NEWS revision c9679c652b3c31f2510e8805d81630680ebc7e95
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyersystemd System and Service Manager
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald HoyerCHANGES WITH 213:
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new "systemd-timesyncd" daemon has been added for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer synchronizing the system clock across the network. It
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer implements an SNTP client. In contrast to NTP
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer implementations such as chrony or the NTP reference server
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer this only implements a client side, and does not bother with
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt the full NTP complexity, focusing only on querying time from
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt one remote server and synchronizing the local clock to
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt it. Unless you intend to serve NTP to networked clients or
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt want to connect to local hardware clocks this simple NTP
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt client should be more than appropriate for most
4be4833ece2856e0cacc09f8f8b2c02b320751faMartin Pitt installations. The daemon runs with minimal privileges, and
c50a4525aa8151b180d5a325e88c5f3812e66c36Martin Pitt has been hooked up with networkd to only operate when
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier network connectivity is available. The daemon saves the
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier current clock to disk every time a new NTP sync has been
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier acquired, and uses this to possibly correct the system clock
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier early at bootup, in order to accommodate for systems that
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier lack an RTC such as the Raspberry Pi and embedded devices,
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier and make sure that time monotonically progresses on these
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier systems, even if it is not always correct. To make use of
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier this daemon a new system user and group "systemd-timesync"
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier needs to be created on installation of systemd.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * The queue "seqnum" interface of libudev has been disabled, as
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier it was generally incompatible with device namespacing as
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier sequence numbers of devices go "missing" if the devices are
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier part of a different namespace.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * "systemctl list-timers" and "systemctl list-sockets" gained
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier a --recursive switch for showing units of these types also
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier for all local containers, similar in style to the already
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier supported --recursive switch for "systemctl list-units".
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * A new RebootArgument= setting has been added for service
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier units, which may be used to specify a kernel reboot argument
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier to use when triggering reboots with StartLimitAction=.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * A new FailureAction= setting has been added for service
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier units which may be used to specify an operation to trigger
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier when a service fails. This works similarly to
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier StartLimitAction=, but unlike it controls what is done
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier immediately rather than only after several attempts to
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier restart the service in question.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * hostnamed got updated to also expose the kernel name,
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier release, and version on the bus. This is useful for
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier executing commands like hostnamectl with the -H switch.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier systemd-analyze makes use of this to properly display
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier details when running non-locally.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * The bootchart tool can now show cgroup information in the
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt graphs it generates.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * The CFS CPU quota cgroup attribute is now exposed for
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier services. The new CPUQuota= switch has been added for this
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier which takes a percentage value. Setting this will have the
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier result that a service may never get more CPU time than the
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier specified percentage, even if the machine is otherwise idle.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * systemd-networkd learned IPIP and SIT tunnel support.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * LSB init scripts exposing a dependency on $network will now
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier get a dependency on network-online.target rather than simply
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier network.target. This should bring LSB handling closer to
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier what it was on SysV systems.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * A new fsck.repair= kernel option has been added to control
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier how fsck shall deal with unclean file systems at boot.
c6a77179a4097df355f0f04b8f3260c76b5e515cRonny Chevalier * The (.ini) configuration file parser will now silently
8a8332f77e61d41f3bb28b8f929ed41e0ffaf721Zbigniew Jędrzejewski-Szmek ignore sections whose name begins with "X-". This may be
8a8332f77e61d41f3bb28b8f929ed41e0ffaf721Zbigniew Jędrzejewski-Szmek used to maintain application-specific extension sections in unit
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * machined gained a new API to query the IP addresses of
8a8332f77e61d41f3bb28b8f929ed41e0ffaf721Zbigniew Jędrzejewski-Szmek registered containers. "machinectl status" has been updated
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt to show these addresses in its output.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * A new call sd_uid_get_display() has been added to the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier sd-login APIs for querying the "primary" session of a
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier user. The "primary" session of the user is elected from the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier user's sessions and generally a graphical session is
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier preferred over a text one.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * A minimal systemd-resolved daemon has been added. It
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier currently simply acts as a companion to systemd-networkd and
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier manages resolv.conf based on per-interface DNS
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier configuration, possibly supplied via DHCP. In the long run
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier we hope to extend this into a local DNSSEC enabled DNS and
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * The systemd-networkd-wait-online tool is now enabled by
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier default. It will delay network-online.target until a network
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier connection has been configured. The tool primarily integrates
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier with networkd, but will also make a best effort to make sense
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier of network configuration performed in some other way.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * Two new service options StartupCPUShares= and
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier StartupBlockIOWeight= have been added that work similarly to
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier CPUShares= and BlockIOWeight= however only apply during
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier system startup. This is useful to prioritize certain services
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier differently during bootup than during normal runtime.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * hostnamed has been changed to prefer the statically
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier configured hostname in /etc/hostname (unless set to
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier 'localhost' or empty) over any dynamic one supplied by
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier dhcp. With this change the rules for picking the hostname
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier match more closely the rules of other configuration settings
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier where the local administrator's configuration in /etc always
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier overrides any other settings.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Contributions fron: Ali H. Caliskan, Alison Chaiken, Bas van
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier den Berg, Brandon Philips, Cristian Rodríguez, Daniel Buch,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Dan Kilman, Dave Reisner, David Härdeman, David Herrmann,
8a8332f77e61d41f3bb28b8f929ed41e0ffaf721Zbigniew Jędrzejewski-Szmek David Strauss, Dimitris Spingos, Djalal Harouni, Eelco
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Dolstra, Evan Nemerson, Florian Albrechtskirchinger, Greg
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Kroah-Hartman, Harald Hoyer, Holger Hans Peter Freyther, Jan
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Engelhardt, Jani Nikula, Jason St. John, Jeffrey Clark,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Jonathan Boulle, Kay Sievers, Lennart Poettering, Lukas
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Nykryn, Lukasz Skalski, Łukasz Stelmach, Mantas Mikulėnas,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Marcel Holtmann, Martin Pitt, Matthew Monaco, Michael
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Marineau, Michael Olbrich, Michal Sekletar, Mike Gilbert, Nis
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Martensen, Patrik Flykt, Philip Lorenz, poma, Ray Strode,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Reyad Attiyat, Robert Milasan, Scott Thrasher, Stef Walter,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Steven Siloti, Susant Sahani, Tanu Kaskinen, Thomas Bächler,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Thomas Hindoe Paaboel Andersen, Tom Gundersen, Umut Tezduyar
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Lindskog, WaLyong Cho, Will Woods, Zbigniew
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Jędrzejewski-Szmek
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier -- Beijing, 2014-05-28
889a90422dd47284dffa32b9234a6e58991b000cRonny ChevalierCHANGES WITH 212:
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * When restoring the screen brightness at boot, stay away from
739d81ddd005fae2bb82edce5b8a6173c7c48b34Zbigniew Jędrzejewski-Szmek the darkest setting or from the lowest 5% of the available
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier range, depending on which is the larger value of both. This
b8667ee4162cd2510363602b417cecede9fd2ccaZbigniew Jędrzejewski-Szmek should effectively protect the user from rebooting into a
b8667ee4162cd2510363602b417cecede9fd2ccaZbigniew Jędrzejewski-Szmek black screen, should the brightness have been set to minimum
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * sd-login gained a new sd_machine_get_class() call to
739d81ddd005fae2bb82edce5b8a6173c7c48b34Zbigniew Jędrzejewski-Szmek determine the class ("vm" or "container") of a machine
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier registered with machined.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * sd-login gained new calls
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier sd_peer_get_{session,owner_uid,unit,user_unit,slice,machine_name}(),
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier to query the identity of the peer of a local AF_UNIX
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier connection. They operate similarly to their sd_pid_get_xyz()
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier counterparts.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * PID 1 will now maintain a system-wide system state engine
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier with the states "starting", "running", "degraded",
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier "maintenance", "stopping". These states are bound to system
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier startup, normal runtime, runtime with at least one failed
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier service, rescue/emergency mode and system shutdown. This
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier state is shown in the "systemctl status" output when no unit
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier name is passed. It is useful to determine system state, in
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier particularly when doing so for many systems or containers at
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * A new command "list-machines" has been added to "systemctl"
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier that lists all local OS containers and shows their system
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier state (see above), if systemd runs inside of them.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * systemctl gained a new "-r" switch to recursively enumerate
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier units on all local containers, when used with the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier "list-unit" command (which is the default one that is
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier executed when no parameters are specified).
