NEWS revision 481a0aa2c9803a62cda413b8a1d05571957bb4b5
d657c51f14601d0235434ffb78cf6ac0f27cc83cLennart Poetteringsystemd System and Service Manager
61f32bff6130a44d077886d38cff89ad161bf177Martin PittCHANGES WITH 220:
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt * systemd now exposes a CPUUsageNSec= property for each
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt service unit on the bus, that contains the overall consumed
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt CPU time of a service (the sum of what each process of the
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt service consumed). This value is only available if
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt CPUAccounting= is turned on for a service, and is then shown
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt in the "systemctl status" output.
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt * Support for configuring alternative mappings of the old SysV
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt runlevels to systemd targets has been removed. They are now
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt harcoded in a way that runlevels 2, 3, 4 all map to
61f32bff6130a44d077886d38cff89ad161bf177Martin Pitt multi-user.target and 5 to graphical.target (which
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering previously was already the default behaviour).
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * The auto-mounter logic gained support for mount point
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering expiry, using a new TimeoutIdleSec= setting in .automount
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering units. (Also available as x-systemd.idle-timeout= in /etc/fstab).
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * The EFI System Partition (ESP) as mounted to /boot by
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering systemd-efi-boot-generator will now be unmounted
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering automatically after 2min of not being used. This should
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering minimize the risk of ESP corruptions.
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * New /etc/fstab options x-systemd.requires= and
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering x-systemd.requires-mounts-for= are now supported to express
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering additional dependencies for mounts. This is useful for
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering journalling file systems that support external journal
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering devices or overlay file systems that require underlying file
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering systems to be mounted.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * systemd does not support direct live-upgrades (via systemctl
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering daemon-reexec) from versions older than v44 anymore. As no
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering distribution we are aware of shipped such old versions in a
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering stable release this should not be problematic.
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * When systemd forks off a new per-connection service instance
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering it will now set the $REMOTE_ADDR environment variable to the
815bb5bd565b4edc05a426d24353a9ba68482834Thomas Hindoe Paaboel Andersen remote IP address, and $REMOTE_PORT environment variable to
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering the remote IP port. This behaviour is similar to the
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering corresponding environment variables defined by CGI.
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * systemd-networkd gained support for uplink failure
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering detection. The BindCarrier= option allows binding interface
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering configuration dynamically to the link sense of other
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering interfaces. This is useful to achieve behaviour like in
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering network switches.
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * systemd-networkd gained support for configuring the DHCP
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering client identifier to use when requesting leases.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * systemd-networkd now has a per-network UseNTP= option to
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering configure whether NTP server information acquired via DHCP
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering is passed on to services like systemd-timesyncd.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * systemd-networkd gained support for vti6 tunnels.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * Many bonding and vxlan options are now configurable in
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering systemd-networkd.
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * systemd-nspawn gained a new --property= setting to set unit
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering properties for the container scope. This is useful for
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering setting resource parameters (e.g "CPUShares=500") on
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering containers started from the command line.
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * systemd-nspawn gained a new --private-users= switch to make
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering use of user namespacing available on recent Linux kernels.
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * systemd-nspawn may now be called as part of a shell pipeline
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering in which case the pipes used for stdin and stdout are passed
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering directly to the process invoked in the container, without
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering indirection via a pseudo tty.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * systemd-nspawn gained a new switch to control the UNIX
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering signal to use when killing the init process of the container
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering when shutting down.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * systemd-nspawn gained a new --overlay= switch for mounting
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering overlay file systems into the container using the new kernel
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering overlayfs support.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * When a container image is imported via systemd-importd and
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering the host file system is not btrfs, a loopback block device
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering file is created in /var/lib/machines.raw with a btrfs file
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering system inside. It is then mounted to /var/lib/machines to
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering enable btrfs features for container management. The loopback
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering file and btrfs file system is grown as needed when container
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering images are imported via systemd-importd.
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering * systemd-machined/systemd-importd gained support for btrfs
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering quota, to enforce container disk space limits on disk. This
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering is exposed in "machinectl set-limit".
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * systemd-importd now can import containers from local .tar,
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering .raw and .qcow2 images, and export them to .tar and .raw. It
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering can also import dkr v2 images now from the network (on top
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering of v1 as before).
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * systemd-importd gained support for verifying downloaded
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering images with gpg2 (previously only gpg1 was supported).
ddb4b0d3eb57292c38a76f9b977f73cea15448fbLennart Poettering * systemd-machined, systemd-logind, systemd: most bus calls
ddb4b0d3eb57292c38a76f9b977f73cea15448fbLennart Poettering are now accessible to unprivileged processes via
ddb4b0d3eb57292c38a76f9b977f73cea15448fbLennart Poettering PolicyKit. Also, systemd-logind will now allow users to kill
ddb4b0d3eb57292c38a76f9b977f73cea15448fbLennart Poettering their own sessions without further privileges or
ddb4b0d3eb57292c38a76f9b977f73cea15448fbLennart Poettering authorization.
ddb4b0d3eb57292c38a76f9b977f73cea15448fbLennart Poettering * systemd-shutdownd has been removed. This service was
ddb4b0d3eb57292c38a76f9b977f73cea15448fbLennart Poettering previously responsible for implementing scheduled shutdowns
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering as exposed in /usr/bin/shutdown's time parameter. This
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering functionality has now been moved into systemd-logind and is
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering accessible via a bus interface.
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * "systemctl reboot" gained a new switch --firmware-setup that
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering can be used to reboot into the EFI firmware setup, if that
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering is available. systemd-logind now exposes an API on the bus
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering to trigger such reboots, in case graphical desktop UIs want
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering to cover this functionality.
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * "systemctl enable", "systemctl disable" and "systemctl mask"
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering now support a new "--now" switch. If specified the the units
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering that are enabled will also be started, and the ones
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * The Gummiboot EFI boot loader tool has been merged into
815bb5bd565b4edc05a426d24353a9ba68482834Thomas Hindoe Paaboel Andersen systemd, and renamed to "sd-boot". The bootctl tool has been
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering updated to support sd-boot.
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * An EFI kernel stub has been added that may be used to create
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering kernel EFI binaries that contain not only the actual kernel,
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering but also an initrd, boot splash, command line and OS release
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering information. This combined binary can then be signed as a
815bb5bd565b4edc05a426d24353a9ba68482834Thomas Hindoe Paaboel Andersen single image, so that the firmware can verify it all in one
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering step. sd-boot has special support for EFI binaries created
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering like this and can extract OS release information from them
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering and show them in the boot menu. This functionality is useful
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering to implement cryptographically verified boot schemes.
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering * Optional support has been added to systemd-fsck to pass
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering fsck's progress report to an AF_UNIX socket in the file
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering * udev will no longer create device symlinks for all block
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering devices by default. A blacklist for excluding special block
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering devices from this logic has been turned into a whitelist
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering that requires picking block devices explicitly that require
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering device symlinks.
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering * A new (currently still internal) API sd-device.h has been
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering added to libsystemd. This modernized API is supposed to
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering replace libudev eventually. In fact, already much of libudev
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering is now just a wrapper around sd-device.h.
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering * A new hwdb database for storing metadata about pointing
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering stick devices has been added.
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering * systemd-tmpfiles gained support for setting file attributes
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering similar to the "chattr" tool with new 'h' and 'H' lines.
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering * systemd-journald will no longer unconditionally set the
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering btrfs NOCOW flag on new journal files. This is instead done
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering with tmpfiles snippet using the new 'h' line type. This
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering allows easy disabling of this logic, by masking the
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering * systemd-journald will now translate audit message types to
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering human readable identifiers when writing them to the
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering journal. This should improve readability of audit messages.
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering * The LUKS logic gained support for the offset= and skip=
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering options in /etc/crypttab, as previously implemented by
b9e2f7eb00643f28390cedf883f516f4ba7193bbLennart Poettering * /usr/lib/os-release gained a new optional field VARIANT= for
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering distributions that support multiple variants (such as a
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering desktop edition, a server edition, ...)
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Contributions from: Aaro Koskinen, Adam Goode, Alban Crequy,
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Alberto Fanjul Alonso, Alexander Sverdlin, Alex Puchades, Alin
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Rauta, Alison Chaiken, Andrew Jones, Arend van Spriel,
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Benedikt Morbach, Benjamin Franzke, Benjamin Tissoires, Blaž
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Tomažič, Chris Morgan, Chris Morin, Colin Walters, Cristian
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Rodríguez, Daniel Buch, Daniel Drake, Daniele Medri, Daniel
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Mack, Daniel Mustieles, daurnimator, Davide Bettio, David
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Herrmann, David Strauss, Didier Roche, Dimitri John Ledkov,
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Eric Cook, Gavin Li, Goffredo Baroncelli, Hannes Reinecke,
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Hans de Goede, Hans-Peter Deifel, Harald Hoyer, Iago López
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Galeiras, Ivan Shapovalov, Jan Engelhardt, Jan Janssen, Jan
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Pazdziora, Jan Synacek, Jasper St. Pierre, Jay Faulkner, John
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Paul Adrian Glaubitz, Jonathon Gilbert, Karel Zak, Kay
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Sievers, Koen Kooi, Lennart Poettering, Lubomir Rintel, Lucas
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering De Marchi, Lukas Nykryn, Lukas Rusak, Lukasz Skalski, Łukasz
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Stelmach, Mantas Mikulėnas, Marc-Antoine Perennou, Marcel
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Holtmann, Martin Pitt, Mathieu Chevrier, Matthew Garrett,
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Michael Biebl, Michael Marineau, Michael Olbrich, Michal
28c85daf0ae80d1d5f8b878efa4bdad690e1f29bLennart Poettering Schmidt, Michal Sekletar, Mirco Tischler, Nir Soffer, Patrik
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Flykt, Pavel Odvody, Peter Hutterer, Peter Lemenkov, Peter
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Waller, Piotr Drąg, Raul Gutierrez S, Richard Maw, Ronny
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Chevalier, Ross Burton, Sebastian Rasmussen, Sergey Ptashnick,
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Seth Jennings, Shawn Landden, Simon Farnsworth, Stefan Junker,
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Stephen Gallagher, Susant Sahani, Sylvain Plantefève, Thomas
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Haller, Thomas Hindoe Paaboel Andersen, Tobias Hunger, Tom
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Gundersen, Torstein Husebø, Umut Tezduyar Lindskog, Will
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering Woods, Zachary Cook, Zbigniew Jędrzejewski-Szmek
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart Poettering -- Berlin, 2015-05-??
f1f8a5a5e110f485257e8702ad30b9997e529a74Lennart PoetteringCHANGES WITH 219:
dd050decb6ad131ebdeabb71c4f9ecb4733269c0David Herrmann * Introduce a new API "sd-hwdb.h" for querying the hardware
a11c7ea52cc31a8c95e46e781469d3a104f48090Lennart Poettering metadata database. With this minimal interface one can query
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack and enumerate the udev hwdb, decoupled from the old libudev
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack library. libudev's interface for this is now only a wrapper
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack around sd-hwdb. A new tool systemd-hwdb has been added to
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack interface with and update the database.
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack * When any of systemd's tools copies files (for example due to
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack tmpfiles' C lines) a btrfs reflink will attempted first,
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack before bytewise copying is done.
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack * systemd-nspawn gained a new --ephemeral switch. When
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack specified a btrfs snapshot is taken of the container's root
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack directory, and immediately removed when the container
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack terminates again. Thus, a container can be started whose
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering changes never alter the container's root directory, and are
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering lost on container termination. This switch can also be used
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack for starting a container off the root file system of the
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack host without affecting the host OS. This switch is only
6fd5517b11d2c258b3c09baf571bae71b9ac98a7Zbigniew Jędrzejewski-Szmek available on btrfs file systems.
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack * systemd-nspawn gained a new --template= switch. It takes the
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering path to a container tree to use as template for the tree
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering specified via --directory=, should that directory be
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering missing. This allows instantiating containers dynamically,
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering on first run. This switch is only available on btrfs file
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack * When a .mount unit refers to a mount point on which multiple
6fd5517b11d2c258b3c09baf571bae71b9ac98a7Zbigniew Jędrzejewski-Szmek mounts are stacked, and the .mount unit is stopped all of
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack the stacked mount points will now be unmounted until no
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack mount point remains.
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack * systemd now has an explicit notion of supported and
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack unsupported unit types. Jobs enqueued for unsupported unit
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack types will now fail with an "unsupported" error code. More
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack specifically .swap, .automount and .device units are not
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack supported in containers, .busname units are not supported on
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack non-kdbus systems. .swap and .automount are also not
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack supported if their respective kernel compile time options
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack are disabled.
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack * machinectl gained support for two new "copy-from" and
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack "copy-to" commands for copying files from a running
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack container to the host or vice versa.
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering * machinectl gained support for a new "bind" command to bind
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering mount host directories into local containers. This is
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering currently only supported for nspawn containers.
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack * networkd gained support for configuring bridge forwarding
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering database entries (fdb) from .network files.
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * A new tiny daemon "systemd-importd" has been added that can
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack download container images in tar, raw, qcow2 or dkr formats,
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering and make them available locally in /var/lib/machines, so
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering that they can run as nspawn containers. The daemon can GPG
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering verify the downloads (not supported for dkr, since it has no
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering provisions for verifying downloads). It will transparently
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering decompress bz2, xz, gzip compressed downloads if necessary,
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering and restore sparse files on disk. The daemon uses privilege
21d86c613d85a5ffb23decaf9876b9f42696e718Daniel Mack separation to ensure the actual download logic runs with
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering fewer privileges than the deamon itself. machinectl has
8b5f9d156ceec7284eeabe79fcbf51f503eb50f5Daniel Mack gained new commands "pull-tar", "pull-raw" and "pull-dkr" to
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering make the functionality of importd available to the
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering user. With this in place the Fedora and Ubuntu "Cloud"
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering images can be downloaded and booted as containers unmodified
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering (the Fedora images lack the appropriate GPG signature files
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering currently, so they cannot be verified, but this will change
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering soon, hopefully). Note that downloading images is currently
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering only fully supported on btrfs.
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * machinectl is now able to list container images found in
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering /var/lib/machines, along with some metadata about sizes of
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering disk and similar. If the directory is located on btrfs and
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering quota is enabled, this includes quota display. A new command
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering "image-status" has been added that shows additional
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering information about images.
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * machinectl is now able to clone container images
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering efficiently, if the underlying file system (btrfs) supports
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering it, with the new "machinectl list-images" command. It also
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering gained commands for renaming and removing images, as well as
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering marking them read-only or read-write (supported also on
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering legacy file systems).
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * networkd gained support for collecting LLDP network
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering announcements, from hardware that supports this. This is
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering shown in networkctl output.
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * systemd-run gained support for a new -t (--pty) switch for
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering invoking a binary on a pty whose input and output is
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering connected to the invoking terminal. This allows executing
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering processes as system services while interactively
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering communicating with them via the terminal. Most interestingly
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering this is supported across container boundaries. Invoking
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering "systemd-run -t /bin/bash" is an alternative to running a
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering full login session, the difference being that the former
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering will not register a session, nor go through the PAM session
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * tmpfiles gained support for a new "v" line type for creating
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering btrfs subvolumes. If the underlying file system is a legacy
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering file system, this automatically degrades to creating a
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering normal directory. Among others /var/lib/machines is now
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack created like this at boot, should it be missing.
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack * The directory /var/lib/containers/ has been deprecated and
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack been replaced by /var/lib/machines. The term "machines" has
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack been used in the systemd context as generic term for both
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack VMs and containers, and hence appears more appropriate for
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack this, as the directory can also contain raw images bootable
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * systemd-nspawn when invoked with -M but without --directory=
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering or --image= is now capable of searching for the container
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering root directory, subvolume or disk image automatically, in
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack /var/lib/machines. systemd-nspawn@.service has been updated
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack to make use of this, thus allowing it to be used for raw
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt disk images, too.
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack * A new machines.target unit has been introduced that is
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack supposed to group all containers/VMs invoked as services on
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering the system. systemd-nspawn@.service has been updated to
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering integrate with that.
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering * machinectl gained a new "start" command, for invoking a
edf4126f60561cc6236e46d07f4845dbc6935fa2Tom Gundersen container as a service. "machinectl start foo" is mostly
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering equivalent to "systemctl start systemd-nspawn@foo.service",
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering but handles escaping in a nicer way.
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering * systemd-nspawn will now mount most of the cgroupfs tree
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering read-only into each container, with the exception of the
edf4126f60561cc6236e46d07f4845dbc6935fa2Tom Gundersen container's own subtree in the name=systemd hierarchy.
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack * journald now sets the special FS_NOCOW file flag for its
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack journal files. This should improve performance on btrfs, by
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack avoiding heavy fragmentation when journald's write-pattern
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack is used on COW file systems. It degrades btrfs' data
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack integrity guarantees for the files to the same levels as for
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack ext3/ext4 however. This should be OK though as journald does
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack its own data integrity checks and all its objects are
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack checksummed on disk. Also, journald should handle btrfs disk
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack full events a lot more gracefully now, by processing SIGBUS
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack errors, and not relying on fallocate() anymore.
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack * When journald detects that journal files it is writing to
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack have been deleted it will immediately start new journal
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering * systemd now provides a way to store file descriptors
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering per-service in PID 1.This is useful for daemons to ensure
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering that fds they require are not lost during a daemon
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering restart. The fds are passed to the deamon on the next
fe08a30b58bba0e04fb3e43122e0b157af5846a1Lennart Poettering invocation in the same way socket activation fds are
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack passed. This is now used by journald to ensure that the
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering various sockets connected to all the system's stdout/stderr
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering are not lost when journald is restarted. File descriptors
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering may be stored in PID 1 via the sd_pid_notify_with_fds() API,
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering an extension to sd_notify(). Note that a limit is enforced
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering on the number of fds a service can store in PID 1, and it
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering defaults to 0, so that no fds may be stored, unless this is
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering explicitly turned on.
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering * The default TERM variable to use for units connected to a
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering terminal, when no other value is explicitly is set is now
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering vt220 rather than vt102. This should be fairly safe still,
91d0d699121f9cf29e3ba45380ce503b8ea505feLennart Poettering but allows PgUp/PgDn work.
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering * The /etc/crypttab option header= as known from Debian is now
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering * "loginctl user-status" and "loginctl session-status" will
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering now show the last 10 lines of log messages of the
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering user/session following the status output. Similar,
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering "machinectl status" will show the last 10 log lines
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering associated with a virtual machine or container
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering service. (Note that this is usually not the log messages
d046fb936658e7239c8e2635ecb7fb32748ef535Lennart Poettering done in the VM/container itself, but simply what the
c48eb61fa72205615e3a2bec9fb6576a5973fc6bTom Gundersen container manager logs. For nspawn this includes all console
bdba9227ec6462198b63af69098a003aa2292c0fDaniel Mack output however.)
c30f086f047a2a34474de29e4b87ad4464594440Lennart Poettering * "loginctl session-status" without further argument will now
efce0ffeac5ea1b71f61094914d4c00e97da53ecDaniel Machon show the status of the session of the caller. Similar,
c97e586d8a18db5dc505d76059ed1d9add234925Daniel Mack "lock-session", "unlock-session", "activate",
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering "enable-linger", "disable-linger" may now be called without
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering session/user parameter in which case they apply to the
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering * An X11 session scriptlet is now shipped that uploads
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering $DISPLAY and $XAUTHORITY into the environment of the systemd
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering --user daemon if a session begins. This should improve
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering compatibility with X11 enabled applications run as systemd
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering user services.
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering * Generators are now subject to masking via /etc and /run, the
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering same way as unit files.
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering * networkd .network files gained support for configuring
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering per-link IPv4/IPv6 packet forwarding as well as IPv4
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering masquerading. This is by default turned on for veth links to
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering containers, as registered by systemd-nspawn. This means that
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering nspawn containers run with --network-veth will now get
61e6771c4ac5e8418a9537a0f3efa1e51c45e5b9Lennart Poettering automatic routed access to the host's networks without any
1e0adaa45d2c1a300199069bfdeb494281b54086Daniel Mack further configuration or setup, as long as networkd runs on
c9912c5eafa03fdf53e569eaf2e89d7e0932975bDavid Herrmann * systemd-nspawn gained the --port= (-p) switch to expose TCP
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering or UDP posts of a container on the host. With this in place
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering it is possible to run containers with private veth links
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering (--network-veth), and have their functionality exposed on
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering the host as if their services were running directly on the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemd-nspawn's --network-veth switch now gained a short
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering version "-n", since with the changes above it is now truly
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering useful out-of-the-box. The systemd-nspawn@.service has been
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering updated to make use of it too by default.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemd-nspawn will now maintain a per-image R/W lock, to
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering ensure that the same image is not started more than once
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering writable. (It's OK to run an image multiple times
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering simultaneously in read-only mode.)
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemd-nspawn's --image= option is now capable of
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering dissecting and booting MBR and GPT disk images that contain
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering only a single active Linux partition. Previously it
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering supported only GPT disk images with proper GPT type
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering IDs. This allows running cloud images from major
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering distributions directly with systemd-nspawn, without
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * In addition to collecting mouse dpi data in the udev
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering hardware database, there's now support for collecting angle
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering information for mouse scroll wheels. The database is
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering supposed to guarantee similar scrolling behavior on mice
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering that it knows about. There's also support for collecting
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering information about Touchpad types.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * udev's input_id built-in will now also collect touch screen
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering dimension data and attach it to probed devices.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * /etc/os-release gained support for a Distribution Privacy
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Policy link field.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * networkd gained support for creating "ipvlan", "gretap",
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering "ip6gre", "ip6gretap" and "ip6tnl" network devices.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemd-tmpfiles gained support for "a" lines for setting
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering ACLs on files.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemd-nspawn will now mount /tmp in the container to
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering tmpfs, automatically.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemd now exposes the memory.usage_in_bytes cgroup
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering attribute and shows it for each service in the "systemctl
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering status" output, if available.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * When the user presses Ctrl-Alt-Del more than 7x within 2s an
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering immediate reboot is triggered. This useful if shutdown is
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering hung and is unable to complete, to expedite the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering operation. Note that this kind of reboot will still unmount
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering all file systems, and hence should not result in fsck being
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering run on next reboot.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * A .device unit for an optical block device will now be
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering considered active only when a medium is in the drive. Also,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering mount units are now bound to their backing devices thus
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering triggering automatic unmounting when devices become
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering unavailable. With this in place systemd will now
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering automatically unmount left-over mounts when a CD-ROM is
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering ejected or an USB stick is yanked from the system.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * networkd-wait-online now has support for waiting for
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering specific interfaces only (with globbing), and for giving up
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering after a configurable timeout.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * networkd now exits when idle. It will be automatically
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering restarted as soon as interfaces show up, are removed or
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering change state. networkd will stay around as long as there is
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering at least one DHCP state machine or similar around, that keep
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * networkd may now configure IPv6 link-local addressing in
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering addition to IPv4 link-local addressing.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * The IPv6 "token" for use in SLAAC may now be configured for
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering each .network interface in networkd.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * Routes configured with networkd may now be assigned a scope
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering in .network files.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * networkd's [Match] sections now support globbing and lists
c626bf1d306735a2442800c03ec10cf55442af55Daniel Mack of multiple space-separated matches per item.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Contributions from: Alban Crequy, Alin Rauta, Andrey Chaser,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Bastien Nocera, Bruno Bottazzini, Carlos Garnacho, Carlos
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Morata Castillo, Chris Atkinson, Chris J. Arges, Christian
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Kirbach, Christian Seiler, Christoph Brill, Colin Guthrie,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Colin Walters, Cristian Rodríguez, Daniele Medri, Daniel Mack,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Dave Reisner, David Herrmann, Djalal Harouni, Erik Auerswald,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Filipe Brandenburger, Frank Theile, Gabor Kelemen, Gabriel de
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Perthuis, Harald Hoyer, Hui Wang, Ivan Shapovalov, Jan
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Engelhardt, Jan Synacek, Jay Faulkner, Johannes Hölzl, Jonas
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Ådahl, Jonathan Boulle, Josef Andersson, Kay Sievers, Ken
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Werner, Lennart Poettering, Lucas De Marchi, Lukas Märdian,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Lukas Nykryn, Lukasz Skalski, Luke Shumaker, Mantas Mikulėnas,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering Manuel Mendez, Marcel Holtmann, Marc Schmitzer, Marko
c9912c5eafa03fdf53e569eaf2e89d7e0932975bDavid Herrmann Myllynen, Martin Pitt, Maxim Mikityanskiy, Michael Biebl,
47f5a38cdf98a220d6a0d4eb11a710a0a42ae5c4Lennart Poettering Michael Marineau, Michael Olbrich, Michal Schmidt, Mindaugas
47f5a38cdf98a220d6a0d4eb11a710a0a42ae5c4Lennart Poettering Baranauskas, Moez Bouhlel, Naveen Kumar, Patrik Flykt, Paul
47f5a38cdf98a220d6a0d4eb11a710a0a42ae5c4Lennart Poettering Martin, Peter Hutterer, Peter Mattern, Philippe De Swert,
47f5a38cdf98a220d6a0d4eb11a710a0a42ae5c4Lennart Poettering Piotr Drąg, Rafael Ferreira, Rami Rosen, Robert Milasan, Ronny
47f5a38cdf98a220d6a0d4eb11a710a0a42ae5c4Lennart Poettering Chevalier, Sangjung Woo, Sebastien Bacher, Sergey Ptashnick,
47f5a38cdf98a220d6a0d4eb11a710a0a42ae5c4Lennart Poettering Shawn Landden, Stéphane Graber, Susant Sahani, Sylvain
2f77decc5ba25d0463f137aa7f64ce6684917cf1Lennart Poettering Plantefève, Thomas Hindoe Paaboel Andersen, Tim JP, Tom
2f77decc5ba25d0463f137aa7f64ce6684917cf1Lennart Poettering Gundersen, Topi Miettinen, Torstein Husebø, Umut Tezduyar
2f77decc5ba25d0463f137aa7f64ce6684917cf1Lennart Poettering Lindskog, Veres Lajos, Vincent Batts, WaLyong Cho, Wieland
2f77decc5ba25d0463f137aa7f64ce6684917cf1Lennart Poettering Hoffmann, Zbigniew Jędrzejewski-Szmek
2f77decc5ba25d0463f137aa7f64ce6684917cf1Lennart Poettering -- Berlin, 2015-02-16
23d08d1b2bfd7f4b3c0a9408c9ccd65c3fb80fc2David HerrmannCHANGES WITH 218:
23d08d1b2bfd7f4b3c0a9408c9ccd65c3fb80fc2David Herrmann * When querying unit file enablement status (for example via
c9912c5eafa03fdf53e569eaf2e89d7e0932975bDavid Herrmann "systemctl is-enabled"), a new state "indirect" is now known
ec5249a27adb1ffbcd41f2c771e19c3353819456Daniel Mack which indicates that a unit might not be enabled itself, but
ec5249a27adb1ffbcd41f2c771e19c3353819456Daniel Mack another unit listed in its Alias= setting might be.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * Similar to the various existing ConditionXYZ= settings for
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering units there are now matching AssertXYZ= settings. While
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering failing conditions cause a unit to be skipped, but its job
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering to succeed, failing assertions declared like this will cause
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering a unit start operation and its job to fail.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * hostnamed now knows a new chassis type "embedded".
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemctl gained a new "edit" command. When used on a unit
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering file this allows extending unit files with .d/ drop-in
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering configuration snippets or editing the full file (after
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering copying it from /usr/lib to /etc). This will invoke the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering user's editor (as configured with $EDITOR), and reload the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering modified configuration after editing.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * "systemctl status" now shows the suggested enablement state
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering for a unit, as declared in the (usually vendor-supplied)
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering system preset files.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * nss-myhostname will now resolve the single-label host name
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering "gateway" to the locally configured default IP routing
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering gateways, ordered by their metrics. This assigns a stable
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering name to the used gateways, regardless which ones are
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering currently configured. Note that the name will only be
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering resolved after all other name sources (if nss-myhostname is
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering configured properly) and should hence not negatively impact
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering systems that use the single-label host name "gateway" in
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering other contexts.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * systemd-inhibit now allows filtering by mode when listing
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * Scope and service units gained a new "Delegate" boolean
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering property, which when set allows processes running inside the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering unit to further partition resources. This is primarily
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering useful for systemd user instances as well as container
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * journald will now pick up audit messages directly from
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering the kernel, and log them like any other log message. The
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering audit fields are split up and fully indexed. This means that
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering journalctl in many ways is now a (nicer!) alternative to
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering ausearch, the traditional audit client. Note that this
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering implements only a minimal audit client, if you want the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering special audit modes like reboot-on-log-overflow, please use
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering the traditional auditd instead, which can be used in
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering parallel to journald.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * The ConditionSecurity= unit file option now understands the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering special string "audit" to check whether auditing is
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * journalctl gained two new commands --vacuum-size= and
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering --vacuum-time= to delete old journal files until the
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering remaining ones take up no more the specified size on disk,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering or are not older than the specified time.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * A new, native PPPoE library has been added to sd-network,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering systemd's library of light-weight networking protocols. This
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering library will be used in a future version of networkd to
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering enable PPPoE communication without an external pppd daemon.
