b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-SzmekBugfixes:

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* there is nothing to warn about here :)

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek $ systemctl stop systemd-udevd.service systemd-udevd-kernel.socket systemd-udevd-control.socket

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek Warning: Stopping systemd-udevd.service, but it can still be activated by:

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek systemd-udevd-control.socket

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek systemd-udevd-kernel.socket

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* kill /etc/timezone handling entirely? What does it provide?

dbc4fbae58e39cb0d33738f0a4d1e74511ed1fb5Lennart Poettering - /etc/localtime carries the same information already:

7b17a7d72f5ba5ad838b19803534c56a46f3bce9Lennart Poettering $ ls -l /etc/localtime; cat /etc/timezone

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering lrwxrwxrwx 1 root root 33 Jul 27 09:55 /etc/localtime -> /usr/share/zoneinfo/Europe/Berlin

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek Europe/Berlin

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek - systemd enforces /usr to be available at bootup, so we can

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek enforce the use of the symlink

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering* swap units that are activated by one name but shown in the kernel under another are semi-broken

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering* make anaconda write timeout=0 for encrypted devices

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* Dangling symlinks of .automount unit files in .wants/ directories, set up

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek automount points even when the original .automount file did not exist

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek anymore. Only the .mount unit was still around.

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* make polkit checks async

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

a752addf67986c9b0e247bddc1747b5e6284945dLennart Poettering* properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point.

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* we pull src/core/manager.h into src/shared/src/shared/path-lookup.c which is the wrong direction

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek rename enum "ManagerRunningAs" to "SystemdRunningAs" and move it to shared/

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* crash happens when running a service as forking and then changing it to simple and reloading.

b87377fca3c938303a2fb25229abf8c14814841bKay Sievers

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering Jul 09 18:20:57 mop systemd[1]: usbmuxd.service operation timed out. Terminating.

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering Jul 09 18:20:57 mop systemd[1]: Unit usbmuxd.service entered failed state.

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek Jul 09 18:22:24 mop systemd[1]: PID 21814 read from file /var/run/usbmuxd.pid does not exist.

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek Jul 09 18:22:24 mop systemd[1]: Unit usbmuxd.service entered failed state.

f4ce2b3e5ce93b83f14f8785e205ebb5a9b8c1dfLennart Poettering Jul 09 18:22:33 mop systemd[1]: Reloading.

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering Jul 09 18:22:37 mop systemd[1]: Assertion 's->type == SERVICE_FORKING' failed at src/core/service.c:3007, function service_sigchld_eve...Aborting.

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek Jul 09 18:22:37 mop systemd[1]: Caught <ABRT>, dumped core as pid 21865.

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek Jul 09 18:22:37 mop systemd[1]: Freezing execution.

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering Jul 09 18:22:37 mop [21866]: Process 21865 (systemd) dumped core.

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* support *static* (/run) hibernate inhibitors. All rpm -i actions should completely prevent any

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek sort of hibernate action until the next reboot. If the kernel or any other base tool is replaced

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek by rpm, the resume path might fail, the for resume needed kernel might even be uninstalled, and

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek the whole situation leads directly to data loss.

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-SzmekFeatures:

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* move keymaps to /usr/lib/... rather than /usr/lib/udev/...

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* journald: check whether it is OK if the client can still modify delivered journal entries

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* json: use yajl

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* json: don't add wrapping array, just put entries on one line each

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering* json: add -o json-pretty in addition to -o json, make the latter output one line per entry

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* json: properly serialize multiple fields with the same name per entry

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* journalctl: make -l the default

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* journald: add option to choose between "split up nothing", "split up login user journals", "split up all user journals"

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* journal live copy, bsaed on libneon (client) and libmicrohttpd

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* document in wiki json serialization

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* python-journal merge

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* system-wide seccomp filter

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* securityfs: don't mount in container

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* slave/shared remount root fs in container

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* ability to pass fds into systemd

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* system.conf should have controls for cgroups

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* tmpfiles: skip mknod if CAP_MKNOD is missing

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering

2e3d069236777cd62f755a02f4a239306b4ad21aLennart Poettering* fake boot id

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* bind mount read-only the cgroup tree higher than than nspawn

2e3d069236777cd62f755a02f4a239306b4ad21aLennart Poettering

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering* currently system services appear not to generate core dumps...