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * The GPT automatic partition discovery logic will now honour
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier two GPT partition flags: one may be set on a partition to
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier cause it to be mounted read-only, and the other may be set
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier on a partition to ignore it during automatic discovery.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * Two new GPT type UUIDs have been added for automatic root
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier partition discovery, for 32-bit and 64-bit ARM. This is not
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier particularly useful for discovering the root directory on
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier these architectures during bare-metal boots (since UEFI is
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier not common there), but still very useful to allow booting of
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier ARM disk images in nspawn with the -i option.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * MAC addresses of interfaces created with nspawn's
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier --network-interface= switch will now be generated from the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier machine name, and thus be stable between multiple invocations
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier of the container.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * logind will now automatically remove all IPC objects owned
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier by a user if she or he fully logs out. This makes sure that
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier users who are logged out cannot continue to consume IPC
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier resources. This covers SysV memory, semaphores and message
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier queues as well as POSIX shared memory and message
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier queues. Traditionally, SysV and POSIX IPC had no life-cycle
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier limits. With this functionality, that is corrected. This may
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier be turned off by using the RemoveIPC= switch of logind.conf.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * The systemd-machine-id-setup and tmpfiles tools gained a
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier --root= switch to operate on a specific root directory,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier instead of /.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * journald can now forward logged messages to the TTYs of all
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier logged in users ("wall"). This is the default for all
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier emergency messages now.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * A new tool systemd-journal-remote has been added to stream
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier journal log messages across the network.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * /sys/fs/cgroup/ is now mounted read-only after all cgroup
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier controller trees are mounted into it. Note that the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier directories mounted beneath it are not read-only. This is a
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier security measure and is particularly useful because glibc
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier actually includes a search logic to pick any tmpfs it can
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier find to implement shm_open() if /dev/shm is not available
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier (which it might very well be in namespaced setups).
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * machinectl gained a new "poweroff" command to cleanly power
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier down a local OS container.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * The PrivateDevices= unit file setting will now also drop the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier CAP_MKNOD capability from the capability bound set, and
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier imply DevicePolicy=closed.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * PrivateDevices=, PrivateNetwork= and PrivateTmp= is now used
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier comprehensively on all long-running systemd services where
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier this is appropriate.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * systemd-udevd will now run in a disassociated mount
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier namespace. To mount directories from udev rules, make sure to
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier pull in mount units via SYSTEMD_WANTS properties.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * The kdbus support gained support for uploading policy into
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier the kernel. sd-bus gained support for creating "monitoring"
4be4833ece2856e0cacc09f8f8b2c02b320751faMartin Pitt connections that can eavesdrop into all bus communication
7d023341c765c205068e33d23d63a4000ec211dfMartin Pitt for debugging purposes.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * Timestamps may now be specified in seconds since the UNIX
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier epoch Jan 1st, 1970 by specifying "@" followed by the value
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * Native tcpwrap support in systemd has been removed. tcpwrap
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier is old code, not really maintained anymore and has serious
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier shortcomings, and better options such as firewalls
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier exist. For setups that require tcpwrap usage, please
cffae62bcb6912fbaf1b7b282d9d170c9d308897Martin Pitt consider invoking your socket-activated service via tcpd,
cffae62bcb6912fbaf1b7b282d9d170c9d308897Martin Pitt like on traditional inetd.
cffae62bcb6912fbaf1b7b282d9d170c9d308897Martin Pitt * A new system.conf configuration option
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier DefaultTimerAccuracySec= has been added that controls the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier default AccuracySec= setting of .timer units.
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt * Timer units gained a new WakeSystem= switch. If enabled,
3486cb6cfa3d32a95c0daf02c7510fdf372507bfMartin Pitt timers configured this way will cause the system to resume
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier from system suspend (if the system supports that, which most
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier do these days).
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * Timer units gained a new Persistent= switch. If enabled,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier timers configured this way will save to disk when they have
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier been last triggered. This information is then used on next
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier reboot to possible execute overdue timer events, that
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier could not take place because the system was powered off.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier This enables simple anacron-like behaviour for timer units.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * systemctl's "list-timers" will now also list the time a
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier timer unit was last triggered in addition to the next time
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier it will be triggered.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * systemd-networkd will now assign predictable IPv4LL
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier addresses to its local interfaces.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Contributions from: Brandon Philips, Daniel Buch, Daniel Mack,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Dave Reisner, David Herrmann, Gerd Hoffmann, Greg
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Kroah-Hartman, Hendrik Brueckner, Jason St. John, Josh
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Triplett, Kay Sievers, Lennart Poettering, Marc-Antoine
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Perennou, Michael Marineau, Michael Olbrich, Miklos Vajna,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Patrik Flykt, poma, Sebastian Thorarensen, Thomas Bächler,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Thomas Hindoe Paaboel Andersen, Tomasz Torcz, Tom Gundersen,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Umut Tezduyar Lindskog, Wieland Hoffmann, Zbigniew
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier Jędrzejewski-Szmek
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier -- Berlin, 2014-03-25
889a90422dd47284dffa32b9234a6e58991b000cRonny ChevalierCHANGES WITH 211:
25b47f96d9601ff566257b2a31bfb5f4bd25d661Marko Myllynen * A new unit file setting RestrictAddressFamilies= has been
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier added to restrict which socket address families unit
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier processes gain access to. This takes address family names
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier like "AF_INET" or "AF_UNIX", and is useful to minimize the
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier attack surface of services via exotic protocol stacks. This
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier is built on seccomp system call filters.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * Two new unit file settings RuntimeDirectory= and
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier RuntimeDirectoryMode= have been added that may be used to
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier manage a per-daemon runtime directories below /run. This is
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier an alternative for setting up directory permissions with
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier tmpfiles snippets, and has the advantage that the runtime
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier directory's lifetime is bound to the daemon runtime and that
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier the daemon starts up with an empty directory each time. This
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier is particularly useful when writing services that drop
53d90f9582f96208b3674da823ad1a3d2c3b1aa4Martin Pitt privileges using the User= or Group= setting.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * The DeviceAllow= unit setting now supports globbing for
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier matching against device group names.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * The systemd configuration file system.conf gained new
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier settings DefaultCPUAccounting=, DefaultBlockIOAccounting=,
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier DefaultMemoryAccounting= to globally turn on/off accounting
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier for specific resources (cgroups) for all units. These
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier settings may still be overridden individually in each unit
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * systemd-gpt-auto-generator is now able to discover /srv and
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier root partitions in addition to /home and swap partitions. It
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier also supports LUKS-encrypted partitions now. With this in
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier place, automatic discovery of partitions to mount following
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier the Discoverable Partitions Specification
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier (http://www.freedesktop.org/wiki/Specifications/DiscoverablePartitionsSpec)
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier is now a lot more complete. This allows booting without
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer /etc/fstab and without root= on the kernel command line on
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier systems prepared appropriately.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * systemd-nspawn gained a new --image= switch which allows
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier booting up disk images and Linux installations on any block
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer device that follow the Discoverable Partitions Specification
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer (see above). This means that installations made with
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer appropriately updated installers may now be started and
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer deployed using container managers, completely
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer unmodified. (We hope that libvirt-lxc will add support for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer this feature soon, too.)