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering * The busctl tool now understands a new "capture" verb that
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering works similar to "monitor", but writes a packet capture
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering trace to STDOUT that can be redirected to a file which is
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering compatible with libcap's capture file format. This can then
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering be loaded in Wireshark and similar tools to inspect bus
e1439a1472c5f691733b8ef10e702beac2496a63David Herrmann communication.
ec5249a27adb1ffbcd41f2c771e19c3353819456Daniel Mack * The busctl tool now understands a new "tree" verb that shows
11811e856b0c63439d45edc9c9834ad427e1bb6aDavid Herrmann the object trees of a specific service on the bus, or of all
10fa421cd2abdc2ae1a07f7c13bfaa4ee6d6de4fDavid Herrmann * The busctl tool now understands a new "introspect" verb that
10fa421cd2abdc2ae1a07f7c13bfaa4ee6d6de4fDavid Herrmann shows all interfaces and members of objects on the bus,
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering including their signature and values. This is particularly
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering useful to get more information about bus objects shown by
5e8d4254f916eb7115ae14de42e7eccf6bc83786Lennart Poettering the new "busctl tree" command.
11811e856b0c63439d45edc9c9834ad427e1bb6aDavid Herrmann * The busctl tool now understands new verbs "call",
11811e856b0c63439d45edc9c9834ad427e1bb6aDavid Herrmann "set-property" and "get-property" for invoking bus method
11811e856b0c63439d45edc9c9834ad427e1bb6aDavid Herrmann calls, setting and getting bus object properties in a
11811e856b0c63439d45edc9c9834ad427e1bb6aDavid Herrmann friendly way.
11811e856b0c63439d45edc9c9834ad427e1bb6aDavid Herrmann * busctl gained a new --augment-creds= argument that controls
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann whether the tool shall augment credential information it
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann gets from the bus with data from /proc, in a possibly
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann race-ful way.
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann * nspawn's --link-journal= switch gained two new values
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann "try-guest" and "try-host" that work like "guest" and
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann "host", but do not fail if the host has no persistent
01608bc86a104423d192364f9534b83d0c75db7fKay Sievers journalling enabled. -j is now equivalent to
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann --link-journal=try-guest.
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann * macvlan network devices created by nspawn will now have
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann stable MAC addresses.
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack * A new SmackProcessLabel= unit setting has been added, which
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack controls the SMACK security label processes forked off by
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack the respective unit shall use.
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack * If compiled with --enable-xkbcommon, systemd-localed will
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack verify x11 keymap settings by compiling the given keymap. It
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack will spew out warnings if the compilation fails. This
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack requires libxkbcommon to be installed.
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack * When a coredump is collected a larger number of metadata
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack fields is now collected and included in the journal records
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack created for it. More specifically control group membership,
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack environment variables, memory maps, working directory,
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack chroot directory, /proc/$PID/status, and a list of open file
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack descriptors is now stored in the log entry.
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack * The udev hwdb now contains DPI information for mice. For
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack details see:
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack http://who-t.blogspot.de/2014/12/building-a-dpi-database-for-mice.html
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack * All systemd programs that read standalone configuration
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack files in /etc now also support a corresponding series of
931618d08c64083ff7b29c494f482c40a5b05608Daniel Mack .conf.d configuration directories in /etc/, /run/,
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann /usr/local/lib/, /usr/lib/, and (if configured with
f5f113f66692abaf72e83698cb7b4f3690b90cf8David Herrmann --enable-split-usr) /lib/. In particular, the following
f5f113f66692abaf72e83698cb7b4f3690b90cf8David Herrmann configuration files now have corresponding configuration
f5f113f66692abaf72e83698cb7b4f3690b90cf8David Herrmann directories: system.conf user.conf, logind.conf,
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann journald.conf, sleep.conf, bootchart.conf, coredump.conf,
01608bc86a104423d192364f9534b83d0c75db7fKay Sievers resolved.conf, timesyncd.conf, journal-remote.conf, and
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann journal-upload.conf. Note that distributions should use the
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann configuration directories in /usr/lib/; the directories in
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann /etc/ are reserved for the system administrator.
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann * systemd-rfkill will no longer take the rfkill device name
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann into account when storing rfkill state on disk, as the name
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann might be dynamically assigned and not stable. Instead, the
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann ID_PATH udev variable combined with the rfkill type (wlan,
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann bluetooth, ...) is used.
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann * A new service systemd-machine-id-commit.service has been
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann added. When used on systems where /etc is read-only during
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann boot, and /etc/machine-id is not initialized (but an empty
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann file), this service will copy the temporary machine ID
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann created as replacement into /etc after the system is fully
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann booted up. This is useful for systems that are freshly
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann installed with a non-initialized machine ID, but should get
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann a fixed machine ID for subsequent boots.
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann * networkd's .netdev files now provide a large set of
e4e66993951e9e349e8008fa7c81184b6e4ae385David Herrmann configuration parameters for VXLAN devices. Similar, the
e57eaef8a187762ca92838c24b9b6460878a800cDavid Herrmann bridge port cost parameter is now configurable in .network
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann files. There's also new support for configuring IP source
5541c88977e63215e74b7517fb33cb27e5a04f17David Herrmann routing. networkd .link files gained support for a new
861b02ebd6ec997a6880824960ba8903bac74f7dKay Sievers OriginalName= match that is useful to match against the
861b02ebd6ec997a6880824960ba8903bac74f7dKay Sievers original interface name the kernel assigned. .network files
861b02ebd6ec997a6880824960ba8903bac74f7dKay Sievers may include MTU= and MACAddress= fields for altering the MTU
861b02ebd6ec997a6880824960ba8903bac74f7dKay Sievers and MAC address while being connected to a specific network
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann * The LUKS logic gained supported for configuring
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann UUID-specific key files. There's also new support for naming
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann LUKS device from the kernel command line, using the new
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann * Timer units may now be transiently created via the bus API
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann (this was previously already available for scope and service
5541c88977e63215e74b7517fb33cb27e5a04f17David Herrmann units). In addition it is now possible to create multiple
5541c88977e63215e74b7517fb33cb27e5a04f17David Herrmann transient units at the same time with a single bus call. The
5541c88977e63215e74b7517fb33cb27e5a04f17David Herrmann "systemd-run" tool has been updated to make use of this for
5541c88977e63215e74b7517fb33cb27e5a04f17David Herrmann running commands on a specified time, in at(1)-style.
9b361114f568e839784a3aeba5c1df5a95e86832Daniel Mack * tmpfiles gained support for "t" lines, for assigning
9b361114f568e839784a3aeba5c1df5a95e86832Daniel Mack extended attributes to files. Among other uses this may be
9b361114f568e839784a3aeba5c1df5a95e86832Daniel Mack used to assign SMACK labels to files.
9b361114f568e839784a3aeba5c1df5a95e86832Daniel Mack Contributions from: Alin Rauta, Alison Chaiken, Andrej
9b361114f568e839784a3aeba5c1df5a95e86832Daniel Mack Manduch, Bastien Nocera, Chris Atkinson, Chris Leech, Chris
9b361114f568e839784a3aeba5c1df5a95e86832Daniel Mack Mayo, Colin Guthrie, Colin Walters, Cristian Rodríguez,
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Daniele Medri, Daniel Mack, Dan Williams, Dan Winship, Dave
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Reisner, David Herrmann, Didier Roche, Felipe Sateler, Gavin
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Li, Hans de Goede, Harald Hoyer, Iago López Galeiras, Ivan
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Shapovalov, Jakub Filak, Jan Janssen, Jan Synacek, Joe
5541c88977e63215e74b7517fb33cb27e5a04f17David Herrmann Lawrence, Josh Triplett, Kay Sievers, Lennart Poettering,
5541c88977e63215e74b7517fb33cb27e5a04f17David Herrmann Lukas Nykryn, Łukasz Stelmach, Maciej Wereski, Mantas
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Mikulėnas, Marcel Holtmann, Martin Pitt, Maurizio Lombardi,
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Michael Biebl, Michael Chapman, Michael Marineau, Michal
2d1ca11270e66777c90a449096203afebc37ec9cDavid Herrmann Schmidt, Michal Sekletar, Olivier Brunel, Patrik Flykt, Peter
2d1ca11270e66777c90a449096203afebc37ec9cDavid Herrmann Hutterer, Przemyslaw Kedzierski, Rami Rosen, Ray Strode,
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Richard Schütz, Richard W.M. Jones, Ronny Chevalier, Ross
2d1ca11270e66777c90a449096203afebc37ec9cDavid Herrmann Lagerwall, Sean Young, Stanisław Pitucha, Susant Sahani,
0db83ad7334809a6605501e24bad55f3b652c072David Herrmann Thomas Haller, Thomas Hindoe Paaboel Andersen, Tom Gundersen,
0f0467e63b0e0688ae9edb1512c1a2637d62ddb4Martin Pitt Torstein Husebø, Umut Tezduyar Lindskog, Vicente Olivert
0f0467e63b0e0688ae9edb1512c1a2637d62ddb4Martin Pitt Riera, WaLyong Cho, Wesley Dawson, Zbigniew Jędrzejewski-Szmek
5f92d24fa85d6652c4754e3b3b2a3393026bd0b9Kay Sievers -- Berlin, 2014-12-10
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart PoetteringCHANGES WITH 217:
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * journalctl gained the new options -t/--identifier= to match
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering on the syslog identifier (aka "tag"), as well as --utc to
0aee49d5fba2b2ec94e5c069d937004858a04b4fThomas Hindoe Paaboel Andersen show log timestamps in the UTC timezone. journalctl now also
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering accepts -n/--lines=all to disable line capping in a pager.
5f92d24fa85d6652c4754e3b3b2a3393026bd0b9Kay Sievers * journalctl gained a new switch, --flush, that synchronously
0f0467e63b0e0688ae9edb1512c1a2637d62ddb4Martin Pitt flushes logs from /run/log/journal to /var/log/journal if
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering persistent storage is enabled. systemd-journal-flush.service
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering now waits until the operation is complete.
c65514649680e5d5ee6a118db6e5b20438cb1710Ronny Chevalier * Services can notify the manager before they start a reload
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering (by sending RELOADING=1) or shutdown (by sending
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering STOPPING=1). This allows the manager to track and show the
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering internal state of daemons and closes a race condition when
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering the process is still running but has closed its D-Bus
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * Services with Type=oneshot do not have to have any ExecStart
0f0467e63b0e0688ae9edb1512c1a2637d62ddb4Martin Pitt commands anymore.
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * User units are now loaded also from
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering $XDG_RUNTIME_DIR/systemd/user/. This is similar to the
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering /run/systemd/user directory that was already previously
0aee49d5fba2b2ec94e5c069d937004858a04b4fThomas Hindoe Paaboel Andersen supported, but is under the control of the user.
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * Job timeouts (i.e. time-outs on the time a job that is
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering queued stays in the run queue) can now optionally result in
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering immediate reboot or power-off actions (JobTimeoutAction= and
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering JobTimeoutRebootArgument=). This is useful on ".target"
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering units, to limit the maximum time a target remains
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering undispatched in the run queue, and to trigger an emergency
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering operation in such a case. This is now used by default to
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering turn off the system if boot-up (as defined by everything in
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering basic.target) hangs and does not complete for at least
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering 15min. Also, if power-off or reboot hang for at least 30min
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering an immediate power-off/reboot operation is triggered. This
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering functionality is particularly useful to increase reliability
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering on embedded devices, but also on laptops which might
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering accidentally get powered on when carried in a backpack and
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering whose boot stays stuck in a hard disk encryption passphrase
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * systemd-logind can be configured to also handle lid switch
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering events even when the machine is docked or multiple displays
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering are attached (HandleLidSwitchDocked= option).
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * A helper binary and a service have been added which can be
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering used to resume from hibernation in the initramfs. A
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering generator will parse the resume= option on the kernel
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering command line to trigger resume.
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * A user console daemon systemd-consoled has been
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering added. Currently, it is a preview, and will so far open a
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering single terminal on each session of the user marked as
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering Desktop=systemd-console.
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * Route metrics can be specified for DHCP routes added by
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering systemd-networkd.
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering * The SELinux context of socket-activated services can be set
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering from the information provided by the networking stack
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering (SELinuxContextFromNet= option).
b912e251812bb65bed1d545d9748f5b0918f1559Lennart Poettering * Userspace firmware loading support has been removed and
b912e251812bb65bed1d545d9748f5b0918f1559Lennart Poettering the minimum supported kernel version is thus bumped to 3.7.
b912e251812bb65bed1d545d9748f5b0918f1559Lennart Poettering * Timeout for udev workers has been increased from 1 to 3
b912e251812bb65bed1d545d9748f5b0918f1559Lennart Poettering minutes, but a warning will be printed after 1 minute to
470e72d4081c7d0fd74666b7a45358d5ee2abee1Lennart Poettering help diagnose kernel modules that take a long time to load.
0f0467e63b0e0688ae9edb1512c1a2637d62ddb4Martin Pitt * Udev rules can now remove tags on devices with TAG-="foobar".
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * systemd's readahead implementation has been removed. In many
f7a73a2558bceffd983eb7642680e718cd981122David Herrmann circumstances it didn't give expected benefits even for
f7a73a2558bceffd983eb7642680e718cd981122David Herrmann rotational disk drives and was becoming less relevant in the
f7a73a2558bceffd983eb7642680e718cd981122David Herrmann age of SSDs. As none of the developers has been using
f7a73a2558bceffd983eb7642680e718cd981122David Herrmann rotating media anymore, and nobody stepped up to actively
f7a73a2558bceffd983eb7642680e718cd981122David Herrmann maintain this component of systemd it has now been removed.
f7a73a2558bceffd983eb7642680e718cd981122David Herrmann * Swap units can use Options= to specify discard options.
f7a73a2558bceffd983eb7642680e718cd981122David Herrmann Discard options specified for swaps in /etc/fstab are now
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * Docker containers are now detected as a separate type of
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering virtualization.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * The Password Agent protocol gained support for queries where
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering the user input is shown, useful e.g. for user names.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering systemd-ask-password gained a new --echo option to turn that
29d1fcb4a3c921a3d4490353474e9775f7b13b0eZbigniew Jędrzejewski-Szmek * The default sysctl.d/ snippets will now set:
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering This selects Fair Queuing Controlled Delay as the default
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering queuing discipline for network interfaces. fq_codel helps
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering fight the network bufferbloat problem. It is believed to be
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering a good default with no tuning required for most workloads.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Downstream distributions may override this choice. On 10Gbit
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering servers that do not do forwarding, "fq" may perform better.
29d1fcb4a3c921a3d4490353474e9775f7b13b0eZbigniew Jędrzejewski-Szmek Systems without a good clocksource should use "pfifo_fast".
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * If kdbus is enabled during build a new option BusPolicy= is
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering available for service units, that allows locking all service
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering processes into a stricter bus policy, in order to limit
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering access to various bus services, or even hide most of them
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering from the service's view entirely.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * networkctl will now show the .network and .link file
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering networkd has applied to a specific interface.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * sd-login gained a new API call sd_session_get_desktop() to
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering query which desktop environment has been selected for a
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * UNIX utmp support is now compile-time optional to support
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering legacy-free systems.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * systemctl gained two new commands "add-wants" and
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering "add-requires" for pulling in units from specific targets
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * If the word "rescue" is specified on the kernel command line
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering the system will now boot into rescue mode (aka
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering rescue.target), which was previously available only by
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering specifying "1" or "systemd.unit=rescue.target" on the kernel
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering command line. This new kernel command line option nicely
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering mirrors the already existing "emergency" kernel command line
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * New kernel command line options mount.usr=, mount.usrflags=,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering mount.usrfstype= have been added that match root=, rootflags=,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering rootfstype= but allow mounting a specific file system to
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * The $NOTIFY_SOCKET is now also passed to control processes of
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering services, not only the main process.
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering * This version reenables support for fsck's -l switch. This
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering means at least version v2.25 of util-linux is required for
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering operation, otherwise dead-locks on device nodes may
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering occur. Again: you need to update util-linux to at least
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering v2.25 when updating systemd to v217.
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering * The "multi-seat-x" tool has been removed from systemd, as
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering its functionality has been integrated into X servers 1.16,
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering and the tool is hence redundant. It is recommended to update
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering display managers invoking this tool to simply invoke X
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering directly from now on, again.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * Support for the new ALLOW_INTERACTIVE_AUTHORIZATION D-Bus
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering message flag has been added for all of systemd's PolicyKit
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering authenticated method calls has been added. In particular
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering this now allows optional interactive authorization via
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering PolicyKit for many of PID1's privileged operations such as
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering unit file enabling and disabling.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * "udevadm hwdb --update" learnt a new switch "--usr" for
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering placing the rebuilt hardware database in /usr instead of
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering /etc. When used only hardware database entries stored in
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering /usr will be used, and any user database entries in /etc are
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering ignored. This functionality is useful for vendors to ship a
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering pre-built database on systems where local configuration is
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering unnecessary or unlikely.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * Calendar time specifications in .timer units now also
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering understand the strings "semi-annually", "quarterly" and
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering "minutely" as shortcuts (in addition to the preexisting
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering "anually", "hourly", ...).
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * systemd-tmpfiles will now correctly create files in /dev
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering at boot which are marked for creation only at boot. It is
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering recommended to always create static device nodes with 'c!'
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering and 'b!', so that they are created only at boot and not
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering overwritten at runtime.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * When the watchdog logic is used for a service (WatchdogSec=)
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering and the watchdog timeout is hit the service will now be
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering terminated with SIGABRT (instead of just SIGTERM), in order
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering to make sure a proper coredump and backtrace is
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering generated. This ensures that hanging services will result in
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering similar coredump/backtrace behaviour as services that hit a
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering segmentation fault.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Contributions from: Andreas Henriksson, Andrei Borzenkov,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Angus Gibson, Ansgar Burchardt, Ben Wolsieffer, Brandon L.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Black, Christian Hesse, Cristian Rodríguez, Daniel Buch,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Daniele Medri, Daniel Mack, Dan Williams, Dave Reisner, David
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Herrmann, David Sommerseth, David Strauss, Emil Renner
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Berthing, Eric Cook, Evangelos Foutras, Filipe Brandenburger,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Gustavo Sverzut Barbieri, Hans de Goede, Harald Hoyer, Hristo
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Venev, Hugo Grostabussiat, Ivan Shapovalov, Jan Janssen, Jan
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Synacek, Jonathan Liu, Juho Son, Karel Zak, Kay Sievers, Klaus
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Purer, Koen Kooi, Lennart Poettering, Lukas Nykryn, Lukasz
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Skalski, Łukasz Stelmach, Mantas Mikulėnas, Marcel Holtmann,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Marius Tessmann, Marko Myllynen, Martin Pitt, Michael Biebl,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Michael Marineau, Michael Olbrich, Michael Scherer, Michal
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Schmidt, Michal Sekletar, Miroslav Lichvar, Patrik Flykt,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Philippe De Swert, Piotr Drąg, Rahul Sundaram, Richard
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Weinberger, Robert Milasan, Ronny Chevalier, Ruben Kerkhof,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Santiago Vila, Sergey Ptashnick, Simon McVittie, Sjoerd
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Simons, Stefan Brüns, Steven Allen, Steven Noonan, Susant
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Sahani, Sylvain Plantefève, Thomas Hindoe Paaboel Andersen,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Timofey Titovets, Tobias Hunger, Tom Gundersen, Torstein
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Husebø, Umut Tezduyar Lindskog, WaLyong Cho, Zbigniew
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering Jędrzejewski-Szmek
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering -- Berlin, 2014-10-28
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart PoetteringCHANGES WITH 216:
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * timedated no longer reads NTP implementation unit names from
1579dd2c9b8f97e5ec4016d3928d73fea160e55aLennart Poettering /usr/lib/systemd/ntp-units.d/*.list. Alternative NTP
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering implementations should add a
1a2d5fbe7efa04181a2d5518bc510b84b280baf9David Herrmann to their unit files to take over and replace systemd's NTP
1a2d5fbe7efa04181a2d5518bc510b84b280baf9David Herrmann default functionality.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * systemd-sysusers gained a new line type "r" for configuring
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering which UID/GID ranges to allocate system users/groups
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering from. Lines of type "u" may now add an additional column
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering that specifies the home directory for the system user to be
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering created. Also, systemd-sysusers may now optionally read user
1a2d5fbe7efa04181a2d5518bc510b84b280baf9David Herrmann information from STDIN instead of a file. This is useful for
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering invoking it from RPM preinst scriptlets that need to create
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering users before the first RPM file is installed since these
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering files might need to be owned by them. A new
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering %sysusers_create_inline RPM macro has been introduced to do
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering just that. systemd-sysusers now updates the shadow files as
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering well as the user/group databases, which should enhance
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering compatibility with certain tools like grpck.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * A number of bus APIs of PID 1 now optionally consult
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering PolicyKit to permit access for otherwise unprivileged
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering clients under certain conditions. Note that this currently
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering doesn't support interactive authentication yet, but this is
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering expected to be added eventually, too.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * /etc/machine-info now has new fields for configuring the
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering deployment environment of the machine, as well as the
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering location of the machine. hostnamectl has been updated with
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering new command to update these fields.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * systemd-timesyncd has been updated to automatically acquire
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering NTP server information from systemd-networkd, which might
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering have been discovered via DHCP.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * systemd-resolved now includes a caching DNS stub resolver
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering and a complete LLMNR name resolution implementation. A new
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering NSS module "nss-resolve" has been added which can be used
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering instead of glibc's own "nss-dns" to resolve hostnames via
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering systemd-resolved. Hostnames, addresses and arbitrary RRs may
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering be resolved via systemd-resolved D-Bus APIs. In contrast to
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering the glibc internal resolver systemd-resolved is aware of
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering multi-homed system, and keeps DNS server and caches separate
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering and per-interface. Queries are sent simultaneously on all
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering interfaces that have DNS servers configured, in order to
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering properly handle VPNs and local LANs which might resolve
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering separate sets of domain names. systemd-resolved may acquire
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering DNS server information from systemd-networkd automatically,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering which in turn might have discovered them via DHCP. A tool
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering "systemd-resolve-host" has been added that may be used to
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering query the DNS logic in resolved. systemd-resolved implements
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering IDNA and automatically uses IDNA or UTF-8 encoding depending
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering on whether classic DNS or LLMNR is used as transport. In the
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering next releases we intend to add a DNSSEC and mDNS/DNS-SD
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering implementation to systemd-resolved.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * A new NSS module nss-mymachines has been added, that
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering automatically resolves the names of all local registered
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering containers to their respective IP addresses.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * A new client tool "networkctl" for systemd-networkd has been
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering added. It currently is entirely passive and will query
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering networking configuration from udev, rtnetlink and networkd,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering and present it to the user in a very friendly
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering way. Eventually, we hope to extend it to become a full
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering control utility for networkd.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * .socket units gained a new DeferAcceptSec= setting that
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering controls the kernels' TCP_DEFER_ACCEPT sockopt for
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering TCP. Similar, support for controlling TCP keep-alive
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering settings has been added (KeepAliveTimeSec=,
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering KeepAliveIntervalSec=, KeepAliveProbes=). Also, support for
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering turning off Nagle's algorithm on TCP has been added
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * logind learned a new session type "web", for use in projects
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering like Cockpit which register web clients as PAM sessions.
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering * timer units with at least one OnCalendar= setting will now
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering be started only after timer-sync.target has been
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering reached. This way they will not elapse before the system
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering clock has been corrected by a local NTP client or
481a0aa2c9803a62cda413b8a1d05571957bb4b5Lennart Poettering similar. This is particular useful on RTC-less embedded
39315f9f8dd5a16b4561c5efffc6114c75835011Lennart Poettering machines, that come up with an invalid system clock.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-nspawn's --network-veth= switch should now result in
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering stable MAC addresses for both the outer and the inner side
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-nspawn gained a new --volatile= switch for running
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering container instances with /etc or /var unpopulated.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * The kdbus client code has been updated to use the new Linux
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering 3.17 memfd subsystem instead of the old kdbus-specific one.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-networkd's DHCP client and server now support
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering FORCERENEW. There are also new configuration options to
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering configure the vendor client identifier and broadcast mode
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd will no longer inform the kernel about the current
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering timezone, as this is necessarily incorrect and racy as the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering kernel has no understanding of DST and similar
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering concepts. This hence means FAT timestamps will be always
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering considered UTC, similar to what Android is already
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering doing. Also, when the RTC is configured to the local time
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering (rather than UTC) systemd will never synchronize back to it,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering as this might confuse Windows at a later boot.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-analyze gained a new command "verify" for offline
7edecf218e5884ec8d1549707b4c7a0572c2d93bThomas Hindoe Paaboel Andersen validation of unit files.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-networkd gained support for a couple of additional
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering settings for bonding networking setups. Also, the metric for
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering statically configured routes may now be configured. For
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering network interfaces where this is appropriate the peer IP
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering address may now be configured.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-networkd's DHCP client will no longer request
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering broadcasting by default, as this tripped up some networks.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering For hardware where broadcast is required the feature should
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering be switched back on using RequestBroadcast=yes.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-networkd will now set up IPv4LL addresses (when
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering enabled) even if DHCP is configured successfully.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * udev will now default to respect network device names given
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering by the kernel when the kernel indicates that these are
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering predictable. This behavior can be tweaked by changing
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering NamePolicy= in the relevant .link file.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new library systemd-terminal has been added that
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering implements full TTY stream parsing and rendering. This
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering library is supposed to be used later on for implementing a
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering full userspace VT subsystem, replacing the current kernel
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering implementation.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new tool systemd-journal-upload has been added to push
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering journal data to a remote system running
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering systemd-journal-remote.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * journald will no longer forward all local data to another
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering running syslog daemon. This change has been made because
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering rsyslog (which appears to be the most commonly used syslog
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering implementation these days) no longer makes use of this, and
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering instead pulls the data out of the journal on its own. Since
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering forwarding the messages to a non-existent syslog server is
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering more expensive than we assumed we have now turned this
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering off. If you run a syslog server that is not a recent rsyslog
94e5ba370aa12b47571f08112986d0b91935dee9Torstein Husebø version, you have to turn this option on again
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering (ForwardToSyslog= in journald.conf).
