirrors --enable-memory-sanitizer.

build: if -fstack-protector-strong is available, use it.

build-sys: prepare 212

core: remove tcpwrap support tcpwrap is legacy code, that is barely maintained upstream. It's APIs are awful, and the feature set it exposes (such as DNS and IDENT access control) questionnable. We should not support this natively in systemd. Hence, let's remove the code. If people want to continue making use of this, they can do so by plugging in "tcpd" for the processes they start. With that scheme things are as well or badly supported as they were from traditional inetd, hence no functionality is really lost.

missing: define LO_FLAGS_PARTSCAN if it is missing https://bugs.freedesktop.org/show_bug.cgi?id=76335

build-sys: bump required µhttpd version MHD_USE_EPOLL_LINUX_ONLY, MHD_USE_DUAL_STACK are only available in next-but-last release.

journal-gatewayd: check if certificate is signed by CA If --trust=ca.crt is used, only clients presenting certificates signed by the ca will be allowed to proceed. No hostname matching is performed, so any client wielding a signed certificate will be authorized. Error functions are moved from journal-gateway to microhttp-util and made non-static, since now they are used in two source files.

build-sys: add check on gnutls

build-sys: prepare release 211

build-sys: Find the tools for users with no /sbin:/usr/sbin in PATH since some systems still make the distiction between bin and sbin.

logind: make $XDG_RUNTIME_DIR a per-user tmpfs This way each user allocates from his own pool, with its own size limit. This puts the size limit by default to 10% of the physical RAM size but makes it configurable in logind.conf.

build-sys: bump revisions and version

configure: Do not require xsltproc for installation of man pages The release tarballs ship with pre-generated man pages, so we do not need xsltproc for a typical end-user build. Developers will probably have xsltproc anyway, but if not they will now encounter a build-time failure instead of an error in configure.

configure: show if networkd is enabled in status

core: Add AppArmor profile switching This permit to switch to a specific apparmor profile when starting a daemon. This will result in a non operation if apparmor is disabled. It also add a new build requirement on libapparmor for using this feature.

build-sys: don't use -Wcast-align anymore We do a lot of these casts, and they are all OK, so let's get rid of the warning, to make things quieter. http://lists.freedesktop.org/archives/systemd-devel/2014-February/017174.html

build-sys: Add setns() functions if not in the C library. Debian Stable is still using glibc 2.13, which doesn't provide the setns(). So we detect this and provide a tiny wrapper that issues the setns syscall towards the kernel.

build-sys: bump release in preparation for release

core: warn when unit files with unsupported options are parsed

core: rework syscall filter - Allow configuration of an errno error to return from blacklisted syscalls, instead of immediately terminating a process. - Fix parsing logic when libseccomp support is turned off - Only keep the actual syscall set in the ExecContext, and generate the string version only on demand.

syscallfilter: port to libseccomp

build-sys: make lxml required when generating indices Since the manpage indices generated without lxml would be missing some parts, it doesn't make sense to keep lxml optional anymore.

build-sys: create "compatibility libraries" section Compat stuff is moved to src/compat-libs/. Warnings are issued when programs are linked with the deprecated library.

build-sys: default to gold linker gold doesn't exhibit the problems with linking of compatibility libraries. It is also slightly faster: make clean && make -j5 bfd gold real 34.885s 33.707s user 34.486s 32.189s sys 9.929s 10.845s real 35.128s 33.508s user 34.660s 31.858s sys 10.798s 10.341s real 35.405s 33.748s user 34.765s 32.384s sys 11.635s 10.998s real 35.250s 33.795s user 34.704s 32.253s sys 11.220s 11.469s touch src/libsystemd/sd-bus.c && make -j5 bfd gold real 10.224s 9.030s user 11.664s 9.877s sys 3.431s 2.878s real 10.021s 9.165s user 11.526s 9.990s sys 3.061s 3.015s real 10.233s 8.961s user 11.657s 9.973s sys 3.467s 2.202s real 10.160s 9.086s user 11.637s 9.950s sys 3.188s 2.859s

build-sys: fix --enable-dbus The incorrect shell code of AS_IF always get false value, so it always build without dbus though build with "--enable-dbus" explicitely.

configure: use POSIX conformant syntax for test In shells like bash, == and = are equivalent in test contexts. In POSIX compliant shells, == isn't a valid operator.