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-nspawn gained a new --network-macvlan= setting to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer set up a private macvlan interface for the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer container. Similarly, systemd-networkd gained a new
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Kind=macvlan setting in .netdev files.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-networkd now supports configuring local addresses
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer using IPv4LL.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new tool systemd-network-wait-online has been added to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer synchronously wait for network connectivity using
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer systemd-networkd.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The sd-bus.h bus API gained a new sd_bus_track object for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer tracking the life-cycle of bus peers. Note that sd-bus.h is
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer still not a public API though (unless you specify
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer --enable-kdbus on the configure command line, which however
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer voids your warranty and you get no API stability guarantee).
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The $XDG_RUNTIME_DIR runtime directories for each user are
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer now individual tmpfs instances, which has the benefit of
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer introducing separate pools for each user, with individual
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer size limits, and thus making sure that unprivileged clients
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer can no longer negatively impact the system or other users by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer filling up their $XDG_RUNTIME_DIR. A new logind.conf setting
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer RuntimeDirectorySize= has been introduced that allows
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer controlling the default size limit for all users. It
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer defaults to 10% of the available physical memory. This is no
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer replacement for quotas on tmpfs though (which the kernel
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer still does not support), as /dev/shm and /tmp are still
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer shared resources used by both the system and unprivileged
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * logind will now automatically turn off automatic suspending
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer on laptop lid close when more than one display is
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer connected. This was previously expected to be implemented
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer individually in desktop environments (such as GNOME),
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer however has been added to logind now, in order to fix a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer boot-time race where a desktop environment might not have
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer been started yet and thus not been able to take an inhibitor
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer lock at the time where logind already suspends the system
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier due to a closed lid.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * logind will now wait at least 30s after each system
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier suspend/resume cycle, and 3min after system boot before
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier suspending the system due to a closed laptop lid. This
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer should give USB docking stations and similar enough time to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer be probed and configured after system resume and boot in
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer order to then act as suspend blocker.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-run gained a new --property= setting which allows
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer initialization of resource control properties (and others)
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer for the created scope or service unit. Example: "systemd-run
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer --property=BlockIOWeight=10 updatedb" may be used to run
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer updatedb at a low block IO scheduling weight.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-run's --uid=, --gid=, --setenv=, --setenv= switches
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer now also work in --scope mode.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * When systemd is compiled with kdbus support, basic support
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer for enforced policies is now in place. (Note that enabling
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer kdbus still voids your warranty and no API compatibility
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer promises are made.)
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Contributions from: Andrey Borzenkov, Ansgar Burchardt, Armin
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer K., Daniel Mack, Dave Reisner, David Herrmann, Djalal Harouni,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Harald Hoyer, Henrik Grindal Bakken, Jasper St. Pierre, Kay
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Sievers, Kieran Clancy, Lennart Poettering, Lukas Nykryn,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Mantas Mikulėnas, Marcel Holtmann, Mark Oteiza, Martin Pitt,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Mike Gilbert, Peter Rajnoha, poma, Samuli Suominen, Stef
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Walter, Susant Sahani, Tero Roponen, Thomas Andersen, Thomas
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Bächler, Thomas Hindoe Paaboel Andersen, Tomasz Torcz, Tom
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Gundersen, Umut Tezduyar Lindskog, Uoti Urpala, Zachary Cook,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Zbigniew Jędrzejewski-Szmek
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer -- Berlin, 2014-03-12
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald HoyerCHANGES WITH 210:
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd will now relabel /dev after loading the SMACK policy
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer according to SMACK rules.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new unit file option AppArmorProfile= has been added to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer set the AppArmor profile for the processes of a unit.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new condition check ConditionArchitecture= has been added
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer to conditionalize units based on the system architecture, as
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer reported by uname()'s "machine" field.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-networkd now supports matching on the system
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer virtualization, architecture, kernel command line, host name
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer and machine ID.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * logind is now a lot more aggressive when suspending the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer machine due to a closed laptop lid. Instead of acting only
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer on the lid close action, it will continuously watch the lid
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer status and act on it. This is useful for laptops where the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer power button is on the outside of the chassis so that it can
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer be reached without opening the lid (such as the Lenovo
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Yoga). On those machines, logind will now immediately
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer re-suspend the machine if the power button has been
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer accidentally pressed while the laptop was suspended and in a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer backpack or similar.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * logind will now watch SW_DOCK switches and inhibit reaction
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer to the lid switch if it is pressed. This means that logind
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer will not suspend the machine anymore if the lid is closed
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer and the system is docked, if the laptop supports SW_DOCK
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer notifications via the input layer. Note that ACPI docking
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer stations do not generate this currently. Also note that this
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer logic is usually not fully sufficient and Desktop
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Environments should take a lid switch inhibitor lock when an
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer external display is connected, as systemd will not watch
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer this on its own.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * nspawn will now make use of the devices cgroup controller by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer default, and only permit creation of and access to the usual
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer API device nodes like /dev/null or /dev/random, as well as
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer access to (but not creation of) the pty devices.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * We will now ship a default .network file for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer systemd-networkd that automatically configures DHCP for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer network interfaces created by nspawn's --network-veth or
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer --network-bridge= switches.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd will now understand the usual M, K, G, T suffixes
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer according to SI conventions (i.e. to the base 1000) when
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer referring to throughput and hardware metrics. It will stay
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer with IEC conventions (i.e. to the base 1024) for software
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer metrics, according to what is customary according to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Wikipedia. We explicitly document which base applies for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer each configuration option.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The DeviceAllow= setting in unit files now supports a syntax
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer to whitelist an entire group of devices node majors at once,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer based on the /proc/devices listing. For example, with the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer string "char-pts", it is now possible to whitelist all
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer current and future pseudo-TTYs at once.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * sd-event learned a new "post" event source. Event sources of
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer this type are triggered by the dispatching of any event
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer source of a type that is not "post". This is useful for
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer implementing clean-up and check event sources that are
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer triggered by other work being done in the program.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-networkd is no longer statically enabled, but uses
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the usual [Install] sections so that it can be
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer enabled/disabled using systemctl. It still is enabled by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer default however.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * When creating a veth interface pair with systemd-nspawn, the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer host side will now be prefixed with "vb-" if
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer --network-bridge= is used, and with "ve-" if --network-veth
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer is used. This way, it is easy to distinguish these cases on
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the host, for example to apply different configuration to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer them with systemd-networkd.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The compatibility libraries for libsystemd-journal.so,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer libsystemd-daemon.so do not make use of IFUNC
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer anymore. Instead, we now build libsystemd.so multiple times
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer under these alternative names. This means that the footprint
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer is drastically increased, but given that these are
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer transitional compatibility libraries, this should not matter
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer much. This change has been made necessary to support the ARM
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer platform for these compatibility libraries, as the ARM
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer toolchain is not really at the same level as the toolchain
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer for other architectures like x86 and does not support
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer IFUNC. Please make sure to use --enable-compat-libs only
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer during a transitional period!
