TODO revision 64eed40c07efb4e2b316ebb4e7481b7a891b7934
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* the running hwdb seems not to pick up updated database files without
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering an explicit: udevadm control --reload
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* enabling an instance unit creates pointless link, and
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering the unit will be started with getty@getty.service:
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering $ systemctl enable getty@.service
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering ln -s '/usr/lib/systemd/system/getty@.service' '/etc/systemd/system/getty.target.wants/getty@.service'
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* swap units that are activated by one name but shown in the kernel under another are semi-broken
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* Dangling symlinks of .automount unit files in .wants/ directories, set up
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering automount points even when the original .automount file did not exist
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering anymore. Only the .mount unit was still around.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* make polkit checks async
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* ellipsize_mem must take into account multi-byte unicode characters, and
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering - make the resulting line the requested number of *characters*, not *bytes*,
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering - avoid truncuating multi-byte sequences in the middle.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* When we detect invalid UTF-8, we cant't use it in an error message:
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering log...("Path is not UTF-8 clean, ignoring assignment: %s", rvalue);
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* shorten the message to sane length:
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering Cannot add dependency job for unit display-manager.service, ignoring: Unit display-manager.service failed to load: No such file or directory. See system logs and 'systemctl status display-manager.service' for details.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* external: ps should gain colums for slice and machine
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering - localectl: support new converted x11→console keymaps
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* when installing fedora with yum --installroot /var/run is a directory, not a symlink
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering https://bugzilla.redhat.com/show_bug.cgi?id=975864
a6278b88305b237b02eabff0d870b57fe851822dLennart PoetteringCGroup Rework Completion:
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* introduce "mainpid" for scopes (or maybe not?)
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* implement system-wide DefaultCPUAccounting=1 switch (and similar for blockio, memory?)
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* implement per-slice CPUFairScheduling=1 switch
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* handle jointly mounted controllers correctly
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* make BlockIODeviceWeight=, BlockIODeviceBandwidth= runtime settable
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* introduce high-level settings for RT budget, swappiness
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* wiki: document new bus APIs of PID 1 (transient units, Reloading signal)
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* When a Type=forking service fails and needed another service that
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering service is not cleaned up again when it has StopWhenUnneeded=yes
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering http://lists.freedesktop.org/archives/systemd-devel/2013-July/012141.html
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* backlight: properly handle multiple backlight devices for the same
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering hardware: at shutdown we should only save the backlight setting for
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering the "best" way to access the backlight. Strategy should be: at
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering shutdown, ignore all backlights that are connected to a non-eDP or
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering non-LVDS port, and then prefer the firmware device over platform
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering device over raw device per-PCI card. Delete all old data. At boot
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering simply apply whatever data we find. Also see
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering http://cgit.freedesktop.org/libbacklight/tree/libbacklight.c#n194
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* rfkill: save/restore soft rfkill status across reboots
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* refuse boot if /etc/os-release is missing or /etc/machine-id cannot be set up
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* ensure scope units may be started only a single time
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* document that in instead of FsckPassNo= people should just add a manual dep to systemd-fsck@.service to their mount units.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* better error message if you run systemctl without systemd running
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* systemctl status output should should include list of triggering units and their status
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* for transient units, instead of writing out drop-ins for all properties consider serializing them in the normal serialization stream
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* logind: when logging out, remove user-owned sysv and posix IPC objects
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* session scopes/user unit: add RequiresMountsFor for the home directory of the user
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* add a man page containing packaging guidelines and recommending usage of things like Documentation=, PrivateTmp=, PrivateNetwork= and ReadOnlyDirectories=/etc /usr.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* journalctl: instead --after-cursor= maybe have a --cursor=XYZ+1 syntax?
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* given that logind/machined now let PID 1 do all nasty work we can
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering probably reduce the capability set they retain substantially.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* btrfs raid assembly: some .device jobs stay stuck in the queue
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* Fedora: add an rpmlint check that verifies that all unit files in the RPM are listed in %systemd_post macros.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* Fedora: post FPC ticket to move add %tmpfiles_create to the packaging guidelines
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* make sure gdm doesn't use multi-user-x but the new default X configuration file, and then remove multi-user-x from systemd
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* when parsing calendar timestamps support the UTC timezone (even if we won't support arbitrary timezone specs, support UTC itself certainly makes sense), also support syntaxes such as +0200
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* when a kernel driver logs in a tight loop we should ratelimit that too.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* "systemctl disable" of a unit instance removes all symlinks, should
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering only remove the instance symlink (systemctl disable of a template
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering unit however should remove them all).
