Commit Graph

203 Commits

Author SHA1 Message Date
Mike Gilbert 9c7f7d86f8 README: document dependency on kernel crypto/hash API (#5457)
The hmac and sha256 algorithms are used in sd-id128.

Closes: https://github.com/systemd/systemd/issues/5454
Closes: https://github.com/systemd/systemd/issues/5455
2017-02-25 22:42:27 -05:00
AsciiWolf c6749ba52c NEWS, README: use www prefix in freedesktop.org URLs 2017-02-21 18:26:23 +01:00
AsciiWolf 19d9372b60 README, README.md: use https:// in URLs 2017-02-21 15:56:04 +01:00
Lennart Poettering c8c13d35c6 Merge pull request #5319 from keszybz/test-execute
test-execute without capsh
2017-02-13 15:29:40 +01:00
Michael Shields 501bf2d5d2 It's now ok to use Google NTP servers (#5311) 2017-02-12 00:30:40 -05:00
Zbigniew Jędrzejewski-Szmek e94681ad15 README: document capsh's usefulness 2017-02-12 00:26:19 -05:00
Lennart Poettering 0ca48bb0e8 README: suffix unit file options with "=" 2017-02-06 21:13:29 +01:00
Lucas Werkmeister 87fe170749 README: document CONFIG_USER_NS requirement for PrivateUsers (#5140) 2017-01-23 21:18:07 -05:00
Mike Gilbert ecf4f0a8de build-sys: revert dbus >= 1.9.18 requirement (#4924)
Instead, document the necessary step to utilize older dbus versions.
2016-12-20 10:53:53 +01:00
Zbigniew Jędrzejewski-Szmek 52b2f6b35d README: bump dbus dep
We should also mention this in NEWS before release. Suggested text:
> DBus policy files are now installed into /usr rather than /etc. Make sure
> your system has dbus = 1.9.18 running before upgrading to this version, or
> override the install path with --with-dbuspolicydir=
2016-12-17 09:26:44 -05:00
Zbigniew Jędrzejewski-Szmek a2fc3d87fb README: list dependencies for testing
Fixes #4365.
2016-10-17 16:54:27 +00:00
hbrueckner 6abfd30372 seccomp: add support for the s390 architecture (#4287)
Add seccomp support for the s390 architecture (31-bit and 64-bit)
to systemd.

This requires libseccomp >= 2.3.1.
2016-10-05 13:58:55 +02:00
Felipe Sateler fd74fa791f README: document that CONFIG_SECCOMP_FILTER is required for SECCOMP support 2016-09-06 20:25:49 -03:00
Lennart Poettering 409093fe10 nss: add new "nss-systemd" NSS module for mapping dynamic users
With this NSS module all dynamic service users will be resolvable via NSS like
any real user.
2016-07-22 15:53:45 +02:00
Lennart Poettering d5bd92bbbe README: document that we only support util-linux built with --enable-libmount-force-mountinfo
Fixes: #2978
2016-04-12 13:43:33 +02:00
Zbigniew Jędrzejewski-Szmek 58015d7815 README: bump kernel version to 3.12
It is required for %P is sysctl kernel.core_pattern.

Fixes #2800.
2016-03-05 11:22:45 -05:00
Daniel Mack 232c84b2d2 Remove systemd-bootchart
This commit rips out systemd-bootchart. It will be given a new home, outside
of the systemd repository. The code itself isn't actually specific to
systemd and can be used without systemd even, so let's put it somewhere
else.
2016-02-23 13:30:09 +01:00
Daniel Mack 798c486fbc remove bus-proxyd
As kdbus won't land in the anticipated way, the bus-proxy is not needed in
its current form. It can be resurrected at any time thanks to the history,
but for now, let's remove it from the sources. If we'll have a similar tool
in the future, it will look quite differently anyway.

Note that stdio-bridge is still available. It was restored from a version
prior to f252ff17, and refactored to make use of the current APIs.
2016-02-12 19:10:01 +01:00
Lennart Poettering 888e378da2 coredump: dump priviliges when processing system coredumps
Let's add an extra-safety net and change UID/GID to the "systemd-coredump" user when processing coredumps from system
user. For coredumps of normal users we keep the current logic of processing the coredumps from the user id the coredump
was created under.

Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=87354
2016-02-10 16:09:24 +01:00
Lennart Poettering 0aa5f6983f README: drop link to systemd-commits ML
Since we moved to github the commits ML is basically dead, hence don't advertise it anymore.
2016-01-25 17:19:19 +01:00
Evgeny Vereshchagin 75f63f0640 README, tests: remove /etc/mtab
This is a followup for 1d40ddb
2016-01-14 00:11:07 +00:00
Lennart Poettering ada64a0cff README: Recommend kinvolk regarding engineering services
They are our friends, do systemd development, hence add them.
2015-12-10 11:57:08 +01:00
Martin Pitt 1d40ddbfd3 core: drop check for /etc/mtab
util-linux 2.27.1 now entirely stops looking at /etc/mtab, so we don't need to
verify /etc/mtab during early boot any more. Later on, tmpfiles.d/etc.conf will
fix /etc/mtab anyway, so there's not even a point in warning about it.

Drop test_mtab() and bump the util-linux dependency to >= 2.17.1.

Fixes #1495
2015-11-02 10:05:20 -06:00
Karel Zak d379d44255 mount: use libmount to monitor mountinfo & utab
The current implementation directly monitor /proc/self/mountinfo and
/run/mount/utab files. It's really not optimal because utab file is
private libmount stuff without any official guaranteed semantic.

The libmount since v2.26 provides API to monitor mount kernel &
userspace changes and since v2.27 the monitor is usable for
non-root users too.

This patch replaces the current implementation with libmount based
solution.

Signed-off-by: Karel Zak <kzak@redhat.com>
2015-09-14 09:12:31 +02:00
Michael Biebl 45096d27d3 README: remove obsolete instructions regarding python-systemd/sphinx 2015-09-09 23:10:34 +02:00
Daniel Mack 37b76fd3ee README: document new /etc/mtab requirement 2015-09-09 15:27:56 +02:00
Lennart Poettering a0c3e16b7b README: bump minimal required kernel version
We generally try to support 2y old kernels, which allows us bump the
minimal required version to 3.11 now.

Also, clarify that support for the unified cgroup hierarchy requires 4.2
or newer.
2015-09-06 15:58:20 +02:00
Lennart Poettering d1584b9f5b README: drop reference to Endocode
Chris Kühl does not work at Endocode anymore, the contact data is no
longer valid.
2015-08-16 21:06:42 +02:00
Tom Gundersen fdbbf0eeda Merge pull request #554 from poettering/ntp-pool
build-sys: warn if people don't change the default NTP servers when b…
2015-07-12 11:43:51 +02:00
Lennart Poettering f4e74be185 README: document that RT group sched should be turned off
https://bugs.freedesktop.org/show_bug.cgi?id=87570
https://bugzilla.redhat.com/show_bug.cgi?id=1229700
2015-07-11 14:49:22 -03:00
Lennart Poettering 2ed3de9cc4 build-sys: warn if people don't change the default NTP servers when building systemd
Also, explain the situation in the docs.

Relates to #437
2015-07-11 14:24:29 -03:00
Kay Sievers 82627069e9 README: mention "git archive" 2015-06-23 13:41:15 +02:00
Kay Sievers a095315b3c build-sys: split internal basic/ library from shared/
basic/      can be used by everything
            cannot use anything outside of basic/

libsystemd/ can use basic/
            cannot use shared/

shared/     can use libsystemd/
2015-06-11 10:52:46 +02:00
Marc-Antoine Perennou c7b13c64b3 build-sys: drop references to gobject-introspection
It has been removed alongside gudev
2015-06-03 17:26:59 +02:00
Kay Sievers 29d01b7064 point to github issues instead of freedesktop bugzilla 2015-06-03 14:48:55 +02:00
Jonathan Boulle eb0914fc85 README: update links to reference new home (GitHub) 2015-06-02 15:57:50 -07:00
Kay Sievers 2375607039 remove gudev and gtk-doc
The library moved to:
  https://git.gnome.org/browse/libgudev/
2015-06-03 00:22:53 +02:00
Ronny Chevalier 8f42ccd24b README: fix typo 2015-05-30 11:19:35 +02:00
Martin Pitt 0f0467e63b systemctl: drop hardcoded chkconfig invocation
Introduce /usr/lib/systemd/systemd-sysv-install [--root=] <action> <name>
abstraction, replacing the direct calling of chkconfig. This allows
distributions to call their specific tools like update-rc.d without patching
systemd.