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* introduce /run/kmsg in containers?

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* introduce $container_boot_id?

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b562f5a57d11d356aab26b08481f3befffff0822Lennart Poettering* wall messages for shutdown should move to logind

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* allow writing multiple conditions in unit files on one line

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* journal: json output needs to be able to deal with multiple assignments of the same field

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* There's something wrong with escaping unit names: http://lists.freedesktop.org/archives/systemd-devel/2012-August/006292.html

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* cleanup ellipsation for log output in journalctl and systemctl status: have a sane way to disable ellipsation, and disable it by default when invoked in less/more

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* enforce limits on fds openened by socket units

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* explore multiple service instances per listening socket idea

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* testing tool for socket activation: some binary that listens on a socket and passes it on using the usual socket activation protocol to some server.

bb11271068ff34434f5b8cefd0c2c0bae5ed7fd1Holger Hans Peter Freyther

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* maybe make systemd-detect-virt suid? or use fscaps?

e8bc0ea2b100158bf35c635039226235aa879068Lennart Poettering

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* man: document in ExecStart= explicitly that we don't take shell command lines, only executable names with arguments

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* shutdown: don't read-only mount anything when running in container

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* nspawn: --read-only is not applied recursively to submounts

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* MountFlags=shared acts as MountFlags=slave right now.

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* ReadOnlyDirectories= is not applied recursively to submounts

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* drop PID 1 reloading, only do reexecing (difficult: Reload()

1ebe2a47c4759b0bfe8a351cdedc03799b6a2143Kay Sievers currently is properly synchronous, Reexec() is weird, because we

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek can't delay the response properly until we are back, so instead of

514f4ef52f91edb3741cad88d34572d162459346Lennart Poettering being properly synchronous we just keep open the fd and close it

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek when done. That means clients don't get a succesful method reply,

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek but much rather a disconnect on success.

514f4ef52f91edb3741cad88d34572d162459346Lennart Poettering

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* document that service reload may be implemented as service reexec

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* remember which condition failed for services, not just the fact that something failed

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering* use opterr = 0 for all getopt tools

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek

b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek* properly handle loop back mounts via fstab, especially regards to fsck/passno

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering* allow services with no ExecStart= but with an ExecStop=

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering* add proper journal support to "systemctl --user status ..."

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering* add _SYSTEMD_USER_UNIT= field to journal entries

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering

47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering* remove Fedora /dev/null logic from localed.c, now that system-config-keyboard is gone

delete /etc/X11/xorg.conf.d/00-system-setup-keyboard.conf from spec file

* journal: expose current disk usage

* dracut-shutdown needs to be ordered before unmounting /boot

* wiki: document new logind LockSessions() call

* initialize the hostname from the fs label of /, if /etc/hostname does not exist?

* logind: different policy actions for idle, suspend, shutdown blockers: allow idle blockers by default, don't allow suspend blockers by default

* install README to /etc/rc.d/init.d (if support for that is enabled) helping people who use "ls" there to figure out which services exist.

* logind: ignore inactive login screens when checking whether power key should be handled

* rename "userspace" to "core-os"

* systemctl: "Journal has been rotated since unit was started." message is misleading

* syscall filter: add knowledge about compat syscalls

* syscall filter: don't enforce no new privs?

* syscall filter: option to return EPERM rather than SIGSYS?

* syscall filter: port to libseccomp

* logind: wakelock/opportunistic suspend support

* switch-root: sockets need relabelling

* systemd-analyze post-boot is broken for initrd

* man: clarify that time-sync.target is not only sysv compat but also useful otherwise. Same for similar targets

* .device aliases need to be implemented with the "following" logic, probably.