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Contributions from: Andreas Fuchs, Armin K., Colin Walters,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Daniel Mack, Dave Reisner, David Herrmann, Djalal Harouni,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Holger Schurig, Jason A. Donenfeld, Jason St. John, Jasper
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer St. Pierre, Kay Sievers, Lennart Poettering, Łukasz Stelmach,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Marcel Holtmann, Michael Scherer, Michal Sekletar, Mike
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Gilbert, Samuli Suominen, Thomas Bächler, Thomas Hindoe
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Paaboel Andersen, Tom Gundersen, Umut Tezduyar Lindskog,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Zbigniew Jędrzejewski-Szmek
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer -- Berlin, 2014-02-24
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald HoyerCHANGES WITH 209:
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new component "systemd-networkd" has been added that can
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer be used to configure local network interfaces statically or
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer via DHCP. It is capable of bringing up bridges, VLANs, and
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer bonding. Currently, no hook-ups for interactive network
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer configuration are provided. Use this for your initrd,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer container, embedded, or server setup if you need a simple,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer yet powerful, network configuration solution. This
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer configuration subsystem is quite nifty, as it allows wildcard
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer hotplug matching in interfaces. For example, with a single
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer configuration snippet, you can configure that all Ethernet
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer interfaces showing up are automatically added to a bridge,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer or similar. It supports link-sensing and more.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new tool "systemd-socket-proxyd" has been added which can
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer act as a bidirectional proxy for TCP sockets. This is
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer useful for adding socket activation support to services that
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer do not actually support socket activation, including virtual
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer machines and the like.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Add a new tool to save/restore rfkill state on
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Save/restore state of keyboard backlights in addition to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer display backlights on shutdown/boot.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * udev learned a new SECLABEL{} construct to label device
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer nodes with a specific security label when they appear. For
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer now, only SECLABEL{selinux} is supported, but the syntax is
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer prepared for additional security frameworks.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * udev gained a new scheme to configure link-level attributes
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer from files in /etc/systemd/network/*.link. These files can
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer match against MAC address, device path, driver name and type,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer and will apply attributes like the naming policy, link speed,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer MTU, duplex settings, Wake-on-LAN settings, MAC address, MAC
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer address assignment policy (randomized, ...).
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The configuration of network interface naming rules for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "permanent interface names" has changed: a new NamePolicy=
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer setting in the [Link] section of .link files determines the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer priority of possible naming schemes (onboard, slot, mac,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer path). The default value of this setting is determined by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer 80-net-name-slot.rules udev configuration file has been
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer removed, so local configuration overriding this file should
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer be adapated to override 99-default.link instead.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * When the User= switch is used in a unit file, also
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer initialize $SHELL= based on the user database entry.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd no longer depends on libdbus. All communication is
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer now done with sd-bus, systemd's low-level bus library
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer implementation.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * kdbus support has been added to PID 1 itself. When kdbus is
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer enabled, this causes PID 1 to set up the system bus and
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer enable support for a new ".busname" unit type that
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer encapsulates bus name activation on kdbus. It works a little
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer bit like ".socket" units, except for bus names. A new
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer generator has been added that converts classic dbus1 service
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer activation files automatically into native systemd .busname
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer and .service units.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * sd-bus: add a light-weight vtable implementation that allows
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer defining objects on the bus with a simple static const
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer vtable array of its methods, signals and properties.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd will not generate or install static dbus
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer introspection data anymore to /usr/share/dbus-1/interfaces,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer as the precise format of these files is unclear, and
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer nothing makes use of it.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A proxy daemon is now provided to proxy clients connecting
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer via classic D-Bus AF_UNIX sockets to kdbus, to provide full
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer compatibility with classic D-Bus.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A bus driver implementation has been added that supports the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer classic D-Bus bus driver calls on kdbus, also for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer compatibility purposes.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new API "sd-event.h" has been added that implements a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer minimal event loop API built around epoll. It provides a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer couple of features that direct epoll usage is lacking:
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer prioritization of events, scales to large numbers of timer
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer events, per-event timer slack (accuracy), system-wide
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer coalescing of timer events, exit handlers, watchdog
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer supervision support using systemd's sd_notify() API, child
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer process handling.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new API "sd-rntl.h" has been added that provides an API
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer around the route netlink interface of the kernel, similar in
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new API "sd-dhcp-client.h" has been added that provides a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer small DHCPv4 client-side implementation. This is used by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "systemd-networkd".
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * There is a new kernel command line option
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "systemd.restore_state=0|1". When set to "0", none of the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer systemd tools will restore saved runtime state to hardware
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer devices. More specifically, the rfkill and backlight states
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer are not restored.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The FsckPassNo= compatibility option in mount/service units
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer has been removed. The fstab generator will now add the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer necessary dependencies automatically, and does not require
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer PID1's support for that anymore.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * journalctl gained a new switch, --list-boots, that lists
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer recent boots with their times and boot IDs.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The various tools like systemctl, loginctl, timedatectl,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer busctl, systemd-run, ... have gained a new switch "-M" to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer connect to a specific, local OS container (as direct
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer connection, without requiring SSH). This works on any
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer container that is registered with machined, such as those
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer created by libvirt-lxc or nspawn.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-run and systemd-analyze also gained support for "-H"
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer to connect to remote hosts via SSH. This is particularly
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer useful for systemd-run because it enables queuing of jobs
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer onto remote systems.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * machinectl gained a new command "login" to open a getty
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer login in any local container. This works with any container
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer that is registered with machined (such as those created by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer libvirt-lxc or nspawn), and which runs systemd inside.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * machinectl gained a new "reboot" command that may be used to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer trigger a reboot on a specific container that is registered
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer with machined. This works on any container that runs an init
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer system of some kind.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemctl gained a new "list-timers" command to print a nice
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer listing of installed timer units with the times they elapse
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Alternative reboot() parameters may now be specified on the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "systemctl reboot" command line and are passed to the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer reboot() system call.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemctl gained a new --job-mode= switch to configure the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer mode to queue a job with. This is a more generic version of
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer --fail, --irreversible, and --ignore-dependencies, which are
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer still available but not advertised anymore.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * /etc/systemd/system.conf gained new settings to configure
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer various default timeouts of units, as well as the default
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer start limit interval and burst. These may still be overridden
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer within each Unit.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * PID1 will now export on the bus profile data of the security
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer policy upload process (such as the SELinux policy upload to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the kernel).