build-sys: add --disable-dbus autoconf option

Use format patterns for usec_t, pid_t, nsec_t, usec_t It is nicer to predefine patterns using configure time check instead of using casts everywhere. Since we do not need to use any flags, include "%" in the format instead of excluding it like PRI* macros.

build-sys: fix generation of user@.service

build-sys: the pure/const warning options are probably too much as default, but let's make it available via "autogen.sh a"

bus: rename message "serial" to "cookie" Even if the lower-leveld dbus1 protocol calls it "serial", let's expose the word "cookie" for this instead, as this is what kdbus uses and since it doesn't imply monotonicity the same way "serial" does.

build-sys: build bus-driverd if kdbus support is enabled

Add bus-driverd systemd-bus-driverd is a small daemon that connects to kdbus and implements the org.freedesktop.DBus interface. IOW, it provides the bus functions traditionally taken care for by dbus-daemon. Calls are proxied to kdbus, either via libsystemd-bus (were applicable) or with the open-coded use of ioctl(). Note that the implementation is not yet finished as the functions to add and remove matches and to start services by name are still missing.

build-sys: warn if builds are not byte-by-byte reproducible due to usage of __DATE__ and suchlike

build-sys: fix help text for --enable-kdbus

bus: do kdbus only if this is enabled on the configure switch Since we want to retain the ability to break kernel ←→ userspace ABI after the next release, let's not make use by default of kdbus, so that people with future kernels will not suddenly break with current systemd versions. kdbus support is left in all builds but must now be explicitly requested at runtime (for example via setting $DBUS_SESSION_BUS). Via a configure switch the old behaviour can be restored. In fact, we change autogen.sh to do this, so that git builds (which run autogen.sh) get kdbus by default, but tarball builds (which ue the configure defaults) do not get it, and hence this stays out of the distros by default.

Revert "build-sys: avoid warnings from assert_cc" This reverts commit f1a1264d13b31b9f5521f482d9a5a9d78da55efb. We can turn this off with a pragma only on old gcc. Newer gcc doesn't need this, so let's not turn this off for everybody.

build-sys: use C99 We already use various constructs, so let's just admit that we're using C99.

build-sys: make multi-seat-x optional At some point it should become disabled by default. http://lists.freedesktop.org/archives/systemd-devel/2013-November/014869.html

build-sys: avoid warnings from assert_cc

build-sys: enable gcc Link Time Optimization when optimization is enabled

valgrind: make running PID 1 in valgrind useful Since valgrind only generates useful output on exit() (rather than exec()) we need to explicitly exit when valgrind is detected.

build: Allow disabling maintainer mode This allows make rules for generated build files (i.e. configure, Makefile.in, ... ) to be skipped. This is useful when the source is stored without timestamps (for example in CVS or GIT). When the build rules trigger to regenerate the build files, it tries to use the same autotools version (currently 1.14) as was originally used for the release. Since many of our build machines run Debian Squeeze, they only have autotools 1.11 available and the build fails. Currently, we have to work around this by touching all the generated files before building to avoid triggering the make rule. With this patch, we would be able to just run configure with --disable-maintainer-mode instead. The patch sets the default to enable to not change the default behavior. Ref: http://git.kernel.org/cgit/utils/kernel/kmod/kmod.git/commit/ ?id=f5cc26c77d2f332a9b40f51f0ec72e95711edf1e

build-sys: Add --disable-networkd option For GNOME (Continuous), we are unlikely to require or want systemd-networkd in the near term future; all of the tools and code are targeting NetworkManager. The long term story is still an open question of course, but for now, there's no reason for gnome-continuous to build or ship this.

bus: test-bus-marshal - make dbus-1 optional

build-sys: disable _FORTIFY_SOURCE for -Og builds for now Older gcc versions throw things like: In file included from /usr/include/fcntl.h:302:0, from ../src/core/execute.c:25: In function 'open', inlined from 'open_null_as' at ../src/core/execute.c:196:12: /usr/include/bits/fcntl2.h:50:24: error: call to '__open_missing_mode' declared with attribute error: open with O_CREAT in second argument needs 3 arguments __open_missing_mode ();

bus: remove static introspection file export

Fix kmod error message to have correct version requirement

static-nodes: don't call mkdir This is no longer necessary with kmod-15. Bump the requirement.

rfkill: add new rfkill tool to save/restore rfkill state across reboots This works analogous to the existing backlight and random seed services