* refuse taking lower-case variable names in sd_journal_send() and friends.

* load-fragment: when loading a unit file via a chain of symlinks

verify that it isn't masked via any of the names traversed.

* journald: we currently rotate only after MaxUse+MaxFilesize has been reached.

* Document:

- PID 1 D-Bus API

* introduce Type=pid-file

* systemctl list-unit-files appears to be broken for symlinked units in /usr/lib

* maybe allow services with ExecStop= set, but no ExecStart=?

* efi: implement /forcefsck as uefi variables thus not requiring file system altering to trigger a file system check

* efi: honour language efi variables for default language selection

* efi: honour timezone efi variables for default timezone selection

* efi: automatically mount EFI partition to /boot if no such entry exists in /etc/fstab and /boot is empty

gummiboot exports the EFI system partion (ESP) device:

/sys/firmware/efi/vars/LoaderDeviceIdentifier-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data

Acpi(PNP0A03,0)/Pci(1F|2)/?/HD(Part1,Sig1FCBC57F-4BFC-4C2B-91A3-9C84FBCD9AF1)

'/' is the separator for the device path list

HD(Part1,Sig1FCBC57F-4BFC-4C2B-91A3-9C84FBCD9AF1) contains the GPT UUID of the ESP

* read the bootloader performance data (raw TSC) in systemd-analyze

/sys/firmware/efi/vars/LoaderTicksExec-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data

19066159288

/sys/firmware/efi/vars/LoaderTicksInit-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data

17442940316

/sys/firmware/efi/vars/LoaderTicksStartMenu-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data

(only set if the menu was active)

* change Requires=basic.target to RequisiteOverride=basic.target

* support rd.luks.allow-discards= kernel cmdline params in cryptsetup generator

* systemctl: when stopping a service which has triggres and warning about it actually check the TriggeredBy= deps fields

* journal: hook up with EFI firmware log

* handle C-A-Del in logind, like the power/suspend buttons?

* nspawn: make use of device cgroup contrller by default

* drop accountsservice's StandardOutput=syslog and Type=dbus fields

* when breaking cycles drop sysv services first, then services from /run, then from /etc, then from /usr

* readahead: when bumping /sys readahead variable save mtime and compare later to detect changes

* (attempt to) make Debianites happy:

- implement .d/ auto includes for unit files

- add syntax to reset ExecStart= lists (and similar)

* move passno parsing to fstab generator

* improve !/proc/*/loginuid situation: make /proc/*/loginuid less dependent on CONFIG_AUDIT,

or use the users cgroup information when /proc/*/loginuid is not available.

* pam_systemd: try to get old session id from cgroup, if audit sessionid cannot be determined

* pam: when leaving a session explicitly exclude the ReleaseSession() caller process from the killing spree

* maybe introduce ~/.config/locale.conf and apply it within PAM

* readahead: make use of EXT4_IOC_MOVE_EXT, as used by http://e4rat.sourceforge.net/

* automount: implement expire

* logind: auto-suspend, auto-shutdown:

IdleAction=(none|suspend|opportunistic|hibernate|poweroff)

IdleActionDelay=...

SessionIdleMode=(explicit|ignore|login)

ForceShutdown=(yes|no)

* services which create their own subcgroups break cgroup-empty notification (needs to be fixed in the kernel)

* don't delete /tmp/systemd-namespace-* before a process is gone down

* vconsole: implement setterm -store -foreground xxx --background zzz

* ExecOnFailure=/usr/bin/foo

* fedora: make sshd and pam_loginuid work in nspawn containers

* fix utmp for console logins in containers

* Add pretty name for seats in logind

* selinux: merge systemd selinux access controls (dwalsh)

* ConditionSecurity= should learn about IMA

* Auke: merge Auke's bootchart

* udev: move to LGPL

* udev systemd unify:

- strpcpy(), strpcpyl(), strscpy(), strscpyl()

- utf8 validator code

- now() vs. now_usec()

* udev: remove network interface renaming, sleep and retry logic, we do

no support renaming of interfaces in the conflicting kernel

namespace

* udev: find a way to tell udev to not cancel firmware requests when running in initramfs

* udev: scsi_id -> sg3_utils -> kill scsi_id

* udev: add trigger --subsystem-match=usb/usb_device device

* allow configuration of console width/height in vconsole.conf

* cleanup syslog 'priority' vs. 'level' wording

* dbus upstream still refers to dbus.target and shouldn't

* when a service has the same env var set twice we actually store it twice and return that in systemctl show -p... We should only show the last setting

* support container_ttys=

* introduce mix of BindTo and Requisite

* journalctl: show multiline log messages sanely, expand tabs, and show all valid utf8 messages

* add DeleteSocketsOnStop=yes|no option to socket units

* journal: store euid in journal if it differs from uid

* There's currently no way to cancel fsck (used to be possible via C-c or c on the console)

* journal: sanely deal with entries which are larger than the individual file size, but where the componets would fit

* add command to systemctl to plot dependency graph as tree (see rhbz 795365)

* make logind reserve tty9 or so for text logins, so that gdm never picks it up

* add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/

* default unix qlen is too small (10). bump sysctl? add sockopt?

* Possibly, detect whether SysV init scripts can do reloading by looking for "echo Usage:" lines

* figure out whether we should leave dbus around during shutdown

* dbus: in fedora, make the machine a symlink to /etc/machine-id

* dbus: on fedora, move dbus to early boot

* journald: reuse XZ context

* logind: add equivalent to sd_pid_get_owner_uid() to the D-Bus API

* journal: API for looking for retrieving "all values of this field"

* journal: deal nicely with byte-by-byte copied files, especially regards header

* journal: local deserializer of export mode, http server

* journal: message catalog

* document the exit codes when services fail before they are exec()ed

* systemctl journal command

* journalctl: --cursor support

* systemctl status: show coredumps

* save coredump in Windows/Mozilla minidump format

* support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting)

* clean up session cgroups that remain after logout (think sshd), but eventually run empty

* support "systemctl stop foobar@.service" to stop all units matching a certain template

* logind: allow showing logout dialog from system

* document that %% can be used to write % in a string that is specifier extended

* when an instanced service exits, remove its parent cgroup too if possible.

* if we can not get user quota for tmpfs, mount a separate tmpfs instance

for every user in /run/user/$USER with a configured maximum size

* default to actual 32bit PIDs, via /proc/sys/kernel/pid_max

* be able to specify a forced restart of service A where service B depends on, in case B

needs to be auto-respawned?

* Something is wrong with symlink handling of "autovt@.service" in "systemctl list-unit-files"

* when a bus name of a service disappears from the bus make sure to queue further activation requests

* something like ConditionExec= or ExecStartPre= without failure state

* tmpfiles: apply "x" on "D" too (see patch from William Douglas)

* don't set $HOME in services unless requested

* hide PAM/TCPWrap options in fragment parser when compile time disabled

* when we automatically restart a service, ensure we restart its rdeps, too.

* allow Type=simple with PIDFile=

https://bugzilla.redhat.com/show_bug.cgi?id=723942

* move PAM code into its own binary

* warn if the user stops a service but not its associated socket

* logind: spawn user@..service on login

* logind: non-local X11 server handling

* implement Register= switch in .socket units to enable registration

in Avahi, RPC and other socket registration services.

* make sure systemd-ask-password-wall does not shutdown systemd-ask-password-console too early

* readahead: use BTRFS_IOC_DEFRAG_RANGE instead of BTRFS_IOC_DEFRAG ioctl, with START_IO

* readahead: check whether a btrfs volume includes ssd by checking mount flag "ssd"

* support sd_notify() style notification when reload begins (RELOADING=1), reload is finished (READY=1), and add ReloadSignal= then to use in combination

* support sd_notify() style notification when shutting down, to make auto-exit bus services work (STOPPING=1)

* verify that the AF_UNIX sockets of a service in the fs still exist

when we start a service in order to avoid confusion when a user

assumes starting a service is enough to make it accessible

* Make it possible to set the keymap independently from the font on

the kernel cmdline. Right now setting one resets also the other.