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * journald now optionally supports the LZ4 compressor for
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering larger journal fields. This compressor should perform much
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering better than XZ which was the previous default.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * machinectl now shows the IP addresses of local containers,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering if it knows them, plus the interface name of the container.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new tool "systemd-escape" has been added that makes it
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering easy to escape strings to build unit names and similar.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * sd_notify() messages may now include a new ERRNO= field
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering which is parsed and collected by systemd and shown among the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering "systemctl status" output for a service.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new component "systemd-firstboot" has been added that
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering queries the most basic systemd information (timezone,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering hostname, root password) interactively on first
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering boot. Alternatively it may also be used to provision these
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering things offline on OS images installed into directories.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * The default sysctl.d/ snippets will now set
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering net.ipv4.conf.default.promote_secondaries=1
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering This has the benefit of no flushing secondary IP addresses
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering when primary addresses are removed.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Contributions from: Ansgar Burchardt, Bastien Nocera, Colin
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Walters, Dan Dedrick, Daniel Buch, Daniel Korostil, Daniel
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Mack, Dan Williams, Dave Reisner, David Herrmann, Denis
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Kenzior, Eelco Dolstra, Eric Cook, Hannes Reinecke, Harald
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Hoyer, Hong Shick Pak, Hui Wang, Jean-André Santoni, Jóhann
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering B. Guðmundsson, Jon Severinsson, Karel Zak, Kay Sievers, Kevin
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Wells, Lennart Poettering, Lukas Nykryn, Mantas Mikulėnas,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Marc-Antoine Perennou, Martin Pitt, Michael Biebl, Michael
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Marineau, Michael Olbrich, Michal Schmidt, Michal Sekletar,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Miguel Angel Ajo, Mike Gilbert, Olivier Brunel, Robert
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Schiele, Ronny Chevalier, Simon McVittie, Sjoerd Simons, Stef
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Walter, Steven Noonan, Susant Sahani, Tanu Kaskinen, Thomas
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Blume, Thomas Hindoe Paaboel Andersen, Timofey Titovets,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Tobias Geerinckx-Rice, Tomasz Torcz, Tom Gundersen, Umut
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering Tezduyar Lindskog, Zbigniew Jędrzejewski-Szmek
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering -- Berlin, 2014-08-19
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart PoetteringCHANGES WITH 215:
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new tool systemd-sysusers has been added. This tool
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering creates system users and groups in /etc/passwd and
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering /etc/group, based on static declarative system user/group
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering definitions in /usr/lib/sysusers.d/. This is useful to
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering enable factory resets and volatile systems that boot up with
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering an empty /etc directory, and thus need system users and
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering groups created during early boot. systemd now also ships
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering with two default sysusers.d/ files for the most basic
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering users and groups systemd and the core operating system
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new tmpfiles snippet has been added that rebuilds the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering essential files in /etc on boot, should they be missing.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A directive for ensuring automatic clean-up of
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering /var/cache/man/ has been removed from the default
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering configuration. This line should now be shipped by the man
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering implementation. The necessary change has been made to the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering man-db implementation. Note that you need to update your man
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering implementation to one that ships this line, otherwise no
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering automatic clean-up of /var/cache/man will take place.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new condition ConditionNeedsUpdate= has been added that
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering may conditionalize services to only run when /etc or /var
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering are "older" than the vendor operating system resources in
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering /usr. This is useful for reconstructing or updating /etc
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering after an offline update of /usr or a factory reset, on the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering next reboot. Services that want to run once after such an
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering update or reset should use this condition and order
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering themselves before the new systemd-update-done.service, which
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering will mark the two directories as fully updated. A number of
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering service files have been added making use of this, to rebuild
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering the udev hardware database, the journald message catalog and
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering dynamic loader cache (ldconfig). The systemd-sysusers tool
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering described above also makes use of this now. With this in
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering place it is now possible to start up a minimal operating
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering system with /etc empty cleanly. For more information on the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering concepts involved see this recent blog story:
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering http://0pointer.de/blog/projects/stateless.html
94e5ba370aa12b47571f08112986d0b91935dee9Torstein Husebø * A new system group "input" has been introduced, and all
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering input device nodes get this group assigned. This is useful
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering for system-level software to get access to input devices. It
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering complements what is already done for "audio" and "video".
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-networkd learnt minimal DHCPv4 server support in
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering addition to the existing DHCPv4 client support. It also
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering learnt DHCPv6 client and IPv6 Router Solicitation client
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering support. The DHCPv4 client gained support for static routes
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering passed in from the server. Note that the [DHCPv4] section
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering known in older systemd-networkd versions has been renamed to
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering [DHCP] and is now also used by the DHCPv6 client. Existing
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering .network files using settings of this section should be
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering updated, though compatibility is maintained. Optionally, the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering client hostname may now be sent to the DHCP server.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * networkd gained support for vxlan virtual networks as well
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering as tun/tap and dummy devices.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * networkd gained support for automatic allocation of address
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering ranges for interfaces from a system-wide pool of
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering addresses. This is useful for dynamically managing a large
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering number of interfaces with a single network configuration
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering file. In particular this is useful to easily assign
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering appropriate IP addresses to the veth links of a large number
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering of nspawn instances.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * RPM macros for processing sysusers, sysctl and binfmt
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering drop-in snippets at package installation time have been
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * The /etc/os-release file should now be placed in
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering /usr/lib/os-release. The old location is automatically
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering created as symlink. /usr/lib is the more appropriate
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering location of this file, since it shall actually describe the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering vendor operating system shipped in /usr, and not the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering configuration stored in /etc.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * .mount units gained a new boolean SloppyOptions= setting
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering that maps to mount(8)'s -s option which enables permissive
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering parsing of unknown mount options.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * tmpfiles learnt a new "L+" directive which creates a symlink
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering but (unlike "L") deletes a pre-existing file first, should
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering it already exist and not already be the correct
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering symlink. Similar, "b+", "c+" and "p+" directives have been
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering added as well, which create block and character devices, as
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering well as fifos in the filesystem, possibly removing any
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering pre-existing files of different types.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * For tmpfiles' "L", "L+", "C" and "C+" directives the final
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering 'argument' field (which so far specified the source to
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering symlink/copy the files from) is now optional. If omitted the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering same file os copied from /usr/share/factory/ suffixed by the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering full destination path. This is useful for populating /etc
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering with essential files, by copying them from vendor defaults
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new command "systemctl preset-all" has been added that
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering applies the service preset settings to all installed unit
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering files. A new switch --preset-mode= has been added that
dd2fd155901a965ec0efa3adc460b33d2048d4c2Lennart Poettering controls whether only enable or only disable operations
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering shall be executed.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new command "systemctl is-system-running" has been added
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering that allows checking the overall state of the system, for
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering example whether it is fully up and running.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * When the system boots up with an empty /etc, the equivalent
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering to "systemctl preset-all" is executed during early boot, to
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering make sure all default services are enabled after a factory
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd now contains a minimal preset file that enables the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering most basic services systemd ships by default.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * Unit files' [Install] section gained a new DefaultInstance=
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering field for defining the default instance to create if a
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering template unit is enabled with no instance specified.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new passive target cryptsetup-pre.target has been added
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering that may be used by services that need to make they run and
7edecf218e5884ec8d1549707b4c7a0572c2d93bThomas Hindoe Paaboel Andersen finish before the first LUKS cryptographic device is set up.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * The /dev/loop-control and /dev/btrfs-control device nodes
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering are now owned by the "disk" group by default, opening up
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering access to this group.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-coredump will now automatically generate a
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering stack trace of all core dumps taking place on the system,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering based on elfutils' libdw library. This stack trace is logged
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering to the journal.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-coredump may now optionally store coredumps directly
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering on disk (in /var/lib/systemd/coredump, possibly compressed),
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering instead of storing them unconditionally in the journal. This
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering mode is the new default. A new configuration file
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering /etc/systemd/coredump.conf has been added to configure this
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering and other parameters of systemd-coredump.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * coredumpctl gained a new "info" verb to show details about a
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering specific coredump. A new switch "-1" has also been added
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering that makes sure to only show information about the most
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering recent entry instead of all entries. Also, as the tool is
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering generally useful now the "systemd-" prefix of the binary
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering name has been removed. Distributions that want to maintain
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering compatibility with the old name should add a symlink from
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering the old name to the new name.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * journald's SplitMode= now defaults to "uid". This makes sure
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering that unprivileged users can access their own coredumps with
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering coredumpctl without restrictions.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * New kernel command line options "systemd.wants=" (for
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering pulling an additional unit during boot), "systemd.mask="
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering (for masking a specific unit for the boot), and
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering "systemd.debug-shell" (for enabling the debug shell on tty9)
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering have been added. This is implemented in the new generator
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering "systemd-debug-generator".
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * systemd-nspawn will now by default filter a couple of
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering syscalls for containers, among them those required for
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering kernel module loading, direct x86 IO port access, swap
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering management, and kexec. Most importantly though
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering open_by_handle_at() is now prohibited for containers,
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering closing a hole similar to a recently discussed vulnerability
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering in docker regarding access to files on file hierarchies the
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering container should normally not have access to. Note that for
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering nspawn we generally make no security claims anyway (and
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering this is explicitly documented in the man page), so this is
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering just a fix for one of the most obvious problems.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * A new man page file-hierarchy(7) has been added that
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering contains a minimized, modernized version of the file system
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering layout systemd expects, similar in style to the FHS
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering specification or hier(5). A new tool systemd-path(1) has
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering been added to query many of these paths for the local
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering machine and user.
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering * Automatic time-based clean-up of $XDG_RUNTIME_DIR is no
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering longer done. Since the directory now has a per-user size
615aaf412c441e67c7cad2e5ae966b03fca1fae7Lennart Poettering limit, and is cleaned on logout this appears unnecessary,
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering in particular since this now brings the lifecycle of this
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering directory closer in line with how IPC objects are handled.
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering * systemd.pc now exports a number of additional directories,
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering including $libdir (which is useful to identify the library
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering path for the primary architecture of the system), and a
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering couple of drop-in directories.
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering * udev's predictable network interface names now use the dev_port
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering sysfs attribute, introduced in linux 3.15 instead of dev_id to
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering distinguish between ports of the same PCI function. dev_id should
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering only be used for ports using the same HW address, hence the need
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering * machined has been updated to export the OS version of a
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering container (read from /etc/os-release and
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering /usr/lib/os-release) on the bus. This is now shown in
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering "machinectl status" for a machine.
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering * A new service setting RestartForceExitStatus= has been
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering added. If configured to a set of exit signals or process
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering return values, the service will be restarted when the main
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering daemon process exits with any of them, regardless of the
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering Restart= setting.
d2c643c662e2cb3b6d1445c17c80b4b2998d5c61Lennart Poettering * systemctl's -H switch for connecting to remote systemd
11ea2781eea4b912d2feb26785ece475e504c57bLennart Poettering machines has been extended so that it may be used to
d4f5a1f47dbd04f26f2ddf951c97c4cb0ebbbe62David Herrmann directly connect to a specific container on the
d4f5a1f47dbd04f26f2ddf951c97c4cb0ebbbe62David Herrmann host. "systemctl -H root@foobar:waldi" will now connect as
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering user "root" to host "foobar", and then proceed directly to
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering the container named "waldi". Note that currently you have to
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering authenticate as user "root" for this to work, as entering
c7683ffb53da4ad4334cc9f813e39cffed7e0d0bEvgeny Vereshchagin containers is a privileged operation.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Contributions from: Andreas Henriksson, Benjamin Steinwender,
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt Carl Schaefer, Christian Hesse, Colin Ian King, Cristian
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Rodríguez, Daniel Mack, Dave Reisner, David Herrmann, Eugene
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Yakubovich, Filipe Brandenburger, Frederic Crozat, Hristo
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Venev, Jan Engelhardt, Jonathan Boulle, Kay Sievers, Lennart
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Poettering, Luke Shumaker, Mantas Mikulėnas, Marc-Antoine
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Perennou, Marcel Holtmann, Michael Marineau, Michael Olbrich,
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Michał Bartoszkiewicz, Michal Sekletar, Patrik Flykt, Ronan Le
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Martret, Ronny Chevalier, Ruediger Oertel, Steven Noonan,
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt Susant Sahani, Thadeu Lima de Souza Cascardo, Thomas Hindoe
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Paaboel Andersen, Tom Gundersen, Tom Hirst, Umut Tezduyar
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Lindskog, Uoti Urpala, Zbigniew Jędrzejewski-Szmek
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering -- Berlin, 2014-07-03
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart PoetteringCHANGES WITH 214:
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * As an experimental feature, udev now tries to lock the
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering disk device node (flock(LOCK_SH|LOCK_NB)) while it
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering executes events for the disk or any of its partitions.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering Applications like partitioning programs can lock the
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering disk device node (flock(LOCK_EX)) and claim temporary
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering device ownership that way; udev will entirely skip all event
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering handling for this disk and its partitions. If the disk
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering was opened for writing, the close will trigger a partition
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering table rescan in udev's "watch" facility, and if needed
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering synthesize "change" events for the disk and all its partitions.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering This is now unconditionally enabled, and if it turns out to
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering cause major problems, we might turn it on only for specific
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering devices, or might need to disable it entirely. Device Mapper
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering devices are excluded from this logic.
122676c9d9737f8591429fd5ffc9b454a994741dLennart Poettering * We temporarily dropped the "-l" switch for fsck invocations,
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt since they collide with the flock() logic above. util-linux
122676c9d9737f8591429fd5ffc9b454a994741dLennart Poettering upstream has been changed already to avoid this conflict,
122676c9d9737f8591429fd5ffc9b454a994741dLennart Poettering and we will readd "-l" as soon as util-linux with this
122676c9d9737f8591429fd5ffc9b454a994741dLennart Poettering change has been released.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * The dependency on libattr has been removed. Since a long
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering time, the extended attribute calls have moved to glibc, and
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering libattr is thus unnecessary.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Virtualization detection works without priviliges now. This
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt means the systemd-detect-virt binary no longer requires
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering CAP_SYS_PTRACE file capabilities, and our daemons can run
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering with fewer privileges.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * systemd-networkd now runs under its own "systemd-network"
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering user. It retains the CAP_NET_ADMIN, CAP_NET_BIND_SERVICE,
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering CAP_NET_BROADCAST, CAP_NET_RAW capabilities though, but
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering loses the ability to write to files owned by root this way.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Similar, systemd-resolved now runs under its own
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering "systemd-resolve" user with no capabilities remaining.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Similar, systemd-bus-proxyd now runs under its own
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering "systemd-bus-proxy" user with only CAP_IPC_OWNER remaining.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * systemd-networkd gained support for setting up "veth"
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering virtual ethernet devices for container connectivity, as well
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering as GRE and VTI tunnels.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * systemd-networkd will no longer automatically attempt to
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering manually load kernel modules necessary for certain tunnel
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering transports. Instead, it is assumed the kernel loads them
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering automatically when required. This only works correctly on
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering very new kernels. On older kernels, please consider adding
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering the kernel modules to /etc/modules-load.d/ as a work-around.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * The resolv.conf file systemd-resolved generates has been
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering moved to /run/systemd/resolve/. If you have a symlink from
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering /etc/resolv.conf, it might be necessary to correct it.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Two new service settings, ProtectHome= and ProtectSystem=,
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering have been added. When enabled, they will make the user data
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering (such as /home) inaccessible or read-only and the system
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering (such as /usr) read-only, for specific services. This allows
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering very light-weight per-service sandboxing to avoid
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering modifications of user data or system files from
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering services. These two new switches have been enabled for all
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering of systemd's long-running services, where appropriate.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Socket units gained new SocketUser= and SocketGroup=
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering settings to set the owner user and group of AF_UNIX sockets
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering and FIFOs in the file system.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Socket units gained a new RemoveOnStop= setting. If enabled,
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering all FIFOS and sockets in the file system will be removed
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering when the specific socket unit is stopped.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Socket units gained a new Symlinks= setting. It takes a list
17c29493dc5c4c3ca886adfdc632d297c5eb06ebRonny Chevalier of symlinks to create to file system sockets or FIFOs
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering created by the specific Unix sockets. This is useful to
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering manage symlinks to socket nodes with the same life-cycle as
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering the socket itself.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * The /dev/log socket and /dev/initctl FIFO have been moved to
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering /run, and have been replaced by symlinks. This allows
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering connecting to these facilities even if PrivateDevices=yes is
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering used for a service (which makes /dev/log itself unavailable,
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering but /run is left). This also has the benefit of ensuring
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering that /dev only contains device nodes, directories and
d4f5a1f47dbd04f26f2ddf951c97c4cb0ebbbe62David Herrmann symlinks, and nothing else.
d4f5a1f47dbd04f26f2ddf951c97c4cb0ebbbe62David Herrmann * sd-daemon gained two new calls sd_pid_notify() and
d4f5a1f47dbd04f26f2ddf951c97c4cb0ebbbe62David Herrmann sd_pid_notifyf(). They are similar to sd_notify() and
d4f5a1f47dbd04f26f2ddf951c97c4cb0ebbbe62David Herrmann sd_notifyf(), but allow overriding of the source PID of
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt notification messages if permissions permit this. This is
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering useful to send notify messages on behalf of a different
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt process (for example, the parent process). The
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering systemd-notify tool has been updated to make use of this
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering when sending messages (so that notification messages now
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering originate from the shell script invoking systemd-notify and
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering not the systemd-notify process itself. This should minimize
17c29493dc5c4c3ca886adfdc632d297c5eb06ebRonny Chevalier a race where systemd fails to associate notification
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering messages to services when the originating process already
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * A new "on-abnormal" setting for Restart= has been added. If
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering set, it will result in automatic restarts on all "abnormal"
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering reasons for a process to exit, which includes unclean
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett signals, core dumps, timeouts and watchdog timeouts, but
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett does not include clean and unclean exit codes or clean
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett signals. Restart=on-abnormal is an alternative for
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett Restart=on-failure for services that shall be able to
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett terminate and avoid restarts on certain errors, by
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett indicating so with an unclean exit code. Restart=on-failure
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett or Restart=on-abnormal is now the recommended setting for
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett all long-running services.
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett * If the InaccessibleDirectories= service setting points to a
997b2b438c2d272e3bc8df6e4b42dba3b70cb056Josh Triplett mount point (or if there are any submounts contained within
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering it), it is now attempted to completely unmount it, to make
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering the file systems truly unavailable for the respective
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * The ReadOnlyDirectories= service setting and
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering systemd-nspawn's --read-only parameter are now recursively
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering applied to all submounts, too.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Mount units may now be created transiently via the bus APIs.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * The support for SysV and LSB init scripts has been removed
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering from the systemd daemon itself. Instead, it is now
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering implemented as a generator that creates native systemd units
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering from these scripts when needed. This enables us to remove a
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering substantial amount of legacy code from PID 1, following the
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering fact that many distributions only ship a very small number
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt of LSB/SysV init scripts nowadays.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * Privileged Xen (dom0) domains are not considered
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering virtualization anymore by the virtualization detection
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering logic. After all, they generally have unrestricted access to
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering the hardware and usually are used to manage the unprivileged
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering (domU) domains.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * systemd-tmpfiles gained a new "C" line type, for copying
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering files or entire directories.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * systemd-tmpfiles "m" lines are now fully equivalent to "z"
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering lines. So far, they have been non-globbing versions of the
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering latter, and have thus been redundant. In future, it is
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering recommended to only use "z". "m" has hence been removed
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering from the documentation, even though it stays supported.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * A tmpfiles snippet to recreate the most basic structure in
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering /var has been added. This is enough to create the /var/run →
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering /run symlink and create a couple of structural
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering directories. This allows systems to boot up with an empty or
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering volatile /var. Of course, while with this change, the core OS
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering now is capable with dealing with a volatile /var, not all
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering user services are ready for it. However, we hope that sooner
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering or later, many service daemons will be changed upstream so
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering that they are able to automatically create their necessary
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering directories in /var at boot, should they be missing. This is
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering the first step to allow state-less systems that only require
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering the vendor image for /usr to boot.
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering * systemd-nspawn has gained a new --tmpfs= switch to mount an
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering empty tmpfs instance to a specific directory. This is
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering particularly useful for making use of the automatic
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering reconstruction of /var (see above), by passing --tmpfs=/var.
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering * Access modes specified in tmpfiles snippets may now be
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering prefixed with "~", which indicates that they shall be masked
7da81d33c147f4d6397efa1fdd08ba0a40c9c457Lennart Poettering by whether the existing file or directory is currently
7da81d33c147f4d6397efa1fdd08ba0a40c9c457Lennart Poettering writable, readable or executable at all. Also, if specified,
7da81d33c147f4d6397efa1fdd08ba0a40c9c457Lennart Poettering the sgid/suid/sticky bits will be masked for all
7da81d33c147f4d6397efa1fdd08ba0a40c9c457Lennart Poettering non-directories.
7da81d33c147f4d6397efa1fdd08ba0a40c9c457Lennart Poettering * A new passive target unit "network-pre.target" has been
7da81d33c147f4d6397efa1fdd08ba0a40c9c457Lennart Poettering added which is useful for services that shall run before any
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering network is configured, for example firewall scripts.
f9e00a9f5870a9bcae2de8bf1cb3ce04703112e1Lennart Poettering * The "floppy" group that previously owned the /dev/fd*
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek devices is no longer used. The "disk" group is now used
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek instead. Distributions should probably deprecate usage of
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Contributions from: Camilo Aguilar, Christian Hesse, Colin Ian
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering King, Cristian Rodríguez, Daniel Buch, Dave Reisner, David
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek Strauss, Denis Tikhomirov, John, Jonathan Liu, Kay Sievers,
a65b82457735df2ef58736a55846f400124a8dc0Zbigniew Jędrzejewski-Szmek Lennart Poettering, Mantas Mikulėnas, Mark Eichin, Ronny
a65b82457735df2ef58736a55846f400124a8dc0Zbigniew Jędrzejewski-Szmek Chevalier, Susant Sahani, Thomas Blume, Thomas Hindoe Paaboel
a65b82457735df2ef58736a55846f400124a8dc0Zbigniew Jędrzejewski-Szmek Andersen, Tom Gundersen, Umut Tezduyar Lindskog, Zbigniew
a65b82457735df2ef58736a55846f400124a8dc0Zbigniew Jędrzejewski-Szmek Jędrzejewski-Szmek
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek -- Berlin, 2014-06-11
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart PoetteringCHANGES WITH 213:
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering * A new "systemd-timesyncd" daemon has been added for
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering synchronizing the system clock across the network. It
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek implements an SNTP client. In contrast to NTP
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering implementations such as chrony or the NTP reference server,
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering this only implements a client side, and does not bother with
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek the full NTP complexity, focusing only on querying time from
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek one remote server and synchronizing the local clock to
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek it. Unless you intend to serve NTP to networked clients or
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek want to connect to local hardware clocks, this simple NTP
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek client should be more than appropriate for most
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek installations. The daemon runs with minimal privileges, and
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering has been hooked up with networkd to only operate when
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering network connectivity is available. The daemon saves the
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering current clock to disk every time a new NTP sync has been
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering acquired, and uses this to possibly correct the system clock
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering early at bootup, in order to accommodate for systems that
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering lack an RTC such as the Raspberry Pi and embedded devices,
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering and to make sure that time monotonically progresses on these
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering systems, even if it is not always correct. To make use of
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering this daemon, a new system user and group "systemd-timesync"
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering needs to be created on installation of systemd.
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering * The queue "seqnum" interface of libudev has been disabled, as
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering it was generally incompatible with device namespacing as
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering sequence numbers of devices go "missing" if the devices are
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering part of a different namespace.
4ffd29fda1a2621d8f1711ccaad723d327fef93aLennart Poettering * "systemctl list-timers" and "systemctl list-sockets" gained
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek a --recursive switch for showing units of these types also
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek for all local containers, similar in style to the already
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek supported --recursive switch for "systemctl list-units".
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek * A new RebootArgument= setting has been added for service
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek units, which may be used to specify a kernel reboot argument
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek to use when triggering reboots with StartLimitAction=.
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek * A new FailureAction= setting has been added for service
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering units which may be used to specify an operation to trigger
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering when a service fails. This works similarly to
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering StartLimitAction=, but unlike it, controls what is done
090771492f155cebe7075171530e96c1cd515d71Lennart Poettering immediately rather than only after several attempts to
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek restart the service in question.
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek * hostnamed got updated to also expose the kernel name,
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek release, and version on the bus. This is useful for
ba8df74bb643c0f7c343fef78bba3661b0f9c31cKay Sievers executing commands like hostnamectl with the -H switch.
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering systemd-analyze makes use of this to properly display
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek details when running non-locally.
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek * The bootchart tool can now show cgroup information in the
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek graphs it generates.
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek * The CFS CPU quota cgroup attribute is now exposed for
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek services. The new CPUQuota= switch has been added for this
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek which takes a percentage value. Setting this will have the
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek result that a service may never get more CPU time than the
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering specified percentage, even if the machine is otherwise idle.
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering * systemd-networkd learned IPIP and SIT tunnel support.
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek * LSB init scripts exposing a dependency on $network will now
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering get a dependency on network-online.target rather than simply
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering network.target. This should bring LSB handling closer to
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering what it was on SysV systems.
c4ac990007cd0069bb7e76ec15dd731320f382fdLennart Poettering * A new fsck.repair= kernel option has been added to control
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek how fsck shall deal with unclean file systems at boot.
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek * The (.ini) configuration file parser will now silently
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek ignore sections whose name begins with "X-". This may be
b62a309a47dd11e11729616767421397b6ca7053Zbigniew Jędrzejewski-Szmek used to maintain application-specific extension sections in unit
ba8df74bb643c0f7c343fef78bba3661b0f9c31cKay Sievers * machined gained a new API to query the IP addresses of
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering registered containers. "machinectl status" has been updated
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering to show these addresses in its output.
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt * A new call sd_uid_get_display() has been added to the
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt sd-login APIs for querying the "primary" session of a
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt user. The "primary" session of the user is elected from the
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt user's sessions and generally a graphical session is
ba8df74bb643c0f7c343fef78bba3661b0f9c31cKay Sievers preferred over a text one.
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt * A minimal systemd-resolved daemon has been added. It
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt currently simply acts as a companion to systemd-networkd and
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt manages resolv.conf based on per-interface DNS
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt configuration, possibly supplied via DHCP. In the long run
e6c253e363dee77ef7e5c5f44c4ca55cded3fd47Michal Schmidt we hope to extend this into a local DNSSEC enabled DNS and
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering * The systemd-networkd-wait-online tool is now enabled by
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering default. It will delay network-online.target until a network
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering connection has been configured. The tool primarily integrates
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering with networkd, but will also make a best effort to make sense
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering of network configuration performed in some other way.
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering * Two new service options StartupCPUShares= and
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering StartupBlockIOWeight= have been added that work similarly to
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering CPUShares= and BlockIOWeight= however only apply during
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering system startup. This is useful to prioritize certain services
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering differently during bootup than during normal runtime.
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering * hostnamed has been changed to prefer the statically
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering configured hostname in /etc/hostname (unless set to
4bdc60cb6fab336d455abbbd269e5bfccf760c91Lennart Poettering 'localhost' or empty) over any dynamic one supplied by
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering dhcp. With this change, the rules for picking the hostname
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering match more closely the rules of other configuration settings
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering where the local administrator's configuration in /etc always
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering overrides any other settings.
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Contributions fron: Ali H. Caliskan, Alison Chaiken, Bas van
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering den Berg, Brandon Philips, Cristian Rodríguez, Daniel Buch,
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Dan Kilman, Dave Reisner, David Härdeman, David Herrmann,
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering David Strauss, Dimitris Spingos, Djalal Harouni, Eelco
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Dolstra, Evan Nemerson, Florian Albrechtskirchinger, Greg
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Kroah-Hartman, Harald Hoyer, Holger Hans Peter Freyther, Jan
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Engelhardt, Jani Nikula, Jason St. John, Jeffrey Clark,
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Jonathan Boulle, Kay Sievers, Lennart Poettering, Lukas
d4474c41ca3854db1b7a7b30765bb59fc570e1c4Tom Gundersen Nykryn, Lukasz Skalski, Łukasz Stelmach, Mantas Mikulėnas,
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Marcel Holtmann, Martin Pitt, Matthew Monaco, Michael
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Marineau, Michael Olbrich, Michal Sekletar, Mike Gilbert, Nis
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Martensen, Patrik Flykt, Philip Lorenz, poma, Ray Strode,
f6d1de8547b1e957773f8b6764420579c8378aafRonny Chevalier Reyad Attiyat, Robert Milasan, Scott Thrasher, Stef Walter,
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Steven Siloti, Susant Sahani, Tanu Kaskinen, Thomas Bächler,
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Thomas Hindoe Paaboel Andersen, Tom Gundersen, Umut Tezduyar
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Lindskog, WaLyong Cho, Will Woods, Zbigniew
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering Jędrzejewski-Szmek
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart Poettering -- Beijing, 2014-05-28
78b6b7ceb2c76a3e29aeaa4b00c257be0706bffcLennart PoetteringCHANGES WITH 212:
3769415e6573da64fb80e31f4bb3f850cd99031eTimofey Titovets * When restoring the screen brightness at boot, stay away from
3769415e6573da64fb80e31f4bb3f850cd99031eTimofey Titovets the darkest setting or from the lowest 5% of the available
3769415e6573da64fb80e31f4bb3f850cd99031eTimofey Titovets range, depending on which is the larger value of both. This
3769415e6573da64fb80e31f4bb3f850cd99031eTimofey Titovets should effectively protect the user from rebooting into a
3769415e6573da64fb80e31f4bb3f850cd99031eTimofey Titovets black screen, should the brightness have been set to minimum
fae9332b140ffa3c1b04c80ac4cd3f2796e8cf3cLennart Poettering * sd-login gained a new sd_machine_get_class() call to
fae9332b140ffa3c1b04c80ac4cd3f2796e8cf3cLennart Poettering determine the class ("vm" or "container") of a machine
ba8df74bb643c0f7c343fef78bba3661b0f9c31cKay Sievers registered with machined.
fae9332b140ffa3c1b04c80ac4cd3f2796e8cf3cLennart Poettering * sd-login gained new calls
cfa1571b7f5a45927f76e54790974183a273d17aLennart Poettering sd_peer_get_{session,owner_uid,unit,user_unit,slice,machine_name}(),
cfa1571b7f5a45927f76e54790974183a273d17aLennart Poettering to query the identity of the peer of a local AF_UNIX
cfa1571b7f5a45927f76e54790974183a273d17aLennart Poettering connection. They operate similarly to their sd_pid_get_xyz()
cfa1571b7f5a45927f76e54790974183a273d17aLennart Poettering * PID 1 will now maintain a system-wide system state engine
cfa1571b7f5a45927f76e54790974183a273d17aLennart Poettering with the states "starting", "running", "degraded",
cfa1571b7f5a45927f76e54790974183a273d17aLennart Poettering "maintenance", "stopping". These states are bound to system
7e63dd1015c9ac6fc2042e45b0a87a3f9f8b9336Lennart Poettering startup, normal runtime, runtime with at least one failed
7e63dd1015c9ac6fc2042e45b0a87a3f9f8b9336Lennart Poettering service, rescue/emergency mode and system shutdown. This
ba8df74bb643c0f7c343fef78bba3661b0f9c31cKay Sievers state is shown in the "systemctl status" output when no unit
7e63dd1015c9ac6fc2042e45b0a87a3f9f8b9336Lennart Poettering name is passed. It is useful to determine system state, in
7e63dd1015c9ac6fc2042e45b0a87a3f9f8b9336Lennart Poettering particularly when doing so for many systems or containers at
d4474c41ca3854db1b7a7b30765bb59fc570e1c4Tom Gundersen * A new command "list-machines" has been added to "systemctl"
d4474c41ca3854db1b7a7b30765bb59fc570e1c4Tom Gundersen that lists all local OS containers and shows their system
d4474c41ca3854db1b7a7b30765bb59fc570e1c4Tom Gundersen state (see above), if systemd runs inside of them.
