Commit Graph

897 Commits

Author SHA256 Message Date
Dominique Leuenberger
65ac557c9c Accepting request 997974 from Base:System
- Import commit 532faa39ebaa6f56e493cc938a91a40df082b74f (merge of v251.4)
  It includes the following fixes:
  - 739d7130cb home: drop conflicted headers (bsc#1202221)
  - 8fe0c12178 glibc: Remove #include <linux/fs.h> to resolve fsconfig_command/mount_attr conflict with glibc 2.36 (bsc#1202221)
  - 0c5b7ee318 udev: allow to execute longer command line (bsc#1201766)
  For a complete list of changes, visit:
  8cd784e925...532faa39eb
- Drop 1001-statx.patch, it's no more needed.

- Add patch 1001-statx.patch based on commit 3657d3a0
  * to resolve conflicts with glibc 2.36 with <linux/fs.h>
  * add dirty hack to get in src/basic/chattr-util.h,
    src/home/homework.h, src/home/homework-fscrypt.c,
    src/home/homed-manager.c, and src/home/homework-mount.c as well
    to avoid that <linux/fs.h> does include <linux/mount.h>

- Enable oomd (bsc#1200456)
  It's part of the experimental sub-package for now.

- Import commit 8cd784e9250b38d20d8e14fccbfb211010283c79 (merge of v251.3)
  For a complete list of changes, visit:
  3291287906...8cd784e925

- Import commit 32912879062bb1595d8498b6f9c77d5acd1dc66a
  111b96ca86 logind: don't delay login for root even if systemd-user-sessions.service is not activated yet (bsc#1195059)

- Enable bpf framework

- When systemd-container is installed install tar/gpg too
  So `machinectl import-tar` always works flawlessly. systemd-container already

OBS-URL: https://build.opensuse.org/request/show/997974
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=362
2022-08-20 18:28:06 +00:00
Dominique Leuenberger
444d3c0a79 Accepting request 985448 from Base:System
Speaking with Dimstar, it should be safe doing one more SR which will be needed in Staging:I where we need rpmlintrc adjustement.

OBS-URL: https://build.opensuse.org/request/show/985448
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=361
2022-07-13 12:55:53 +00:00
Dominique Leuenberger
2dec399474 Accepting request 980104 from Base:System
- Import commit 4dbc543953eabd4c578da67ce6e2970d6f96c406 (merge of v250.6)
  For a complete list of changes, visit:
  0d950479e5...4dbc543953

OBS-URL: https://build.opensuse.org/request/show/980104
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=360
2022-06-01 15:34:18 +00:00
Dominique Leuenberger
5491fccb05 Accepting request 979799 from Base:System
- Update rpmlintrc for shlib-policy-name-error/multibuild case.

OBS-URL: https://build.opensuse.org/request/show/979799
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=359
2022-05-31 13:46:56 +00:00
Dominique Leuenberger
3b90df4353 Accepting request 975732 from Base:System
- Import commit 0d950479e58dd3af007eb3780d600a5446aac519 (merge of v250.5)
  For a complete list of changes, visit:
  736db5a59f...0d950479e5

- Call pam_loginuid when creating user@.service (bsc#1198507)
  It's a backport of upstream commit 1000522a60ceade446773c67031b47a566d4a70d.

OBS-URL: https://build.opensuse.org/request/show/975732
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=358
2022-05-10 13:11:21 +00:00
Dominique Leuenberger
5c2e02040a Accepting request 971023 from Base:System
OBS-URL: https://build.opensuse.org/request/show/971023
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=357
2022-04-22 19:53:02 +00:00
Dominique Leuenberger
303f28f4c1 Accepting request 967294 from Base:System
- Import commit e43a1b018899266b764ab81afb9c30fb417675c6
  1c229f8fc1 cryptsetup: fall back to traditional unlocking if any TPM2 operation fails
  8881f21539 cryptsetup: fix typo
  5882148902 journald: make use of CLAMP() in cache_space_refresh()
  6ee0601f73 journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  fe928f3d49 fs-util: make sure openat_report_new() initializes return param also on shortcut
  3881af1806 fs-util: fix typos in comments
  96060b73ba journal-file: port journal_file_open() to openat_report_new()
  611d9955bb fs-util: add openat_report_new() wrapper around openat()
  f16edb41d4 network: ignore all errors in loading .network files (bsc#1197968)
  5422730a7b meson: build kernel-install man page when necessary
  45c627cfc2 build: include status of TPM2 in the feature string show by --version
- Drop 0001-meson-build-kernel-install-man-page-when-necessary.patch
  It's been merged in the SUSE git repo.

