man/tmpfiles.d: add note about permissions and ownership of symlinks ...because this is might not be obvious.

man: fix typos

tmpfiles: create subvolumes for "v", "q", and "Q" only if / is a subvolume It's not a good idea to create subvolumes for parts of the OS tree (such as /home, or /var) if the root directory is not a subvolume too. We shouldn't assume control of "heavier" objects such as subvolumes, if the originating object (the root directory) is a "light-weight" object, i.e. a plain directory. Effectively this means that chroot() environments that are run on a plain directory do not have to deal with problems around systemd creating subvolumes that cannot be removed with a simple "rm" anymore. However, if the chroot manager creates a proper subvolume for such an environment it will also get further subvolumes placed in there, under the assumption that the manager understands the concept of subvolumes in that case.

doc: correct orthography, word forms and missing/extraneous words

doc: correct punctuation and improve typography in documentation

Fixed link to chattr man page

tmpfiles: introduce "q" and "Q" for creating quota-enabled btrfs subvolumes This allows us to set up the quota group hierarchy in a reasonable way on btrfs file systems.

man: tmpfiles.d: add info about age field The age field applies to lines starting with `v`, `C`, `X` too. See the function `clean_item` in the file `src/tmpfiles/tmpfiles.c`

man: revert dynamic paths for split-usr setups This did not really work out as we had hoped. Trying to do this upstream introduced several problems that probably makes it better suited as a downstream patch after all. At any rate, it is not releaseable in the current state, so we at least need to revert this before the release. * by adjusting the path to binaries, but not do the same thing to the search path we end up with inconsistent man-pages. Adjusting the search path too would be quite messy, and it is not at all obvious that this is worth the effort, but at any rate it would have to be done before we could ship this. * this means that distributed man-pages does not make sense as they depend on config options, and for better or worse we are still distributing man pages, so that is something that definitely needs sorting out before we could ship with this patch. * we have long held that split-usr is only minimally supported in order to boot, and something we hope will eventually go away. So before we start adding even more magic/effort in order to make this work nicely, we should probably question if it makes sense at all.

man: generate configured paths in manpages In particular, use /lib/systemd instead of /usr/lib/systemd in distributions like Debian which still have not adopted a /usr merge setup. Use XML entities from man/custom-entities.ent to replace configured paths while doing XSLT processing of the original XML files. There was precedent of some files (such as systemd.generator.xml) which were already using this approach. This addresses most of the (manual) fixes from this patch: http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/tree/debian/patches/Fix-paths-in-man-pages.patch?h=experimental-220 The idea of using generic XML entities was presented here: http://lists.freedesktop.org/archives/systemd-devel/2015-May/032240.html This patch solves almost all the issues, with the exception of: - Path to /bin/mount and /bin/umount. - Generic statements about preference of /lib over /etc. These will be handled separately by follow up patches. Tested: - With default configure settings, ran "make install" to two separate directories and compared the output to confirm they matched exactly. - Used a set of configure flags including $CONFFLAGS from Debian: http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/tree/debian/rules Installed the tree and confirmed the paths use /lib/systemd instead of /usr/lib/systemd and that no other unexpected differences exist. - Confirmed that `make distcheck` still passes.

man: elaborate on the order by which tmpfiles operations are executed

man: slightly fewer paragraphs can help readability

man: fix examples indentation in tmpfiles.d(5)

man: add information about more lines to explanation of argument field

man: document which tmpfiles line types follow symlinks Generally, we will not follow symlinks, except for "w". Avoid documentation for now for fifo, device node, directory lines, which currently follow symlinks but better shouldn't.

man: add h/H to tmpfiles.d(5)

tmpfiles: port to unquote_many_words()

man: explain time units in tmpfiles https://bugzilla.redhat.com/show_bug.cgi?id=1195294

shared/acl-util: add mask only when needed, always add base ACLs For ACLs to be valid, a set of entries for user, group, and other must be always present. Always add those entries. While at it, only add the mask ACL if it is actually required, i.e. when at least on ACL for non-owner group or user exists.

tmpfiles: implement augmenting of existing ACLs This is much more useful in practice (equivalent to setfacl -m).

tmpfiles: make t and a globby, add their recursive versions T and A For types which adapt existing files it is generally more useful to accept globs. In analogy to z and Z, add recursive versions using uppercase letters. Technically, making a accept globs is backwards incompatible, but in practice it probably isn't yet widely used and we can assume that most people don't create files with wildcards in names. Functions which are used as callbacks, but not directly on items, are renamed not to have "item_" prefix.

tmpfiles: add 'a' type to set ACLs

tmpfiles: attach an array of items to each path The data structure used by tmpfiles is changed: instead of hashmaps mapping {path → Item*} we now have hashmaps containing {path -> ItemArray}, where ItemArray contains a pointer to an array of Items. For current code it doesn't matter much, but when we add new types it is easier to simply add a new Item for a given path, then to coalesce multiple lines into one Item. In the future, this change will also make it possible to remember the file and line where each Item originates, and use that in reporting errors. Currently this is not possible, since each Item can be created from multiple lines.