3b187c5cee0a9584d7c31e10f9fe008b94cf6d58Lennart Poettering * systemctl gained a new "-r" switch to recursively enumerate
3b187c5cee0a9584d7c31e10f9fe008b94cf6d58Lennart Poettering units on all local containers, when used with the
3b187c5cee0a9584d7c31e10f9fe008b94cf6d58Lennart Poettering "list-unit" command (which is the default one that is
3b187c5cee0a9584d7c31e10f9fe008b94cf6d58Lennart Poettering executed when no parameters are specified).
3b187c5cee0a9584d7c31e10f9fe008b94cf6d58Lennart Poettering * The GPT automatic partition discovery logic will now honour
3b187c5cee0a9584d7c31e10f9fe008b94cf6d58Lennart Poettering two GPT partition flags: one may be set on a partition to
3b187c5cee0a9584d7c31e10f9fe008b94cf6d58Lennart Poettering cause it to be mounted read-only, and the other may be set
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering on a partition to ignore it during automatic discovery.
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering * Two new GPT type UUIDs have been added for automatic root
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering partition discovery, for 32-bit and 64-bit ARM. This is not
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering particularly useful for discovering the root directory on
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering these architectures during bare-metal boots (since UEFI is
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering not common there), but still very useful to allow booting of
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering ARM disk images in nspawn with the -i option.
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering * MAC addresses of interfaces created with nspawn's
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering --network-interface= switch will now be generated from the
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering machine name, and thus be stable between multiple invocations
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering of the container.
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering * logind will now automatically remove all IPC objects owned
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering by a user if she or he fully logs out. This makes sure that
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering users who are logged out cannot continue to consume IPC
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering resources. This covers SysV memory, semaphores and message
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering queues as well as POSIX shared memory and message
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering queues. Traditionally, SysV and POSIX IPC had no life-cycle
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering limits. With this functionality, that is corrected. This may
13e92f3966552091085982f4ebdeb38721f04a30Lennart Poettering be turned off by using the RemoveIPC= switch of logind.conf.
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering * The systemd-machine-id-setup and tmpfiles tools gained a
4b08dd87eebb4b634bdd5708ac1ba68dcee205b3Lennart Poettering --root= switch to operate on a specific root directory,
b72ddf0f4f552dd53d6404b6ddbc9f17d02b8e12Kay Sievers instead of /.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * journald can now forward logged messages to the TTYs of all
b72ddf0f4f552dd53d6404b6ddbc9f17d02b8e12Kay Sievers logged in users ("wall"). This is the default for all
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering emergency messages now.
b72ddf0f4f552dd53d6404b6ddbc9f17d02b8e12Kay Sievers * A new tool systemd-journal-remote has been added to stream
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering journal log messages across the network.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * /sys/fs/cgroup/ is now mounted read-only after all cgroup
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering controller trees are mounted into it. Note that the
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering directories mounted beneath it are not read-only. This is a
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering security measure and is particularly useful because glibc
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering actually includes a search logic to pick any tmpfs it can
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering find to implement shm_open() if /dev/shm is not available
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering (which it might very well be in namespaced setups).
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * machinectl gained a new "poweroff" command to cleanly power
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering down a local OS container.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * The PrivateDevices= unit file setting will now also drop the
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering CAP_MKNOD capability from the capability bound set, and
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering imply DevicePolicy=closed.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * PrivateDevices=, PrivateNetwork= and PrivateTmp= is now used
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering comprehensively on all long-running systemd services where
5f02e26ca7c039837dbaea63f3d3664fe45c26b9Thomas Hindoe Paaboel Andersen this is appropriate.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * systemd-udevd will now run in a disassociated mount
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering namespace. To mount directories from udev rules, make sure to
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering pull in mount units via SYSTEMD_WANTS properties.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * The kdbus support gained support for uploading policy into
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering the kernel. sd-bus gained support for creating "monitoring"
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering connections that can eavesdrop into all bus communication
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering for debugging purposes.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * Timestamps may now be specified in seconds since the UNIX
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering epoch Jan 1st, 1970 by specifying "@" followed by the value
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * Native tcpwrap support in systemd has been removed. tcpwrap
daa05349dfefb12638c96e034c11be613bdc39b7Ansgar Burchardt is old code, not really maintained anymore and has serious
daa05349dfefb12638c96e034c11be613bdc39b7Ansgar Burchardt shortcomings, and better options such as firewalls
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering exist. For setups that require tcpwrap usage, please
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering consider invoking your socket-activated service via tcpd,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering like on traditional inetd.
5f02e26ca7c039837dbaea63f3d3664fe45c26b9Thomas Hindoe Paaboel Andersen * A new system.conf configuration option
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering DefaultTimerAccuracySec= has been added that controls the
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering default AccuracySec= setting of .timer units.
a1a4a25e7f6b515d0c8c25257714299853f261aaDaniel Mack * Timer units gained a new WakeSystem= switch. If enabled,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering timers configured this way will cause the system to resume
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering from system suspend (if the system supports that, which most
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering do these days).
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * Timer units gained a new Persistent= switch. If enabled,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering timers configured this way will save to disk when they have
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering been last triggered. This information is then used on next
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering reboot to possible execute overdue timer events, that
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering could not take place because the system was powered off.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering This enables simple anacron-like behaviour for timer units.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * systemctl's "list-timers" will now also list the time a
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering timer unit was last triggered in addition to the next time
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering it will be triggered.
5f02e26ca7c039837dbaea63f3d3664fe45c26b9Thomas Hindoe Paaboel Andersen * systemd-networkd will now assign predictable IPv4LL
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering addresses to its local interfaces.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Contributions from: Brandon Philips, Daniel Buch, Daniel Mack,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Dave Reisner, David Herrmann, Gerd Hoffmann, Greg
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Kroah-Hartman, Hendrik Brueckner, Jason St. John, Josh
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt Triplett, Kay Sievers, Lennart Poettering, Marc-Antoine
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Perennou, Michael Marineau, Michael Olbrich, Miklos Vajna,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Patrik Flykt, poma, Sebastian Thorarensen, Thomas Bächler,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Thomas Hindoe Paaboel Andersen, Tomasz Torcz, Tom Gundersen,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Umut Tezduyar Lindskog, Wieland Hoffmann, Zbigniew
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Jędrzejewski-Szmek
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering -- Berlin, 2014-03-25
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart PoetteringCHANGES WITH 211:
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * A new unit file setting RestrictAddressFamilies= has been
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering added to restrict which socket address families unit
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering processes gain access to. This takes address family names
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering like "AF_INET" or "AF_UNIX", and is useful to minimize the
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering attack surface of services via exotic protocol stacks. This
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering is built on seccomp system call filters.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * Two new unit file settings RuntimeDirectory= and
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering RuntimeDirectoryMode= have been added that may be used to
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering manage a per-daemon runtime directories below /run. This is
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering an alternative for setting up directory permissions with
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering tmpfiles snippets, and has the advantage that the runtime
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering directory's lifetime is bound to the daemon runtime and that
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering the daemon starts up with an empty directory each time. This
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering is particularly useful when writing services that drop
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering privileges using the User= or Group= setting.
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering * The DeviceAllow= unit setting now supports globbing for
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering matching against device group names.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * The systemd configuration file system.conf gained new
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering settings DefaultCPUAccounting=, DefaultBlockIOAccounting=,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering DefaultMemoryAccounting= to globally turn on/off accounting
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering for specific resources (cgroups) for all units. These
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering settings may still be overridden individually in each unit
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * systemd-gpt-auto-generator is now able to discover /srv and
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering root partitions in addition to /home and swap partitions. It
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering also supports LUKS-encrypted partitions now. With this in
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering place, automatic discovery of partitions to mount following
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering the Discoverable Partitions Specification
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering (http://www.freedesktop.org/wiki/Specifications/DiscoverablePartitionsSpec)
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering is now a lot more complete. This allows booting without
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering /etc/fstab and without root= on the kernel command line on
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering systems prepared appropriately.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * systemd-nspawn gained a new --image= switch which allows
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen booting up disk images and Linux installations on any block
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen device that follow the Discoverable Partitions Specification
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen (see above). This means that installations made with
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen appropriately updated installers may now be started and
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen deployed using container managers, completely
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen unmodified. (We hope that libvirt-lxc will add support for
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen this feature soon, too.)
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen * systemd-nspawn gained a new --network-macvlan= setting to
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen set up a private macvlan interface for the
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen container. Similarly, systemd-networkd gained a new
265684034fac5f2674723ab7ace55b2485a1b29fTom Gundersen Kind=macvlan setting in .netdev files.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * systemd-networkd now supports configuring local addresses
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * A new tool systemd-network-wait-online has been added to
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering synchronously wait for network connectivity using
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering systemd-networkd.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * The sd-bus.h bus API gained a new sd_bus_track object for
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering tracking the life-cycle of bus peers. Note that sd-bus.h is
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering still not a public API though (unless you specify
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering --enable-kdbus on the configure command line, which however
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering voids your warranty and you get no API stability guarantee).
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * The $XDG_RUNTIME_DIR runtime directories for each user are
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering now individual tmpfs instances, which has the benefit of
5f02e26ca7c039837dbaea63f3d3664fe45c26b9Thomas Hindoe Paaboel Andersen introducing separate pools for each user, with individual
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering size limits, and thus making sure that unprivileged clients
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering can no longer negatively impact the system or other users by
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering filling up their $XDG_RUNTIME_DIR. A new logind.conf setting
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering RuntimeDirectorySize= has been introduced that allows
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering controlling the default size limit for all users. It
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering defaults to 10% of the available physical memory. This is no
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering replacement for quotas on tmpfs though (which the kernel
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering still does not support), as /dev/shm and /tmp are still
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering shared resources used by both the system and unprivileged
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * logind will now automatically turn off automatic suspending
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering on laptop lid close when more than one display is
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering connected. This was previously expected to be implemented
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering individually in desktop environments (such as GNOME),
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering however has been added to logind now, in order to fix a
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering boot-time race where a desktop environment might not have
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering been started yet and thus not been able to take an inhibitor
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering lock at the time where logind already suspends the system
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering due to a closed lid.
a1a4a25e7f6b515d0c8c25257714299853f261aaDaniel Mack * logind will now wait at least 30s after each system
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering suspend/resume cycle, and 3min after system boot before
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering suspending the system due to a closed laptop lid. This
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering should give USB docking stations and similar enough time to
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering be probed and configured after system resume and boot in
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering order to then act as suspend blocker.
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering * systemd-run gained a new --property= setting which allows
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering initialization of resource control properties (and others)
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering for the created scope or service unit. Example: "systemd-run
01da80b1aa0e21f8785d467afc295e37fd00ffa1Lennart Poettering --property=BlockIOWeight=10 updatedb" may be used to run
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering updatedb at a low block IO scheduling weight.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * systemd-run's --uid=, --gid=, --setenv=, --setenv= switches
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering now also work in --scope mode.
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering * When systemd is compiled with kdbus support, basic support
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering for enforced policies is now in place. (Note that enabling
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering kdbus still voids your warranty and no API compatibility
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering promises are made.)
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Contributions from: Andrey Borzenkov, Ansgar Burchardt, Armin
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering K., Daniel Mack, Dave Reisner, David Herrmann, Djalal Harouni,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Harald Hoyer, Henrik Grindal Bakken, Jasper St. Pierre, Kay
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Sievers, Kieran Clancy, Lennart Poettering, Lukas Nykryn,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Mantas Mikulėnas, Marcel Holtmann, Mark Oteiza, Martin Pitt,
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Mike Gilbert, Peter Rajnoha, poma, Samuli Suominen, Stef
b2ca0d63277b10c9382d5bcfcdf320dbb712511bLennart Poettering Walter, Susant Sahani, Tero Roponen, Thomas Andersen, Thomas
b72ddf0f4f552dd53d6404b6ddbc9f17d02b8e12Kay Sievers Bächler, Thomas Hindoe Paaboel Andersen, Tomasz Torcz, Tom
3dff3e00e044e2d53c76fa842b9a4759d4a50e69Kay Sievers Gundersen, Umut Tezduyar Lindskog, Uoti Urpala, Zachary Cook,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Zbigniew Jędrzejewski-Szmek
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering -- Berlin, 2014-03-12
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart PoetteringCHANGES WITH 210:
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * systemd will now relabel /dev after loading the SMACK policy
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering according to SMACK rules.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * A new unit file option AppArmorProfile= has been added to
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering set the AppArmor profile for the processes of a unit.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * A new condition check ConditionArchitecture= has been added
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering to conditionalize units based on the system architecture, as
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering reported by uname()'s "machine" field.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * systemd-networkd now supports matching on the system
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering virtualization, architecture, kernel command line, host name
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering and machine ID.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * logind is now a lot more aggressive when suspending the
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering machine due to a closed laptop lid. Instead of acting only
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering on the lid close action, it will continuously watch the lid
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering status and act on it. This is useful for laptops where the
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering power button is on the outside of the chassis so that it can
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering be reached without opening the lid (such as the Lenovo
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Yoga). On those machines, logind will now immediately
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering re-suspend the machine if the power button has been
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering accidentally pressed while the laptop was suspended and in a
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering backpack or similar.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * logind will now watch SW_DOCK switches and inhibit reaction
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering to the lid switch if it is pressed. This means that logind
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering will not suspend the machine anymore if the lid is closed
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering and the system is docked, if the laptop supports SW_DOCK
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering notifications via the input layer. Note that ACPI docking
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering stations do not generate this currently. Also note that this
ce1dde29b92d1399ce502e0f7db790a99d14841fThomas Hindoe Paaboel Andersen logic is usually not fully sufficient and Desktop
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Environments should take a lid switch inhibitor lock when an
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering external display is connected, as systemd will not watch
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering this on its own.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * nspawn will now make use of the devices cgroup controller by
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering default, and only permit creation of and access to the usual
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering API device nodes like /dev/null or /dev/random, as well as
3dff3e00e044e2d53c76fa842b9a4759d4a50e69Kay Sievers access to (but not creation of) the pty devices.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * We will now ship a default .network file for
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering systemd-networkd that automatically configures DHCP for
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering network interfaces created by nspawn's --network-veth or
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering --network-bridge= switches.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * systemd will now understand the usual M, K, G, T suffixes
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering according to SI conventions (i.e. to the base 1000) when
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering referring to throughput and hardware metrics. It will stay
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering with IEC conventions (i.e. to the base 1024) for software
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering metrics, according to what is customary according to
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Wikipedia. We explicitly document which base applies for
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering each configuration option.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * The DeviceAllow= setting in unit files now supports a syntax
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering to whitelist an entire group of devices node majors at once,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering based on the /proc/devices listing. For example, with the
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering string "char-pts", it is now possible to whitelist all
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering current and future pseudo-TTYs at once.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * sd-event learned a new "post" event source. Event sources of
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering this type are triggered by the dispatching of any event
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering source of a type that is not "post". This is useful for
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering implementing clean-up and check event sources that are
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering triggered by other work being done in the program.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * systemd-networkd is no longer statically enabled, but uses
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering the usual [Install] sections so that it can be
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering enabled/disabled using systemctl. It still is enabled by
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering default however.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * When creating a veth interface pair with systemd-nspawn, the
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering host side will now be prefixed with "vb-" if
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering --network-bridge= is used, and with "ve-" if --network-veth
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering is used. This way, it is easy to distinguish these cases on
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering the host, for example to apply different configuration to
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering them with systemd-networkd.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * The compatibility libraries for libsystemd-journal.so,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering libsystem-id128.so, libsystemd-login.so and
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering libsystemd-daemon.so do not make use of IFUNC
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt anymore. Instead, we now build libsystemd.so multiple times
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering under these alternative names. This means that the footprint
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering is drastically increased, but given that these are
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering transitional compatibility libraries, this should not matter
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering much. This change has been made necessary to support the ARM
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering platform for these compatibility libraries, as the ARM
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering toolchain is not really at the same level as the toolchain
ce1dde29b92d1399ce502e0f7db790a99d14841fThomas Hindoe Paaboel Andersen for other architectures like x86 and does not support
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering IFUNC. Please make sure to use --enable-compat-libs only
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering during a transitional period!
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Contributions from: Andreas Fuchs, Armin K., Colin Walters,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Daniel Mack, Dave Reisner, David Herrmann, Djalal Harouni,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Holger Schurig, Jason A. Donenfeld, Jason St. John, Jasper
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering St. Pierre, Kay Sievers, Lennart Poettering, Łukasz Stelmach,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Marcel Holtmann, Michael Scherer, Michal Sekletar, Mike
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Gilbert, Samuli Suominen, Thomas Bächler, Thomas Hindoe
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Paaboel Andersen, Tom Gundersen, Umut Tezduyar Lindskog,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering Zbigniew Jędrzejewski-Szmek
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering -- Berlin, 2014-02-24
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart PoetteringCHANGES WITH 209:
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * A new component "systemd-networkd" has been added that can
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering be used to configure local network interfaces statically or
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering via DHCP. It is capable of bringing up bridges, VLANs, and
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering bonding. Currently, no hook-ups for interactive network
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering configuration are provided. Use this for your initrd,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering container, embedded, or server setup if you need a simple,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering yet powerful, network configuration solution. This
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering configuration subsystem is quite nifty, as it allows wildcard
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering hotplug matching in interfaces. For example, with a single
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering configuration snippet, you can configure that all Ethernet
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering interfaces showing up are automatically added to a bridge,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering or similar. It supports link-sensing and more.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * A new tool "systemd-socket-proxyd" has been added which can
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering act as a bidirectional proxy for TCP sockets. This is
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering useful for adding socket activation support to services that
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering do not actually support socket activation, including virtual
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering machines and the like.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * Add a new tool to save/restore rfkill state on
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * Save/restore state of keyboard backlights in addition to
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering display backlights on shutdown/boot.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * udev learned a new SECLABEL{} construct to label device
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering nodes with a specific security label when they appear. For
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering now, only SECLABEL{selinux} is supported, but the syntax is
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering prepared for additional security frameworks.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * udev gained a new scheme to configure link-level attributes
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering from files in /etc/systemd/network/*.link. These files can
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering match against MAC address, device path, driver name and type,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering and will apply attributes like the naming policy, link speed,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering MTU, duplex settings, Wake-on-LAN settings, MAC address, MAC
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering address assignment policy (randomized, ...).
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * The configuration of network interface naming rules for
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering "permanent interface names" has changed: a new NamePolicy=
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering setting in the [Link] section of .link files determines the
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering priority of possible naming schemes (onboard, slot, mac,
ce1dde29b92d1399ce502e0f7db790a99d14841fThomas Hindoe Paaboel Andersen path). The default value of this setting is determined by
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering 80-net-name-slot.rules udev configuration file has been
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering removed, so local configuration overriding this file should
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering be adapated to override 99-default.link instead.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * When the User= switch is used in a unit file, also
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering initialize $SHELL= based on the user database entry.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * systemd no longer depends on libdbus. All communication is
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering now done with sd-bus, systemd's low-level bus library
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering implementation.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * kdbus support has been added to PID 1 itself. When kdbus is
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering enabled, this causes PID 1 to set up the system bus and
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering enable support for a new ".busname" unit type that
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering encapsulates bus name activation on kdbus. It works a little
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt bit like ".socket" units, except for bus names. A new
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt generator has been added that converts classic dbus1 service
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering activation files automatically into native systemd .busname
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering and .service units.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * sd-bus: add a light-weight vtable implementation that allows
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering defining objects on the bus with a simple static const
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering vtable array of its methods, signals and properties.
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * systemd will not generate or install static dbus
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering introspection data anymore to /usr/share/dbus-1/interfaces,
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering as the precise format of these files is unclear, and
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering nothing makes use of it.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * A proxy daemon is now provided to proxy clients connecting
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering via classic D-Bus AF_UNIX sockets to kdbus, to provide full
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering compatibility with classic D-Bus.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * A bus driver implementation has been added that supports the
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering classic D-Bus bus driver calls on kdbus, also for
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering compatibility purposes.
24a2bf4c9b0917231dd4f9b4289eabd46c382d3fLennart Poettering * A new API "sd-event.h" has been added that implements a
3058e017fced6d5c8712e10c8c1477421bc1e960Thadeu Lima de Souza Cascardo minimal event loop API built around epoll. It provides a
3058e017fced6d5c8712e10c8c1477421bc1e960Thadeu Lima de Souza Cascardo couple of features that direct epoll usage is lacking:
3058e017fced6d5c8712e10c8c1477421bc1e960Thadeu Lima de Souza Cascardo prioritization of events, scales to large numbers of timer
3058e017fced6d5c8712e10c8c1477421bc1e960Thadeu Lima de Souza Cascardo events, per-event timer slack (accuracy), system-wide
3058e017fced6d5c8712e10c8c1477421bc1e960Thadeu Lima de Souza Cascardo coalescing of timer events, exit handlers, watchdog
3058e017fced6d5c8712e10c8c1477421bc1e960Thadeu Lima de Souza Cascardo supervision support using systemd's sd_notify() API, child
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering process handling.
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * A new API "sd-rntl.h" has been added that provides an API
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering around the route netlink interface of the kernel, similar in
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * A new API "sd-dhcp-client.h" has been added that provides a
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering small DHCPv4 client-side implementation. This is used by
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering "systemd-networkd".
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * There is a new kernel command line option
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering "systemd.restore_state=0|1". When set to "0", none of the
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering systemd tools will restore saved runtime state to hardware
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering devices. More specifically, the rfkill and backlight states
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering are not restored.
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * The FsckPassNo= compatibility option in mount/service units
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering has been removed. The fstab generator will now add the
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering necessary dependencies automatically, and does not require
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering PID1's support for that anymore.
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * journalctl gained a new switch, --list-boots, that lists
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering recent boots with their times and boot IDs.
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * The various tools like systemctl, loginctl, timedatectl,
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering busctl, systemd-run, ... have gained a new switch "-M" to
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering connect to a specific, local OS container (as direct
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering connection, without requiring SSH). This works on any
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering container that is registered with machined, such as those
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering created by libvirt-lxc or nspawn.
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering * systemd-run and systemd-analyze also gained support for "-H"
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering to connect to remote hosts via SSH. This is particularly
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering useful for systemd-run because it enables queuing of jobs
c7435cc9115f5c8166433fd5ece028c06360ecd1Lennart Poettering onto remote systems.
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers * machinectl gained a new command "login" to open a getty
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers login in any local container. This works with any container
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers that is registered with machined (such as those created by
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers libvirt-lxc or nspawn), and which runs systemd inside.
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers * machinectl gained a new "reboot" command that may be used to
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers trigger a reboot on a specific container that is registered
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers with machined. This works on any container that runs an init
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers system of some kind.
71449cafa1f3aecad6fc755ae5e571eddf0bbd02Kay Sievers * systemctl gained a new "list-timers" command to print a nice
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt listing of installed timer units with the times they elapse
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers * Alternative reboot() parameters may now be specified on the
4196a3ead3cfb823670d225eefcb3e60e34c7d95Kay Sievers "systemctl reboot" command line and are passed to the
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering reboot() system call.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * systemctl gained a new --job-mode= switch to configure the
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering mode to queue a job with. This is a more generic version of
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering --fail, --irreversible, and --ignore-dependencies, which are
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering still available but not advertised anymore.
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt * /etc/systemd/system.conf gained new settings to configure
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering various default timeouts of units, as well as the default
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering start limit interval and burst. These may still be overridden
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering within each Unit.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * PID1 will now export on the bus profile data of the security
71449cafa1f3aecad6fc755ae5e571eddf0bbd02Kay Sievers policy upload process (such as the SELinux policy upload to
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * journald: when forwarding logs to the console, include
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering timestamps (following the setting in
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt * OnCalendar= in timer units now understands the special
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering strings "yearly" and "annually". (Both are equivalent)
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt * The accuracy of timer units is now configurable with the new
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering AccuracySec= setting. It defaults to 1min.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * A new dependency type JoinsNamespaceOf= has been added that
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt allows running two services within the same /tmp and network
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering namespace, if PrivateNetwork= or PrivateTmp= are used.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * A new command "cat" has been added to systemctl. It outputs
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering the original unit file of a unit, and concatenates the
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt contents of additional "drop-in" unit file snippets, so that
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering the full configuration is shown.
c54bed5d515771c21250b8e0c052cb6600e21d37Mantas Mikulėnas * systemctl now supports globbing on the various "list-xyz"
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering commands, like "list-units" or "list-sockets", as well as on
cd14eda3212f9109c98a77cd5fee4168010d80daLennart Poettering those commands which take multiple unit names.
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt * journalctl's --unit= switch gained support for globbing.
ef392da6c56cdfff35265403192f051af257b3f8Ansgar Burchardt * All systemd daemons now make use of the watchdog logic so
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt that systemd automatically notices when they hang.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * If the $container_ttys environment variable is set,
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering getty-generator will automatically spawn a getty for each
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering listed tty. This is useful for container managers to request
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering login gettys to be spawned on as many ttys as needed.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * %h, %s, %U specifier support is not available anymore when
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering used in unit files for PID 1. This is because NSS calls are
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering not safe from PID 1. They stay available for --user
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering instances of systemd, and as special case for the root user.
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt * loginctl gained a new "--no-legend" switch to turn off output
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering of the legend text.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * The "sd-login.h" API gained three new calls:
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering sd_session_is_remote(), sd_session_get_remote_user(),
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering sd_session_get_remote_host() to query information about
45df8656ebb1b0559a75993d1508fc61c2d39829Jan Engelhardt remote sessions.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * The udev hardware database now also carries vendor/product
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering information of SDIO devices.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * The "sd-daemon.h" API gained a new sd_watchdog_enabled() to
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering determine whether watchdog notifications are requested by
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering the system manager.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * Socket-activated per-connection services now include a
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering short description of the connection parameters in the
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * tmpfiles gained a new "--boot" option. When this is not used,
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering only lines where the command character is not suffixed with
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering "!" are executed. When this option is specified, those
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering options are executed too. This partitions tmpfiles
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering directives into those that can be safely executed at any
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering time, and those which should be run only at boot (for
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering example, a line that creates /run/nologin).