- spec: define %bootstrap with %bcond_with so it can be used with %when. Also
  re-order the meson options a bit.

- spec: make sure /lib exists when installing conf files in /lib/modprobe.d

  This includes the following bug fixes:
    - upstream commit 34357545590d4791d1acbbeb07ae8f7636e187cb (bsc#1198093)

OBS-URL: https://build.opensuse.org/request/show/967294
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=356
2022-04-07 22:27:23 +00:00
Dominique Leuenberger
9cdcd2bbdc Accepting request 966218 from Base:System
- Temporarily disable 'libcryptsetup plugins until dracut 056 is merged in
  Factory

- Add 0001-meson-build-kernel-install-man-page-when-necessary.patch
  Submitted to upstream: https://github.com/systemd/systemd/pull/22918

- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.
- Move a bunch of components operating on (mainly block) devices into udev as
  without udev they're most likely useless.

- spec: enable 'efi' support regardless of whether sd_boot is enabled or not
  We should support EFI systems even if systemd-boot is not enabled.

OBS-URL: https://build.opensuse.org/request/show/966218
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=355
2022-04-05 17:57:49 +00:00
Dominique Leuenberger
98421d8347 Accepting request 964674 from Base:System
- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE

- Add 1000-Revert-getty-Pass-tty-to-use-by-agetty-via-stdin.patch
  A temporary workaround until bsc#1197178 is resolved.

- Import commit 8ef8dfd5401ba18caec59e54a05af9f2e0d7ac65 (merge of v250.4)
  For a complete list of changes, visit:
  ca89b1d1fd...8ef8dfd540

- Import commit ca89b1d1fd1ae86cc1e763d2d01ec2806f3a4d3a
  37b683c832 journal: preserve acls when rotating user journals with NOCOW attribute set
  d043fabebc journal: when copying journal file to undo NOCOW flag, go via fd
  78c2766689 journal-file: explicitly handle file systems that do not support hole punching
  7ecfb4b098 journal-file: fix error handling of pread() in journald_file_punch_holes()
  c4946a412c journal-file: don't use pread() when determining where to append, use mmap as before
  d3fbd20628 journal: various fixes to journal_file_read_object()
  5897a8e8d4 shared: Handle filesystems that don't support hole punching in COPY_HOLES
  27746408e2 journal: Truncate file instead of punching hole in final object
  59b6130030 shared: Ensure COPY_HOLES copies trailing holes
  ac9ccba73f journal: stat journal file after truncating
  0257283444 journal: Copy holes when archiving BTRFS journal files
  26c2a9952d shared: Copy holes in sparse files in copy_bytes_full()
  6c7191dece copy: fix wrong argument passed to S_ISREG() in copy_file_fd_full()
  af0a43024d udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)

- Update Supplements to new format in baselibs.conf
- Fix libsystemd-shared exclusion in baselibs.conf
- Exclude new cryptsetup libraries in baselibs.conf

- systemd.spec: minor simplification by assuming that %{bootstrap} is always

OBS-URL: https://build.opensuse.org/request/show/964674
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=354
2022-03-28 14:58:41 +00:00
Dominique Leuenberger
65d268d774 https://bugzilla.opensuse.org/show_bug.cgi?id=1197309
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=353
2022-03-19 10:56:42 +00:00
Dominique Leuenberger
e8aa5c69c3 Accepting request 962458 from Base:System
- Add 1000-Revert-getty-Pass-tty-to-use-by-agetty-via-stdin.patch
  A temporary workaround until bsc#1197178 is resolved.