Run with a custom SMACK domain (label). Allows the systemd --system process to change its current SMACK label to a predefined custom label (usually "system") at boot time. This is needed to have a few system-generated folders and sockets automatically be created with the right SMACK label. Without that, processes either cannot communicate with systemd or systemd fails to perform some actions.

build-ss: prepare new release

hashmap: randomize hash functions a bit

build-sys: don't fallback to upstart defaults

build-sys: restore detection of sphinx

build-sys: add ./configure --enable-address-sanitizer Enabling address sanitizer seems like a useful thing, but is quite tricky. Proper flags have to be passed to CPPFLAGS, CFLAGS and LDFLAGS, but passing them on the commandline doesn't work because we tests are done with ld directly, and not with libtool like in real linking. We might want to fix this, but let's add a handy way to enable address checking anyway.

build-sys: don't build python modules after --without-python The modules should build just fine, but AM_PATH_PYTHON sets pkgpyexecdir for us. Without that variable we don't know where to install modules. In addition libtool tries an empty rpath, breaking the build. Those issues could be fixed or worked around, but we probably don't have many people who want to avoid using python binary, but want to compile python modules. If such uses ever come up, this issue should be revisited.

build-sys: prepare 207

Add pam configuration to allow user sessions to work out of the box systemd-logind will start user@.service. user@.service unit uses PAM with service name 'systemd-user' to perform account and session managment tasks. Previously, the name was 'systemd-shared', it is now changed to 'systemd-user'. Most PAM installations use one common setup for different callers. Based on a quick poll, distributions fall into two camps: those that have system-auth (Redhat, Fedora, CentOS, Arch, Gentoo, Mageia, Mandriva), and those that have common-auth (Debian, Ubuntu, OpenSUSE). Distributions that have system-auth have just one configuration file that contains auth, password, account, and session blocks, and distributions that have common-auth also have common-session, common-password, and common-account. It is thus impossible to use one configuration file which would work for everybody. systemd-user now refers to system-auth, because it seems that the approach with one file is more popular and also easier, so let's follow that.

build-sys: Add configure check for linux/btrfs.h btrfs.h was added to uapi in Linux 3.9. To fix building with older header versions this adds a configure check for the header and re-adds btrfs definitions to missing.h which was removed in bed2e820 along with two other ioctls used by gpt-auto-generator. [ Apparently, btrfs.h was only added recently: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=55e301fd57a6239ec14b91a1cf2e70b3dd135194 let's re-add it for now -- kay ]

backlight: add minimal tool to save/restore screen brightness across reboots As many laptops don't save/restore screen brightness across reboots, let's do this in systemd with a minimal tool, that restores the brightness as early as possible, and saves it as late as possible. This will cover consoles and graphical logins, but graphical desktops should do their own per-user stuff probably. This only touches firmware brightness controls for now.

zsh_completion: fix zsh completion installation Moved zsh shell completion to shell-completion/zsh/_systemd for automake's sake. Also allow users to specify where the files should go with:: ./configure --with-zshcompletiondir=/path/to/some/where and by default going to `$datadir/zsh/site-functions`

build-sys: support old glibc versions without clock_gettime()

build: do not link everything with -lrt (and therefore -pthread)

build-sys: use pkg-config for python compilation flags Python 2.7, and 3.2 and higher support querying compilation flags through pkg-config. This makes python support follow rules similar to various other optional compilation-time libraries. New flags are called PYTHON_DEVEL_CFLAGS and PYTHON_DEVEL_LIBS, because PYTHON (without _DEVEL), is already used for the python binary name, and things would be confusing if the same prefix was used for two things. configure has --disable-python-devel to disable python modules. One advantage is that CFLAGS for modules gets smaller: - -I/usr/include/python3.3m -I/usr/include/python3.3m -Wno-unused-result -DDYNAMIC_ANNOTATIONS_ENABLED=1 -DNDEBUG -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -D_GNU_SOURCE -fPIC -fwrapv + -I/usr/include/python3.3m as does LIBS: - -lpthread -ldl -lutil -lm -lpython3.3m + -lpython3.3m Support for Python 2.6 is removed, but can be easily restored by using PYTHON_DEVEL_CFLAGS="$(python2.6-config --cflags)", etc., as ./configure parameters. https://bugs.freedesktop.org/show_bug.cgi?id=57800

build-sys: prepare 206

systemd-python: fix iteration Back in 6a58bf4135 raising stop iteration was removed from the C code, but wasn't added in the Python counterpart.