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * A new API "sd-resolve.h" has been added which provides a simple
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering asynchronous wrapper around glibc NSS host name resolution
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering calls, such as getaddrinfo(). In contrast to glibc's
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering getaddrinfo_a(), it does not use signals. In contrast to most
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering other asynchronous name resolution libraries, this one does
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering not reimplement DNS, but reuses NSS, so that alternate
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt host name resolution systems continue to work, such as mDNS,
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering LDAP, etc. This API is based on libasyncns, but it has been
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering cleaned up for inclusion in systemd.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * The APIs "sd-journal.h", "sd-login.h", "sd-id128.h",
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering "sd-daemon.h" are no longer found in individual libraries
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering libsystemd-journal.so, libsystemd-login.so,
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering libsystemd-id128.so, libsystemd-daemon.so. Instead, we have
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering merged them into a single library, libsystemd.so, which
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering provides all symbols. The reason for this is cyclic
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering dependencies, as these libraries tend to use each other's
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering symbols. So far, we have managed to workaround that by linking
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering a copy of a good part of our code into each of these
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering libraries again and again, which, however, makes certain
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering things hard to do, like sharing static variables. Also, it
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering substantially increases footprint. With this change, there
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering is only one library for the basic APIs systemd
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering provides. Also, "sd-bus.h", "sd-memfd.h", "sd-event.h",
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering "sd-rtnl.h", "sd-resolve.h", "sd-utf8.h" are found in this
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering library as well, however are subject to the --enable-kdbus
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering switch (see below). Note that "sd-dhcp-client.h" is not part
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering of this library (this is because it only consumes, never
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering provides, services of/to other APIs). To make the transition
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering easy from the separate libraries to the unified one, we
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering provide the --enable-compat-libs compile-time switch which
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering will generate stub libraries that are compatible with the
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering old ones but redirect all calls to the new one.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * All of the kdbus logic and the new APIs "sd-bus.h",
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering "sd-memfd.h", "sd-event.h", "sd-rtnl.h", "sd-resolve.h",
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering and "sd-utf8.h" are compile-time optional via the
cc98b3025eeb89addb76a27390cb2baca4eab8b9Torstein Husebø "--enable-kdbus" switch, and they are not compiled in by
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering default. To make use of kdbus, you have to explicitly enable
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering the switch. Note however, that neither the kernel nor the
71449cafa1f3aecad6fc755ae5e571eddf0bbd02Kay Sievers userspace API for all of this is considered stable yet. We
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering want to maintain the freedom to still change the APIs for
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering now. By specifying this build-time switch, you acknowledge
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering that you are aware of the instability of the current
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * Also, note that while kdbus is pretty much complete,
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt it lacks one thing: proper policy support. This means you
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt can build a fully working system with all features; however,
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt it will be highly insecure. Policy support will be added in
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering one of the next releases, at the same time that we will
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering declare the APIs stable.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * When the kernel command line argument "kdbus" is specified,
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering systemd will automatically load the kdbus.ko kernel module. At
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering this stage of development, it is only useful for testing kdbus
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt and should not be used in production. Note: if "--enable-kdbus"
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt is specified, and the kdbus.ko kernel module is available, and
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering "kdbus" is added to the kernel command line, the entire system
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt runs with kdbus instead of dbus-daemon, with the above mentioned
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering problem of missing the system policy enforcement. Also a future
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering version of kdbus.ko or a newer systemd will not be compatible with
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering each other, and will unlikely be able to boot the machine if only
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering one of them is updated.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * systemctl gained a new "import-environment" command which
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering uploads the caller's environment (or parts thereof) into the
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering service manager so that it is inherited by services started
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering by the manager. This is useful to upload variables like
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering $DISPLAY into the user service manager.
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * A new PrivateDevices= switch has been added to service units
daa05349dfefb12638c96e034c11be613bdc39b7Ansgar Burchardt which allows running a service with a namespaced /dev
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt directory that does not contain any device nodes for
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering physical devices. More specifically, it only includes devices
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering such as /dev/null, /dev/urandom, and /dev/zero which are API
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering * logind has been extended to support behaviour like VT
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering switching on seats that do not support a VT. This makes
04e91da2cfdfb7153218be7a77c885f1c23d3fd7Lennart Poettering multi-session available on seats that are not the first seat
4c0d13bdd5ef971a3003899064af1717c8960beeLennart Poettering (seat0), and on systems where kernel support for VTs has
4c0d13bdd5ef971a3003899064af1717c8960beeLennart Poettering been disabled at compile-time.
4c0d13bdd5ef971a3003899064af1717c8960beeLennart Poettering * If a process holds a delay lock for system sleep or shutdown
4c0d13bdd5ef971a3003899064af1717c8960beeLennart Poettering and fails to release it in time, we will now log its
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering identity. This makes it easier to identify processes that
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering cause slow suspends or power-offs.
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering * When parsing /etc/crypttab, support for a new key-slot=
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering option as supported by Debian is added. It allows indicating
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering which LUKS slot to use on disk, speeding up key loading.
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering * The sd_journald_sendv() API call has been checked and
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering officially declared to be async-signal-safe so that it may
dc1d6c02fcf55bb7dac918d0ed3bd3e2a3d67525Lennart Poettering be invoked from signal handlers for logging purposes.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * Boot-time status output is now enabled automatically after a
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering short timeout if boot does not progress, in order to give
69beda1f75070b36d0562e4050cd567bf2da5a87Kay Sievers the user an indication what she or he is waiting for.
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt * The boot-time output has been improved to show how much time
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering remains until jobs expire.
c9679c652b3c31f2510e8805d81630680ebc7e95Lennart Poettering * The KillMode= switch in service units gained a new possible
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering value "mixed". If set, and the unit is shut down, then the
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt initial SIGTERM signal is sent only to the main daemon
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering process, while the following SIGKILL signal is sent to
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering all remaining processes of the service.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * When a scope unit is registered, a new property "Controller"
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering may be set. If set to a valid bus name, systemd will send a
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering RequestStop() signal to this name when it would like to shut
69beda1f75070b36d0562e4050cd567bf2da5a87Kay Sievers down the scope. This may be used to hook manager logic into
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering the shutdown logic of scope units. Also, scope units may now
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt be put in a special "abandoned" state, in which case the
c9679c652b3c31f2510e8805d81630680ebc7e95Lennart Poettering manager process which created them takes no further
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt responsibilities for it.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * When reading unit files, systemd will now verify
69beda1f75070b36d0562e4050cd567bf2da5a87Kay Sievers the access mode of these files, and warn about certain
69beda1f75070b36d0562e4050cd567bf2da5a87Kay Sievers suspicious combinations. This has been added to make it
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering easier to track down packaging bugs where unit files are
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering marked executable or world-writable.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained a new "--setenv=" switch to set
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering container-wide environment variables. The similar option in
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek systemd-activate was renamed from "--environment=" to
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek "--setenv=" for consistency.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn has been updated to create a new kdbus domain
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering for each container that is invoked, thus allowing each
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek container to have its own set of system and user buses,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering independent of the host.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained a new --drop-capability= switch to run
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek the container with less capabilities than the default. Both
8d0e0ddda6501479eb69164687c83c1a7667b33aJan Engelhardt --drop-capability= and --capability= now take the special
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering string "all" for dropping or keeping all capabilities.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained new switches for executing containers
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering with specific SELinux labels set.
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek * systemd-nspawn gained a new --quiet switch to not generate
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek any additional output but the container's own console
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained a new --share-system switch to run a
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering container without PID namespacing enabled.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained a new --register= switch to control
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering whether the container is registered with systemd-machined or
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering not. This is useful for containers that do not run full
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering OS images, but only specific apps.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained a new --keep-unit which may be used
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering when invoked as the only program from a service unit, and
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering results in registration of the unit service itself in
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering systemd-machined, instead of a newly opened scope unit.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained a new --network-interface= switch for
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering moving arbitrary interfaces to the container. The new
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering --network-veth switch creates a virtual Ethernet connection
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering between host and container. The new --network-bridge=
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering switch then allows assigning the host side of this virtual
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Ethernet connection to a bridge device.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * systemd-nspawn gained a new --personality= switch for
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering setting the kernel personality for the container. This is
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering useful when running a 32-bit container on a 64-bit host. A
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering similar option Personality= is now also available for service
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * logind will now also track a "Desktop" identifier for each
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering session which encodes the desktop environment of it. This is
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering useful for desktop environments that want to identify
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering multiple running sessions of itself easily.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * A new SELinuxContext= setting for service units has been
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering added that allows setting a specific SELinux execution
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering context for a service.
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering * Most systemd client tools will now honour $SYSTEMD_LESS for
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering settings of the "less" pager. By default, these tools will
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering override $LESS to allow certain operations to work, such as
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering jump-to-the-end. With $SYSTEMD_LESS, it is possible to
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering influence this logic.
68dd0956ef9d607e6ff9aea15883a2c290a33c2aTom Gundersen * systemd's "seccomp" hook-up has been changed to make use of
68dd0956ef9d607e6ff9aea15883a2c290a33c2aTom Gundersen the libseccomp library instead of using its own
68dd0956ef9d607e6ff9aea15883a2c290a33c2aTom Gundersen implementation. This has benefits for portability among
68dd0956ef9d607e6ff9aea15883a2c290a33c2aTom Gundersen other things.
68dd0956ef9d607e6ff9aea15883a2c290a33c2aTom Gundersen * For usage together with SystemCallFilter=, a new
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering SystemCallErrorNumber= setting has been introduced that
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek allows configuration of a system error number to be returned
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering on filtered system calls, instead of immediately killing the
69beda1f75070b36d0562e4050cd567bf2da5a87Kay Sievers process. Also, SystemCallArchitectures= has been added to
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering limit access to system calls of a particular architecture
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering (in order to turn off support for unused secondary
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering architectures). There is also a global
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering SystemCallArchitectures= setting in system.conf now to turn
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering off support for non-native system calls system-wide.
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering * systemd requires a kernel with a working name_to_handle_at(),
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering please see the kernel config requirements in the README file.
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Contributions from: Adam Williamson, Alex Jia, Anatol Pomozov,
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Ansgar Burchardt, AppleBloom, Auke Kok, Bastien Nocera,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Chengwei Yang, Christian Seiler, Colin Guthrie, Colin Walters,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Cristian Rodríguez, Daniel Buch, Daniele Medri, Daniel J
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Walsh, Daniel Mack, Dan McGee, Dave Reisner, David Coppa,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering David Herrmann, David Strauss, Djalal Harouni, Dmitry Pisklov,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Elia Pinto, Florian Weimer, George McCollister, Goffredo
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Baroncelli, Greg Kroah-Hartman, Hendrik Brueckner, Igor
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Zhbanov, Jan Engelhardt, Jan Janssen, Jason A. Donenfeld,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Jason St. John, Jasper St. Pierre, Jóhann B. Guðmundsson, Jose
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Ignacio Naranjo, Karel Zak, Kay Sievers, Kristian Høgsberg,
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Lennart Poettering, Lubomir Rintel, Lukas Nykryn, Lukasz
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Skalski, Łukasz Stelmach, Luke Shumaker, Mantas Mikulėnas,
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Marc-Antoine Perennou, Marcel Holtmann, Marcos Felipe Rasia de
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Mello, Marko Myllynen, Martin Pitt, Matthew Monaco, Michael
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Marineau, Michael Scherer, Michał Górny, Michal Sekletar,
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Michele Curti, Oleksii Shevchuk, Olivier Brunel, Patrik Flykt,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Pavel Holica, Raudi, Richard Marko, Ronny Chevalier, Sébastien
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Luttringer, Sergey Ptashnick, Shawn Landden, Simon Peeters,
8e7acf67b278e47cff0f849780365f8b1a824189Lennart Poettering Stefan Beller, Susant Sahani, Sylvain Plantefeve, Sylvia Else,
6936cd8926b6935364874b3701e86fe823e8c4ceLennart Poettering Tero Roponen, Thomas Bächler, Thomas Hindoe Paaboel Andersen,
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Tom Gundersen, Umut Tezduyar Lindskog, Unai Uribarri, Václav
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Pavlín, Vincent Batts, WaLyong Cho, William Giokas, Yang
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Zhiyong, Yin Kangkai, Yuxuan Shui, Zbigniew Jędrzejewski-Szmek
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering -- Berlin, 2014-02-20
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart PoetteringCHANGES WITH 208:
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * logind has gained support for facilitating privileged input
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering and drm device access for unprivileged clients. This work is
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering useful to allow Wayland display servers (and similar
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering programs, such as kmscon) to run under the user's ID and
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering access input and drm devices which are normally
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering protected. When this is used (and the kernel is new enough)
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering logind will "mute" IO on the file descriptors passed to
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Wayland as long as it is in the background and "unmute" it
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek if it returns into the foreground. This allows secure
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering session switching without allowing background sessions to
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering eavesdrop on input and display data. This also introduces
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering session switching support if VT support is turned off in the
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering kernel, and on seats that are not seat0.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * A new kernel command line option luks.options= is understood
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering now which allows specifying LUKS options for usage for LUKS
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering encrypted partitions specified with luks.uuid=.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * tmpfiles.d(5) snippets may now use specifier expansion in
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering path names. More specifically %m, %b, %H, %v, are now
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering replaced by the local machine id, boot id, hostname, and
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering kernel version number.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * A new tmpfiles.d(5) command "m" has been introduced which
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering may be used to change the owner/group/access mode of a file
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering or directory if it exists, but do nothing if it does not.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * This release removes high-level support for the
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering MemorySoftLimit= cgroup setting. The underlying kernel
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering cgroup attribute memory.soft_limit= is currently badly
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering designed and likely to be removed from the kernel API in its
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering current form, hence we should not expose it for now.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * The memory.use_hierarchy cgroup attribute is now enabled for
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering all cgroups systemd creates in the memory cgroup
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering hierarchy. This option is likely to be come the built-in
70a44afee385c4afadaab9a002b3f9dd44aedf4aJan Engelhardt default in the kernel anyway, and the non-hierarchical mode
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering never made much sense in the intrinsically hierarchical
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering cgroup system.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * A new field _SYSTEMD_SLICE= is logged along with all journal
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering messages containing the slice a message was generated
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering from. This is useful to allow easy per-customer filtering of
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering logs among other things.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * systemd-journald will no longer adjust the group of journal
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering files it creates to the "systemd-journal" group. Instead we
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering rely on the journal directory to be owned by the
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering "systemd-journal" group, and its setgid bit set, so that the
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering kernel file system layer will automatically enforce that
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering journal files inherit this group assignment. The reason for
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering this change is that we cannot allow NSS look-ups from
b8bde11658366290521e3d03316378b482600323Jan Engelhardt journald which would be necessary to resolve
b8bde11658366290521e3d03316378b482600323Jan Engelhardt "systemd-journal" to a numeric GID, because this might
b8bde11658366290521e3d03316378b482600323Jan Engelhardt create deadlocks if NSS involves synchronous queries to
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering other daemons (such as nscd, or sssd) which in turn are
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering logging clients of journald and might block on it, which
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering would then dead lock. A tmpfiles.d(5) snippet included in
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering systemd will make sure the setgid bit and group are
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering properly set on the journal directory if it exists on every
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering boot. However, we recommend adjusting it manually after
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering upgrades too (or from RPM scriptlets), so that the change is
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering not delayed until next reboot.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * Backlight and random seed files in /var/lib/ have moved into
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering the /var/lib/systemd/ directory, in order to centralize all
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering systemd generated files in one directory.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * Boot time performance measurements (as displayed by
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering "systemd-analyze" for example) will now read ACPI 5.0 FPDT
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering performance information if that's available to determine how
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering much time BIOS and boot loader initialization required. With
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering a sufficiently new BIOS you hence no longer need to boot
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering with Gummiboot to get access to such information.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Contributions from: Andrey Borzenkov, Chen Jie, Colin Walters,
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Cristian Rodríguez, Dave Reisner, David Herrmann, David
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Mackey, David Strauss, Eelco Dolstra, Evan Callicoat, Gao
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering feng, Harald Hoyer, Jimmie Tauriainen, Kay Sievers, Lennart
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Poettering, Lukas Nykryn, Mantas Mikulėnas, Martin Pitt,
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Michael Scherer, Michał Górny, Mike Gilbert, Patrick McCarty,
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering Sebastian Ott, Tom Gundersen, Zbigniew Jędrzejewski-Szmek
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering -- Berlin, 2013-10-02
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart PoetteringCHANGES WITH 207:
b8bde11658366290521e3d03316378b482600323Jan Engelhardt * The Restart= option for services now understands a new
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering on-watchdog setting, which will restart the service
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering automatically if the service stops sending out watchdog keep
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering alive messages (as configured with WatchdogSec=).
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * The getty generator (which is responsible for bringing up a
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering getty on configured serial consoles) will no longer only
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering start a getty on the primary kernel console but on all
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering others, too. This makes the order in which console= is
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering specified on the kernel command line less important.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * libsystemd-logind gained a new sd_session_get_vt() call to
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering retrieve the VT number of a session.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * If the option "tries=0" is set for an entry of /etc/crypttab
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering its passphrase is queried indefinitely instead of any
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering maximum number of tries.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * If a service with a configure PID file terminates its PID
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering file will now be removed automatically if it still exists
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering afterwards. This should put an end to stale PID files.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * systemd-run will now also take relative binary path names
b8bde11658366290521e3d03316378b482600323Jan Engelhardt for execution and no longer insists on absolute paths.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * InaccessibleDirectories= and ReadOnlyDirectories= now take
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering paths that are optionally prefixed with "-" to indicate that
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering it should not be considered a failure if they do not exist.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * journalctl -o (and similar commands) now understands a new
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering output mode "short-precise", it is similar to "short" but
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering shows timestamps with usec accuracy.
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt * The option "discard" (as known from Debian) is now
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering synonymous to "allow-discards" in /etc/crypttab. In fact,
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering "discard" is preferred now (since it is easier to remember
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * Some licensing clean-ups were made, so that more code is now
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering LGPL-2.1 licensed than before.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * A minimal tool to save/restore the display backlight
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering brightness across reboots has been added. It will store the
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering backlight setting as late as possible at shutdown, and
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering restore it as early as possible during reboot.
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering * A logic to automatically discover and enable home and swap
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering partitions on GPT disks has been added. With this in place
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering /etc/fstab becomes optional for many setups as systemd can
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering discover certain partitions located on the root disk
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering automatically. Home partitions are recognized under their
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering GPT type ID 933ac7e12eb44f13b8440e14e2aef915. Swap
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering partitions are recognized under their GPT type ID
51c61cda1a542c9e999bfdc6aab4a029c0ae7f5aLennart Poettering 0657fd6da4ab43c484e50933c84b4f4f.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * systemd will no longer pass any environment from the kernel
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering or initrd to system services. If you want to set an
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering environment for all services, do so via the kernel command
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering line systemd.setenv= assignment.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * The systemd-sysctl tool no longer natively reads the file
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering /etc/sysctl.conf. If desired, the file should be symlinked
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering from /etc/sysctl.d/99-sysctl.conf. Apart from providing
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering legacy support by a symlink rather than built-in code, it
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering also makes the otherwise hidden order of application of the
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering different files visible. (Note that this partly reverts to a
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering pre-198 application order of sysctl knobs!)
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * The "systemctl set-log-level" and "systemctl dump" commands
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering have been moved to systemd-analyze.
f1721625e7145977ba705e169580f2eb0002600cNis Martensen * systemd-run learned the new --remain-after-exit switch,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering which causes the scope unit not to be cleaned up
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering automatically after the process terminated.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * tmpfiles learned a new --exclude-prefix= switch to exclude
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering certain paths from operation.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * journald will now automatically flush all messages to disk
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering as soon as a message at the log level CRIT, ALERT or EMERG
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Contributions from: Andrew Cook, Brandon Philips, Christian
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Hesse, Christoph Junghans, Colin Walters, Daniel Schaal,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Daniel Wallace, Dave Reisner, David Herrmann, Gao feng, George
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering McCollister, Giovanni Campagna, Hannes Reinecke, Harald Hoyer,
b8bde11658366290521e3d03316378b482600323Jan Engelhardt Herczeg Zsolt, Holger Hans Peter Freyther, Jan Engelhardt,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Jesper Larsen, Kay Sievers, Khem Raj, Lennart Poettering,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Lukas Nykryn, Maciej Wereski, Mantas Mikulėnas, Marcel
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Holtmann, Martin Pitt, Michael Biebl, Michael Marineau,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Michael Scherer, Michael Stapelberg, Michal Sekletar, Michał
b8bde11658366290521e3d03316378b482600323Jan Engelhardt Górny, Olivier Brunel, Ondrej Balaz, Ronny Chevalier, Shawn
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Landden, Steven Hiscocks, Thomas Bächler, Thomas Hindoe
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering Paaboel Andersen, Tom Gundersen, Umut Tezduyar, WANG Chao,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering William Giokas, Zbigniew Jędrzejewski-Szmek
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering -- Berlin, 2013-09-13
699b6b3491dc265ead79602404ad67ccdacae302Lennart PoetteringCHANGES WITH 206:
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * The documentation has been updated to cover the various new
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering concepts introduced with 205.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * Unit files now understand the new %v specifier which
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek resolves to the kernel version string as returned by "uname
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * systemctl now supports filtering the unit list output by
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering load state, active state and sub state, using the new
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering --state= parameter.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * "systemctl status" will now show the results of the
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering condition checks (like ConditionPathExists= and similar) of
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering the last start attempts of the unit. They are also logged to
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * "journalctl -b" may now be used to look for boot output of a
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering specific boot. Try "journalctl -b -1" for the previous boot,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering but the syntax is substantially more powerful.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * "journalctl --show-cursor" has been added which prints the
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering cursor string the last shown log line. This may then be used
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering with the new "journalctl --after-cursor=" switch to continue
4ef6e535e30c67d4ff34b2ca785e555dbaeac14eKay Sievers browsing logs from that point on.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * "journalctl --force" may now be used to force regeneration
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering of an FSS key.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * Creation of "dead" device nodes has been moved from udev
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering into kmod and tmpfiles. Previously, udev would read the kmod
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering databases to pre-generate dead device nodes based on meta
4ef6e535e30c67d4ff34b2ca785e555dbaeac14eKay Sievers information contained in kernel modules, so that these would
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering be auto-loaded on access rather then at boot. As this
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering does not really have much to do with the exposing actual
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering kernel devices to userspace this has always been slightly
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering alien in the udev codebase. Following the new scheme kmod
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering will now generate a runtime snippet for tmpfiles from the
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering module meta information and it now is tmpfiles' job to the
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering create the nodes. This also allows overriding access and
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering other parameters for the nodes using the usual tmpfiles
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering facilities. As side effect this allows us to remove the
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering CAP_SYS_MKNOD capability bit from udevd entirely.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * logind's device ACLs may now be applied to these "dead"
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering devices nodes too, thus finally allowing managed access to
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering devices such as /dev/snd/sequencer whithout loading the
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering backing module right-away.
4ef6e535e30c67d4ff34b2ca785e555dbaeac14eKay Sievers * A new RPM macro has been added that may be used to apply
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering tmpfiles configuration during package installation.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * systemd-detect-virt and ConditionVirtualization= now can
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering detect User-Mode-Linux machines (UML).
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * journald will now implicitly log the effective capabilities
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering set of processes in the message metadata.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * systemd-cryptsetup has gained support for TrueCrypt volumes.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * The initrd interface has been simplified (more specifically,
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering support for passing performance data via environment
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering variables and fsck results via files in /run has been
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering removed). These features were non-essential, and are
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering nowadays available in a much nicer way by having systemd in
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering the initrd serialize its state and have the hosts systemd
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering deserialize it again.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * The udev "keymap" data files and tools to apply keyboard
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering specific mappings of scan to key codes, and force-release
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering scan code lists have been entirely replaced by a udev
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering "keyboard" builtin and a hwdb data file.
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering * systemd will now honour the kernel's "quiet" command line
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering argument also during late shutdown, resulting in a
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering completely silent shutdown when used.
13b28d822462e9a0a7130ad40bed08cb380082f0Lennart Poettering * There's now an option to control the SO_REUSEPORT socket
699b6b3491dc265ead79602404ad67ccdacae302Lennart Poettering option in .socket units.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * Instance units will now automatically get a per-template
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering subslice of system.slice unless something else is explicitly
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering configured. For example, instances of sshd@.service will now
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering implicitly be placed in system-sshd.slice rather than
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * Test coverage support may now be enabled at build time.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Contributions from: Dave Reisner, Frederic Crozat, Harald
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Hoyer, Holger Hans Peter Freyther, Jan Engelhardt, Jan
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Janssen, Jason St. John, Jesper Larsen, Kay Sievers, Lennart
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Poettering, Lukas Nykryn, Maciej Wereski, Martin Pitt, Michael
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Olbrich, Ramkumar Ramachandra, Ross Lagerwall, Shawn Landden,
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Thomas H.P. Andersen, Tom Gundersen, Tomasz Torcz, William
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Giokas, Zbigniew Jędrzejewski-Szmek
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering -- Berlin, 2013-07-23
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart PoetteringCHANGES WITH 205:
ed28905eecf631916f03edd0a7dfad8b0a177990Kay Sievers * Two new unit types have been introduced:
ed28905eecf631916f03edd0a7dfad8b0a177990Kay Sievers Scope units are very similar to service units, however, are
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering created out of pre-existing processes -- instead of PID 1
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering forking off the processes. By using scope units it is
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering possible for system services and applications to group their
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering own child processes (worker processes) in a powerful way
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering which then maybe used to organize them, or kill them
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering together, or apply resource limits on them.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Slice units may be used to partition system resources in an
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering hierarchical fashion and then assign other units to them. By
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering default there are now three slices: system.slice (for all
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering system services), user.slice (for all user sessions),
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering machine.slice (for VMs and containers).
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering Slices and scopes have been introduced primarily in
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering context of the work to move cgroup handling to a
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering single-writer scheme, where only PID 1
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * There's a new concept of "transient" units. In contrast to
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering normal units these units are created via an API at runtime,
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering not from configuration from disk. More specifically this
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering means it is now possible to run arbitrary programs as
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering independent services, with all execution parameters passed
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering in via bus APIs rather than read from disk. Transient units
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering make systemd substantially more dynamic then it ever was,
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering and useful as a general batch manager.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * logind has been updated to make use of scope and slice units
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering for managing user sessions. As a user logs in he will get
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering his own private slice unit, to which all sessions are added
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering as scope units. We also added support for automatically
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering adding an instance of user@.service for the user into the
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering slice. Effectively logind will no longer create cgroup
ed28905eecf631916f03edd0a7dfad8b0a177990Kay Sievers hierarchies on its own now, it will defer entirely to PID 1
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering for this by means of scope, service and slice units. Since
b8bde11658366290521e3d03316378b482600323Jan Engelhardt user sessions this way become entities managed by PID 1
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering the output of "systemctl" is now a lot more comprehensive.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * A new mini-daemon "systemd-machined" has been added which
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering may be used by virtualization managers to register local
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering VMs/containers. nspawn has been updated accordingly, and
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering libvirt will be updated shortly. machined will collect a bit
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering of meta information about the VMs/containers, and assign
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering them their own scope unit (see above). The collected
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering meta-data is then made available via the "machinectl" tool,
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering and exposed in "ps" and similar tools. machined/machinectl
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering is compile-time optional.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * As discussed earlier, the low-level cgroup configuration
b8bde11658366290521e3d03316378b482600323Jan Engelhardt options ControlGroup=, ControlGroupModify=,
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering ControlGroupPersistent=, ControlGroupAttribute= have been
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering removed. Please use high-level attribute settings instead as
b8bde11658366290521e3d03316378b482600323Jan Engelhardt well as slice units.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * A new bus call SetUnitProperties() has been added to alter
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering various runtime parameters of a unit. This is primarily
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering useful to alter cgroup parameters dynamically in a nice way,
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering but will be extended later on to make more properties
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering modifiable at runtime. systemctl gained a new set-properties
b8bde11658366290521e3d03316378b482600323Jan Engelhardt command that wraps this call.
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering * A new tool "systemd-run" has been added which can be used to
b8bde11658366290521e3d03316378b482600323Jan Engelhardt run arbitrary command lines as transient services or scopes,
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering while configuring a number of settings via the command
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering line. This tool is currently very basic, however already
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt very useful. We plan to extend this tool to even allow
ed28905eecf631916f03edd0a7dfad8b0a177990Kay Sievers queuing of execution jobs with time triggers from the
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering command line, similar in fashion to "at".
d27893efdf652c6d85ea590fa0b7c2b88f817083Lennart Poettering * nspawn will now inform the user explicitly that kernels with
13b28d822462e9a0a7130ad40bed08cb380082f0Lennart Poettering audit enabled break containers, and suggest the user to turn
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * Support for detecting the IMA and AppArmor security
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering frameworks with ConditionSecurity= has been added.