Ship systemd-sysv-install.SKELETON as an example for packagers how to implement
this.

Drop the --enable-chkconfig configure option.

Document this in README and point to it in NEWS.
2015-05-28 19:42:45 +02:00
Karel Zak bf1d7ba70a swap: use swapon -o
This patch simplify swapon usage in systemd. The command swapon(8)
since util-linux v2.26 supports "-o <list>". The idea is exactly the
same like for mount(8). The -o specifies options in fstab-compatible
way. For systemd it means that it does not have to care about things
like "discard" or another swapon specific options.

        swapon -o <options-from-fstab>

For backward compatibility the code cares about "Priority:" swap unit
field (for a case when Priority: is set, but pri= in the Options: is
missing).

References: http://lists.freedesktop.org/archives/systemd-devel/2014-October/023576.html
2015-05-25 17:06:15 +02:00
Lennart Poettering 3b920d78b4 README: document that we prefer if CONFIG_CHECKPOINT_RESTORE is turned on, for the kcmp() syscall 2015-05-18 16:35:24 +02:00
Łukasz Stelmach 3dd26f3e3a README: glibc version 2.16 is required for IP_UNICAST_IF
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=be08eda5
https://bugs.gentoo.org/show_bug.cgi?id=546194
2015-04-11 12:19:10 +02:00
Zbigniew Jędrzejewski-Szmek a6cccd8f58 README: mention ACLs more
They are now useful for any fs used for journal storage.
2015-03-03 11:04:43 -05:00
Peter Waller f4e5354a1d README: add pkg-config to required deps for autogen
Otherwise, several macros are undefined.
2015-02-20 15:38:54 -08:00
Zbigniew Jędrzejewski-Szmek a48a62a1af tmpfiles: use ACL magic on journal directories 2015-01-22 01:14:53 -05:00
Zbigniew Jędrzejewski-Szmek b52a4a3b05 README: CONFIG_DEVPTS_MULTIPLE_INSTANCES is necessary
https://bugs.debian.org/773932
2014-12-30 18:39:51 -05:00
Gabriel de Perthuis d47f6ca5f9 blkid: Warn when rejecting a superblock with a bad csum
Bump libblkid requirement from 2.20 to 2.24.
util-linux 2.25 is actually required since fdbbad981c
2014-12-14 12:54:17 -05:00
WaLyong Cho 0acd5a08f5 README: notice kernel config for CPUQuota 2014-11-28 21:16:52 -05:00
Chris Leech 8d3ae2bd4c mount: use libmount to enumerate /proc/self/mountinfo
This lets libmount add in user options from /run/mount/utab, like
_netdev which is needed to get proper ordering against remote-fs.target
2014-11-28 14:30:50 -05:00
Lennart Poettering 2b671e9560 README: mention that engineering services for systemd are available from endocode 2014-11-06 15:27:13 +01:00
Ronny Chevalier cb607ecb84 remove references of readahead 2014-10-31 10:57:21 +01:00
Lennart Poettering fdbbad981c README: simplify documented dependency on util-linux
we stritcly require features from util-linux v2.25, such a new version
is not optional, hence document this.
2014-10-22 12:37:08 +02:00
Karel Zak 48d3e8d07f fsck: re-enable fsck -l
The -l (lock) has been temporary disabled due to conflict with
udev (https://bugs.freedesktop.org/show_bug.cgi?id=79576)