switch from udev keymaps to hwdb

build-sys: discover the path to kexec during build time https://bugs.freedesktop.org/show_bug.cgi?id=55248

cryptsetup: Add tcrypt support Tcrypt uses a different approach to passphrases/key files. The passphrase and all key files are incorporated into the "password" to open the volume. So, the idea of slots that provide a way to open the volume with different passphrases/key files that are independent from each other like with LUKS does not apply. Therefore, we use the key file from /etc/crypttab as the source for the passphrase. The actual key files that are combined with the passphrase into a password are provided as a new option in /etc/crypttab and can be given multiple times if more than one key file is used by a volume.

Add test coverage and generate report with lcov Enable coverage with --enable-coverage. "make coverage" will create the report locally, "make coverage-sync" will upload the report to http://www.freedesktop.org/software/systemd/coverage/. Requires lcov version 1.10 to handle naming in systemd and to use the --no-external option. [zj: make the coverage at least generate something with separate build dir, simplify rules a bit: all errors are mine. ]

Revert "build-sys: don't enable color gcc on dumb terminals" This reverts commit cd3069559a09b4e4f85a6f02aa8f0521f48359ca. Emacs compilation can be fixed by putting (custom-set-variables '(compilation-environment (quote ("GCC_COLORS=")))) in ~/.emacs.

build-sys: don't enable color gcc on dumb terminals Guys, we know that emacs is the best editor on earth, but unfortunately its "M-x compile" terminal cannot do colors (well, it does its own highlighting of the output anyway), and it will inform the programs it calls about this with TERM=dumb, and gcc should check for that. But you guys turned that off. Not cool. Let's turn it on again.

configure: split checks for libkmod >= 14 PKG_CHECK_EXISTS won't created a cached variable that later messes with our PKG_CHECK_MODULES check for an explicit version. Unfortunately, nesting these checks as the code existed lead to an odd error. Rather, split the checks apart. This also improves to the error message when the requisite version isn't found, and supplies the literal version systemd needs.

configure: fail if out-of-date kmod found and kmod not disabled Almost everyone wants kmod support, so don't fail silently if the libs are out-of-date. kmod can still be explicitly disabled and if it is not found at all, we still default to disabling it.

static-nodes: move creation of static nodes from udevd to tmpfiles As of kmod v14, it is possible to export the static node information from /lib/modules/`uname -r`/modules.devname in tmpfiles.d(5) format. Use this functionality to let systemd-tmpfilesd create the static device nodes at boot, and drop the functionality from systemd-udevd. As an effect of this we can move from systemd-udevd to systemd-tmpfiles-setup-dev: * the conditional CAP_MKNOD (replaced by checking if /sys is mounted rw) * ordering before local-fs-pre.target (see 89d09e1b5c65a2d97840f682e0932c8bb499f166)

build-sys: prepare v205

machined: split out machine registration stuff from logind Embedded folks don't need the machine registration stuff, hence it's nice to make this optional. Also, I'd expect that machinectl will grow additional commands quickly, for example to join existing containers and suchlike, hence it's better keeping that separate from loginctl.

build-sys: we do not support --disable-largefile builds

build-sys: do not allow --enable static

build-sys: option to disable tmpfiles

build-sys: more pretty colors

Make it possible to disable smack separately from xattr support Additionally, compile out rule loading if feature is disabled.

build-sys: fix gtkdocize check gtkdocize: GTK_DOC_CHECK not called in configure.ac Fixup for 6581f00f7ea.

build-sys: properly report missing gtk-doc This brings the check for ENABLE_GTK_DOC in line with HAVE_INTROSPECTION and other similar checks. Only the status line that is printed with uninstalled gtk-doc is changed. https://bugs.freedesktop.org/show_bug.cgi?id=63108

build-sys: prepare 204

build-sys: prepare new release

build-sys: add --with-debug-shell=PATH Distributions may have selinux but not sushell or might need to set a custom debug shell. Defaults to /sbin/sushell if selinux is enabled, /bin/sh if not. [zj: Renamed --with-debugshelltty to --with-debug-tty, and added a line in output showing DEBUGSHELL and DEBUGTTY. I figure that debug shell is pretty useful, and I hope the extra line in configure status will draw attention to it.]