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * journald: when forwarding logs to the console, include
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer timestamps (following the setting in
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * OnCalendar= in timer units now understands the special
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer strings "yearly" and "annually". (Both are equivalent)
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The accuracy of timer units is now configurable with the new
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer AccuracySec= setting. It defaults to 1min.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new dependency type JoinsNamespaceOf= has been added that
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer allows running two services within the same /tmp and network
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer namespace, if PrivateNetwork= or PrivateTmp= are used.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new command "cat" has been added to systemctl. It outputs
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the original unit file of a unit, and concatenates the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer contents of additional "drop-in" unit file snippets, so that
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the full configuration is shown.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemctl now supports globbing on the various "list-xyz"
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer commands, like "list-units" or "list-sockets", as well as on
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer those commands which take multiple unit names.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * journalctl's --unit= switch gained support for globbing.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * All systemd daemons now make use of the watchdog logic so
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer that systemd automatically notices when they hang.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * If the $container_ttys environment variable is set,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer getty-generator will automatically spawn a getty for each
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer listed tty. This is useful for container managers to request
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer login gettys to be spawned on as many ttys as needed.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * %h, %s, %U specifier support is not available anymore when
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer used in unit files for PID 1. This is because NSS calls are
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer not safe from PID 1. They stay available for --user
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer instances of systemd, and as special case for the root user.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * loginctl gained a new "--no-legend" switch to turn off output
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer of the legend text.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The "sd-login.h" API gained three new calls:
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer sd_session_is_remote(), sd_session_get_remote_user(),
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer sd_session_get_remote_host() to query information about
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer remote sessions.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The udev hardware database now also carries vendor/product
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer information of SDIO devices.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The "sd-daemon.h" API gained a new sd_watchdog_enabled() to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer determine whether watchdog notifications are requested by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the system manager.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Socket-activated per-connection services now include a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer short description of the connection parameters in the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer description.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * tmpfiles gained a new "--boot" option. When this is not used,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer only lines where the command character is not suffixed with
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "!" are executed. When this option is specified, those
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer options are executed too. This partitions tmpfiles
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer directives into those that can be safely executed at any
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer time, and those which should be run only at boot (for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer example, a line that creates /run/nologin).
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new API "sd-resolve.h" has been added which provides a simple
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer asynchronous wrapper around glibc NSS host name resolution
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer calls, such as getaddrinfo(). In contrast to glibc's
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer getaddrinfo_a(), it does not use signals. In contrast to most
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer other asynchronous name resolution libraries, this one does
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer not reimplement DNS, but reuses NSS, so that alternate
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer host name resolution systems continue to work, such as mDNS,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer LDAP, etc. This API is based on libasyncns, but it has been
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer cleaned up for inclusion in systemd.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The APIs "sd-journal.h", "sd-login.h", "sd-id128.h",
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "sd-daemon.h" are no longer found in individual libraries
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer libsystemd-id128.so, libsystemd-daemon.so. Instead, we have
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer merged them into a single library, libsystemd.so, which
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer provides all symbols. The reason for this is cyclic
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer dependencies, as these libraries tend to use each other's
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer symbols. So far, we have managed to workaround that by linking
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer a copy of a good part of our code into each of these
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer libraries again and again, which, however, makes certain
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer things hard to do, like sharing static variables. Also, it
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer substantially increases footprint. With this change, there
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer is only one library for the basic APIs systemd
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer provides. Also, "sd-bus.h", "sd-memfd.h", "sd-event.h",
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "sd-rtnl.h", "sd-resolve.h", "sd-utf8.h" are found in this
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer library as well, however are subject to the --enable-kdbus
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer switch (see below). Note that "sd-dhcp-client.h" is not part
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer of this library (this is because it only consumes, never
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer provides, services of/to other APIs). To make the transition
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer easy from the separate libraries to the unified one, we
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer provide the --enable-compat-libs compile-time switch which
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer will generate stub libraries that are compatible with the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer old ones but redirect all calls to the new one.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * All of the kdbus logic and the new APIs "sd-bus.h",
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "sd-memfd.h", "sd-event.h", "sd-rtnl.h", "sd-resolve.h",
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer and "sd-utf8.h" are compile-time optional via the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "--enable-kdbus" switch, and they are not compiled in by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer default. To make use of kdbus, you have to explicitly enable
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the switch. Note however, that neither the kernel nor the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer userspace API for all of this is considered stable yet. We
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer want to maintain the freedom to still change the APIs for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer now. By specifying this build-time switch, you acknowledge
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer that you are aware of the instability of the current
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Also, note that while kdbus is pretty much complete,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer it lacks one thing: proper policy support. This means you
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer can build a fully working system with all features; however,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer it will be highly insecure. Policy support will be added in
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer one of the next releases, at the same time that we will
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer declare the APIs stable.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * When the kernel command-line argument "kdbus" is specified,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer systemd will automatically load the kdbus.ko kernel module. At
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer this stage of development, it is only useful for testing kdbus
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer and should not be used in production. Note: if "--enable-kdbus"
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer is specified, and the kdbus.ko kernel module is available, and
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "kdbus" is added to the kernel command line, the entire system
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer runs with kdbus instead of dbus-daemon, with the above mentioned
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer problem of missing the system policy enforcement. Also a future
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer version of kdbus.ko or a newer systemd will not be compatible with
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer each other, and will unlikely be able to boot the machine if only
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer one of them is updated.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemctl gained a new "import-environment" command which
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer uploads the caller's environment (or parts thereof) into the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer service manager so that it is inherited by services started
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer by the manager. This is useful to upload variables like
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer $DISPLAY into the user service manager.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A new PrivateDevices= switch has been added to service units
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer which allows running a service with a namespaced /dev
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer directory that does not contain any device nodes for
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer physical devices. More specifically, it only includes devices
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer such as /dev/null, /dev/urandom, and /dev/zero which are API
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer entry points.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * logind has been extended to support behaviour like VT
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer switching on seats that do not support a VT. This makes
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer multi-session available on seats that are not the first seat
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer (seat0), and on systems where kernel support for VTs has
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer been disabled at compile-time.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * If a process holds a delay lock for system sleep or shutdown
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer and fails to release it in time, we will now log its
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer identity. This makes it easier to identify processes that
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer cause slow suspends or power-offs.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * When parsing /etc/crypttab, support for a new key-slot=
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer option as supported by Debian is added. It allows indicating
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer which LUKS slot to use on disk, speeding up key loading.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The sd_journald_sendv() API call has been checked and
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer officially declared to be async-signal-safe so that it may
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer be invoked from signal handlers for logging purposes.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Boot-time status output is now enabled automatically after a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer short timeout if boot does not progress, in order to give
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the user an indication what she or he is waiting for.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The boot-time output has been improved to show how much time
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer remains until jobs expire.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The KillMode= switch in service units gained a new possible
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer value "mixed". If set, and the unit is shut down, then the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer initial SIGTERM signal is sent only to the main daemon
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer process, while the following SIGKILL signal is sent to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer all remaining processes of the service.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * When a scope unit is registered, a new property "Controller"
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer may be set. If set to a valid bus name, systemd will send a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer RequestStop() signal to this name when it would like to shut
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer down the scope. This may be used to hook manager logic into
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the shutdown logic of scope units. Also, scope units may now
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer be put in a special "abandoned" state, in which case the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer manager process which created them takes no further
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer responsibilities for it.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * When reading unit files, systemd will now verify
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the access mode of these files, and warn about certain
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer suspicious combinations. This has been added to make it
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer easier to track down packaging bugs where unit files are
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer marked executable or world-writable.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-nspawn gained a new "--setenv=" switch to set
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer container-wide environment variables. The similar option in
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer systemd-activate was renamed from "--environment=" to
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer "--setenv=" for consistency.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn has been updated to create a new kdbus domain
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer for each container that is invoked, thus allowing each
