Ninjatrappeur's systemd working tree
Go to file
Zbigniew Jędrzejewski-Szmek 348ced9097 journald: do not free space when disk space runs low
Before, journald would remove journal files until both MaxUse= and
KeepFree= settings would be satisfied. The first one depends (if set
automatically) on the size of the file system and is constant.  But
the second one depends on current use of the file system, and a spike
in disk usage would cause journald to delete journal files, trying to
reach usage which would leave 15% of the disk free. This behaviour is
surprising for the user who doesn't expect his logs to be purged when
disk usage goes above 85%, which on a large disk could be some
gigabytes from being full. In addition attempting to keep 15% free
provides an attack vector where filling the disk sufficiently disposes
of almost all logs.

Instead, obey KeepFree= only as a limit on adding additional files.
When replacing old files with new, ignore KeepFree=. This means that
if journal disk usage reached some high point that at some later point
start to violate the KeepFree= constraint, journald will not add files
to go above this point, but it will stay (slightly) below it. When
journald is restarted, it forgets the previous maximum usage value,
and sets the limit based on the current usage, so if disk remains to
be filled, journald might use one journal-file-size less on each
restart, if restarts happen just after rotation. This seems like a
reasonable compromise between implementation complexity and robustness.
2014-01-11 16:54:59 -05:00
catalog catalog: rename files to specify language in the filename 2013-12-02 22:12:02 -05:00
docs doc: disable gtk-doc test again - you are a really annoying piece of software 2013-03-21 15:07:54 +01:00
hwdb hwdb: Add support for Toshiba Satellite P75-A7200 keyboard 2014-01-11 09:21:22 -05:00
m4 build: check for build/link flags harder 2013-09-16 09:59:16 -05:00
man journald: do not free space when disk space runs low 2014-01-11 16:54:59 -05:00
network network: move configuration to /etc/systemd/network 2013-10-29 14:17:57 +01:00
po catalog,po: add Italian translation 2013-12-01 11:28:04 -05:00
rules rules: drivers - do not reset RUN list 2014-01-03 01:32:03 +01:00
shell-completion Revert "completion: don't offer completions for journalctl -b" 2013-12-26 01:53:07 +01:00
src journald: do not free space when disk space runs low 2014-01-11 16:54:59 -05:00
sysctl.d sysctl: default - add safe sysrq options 2013-03-15 19:30:53 +01:00
test test: wrap $LOOPDEV in quotes 2013-12-10 07:46:21 -05:00
tmpfiles.d tmpfiles: introduce the concept of unsafe operations 2013-12-24 15:48:06 -05:00
units Improve messages about user mode a bit 2014-01-08 22:15:27 -05:00
.dir-locals.el Keep emacs configuration in one configuration file. 2011-03-08 01:53:46 +01:00
.gitattributes git: indicate that tabs are never OK in the systemd tree 2013-10-30 02:25:38 +01:00
.gitignore sd-dns: initial commit 2014-01-11 15:03:25 +00:00
.mailmap Update .mailmap file 2014-01-05 00:43:22 -05:00
.travis.yml test: Make testing work on systems without or old systemd 2013-08-22 00:52:14 -04:00
.vimrc vimrc: disable -fdiagnostics-color output 2013-10-20 04:29:39 +02:00
.ycm_extra_conf.py ycm: autocompose flags from the Makefile 2014-01-11 13:35:43 -05:00
autogen.sh autogen: add shortcut for running scan-build 2013-12-28 22:31:01 +01:00
CODING_STYLE extend CODING_STYLE document a bit 2013-12-09 23:04:05 +01:00
configure.ac configure: use POSIX conformant syntax for test 2014-01-05 11:57:05 -05:00
DISTRO_PORTING man: wording and grammar updates 2013-10-21 20:50:46 -04:00
LICENSE.GPL2 relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00
LICENSE.LGPL2.1 licence: remove references to old FSF address 2012-12-17 11:41:31 +01:00
LICENSE.MIT relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00
make-directive-index.py man: networkd - add documentation 2013-11-10 21:30:18 +01:00
make-man-index.py build-sys,man: use XML entities to substite strings 2013-03-29 20:30:21 -04:00
make-man-rules.py build-sys: add xml sources to EXTRA_DIST 2013-12-21 18:35:27 -05:00
Makefile-man.am man: document label escaping functions 2014-01-07 23:05:30 -05:00
Makefile.am ycm: autocompose flags from the Makefile 2014-01-11 13:35:43 -05:00
NEWS build-ss: prepare new release 2013-10-02 03:02:25 +02:00
README bus: switch kdbus bloom filter over to SipHash (from MurmurHash3) 2013-12-23 04:20:55 +01:00
TODO networkd: use structured logging for links and bridges 2014-01-08 22:15:27 -05:00
xml_helper.py build-sys: force Python to write UTF-8 2013-03-29 20:30:22 -04:00