build-sys: prevent library underlinking Underlinking can cause subtle bugs like the recent issue with libnss_myhostname (which was fixed in commit 1e335af7).

build-sys: prepare release 202

buildsys: Add --disable-tests to avoid building tests This patch adds --disable-tests to configure. It is based on a patch posted by Thierry Reding in 2010. The motivation for adding it is that some tests fail link-time when cross-compiling. The patch adds a new Makefile variable -- manual_tests -- and uses that instead of noinst_PROGRAMS. However, if ENABLE_TESTS is true, the former is added to the latter. It also renames noinst_tests to simply tests.

configure: use AC_CHECK_TOOL for objcopy, strings and gperf * using AC_PATH_TOOL does not allow to override it from shell environment which is useful when cross-compiling * with external toolchain I have different HOST_PREFIX and HOST_SYS AC_PATH_TOOL is using HOST_SYS as prefix and fails to find objcopy which is available only as ${TARGET_PREFIX}-objcopy then it tries objcopy without prefix which is found on host, but that objcopy does not work for !host (e.g. arm when building on x86) libs

bus: make the kdbus code valgrind clean

build-sys: prepare 201

build-sys: prepare release 200

build-sys: fix HAVE/ENABLE_FIRMWARE https://bugs.freedesktop.org/show_bug.cgi?id=62864

build-sys: bump version and .so revisions

build-sys: add missing sed substitution for DEBUGTTY

build-sys: configurable debug shell tty path

add --with-telinit=PATH configure option Distributions that never shipped upstart do not have "telinit" in /lib/upstart/.. Defaults to /lib/upstart/telinit so there is no change for systems existing installs.

build-sys: use _FORTIFY_SOURCE with new gcc level -Og

bus: add basic implementation of a native bus client library

build-sys: fix typo in human-readable output

udev: make firmware loading optional and disable by default Distros that whish to support old kernels should set --with-firmware-dirs="/usr/lib/firmware/updates:/usr/lib/firmware" to retain the old behaviour.

build-sys: bump release and sonames

build-sys: be more tolerant if dbus directories do not exist use readlink -m instead of -f since we might be building in a minimal chroot where those directories do not actually exist and readlink -f would return an empty string.

build-sys: resolve absolute path for the dbus directories /usr/share/dbus-1/system-services simply looks a lot nicer then /usr/share/dbus-1/services/../system-services

build-sys: replace backticks `` with $() for consistencies sake use $() everywhere

build-sys: don't hard code bash-completion directory

build-sys: use $PKG_CONFIG instead of calling the pkg-config binary directly

build-sys: make sphinx support uncoditional It needs to be invoked explicitly, so there's no need to check explicitly.

debug-shell: don't be picky, use /bin/sh rather than /bin/bash In a minimal initramfs, one might not always have the full bash available. Typically if using busybox.

python: build html docs using sphinx Build instructions: make make DESTIDIR=/tmp/... install make DESTIDIR=/tmp/... sphinx-html sphinx-man sphinx-epub ...

build-sys: make EFI support build-time optional

build-sys: make PolicyKit support compile-time optional (was runtime-optional already)

build-sys: disable tests in po/, docs/ with separate build dir Both gtk-doc and intltoolize have problems with VPATH builds. "Creatively" disable tests when configuring from outside the source directory. This more-or-less reverts 9795da43c.

build-sys: add -U_FORTIFY_SOURCE to $PYTHON_CFLAGS when necessary This patch only adds one line, but moves python detection after cflags detection, so the result of the latter can be used in the former. $PYTHON_CFLAGS usually includes -D_FORTIFY_SOURCE, which will generate a warning when compiling without optimization. Avoid by undefining _FORTIFY_SOURCE.

