1
0
mirror of https://github.com/systemd/systemd synced 2025-10-06 00:13:24 +02:00
Commit Graph

83922 Commits

Author SHA1 Message Date
Felix Pehla
aaa3e6880d shared/bootspec: parse loader.conf options added in v258 2025-09-29 23:14:11 +02:00
Felix Pehla
5fb90fa319 shared/bootspec: parse 'profile' boot entry option
Commit 1e9c9773b9 makes sd-boot recognize
a 'profile' option in a boot loader entry but bootctl and other
components parsing said config do not know about it.

This commit makes the option get parsed correctly and displays it too.
2025-09-29 23:01:12 +02:00
Felix Pehla
4a94a1b83f shared/bootspec: parse 'uki' boot entry option
Commit e2a3d56218 (as part of #36314)
makes sd-boot recognize a 'uki' stanza in a boot loader entry and
uapi-group/specifications@3f2bd8236d adds
it to the BLS, but bootctl and other components parsing said config do
not know about it, leading to the error message
`Unknown line 'uki', ignoring.` when attempting to parse the same entry.

This commit makes it get parsed the same way that that 'efi' is.
2025-09-29 22:59:49 +02:00
kanitha chim
0c0a99599c po: Translated using Weblate (Khmer (Central))
Currently translated at 100.0% (264 of 264 strings)

Co-authored-by: kanitha chim <kchim@redhat.com>
Translate-URL: https://translate.fedoraproject.org/projects/systemd/main/km/
Translation: systemd/main
2025-09-28 20:03:38 +09:00
Felix Pehla
39179ac5fe sd-boot: fix indentation of status output
64376936c7 missed some printf()s when
adjusting indentation.
2025-09-28 09:50:19 +09:00
Yu Watanabe
3e843e9513 time-util: fix using wrong timezone when parsing timestamp (#38876)
This mostly fixes issues workarounded several times, e.g. #28472 and
#35471.
2025-09-28 09:49:10 +09:00
Yu Watanabe
2e966a7c0a bash-completion: systemd-sysext/systemd-confext missing options (#38948) 2025-09-28 09:48:13 +09:00
Luca Boccassi
dbcbe4aa04 vmspawn: try to set up swtpm state for 4K RSA keys support
The next version of swtpm will support RSA4096, but it needs to be called
with a new parameter in order to do so. Try with it first, and if
execution fails, fallback to running without it.

This is especially needed for OBS builds, as the signing key is RSA4096
and cannot be changed by users, so the generated UKIs have RSA4096 signatures
for the pcrsig sections, and swtpm refuses them without the new support.
2025-09-28 00:25:03 +09:00
Mike Yuan
fb10ffc4f4 Various small cleanups (#39155) 2025-09-27 17:22:57 +02:00
Luca Boccassi
463f0a027a Revert "Bump required minimum version of libfido2 to 1.5.0" and add missing def instead
It helps nobody to break compatibility for a missing definition
for printing an error.
Just add the missing definition if not present, as it is already
done for thousands of others from the kernel, glibc, etc.

This partially reverts commit d8b60944f5.
2025-09-27 15:46:13 +02:00
Zbigniew Jędrzejewski-Szmek
4705b7adb8 man/udev_enumerate_new: fix style
Follow-up for 4f4641799e.
2025-09-27 16:28:18 +03:00
Zbigniew Jędrzejewski-Szmek
c3473fdbec ssh-generator: adjust formatting 2025-09-27 16:13:29 +03:00
Zbigniew Jędrzejewski-Szmek
dd80c4a7f6 core/varlink: drop duplicated check
Those are static functions that are only called from manager_varlink_init
which already does the same check.
2025-09-27 16:12:54 +03:00
Zbigniew Jędrzejewski-Szmek
aab2fef516 shared/generator: fix grammar in comment 2025-09-27 16:12:54 +03:00
Zbigniew Jędrzejewski-Szmek
89983335b3 core/cgroup: drop useless wrapper 2025-09-27 16:12:45 +03:00
Daan De Meyer
d15343d561 ethtool-util: several cleanups for applying link settings (#38879) 2025-09-27 14:31:11 +02:00
Yu Watanabe
514fa9d39a time-util: fix issues in parse_timestamp() and optimize performance
Previously, an input string ends with short timezone spec e.g. WET,
was parsed by setting $TZ environment variable to the timezone.
But the timezone might be different from the original local timezone,
thus the result might not follow the timezone change in the original
local timezone.

