1c0216696a
sd-bus: fix typo
2015-01-23 03:00:15 +01:00
934277fe6a
core: add a property that shows the current memory usage of a unit
...
This is exposed the memory.usage_in_bytes cgroup property on the bus,
and makes "systemctl status" show it in its default output.
2015-01-23 03:00:15 +01:00
da41abc52c
cgroup-show: remove duplicated check
...
After 3637713a20
2015-01-22 20:03:58 -05:00
9ba762cdd7
update TODO
2015-01-23 01:44:14 +01:00
c0534580ac
nspawn: when mounting the cgroup hierarchies, use the exact same mount options for the superblock as the host
...
Otherwise we'll generate kernel runtime warnings about non-matching
mount options.
2015-01-23 01:43:16 +01:00
bbb99c30d0
nspawn: mount /tmp in the container, don't leave this to the container's init
...
We really want /tmp to be properly mounted, especially in containers
that lack CAP_SYS_ADMIN or that are not fully booted up and only get a
shell, hence let's do so in nspawn already.
2015-01-23 01:27:06 +01:00
05e7da5afa
nspawn: allow bind-mounting char and block files
2015-01-23 01:22:55 +01:00
24fdceabbf
update TODO
2015-01-23 01:20:16 +01:00
7079cfeffb
importd: when listing transfers, show progress percentage
...
With this change the pull protocol implementation processes will pass
progress data to importd which then passes this information on via the
bus. We use sd_notify() as generic transport for this communication,
making importd listen to them, while matching the incoming messages to
the right transfer.
2015-01-23 01:17:55 +01:00
a92ccc5ba2
importd: fix bus policy
2015-01-23 01:17:55 +01:00
56e6c2abb8
machinectl: fix handling of --verify= argument for dkr downloads
2015-01-23 01:17:55 +01:00
6cd37a5e59
sd-bus: fix handling of double parameters in sd_bus_message_append()
...
We really need to use va_arg() with the right type here as uint64_t and
double might have the same size, but are passed differently as
arguments.
2015-01-23 01:17:55 +01:00
e026c242af
import: we need CAP_DAC_OVERRIDE for untarring systems after all
2015-01-23 01:17:55 +01:00
d875aa8ce1
core: zero size notify messages are OK
2015-01-23 01:17:55 +01:00
0c0cdb06c1
tests: use assert_se instead of assert
...
Otherwise they can be optimized away with -DNDEBUG
2015-01-22 23:10:56 +01:00
714af6af8a
po: update french translation
2015-01-22 22:44:41 +01:00
06d99637b8
catalog: update french translation
2015-01-22 22:44:41 +01:00
9b0374e954
man: fix typos
2015-01-22 22:44:07 +01:00
5bac523593
sd-dhcp-client: use RFC4361-complient ClientID by default
...
In addition to the benefits listed in the RFC, this allows DHCP to work also in
case several interfaces share the same MAC address on the same link (IPVLAN).
Note that this will make the ClientID (so probably the assigned IP address)
change on upgrades. If it is desired to avoid that we would have to remember and
write back the ID (which the library supports, but networkd currently does not).
2015-01-22 21:29:42 +01:00
4086286641
dhcp-identifier: create IAID even if no udev device can be found
...
This is useful for testing.
2015-01-22 21:29:42 +01:00
b16492f86f
networkd: Introduce ip6gre and ip6gretap
...
This patch introduces ipv6 gre and gretap.
test:
ip6gre.netdev:
[NetDev]
Name=ip6gretap
Kind=ip6gretap
[Tunnel]
Local=2a00:ffde:4567:edde::4987
Remote=2001:473:fece:cafe::5179
ip6gre.network:
[Match]
Name=eno16777736
[Network]
Tunnel=ip6gretap
ip link
6: ip6gre@eno16777736: <POINTOPOINT,NOARP> mtu 1448 qdisc noop state
DOWN mode DEFAULT group default
link/gre6 2a:00:ff🇩🇪 45:67:ed🇩🇪 00:00:00:00:00:00:49:87 peer
20:01:04:73:fe:ce:ca:fe:00:00:00:00:00:00:51:79
2015-01-22 21:29:42 +01:00
855ee1a1d2
networkd: Introduce IP6 tunnel
...
This patch enables networkd to create IP6 tunnels
example conf:
ipip6.netdev:
[NetDev]
Name=ipip6-tunnel
Kind=ip6tnl
[Tunnel]
Mode=ip4ipv6
Local=2a00:ffde:4567:edde::4987
Remote=2001:473:fece:cafe::5179
ipip6.network
[Match]
Name=wlan0
[Network]
Tunnel=ipip6-tunnel
23: ipip6-tunnel@wlan0: <POINTOPOINT,NOARP> mtu 1452 qdisc noop state
DOWN mode DEFAULT group default
link/tunnel6 2a00:ffde:4567:edde::4987 peer 2001:473:fece:cafe::5179
2015-01-22 21:29:42 +01:00
1af2536acf
networkd: introduce gretap
...