Replace autoconf int max test with simple define

configure.ac: combine --Wformat* options into one argument https://bugs.freedesktop.org/show_bug.cgi?id=59621

build-sys: add autoconf macro to pick macro for x32 compatibility

build-sys: use _FORTIFY_SOURCE only if optimizing Rather then force the user to undefine _FORTIFY_SOURCE, don't define it in the first place if it cannot be used. I'm assuming that -O* can only be sensibly specified in $CFLAGS.

build-sys: fix spelling of sysvrcndir

build-sys: bump version and so revisions

build-sys: disable static libraries

bootchart: merge bootchart Bootchart is renamed to 'systemd-bootchart' and installed as /usr/lib/systemd/systemd-bootchart. The configuration file will reside in /etc/systemd/bootchart.conf.

build-sys: fix help text for --disable-myhostname

nss-myhostname: integrate into systemd buildsystem Note that there are still some rome for cleanups. In particular, the .la files are now installed, which we probably don't want; and some of the macros in Makefile.am are likely redundan.

build-sys: use full path to python in scripts Commit c4eb236a2c didn't take into account the situation when the user sets e.g. PYTHON=python3 (without the full path). This value would then be used verbatim for PYTHON_BINARY and in she-bang lines in scripts, which is incorrect. To fix this, $PYTHON is passed through which, which expands the path. If $PYTHON_BINARY is desired which is not installed on the build system, then PYTHON_BINARY must be set separately.

build-sys: fix message about gintrospection When gobject-introspection-devel was not available, the message was missing the yes/no part

systemd-analyze: use specified binary, add --version Python binary used in the she-bang line in installed scripts can be set with ./configure PYTHON_BINARY=... Defaults to the same path as python used during compilation. Adding --version makes systemd-analyze behave consistently with the rest of installed programs. The lines in ./configure output are reordered to keep all yes/no lines separate. I think that this makes the output clearer.

build-sys: drop all distribution specfic checks Yay, we now have a completely generic systemd. No distribution specific checks anymore!

build-sys: make path of loadkeys/setfont configurable in configure

systemctl: enable chkconfig compat only if chkconfig is found rather than based on distro

build-sys: make rc-local support part of SYSV compat This also drops automatic selection of the rc local scripts based on the local distro. Distributions now should specify the paths of the rc-local and halt-local scripts on the configure command line.

build-sys: drop TARGET_UBUNTU TARGET_UBUNTU is effectively the same as TARGET_DEBIAN. Given the Ubuntu is unlikely to use systemd anytime soon there's no point in keeping this separate.

build-sys: prepare 196

build-sys: make loadable module support optional kmod is unecessary if loadable module support is disabled in the kernel, so make the dependency optional.

udev: make blkid optional I'm building systemd for an embedded system and we would prefer not having to include the entire util-linux package just to get a libblkid whose functionality we don't need.

configure.ac: fix FTBFS with new glibc glibc moved clock_* functions from librt to the core libc. As a result, clock_gettime is no more a suitable symbol to use when finding librt. Look for mq_open instead. Reference: http://www.sourceware.org/git/gitweb.cgi?p=glibc.git&h=6e6249d0b461b952d0f544792372663feb6d792a Fixes a FTBFS in Fedora Rawhide.

systemd-python: use python${PYTHON_VERSION}-config as python-config This is the usual setup, where pythonX.Y and pythonX.Y-config go together. Using python-config with python3 will only lead to confusion. --libs is changed to --ldflags, since the latter also includes other required flags like -L<dir>. The tests for HAVE_PYTHON and HAVE_PYTHON_DEVEL are separated. It is possible to have python development libraries installed without the binary (or to want to build python modules without using python during the build). A line is added to the output, to show what flags will be used for python.

udev: add hardware database support

build-sys: add check for microhttpd version

build-sys: prepare 195

configure.ac: fix typo in fallback value for KILL

units: rework systemd-exit.service to terminate systemd via signal rather than bus This should make session termination more reliable, as D-Bus doesn't have to be around anymore for this to succeed.

journal: implement time-based rotation/vacuuming This also enables time-based rotation (but not vacuuming) after 1month, so that not more one month of journal is lost at a time per vacuuming.

configure.ac: Add a --without-python option. Being able to be explicit about Python support (in addition to the default of auto-detecting it) and acting upon the result, specifying it as an option gains us more control about both dependencies and the resulting build. Furthermore, relying purely on auto-detection can lead to problems for source-based distros. E. g. systemd being built before *both* 32-bit & 64-bit ABIs are installed will lead to build failures as systemd's build system will pick up either 32-/64-bit Python, conclude both are available and fail if that's not the case.

build-sys: check for name_to_handle_at declaration instead of its definition AC_CHECK_FUNCS may be successful, even though name_to_handle_at and 'struct file_handle' are not available.