systemd System and Service Manager

DETAILS:
        http://0pointer.de/blog/projects/systemd.html

WEB SITE:
        http://www.freedesktop.org/wiki/Software/systemd

GIT:
        git://anongit.freedesktop.org/systemd/systemd
        ssh://git.freedesktop.org/git/systemd/systemd

GITWEB:
        http://cgit.freedesktop.org/systemd/systemd

MAILING LIST:
        http://lists.freedesktop.org/mailman/listinfo/systemd-devel
        http://lists.freedesktop.org/mailman/listinfo/systemd-commits

IRC:
        #systemd on irc.freenode.org

BUG REPORTS:
        https://bugs.freedesktop.org/enter_bug.cgi?product=systemd

AUTHOR:
        Lennart Poettering
        Kay Sievers
        ...and many others

LICENSE:
        LGPLv2.1+ for all code
        - except sd-daemon.[ch] and sd-readahead.[ch] which are MIT
        - except src/shared/MurmurHash2.c which is Public Domain
        - except src/shared/siphash24.c which is CC0 Public Domain
        - except src/journal/lookup3.c which is Public Domain
        - except src/udev/* which is (currently still) GPLv2, GPLv2+

REQUIREMENTS:
        Linux kernel >= 3.0
          CONFIG_DEVTMPFS
          CONFIG_CGROUPS (it's OK to disable all controllers)
          CONFIG_INOTIFY_USER
          CONFIG_SIGNALFD
          CONFIG_TIMERFD
          CONFIG_EPOLL
          CONFIG_NET
          CONFIG_SYSFS
          CONFIG_PROC_FS

        Linux kernel >= 3.8 for Smack support

        Udev will fail to work with the legacy layout:
          CONFIG_SYSFS_DEPRECATED=n

        Legacy hotplug slows down the system and confuses udev:
          CONFIG_UEVENT_HELPER_PATH=""

        Userspace firmware loading is deprecated, will go away, and
        sometimes causes problems:
          CONFIG_FW_LOADER_USER_HELPER=n

        Some udev rules and virtualization detection relies on it:
          CONFIG_DMIID

        Mount and bind mount handling might require it:
          CONFIG_FHANDLE

        Support for some SCSI devices serial number retrieval, to
        create additional symlinks in /dev/disk/ and /dev/tape:
          CONFIG_BLK_DEV_BSG

        Optional but strongly recommended:
          CONFIG_IPV6
          CONFIG_AUTOFS4_FS
          CONFIG_TMPFS_POSIX_ACL
          CONFIG_TMPFS_XATTR
          CONFIG_SECCOMP

        For systemd-bootchart, several proc debug interfaces are required:
          CONFIG_SCHEDSTATS
          CONFIG_SCHED_DEBUG