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer container to have its own set of system and user buses,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer independent of the host.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained a new --drop-capability= switch to run
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer the container with less capabilities than the default. Both
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer --drop-capability= and --capability= now take the special
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer string "all" for dropping or keeping all capabilities.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained new switches for executing containers
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer with specific SELinux labels set.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained a new --quiet switch to not generate
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer any additional output but the container's own console
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained a new --share-system switch to run a
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer container without PID namespacing enabled.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained a new --register= switch to control
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer whether the container is registered with systemd-machined or
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer not. This is useful for containers that do not run full
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer OS images, but only specific apps.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained a new --keep-unit which may be used
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer when invoked as the only program from a service unit, and
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer results in registration of the unit service itself in
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer systemd-machined, instead of a newly opened scope unit.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained a new --network-interface= switch for
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer moving arbitrary interfaces to the container. The new
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer --network-veth switch creates a virtual Ethernet connection
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer between host and container. The new --network-bridge=
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer switch then allows assigning the host side of this virtual
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Ethernet connection to a bridge device.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-nspawn gained a new --personality= switch for
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer setting the kernel personality for the container. This is
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer useful when running a 32-bit container on a 64-bit host. A
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer similar option Personality= is now also available for service
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer units to use.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * logind will now also track a "Desktop" identifier for each
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer session which encodes the desktop environment of it. This is
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer useful for desktop environments that want to identify
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer multiple running sessions of itself easily.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * A new SELinuxContext= setting for service units has been
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer added that allows setting a specific SELinux execution
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer context for a service.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * Most systemd client tools will now honour $SYSTEMD_LESS for
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer settings of the "less" pager. By default, these tools will
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer override $LESS to allow certain operations to work, such as
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer jump-to-the-end. With $SYSTEMD_LESS, it is possible to
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer influence this logic.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd's "seccomp" hook-up has been changed to make use of
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer the libseccomp library instead of using its own
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer implementation. This has benefits for portability among
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer other things.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * For usage together with SystemCallFilter=, a new
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer SystemCallErrorNumber= setting has been introduced that
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer allows configuration of a system error number to be returned
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer on filtered system calls, instead of immediately killing the
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer process. Also, SystemCallArchitectures= has been added to
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer limit access to system calls of a particular architecture
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer (in order to turn off support for unused secondary
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer architectures). There is also a global
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer SystemCallArchitectures= setting in system.conf now to turn
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer off support for non-native system calls system-wide.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd requires a kernel with a working name_to_handle_at(),
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer please see the kernel config requirements in the README file.
c53158818d8cdaf46b3f1b5299b9bda118a1043fThomas Hindoe Paaboel Andersen Contributions from: Adam Williamson, Alex Jia, Anatol Pomozov,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Ansgar Burchardt, AppleBloom, Auke Kok, Bastien Nocera,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Chengwei Yang, Christian Seiler, Colin Guthrie, Colin Walters,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Cristian Rodríguez, Daniel Buch, Daniele Medri, Daniel J
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Walsh, Daniel Mack, Dan McGee, Dave Reisner, David Coppa,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer David Herrmann, David Strauss, Djalal Harouni, Dmitry Pisklov,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Elia Pinto, Florian Weimer, George McCollister, Goffredo
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Baroncelli, Greg Kroah-Hartman, Hendrik Brueckner, Igor
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Zhbanov, Jan Engelhardt, Jan Janssen, Jason A. Donenfeld,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Jason St. John, Jasper St. Pierre, Jóhann B. Guðmundsson, Jose
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Ignacio Naranjo, Karel Zak, Kay Sievers, Kristian Høgsberg,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Lennart Poettering, Lubomir Rintel, Lukas Nykryn, Lukasz
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Skalski, Łukasz Stelmach, Luke Shumaker, Mantas Mikulėnas,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Marc-Antoine Perennou, Marcel Holtmann, Marcos Felipe Rasia de
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Mello, Marko Myllynen, Martin Pitt, Matthew Monaco, Michael
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Marineau, Michael Scherer, Michał Górny, Michal Sekletar,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Michele Curti, Oleksii Shevchuk, Olivier Brunel, Patrik Flykt,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Pavel Holica, Raudi, Richard Marko, Ronny Chevalier, Sébastien
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Luttringer, Sergey Ptashnick, Shawn Landden, Simon Peeters,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Stefan Beller, Susant Sahani, Sylvain Plantefeve, Sylvia Else,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Tero Roponen, Thomas Bächler, Thomas Hindoe Paaboel Andersen,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Tom Gundersen, Umut Tezduyar Lindskog, Unai Uribarri, Václav
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Pavlín, Vincent Batts, WaLyong Cho, William Giokas, Yang
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Zhiyong, Yin Kangkai, Yuxuan Shui, Zbigniew Jędrzejewski-Szmek
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer -- Berlin, 2014-02-20
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald HoyerCHANGES WITH 208:
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * logind has gained support for facilitating privileged input
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer and drm device access for unprivileged clients. This work is
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer useful to allow Wayland display servers (and similar
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer programs, such as kmscon) to run under the user's ID and
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer access input and drm devices which are normally
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer protected. When this is used (and the kernel is new enough)
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer logind will "mute" IO on the file descriptors passed to
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Wayland as long as it is in the background and "unmute" it
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer if it returns into the foreground. This allows secure
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer session switching without allowing background sessions to
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer eavesdrop on input and display data. This also introduces
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer session switching support if VT support is turned off in the
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer kernel, and on seats that are not seat0.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * A new kernel command line option luks.options= is understood
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer now which allows specifiying LUKS options for usage for LUKS
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer encrypted partitions specified with luks.uuid=.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * tmpfiles.d(5) snippets may now use specifier expansion in
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer path names. More specifically %m, %b, %H, %v, are now
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer replaced by the local machine id, boot id, hostname, and
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer kernel version number.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * A new tmpfiles.d(5) command "m" has been introduced which
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer may be used to change the owner/group/access mode of a file
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer or directory if it exists, but do nothing if it does not.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * This release removes high-level support for the
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer MemorySoftLimit= cgroup setting. The underlying kernel
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer cgroup attribute memory.soft_limit= is currently badly
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer designed and likely to be removed from the kernel API in its
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer current form, hence we should not expose it for now.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * The memory.use_hierarchy cgroup attribute is now enabled for
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer all cgroups systemd creates in the memory cgroup
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer hierarchy. This option is likely to be come the built-in
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer default in the kernel anyway, and the non-hierarchial mode
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer never made much sense in the intrinsically hierarchial
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer cgroup system.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * A new field _SYSTEMD_SLICE= is logged along with all journal
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer messages containing the slice a message was generated
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer from. This is useful to allow easy per-customer filtering of
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer logs among other things.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-journald will no longer adjust the group of journal
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer files it creates to the "systemd-journal" group. Instead we
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer rely on the journal directory to be owned by the
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer "systemd-journal" group, and its setgid bit set, so that the
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer kernel file system layer will automatically enforce that
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer journal files inherit this group assignment. The reason for
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer this change is that we cannot allow NSS look-ups from
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer journald which would be necessary to resolve
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer "systemd-journal" to a numeric GID, because this might
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer create deadlocks if NSS involves synchronous queries to
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer other daemons (such as nscd, or sssd) which in turn are
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer logging clients of journald and might block on it, which
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer would then dead lock. A tmpfiles.d(5) snippet included in
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer systemd will make sure the setgid bit and group are
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer properly set on the journal directory if it exists on every
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer boot. However, we recommend adjusting it manually after
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer upgrades too (or from RPM scriptlets), so that the change is
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer not delayed until next reboot.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * Backlight and random seed files in /var/lib/ have moved into
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer the /var/lib/systemd/ directory, in order to centralize all
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer systemd generated files in one directory.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * Boot time performance measurements (as displayed by
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer "systemd-analyze" for example) will now read ACPI 5.0 FPDT
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer performance information if that's available to determine how
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer much time BIOS and boot loader initialization required. With
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer a sufficiently new BIOS you hence no longer need to boot
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer with Gummiboot to get access to such information.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Contributions from: Andrey Borzenkov, Chen Jie, Colin Walters,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Cristian Rodríguez, Dave Reisner, David Herrmann, David
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Mackey, David Strauss, Eelco Dolstra, Evan Callicoat, Gao
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer feng, Harald Hoyer, Jimmie Tauriainen, Kay Sievers, Lennart
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Poettering, Lukas Nykryn, Mantas Mikulėnas, Martin Pitt,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Michael Scherer, Michał Górny, Mike Gilbert, Patrick McCarty,
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer Sebastian Ott, Tom Gundersen, Zbigniew Jędrzejewski-Szmek
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer -- Berlin, 2013-10-02
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald HoyerCHANGES WITH 207:
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * The Restart= option for services now understands a new
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer on-watchdog setting, which will restart the service
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer automatically if the service stops sending out watchdog keep
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer alive messages (as configured with WatchdogSec=).