This makes the check of the short timezone spec with tzname[] earlier,
then it is not necessary to load another timezone file for e.g. WET,
and provides expected time.

This also make it use SAVE_TIMEZONE macro and drop use of forking
process. This makes greatly improve performance when parsing string
that contains timezone different from the current local timezone.

Unfortunately, there is still one corner case that our test fails.
When tzdata is built with rearguard enabled, then at least
Africa/Windhoek timezone does not provide correct time, but time shifted
1 hour from the original.
2025-09-27 11:52:24 +09:00
Yu Watanabe
23407c1806 time-util: introduce parse_gmtoff() helper function 2025-09-27 11:52:24 +09:00
Yu Watanabe
e3f561a624 time-util: introduce SAVE_TIMEZONE macro 2025-09-27 11:51:06 +09:00
Mike Yuan
cb19dbb97f pam_systemd: correct alignment
Follow-up for cf2630acaa
2025-09-27 01:00:50 +02:00
Xarblu
a3ad821b4c shared: add missing alloc-util.h include
Needed for _cleanup_free_
2025-09-26 23:56:11 +01:00
Osama Abdelkader
4f4641799e man: add missing description for udev_enumerate_new functions
Add proper description section for udev_enumerate_new(), udev_enumerate_ref(),
and udev_enumerate_unref() functions. The description matches the source code
comments for consistency.

Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
2025-09-27 04:06:26 +09:00
Michal Sekletar
cf2630acaa pam_systemd: honor session class provided via PAM environment
Replaces #38638

Co-authored-by: Lennart Poettering <lennart@poettering.net>
2025-09-27 04:05:51 +09:00
Pascal Bachor
9b5f1a6112 bash-completion: update systemd-sysext, systemd-confext 2025-09-26 20:20:49 +02:00
Pascal Bachor
b85887ead1 sysext: support --mutable=help 2025-09-26 20:20:31 +02:00
Le_Futuriste
83b5dabb40 docs(boot): fix typo in code block 2025-09-27 00:21:53 +09:00
Yu Watanabe
0f8706915a TEST-64-UDEV-STORAGE: do not use -f/--force option for wipefs
When -f/--force is used, wipefs does not call ioctl(BLKRRPART), hence
the partitions will remain in sysfs. Let's not use the option.

This also makes it use 'udevadm lock' for safety.
2025-09-27 00:18:53 +09:00
Lennart Poettering
cd8a1a8ef7 pam_systemd: downgrade OSC sequence writing at close to LOG_DEBUG
Fixes: #39135
2025-09-26 15:58:55 +02:00
Sebastian Gross
582a1e1877 network-generator: ip: do not fail on ntp value
linux https://www.kernel.org/doc/html/latest/admin-guide/nfs/nfsroot.html
states `ntp0-ip` as parameter to `ip=` command line.

Until now systemd-network-generator would fail if ntp was provided with
-EINVAL due to trailing arguments.

Stay in line with kernel doc and handle ntp value properly.
2025-09-26 21:11:11 +09:00
Yu Watanabe
f6e9e1e304 ethtool-util: drop use of union ethtool_link_usettings
Previously, we shift arrays on read and then shift back on write.
It is inefficient and not necessary.
Let's directly use the buffer that kernel provides as is.
2025-09-26 19:45:58 +09:00
Yu Watanabe
f8606bc54e ethtool-util: fix comment
The very initial implementation sets cmd with zero when the bitmap
length does not match. But, it is fixed by
793cf87de9

Fortunately, our code does not follow the outdated comment, but checks
cmd field correctly.
2025-09-26 19:45:58 +09:00
Yu Watanabe
8a4929c4e4 ethtool-util: rename functions and update log messages 2025-09-26 19:45:58 +09:00
Yu Watanabe
5505c528b9 ethtool-util: drop use of deprecated ETHTOOL_GSET and ETHTOOL_SSET
The methods are deprecated since kernel v4.20,
9b30049535
and they are trivial wrapper of ETHTOOL_GLINKSETTINGS and ETHTOOL_SLINKSETTINGS,
respectively. Hence, the fallback logic is nowadays completely
meaningless. Let's drop them.
2025-09-26 19:45:58 +09:00
Daan De Meyer
4feade85d7 dissect: Add more debug logging (#39125) 2025-09-26 11:53:35 +02:00
Daan De Meyer
f9b46986e1 dissect: Add more debug logging 2025-09-26 11:53:05 +02:00
Daan De Meyer
677785c8f8 ssh-proxy: Add support for per user machined
Let's check both the per user machined and the system machined instead
of only the system machined. We give preference to the per user machined
and fall back to the system machined.
2025-09-26 11:13:32 +02:00
Lennart Poettering
bd4c39a384 mute console kernel log/pid1 status output while firstboot is running (#39101)
This is also preparation for the installer later, split out of #38764.
It makes the experience a lot nicer if our nice little tools aren't
constantly interrupted by log spew from the kernel.