man: reindent tmpfiles.d(5) Reindent to 2 spaces, use more markup.

tmpfiles: add new line type 'v' for creating btrfs subvolumes

tmpfiles, man: Add xattr support to tmpfiles This patch makes it possible to set extended attributes on files created by tmpfiles. This can be especially used to set SMACK security labels on volatile files and directories. It is done by adding new line of type "t". Such line should contain attributes in Argument field, using following format: name=value All other fields are ignored. If value contains spaces, then it must be surrounded by quotation marks. User can also put quotation mark in value by escaping it with backslash. Example: D /var/run/cups - - - - t /var/run/cups - - - - security.SMACK64=printing

man/tmpfiles.d: fix typo

man: tmpfiles.d - recommend using b! and c! We should avoid creating static device nodes at runtime.

doc: typographical improvements and choice of words

doc: grammatical corrections

tmpfiles: copy/link /usr/share/factory/ files when the source argument is omitted

tmpfiles: make sure "C" doesn't copy anything if the destination already exists Previously it would recursively copy the entire tree in, and descend into subdirectories even if the destination already exists. Let's do what the documentation says and not do that. If files down the tree shall be copied too, they should get their own "C" lines.

tmpfiles: add "+" modifier support to b, c, p lines in addition to L

tmpfiles: add new "L+" command as stronger version of "L", that removes the destination before creating a symlink Also, make use of this for mtab as long as mount insists on creating it even if we invoke it with "-n".

tmpfiles: add ability to mask access mode by pre-existing access mode on files/directories This way it makes a lot more sense to specify an access mode for "Z" lines.

tmpfiles: when processing lines, always process prefixes before suffixes If two lines refer to paths that are suffix and prefix of each other, then always process the prefix first, the suffix second. In all other cases strictly process rules in the order they appear in the files. This makes creating /var/run as symlink to /run a lot more fun, since it is automatically created first.

tmpfiles: get rid of "m" lines, make them redundant by "z" "m" so far has been a non-globbing version of "z". Since this makes it quite redundant, let's get rid of it. Remove "m" from the man pages, beef up "z" docs instead, and make "m" nothing more than a compatibility alias for "z".

tmpfiles: add new "C" line for copying files or directories

doc: comma placement corrections and word order Set commas where there should be some. Some improvements to word order.

core: introduce new RuntimeDirectory= and RuntimeDirectoryMode= unit settings As discussed on the ML these are useful to manage runtime directories below /run for services.

Replace /var/run with /run in remaining places /run was already used almost everywhere, fix the remaining places for consistency.

man: always place <programlisting> and </programlisting> in a line with actual sources, so that we don't get spurious newlines in the man page output

nspawn,man: use a common vocabulary when referring to selinux security contexts Let's always call the security labels the same way: SMACK: "Smack Label" SELINUX: "SELinux Security Context" And the low-level encapsulation is called "seclabel". Now let's hope we stick to this vocabulary in future, too, and don't mix "label"s and "security contexts" and so on wildly.

tmpfiles: rename --unsafe to --boot As suggested by Kay, it is better to describe what is done, not what might happen.

man: resolve word omissions This is a recurring submission and includes corrections to: word omissions and word class choice.

tmpfiles: introduce the concept of unsafe operations Various operations done by systemd-tmpfiles may only be safely done at boot (e.g. removal of X lockfiles in /tmp, creation of /run/nologin). Other operations may be done at any point in time (e.g. setting the ownership on /{run,var}/log/journal). This distinction is largely orthogonal to the type of operation. A new switch --unsafe is added, and operations which should only be executed during bootup are marked with an exclamation mark in the configuration files. systemd-tmpfiles.service is modified to use this switch, and guards are added so it is hard to re-start it by mistake. If we install a new version of systemd, we actually want to enforce some changes to tmpfiles configuration immediately. This should now be possible to do safely, so distribution packages can be modified to execute the "safe" subset at package installation time. /run/nologin creation is split out into a separate service, to make it easy to override. https://bugzilla.redhat.com/show_bug.cgi?id=1043212 https://bugzilla.redhat.com/show_bug.cgi?id=1045849

man,units: tmpfiles.d(5) cleanup Condition for /lib (necessary for split /usr) was missing from the unit. Some changes which were done in tmpfiles.d(5) were not carried over to systemd-tmpfiles(1). Also use markup where possible.