This patch introdeces gretap to networkd
2015-01-22 21:29:41 +01:00
34109a531f
update TODO
2015-01-22 18:55:30 +01:00
e57565dd5b
importd: run daemon at minimal capabilities
2015-01-22 18:55:08 +01:00
3637713a20
cgroup-show: don't hit assert, when the extra pids array is empty
2015-01-22 18:54:48 +01:00
57d8a552af
importd: fix path to download binary
2015-01-22 18:38:51 +01:00
7315edd36a
import: lock tar into its own private network namespace
...
That way it cannot get access to the network
2015-01-22 18:19:58 +01:00
2c140ded48
import: drop all capabilities when invoking tar
2015-01-22 18:12:31 +01:00
a8683176ee
update TODO
2015-01-22 17:50:50 +01:00
b9a5f8588f
import: only define the _to_string() enum mapping function, thus making gcc shut up
2015-01-22 17:50:50 +01:00
aa9bd4992f
import: now that the worker binary is called "systemd-pull" we can shorten the verbs
...
Atfer all "systemd-pull pull-tar" is unnecessarily redundant, over
"systemd-pull tar"...
2015-01-22 17:50:50 +01:00
ff828763c4
importd: try to minimize confusion by renaming "systemd-import" binary to "systemd-pull"
...
This way "systemd-importd" is the daemon that uses "systemd-pull" as
backend worker.
2015-01-22 17:50:50 +01:00
6adf7b5e46
machinectl: when downloading an image, clarify that C-c will not cancel the download, but continue it in the background
2015-01-22 17:50:50 +01:00
813c65c34b
machinectl: minor simplification
2015-01-22 17:50:50 +01:00
6e18cc9fa0
machinectl: parse verify setting client-side
2015-01-22 17:50:50 +01:00
09d46cfd41
importd: minor log improvements
2015-01-22 17:50:50 +01:00
1c49d1ba85
import: make the user verficiation keyring override the vendor keyring, instead of extending it
...
This way the user has the ability to remove keys from the
vendor-supplied keyring if he intends so.
2015-01-22 17:50:50 +01:00
8dbce34b03
logind: fix sd_eviocrevoke ioctl call
...
If the third argument is non-null, the kernel will always error out with
EINVAL and devices won't get revoked.
Reported-by: Benjamin Tissoires <benjamin.tissoires@gmail.com>
Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
2015-01-22 10:53:29 -05:00
b5b38b41c3
machinectl: various minor updates to the --help text
2015-01-22 15:14:36 +01:00
7f444afa1b
import: rename --verify=sum to --verify=checksum
...
This is how we call it internally, and also a bit more descriptive.
2015-01-22 15:14:36 +01:00
e0ea94c1e2
man: document new download magic
2015-01-22 15:14:36 +01:00
838d5f0298
import: add org.freedesktop.import1.policy.in to POTFILES.in
...
https://bugs.freedesktop.org/show_bug.cgi?id=88705
2015-01-22 09:02:33 -05:00
534644b7be
kbd-model-map: add more mappings for Slovak, Lithuanian, and Khmer
...
https://bugs.freedesktop.org/show_bug.cgi?id=88545
2015-01-22 01:14:54 -05:00
25b47f96d9
Use eurlatgr as the example console font
...
See https://fedoraproject.org/wiki/Changes/NewDefaultConsoleFont
https://bugzilla.redhat.com/show_bug.cgi?id=1182529
2015-01-22 01:14:53 -05:00
0814f65ec6
sysv-generator: only allow regular files in enumerate_sysv()
...
Otherwise, if the directory contains other directories we fail
at fopen in load_sysv() with EISDIR.
2015-01-22 01:14:53 -05:00
3a5afdec90
build: export symbols to integrate mainloops
2015-01-22 01:14:53 -05:00
614cc34f3a
TODO: tmpfiles
2015-01-22 01:14:53 -05:00
dd4105b0a9
shared/acl-util: add mask only when needed, always add base ACLs
...
For ACLs to be valid, a set of entries for user, group, and other
must be always present. Always add those entries.
While at it, only add the mask ACL if it is actually required, i.e.
when at least on ACL for non-owner group or user exists.
2015-01-22 01:14:53 -05:00
a48a62a1af
tmpfiles: use ACL magic on journal directories
2015-01-22 01:14:53 -05:00
Lennart Poettering