detect-virt: install with fs caps by default to allow unprivileged access

build-sys: prepare 194

build-sys: prepare 193

journal: add minimal journal gateway daemon based on GNU libmicrohttpd This minimal HTTP server can serve journal data via HTTP. Its primary purpose is synchronization of journal data across the network. It serves journal data in three formats: text/plain: the text format known from /var/log/messages application/json: the journal entries formatted as JSON application/vnd.fdo.journal: the binary export format of the journal The HTTP server also serves a small HTML5 app that makes use of the JSON serialization to present the journal data to the user. Examples: This downloads the journal in text format: # systemctl start systemd-journal-gatewayd.service # wget http://localhost:19531/entries Same for JSON: # curl -H"Accept: application/json" http://localhost:19531/entries Access via web browser: $ firefox http://localhost:19531/

build-sys: bump revision

build-sys: prepare release 191

build-sys: prepare v190

build-sys: require certain version of libselinux ./.libs/libsystemd-core.a(libsystemd_core_la-selinux-access.o): In function "selinux_access_check": src/core/selinux-access.c:487: undefined reference to "selinux_check_access"

build-sys: __secure_getenv lost dunder in libc 2.17

python: integrate David Strauss' python-systemd package

build-sys: perform autodetection of quota-tools binaries Use AC_PATH_PROG to try and locate the quotaon and quotacheck binaries, falling back on hardcoded defaults when they can't be found.

missing: define name_to_handle_at on our own if it is missing

build-sys: xsltproc is required for man pages and gtk-doc

build-sys: prepare release 189

journalctl: output FSS key as QR code on generating

journal: make libgcrypt dependency optional

journald: initial version of FSPRG hookup This adds forward-secure authentication of journal files. This patch includes key generation as well as tagging of journal files, Verification of journal files will be added in a later patch.

build-sys: prepare release 188

build-sys: pass param to stack protector

build-sys: drop obsolete gcc switch

build-sys: enable a couple of security features Most distributions enable these downstream anyway, but it probably makes sense to enable them unconditionally upstream too.

journal: add sd_journal_perror() to API

build-sys: hide error message from grep

build-sys: prepare 187

min: generate an index page for all man pages This makes use of python, if it is available

cryptsetup: add keyfile-offset= support This is useful if your keyfile is a block device, and you want to use a specific part of it, such as an area between the MBR and the first partition. This feature is documented in the Arch wiki[0], and has been supported by the Arch initscripts, so would be nice to get this into systemd. This requires libcryptsetup >= 1.4.2 (released 12.4.2012). Acked-by: Paul Menzel <paulepanter@users.sourceforge.net> [0]: <https://wiki.archlinux.org/index.php/System_Encryption_with_LUKS# Storing_the_key_between_MBR_and_1st_partition>

MeeGo: Remove build support for MeeGo distribution. The MeeGo distribution is still a supported distribution, but will probably not see an updated version of systemd anymore. Most of the development is focussing on Tizen now, and the generic support for building --with-distro=other is more than adequate enough. This patch removes the support as a custom configuration build target in systemd. People who are still building this for the MeeGo distribution should build as "other" distro.

build-sys: bump version

mageia: Correct usage of M4_DEFINES vs. M4_DISTRO_FLAG. This seems to have been a problem since mageia support was merged, as upstream had changed how this bit worked without us realising.

arch: drop sysvcompat support Our downstream generator takes care of all the sysvcompat support we need.

udev: always use $(rootprefix)/lib/udev for libexecdir On Sat, Jun 9, 2012 at 12:46 AM, Malte Starostik <lists@malte.homeip.net> wrote: > From: Malte Starostik <m-starostik@versanet.de> > > Rules get installed in $(libexecdir)/udev/, so are keymaps. Helper > binaries go to $(rootprefix)/lib/udev though. Problem is, in the code, > both are referenced via UDEVLIBEXECDIR which is defined to the former > location. Result: systemd-udev can't find e.g. the keymap binary to > apply keymaps.