        For UEFI systems:
          CONFIG_EFI_VARS
          CONFIG_EFI_PARTITION

        Note that kernel auditing is broken when used with systemd's
        container code. When using systemd in conjunction with
        containers, please make sure to either turn off auditing at
        runtime using the kernel command line option "audit=0", or
        turn it off at kernel compile time using:
          CONFIG_AUDIT=n

        glibc >= 2.14
        libcap
        libblkid >= 2.20 (from util-linux) (optional)
        libkmod >= 15 (optional)
        PAM >= 1.1.2 (optional)
        libcryptsetup (optional)
        libaudit (optional)
        libacl (optional)
        libattr (optional)
        libselinux (optional)
        liblzma (optional)
        tcpwrappers (optional)
        libgcrypt (optional)
        libqrencode (optional)
        libmicrohttpd (optional)
        libpython (optional)
        make, gcc, and similar tools

        During runtime, you need the following additional
        dependencies:

        util-linux >= v2.19 (requires fsck -l, agetty -s),
                      v2.21 required for tests in test/
        dbus >= 1.4.0 (strictly speaking optional, but recommended)
        sulogin (from util-linux >= 2.22 or sysvinit-tools, optional but recommended,
                 required for tests in test/)
        dracut (optional)
        PolicyKit (optional)

        When building from git, you need the following additional
        dependencies:

        docbook-xsl
        xsltproc
        automake
        autoconf
        libtool
        intltool
        gperf
        gtkdocize (optional)
        python (optional)
        sphinx (optional)
        python-lxml (entirely optional)

        When systemd-hostnamed is used, it is strongly recommended to
        install nss-myhostname to ensure that, in a world of
        dynamically changing hostnames, the hostname stays resolvable
        under all circumstances. In fact, systemd-hostnamed will warn
        if nss-myhostname is not installed.

        To build HTML documentation for python-systemd using sphinx,
        please first install systemd (using 'make install'), and then
        invoke sphinx-build with 'make sphinx-<target>', with <target>
        being 'html' or 'latexpdf'. If using DESTDIR for installation,
        pass the same DESTDIR to 'make sphinx-html' invocation.

USERS AND GROUPS:
        Default udev rules use the following standard system group
        names, which need to be resolvable by getgrnam() at any time,
        even in the very early boot stages, where no other databases
        and network are available:

        tty, dialout, kmem, video, audio, lp, floppy, cdrom, tape, disk

        During runtime, the journal daemon requires the
        "systemd-journal" system group to exist. New journal files will
        be readable by this group (but not writable), which may be used
        to grant specific users read access.

        It is also recommended to grant read access to all journal
        files to the system groups "wheel" and "adm" with a command
        like the following in the post installation script of the
        package:

        # setfacl -nm g:wheel:rx,d:g:wheel:rx,g:adm:rx,d:g:adm:rx /var/log/journal/

        The journal gateway daemon requires the
        "systemd-journal-gateway" system user and group to
        exist. During execution this network facing service will drop
        privileges and assume this uid/gid for security reasons.

WARNINGS:
        systemd will warn you during boot if /etc/mtab is not a
        symlink to /proc/mounts. Please ensure that /etc/mtab is a
        proper symlink.

        systemd will warn you during boot if /usr is on a different
        file system than /. While in systemd itself very little will
        break if /usr is on a separate partition, many of its
        dependencies very likely will break sooner or later in one
        form or another. For example, udev rules tend to refer to
        binaries in /usr, binaries that link to libraries in /usr or
        binaries that refer to data files in /usr. Since these
        breakages are not always directly visible, systemd will warn
        about this, since this kind of file system setup is not really
        supported anymore by the basic set of Linux OS components.

        For more information on this issue consult
        http://freedesktop.org/wiki/Software/systemd/separate-usr-is-broken

        To run systemd under valgrind, compile with VALGRIND defined
        (e.g. ./configure CPPFLAGS='... -DVALGRIND=1'). Otherwise,
        false positives will be triggered by code which violates
        some rules but is actually safe.