The problem is fixed since util-linux v2.25 (Jul 2014).
2014-10-22 11:45:36 +02:00
Kay Sievers be2ea723b1 udev: remove userspace firmware loading support 2014-08-30 11:34:20 +02:00
Lennart Poettering f9ffbca2fb README: mention the new optional libidn dependency 2014-08-20 00:18:14 +02:00
Lennart Poettering a4a79605f7 README: document what to do with the NSS modules 2014-08-19 21:58:48 +02:00
Zbigniew Jędrzejewski-Szmek a509e0e694 README: add liblz4 2014-07-07 18:36:55 -04:00
Jan Engelhardt 8d0e0ddda6 doc: grammatical corrections 2014-06-28 00:06:30 -04:00
Lennart Poettering 5b244719ab README: mention that elfutils is an (optional) dependency now 2014-06-23 12:42:17 +02:00
Zbigniew Jędrzejewski-Szmek a900b827d4 README: add gobject-introspection 2014-06-22 15:30:28 -04:00
Cristian Rodríguez cc219d7bab Remove libattr mentions from README
It is no longer required.
2014-06-20 20:22:05 +02:00
Kay Sievers 3dff3e00e0 udev: assign group "input" to all input devices 2014-06-12 14:59:53 +02:00
Umut Tezduyar Lindskog a21b4670d4 doc: specify kernel configs for cpushares 2014-06-11 12:30:29 +02:00
Kay Sievers f31cf2b6d0 udev: stop using "floppy" group 2014-06-11 11:20:55 +02:00
Lennart Poettering 323a2f0b4b README: mention new required user systemd-bus-proxy 2014-06-04 11:24:12 +02:00
Tom Gundersen 682265d5e2 resolved: run as unpriviliged "systemd-resolve" user
This service is not yet network facing, but let's prepare nonetheless.
Currently all caps are dropped, but some may need to be kept in the
future.
2014-06-03 10:40:28 +02:00
Lennart Poettering e15007bc0e README: document the new "systemd-network" user we require for systemd-networkd 2014-06-01 09:35:19 +02:00
Nis Martensen f1721625e7 fix spelling of privilege 2014-05-19 00:40:44 +09:00
Lennart Poettering a349eb10d3 timesyncd: run timesyncd as unpriviliged user "systemd-timesync" (but still with CAP_SYS_TIME) 2014-05-18 20:52:49 +09:00
Jan Engelhardt b8bde11658 doc: comma placement corrections and word order
Set commas where there should be some.
Some improvements to word order.
2014-05-07 20:13:27 -04:00
Jan Engelhardt 70a44afee3 doc: typographical fine tuning 2014-05-06 23:05:39 +02:00
Jan Engelhardt d28315e4af doc: use non-contracted forms in written documents 2014-05-06 23:05:09 +02:00
Mike Gilbert 13468826f2 Document CONFIG_NET_NS as a required kernel option
Several units now utilize the PrivateNetwork parameter, which requires
network namespace support.
2014-04-09 11:21:16 +02:00
Lennart Poettering 7f8aa67131 core: remove tcpwrap support
tcpwrap is legacy code, that is barely maintained upstream. It's APIs
are awful, and the feature set it exposes (such as DNS and IDENT
access control) questionnable. We should not support this natively in
systemd.

Hence, let's remove the code. If people want to continue making use of
this, they can do so by plugging in "tcpd" for the processes they start.
With that scheme things are as well or badly supported as they were from
traditional inetd, hence no functionality is really lost.
2014-03-24 20:07:42 +01:00
Kay Sievers 23aedd0294 README: update 2014-03-22 18:28:47 +01:00
Thomas Bächler f33016ff8b README: Correct EFI requirements
systemd does not need or use CONFIG_EFI_VARS anywhere, this should
be CONFIG_EFIVAR_FS instead.
2014-03-22 18:22:52 +01:00
Lennart Poettering a7b1c3971a README: document that we still encourage people to turn off audit when they want to use containers 2014-03-11 05:40:36 +01:00
Lennart Poettering 47bc23c18c README: document that /var/run must be a symlink → /run 2014-02-26 02:54:37 +01:00
Kay Sievers 952d1536f4 sd-damon is LGPL now 2014-02-19 18:23:14 +01:00
Kay Sievers 5d31974e44 README: mention libudev's requirement 2014-02-15 17:21:49 +01:00
Ronny Chevalier c0467cf387 syscallfilter: port to libseccomp 2014-02-12 18:30:36 +01:00
Zbigniew Jędrzejewski-Szmek 32dcef3ab1 build-sys: make lxml required when generating indices
Since the manpage indices generated without lxml would be missing some
parts, it doesn't make sense to keep lxml optional anymore.
2014-02-12 03:04:57 -05:00
Zbigniew Jędrzejewski-Szmek 39c4ead232 build-sys: default to gold linker
gold doesn't exhibit the problems with linking of compatibility
libraries.