Fixes: #34448
2025-09-26 11:12:24 +02:00
Lennart Poettering
83b6ef9b62 libselinux: turn into dlopen() dep 2025-09-26 11:12:04 +02:00
Lennart Poettering
26cde6f0ce update TODO 2025-09-26 10:03:12 +02:00
Itxaka
1e9c9773b9 Parse a new profile key in Type 1 boot entries
This allows Type 1 entries to take advantage of multiprofile efi files
by allowing the configuration of the profile associated with that entry.

It will now parse the profile key in a Type 1 config to select that
profile when booting that efi file instead of relaying in the cmdline

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-09-26 10:00:43 +02:00
Lennart Poettering
971637c47d firstboot: get rid of pointless strjoina() 2025-09-26 09:43:45 +02:00
Lennart Poettering
82a48eb1db test: add simple test case for mute-console service 2025-09-26 09:42:13 +02:00
Lennart Poettering
2eb0820d86 varlinkctl: send READY=1 for --more calls once we received first reply 2025-09-26 09:42:13 +02:00
Lennart Poettering
0d2cc656c8 firstboot: mute console while running on the console at boot
Fixes: #34448
2025-09-26 09:42:13 +02:00
Lennart Poettering
40e742be3c prompt-util: add client helper for muting the console 2025-09-26 09:42:13 +02:00
Lennart Poettering
ac63a04bd6 mute-console: add simple varlink service that can disable log/status spew to kernel console
For "wizard" style interactive tools it's very annoying if they are
interrupted by kernel log output or PID1's status output. let's add some
infra to disable this temporarily. I decided to implement this as an IPC
service so that we can make this robust: if the client request the
muting dies we can automatically unmute again.

This is hence a tiny varlink service, but it can also be started
directly from the cmdline.
2025-09-26 09:42:13 +02:00
Lennart Poettering
45c04464dc shutdown: move printk changing code int generic code 2025-09-26 09:39:00 +02:00
Daan De Meyer
a93593df2f dissect: Add full stop to debug log messages in dissect_image() 2025-09-26 09:26:06 +02:00
Yu Watanabe
97940e77a9 mkosi: bump fedora from 42 to 43
It seems
- the address sanitizer on fedora 42 reports false-positive, or
- probing partitions in libblkid 2.40.4 has a bug.

Not sure which causes the issue, but anyway the address sanitizer
kills udev-worker when sym_blkid_partition_get_name() is called
in udev-builtin-blkid.c.
```
systemd-udevd[488]: ==488==ERROR: AddressSanitizer: stack-buffer-underflow on address 0x7ffdd716e020 at pc 0x563e3ca66fcb bp 0x7ffdd716d970 sp 0x7ffdd716d968
systemd-udevd[488]: READ of size 8 at 0x7ffdd716e020 thread T0 ((udev-worker))
(snip)
systemd-udevd[488]: HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
systemd-udevd[488]:       (longjmp and C++ exceptions *are* supported)
systemd-udevd[488]: SUMMARY: AddressSanitizer: stack-buffer-underflow (/usr/bin/udevadm+0x187fca) (BuildId: 1fb56dbdf0447aba1185d6e34560b782b76098be)
(snip)
systemd-udevd[488]: Command: (udev-worker)
systemd-udevd[488]: ==488==ABORTING
```

Let's bump fedora from 42 to 43.

Fixes mkosi fedora 42 job failures after c349edfe49.
2025-09-26 09:14:13 +02:00
Anton Tiurin
59d946ee6b networkd: fia xRequiredOperationalStateForOnline serializtion
In integration tests (for example TEST-85-NETWORK-NetworkctlTests)

LINK_OPERSTATE_RANGE_INVALID and required_for_online == -1 are serialized as
```
"RequiredForOnline": "true",
"RequiredOperationalStateForOnline": [null, null]
```
Such link should be reported as required_for_online=False and not
serialize nulls.
2025-09-26 14:55:50 +09:00