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* journald: optionally, log debug messages to /run but everything else to /var
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* systemctl list-unit-files should list generated files (and probably with a new state "generated" for them, or so)
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* journald: when we drop syslog messages because the syslog socket is
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering full, make sure to write how many messages are lost as first thing
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering to syslog when it works again.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* man: the documentation of Restart= currently is very misleading and suggests the tools from ExecStartPre= might get restarted.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* load .d/*.conf dropins for device units
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* add a fixed dbus path for "my own unit", "my own session", ... to PID1, logind, ...
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* service_coldplug() appears to reinstall the wrong stop timeout watch?
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* transient units: allow creating auxiliary units with the same call
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* how to reset dynamically changed attributes sanely?
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* when reloading configuration, apply new cgroup configuration
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* journald: make sure ratelimit is actually really per-service with the new cgroup changes
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* libsystemd-logind: sd_session_is_active() and friends: verify
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering validity of session name before appending it to a path
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* gparted needs to disable auto-activation of mount units somehow, or
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering maybe we should stop doing auto-activation of this after boot
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering entirely. https://bugzilla.gnome.org/show_bug.cgi?id=701676
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering Maybe take a BSD lock at the disk device node and teach udev to
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering check for that and suppress event handling.
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering* when recursively showing the cgroup hierarchy, optionally also show
a6278b88305b237b02eabff0d870b57fe851822dLennart Poettering the hierarchies of child processes
* document logic of auto/noauto and fail/nofail in fstab in systemd.mount or systemd-fstab-generator man page
* document systemd-journal-flush.service properly
* Introduce a way how we can kill the main process of a service with KillSignal, but all processes with SIGKILL later on
* dbus: when a unit failed to load (i.e. is in UNIT_ERROR state), we
* add a pam module that passes the hdd passphrase into the PAM stack and then expires it, for usage by gdm auto-login.
* maybe add a generator that looks for "systemd.run=" on the kernel cmdline for container usercases...
* timedatctl, localectl: possibly make some commands work without the daemon, for chroot situations...
* logind: add Suspend() bus calls which take timestamps to fix double suspend issues when somebody hits suspend and closes laptop quickly.
* systemctl delete x.snapshot leaves no trace in logs (at least at default level).
* systemd-inhibit: make taking delay locks useful: support sending SIGINT or SIGTERM on PrepareForSleep()
* journal-or-kmsg is currently broken? See reverted commit 4a01181e460686d8b4a543b1dfa7f77c9e3c5ab8.
* remove any syslog support from log.c -- we probably can't do this before split-off udev is gone for good
* documentation: recommend to connect the timer units of a service to the service via Also= in [Install]
* man: extend runlevel(8) to mention that runlevels suck, and are dead. Maybe add runlevel(7) with a note about that too
* think about window-manager-run-as-user-service problem: exit 0 → activate shutdown.target; exit != 0 → restart service
* timedate: have global on/off switches for auto-time (NTP), and auto-timezone that connman can subscribe to.
* dev-setup.c: when running in a container, create a tiny stub udev
- change bootctl to be backed by systemd-bootd to control temporary and persistent default boot goal plus efi variables
* fstab: add new mount option x-systemd-after=/foobar/waldo to allow manual dependencies to other mount points
* print a nicer explanation if people use variable/specifier expansion in ExecStart= for the first word
* mount: turn dependency information from /proc/self/mountinfo into dependency information between systemd units.
- logind: optionally, ignore idle-hint logic for autosuspend, block suspend as long as a session is around
- When we update the kernel all kind of hibernation should be prohibited until shutdown/reboot
- logind: wakelock/opportunistic suspend support
- pam: when leaving a session explicitly exclude the ReleaseSession() caller process from the killing spree
- we should probably handle SIGTERM/SIGINT to not leave dot files around, just in case
* exec: when deinitializating a tty device fix the perms and group, too, not only when initializing. Set access mode/gid to 0620/tty.
* DeviceAllow/DeviceDeny: disallow everything by default, but whitelist /dev/zero, /dev/null and friends
- do not use magic msync() in src/journal/journal-file.c, just call fsync()
- journal: when waiting for journal additions in the client always sleep at least 1s or so, in order to minimize wakeups
- add API to close/reopen/get fd for journal client fd in libsystemd-journal.
- fallback to /dev/log based logging in libsystemd-journal, if we can't log natively?
- check if we can make journalctl by default use --follow mode inside of less if called without args?
- journal: add a setgid "systemd-journal" utility to invoke from libsystemd-journal, which passes fds via STDOUT and does PK access
- journactl: support negative filtering, i.e. FOOBAR!="waldo",
- journal: when rotating, copy over old acls/access mode
- journal: send out marker messages every now and then, and immediately sync with fdatasync() afterwards, in order to have hourly guaranteed syncs.