- Import commit 8ef8dfd5401ba18caec59e54a05af9f2e0d7ac65 (merge of v250.4)
  For a complete list of changes, visit:
  ca89b1d1fd...8ef8dfd540

- Import commit ca89b1d1fd1ae86cc1e763d2d01ec2806f3a4d3a
  37b683c832 journal: preserve acls when rotating user journals with NOCOW attribute set
  d043fabebc journal: when copying journal file to undo NOCOW flag, go via fd
  78c2766689 journal-file: explicitly handle file systems that do not support hole punching
  7ecfb4b098 journal-file: fix error handling of pread() in journald_file_punch_holes()
  c4946a412c journal-file: don't use pread() when determining where to append, use mmap as before
  d3fbd20628 journal: various fixes to journal_file_read_object()
  5897a8e8d4 shared: Handle filesystems that don't support hole punching in COPY_HOLES
  27746408e2 journal: Truncate file instead of punching hole in final object
  59b6130030 shared: Ensure COPY_HOLES copies trailing holes
  ac9ccba73f journal: stat journal file after truncating
  0257283444 journal: Copy holes when archiving BTRFS journal files
  26c2a9952d shared: Copy holes in sparse files in copy_bytes_full()
  6c7191dece copy: fix wrong argument passed to S_ISREG() in copy_file_fd_full()
  af0a43024d udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)

- Update Supplements to new format in baselibs.conf
- Fix libsystemd-shared exclusion in baselibs.conf
- Exclude new cryptsetup libraries in baselibs.conf

- systemd.spec: minor simplification by assuming that %{bootstrap} is always
  defined.

OBS-URL: https://build.opensuse.org/request/show/962458
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=352
2022-03-18 15:41:17 +00:00
Dominique Leuenberger
053f78ce40 Accepting request 957371 from Base:System
- Fix a regression caused by the split of the sysusers config files shipped by
  systemd (bsc#1196322)
  Calls to %sysusers_create were not updated accordingly.

- spec: fix dependencies for mini variants (follow-up)
  systemd-mini-container is one of the sub-package that relies systemd-mini to
  conflict with kiwi and to not be installed on real systems.

OBS-URL: https://build.opensuse.org/request/show/957371
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=350
2022-02-26 16:01:59 +00:00
Dominique Leuenberger
9e059d5169 Accepting request 956820 from Base:System
- Import commit 0bb1977021be2fc9ebfae10d766dff0b1a457f88 (merge of v249.10)
  For a complete list of changes, visit:
  b9b83c5d11...0bb1977021

- Import commit b9b83c5d11e686178ddd545862a00b33c6fdfabb
  8973cb2462 systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23866)

- Fix build if %_distconfdir is not defined (see bsc#1195679)

OBS-URL: https://build.opensuse.org/request/show/956820
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=349
2022-02-23 15:25:54 +00:00
Dominique Leuenberger
499a776e27 Accepting request 955799 from Base:System
- Drop enablement symlink migration support of SysV init scripts
  And let's finish reducing the support of SysV init scripts to its minimum.

- spec: fix dependencies for mini variants
  Make sure that all mini variants won't be installed in real systems and won't
  be involved when building medias with kiwi. Note that sub-packages that
  requires systemd (such as udev) don't need any special treatment since the
  specific deps are inherited from the main (mini) package.
- spec: simplify systemd-mini-doc dependencies by assuming that the doc
  sub-package can't be a build requirement for other packages.
- spec: libsystemd-mini and libudev-mini need to provide libsystemd and libudev
  respectively

- Rename systemd-sysvinit into systemd-sysvcompat
  systemd-sysvinit was probably provided to allow systems to switch from
  sysvinit to systemd by overwriting /sbin/init with a link to systemd. But this
  isn't very useful anymore due to the fact that sysvinit is not supported since
  several years. Therefore the subpackage contains now the files needed to keep
  backward compatibility with SysV init scripts (most notably sysv-generator)
  and has been renamed accordingly. The few files that are not specific to
  sysvinit (such as /bin/init) have been moved to the main package.
  Normally this new subpackage shouldn't be needed (since all packages use
  systemd unit files) unless a 3rd party application is installed and still
  relies on SysV init scripts.

- systemd.spec: explicitely turn on/off build options
  Hence a feature can't be accidentally turned on/off because its dep is pulled
  in or removed due to another feature being turned on/off.