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * The getty generator (which is responsible for bringing up a
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer getty on configured serial consoles) will no longer only
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer start a getty on the primary kernel console but on all
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer others, too. This makes the order in which console= is
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer specified on the kernel command line less important.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * libsystemd-logind gained a new sd_session_get_vt() call to
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer retrieve the VT number of a session.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * If the option "tries=0" is set for an entry of /etc/crypttab
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer its passphrase is queried indefinitely instead of any
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer maximum number of tries.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * If a service with a configure PID file terminates its PID
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer file will now be removed automatically if it still exists
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer afterwards. This should put an end to stale PID files.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * systemd-run will now also take relative binary path names
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer for execution and no longer insists on absolute paths.
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer * InaccessibleDirectories= and ReadOnlyDirectories= now take
0d6e798a784ef0ba6b95512e4453067b2f84a91aHarald Hoyer paths that are optionally prefixed with "-" to indicate that
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer it should not be considered a failure if they do not exist.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * journalctl -o (and similar commands) now understands a new
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer output mode "short-precise", it is similar to "short" but
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer shows timestamps with usec accuracy.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The option "discard" (as known from Debian) is now
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer synonymous to "allow-discards" in /etc/crypttab. In fact,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer "discard" is preferred now (since it is easier to remember
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Some licensing clean-ups were made, so that more code is now
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer LGPL-2.1 licensed than before.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A minimal tool to save/restore the display backlight
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer brightness across reboots has been added. It will store the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer backlight setting as late as possible at shutdown, and
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer restore it as early as possible during reboot.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * A logic to automatically discover and enable home and swap
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer partitions on GPT disks has been added. With this in place
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer /etc/fstab becomes optional for many setups as systemd can
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer discover certain partitions located on the root disk
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer automatically. Home partitions are recognized under their
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer GPT type ID 933ac7e12eb44f13b8440e14e2aef915. Swap
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer partitions are recognized under their GPT type ID
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer 0657fd6da4ab43c484e50933c84b4f4f.
1ecf6a2b4960229ad1d06c591b4776ddf065e834Harald Hoyer * systemd will no longer pass any environment from the kernel
1ecf6a2b4960229ad1d06c591b4776ddf065e834Harald Hoyer or initrd to system services. If you want to set an
1ecf6a2b4960229ad1d06c591b4776ddf065e834Harald Hoyer environment for all services, do so via the kernel command
1ecf6a2b4960229ad1d06c591b4776ddf065e834Harald Hoyer line systemd.setenv= assignment.
33a5e20ffaa2cbb2853f14265566bac66a7f9026Harald Hoyer * The systemd-sysctl tool no longer natively reads the file
33a5e20ffaa2cbb2853f14265566bac66a7f9026Harald Hoyer /etc/sysctl.conf. If desired, the file should be symlinked
33a5e20ffaa2cbb2853f14265566bac66a7f9026Harald Hoyer from /etc/sysctl.d/99-sysctl.conf. Apart from providing
33a5e20ffaa2cbb2853f14265566bac66a7f9026Harald Hoyer legacy support by a symlink rather than built-in code, it
33a5e20ffaa2cbb2853f14265566bac66a7f9026Harald Hoyer also makes the otherwise hidden order of application of the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer different files visible. (Note that this partly reverts to a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer pre-198 application order of sysctl knobs!)
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The "systemctl set-log-level" and "systemctl dump" commands
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer have been moved to systemd-analyze.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemd-run learned the new --remain-after-exit switch,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer which causes the scope unit not to be cleaned up
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer automatically after the process terminated.
889a90422dd47284dffa32b9234a6e58991b000cRonny Chevalier * tmpfiles learned a new --exclude-prefix= switch to exclude
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer certain paths from operation.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * journald will now automatically flush all messages to disk
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer as soon as a message of the log priorities CRIT, ALERT or
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer EMERG is received.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Contributions from: Andrew Cook, Brandon Philips, Christian
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Hesse, Christoph Junghans, Colin Walters, Daniel Schaal,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Daniel Wallace, Dave Reisner, David Herrmann, Gao feng, George
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer McCollister, Giovanni Campagna, Hannes Reinecke, Harald Hoyer,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Herczeg Zsolt, Holger Hans Peter Freyther, Jan Engelhardt,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Jesper Larsen, Kay Sievers, Khem Raj, Lennart Poettering,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Lukas Nykryn, Maciej Wereski, Mantas Mikulėnas, Marcel
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Holtmann, Martin Pitt, Michael Biebl, Michael Marineau,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Michael Scherer, Michael Stapelberg, Michal Sekletar, Michał
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Górny, Olivier Brunel, Ondrej Balaz, Ronny Chevalier, Shawn
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Landden, Steven Hiscocks, Thomas Bächler, Thomas Hindoe
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer Paaboel Andersen, Tom Gundersen, Umut Tezduyar, WANG Chao,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer William Giokas, Zbigniew Jędrzejewski-Szmek
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer -- Berlin, 2013-09-13
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald HoyerCHANGES WITH 206:
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * The documentation has been updated to cover the various new
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer concepts introduced with 205.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * Unit files now understand the new %v specifier which
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer resolves to the kernel version string as returned by "uname
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * systemctl now supports filtering the unit list output by
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer load state, active state and sub state, using the new
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer --state= parameter.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * "systemctl status" will now show the results of the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer condition checks (like ConditionPathExists= and similar) of
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the last start attempts of the unit. They are also logged to
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer the journal.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * "journalctl -b" may now be used to look for boot output of a
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer specific boot. Try "journalctl -b -1" for the previous boot,
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer but the syntax is substantially more powerful.