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering * journalctl gained a new "-k" switch for showing only kernel
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering messages, mimicking dmesg output; in addition to "--user"
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering and "--system" switches for showing only user's own logs
43c71255b3db02916f4f70afa18bab196c6f4a45Lennart Poettering and system logs.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd-delta can now show information about drop-in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering snippets extending unit files.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * libsystemd-bus has been substantially updated but is still
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John not available as public API.
4670e9d5f23fc39360c086fb58eadf8b157ee205Jan Engelhardt * systemd will now look for the "debug" argument on the kernel
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John command line and enable debug logging, similar to what
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John "systemd.log_level=debug" already did before.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * "systemctl set-default", "systemctl get-default" has been
4670e9d5f23fc39360c086fb58eadf8b157ee205Jan Engelhardt added to configure the default.target symlink, which
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek controls what to boot into by default.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * "systemctl set-log-level" has been added as a convenient
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering way to raise and lower systemd logging threshold.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * "systemd-analyze plot" will now show the time the various
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering generators needed for execution, as well as information
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt about the unit file loading.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * libsystemd-journal gained a new sd_journal_open_files() call
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering for opening specific journal files. journactl also gained a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering new switch to expose this new functionality. Previously we
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John only supported opening all files from a directory, or all
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John files from the system, as opening individual files only is
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering racy due to journal file rotation.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd gained the new DefaultEnvironment= setting in
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt /etc/systemd/system.conf to set environment variables for
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * If a privileged process logs a journal message with the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering OBJECT_PID= field set, then journald will automatically
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John augment this with additional OBJECT_UID=, OBJECT_GID=,
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt OBJECT_COMM=, OBJECT_EXE=, ... fields. This is useful if
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John system services want to log events about specific client
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering processes. journactl/systemctl has been updated to make use
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering of this information if all log messages regarding a specific
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek unit is requested.
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek Contributions from: Auke Kok, Chengwei Yang, Colin Walters,
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt Cristian Rodríguez, Daniel Albers, Daniel Wallace, Dave
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek Reisner, David Coppa, David King, David Strauss, Eelco
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek Dolstra, Gabriel de Perthuis, Harald Hoyer, Jan Alexander
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek Steffens, Jan Engelhardt, Jan Janssen, Jason St. John, Johan
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek Heikkilä, Karel Zak, Karol Lewandowski, Kay Sievers, Lennart
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek Poettering, Lukas Nykryn, Mantas Mikulėnas, Marius Vollmer,
dfb08b058401d56c395f4f2d20ff214d31a277e5Zbigniew Jędrzejewski-Szmek Martin Pitt, Michael Biebl, Michael Olbrich, Michael Tremer,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Michal Schmidt, Michał Bartoszkiewicz, Nirbheek Chauhan,
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt Pierre Neidhardt, Ross Burton, Ross Lagerwall, Sean McGovern,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Thomas Hindoe Paaboel Andersen, Tom Gundersen, Umut Tezduyar,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Václav Pavlín, Zachary Cook, Zbigniew Jędrzejewski-Szmek,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Łukasz Stelmach, 장동준
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart PoetteringCHANGES WITH 204:
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt * The Python bindings gained some minimal support for the APIs
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering exposed by libsystemd-logind.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * ConditionSecurity= gained support for detecting SMACK. Since
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering this condition already supports SELinux and AppArmor we only
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering miss IMA for this. Patches welcome!
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Contributions from: Karol Lewandowski, Lennart Poettering,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Zbigniew Jędrzejewski-Szmek
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart PoetteringCHANGES WITH 203:
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * systemd-nspawn will now create /etc/resolv.conf if
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering necessary, before bind-mounting the host's file onto it.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd-nspawn will now store meta information about a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering container on the container's cgroup as extended attribute
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering fields, including the root directory.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * The cgroup hierarchy has been reworked in many ways. All
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering objects any of the components systemd creates in the cgroup
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering tree are now suffixed. More specifically, user sessions are
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering now placed in cgroups suffixed with ".session", users in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering cgroups suffixed with ".user", and nspawn containers in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering cgroups suffixed with ".nspawn". Furthermore, all cgroup
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering names are now escaped in a simple scheme to avoid collision
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering of userspace object names with kernel filenames. This work
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering is preparation for making these objects relocatable in the
b97610038a122ff30e60b1996369ca4b979d8b19Kay Sievers cgroup tree, in order to allow easy resource partitioning of
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering these objects without causing naming conflicts.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemctl list-dependencies gained the new switches
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering --plain, --reverse, --after and --before.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd-inhibit now shows the process name of processes that
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering have taken an inhibitor lock.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * nss-myhostname will now also resolve "localhost"
7e95eda5b36f4a5259e1e86989b5aee824d83d03Patrik Flykt implicitly. This makes /etc/hosts an optional file and
7e95eda5b36f4a5259e1e86989b5aee824d83d03Patrik Flykt nicely handles that on IPv6 ::1 maps to both "localhost" and
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering the local hostname.
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt * libsystemd-logind.so gained a new call
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John sd_get_machine_names() to enumerate running containers and
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John VMs (currently only supported by very new libvirt and
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John nspawn). sd_login_monitor can now be used to watch
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John VMs/containers coming and going.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * .include is not allowed recursively anymore, and only in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering unit files. Usually it is better to use drop-in snippets in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering .d/*.conf anyway, as introduced with systemd 198.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd-analyze gained a new "critical-chain" command that
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John determines the slowest chain of units run during system
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering boot-up. It is very useful for tracking down where
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering optimizing boot time is the most beneficial.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd will no longer allow manipulating service paths in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering the name=systemd:/system cgroup tree using ControlGroup= in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering units. (But is still fine with it in all other dirs.)
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * There's a new systemd-nspawn@.service service file that may
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering be used to easily run nspawn containers as system
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering services. With the container's root directory in
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt /var/lib/container/foobar it is now sufficient to run
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John "systemctl start systemd-nspawn@foobar.service" to boot it.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd-cgls gained a new parameter "--machine" to list only
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering the processes within a certain container.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * ConditionSecurity= now can check for "apparmor". We still
8e420494bc59d8b9d43e6d34d8ec8bb765946c74Lennart Poettering are lacking checks for SMACK and IMA for this condition
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering check though. Patches welcome!
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * A new configuration file /etc/systemd/sleep.conf has been
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering added that may be used to configure which kernel operation
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering systemd is supposed to execute when "suspend", "hibernate"
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering or "hybrid-sleep" is requested. This makes the new kernel
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering "freeze" state accessible to the user.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * ENV{SYSTEMD_WANTS} in udev rules will now implicitly escape
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering the passed argument if applicable.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Contributions from: Auke Kok, Colin Guthrie, Colin Walters,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Cristian Rodríguez, Daniel Buch, Daniel Wallace, Dave Reisner,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Evangelos Foutras, Greg Kroah-Hartman, Harald Hoyer, Josh
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Triplett, Kay Sievers, Lennart Poettering, Lukas Nykryn,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering MUNEDA Takahiro, Mantas Mikulėnas, Mirco Tischler, Nathaniel
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John Chen, Nirbheek Chauhan, Ronny Chevalier, Ross Lagerwall, Tom
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Gundersen, Umut Tezduyar, Ville Skyttä, Zbigniew
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Jędrzejewski-Szmek
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart PoetteringCHANGES WITH 202:
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * The output of 'systemctl list-jobs' got some polishing. The
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering '--type=' argument may now be passed more than once. A new
270f1624022039b370b9db311f9d33492833ad24Lennart Poettering command 'systemctl list-sockets' has been added which shows
270f1624022039b370b9db311f9d33492833ad24Lennart Poettering a list of kernel sockets systemd is listening on with the
8e420494bc59d8b9d43e6d34d8ec8bb765946c74Lennart Poettering socket units they belong to, plus the units these socket
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering units activate.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * The experimental libsystemd-bus library got substantial
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek updates to work in conjunction with the (also experimental)
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering kdbus kernel project. It works well enough to exchange
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering messages with some sophistication. Note that kdbus is not
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering ready yet, and the library is mostly an elaborate test case
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering for now, and not installable.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd gained a new unit 'systemd-static-nodes.service'
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering that generates static device nodes earlier during boot, and
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering can run in conjunction with udev.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * libsystemd-login gained a new call sd_pid_get_user_unit()
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to retrieve the user systemd unit a process is running
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering in. This is useful for systems where systemd is used as
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering session manager.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * systemd-nspawn now places all containers in the new /machine
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering top-level cgroup directory in the name=systemd
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering hierarchy. libvirt will soon do the same, so that we get a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering uniform separation of /system, /user and /machine for system
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek services, user processes and containers/virtual
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek machines. This new cgroup hierarchy is also useful to stick
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek stable names to specific container instances, which can be
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering recognized later this way (this name may be controlled
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering via systemd-nspawn's new -M switch). libsystemd-login also
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering gained a new call sd_pid_get_machine_name() to retrieve the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering name of the container/VM a specific process belongs to.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * bootchart can now store its data in the journal.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * libsystemd-journal gained a new call
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering sd_journal_add_conjunction() for AND expressions to the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering matching logic. This can be used to express more complex
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering logical expressions.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * journactl can now take multiple --unit= and --user-unit=
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * The cryptsetup logic now understands the "luks.key=" kernel
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering command line switch for specifying a file to read the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering decryption key from. Also, if a configured key file is not
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering found the tool will now automatically fall back to prompting
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * Python systemd.journal module was updated to wrap recently
8e420494bc59d8b9d43e6d34d8ec8bb765946c74Lennart Poettering added functions from libsystemd-journal. The interface was
8e420494bc59d8b9d43e6d34d8ec8bb765946c74Lennart Poettering changed to bring the low level interface in s.j._Reader
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering closer to the C API, and the high level interface in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering s.j.Reader was updated to wrap and convert all data about
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Contributions from: Anatol Pomozov, Auke Kok, Harald Hoyer,
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek Henrik Grindal Bakken, Josh Triplett, Kay Sievers, Lennart
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Poettering, Lukas Nykryn, Mantas Mikulėnas Marius Vollmer,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Martin Jansa, Martin Pitt, Michael Biebl, Michal Schmidt,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Mirco Tischler, Pali Rohar, Simon Peeters, Steven Hiscocks,
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt Tom Gundersen, Zbigniew Jędrzejewski-Szmek
4670e9d5f23fc39360c086fb58eadf8b157ee205Jan EngelhardtCHANGES WITH 201:
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * journalctl --update-catalog now understands a new --root=
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek option to operate on catalogs found in a different root
c0c5af00bec95567435bdfb818c69b2b669adfedDaniel Buch * During shutdown after systemd has terminated all running
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt services a final killing loop kills all remaining left-over
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering processes. We will now print the name of these processes
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt when we send SIGKILL to them, since this usually indicates a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * If /etc/crypttab refers to password files stored on
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John configured mount points automatic dependencies will now be
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering generated to ensure the specific mount is established first
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering before the key file is attempted to be read.
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering * 'systemctl status' will now show information about the
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering network sockets a socket unit is listening on.
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * 'systemctl status' will also shown information about any
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John drop-in configuration file for units. (Drop-In configuration
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering files in this context are files such as
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt /etc/systemd/systemd/foobar.service.d/*.conf)
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering * systemd-cgtop now optionally shows summed up CPU times of
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering cgroups. Press '%' while running cgtop to switch between
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering percentage and absolute mode. This is useful to determine
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering which cgroups use up the most CPU time over the entire
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering runtime of the system. systemd-cgtop has also been updated
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering to be 'pipeable' for processing with further shell tools.
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering * 'hostnamectl set-hostname' will now allow setting of FQDN
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * The formatting and parsing of time span values has been
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt changed. The parser now understands fractional expressions
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering such as "5.5h". The formatter will now output fractional
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering expressions for all time spans under 1min, i.e. "5.123456s"
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering rather than "5s 123ms 456us". For time spans under 1s
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John millisecond values are shown, for those under 1ms
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering microsecond values are shown. This should greatly improve
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John all time-related output of systemd.
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * libsystemd-login and libsystemd-journal gained new
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt functions for querying the poll() events mask and poll()
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering timeout value for integration into arbitrary event
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * localectl gained the ability to list available X11 keymaps
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers (models, layouts, variants, options).
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers * 'systemd-analyze dot' gained the ability to filter for
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering specific units via shell-style globs, to create smaller,
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John more useful graphs. I.e. it is now possible to create simple
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt graphs of all the dependencies between only target units, or
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt of all units that Avahi has dependencies with.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Contributions from: Cristian Rodríguez, Dr. Tilmann Bubeck,
81c7dd897c6af68e66b58e97abce676641edc197Lennart Poettering Harald Hoyer, Holger Hans Peter Freyther, Kay Sievers, Kelly
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers Anderson, Koen Kooi, Lennart Poettering, Maksim Melnikau,
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John Marc-Antoine Perennou, Marius Vollmer, Martin Pitt, Michal
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers Schmidt, Oleksii Shevchuk, Ronny Chevalier, Simon McVittie,
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John Steven Hiscocks, Thomas Weißschuh, Umut Tezduyar, Václav
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers Pavlín, Zbigniew Jędrzejewski-Szmek, Łukasz Stelmach
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay SieversCHANGES WITH 200:
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers * The boot-time readahead implementation for rotating media
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers will now read the read-ahead data in multiple passes which
ad42cf7308c45fb8a77c15b313f45361c5ea8fb5Kay Sievers consist of all read requests made in equidistant time
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering intervals. This means instead of strictly reading read-ahead
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt data in its physical order on disk we now try to find a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering middle ground between physical and access time order.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * /etc/os-release files gained a new BUILD_ID= field for usage
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering on operating systems that provide continuous builds of OS
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Contributions from: Auke Kok, Eelco Dolstra, Kay Sievers,
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt Lennart Poettering, Lukas Nykryn, Martin Pitt, Václav Pavlín
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John William Douglas, Zbigniew Jędrzejewski-Szmek
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart PoetteringCHANGES WITH 199:
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd-python gained an API exposing libsystemd-daemon.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * The SMACK setup logic gained support for uploading CIPSO
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John security policy.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * Behaviour of PrivateTmp=, ReadWriteDirectories=,
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek ReadOnlyDirectories= and InaccessibleDirectories= has
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering changed. The private /tmp and /var/tmp directories are now
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering shared by all processes of a service (which means
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering ExecStartPre= may now leave data in /tmp that ExecStart= of
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek the same service can still access). When a service is
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek stopped its temporary directories are immediately deleted
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek (normal clean-up with tmpfiles is still done in addition to
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * By default, systemd will now set a couple of sysctl
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek variables in the kernel: the safe sysrq options are turned
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering on, IP route verification is turned on, and source routing
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering disabled. The recently added hardlink and softlink
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering protection of the kernel is turned on. These settings should
8e420494bc59d8b9d43e6d34d8ec8bb765946c74Lennart Poettering be reasonably safe, and good defaults for all new systems.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * The predictable network naming logic may now be turned off
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek with a new kernel command line switch: net.ifnames=0.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * A new libsystemd-bus module has been added that implements a
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John pretty complete D-Bus client library. For details see:
8e420494bc59d8b9d43e6d34d8ec8bb765946c74Lennart Poettering http://lists.freedesktop.org/archives/systemd-devel/2013-March/009797.html
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * journald will now explicitly flush the journal files to disk
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt at the latest 5min after each write. The file will then also
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt be marked offline until the next write. This should increase
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering reliability in case of a crash. The synchronization delay
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering can be configured via SyncIntervalSec= in journald.conf.
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * There's a new remote-fs-setup.target unit that can be used
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to pull in specific services when at least one remote file
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering system is to be mounted.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * There are new targets timers.target and paths.target as
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering canonical targets to pull user timer and path units in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering from. This complements sockets.target with a similar
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering purpose for socket units.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * libudev gained a new call udev_device_set_attribute_value()
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to set sysfs attributes of a device.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek * The udev daemon now sets the default number of worker
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek processes executed in parallel based on the number of available
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering CPUs instead of the amount of available RAM. This is supposed
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to provide a more reliable default and limit a too aggressive
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering paralellism for setups with 1000s of devices connected.
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John Contributions from: Auke Kok, Colin Walters, Cristian
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Rodríguez, Daniel Buch, Dave Reisner, Frederic Crozat, Hannes
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Reinecke, Harald Hoyer, Jan Alexander Steffens, Jan
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Engelhardt, Josh Triplett, Kay Sievers, Lennart Poettering,
b97610038a122ff30e60b1996369ca4b979d8b19Kay Sievers Mantas Mikulėnas, Martin Pitt, Mathieu Bridon, Michael Biebl,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Michal Schmidt, Michal Sekletar, Miklos Vajna, Nathaniel Chen,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Oleksii Shevchuk, Ozan Çağlayan, Thomas Hindoe Paaboel
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Andersen, Tollef Fog Heen, Tom Gundersen, Umut Tezduyar,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Zbigniew Jędrzejewski-Szmek
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart PoetteringCHANGES WITH 198:
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * Configuration of unit files may now be extended via drop-in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering files without having to edit/override the unit files
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering themselves. More specifically, if the administrator wants to
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering change one value for a service file foobar.service he can
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering now do so by dropping in a configuration snippet into
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering /etc/systemd/system/foobar.service.d/*.conf. The unit logic
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek will load all these snippets and apply them on top of the
8e420494bc59d8b9d43e6d34d8ec8bb765946c74Lennart Poettering main unit configuration file, possibly extending or
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering overriding its settings. Using these drop-in snippets is
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering generally nicer than the two earlier options for changing
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering unit files locally: copying the files from
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John /usr/lib/systemd/system/ to /etc/systemd/system/ and editing
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering them there; or creating a new file in /etc/systemd/system/
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek that incorporates the original one via ".include". Drop-in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering snippets into these .d/ directories can be placed in any
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering directory systemd looks for units in, and the usual
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering overriding semantics between /usr/lib, /etc and /run apply
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt for them too.
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * Most unit file settings which take lists of items can now be
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John reset by assigning the empty string to them. For example,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering normally, settings such as Environment=FOO=BAR append a new
6afc95b73605833e6e966af1c466b5c08feb953fLennart Poettering environment variable assignment to the environment block,
6afc95b73605833e6e966af1c466b5c08feb953fLennart Poettering each time they are used. By assigning Environment= the empty
70a44afee385c4afadaab9a002b3f9dd44aedf4aJan Engelhardt string the environment block can be reset to empty. This is
b8bde11658366290521e3d03316378b482600323Jan Engelhardt particularly useful with the .d/*.conf drop-in snippets
b8bde11658366290521e3d03316378b482600323Jan Engelhardt mentioned above, since this adds the ability to reset list
6afc95b73605833e6e966af1c466b5c08feb953fLennart Poettering settings from vendor unit files via these drop-ins.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemctl gained a new "list-dependencies" command for
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering listing the dependencies of a unit recursively.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * Inhibitors are now honored and listed by "systemctl
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering suspend", "systemctl poweroff" (and similar) too, not only
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering GNOME. These commands will also list active sessions by
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * Resource limits (as exposed by the various control group
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering controllers) can now be controlled dynamically at runtime
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John for all units. More specifically, you can now use a command
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John like "systemctl set-cgroup-attr foobar.service cpu.shares
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering 2000" to alter the CPU shares a specific service gets. These
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering settings are stored persistently on disk, and thus allow the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering administrator to easily adjust the resource usage of
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering services with a few simple commands. This dynamic resource
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering management logic is also available to other programs via the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering bus. Almost any kernel cgroup attribute and controller is
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * systemd-vconsole-setup will now copy all font settings to
b8bde11658366290521e3d03316378b482600323Jan Engelhardt all allocated VTs, where it previously applied them only to
b8bde11658366290521e3d03316378b482600323Jan Engelhardt the foreground VT.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * libsystemd-login gained the new sd_session_get_tty() API
8b7d0494a3fe35209d4db0d1b9e065e7e5cc9875Jason St. John * This release drops support for a few legacy or
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering distribution-specific LSB facility names when parsing init
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering scripts: $x-display-manager, $mail-transfer-agent,
210054d76cf4d294533aa09256d375e33b52569fKay Sievers $mail-transport-agent, $mail-transfer-agent, $smtp,
210054d76cf4d294533aa09256d375e33b52569fKay Sievers $null. Also, the mail-transfer-agent.target unit backing
210054d76cf4d294533aa09256d375e33b52569fKay Sievers this has been removed. Distributions which want to retain
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering compatibility with this should carry the burden for
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering supporting this themselves and patch support for these back
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering in, if they really need to. Also, the facilities $syslog and
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering $local_fs are now ignored, since systemd does not support
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering early-boot LSB init scripts anymore, and these facilities
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering are implied anyway for normal services. syslog.target has
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering also been removed.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * There are new bus calls on PID1's Manager object for
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering cancelling jobs, and removing snapshot units. Previously,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering both calls were only available on the Job and Snapshot
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering objects themselves.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * systemd-journal-gatewayd gained SSL support.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * The various "environment" files, such as /etc/locale.conf
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering now support continuation lines with a backslash ("\") as
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering last character in the line, similarly in style (but different)
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to how this is supported in shells.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering * For normal user processes the _SYSTEMD_USER_UNIT= field is
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering now implicitly appended to every log entry logged. systemctl
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering has been updated to filter by this field when operating on a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering user systemd instance.
6300b3eca9e5261b73bd7f1bb9735992b127cd80Lennart Poettering * nspawn will now implicitly add the CAP_AUDIT_WRITE and
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering CAP_AUDIT_CONTROL capabilities to the capabilities set for
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering the container. This makes it easier to boot unmodified
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering Fedora systems in a container, which however still requires
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering audit=0 to be passed on the kernel command line. Auditing in
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering kernel and userspace is unfortunately still too broken in
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering context of containers, hence we recommend compiling it out
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering of the kernel or using audit=0. Hopefully this will be fixed
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering one day for good in the kernel.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * nspawn gained the new --bind= and --bind-ro= parameters to
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering bind mount specific directories from the host into the
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * nspawn will now mount its own devpts file system instance
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering into the container, in order not to leak pty devices from
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering the host into the container.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * systemd will now read the firmware boot time performance
06b643e7f5a3b79005dd57497897ab7255fe3659Ruben Kerkhof information from the EFI variables, if the used boot loader
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering supports this, and takes it into account for boot performance
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering analysis via "systemd-analyze". This is currently supported
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering only in conjunction with Gummiboot, but could be supported
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering by other boot loaders too. For details see:
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering http://www.freedesktop.org/wiki/Software/systemd/BootLoaderInterface
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * A new generator has been added that automatically mounts the
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering EFI System Partition (ESP) to /boot, if that directory
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt exists, is empty, and no other file system has been
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering configured to be mounted there.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * logind will now send out PrepareForSleep(false) out
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering unconditionally, after coming back from suspend. This may be
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering used by applications as asynchronous notification for
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt system resume events.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * "systemctl unlock-sessions" has been added, that allows
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering unlocking the screens of all user sessions at once, similar
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering to how "systemctl lock-sessions" already locked all users
cc98b3025eeb89addb76a27390cb2baca4eab8b9Torstein Husebø sessions. This is backed by a new D-Bus call UnlockSessions().
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * "loginctl seat-status" will now show the master device of a
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering seat. (i.e. the device of a seat that needs to be around for
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering the seat to be considered available, usually the graphics
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * tmpfiles gained a new "X" line type, that allows
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering configuration of files and directories (with wildcards) that
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering shall be excluded from automatic cleanup ("aging").
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * udev default rules set the device node permissions now only
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering at "add" events, and do not change them any longer with a
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering later "change" event.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * The log messages for lid events and power/sleep keypresses
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering now carry a message ID.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * We now have a substantially larger unit test suite, but this
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering continues to be work in progress.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * udevadm hwdb gained a new --root= parameter to change the
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering root directory to operate relative to.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * logind will now issue a background sync() request to the kernel
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering early at shutdown, so that dirty buffers are flushed to disk early
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering instead of at the last moment, in order to optimize shutdown
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering times a little.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * A new bootctl tool has been added that is an interface for
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering certain boot loader operations. This is currently a preview
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering and is likely to be extended into a small mechanism daemon
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering like timedated, localed, hostnamed, and can be used by
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering graphical UIs to enumerate available boot options, and
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering request boot into firmware operations.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * systemd-bootchart has been relicensed to LGPLv2.1+ to match
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering the rest of the package. It also has been updated to work
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering correctly in initrds.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * Policykit previously has been runtime optional, and is now
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering also compile time optional via a configure switch.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * systemd-analyze has been reimplemented in C. Also "systemctl
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering dot" has moved into systemd-analyze.
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering * "systemctl status" with no further parameters will now print
cd4010b37349413db1e553e213e62e654ca28113Lennart Poettering the status of all active or failed units.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * Operations such as "systemctl start" can now be executed
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering with a new mode "--irreversible" which may be used to queue
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering operations that cannot accidentally be reversed by a later
f3a165b05d117b9a9657076fed6b265eb40d5ba3Kay Sievers job queuing. This is by default used to make shutdown
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering requests more robust.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * The Python API of systemd now gained a new module for
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering reading journal files.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * A new tool kernel-install has been added that can install
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering kernel images according to the Boot Loader Specification:
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering http://www.freedesktop.org/wiki/Specifications/BootLoaderSpec
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * Boot time console output has been improved to provide
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering animated boot time output for hanging jobs.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * A new tool systemd-activate has been added which can be used
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering to test socket activation with, directly from the command
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering line. This should make it much easier to test and debug
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering socket activation in daemons.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * journalctl gained a new "--reverse" (or -r) option to show
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering journal output in reverse order (i.e. newest line first).
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * journalctl gained a new "--pager-end" (or -e) option to jump
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering to immediately jump to the end of the journal in the
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering pager. This is only supported in conjunction with "less".
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt * journalctl gained a new "--user-unit=" option, that works
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering similarly to "--unit=" but filters for user units rather than
f3a165b05d117b9a9657076fed6b265eb40d5ba3Kay Sievers system units.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * A number of unit files to ease adoption of systemd in
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering initrds has been added. This moves some minimal logic from
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering the various initrd implementations into systemd proper.
387abf80ad40e4a6c2f4725c8eff4d66bf110d1fLennart Poettering * The journal files are now owned by a new group
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering "systemd-journal", which exists specifically to allow access
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering to the journal, and nothing else. Previously, we used the
f3a165b05d117b9a9657076fed6b265eb40d5ba3Kay Sievers "adm" group for that, which however possibly covers more
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering than just journal/log file access. This new group is now
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering already used by systemd-journal-gatewayd to ensure this
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering daemon gets access to the journal files and as little else
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering as possible. Note that "make install" will also set FS ACLs
f3a165b05d117b9a9657076fed6b265eb40d5ba3Kay Sievers up for /var/log/journal to give "adm" and "wheel" read
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering access to it, in addition to "systemd-journal" which owns
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering the journal files. We recommend that packaging scripts also
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering add read access to "adm" + "wheel" to /var/log/journal, and
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering all existing/future journal files. To normal users and
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering administrators little changes, however packagers need to
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering ensure to create the "systemd-journal" system group at
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering package installation time.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * The systemd-journal-gatewayd now runs as unprivileged user
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering systemd-journal-gateway:systemd-journal-gateway. Packaging
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering scripts need to create these system user/group at
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering installation time.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * timedated now exposes a new boolean property CanNTP that
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering indicates whether a local NTP service is available or not.