It is also slightly faster:

make clean && make -j5   bfd       gold

real                   34.885s     33.707s
user                   34.486s     32.189s
sys                    9.929s      10.845s

real                   35.128s     33.508s
user                   34.660s     31.858s
sys                    10.798s     10.341s

real                   35.405s     33.748s
user                   34.765s     32.384s
sys                    11.635s     10.998s

real                   35.250s     33.795s
user                   34.704s     32.253s
sys                    11.220s     11.469s

touch src/libsystemd/sd-bus.c && make -j5
                        bfd        gold

real                   10.224s      9.030s
user                   11.664s      9.877s
sys                    3.431s       2.878s

real                   10.021s      9.165s
user                   11.526s      9.990s
sys                    3.061s       3.015s

real                   10.233s      8.961s
user                   11.657s      9.973s
sys                    3.467s       2.202s

real                   10.160s      9.086s
user                   11.637s      9.950s
sys                    3.188s       2.859s
2014-01-25 18:10:08 -05:00
Kay Sievers c2cb7cbbd5 README: list CONFIG_FHANDLE in main section 2014-01-14 22:59:07 +08:00
Umut Tezduyar Lindskog 0018092829 readme: CONFIG_FHANDLE is a requirement 2014-01-14 22:59:07 +08:00
Lennart Poettering b67f541f13 bus: switch kdbus bloom filter over to SipHash (from MurmurHash3)
Let's try to standardize on a single non-cryptographic hash algorithm,
and for that SipHash appears to be the best answer.

With this change there are two other hash functions left in systemd: an
older version of MurmurHash embedded into libudev for the bloom filters
in udev messages (which is hard to update, given that the we probably
should stay compatible with older versions of the library). And lookup3
in the journal files (which we could replace for new files, but which is
probably not worth the work).
2013-12-23 04:20:55 +01:00
Kay Sievers 57d0e6b273 libudev: ship the original MurmurHash2.[ch] file 2013-12-23 02:55:06 +01:00
Zbigniew Jędrzejewski-Szmek 8be1284842 Update README with test/ requirements 2013-12-10 20:38:33 -05:00
Shawn Landden 06d461ee6f update README to not suggest that systemd works without procfs 2013-12-10 07:40:55 -05:00
Thomas Hindoe Paaboel Andersen a65c89bbb0 README: remove obsolete paragraph about D-Bus 2013-12-04 23:00:05 +01:00
Tom Gundersen df41776d66 TODO: add dbus runtime depedency 2013-11-27 16:50:53 +01:00
Kay Sievers ff70c61b6f TODO: remove dbus requirement 2013-11-27 13:15:10 +01:00
Lukasz Skalski 4ec181a006 updates for TODO and README
* library support for setns() system call was added to glibc
version 2.14 (setns() call is use in src/machine/machinectl.c
and src/libsystemd-bus-container.c)

* utf8 validation call are already exported (via sd-utf8.c file) -
commit - 369c583b3f
2013-11-27 13:14:24 +01:00
Jan Engelhardt 19aadacf92 man: wording and grammar updates
This is a recurring submission and includes corrections to various
issue spotted.
2013-10-21 20:50:46 -04:00
Tom Gundersen a18535d9e1 static-nodes: don't call mkdir
This is no longer necessary with kmod-15. Bump the requirement.
2013-10-17 19:53:44 +02:00
Kay Sievers a5c724b25b README: add SCSI BSG option 2013-09-15 07:29:25 +02:00
Kay Sievers 85424725d1 README: update list of used LICENSEs 2013-08-14 22:59:55 +02:00
Jesper Larsen e946948eff README: Bump to Linux 3.0
Support for writing to cgroup.procs was introduced in 3.0
2013-07-24 12:42:07 +02:00
Michael Biebl f4f8f7b546 README Bump minimum required version of kmod
See edeb68c53f.
2013-07-23 05:02:54 +02:00
Lennart Poettering 77b6e19458 audit: since audit is apparently never going to be fixed for containers tell the user what's going on
Let's try to be helpful to the user and give him a hint what he can do
to make nspawn work with normal OS containers.

https://bugzilla.redhat.com/show_bug.cgi?id=893751
2013-05-10 00:17:36 +02:00