delete plymouth units; moved to plymouth

units: add systemd-debug-shell.service If enabled, the service provides a root shell from an early boot. It also remains active late into shutdown. It is useful for debugging startup and shutdown problems. This is the unit referenced in http://freedesktop.org/wiki/Software/systemd/Debugging#early_debug_shell

build-sys: release 185

build-sys: prepare release 184

build-sys: prepare release 183

build-sys: use libpci's pkgconfig file to find the pci.ids file

build-sys: support build-from-git without gobject-introspection

autogen.sh: undef _FORTIFY_SOURCE, which now logs warnings when used with -O0

docs: do not generate tmpl files Its not needed as all the documentation is inline source code, not in separate *.tmpl files

build-sys: silence gtk-doc check, remove gtk-doc options from configure and distcheck

build-sys: make gtk-doc dependency optional

configure.ac: Use a auxiliar directory to store autogenerated files

configure.ac: Use the new autoconf field to set the project webpage

udev: move libudev, gudev to src/; move gudev/docs/, udev/docs/ to to docs/

udev: use native instead of custom --disable-introspection logic

udev: gudev - rework introspection generation

rename machine-id-main.c tomacht the binary and move main.c to core/

relicense to LGPLv2.1 (with exceptions) We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends.

build-sys: bump systemd version to 'udev version 182'

move imported udev into place

build-sys: separate ldflags from cflags

build-sys: do not set CFLAGS directly Set a separate variable for adding warning flags. Build systems are not supposed to change CFLAGS and LDFLAGS, these are user variables. Reference: http://www.gnu.org/software/automake/manual/html_node/Flag-Variables-Ordering.html

main: added support for loading IMA custom policies This is an S/MIME signed message The new function ima_setup() loads an IMA custom policy from a file in the default location '/etc/ima/ima-policy', if present, and writes it to the path 'ima/policy' in the security filesystem. This function is executed at early stage in order to avoid that some file operations are not measured by IMA and it is placed after the initialization of SELinux because IMA needs the latter (or other security modules) to understand LSM-specific rules. This feature is enabled by default and can be disabled by providing the option '--disable-ima' to the configure script. Signed-off-by: Roberto Sassu <roberto.sassu@polito.it> Acked-by: Gianluca Ramunno <ramunno@polito.it>

remove GTK pieces They've moved to systemd-ui.

release 182

build-sys: prepare release 44

build-sys: don't build distcheck version with split /usr

remove edd_id extra The use of identifying disks by magic byte sequences outside of the filesystem or partion table is fragile and usually creates more problems than it solves.

move src/extras subdirectories to src/

remove udev-acl Udev-acl will be part of a future ConsoleKit release. On systemd systems, advanced ConsoleKit and udev-acl functionality are natively provided by systemd.

configure.ac: fix typo in distro help string

systemctl: forward untrusted user reboot, poweroff requests to logind

build-sys: prepare release of 43

configure.ac: fix whitespace

always use /etc/os-release and ignore all distro-specific files The text mode welcome message will only show the distro name stored in /etc/os-release and no longer read any distro-specific files. If /etc/os-release does not exist, 'Linux' will be printed. When the source tree is is ./configure'd, only /etc-os-release is read to guess the distro to build for. If /etc/os-release does not exist, --with-distro= needs to be specified.

build-sys: add --disable-manpages

build-sys: prepare 42

build-sys: Support explicitly specifying --enable-split-usr. Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=45875

build-sys: minor typo fix

man: make building of man pages optional

build-sys: get rid of a few unnecessary AC_SUBST calls

build-sys: prepare release 41

kmod-setup: use libkmod rather than modprobe

main: use a shorter default $PATH if /usr is merged

configure: it makes no sense to install systemd with stow

build-sys: bump release

release 181

builtin: kmod - depend on libkmod >= 5

configure: show ROOTPREFIX in firmware path option help text

release 180

build-sys: enable automake's check-news option

build-sys: bump release

release 179

release 178

dbus: more efficient implementation of properties The way the various properties[] arrays are initialized is inefficient: - only the .data members change at runtime, yet the whole arrays of properties with all the fields are constructed on the stack one by one by the code. - there's duplication, eg. the properties of "org.freedesktop.systemd1.Unit" are repeated in several unit types. Fix it by moving the information about properties into static const sections. Instead of storing the .data directly in the property, store a constant offset from a run-time base. The small arrays of struct BusBoundProperties bind together the constant information with the right runtime information (the base pointer). On my system the code shrinks by 60 KB, data increases by 10 KB.

journal: hook up coredumping with journal

release 177

release 176

build-sys: bump version

tabs are as useful as a hole in the head

build-sys: try to build without installed xsltproc

build-sys: fix typo in help string

merge udev/, libudev/, systemd/ files in src/; move extras/ to src/

autogen: add --with-rootlibdir= and switch /usr/local to /usr