OBS-URL: https://build.opensuse.org/request/show/955799
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=348
2022-02-19 18:21:14 +00:00
Dominique Leuenberger
d69ef23914 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=347 2022-02-07 14:30:06 +00:00
Dominique Leuenberger
2ea074e036 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=346 2022-02-07 08:27:18 +00:00
Dominique Leuenberger
8fa3c36b47 Accepting request 951595 from Base:System
- Always create systemd-network system user, even if systemd-networkd is not
  installed (bsc#1195559)

- Make more use of %{_unitdir} in files.{systemd,container}

- Installation of libnss_mymachines.so depended on %{bootstrap} but it is
  actually installed when %{with machined} is true.
- Call ldconfig when container subpackage is installed since it ships
  nss-mymachines NSS plug-in module.

- Import commit 117bd7f14aa7834d85a4306cd380d292bec04108
  1395c74be7 udevadm: cleanup-db: don't delete information for kept db entries (bsc#1194912)
  bbafc8092a udevadm: cleanup_dir: use dot_or_dot_dot()

- Drop 0006-sysv-generator-add-back-support-for-SysV-scripts-for.patch
       0009-sysv-add-back-support-for-all-virtual-facility-and-f.patch
  Given the fact that Factory no more ship SysV init scripts since several
  months, only scripts coming from 3rd party applications should remain which
  are unlikely to rely on the SUSE specifities implemented by these
  patches. This change was announced on the Factory mailing list:
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/3ERUP5ZZJ6PPA36L3HVN46BH6U6JL74O/

- Import commit 885e0b9126bd2cf1e3f6b147c45ec58a5550c75c
  41334be59e meson: minor cleanup
  3db0c28462 sysusers: split up systemd.conf
- Drop 0012-resolved-create-etc-resolv.conf-symlink-at-runtime.patch (bsc#1195153)
  Since v241, the patch isn't useful anymore because resolved is no more able to
  create /etc/resolv.conf symlink by itself,it runs as 'systemd-resolve'
  user. The symlink is now handled by a tmpfiles config file which is only
  installed when systemd-resolved is. The tmpfiles config file has currently a

OBS-URL: https://build.opensuse.org/request/show/951595
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=345
2022-02-06 22:54:01 +00:00
Dominique Leuenberger
49e3c4604e Accepting request 947453 from Base:System
- Move the systemd-network-generator stuff in udev package
  This generator can generate .link files and is mainly used in initrd where
  udev is mandatory.

- Restore /sbin/udevadm and /bin/systemctl (obsolete) paths when split_usr is
  true (bsc#1194519)

- Import commit 3743acbce3bd44208af453fc6dc384a1236dc83c (merge of v249.9)
  For a complete list of changes, visit:
  e2ca79dd77...3743acbce3

- Extract bits from 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch
  which are not specific to the handling of 'Required-Start:' and move them into a
  new patch 0009-sysv-add-back-support-for-all-virtual-facility-and-f.patch

- Import commit e2ca79dd775d1f7d39861d57f23c43f6cd85a872 (merge of v249.8)
  For a complete list of changes, visit:
  458220239c...e2ca79dd77

- Import commit 458220239c69b8e5fe7be480929348daeccb70d1
  e95df40b09 shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  078e04305d shared/rm_rf: refactor rm_rf() to shorten code a bit
  6d560d0aca shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
  6666ff056c localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Drop the following patches as they have been merged into SUSE/v249 branch:
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch

- Import commit 523f32df573d459551760b072cb62906f4a2cf23 (merge of v249.7)

OBS-URL: https://build.opensuse.org/request/show/947453
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=344
2022-01-21 00:25:13 +00:00
Dominique Leuenberger
81bf92596f Accepting request 945520 from Base:System
- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be dropped and cherry-picked from upstream once upstream
  will commit them in their main branch.