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer * "journalctl --show-cursor" has been added which prints the
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer cursor string the last shown log line. This may then be used
898720b7e9cf3bdf7a93e435cbed5dd6942ecf9bHarald Hoyer with the new "journalctl --after-cursor=" switch to continue
devices such as /dev/snd/sequencer whithout loading the
subslice of system.slice unless something else is explicitly
implicitly be placed in system-sshd.slice rather than
system.slice as before.
Thomas H.P. Andersen, Tom Gundersen, Tomasz Torcz, William
default there are now three slices: system.slice (for all
system services), user.slice (for all user sessions),
machine.slice (for VMs and containers).
creates/removes/manages cgroups.
VMs/containers. nspawn has been updated accordingly, and
of meta information about the VMs/containers, and assign
and exposed in "ps" and similar tools. machined/machinectl
"systemd.log_level=debug" already did before.
added to configure the default.target symlink, which
/etc/systemd/system.conf to set environment variables for
processes. journactl/systemctl has been updated to make use
* systemd-nspawn will now create /etc/resolv.conf if
implicitly. This makes /etc/hosts an optional file and
* libsystemd-logind.so gained a new call
VMs/containers coming and going.
/var/lib/container/foobar it is now sufficient to run
* A new configuration file /etc/systemd/sleep.conf has been
* systemd gained a new unit 'systemd-static-nodes.service'
services, user processes and containers/virtual
name of the container/VM a specific process belongs to.
* The cryptsetup logic now understands the "luks.key=" kernel
* Python systemd.journal module was updated to wrap recently
changed to bring the low level interface in s.j._Reader
s.j.Reader was updated to wrap and convert all data about
* If /etc/crypttab refers to password files stored on
expressions for all time spans under 1min, i.e. "5.123456s"
more useful graphs. I.e. it is now possible to create simple
* /etc/os-release files gained a new BUILD_ID= field for usage
changed. The private /tmp and /var/tmp directories are now
with a new kernel command line switch: net.ifnames=0.
can be configured via SyncIntervalSec= in journald.conf.
* There's a new remote-fs-setup.target unit that can be used
from. This complements sockets.target with a similar
files without having to edit/override the unit files
change one value for a service file foobar.service he can
/etc/systemd/system/foobar.service.d/*.conf. The unit logic
them there; or creating a new file in /etc/systemd/system/
overriding semantics between /usr/lib, /etc and /run apply
$null. Also, the mail-transfer-agent.target unit backing
are implied anyway for normal services. syslog.target has
* The various "environment" files, such as /etc/locale.conf
seat. (i.e. the device of a seat that needs to be around for
* The log messages for lid events and power/sleep keypresses
journal output in reverse order (i.e. newest line first).
than just journal/log file access. This new group is now
up for /var/log/journal to give "adm" and "wheel" read
add read access to "adm" + "wheel" to /var/log/journal, and
all existing/future journal files. To normal users and
scripts need to create these system user/group at
systemd.time(7).
containers. i.e. think about autospawning an entire OS image
* logind can now automatically suspend/hibernate/shutdown the
* /etc/machine-info and hostnamed now also expose the chassis
user/vendor or is automatically determined from ACPI and DMI
devices as seat masters, i.e. as devices that are required
from an indexed database that is keyed by vendor/product IDs
userspace device metadata. Previously, data from the PCI/USB
(i.e. those for non-standard runlevels such as 'b' or 'S')
or ArchLinux /etc/rc.conf support. We recommend the
systemd without blkid and/or kmod support.
more than once. I.e. in addition to transitions from the
* We now install a README each in /var/log/ and
/etc/rc.d/init.d explaining where the system logs and init
* browse.html now allows filtering and showing detailed
* journald.conf's RuntimeMinSize=, PersistentMinSize= settings
* If /etc/vconsole.conf is non-existent or empty we will no
the userspace fonts/key maps we previously overloaded them
/etc/vconsole.conf with the appropriate contents.
"systemd-journal-gatewayd.service". This service provides
# systemctl start systemd-journal-gatewayd.service
/var/log/messages compatible format. The same as JSON:
* nspawn will now create a symlink /etc/localtime in the
changed to create/update the appropriate symlink.
systemd-journald.service" to see this information.
* HandleSleepKey= in logind.conf has been split up into
journald.conf which may be used to control how user journals
are split off. See journald.conf(5) for details.
* timedated will no longer write or process /etc/timezone,
anymore /etc/localtime always being a symlink is now safe,
and hence the information in /etc/timezone is not necessary
/dev/kmsg has now been added and is enabled by default.
* Support for reading kernel messages from /proc/kmsg has now
reading structured messages from /dev/kmsg (see
above). /proc/kmsg is now exclusive property of classic
warning/notice log levels in bright white. It also supports
* libsystemd-logind.so gained a new call sd_journal_perror()
* /etc/crypttab entries now understand the new keyfile-size=
* The prefdm.service file has been removed. Distributions
* /etc/crypttab entries now understand the new keyfile-offset=
systemd-journal-flush.service, rather than implicitly simply
by seeing /var/log/journal to be writable.
/usr/lib/systemd/systemd-readahead analyze /.readahead
systemctl enable debug-shell.service
udevadm info /dev/sda
udevadm info /sys/class/block/sda
* We now include RPM macros for service enabling/disabling
systemctl status /dev/sda
system.conf parsing.
* systemd.confirm_spawn= on the kernel command line should now
from /usr/lib/systemd/ntp-units.d/*.list,
systemd-timedated-ntp.target has been removed.
journald.conf. These options allow reducing the amount of
* TimerSlackNSec= can now be specified in system.conf for
/usr/bin/avahi-daemon" to get all log output of a specific
* CapabilityBoundingSet= in system.conf now also influences
* udev: /lib/udev/devices/ are not read anymore; systemd-tmpfiles
in /usr/lib/systemd/. Standalone builds or non-systemd systems need
* The config files: /etc/systemd/systemd-logind.conf and
/etc/systemd/systemd-journald.conf have been renamed to
* logind now implements a sleep/shutdown/idle inhibiting logic
systemd-vconsole-setup.service) now detect properly if they
/etc/fstab are out of date due to changes in fstab that
between user/admin configuration and vendor defaults.
* PrivateTmp= now affects both /tmp and /var/tmp.
system.conf. Mounting file systems at boot has to take place
masked and /etc/fstab can override it.
* Show /etc/os-release data in systemd-analyze output
* sd-login.h is C++ comptaible again
* Extend the /etc/os-release format on request of the Debian
* systems lacking /etc/os-release are no longer supported.
* Various functionality updates to libsystemd-login.so
* The systemd binary is installed /usr/lib/systemd/systemd now;
An existing /sbin/init symlink needs to be adapted with the
* A new kernel command line option systemd.setenv= is
with STDERR/STDOUT connected to the journal. Can also act as
* Introduce remote-fs-pre.target which is ordered before all
fixed (i.e. PID file creation must have finished before the
* /etc/rc.local is now hooked in via a generator binary, and
of /usr/local by default.