387abf80ad40e4a6c2f4725c8eff4d66bf110d1fLennart Poettering * systemd-detect-virt will now also detect xen PVs
387abf80ad40e4a6c2f4725c8eff4d66bf110d1fLennart Poettering * The pstore file system is now mounted by default, if it is
387abf80ad40e4a6c2f4725c8eff4d66bf110d1fLennart Poettering * In addition to the SELinux and IMA policies we will now also
387abf80ad40e4a6c2f4725c8eff4d66bf110d1fLennart Poettering load SMACK policies at early boot.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Contributions from: Adel Gadllah, Aleksander Morgado, Auke
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Kok, Ayan George, Bastien Nocera, Colin Walters, Daniel Buch,
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Daniel Wallace, Dave Reisner, David Herrmann, David Strauss,
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Eelco Dolstra, Enrico Scholz, Frederic Crozat, Harald Hoyer,
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Jan Janssen, Jonathan Callen, Kay Sievers, Lennart Poettering,
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Lukas Nykryn, Mantas Mikulėnas, Marc-Antoine Perennou, Martin
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Pitt, Mauro Dreissig, Max F. Albrecht, Michael Biebl, Michael
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Olbrich, Michal Schmidt, Michal Sekletar, Michal Vyskocil,
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Michał Bartoszkiewicz, Mirco Tischler, Nathaniel Chen, Nestor
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Ovroy, Oleksii Shevchuk, Paul W. Frields, Piotr Drąg, Rob
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Clark, Ryan Lortie, Simon McVittie, Simon Peeters, Steven
f47ad59316ddbfce0b24edac752222d300ed0da4Zbigniew Jędrzejewski-Szmek Hiscocks, Thomas Hindoe Paaboel Andersen, Tollef Fog Heen, Tom
f47ad59316ddbfce0b24edac752222d300ed0da4Zbigniew Jędrzejewski-Szmek Gundersen, Umut Tezduyar, William Giokas, Zbigniew
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering Jędrzejewski-Szmek, Zeeshan Ali (Khattak)
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart PoetteringCHANGES WITH 197:
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * Timer units now support calendar time events in addition to
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering monotonic time events. That means you can now trigger a unit
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering based on a calendar time specification such as "Thu,Fri
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering 2013-*-1,5 11:12:13" which refers to 11:12:13 of the first
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering or fifth day of any month of the year 2013, given that it is
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering a thursday or friday. This brings timer event support
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering considerably closer to cron's capabilities. For details on
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering the supported calendar time specification language see
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * udev now supports a number of different naming policies for
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering network interfaces for predictable names, and a combination
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering of these policies is now the default. Please see this wiki
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering document for details:
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * Auke Kok's bootchart implementation has been added to the
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering systemd tree. It is an optional component that can graph the
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering boot in quite some detail. It is one of the best bootchart
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering implementations around and minimal in its code and
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * nss-myhostname has been integrated into the systemd source
33b521be152f67cd722695ba9a2966eda5ee6765Maciej Wereski tree. nss-myhostname guarantees that the local hostname
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering always stays resolvable via NSS. It has been a weak
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering requirement of systemd-hostnamed since a long time, and
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering since its code is actually trivial we decided to just
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering include it in systemd's source tree. It can be turned off
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering with a configure switch.
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * The read-ahead logic is now capable of properly detecting
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering whether a btrfs file system is on SSD or rotating media, in
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering order to optimize the read-ahead scheme. Previously, it was
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering only capable of detecting this on traditional file systems
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * In udev, additional device properties are now read from the
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering IAB in addition to the OUI database. Also, Bluetooth company
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering identities are attached to the devices as well.
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * In service files %U may be used as specifier that is
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering replaced by the configured user name of the service.
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering * nspawn may now be invoked without a controlling TTY. This
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering makes it suitable for invocation as its own service. This
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering may be used to set up a simple containerized server system
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering using only core OS tools.
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering * systemd and nspawn can now accept socket file descriptors
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering when they are started for socket activation. This enables
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering implementation of socket activated nspawn
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering containers. i.e. think about autospawning an entire OS image
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering when the first SSH or HTTP connection is received. We expect
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering that similar functionality will also be added to libvirt-lxc
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering * journalctl will now suppress ANSI color codes when
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering presenting log data.
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering * systemctl will no longer show control group information for
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering a unit if a the control group is empty anyway.
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * logind can now automatically suspend/hibernate/shutdown the
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering system on idle.
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * /etc/machine-info and hostnamed now also expose the chassis
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering type of the system. This can be used to determine whether
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering the local system is a laptop, desktop, handset or
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering tablet. This information may either be configured by the
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering user/vendor or is automatically determined from ACPI and DMI
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering information if possible.
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * A number of PolicyKit actions are now bound together with
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering "imply" rules. This should simplify creating UIs because
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering many actions will now authenticate similar ones as well.
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * Unit files learnt a new condition ConditionACPower= which
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering may be used to conditionalize a unit depending on whether an
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering AC power source is connected or not, of whether the system
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering is running on battery power.
28f5c779e5513ab1301ac103471009711b0961e0Kay Sievers * systemctl gained a new "is-failed" verb that may be used in
28f5c779e5513ab1301ac103471009711b0961e0Kay Sievers shell scripts and suchlike to check whether a specific unit
28f5c779e5513ab1301ac103471009711b0961e0Kay Sievers is in the "failed" state.
408f281bc7d65c86563f46e99e07efd1a1d9e03aLennart Poettering * The EnvironmentFile= setting in unit files now supports file
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering globbing, and can hence be used to easily read a number of
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering environment files at once.
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering * systemd will no longer detect and recognize specific
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering distributions. All distribution-specific #ifdeffery has been
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering removed, systemd is now fully generic and
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering distribution-agnostic. Effectively, not too much is lost as
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering a lot of the code is still accessible via explicit configure
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering switches. However, support for some distribution specific
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering legacy configuration file formats has been dropped. We
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering recommend distributions to simply adopt the configuration
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering files everybody else uses now and convert the old
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering configuration from packaging scripts. Most distributions
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering already did that. If that's not possible or desirable,
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering distributions are welcome to forward port the specific
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering pieces of code locally from the git history.
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering * When logging a message about a unit systemd will now always
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering log the unit name in the message meta data.
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering * localectl will now also discover system locale data that is
251cc8194228ac86c9a7a4c75a54a94cea2095c7Lennart Poettering not stored in locale archives, but directly unpacked.
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering * logind will no longer unconditionally use framebuffer
4f0be680b5323e037314cfbd3dba34f03e637c8fLennart Poettering devices as seat masters, i.e. as devices that are required
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering to be existing before a seat is considered preset. Instead,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering it will now look for all devices that are tagged as
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering "seat-master" in udev. By default framebuffer devices will
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering be marked as such, but depending on local systems other
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering devices might be marked as well. This may be used to
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering integrate graphics cards using closed source drivers (such
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering as NVidia ones) more nicely into logind. Note however, that
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering we recommend using the open source NVidia drivers instead,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering and no udev rules for the closed-source drivers will be
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering shipped from us upstream.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Contributions from: Adam Williamson, Alessandro Crismani, Auke
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Kok, Colin Walters, Daniel Wallace, Dave Reisner, David
cc98b3025eeb89addb76a27390cb2baca4eab8b9Torstein Husebø Herrmann, David Strauss, Dimitrios Apostolou, Eelco Dolstra,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Eric Benoit, Giovanni Campagna, Hannes Reinecke, Henrik
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Grindal Bakken, Hermann Gausterer, Kay Sievers, Lennart
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Poettering, Lukas Nykryn, Mantas Mikulėnas, Marcel Holtmann,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Martin Pitt, Matthew Monaco, Michael Biebl, Michael Terry,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Michal Schmidt, Michal Sekletar, Michał Bartoszkiewicz, Oleg
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Samarin, Pekka Lundstrom, Philip Nilsson, Ramkumar
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Ramachandra, Richard Yao, Robert Millan, Sami Kerola, Shawn
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Landden, Thomas Hindoe Paaboel Andersen, Thomas Jarosch,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Tollef Fog Heen, Tom Gundersen, Umut Tezduyar, Zbigniew
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Jędrzejewski-Szmek
00aa832b948a27507c33e2157e46963852cffc85Lennart PoetteringCHANGES WITH 196:
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * udev gained support for loading additional device properties
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering from an indexed database that is keyed by vendor/product IDs
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering and similar device identifiers. For the beginning this
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering "hwdb" is populated with data from the well-known PCI and
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering USB database, but also includes PNP, ACPI and OID data. In
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering the longer run this indexed database shall grow into
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering becoming the one central database for non-essential
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering userspace device metadata. Previously, data from the PCI/USB
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering database was only attached to select devices, since the
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering lookup was a relatively expensive operation due to O(n) time
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering complexity (with n being the number of entries in the
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering database). Since this is now O(1), we decided to add in this
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering data for all devices where this is available, by
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering default. Note that the indexed database needs to be rebuilt
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering when new data files are installed. To achieve this you need
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering to update your packaging scripts to invoke "udevadm hwdb
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering --update" after installation of hwdb data files. For
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering RPM-based distributions we introduced the new
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering %udev_hwdb_update macro for this purpose.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * The Journal gained support for the "Message Catalog", an
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering indexed database to link up additional information with
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering journal entries. For further details please check:
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering http://www.freedesktop.org/wiki/Software/systemd/catalog
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering The indexed message catalog database also needs to be
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering rebuilt after installation of message catalog files. Use
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering "journalctl --update-catalog" for this. For RPM-based
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering distributions we introduced the %journal_catalog_update
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering macro for this purpose.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * The Python Journal bindings gained support for the standard
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Python logging framework.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * The Journal API gained new functions for checking whether
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering the underlying file system of a journal file is capable of
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering properly reporting file change notifications, or whether
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering applications that want to reflect journal changes "live"
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering need to recheck journal files continuously in appropriate
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering time intervals.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * It is now possible to set the "age" field for tmpfiles
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering entries to 0, indicating that files matching this entry
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering shall always be removed when the directories are cleaned up.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * coredumpctl gained a new "gdb" verb which invokes gdb
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering right-away on the selected coredump.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * There's now support for "hybrid sleep" on kernels that
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering support this, in addition to "suspend" and "hibernate". Use
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering "systemctl hybrid-sleep" to make use of this.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * logind's HandleSuspendKey= setting (and related settings)
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering now gained support for a new "lock" setting to simply
1fda0ab5fc9cf7454c8da32941e433dc38ba9991Zbigniew Jędrzejewski-Szmek request the screen lock on all local sessions, instead of
1fda0ab5fc9cf7454c8da32941e433dc38ba9991Zbigniew Jędrzejewski-Szmek actually executing a suspend or hibernation.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * systemd will now mount the EFI variables file system by
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * Socket units now gained support for configuration of the
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering SMACK security label.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * timedatectl will now output the time of the last and next
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering daylight saving change.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * We dropped support for various legacy and distro-specific
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering concepts, such as insserv, early-boot SysV services
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering (i.e. those for non-standard runlevels such as 'b' or 'S')
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering or ArchLinux /etc/rc.conf support. We recommend the
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering distributions who still need support this to either continue
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering to maintain the necessary patches downstream, or find a
1fda0ab5fc9cf7454c8da32941e433dc38ba9991Zbigniew Jędrzejewski-Szmek different solution. (Talk to us if you have questions!)
1fda0ab5fc9cf7454c8da32941e433dc38ba9991Zbigniew Jędrzejewski-Szmek * Various systemd components will now bypass PolicyKit checks
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering for root and otherwise handle properly if PolicyKit is not
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering found to be around. This should fix most issues for
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering PolicyKit-less systems. Quite frankly this should have been
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering this way since day one. It is absolutely our intention to
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering make systemd work fine on PolicyKit-less systems, and we
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering consider it a bug if something does not work as it should if
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering PolicyKit is not around.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * For embedded systems it is now possible to build udev and
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering systemd without blkid and/or kmod support.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * "systemctl switch-root" is now capable of switching root
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering more than once. I.e. in addition to transitions from the
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering initrd to the host OS it is now possible to transition to
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering further OS images from the host. This is useful to implement
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering offline updating tools.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * Various other additions have been made to the RPM macros
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering shipped with systemd. Use %udev_rules_update() after
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering installing new udev rules files. %_udevhwdbdir,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering %_udevrulesdir, %_journalcatalogdir, %_tmpfilesdir,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering %_sysctldir are now available which resolve to the right
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering directories for packages to place various data files in.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering * journalctl gained the new --full switch (in addition to
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering --all, to disable ellipsation for long messages.
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Contributions from: Anders Olofsson, Auke Kok, Ben Boeckel,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Colin Walters, Cosimo Cecchi, Daniel Wallace, Dave Reisner,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Eelco Dolstra, Holger Hans Peter Freyther, Kay Sievers,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Chun-Yi Lee, Lekensteyn, Lennart Poettering, Mantas Mikulėnas,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Marti Raudsepp, Martin Pitt, Mauro Dreissig, Michael Biebl,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Michal Schmidt, Michal Sekletar, Miklos Vajna, Nis Martensen,
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Oleksii Shevchuk, Olivier Brunel, Ramkumar Ramachandra, Thomas
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Bächler, Thomas Hindoe Paaboel Andersen, Tom Gundersen, Tony
00aa832b948a27507c33e2157e46963852cffc85Lennart Poettering Camuso, Umut Tezduyar, Zbigniew Jędrzejewski-Szmek
00aa832b948a27507c33e2157e46963852cffc85Lennart PoetteringCHANGES WITH 195:
606c24e3bd41207c395f24a56bcfcad791e265a5Lennart Poettering * journalctl gained new --since= and --until= switches to
606c24e3bd41207c395f24a56bcfcad791e265a5Lennart Poettering filter by time. It also now supports nice filtering for
606c24e3bd41207c395f24a56bcfcad791e265a5Lennart Poettering units via --unit=/-u.
606c24e3bd41207c395f24a56bcfcad791e265a5Lennart Poettering * Type=oneshot services may use ExecReload= and do the
606c24e3bd41207c395f24a56bcfcad791e265a5Lennart Poettering * The journal daemon now supports time-based rotation and
606c24e3bd41207c395f24a56bcfcad791e265a5Lennart Poettering vacuuming, in addition to the usual disk-space based
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * The journal will now index the available field values for
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering each field name. This enables clients to show pretty drop
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering downs of available match values when filtering. The bash
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering completion of journalctl has been updated
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering accordingly. journalctl gained a new switch -F to list all
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering values a certain field takes in the journal database.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * More service events are now written as structured messages
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering to the journal, and made recognizable via message IDs.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * The timedated, localed and hostnamed mini-services which
b82eed9af95668ab38cac33c7996e4d665f8709aLennart Poettering previously only provided support for changing time, locale
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering and hostname settings from graphical DEs such as GNOME now
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering also have a minimal (but very useful) text-based client
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering utility each. This is probably the nicest way to changing
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering these settings from the command line now, especially since
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering it lists available options and is fully integrated with bash
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * There's now a new tool "systemd-coredumpctl" to list and
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering extract coredumps from the journal.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * We now install a README each in /var/log/ and
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering /etc/rc.d/init.d explaining where the system logs and init
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering scripts went. This hopefully should help folks who go to
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering that dirs and look into the otherwise now empty void and
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering scratch their heads.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * When user-services are invoked (by systemd --user) the
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering $MANAGERPID env var is set to the PID of systemd.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * SIGRTMIN+24 when sent to a --user instance will now result
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering in immediate termination of systemd.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * gatewayd received numerous feature additions such as a
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering "follow" mode, for live syncing and filtering.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * browse.html now allows filtering and showing detailed
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering information on specific entries. Keyboard navigation and
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering mouse screen support has been added.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * gatewayd/journalctl now supports HTML5/JSON
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Server-Sent-Events as output.
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * The SysV init script compatibility logic will now
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering heuristically determine whether a script supports the
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering "reload" verb, and only then make this available as
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering "systemctl reload".
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * "systemctl status --follow" has been removed, use "journalctl
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * journald.conf's RuntimeMinSize=, PersistentMinSize= settings
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering have been removed since they are hardly useful to be
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * And I'd like to take the opportunity to specifically mention
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Zbigniew for his great contributions. Zbigniew, you rock!
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Contributions from: Andrew Eikum, Christian Hesse, Colin
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Guthrie, Daniel J Walsh, Dave Reisner, Eelco Dolstra, Ferenc
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Wágner, Kay Sievers, Lennart Poettering, Lukas Nykryn, Mantas
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Mikulėnas, Martin Mikkelsen, Martin Pitt, Michael Olbrich,
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Michael Stapelberg, Michal Schmidt, Sebastian Ott, Thomas
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Bächler, Umut Tezduyar, Will Woods, Wulf C. Krueger, Zbigniew
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering Jędrzejewski-Szmek, Сковорода Никита Андреевич
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart PoetteringCHANGES WITH 194:
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering * If /etc/vconsole.conf is non-existent or empty we will no
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering longer load any console font or key map at boot by
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering default. Instead the kernel defaults will be left
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering intact. This is definitely the right thing to do, as no
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering configuration should mean no configuration, and hard-coding
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering font names that are different on all archs is probably a bad
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering idea. Also, the kernel default key map and font should be
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering good enough for most cases anyway, and mostly identical to
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering the userspace fonts/key maps we previously overloaded them
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering with. If distributions want to continue to default to a
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering non-kernel font or key map they should ship a default
2f3fcf85c5fa6c9c483b31823a0efdd28914c756Lennart Poettering /etc/vconsole.conf with the appropriate contents.
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering Contributions from: Colin Walters, Daniel J Walsh, Dave
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering Reisner, Kay Sievers, Lennart Poettering, Lukas Nykryn, Tollef
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering Fog Heen, Tom Gundersen, Zbigniew Jędrzejewski-Szmek
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart PoetteringCHANGES WITH 193:
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering * journalctl gained a new --cursor= switch to show entries
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering starting from the specified location in the journal.
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering * We now enforce a size limit on journal entry fields exported
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering with "-o json" in journalctl. Fields larger than 4K will be
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering assigned null. This can be turned off with --all.
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering * An (optional) journal gateway daemon is now available as
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering "systemd-journal-gatewayd.service". This service provides
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering access to the journal via HTTP and JSON. This functionality
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering will be used to implement live log synchronization in both
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering pull and push modes, but has various other users too, such
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering as easy log access for debugging of embedded devices. Right
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering now it is already useful to retrieve the journal via HTTP:
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering # systemctl start systemd-journal-gatewayd.service
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering This will download the journal contents in a
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering /var/log/messages compatible format. The same as JSON:
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering # curl -H"Accept: application/json" http://localhost:19531/entries
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering This service is also accessible via a web browser where a
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering single static HTML5 app is served that uses the JSON logic
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering to enable the user to do some basic browsing of the
7c04ad2da1cf08ebf53b9aa9671c8c1dc9577135Lennart Poettering journal. This will be extended later on. Here's an example
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering screenshot of this app in its current state:
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering http://0pointer.de/public/journal-gatewayd
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering Contributions from: Kay Sievers, Lennart Poettering, Robert
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering Milasan, Tom Gundersen
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart PoetteringCHANGES WITH 192:
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering * The bash completion logic is now available for journalctl
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering * We do not mount the "cpuset" controller anymore together with
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering "cpu" and "cpuacct", as "cpuset" groups generally cannot be
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering started if no parameters are assigned to it. "cpuset" hence
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering broke code that assumed it it could create "cpu" groups and
7c04ad2da1cf08ebf53b9aa9671c8c1dc9577135Lennart Poettering just start them.
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering * journalctl -f will now subscribe to terminal size changes,
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering and line break accordingly.
cbeabcfbc5a5fa27385e5794780e8f034e090606Zbigniew Jędrzejewski-Szmek Contributions from: Dave Reisner, Kay Sievers, Lennart
cbeabcfbc5a5fa27385e5794780e8f034e090606Zbigniew Jędrzejewski-Szmek Poettering, Lukas Nykrynm, Mirco Tischler, Václav Pavlín
cbeabcfbc5a5fa27385e5794780e8f034e090606Zbigniew Jędrzejewski-SzmekCHANGES WITH 191:
cbeabcfbc5a5fa27385e5794780e8f034e090606Zbigniew Jędrzejewski-Szmek * nspawn will now create a symlink /etc/localtime in the
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering container environment, copying the host's timezone
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering setting. Previously this has been done via a bind mount, but
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering since symlinks cannot be bind mounted this has now been
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering changed to create/update the appropriate symlink.
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering * journalctl -n's line number argument is now optional, and
ef3b5246879094e29cc99c4d24cbfeb19b7da49bLennart Poettering will default to 10 if omitted.
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * journald will now log the maximum size the journal files may
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering take up on disk. This is particularly useful if the default
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering built-in logic of determining this parameter from the file
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering system size is used. Use "systemctl status
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering systemd-journald.service" to see this information.
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * The multi-seat X wrapper tool has been stripped down. As X
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering is now capable of enumerating graphics devices via udev in a
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering seat-aware way the wrapper is not strictly necessary
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering anymore. A stripped down temporary stop-gap is still shipped
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering until the upstream display managers have been updated to
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering fully support the new X logic. Expect this wrapper to be
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering removed entirely in one of the next releases.
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * HandleSleepKey= in logind.conf has been split up into
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering HandleSuspendKey= and HandleHibernateKey=. The old setting
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering is not available anymore. X11 and the kernel are
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering distuingishing between these keys and we should too. This
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering also means the inhibition lock for these keys has been split
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering Contributions from: Dave Airlie, Eelco Dolstra, Lennart
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering Poettering, Lukas Nykryn, Václav Pavlín
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart PoetteringCHANGES WITH 190:
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * Whenever a unit changes state we will now log this to the
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering journal and show along the unit's own log output in
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering "systemctl status".
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * ConditionPathIsMountPoint= can now properly detect bind
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering mount points too. (Previously, a bind mount of one file
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering system to another place in the same file system could not be
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering detected as mount, since they shared struct stat's st_dev
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * We will now mount the cgroup controllers cpu, cpuacct,
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering cpuset and the controllers net_cls, net_prio together by
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * nspawn containers will now have a virtualized boot
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering ID. (i.e. /proc/sys/kernel/random/boot_id is now mounted
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering over with a randomized ID at container initialization). This
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering has the effect of making "journalctl -b" do the right thing
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering in a container.
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * The JSON output journal serialization has been updated not
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering to generate "endless" list objects anymore, but rather one
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering JSON object per line. This is more in line how most JSON
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering parsers expect JSON objects. The new output mode
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering "json-pretty" has been added to provide similar output, but
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering neatly aligned for readability by humans.
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt * We dropped all explicit sync() invocations in the shutdown
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering code. The kernel does this implicitly anyway in the kernel
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering reboot() syscall. halt(8)'s -n option is now a compatibility
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * We now support virtualized reboot() in containers, as
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering supported by newer kernels. We will fall back to exit() if
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering CAP_SYS_REBOOT is not available to the container. Also,
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering nspawn makes use of this now and will actually reboot the
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering container if the containerized OS asks for that.
d3a86981d1ae4c1d668e18868c3e6c9d2f23c144Lennart Poettering * journalctl will only show local log output by default
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering now. Use --merge (-m) to show remote log output, too.
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering * libsystemd-journal gained the new sd_journal_get_usage()
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering call to determine the current disk usage of all journal
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering files. This is exposed in the new "journalctl --disk-usage"
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering * journald gained a new configuration setting SplitMode= in
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering journald.conf which may be used to control how user journals
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering are split off. See journald.conf(5) for details.
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering * A new condition type ConditionFileNotEmpty= has been added.
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering * tmpfiles' "w" lines now support file globbing, to write
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering multiple files at once.
9ca3c17f207121b3c19a44217558b056a7585944Lennart Poettering * We added Python bindings for the journal submission
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering APIs. More Python APIs for a number of selected APIs will
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering likely follow. Note that we intend to add native bindings
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering only for the Python language, as we consider it common
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering enough to deserve bindings shipped within systemd. There are
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering various projects outside of systemd that provide bindings
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering for languages such as PHP or Lua.
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * Many conditions will now resolve specifiers such as %i. In
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering addition, PathChanged= and related directives of .path units
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering now support specifiers as well.
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * There's now a new RPM macro definition for the system preset
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering dir: %_presetdir.
a87197f5a22688626dc9bead29ddc1c572b074b9Zbigniew Jędrzejewski-Szmek * journald will now warn if it ca not forward a message to the
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering syslog daemon because its socket is full.
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * timedated will no longer write or process /etc/timezone,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering except on Debian. As we do not support late mounted /usr
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering anymore /etc/localtime always being a symlink is now safe,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering and hence the information in /etc/timezone is not necessary
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * logind will now always reserve one VT for a text getty (VT6
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering by default). Previously if more than 6 X sessions where
a87197f5a22688626dc9bead29ddc1c572b074b9Zbigniew Jędrzejewski-Szmek started they took up all the VTs with auto-spawned gettys,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering so that no text gettys were available anymore.
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * udev will now automatically inform the btrfs kernel logic
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering about btrfs RAID components showing up. This should make
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering simple hotplug based btrfs RAID assembly work.
c20d8298029a39cc3e9602b30a4d23b951e11df8Kay Sievers * PID 1 will now increase its RLIMIT_NOFILE to 64K by default
a87197f5a22688626dc9bead29ddc1c572b074b9Zbigniew Jędrzejewski-Szmek (but not for its children which will stay at the kernel
a87197f5a22688626dc9bead29ddc1c572b074b9Zbigniew Jędrzejewski-Szmek default). This should allow setups with a lot more listening
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * systemd will now always pass the configured timezone to the
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering kernel at boot. timedated will do the same when the timezone
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * logind's inhibition logic has been updated. By default,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering logind will now handle the lid switch, the power and sleep
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering keys all the time, even in graphical sessions. If DEs want
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering to handle these events on their own they should take the new
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering handle-power-key, handle-sleep-key and handle-lid-switch
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering inhibitors during their runtime. A simple way to achieve
6a7d3d68bf1ae9bcdaa3a17bc76f72bb7b988ec4Lennart Poettering that is to invoke the DE wrapped in an invocation of:
6a7d3d68bf1ae9bcdaa3a17bc76f72bb7b988ec4Lennart Poettering systemd-inhibit --what=handle-power-key:handle-sleep-key:handle-lid-switch ...
a87197f5a22688626dc9bead29ddc1c572b074b9Zbigniew Jędrzejewski-Szmek * Access to unit operations is now checked via SELinux taking
c20d8298029a39cc3e9602b30a4d23b951e11df8Kay Sievers the unit file label and client process label into account.
c20d8298029a39cc3e9602b30a4d23b951e11df8Kay Sievers * systemd will now notify the administrator in the journal
c20d8298029a39cc3e9602b30a4d23b951e11df8Kay Sievers when he over-mounts a non-empty directory.
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering * There are new specifiers that are resolved in unit files,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering for the host name (%H), the machine ID (%m) and the boot ID
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering Contributions from: Allin Cottrell, Auke Kok, Brandon Philips,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering Colin Guthrie, Colin Walters, Daniel J Walsh, Dave Reisner,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering Eelco Dolstra, Jan Engelhardt, Kay Sievers, Lennart
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering Poettering, Lucas De Marchi, Lukas Nykryn, Mantas Mikulėnas,
35911459410714a0e9108b35da78f96919b65ee7Lennart Poettering Martin Pitt, Matthias Clasen, Michael Olbrich, Pierre Schmitz,
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Shawn Landden, Thomas Hindoe Paaboel Andersen, Tom Gundersen,
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Václav Pavlín, Yin Kangkai, Zbigniew Jędrzejewski-Szmek
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart PoetteringCHANGES WITH 189:
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Support for reading structured kernel messages from
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering /dev/kmsg has now been added and is enabled by default.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Support for reading kernel messages from /proc/kmsg has now
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering been removed. If you want kernel messages in the journal
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering make sure to run a recent kernel (>= 3.5) that supports
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers reading structured messages from /dev/kmsg (see
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers above). /proc/kmsg is now exclusive property of classic
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering syslog daemons again.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The libudev API gained the new
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering udev_device_new_from_device_id() call.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The logic for file system namespace (ReadOnlyDirectory=,
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering ReadWriteDirectoy=, PrivateTmp=) has been reworked not to
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering require pivot_root() anymore. This means fewer temporary
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering directories are created below /tmp for this feature.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * nspawn containers will now see and receive all submounts
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering made on the host OS below the root file system of the
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Forward Secure Sealing is now supported for Journal files,
156f7d09add8fc93cae8a3f13adcb2564931fee4Kay Sievers which provide cryptographical sealing of journal files so
156f7d09add8fc93cae8a3f13adcb2564931fee4Kay Sievers that attackers cannot alter log history anymore without this
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering being detectable. Lennart will soon post a blog story about
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering this explaining it in more detail.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * There are two new service settings RestartPreventExitStatus=
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers and SuccessExitStatus= which allow configuration of exit
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering status (exit code or signal) which will be excepted from the
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering restart logic, resp. consider successful.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * journalctl gained the new --verify switch that can be used
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering to check the integrity of the structure of journal files and
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering (if Forward Secure Sealing is enabled) the contents of
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering journal files.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * nspawn containers will now be run with /dev/stdin, /dev/fd/
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering and similar symlinks pre-created. This makes running shells
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering as container init process a lot more fun.
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering * The fstab support can now handle PARTUUID= and PARTLABEL=
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * A new ConditionHost= condition has been added to match
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering against the hostname (with globs) and machine ID. This is
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering useful for clusters where a single OS image is used to
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering provision a large number of hosts which shall run slightly
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering different sets of services.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Services which hit the restart limit will now be placed in a
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering failure state.