- Import commit a54f80116ccf105dff11aef5d18dd110ebd3e8ee
  30cbebc56f tmpfiles: 'st' may have been used uninitialized
  5443654ec0 macro: add new helper RET_NERRNO()
  8d90ecc435 rm-rf: optionally fsync() after removing directory tree
  591344010d rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  8c7762c4f1 Bump the max number of inodes for /dev to a million (bsc#1192858)
  dc9476c881 journal: don't remove the flushed flag when journald is stopped
  29efc29efd TEST-10: don't attempt to write a byte to the socket
  773fb785b6 Bump the max number of inodes for /dev to 128k (bsc#1192858)

OBS-URL: https://build.opensuse.org/request/show/945520
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=343
2022-01-11 23:26:25 +00:00
Dominique Leuenberger
3e428f30bd Accepting request 943712 from Base:System
- Update systemd-user PAM service again
  Change the default implementation of pam_setcred() again, previously
  customized to run the full "auth" PAM stack and only call pam_deny.so which is
  basically the SUSE default behavior without pam_warn.so.
  This is considered safer, especially on SLE where a regression was spotted by
  QA.

- move files related to static nodes to udev

- Replace S:$n references with SOURCE$n. Makes vim * search work.

OBS-URL: https://build.opensuse.org/request/show/943712
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=342
2022-01-07 11:44:33 +00:00
Dominique Leuenberger
300b159d93 Accepting request 933100 from Base:System
- Import commit 523f32df573d459551760b072cb62906f4a2cf23 (merge of 249.7)
  For a complete list of changes, visit:
  c34c987126...523f32df57
- Import commit c34c98712600bc206919ec6ed136195f75ac1967
  f99aa40c6e TEST-12: make sure 'adm' group exist
  6c7194ff99 TEST-08: don't force ext4 for /
  dd1814b8f9 test: use kbd-mode-map we ship in one more test case
  94c5febf2a test: fix TEST-10-ISSUE-2467

- Update the dependencies of the systemd-testsuite sub-package.

OBS-URL: https://build.opensuse.org/request/show/933100
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=341
2021-11-24 22:54:17 +00:00
Dominique Leuenberger
e286d3719f Accepting request 931727 from Base:System
- Import commit 61c79e68381801428c0bc00a56b9e2e9cfa68373 (merge of 249.6)
  bcdeee7b4c virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  [...]
  For a complete list of changes, visit:
  8521f8d22f...61c79e6838
- Drop 0001-Revert-core-Check-unit-start-rate-limiting-earlier.patch
  It's part of v249.6.

OBS-URL: https://build.opensuse.org/request/show/931727
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=340
2021-11-20 21:47:46 +00:00
Dominique Leuenberger
ab8271254f Accepting request 928747 from Base:System
- Add 0001-Revert-core-Check-unit-start-rate-limiting-earlier.patch
  Temporarly revert commit ed8fbbf1745c6a2dc0b8cd560ac8a3353f72e979
  until the regression it introduced [1] is addressed by upstream and
  a fix is released via the stable tree.
  [1] https://github.com/systemd/systemd/issues/21025

- Disable nss-systemd and translations features for the mini flavour

- Really enable libiptc for masquerading support (bsc#1191651)
  Currently used by systemd-nspawn and systemd-networkd.

- Convert systemd package to multibuild

  8de173ff93 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  [...]

OBS-URL: https://build.opensuse.org/request/show/928747
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=339
2021-11-08 16:23:58 +00:00
Dominique Leuenberger
f185490289 Accepting request 925519 from Base:System
- Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5)
  For a complete list of changes, visit:
  355e113ce1...8521f8d22f

- Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46
  3b4a005095 meson: add missing include directory when using xkbcommon
  4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514)
  78466e4464 meson: drop the list of valid net naming schemes
  b9a2098f9d netif-naming: inline one iterator variable
  d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme

- Rename %{gnu-efi} into %{sd_boot}
  Build conditionals (%bcond_with and %bcond_without) are used to
  define a specific feature of systemd. "gnu-efi" is rather an
  implemenation detail. Also not really sure what "efi" option alone
  is useful for since systemd-boot & co depends on "gnu-efi".
- Enable sd_boot support for aarch64

- Ghost own directories /var/log/journal and /var/log/journal/remote again
  rpmlint no more complain about the setgid bit, see sr#923496.