- journal-send.c, log.c: when the log socket is clogged, and we drop, count this and write a message about this when it gets unclogged again.
- journal: sanely deal with entries which are larger than the individual file size, but where the components would fit
- man: clarify that time-sync.target is not only sysv compat but also useful otherwise. Same for similar targets
- print nice message from systemctl --failed if there are no entries shown, and hook that into ExecStartPre of rescue.service/emergency.service
- add new command to systemctl: "systemctl system-reexec" which reexecs as many daemons as virtually possible
- systemctl enable: improve the success messages (i.e. more human readable, less shell-like)
- systemctl enable: fail if target to alias into doesn't exist? maybe show how many units are enabled afterwards?
* introduce ntp.service (or suchlike) as symlink that is used to arbitrate between various NTP implementations
* deal with sendmail/postfix exclusivity
- DST/timezone changes && ntp is active && RTC-in-localtime (never do it without ntp)
logs-show.c. Alternatively: use libelfutil, which seems to be the
* If we show an error about a unit (such as not showing up) and it has no Description string, then show a description string generated form the reverse of unit_name_mangle().
* clean up date formatting and parsing so that all absolute/relative timestamps we format can also be parsed
* on shutdown: move utmp, wall, audit logic all into PID 1 (or logind?), get rid of systemd-update-utmp-runlevel
- instructions shipped by packages and stored in /usr/lib/
* hostnamed: before returning information from /etc/machine-info.conf check the modification data and reread. Similar for localed, ...
* currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab isn't
* refuse boot if /etc/machine-id is not useful (or set taint?)
lxc.network.type=phys mode, and pass through entire network
- nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters, selinux exec context
- support rd.luks.allow-discards= kernel cmdline params in cryptsetup generator
* after deserializing sockets in socket.c we should reapply sockopts and things
* come up with a nice way to write queue/read_ahead_kb for a block device without interfering with readahead
* move PID 1 segfaults to /var/lib/systemd/coredump?
* create /sbin/init symlinks from the build system
* system.conf should have controls for cgroups
* properly handle loop back mounts via fstab, especially regards to fsck/passno
* initialize the hostname from the fs label of /, if /etc/hostname does not exist?
* when breaking cycles drop sysv services first, then services from /run, then from /etc, then from /usr
* services which create their own subcgroups break cgroup-empty notification (needs to be fixed in the kernel)
* ExecOnFailure=/usr/bin/foo
- remove src/udev/udev-builtin-firmware.c (CONFIG_FW_LOADER_USER_HELPER=n)
- add trigger --subsystem-match=usb/usb_device device
* when a service has the same env var set twice we actually store it twice and return that in systemctl show -p... We should only show the last setting
* add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/
* save coredump in Windows/Mozilla minidump format
* support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting)
* default to actual 32bit PIDs, via /proc/sys/kernel/pid_max
* when a bus name of a service disappears from the bus make sure to queue further activation requests
* hide PAM/TCPWrap options in fragment parser when compile time disabled
* support sd_notify() style notification when reload begins (RELOADING=1), reload is finished (READY=1), and add ReloadSignal= then to use in combination
* support sd_notify() style notification when shutting down, to make auto-exit bus services work (STOPPING=1)
- readahead: make use of EXT4_IOC_MOVE_EXT, as used by http://e4rat.sourceforge.net/
* add support for /bin/mount -s
- init=/bin/sh vs. "emergency" mode, vs. "rescue" mode, vs. "multi-user" mode, vs. "graphical" mode, and the debug shell
- hooking a script into various stages of shutdown/rearly booot
* support systemd.mask= on the kernel command line.
* port over to LISTEN_FDS/LISTEN_PID:
- rpcbind (/var/run/rpcbind.sock!) HAVEPATCH
- libvirtd (/var/run/libvirt/libvirt-sock-ro)
- add documentation to systemd.daemon
- allow specification of socket mode/umask when allocating DBusServer
- teach dbus to activate all services it finds in /etc/systemd/services/org-*.service
* dbus upstream still refers to dbus.target and shouldn't
* /usr/bin/service should actually show the new command line
* fedora: suggest auto-restart on failure, but not on success and not on coredump. also, ask people to think about changing the start limit logic. Also point people to RestartPreventExitStatus=, SuccessExitStatus=
* fedora: F20: go timer units all the way, leave cron.daily for cron
* fedora: update policy to declare access mode and ownership of unit files to root:root 0644, and add an rpmlint check for it
* set_put(), hashmap_put() return values check. i.e. == 0 doesn't free()!