* move nss-myhostname into systemd

* and a dbus call to generate target from current state

* drop /.readahead on bigger upgrades with yum

* add support for /bin/mount -s

* GC unreferenced jobs (such as .device jobs)

* write blog stories about:

- enabling dbus services

- status update

- how to make changes to sysctl and sysfs attributes

- remote access

- how to pass throw-away units to systemd, or dynamically change properties of existing units

- how to integrate cgconfig and suchlike with systemd

- resource control in systemd

- inhibiting

- testing with Harald's awesome test kit

- restart

* allow port=0 in .socket units

* move readahead files into /var, look for them with .path units

* teach dbus to activate all services it finds in /etc/systemd/services/org-*.service

* support systemd.mask= on the kernel command line.

* when key file cannot be found, read it from kbd in cryptsetup

* reuse mkdtemp namespace dirs in /tmp?

* recreate systemd's D-Bus private socket file on SIGUSR2

* Support --test based on current system state

* investigate whether the gnome pty helper should be moved into systemd, to provide cgroup support.

* maybe introduce ExecRestartPre=

* configurable jitter for timer events

* timer events with system resume

* timer events on calendar time

* dot output for --test showing the 'initial transaction'

* calendar time support in timer, iCalendar semantics for the timer stuff (RFC2445)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=99ee5315dac6211e972fa3f23bcc9a0343ff58c4

* implicitly import "defaults" settings file into all types

* writable cgroups dbus properties for live changes

* read config fragments for all units from /lib/systemd/system/foobar.service.d/ to override/extend specific settings

* port over to LISTEN_FDS/LISTEN_PID:

- rpcbind (/var/run/rpcbind.sock!) HAVEPATCH

- cups HAVEPATCH

- postfix, saslauthd

- apache/samba

- libvirtd (/var/run/libvirt/libvirt-sock-ro)

- bluetoothd (/var/run/sdp! @/org/bluez/audio!)

- distccd

* auditd service files

* fingerprint.target, wireless.target, gps.target, netdevice.target

* io priority during initialization

* systemctl list-jobs - show dependencies

* add systemctl switch to dump transaction without executing it

* drop cap bounding set in readahead and other services

External:

* dbus:

- dbus --user

- natively watch for dbus-*.service symlinks (PENDING)

- allow specification of socket mode/umask when allocating DBusServer

- allow disabling of fd passing when connecting a AF_UNIX connection

- allow disabling of UID passing for AUTH EXTERNAL

- always pass cred data along each message

* fix alsa mixer restore to not print error when no config is stored

* gnome-shell python script/glxinfo/is-accelerated must die

* make cryptsetup lower --iter-time

* patch kernel for xattr support in /dev, /proc/, /sys and /sys/fs/cgroup?

* NTP: the kernel's 11-minutes-mode syncs the system time to the RTC, but only

in an ~30 minutes window. It does not adjust larger differences. Find a way

to tell the kernel, to always do a full time sync when the RTC is in UTC and

we are in 11-minutes-mode. When we trust the system time to NTP we also want

the RTC to sync up.

* kernel: add device_type = "fb", "fbcon" to class "graphics"

Regularly:

* look for close() vs. close_nointr() vs. close_nointr_nofail()

* check for strerror(r) instead of strerror(-r)

* Use PR_SET_PROCTITLE_AREA if it becomes available in the kernel

* %m in printf() instead of strerror(errno);

* pahole

* set_put(), hashmap_put() return values check. i.e. == 0 doesn't free()!

* use __secure_getenv() instead of getenv() where appropriate

Scheduled for removal (or fixing):

* xxxOverridable dependencies