- Overwriting rootprefix= is only required when split-usr is enabled

- Rename %usrmerged into %split_usr

- Suppress PAM warning when the credentials for user@.service service
  are established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
  is used, which consists of pam_warn.so + pam_deny.so, and will throw

OBS-URL: https://build.opensuse.org/request/show/925519
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=338
2021-10-20 18:22:38 +00:00
Dominique Leuenberger
2d3de572ba Accepting request 922217 from Base:System
- Work around rpmlint complaining about /var/log/journal shipped with setgid bit
  This setgid bit has been already reviewed in the past and wasn't a
  concern. However we want the mode/ownership adjusted by tmpfiles and
  avoid the duplication of these info in rpm.
- Don't ghost own any directories created dynamically by tmpfiles
  Again rpmlint complains but it doesn't seem to make sense to try to
  track all paths (including theirs perms, ownerships...) created
  dynamically. And 'rpm -V' is likely to report issues later with
  these paths anyway.
  This effectively partially reverts the two previous commits.

- Make sure the build process won't create /var/log/journal
- /var/log/journal/remote is owned by systemd-journal-remote

- systemd.spec: fix a bunch of rpmlint errors/warnings

- Drop systemd-logger
  This sub package was introduced in order to configure persistent
  journal and also to make sure that another syslog provider (such as
  rsyslog) couldn't be installed at the same time: each syslog
  provider conflicts with each others.
  However this mechanism didn't work since uninstalling systemd-logger
  wasn't magically turning off persistent logging because
  /var/log/journal is likely to be populated hence not removed.
  Moreover using a subpackage to configure the mode of journald was
  overkill and the usual ways (main conf file or drop-ins) should be
  preferred.

- Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97
  8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh

OBS-URL: https://build.opensuse.org/request/show/922217
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=337
2021-10-04 16:39:17 +00:00
Dominique Leuenberger
a923caa084 Accepting request 917666 from Base:System
- Don't reexecute user manager instances on package update yet
  This can't be done until users have their user instance updated to
  the new version that supports reexecuting with SIGRTMIN+25 because
  this signal terminates the user managers for the previous versions.

- Import commit ec72db9ee0f8ce061f83624d7148ff38a5993b11
  3b1aa2f79f manager: reexecute on SIGRTMIN+25, user instances only
  fd46c81922 test: make sure to include all haveged unit files
- systemd.spec: reexec user manager instances on package updates

- Make sure the versions of both udev and systemd packages are always the same (bsc#1189480)

- Drop dependency on m4 (replaced by Jinja2)

OBS-URL: https://build.opensuse.org/request/show/917666
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=336
2021-09-11 20:24:21 +00:00
Dominique Leuenberger
f37ad01569 Accepting request 915488 from Base:System
- Configure split-usr=true only when %usrmerged is not defined

- Import commit 40bda18e346ff45132ccd6f8f8e96de78dcf3470 (merge of v249.4)
  For a complete list of changes, visit:
  7f23815a70...40bda18e34

- Rework the test (sub)package:
  - it's been renamed into 'systemd-testsuite'
  - it includes the extended tests too
  - the relevant commits have been backported to SUSE/v249 so no SUSE
    specific patch is needed to run the extended tests (see below)
  - the deps needed by the extended tests have been added
- Import commit 7f23815a706cf2b2df3eac2eb2f8220736b8f427
  ad216581b6 test: if haveged is part of initrd it needs to be installed in the image too
  088fbb71d0 test: adapt install_pam() for openSUSE
  4d631c1f0c Revert "test: adapt TEST-13-NSPAWN-SMOKE for SUSE"
  ef956eb8a2 test: on openSUSE the static linked version of busybox is named "busybox-static"
  6f7ce633b0 TEST-13-*: in busybox container sleep(1) takes a delay in seconds only
  278baaa3ec test: don't try to find BUILD_DIR when NO_BUILD is set
  3bba2f876a test: add support for NO_BUILD=1 on openSUSE
  d77cbc1b64 test: make busybox TEST-13-only dependency

- Upgrade to v249.2 (commit c0bb2fcbc26f6aacde574656159504f263916719)
  See https://github.com/openSUSE/systemd/blob/SUSE/v249/NEWS for
  details. 
  - Rebased 0002-rc-local-fix-ordering-startup-for-etc-init.d-boot.lo.patch
            0012-resolved-create-etc-resolv.conf-symlink-at-runtime.patch

- Configure split-usr=true only when %usrmerged is not defined

OBS-URL: https://build.opensuse.org/request/show/915488
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=335
2021-09-04 20:33:46 +00:00
Dominique Leuenberger
f419cd2fdd Accepting request 909721 from Base:System
- Avoid the error message when udev is updated due to udev being
  already active when the sockets are started again (bsc#1188291)