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering Contributions from: Bertram Poettering, Dave Reisner, Huang
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering Hang, Kay Sievers, Lennart Poettering, Lukas Nykryn, Martin
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Pitt, Simon Peeters, Zbigniew Jędrzejewski-Szmek
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart PoetteringCHANGES WITH 188:
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering * When running in --user mode systemd will now become a
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering subreaper (PR_SET_CHILD_SUBREAPER). This should make the ps
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering tree a lot more organized.
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering * A new PartOf= unit dependency type has been introduced that
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering may be used to group services in a natural way.
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers * "systemctl enable" may now be used to enable instances of
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * journalctl now prints error log levels in red, and
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering warning/notice log levels in bright white. It also supports
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering filtering by log level now.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * cgtop gained a new -n switch (similar to top), to configure
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering the maximum number of iterations to run for. It also gained
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek -b, to run in batch mode (accepting no input).
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The suffix ".service" may now be omitted on most systemctl
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering command lines involving service unit names.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * There's a new bus call in logind to lock all sessions, as
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering well as a loginctl verb for it "lock-sessions".
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * libsystemd-logind.so gained a new call sd_journal_perror()
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering that works similar to libc perror() but logs to the journal
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering and encodes structured information about the error number.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * /etc/crypttab entries now understand the new keyfile-size=
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * shutdown(8) now can send a (configurable) wall message when
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering a shutdown is cancelled.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The mount propagation mode for the root file system will now
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering default to "shared", which is useful to make containers work
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering nicely out-of-the-box so that they receive new mounts from
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering the host. This can be undone locally by running "mount
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers --make-rprivate /" if needed.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The prefdm.service file has been removed. Distributions
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering should maintain this unit downstream if they intend to keep
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering it around. However, we recommend writing normal unit files
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering for display managers instead.
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering * Since systemd is a crucial part of the OS we will now
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering default to a number of compiler switches that improve
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering security (hardening) such as read-only relocations, stack
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering protection, and suchlike.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The TimeoutSec= setting for services is now split into
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering TimeoutStartSec= and TimeoutStopSec= to allow configuration
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering of individual time outs for the start and the stop phase of
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Contributions from: Artur Zaprzala, Arvydas Sidorenko, Auke
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Kok, Bryan Kadzban, Dave Reisner, David Strauss, Harald Hoyer,
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Jim Meyering, Kay Sievers, Lennart Poettering, Mantas
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Mikulėnas, Martin Pitt, Michal Schmidt, Michal Sekletar, Peter
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Alfredsen, Shawn Landden, Simon Peeters, Terence Honles, Tom
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Gundersen, Zbigniew Jędrzejewski-Szmek
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart PoetteringCHANGES WITH 187:
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers * The journal and id128 C APIs are now fully documented as man
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Extra safety checks have been added when transitioning from
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering the initial RAM disk to the main system to avoid accidental
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * /etc/crypttab entries now understand the new keyfile-offset=
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * systemctl -t can now be used to filter by unit load state.
bf9335608821264163058a8b036a00775a8ffbe4Kay Sievers * The journal C API gained the new sd_journal_wait() call to
bf9335608821264163058a8b036a00775a8ffbe4Kay Sievers make writing synchronous journal clients easier.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * journalctl gained the new -D switch to show journals from a
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering specific directory.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * journalctl now displays a special marker between log
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering messages of two different boots.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The journal is now explicitly flushed to /var via a service
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering systemd-journal-flush.service, rather than implicitly simply
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering by seeing /var/log/journal to be writable.
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers * journalctl (and the journal C APIs) can now match for much
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering more complex expressions, with alternatives and
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * When transitioning from the initial RAM disk to the main
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering system we will now kill all processes in a killing spree to
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering ensure no processes stay around by accident.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Three new specifiers may be used in unit files: %u, %h, %s
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering resolve to the user name, user home directory resp. user
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering shell. This is useful for running systemd user instances.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * We now automatically rotate journal files if their data
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering object hash table gets a fill level > 75%. We also size the
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering hash table based on the configured maximum file size. This
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering together should lower hash collisions drastically and thus
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering speed things up a bit.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * journalctl gained the new "--header" switch to introspect
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering header data of journal files.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * A new setting SystemCallFilters= has been added to services
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering which may be used to apply blacklists or whitelists to
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering system calls. This is based on SECCOMP Mode 2 of Linux 3.5.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * nspawn gained a new --link-journal= switch (and quicker: -j)
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering to link the container journal with the host. This makes it
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering very easy to centralize log viewing on the host for all
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering guests while still keeping the journal files separated.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Many bugfixes and optimizations
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Contributions from: Auke Kok, Eelco Dolstra, Harald Hoyer, Kay
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Sievers, Lennart Poettering, Malte Starostik, Paul Menzel, Rex
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Tsai, Shawn Landden, Tom Gundersen, Ville Skyttä, Zbigniew
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering Jędrzejewski-Szmek
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart PoetteringCHANGES WITH 186:
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering * Several tools now understand kernel command line arguments,
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering which are only read when run in an initial RAM disk. They
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering usually follow closely their normal counterparts, but are
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering prefixed with rd.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * There's a new tool to analyze the readahead files that are
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering automatically generated at boot. Use:
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering /usr/lib/systemd/systemd-readahead analyze /.readahead
43447fb72693d62363a1a271dacc70d400ed685bLennart Poettering * We now provide an early debug shell on tty9 if this enabled. Use:
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * All plymouth related units have been moved into the Plymouth
499b604b21c02ee64c8590a76d7900d64d7a5cb7Zbigniew Jędrzejewski-Szmek package. Please make sure to upgrade your Plymouth version
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * systemd-tmpfiles now supports getting passed the basename of
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering a configuration file only, in which case it will look for it
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering in all appropriate directories automatically.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * udevadm info now takes a /dev or /sys path as argument, and
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering does the right thing. Example:
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * systemctl now prints a warning if a unit is stopped but a
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering unit that might trigger it continues to run. Example: a
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering service is stopped but the socket that activates it is left
6aa8d43ade72e24c9426e604f7fc4b7582b9db7cLennart Poettering * "systemctl status" will now mention if the log output was
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering shortened due to rotation since a service has been started.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * The journal API now exposes functions to determine the
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering "cutoff" times due to rotation.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * journald now understands SIGUSR1 and SIGUSR2 for triggering
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering immediately flushing of runtime logs to /var if possible,
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering resp. for triggering immediate rotation of the journal
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * It is now considered an error if a service is attempted to
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering be stopped that is not loaded.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * XDG_RUNTIME_DIR now uses numeric UIDs instead of usernames.
40e21da873c120936faff0aa42a6533f6933edf7Kay Sievers * systemd-analyze now supports Python 3
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * tmpfiles now supports cleaning up directories via aging
1aed45907715ad4dce7dbc84a957cd5de8cca36eLennart Poettering where the first level dirs are always kept around but
1aed45907715ad4dce7dbc84a957cd5de8cca36eLennart Poettering directories beneath it automatically aged. This is enabled
1aed45907715ad4dce7dbc84a957cd5de8cca36eLennart Poettering by prefixing the age field with '~'.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Seat objects now expose CanGraphical, CanTTY properties
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering which is required to deal with very fast bootups where the
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering display manager might be running before the graphics drivers
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering completed initialization.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * Seat objects now expose a State property.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * We now include RPM macros for service enabling/disabling
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering based on the preset logic. We recommend RPM based
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering distributions to make use of these macros if possible. This
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering makes it simpler to reuse RPM spec files across
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering distributions.
85d683970b7dc2c4470b2b7d60c3d9dce28c1471Lennart Poettering * We now make sure that the collected systemd unit name is
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering always valid when services log to the journal via
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * There's a new man page kernel-command-line(7) detailing all
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering command line options we understand.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * The fstab generator may now be disabled at boot by passing
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering fstab=0 on the kernel command line.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * A new kernel command line option modules-load= is now understood
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering to load a specific kernel module statically, early at boot.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * Unit names specified on the systemctl command line are now
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering automatically escaped as needed. Also, if file system or
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering device paths are specified they are automatically turned
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering into the appropriate mount or device unit names. Example:
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering systemctl status /home
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering systemctl status /dev/sda
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt * The SysVConsole= configuration option has been removed from
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * The SysV search path is no longer exported on the D-Bus
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Manager object.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * The Names= option is been removed from unit file parsing.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * There's a new man page bootup(7) detailing the boot process.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * Every unit and every generator we ship with systemd now
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering comes with full documentation. The self-explanatory boot is
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * A couple of services gained "systemd-" prefixes in their
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering name if they wrap systemd code, rather than only external
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering code. Among them fsck@.service which is now
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering systemd-fsck@.service.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * The HaveWatchdog property has been removed from the D-Bus
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Manager object.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * systemd.confirm_spawn= on the kernel command line should now
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering work sensibly.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * There's a new man page crypttab(5) which details all options
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering we actually understand.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * systemd-nspawn gained a new --capability= switch to pass
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering additional capabilities to the container.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * timedated will now read known NTP implementation unit names
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering from /usr/lib/systemd/ntp-units.d/*.list,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering systemd-timedated-ntp.target has been removed.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * journalctl gained a new switch "-b" that lists log data of
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering the current boot only.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * The notify socket is in the abstract namespace again, in
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering order to support daemons which chroot() at start-up.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * There is a new Storage= configuration option for journald
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering which allows configuration of where log data should go. This
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering also provides a way to disable journal logging entirely, so
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering that data collected is only forwarded to the console, the
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering kernel log buffer or another syslog implementation.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * Many bugfixes and optimizations
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Contributions from: Auke Kok, Colin Guthrie, Dave Reisner,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering David Strauss, Eelco Dolstra, Kay Sievers, Lennart Poettering,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Lukas Nykryn, Michal Schmidt, Michal Sekletar, Paul Menzel,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Shawn Landden, Tom Gundersen
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart PoetteringCHANGES WITH 185:
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * "systemctl help <unit>" now shows the man page if one is
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * Several new man pages have been added.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * MaxLevelStore=, MaxLevelSyslog=, MaxLevelKMsg=,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering MaxLevelConsole= can now be specified in
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering journald.conf. These options allow reducing the amount of
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering data stored on disk or forwarded by the log level.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * TimerSlackNSec= can now be specified in system.conf for
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering PID1. This allows system-wide power savings.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Contributions from: Dave Reisner, Kay Sievers, Lauri Kasanen,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Lennart Poettering, Malte Starostik, Marc-Antoine Perennou,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Matthias Clasen
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart PoetteringCHANGES WITH 184:
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * logind is now capable of (optionally) handling power and
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering sleep keys as well as the lid switch.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * journalctl now understands the syntax "journalctl
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering /usr/bin/avahi-daemon" to get all log output of a specific
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * CapabilityBoundingSet= in system.conf now also influences
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering the capability bound set of usermode helpers of the kernel.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Contributions from: Daniel Drake, Daniel J. Walsh, Gert
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Michael Kulyk, Harald Hoyer, Jean Delvare, Kay Sievers,
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Lennart Poettering, Matthew Garrett, Matthias Clasen, Paul
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering Menzel, Shawn Landden, Tero Roponen, Tom Gundersen
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart PoetteringCHANGES WITH 183:
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * Note that we skipped 139 releases here in order to set the
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering new version to something that is greater than both udev's
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering and systemd's most recent version number.
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt * udev: all udev sources are merged into the systemd source tree now.
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt All future udev development will happen in the systemd tree. It
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering is still fully supported to use the udev daemon and tools without
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering systemd running, like in initramfs or other init systems. Building
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering udev though, will require the *build* of the systemd tree, but
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering udev can be properly *run* without systemd.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * udev: /lib/udev/devices/ are not read anymore; systemd-tmpfiles
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering should be used to create dead device nodes as workarounds for broken
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * udev: RUN+="socket:..." and udev_monitor_new_from_socket() is
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering no longer supported. udev_monitor_new_from_netlink() needs to be
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering used to subscribe to events.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * udev: when udevd is started by systemd, processes which are left
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering behind by forking them off of udev rules, are unconditionally cleaned
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering up and killed now after the event handling has finished. Services or
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering daemons must be started as systemd services. Services can be
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering pulled-in by udev to get started, but they can no longer be directly
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering forked by udev rules.
8ad2685909f988602eca32ccba5c8ea4159e7f2eLennart Poettering * udev: the daemon binary is called systemd-udevd now and installed
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering in /usr/lib/systemd/. Standalone builds or non-systemd systems need
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering to adapt to that, create symlink, or rename the binary after building
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * libudev no longer provides these symbols:
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering udev_monitor_from_socket()
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering udev_queue_get_failed_list_entry()
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering udev_get_{dev,sys,run}_path()
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering The versions number was bumped and symbol versioning introduced.
96ec33c079caacdf9c7cdfb2cad2f1bc48dfca65Lennart Poettering * systemd-loginctl and systemd-journalctl have been renamed
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering to loginctl and journalctl to match systemctl.
96ec33c079caacdf9c7cdfb2cad2f1bc48dfca65Lennart Poettering * The config files: /etc/systemd/systemd-logind.conf and
96ec33c079caacdf9c7cdfb2cad2f1bc48dfca65Lennart Poettering /etc/systemd/systemd-journald.conf have been renamed to
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering logind.conf and journald.conf. Package updates should rename
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering the files to the new names on upgrade.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * For almost all files the license is now LGPL2.1+, changed
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering from the previous GPL2.0+. Exceptions are some minor stuff
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering of udev (which will be changed to LGPL2.1 eventually, too),
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering and the MIT licensed sd-daemon.[ch] library that is suitable
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering to be used as drop-in files.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * systemd and logind now handle system sleep states, in
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering particular suspending and hibernating.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * logind now implements a sleep/shutdown/idle inhibiting logic
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering suitable for a variety of uses. Soonishly Lennart will blog
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering about this in more detail.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * var-run.mount and var-lock.mount are no longer provided
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering (which prevously bind mounted these directories to their new
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering places). Distributions which have not converted these
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering directories to symlinks should consider stealing these files
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering from git history and add them downstream.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * We introduced the Documentation= field for units and added
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering this to all our shipped units. This is useful to make it
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering easier to explore the boot and the purpose of the various
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * All smaller setup units (such as
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering systemd-vconsole-setup.service) now detect properly if they
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering are run in a container and are skipped when
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering appropriate. This guarantees an entirely noise-free boot in
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering Linux container environments such as systemd-nspawn.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * A framework for implementing offline system updates is now
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering integrated, for details see:
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering http://freedesktop.org/wiki/Software/systemd/SystemUpdates
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * A new service type Type=idle is available now which helps us
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering avoiding ugly interleaving of getty output and boot status
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * There's now a system-wide CapabilityBoundingSet= option to
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering globally reduce the set of capabilities for the
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering system. This is useful to drop CAP_SYS_MKNOD, CAP_SYS_RAWIO,
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering CAP_NET_RAW, CAP_SYS_MODULE, CAP_SYS_TIME, CAP_SYS_PTRACE or
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering even CAP_NET_ADMIN system-wide for secure systems.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * There are now system-wide DefaultLimitXXX= options to
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering globally change the defaults of the various resource limits
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering for all units started by PID 1.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * Harald Hoyer's systemd test suite has been integrated into
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering systemd which allows easy testing of systemd builds in qemu
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering and nspawn. (This is really awesome! Ask us for details!)
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * The fstab parser is now implemented as generator, not inside
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering of PID 1 anymore.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * systemctl will now warn you if .mount units generated from
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering /etc/fstab are out of date due to changes in fstab that
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering have not been read by systemd yet.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * systemd is now suitable for usage in initrds. Dracut has
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering already been updated to make use of this. With this in place
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering initrds get a slight bit faster but primarily are much
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering easier to introspect and debug since "systemctl status" in
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering the host system can be used to introspect initrd services,
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering and the journal from the initrd is kept around too.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * systemd-delta has been added, a tool to explore differences
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering between user/admin configuration and vendor defaults.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * PrivateTmp= now affects both /tmp and /var/tmp.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * Boot time status messages are now much prettier and feature
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering proper english language. Booting up systemd has never been
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * Read-ahead pack files now include the inode number of all
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering files to pre-cache. When the inode changes the pre-caching
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering is not attempted. This should be nicer to deal with updated
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering packages which might result in changes of read-ahead
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * We now temporaritly lower the kernel's read_ahead_kb variable
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering when collecting read-ahead data to ensure the kernel's
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering built-in read-ahead does not add noise to our measurements
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering of necessary blocks to pre-cache.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * There's now RequiresMountsFor= to add automatic dependencies
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering for all mounts necessary for a specific file system path.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * MountAuto= and SwapAuto= have been removed from
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering system.conf. Mounting file systems at boot has to take place
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering in systemd now.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * nspawn now learned a new switch --uuid= to set the machine
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering ID on the command line.
0428ddb729d12563b827510e04663de9cb4056f3Lennart Poettering * nspawn now learned the -b switch to automatically search
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering for an init system.
6827101ab4df4730a22062f4b3a8f8c2bae5be28Zbigniew Jędrzejewski-Szmek * vt102 is now the default TERM for serial TTYs, upgraded from
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * systemd-logind now works on VT-less systems.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * The build tree has been reorganized. The individual
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering components now have directories of their own.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * A new condition type ConditionPathIsReadWrite= is now available.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * nspawn learned the new -C switch to create cgroups for the
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering container in other hierarchies.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * We now have support for hardware watchdogs, configurable in
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * The scheduled shutdown logic now has a public API.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * We now mount /tmp as tmpfs by default, but this can be
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering masked and /etc/fstab can override it.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Since udisks does not make use of /media anymore we are not
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering mounting a tmpfs on it anymore.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * journalctl gained a new --local switch to only interleave
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering locally generated journal files.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * We can now load the IMA policy at boot automatically.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * The GTK tools have been split off into a systemd-ui.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Contributions from: Andreas Schwab, Auke Kok, Ayan George,
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Colin Guthrie, Daniel Mack, Dave Reisner, David Ward, Elan
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Ruusamäe, Frederic Crozat, Gergely Nagy, Guillermo Vidal,
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Hannes Reinecke, Harald Hoyer, Javier Jardón, Kay Sievers,
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Lennart Poettering, Lucas De Marchi, Léo Gillot-Lamure,
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Marc-Antoine Perennou, Martin Pitt, Matthew Monaco, Maxim
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering A. Mikityanskiy, Michael Biebl, Michael Olbrich, Michal
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Schmidt, Nis Martensen, Patrick McCarty, Roberto Sassu, Shawn
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering Landden, Sjoerd Simons, Sven Anders, Tollef Fog Heen, Tom
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart PoetteringCHANGES WITH 44:
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * This is mostly a bugfix release
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Support optional initialization of the machine ID from the
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering KVM or container configured UUID.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Support immediate reboots with "systemctl reboot -ff"
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Show /etc/os-release data in systemd-analyze output
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Many bugfixes for the journal, including endianness fixes and
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering ensuring that disk space enforcement works
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * sd-login.h is C++ comptaible again
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Extend the /etc/os-release format on request of the Debian
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * We now refuse non-UTF8 strings used in various configuration
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering and unit files. This is done to ensure we do not pass invalid
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering data over D-Bus or expose it elsewhere.
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Register Mimo USB Screens as suitable for automatic seat
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Read SELinux client context from journal clients in a race
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering * Reorder configuration file lookup order. /etc now always
4d92e078e9d7e9a9d346065ea5e4afbafbdadb48Lennart Poettering overrides /run in order to allow the administrator to always
4d92e078e9d7e9a9d346065ea5e4afbafbdadb48Lennart Poettering and unconditionally override vendor supplied or
4d92e078e9d7e9a9d346065ea5e4afbafbdadb48Lennart Poettering automatically generated data.
4d92e078e9d7e9a9d346065ea5e4afbafbdadb48Lennart Poettering * The various user visible bits of the journal now have man
139ee8cc316a861bcc8a8ebdf4a8449dffe16f79Lennart Poettering pages. We still lack man pages for the journal API calls
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering * We now ship all man pages in HTML format again in the
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering Contributions from: Dave Reisner, Dirk Eibach, Frederic
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering Crozat, Harald Hoyer, Kay Sievers, Lennart Poettering, Marti
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering Raudsepp, Michal Schmidt, Shawn Landden, Tero Roponen, Thierry
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart PoetteringCHANGES WITH 43:
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering * This is mostly a bugfix release
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering * systems lacking /etc/os-release are no longer supported.
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering * Various functionality updates to libsystemd-login.so
f9b557200b6d59a3dce1623d0873a259ee2fe421Lennart Poettering * Track class of PAM logins to distuingish greeters from
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering normal user logins.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering Contributions from: Kay Sievers, Lennart Poettering, Michael
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart PoetteringCHANGES WITH 42:
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering * This is an important bugfix release for v41.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering * Building man pages is now optional which should be useful
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering for those building systemd from git but unwilling to install
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering * Watchdog support for supervising services is now usable. In
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering a future release support for hardware watchdogs
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering (i.e. /dev/watchdog) will be added building on this.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering * Service start rate limiting is now configurable and can be
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering turned off per service. When a start rate limit is hit a
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering reboot can automatically be triggered.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering * New CanReboot(), CanPowerOff() bus calls in systemd-logind.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering Contributions from: Benjamin Franzke, Bill Nottingham,
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering Frederic Crozat, Lennart Poettering, Michael Olbrich, Michal
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering Schmidt, Michał Górny, Piotr Drąg
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart PoetteringCHANGES WITH 41:
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering * The systemd binary is installed /usr/lib/systemd/systemd now;
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering An existing /sbin/init symlink needs to be adapted with the
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering package update.
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering * The code that loads kernel modules has been ported to invoke
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering libkmod directly, instead of modprobe. This means we do not
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering support systems with module-init-tools anymore.
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering * Watchdog support is now already useful, but still not
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering * A new kernel command line option systemd.setenv= is
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt understood to set system wide environment variables
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering dynamically at boot.
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering * We now limit the set of capabilities of systemd-journald.
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering * We now set SIGPIPE to ignore by default, since it only is
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering useful in shell pipelines, and has little use in general
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering code. This can be disabled with IgnoreSIPIPE=no in unit
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering Contributions from: Benjamin Franzke, Kay Sievers, Lennart
075d4ecb4026c5bc55e73bd2d44e3fc4d679adc7Lennart Poettering Poettering, Michael Olbrich, Michal Schmidt, Tom Gundersen,
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering William Douglas
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart PoetteringCHANGES WITH 40:
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering * This is mostly a bugfix release
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering * We now expose the reason why a service failed in the
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering "Result" D-Bus property.
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering * Rudimentary service watchdog support (will be completed over
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering the next few releases.)
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering * When systemd forks off in order execute some service we will
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering now immediately changes its argv[0] to reflect which process
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering it will execute. This is useful to minimize the time window
6563b535a062055ae68f2e574018d9d04a864b65Lennart Poettering with a generic argv[0], which makes bootcharts more useful
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering Contributions from: Alvaro Soliverez, Chris Paulson-Ellis, Kay
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering Sievers, Lennart Poettering, Michael Olbrich, Michal Schmidt,
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering Mike Kazantsev, Ray Strode
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart PoetteringCHANGES WITH 39:
6563b535a062055ae68f2e574018d9d04a864b65Lennart Poettering * This is mostly a test release, but incorporates many
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering * New systemd-cgtop tool to show control groups by their
6563b535a062055ae68f2e574018d9d04a864b65Lennart Poettering resource usage.
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering * Linking against libacl for ACLs is optional again. If
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering disabled, support tracking device access for active logins
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering goes becomes unavailable, and so does access to the user
597c52cfedb5edd13ee1635fa6be72fc80e587c3Lennart Poettering journals by the respective users.
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering * If a group "adm" exists, journal files are automatically
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering owned by them, thus allow members of this group full access
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering to the system journal as well as all user journals.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * The journal now stores the SELinux context of the logging
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering client for all entries.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Add C++ inclusion guards to all public headers
8d0256b7eb119de92c748cf566257996b02fb506Lennart Poettering * New output mode "cat" in the journal to print only text
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering messages, without any meta data like date or time.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Include tiny X server wrapper as a temporary stop-gap to
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering teach XOrg udev display enumeration. This is used by display
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering managers such as gdm, and will go away as soon as XOrg
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering learned native udev hotplugging for display devices.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Add new systemd-cat tool for executing arbitrary programs
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering with STDERR/STDOUT connected to the journal. Can also act as
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering BSD logger replacement, and does so by default.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Optionally store all locally generated coredumps in the
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering journal along with meta data.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * systemd-tmpfiles learnt four new commands: n, L, c, b, for
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering writing short strings to files (for usage for /sys), and for
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering creating symlinks, character and block device nodes.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * New unit file option ControlGroupPersistent= to make cgroups
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering persistent, following the mechanisms outlined in
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering http://www.freedesktop.org/wiki/Software/systemd/PaxControlGroups
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Support multiple local RTCs in a sane way
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * No longer monopolize IO when replaying readahead data on
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering rotating disks, since we might starve non-file-system IO to
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering death, since fanotify() will not see accesses done by blkid,
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Do not show kernel threads in systemd-cgls anymore, unless
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering requested with new -k switch.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Contributions from: Dan Horák, Kay Sievers, Lennart
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering Poettering, Michal Schmidt
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart PoetteringCHANGES WITH 38:
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * This is mostly a test release, but incorporates many
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * The git repository moved to:
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering git://anongit.freedesktop.org/systemd/systemd
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering ssh://git.freedesktop.org/git/systemd/systemd
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * First release with the journal
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering http://0pointer.de/blog/projects/the-journal.html
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * The journal replaces both systemd-kmsg-syslogd and
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering systemd-stdout-bridge.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * New sd_pid_get_unit() API call in libsystemd-logind
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Many systemadm clean-ups
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Introduce remote-fs-pre.target which is ordered before all
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering remote mounts and may be used to start services before all
a98d5d64720bdf32e3b5f72f896b583e23f730adLennart Poettering remote mounts.
a98d5d64720bdf32e3b5f72f896b583e23f730adLennart Poettering * Added Mageia support
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Add bash completion for systemd-loginctl
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Actively monitor PID file creation for daemons which exit in
d28315e4aff91560ed4c2fc9f876ec8bfc559f2dJan Engelhardt the parent process before having finished writing the PID
dca348bcbb462305864526c587495a14a76bfcdeJan Engelhardt file in the daemon process. Daemons which do this need to be
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering fixed (i.e. PID file creation must have finished before the
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering parent exits), but we now react a bit more gracefully to them.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Add colourful boot output, mimicking the well-known output
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering of existing distributions.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * New option PassCredentials= for socket units, for
aaccc32cdc44b2b972946e44792d63ae17c089c2Lennart Poettering compatibility with a recent kernel ABI breakage.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * /etc/rc.local is now hooked in via a generator binary, and
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering thus will no longer act as synchronization point during
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * systemctl list-unit-files now supports --root=.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * systemd-tmpfiles now understands two new commands: z, Z for
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering relabelling files according to the SELinux database. This is
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering useful to apply SELinux labels to specific files in /sys,
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering among other things.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Output of SysV services is now forwarded to both the console
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering and the journal by default, not only just the console.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * New man pages for all APIs from libsystemd-login.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * The build tree got reorganized and a the build system is a
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering lot more modular allowing embedded setups to specifically
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering select the components of systemd they are interested in.
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Support for Linux systems lacking the kernel VT subsystem is
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * configure's --with-rootdir= got renamed to
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering --with-rootprefix= to follow the naming used by udev and
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * Unless specified otherwise we will now install to /usr instead
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering * Processes with '@' in argv[0][0] are now excluded from the
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering final shut-down killing spree, following the logic explained
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering http://www.freedesktop.org/wiki/Software/systemd/RootStorageDaemons
aad803af990f7c88e94427b9278d88afe3a12d38Lennart Poettering * All processes remaining in a service cgroup when we enter
b6a867398de9f75fb623a84db7c6181d26b0a8d5Lennart Poettering the START or START_PRE states are now killed with
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering SIGKILL. That means it is no longer possible to spawn
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering background processes from ExecStart= lines (which was never
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering supported anyway, and bad style).
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering * New PropagateReloadTo=/PropagateReloadFrom= options to bind
0c11f949db8d6d9899e0c473bf1f8cca0614493eLennart Poettering reloading of units together.
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Contributions from: Bill Nottingham, Daniel J. Walsh, Dave
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Reisner, Dexter Morgan, Gregs Gregs, Jonathan Nieder, Kay
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Sievers, Lennart Poettering, Michael Biebl, Michal Schmidt,
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Michał Górny, Ran Benita, Thomas Jarosch, Tim Waugh, Tollef
38a60d7112d33ffd596b23e8df53d75a7c09e71bLennart Poettering Fog Heen, Tom Gundersen, Zbigniew Jędrzejewski-Szmek