man: wording and grammar updates This is a recurring submission and includes corrections to various issue spotted. I guess I can just skip over reporting ubiquitous comma placement fixes…

man: Improve the description of parameter X in tmpfiles.d page

tmpfiles: add a new "m" line type that adjusts user/group/mode of a file if it exists

tmpfiles: support simple specifier expansion for specified paths

man: wording and grammar updates This is a recurring submission and includes corrections to various issue spotted. I guess I can just skip over reporting ubiquitous comma placement fixes… Highligts in this particular commit: - the "unsigned" type qualifier is completed to form a full type "unsigned int" - alphabetic -> lexicographic (that way we automatically define how numbers get sorted)

man: fix description of file order application

man: one more example in tmpfiles.d

man: wording and grammar updates This includes regularly-submitted corrections to comma setting and orthographical mishaps that appeared in man/ in recent commits. In this particular commit: - the usual comma fixes - expand contractions (this is prose)

man: improve grammar and word formatting in numerous man pages Use proper grammar, word usage, adjective hyphenation, commas, capitalization, spelling, etc. To improve readability, some run-on sentences or sentence fragments were revised. [zj: remove the space from 'file name', 'host name', and 'time zone'.]

tmpfiles: introduce type X Type X will exclude path itself from clean-up. However, if the path is a directory systemd-tmpfiles will clean-up its content. In contrast to type x, where path is ignored completely, type X needs some Age parameter. In order to determine Age parameter, we will look for config entries of type d or D and pick the best match. Best match is either exact match or longest prefix match.

man: typo fixes https://bugs.freedesktop.org/show_bug.cgi?id=55890 Fixed typos, serial comma, and removed "either" as there were more than two options. Also did an extra rename of "system-shutdown" to "systemd-shutdown" that was forgotten in commit 8bd3b8620c80d0f2383f2fb04315411fc8077ca1

man: fix typo in tmpfiles.d Reported-by: Jason St. John <jstjohn@purdue.edu>

tmpfiles: allow Age to be set to 0 Mostly useful for testing purposes. Setting Age to 1s works just as well, but it is surprising that using 0s (or just 0) does not work. Also clarify this in the documentation.

tmpfiles: use write(2) for the 'w' action This resolves problems with filesystems which do not implement the aio_write file operation. In this case, the kernel will fall back using a loop writing technique for each pointer in a received iovec. The result is strange errors in dmesg such as: [ 31.855871] elevator: type not found [ 31.856262] elevator: switch to [ 31.856262] failed It does not make sense to implement a synchronous aio_write method for sysfs as this isn't a real filesystem where a reasonable use case for using writev exists, nor is there an expectation that tmpfiles will be used to write more data than can be reasonably written in a single write syscall. In addition, some sysfs attrs are currently buggy and will NOT reject the second write with the newline, causing the sysfs value to be zeroed out. This of course should be fixed in the kernel regardless of any wrongdoing in userspace, but this simple change makes us immune to such a bug. This change means that we do not write a trailing newline by default, as the expected use case of 'w' is for sysfs and procfs. In exchange, honor C-style backslash escapes so that if the newline is really needed, the user can add it.

tmpfiles: support globbing for w option Break out the write logic into a separate function and simply use it as a callback to glob_item. This allows users to consolidate writes to sysfs with multiple similar pathnames, e.g. w /sys/class/block/sd[a-z]/queue/read_ahead_kb - - - - 1024

man/tmpfiles.d.xml: Add missing full stop

man: add reference to systemd-delta to tmpfiles

tmpfiles: exclude the first level directories in /run/user from automatic clean up It's logind's job to maintain those user dirs, so avoid automatic clean up for them. However, we do cover everything within them.

man: replace tabs with spaces

man: systemd-tmpfiles - document proper config-file-stack order

relicense to LGPLv2.1 (with exceptions) We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends.

conf: when looking for configurations look in /etc first, in /run second After long consideration we came to the conclusion that user configuration in /etc should always override the (generally computer generated) configuration in /run. User configuration should always be what matters over anything else. Hence rearrange the search orders accordingly. In general this should change very little as overriding like this is seldomn done so far, and the order between /etc and /usr stays the same.

man: reword tmpfiles selinux bits

tmpfiles: support writing short strings to files, in order to support /sys manipulations at boot time, a la sysctl

tmpfiles: add support for creating symlinks, char/block device nodes

tmpfiles: add 'z', like 'Z' but not recursive

tmpfiles: apply chown, chmod for 'Z' entries too If changing ownership or permissions is not desired, they can be configured to '-' or omitted entirely.

man: mention that 'Z' ignores uid/gid/mode

man: document 'Z' in tmpfiles

tmpfiles: allow creation of named pipes with tmpfiles

tmpfiles.d: switch to stacked config dirs in /lib, /etc, /run

general: replace a few uses of /var/run by /run

systemd: document systemd-tmpfiles

tmpfiles: support globs

man: remaining spelling fixes

man: document /etc/modules-load.d/

man: reorder things to follow the same order everywhere

man: minor tmpfiles(5) updates and reindenting

man/tmpfiles.d.xml: add a manpage for tmpfiles.d Initial commit of a tmpfiles.d manpage. I ran it through xmllint but I don't know how to make it look pretty like the rest of the xml files. :-P Signed-off-by: Brandon Philips <bphilips@suse.de>