OBS-URL: https://build.opensuse.org/request/show/909721
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=334
2021-08-04 20:28:26 +00:00
Dominique Leuenberger
cff4d1a6d1 Accepting request 908417 from Base:System
- Import commit 73e9e6fb847513c6d62f2fb445778ef5bc0fe516 (merge of v248.6)
  For a complete list of changes, visit:
  cb29bcc5ef...73e9e6fb84

- Drop 0001-Revert-core-prevent-excessive-proc-self-mountinfo-pa.patch
  Commit 81107b8419c39f726fd2805517a5b9faab204e59 fixes
  https://github.com/systemd/systemd/issues/19464 which makes the
  aforementioned patch not needed anymore.

- Drop 1003-basic-unit-name-adjust-comments.patch
  It's been merged in SUSE/v248 branch

- Import commit cb29bcc5ef2c0ee659686c5d229646a6ba98ec50 (merge of v248.5)
  4a1c5f34bd basic/unit-name: do not use strdupa() on a path (bsc#1188063 CVE-2021-33910)
  [...]
  For a complete list of changes, visit:
  94efce2ee5...cb29bcc5ef
- Drop 1002-basic-unit-name-do-not-use-strdupa-on-a-path.patch as it
  was merged in v248.5.

- Import commit 94efce2ee59fca15a48ff9c232c8dd7cf930c0a0 (merge of v248.4)
  For a complete list of changes, visit:
  c0aecee593...94efce2ee5
- Drop 1001-unit-name-generate-a-clear-error-code-when-convertin.patch
  as it was merged in v248.4.

- Import commit c0aecee593511e49638579cb2b9ac8aaf1f8e6c8
  42ec1d537a login: use a hwdb entry for tagging Parallels' fb devices with 'master-of-seat' tag
  ecc7c7b462 login: use a hwdb entry for tagging HyperV's fb devices with 'master-of-seat' tag
  a4cfd70476 login: XGI Z7/Z9 (XG20 core) graphic chip requires master-of-seat to be set (bsc#1187154)

OBS-URL: https://build.opensuse.org/request/show/908417
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=333
2021-08-02 10:04:37 +00:00
Dominique Leuenberger
fed1c9a7ac Accepting request 907311 from Base:System
- Added patches to fix CVE-2021-33910 (bsc#1188063)
  Added 1001-unit-name-generate-a-clear-error-code-when-convertin.patch
  Added 1002-basic-unit-name-do-not-use-strdupa-on-a-path.patch
  Added 1003-basic-unit-name-adjust-comments.patch
  These patches will be moved to the git repo once the bug will become
  public.

- systemd-hwdb-update.service should be shipped by the udev package

OBS-URL: https://build.opensuse.org/request/show/907311
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=332
2021-07-22 20:42:41 +00:00
Dominique Leuenberger
5dfe3d4e23 Accepting request 903365 from Base:System
- Finally don't create /run/lock/subsys anymore
  This effectively reverts the fix for bsc#1187292 made earlier. This
  directory is specific to RH sysvinit and since we're going to fade
  the support of SysV init script away the directory has no future.

- Enable TPM2 support

OBS-URL: https://build.opensuse.org/request/show/903365
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=331
2021-07-04 20:10:18 +00:00
Dominique Leuenberger
441419a1e6 Accepting request 902866 from Base:System
- Import commit e9a23d9e064c2e7ac21a1b984d116bcf15327e63
  8dd19c6ee3 sd-device: allow to read sysattr which contains embedded NUL
  d52409e5fe pid1: only add a Wants= type dependency on /tmp when PrivateTmp=yes (bsc#1181970

- Import commit fcdb8dce591db2f5fc3c1e3eeb7abe9a2090b401
  aa2d840a3b compat-rules: fix warning: "label ‘out’ defined but not used" in path_id_compat.c
- Restore 61-persistent-storage-compat.rules that was mistakenly
  dropped during the merge of v248.

- Create /run/lock/subsys again (bsc#1187292)
  The creation of this directory was mistakenly dropped when
  'filesystem' package took the initialization of the generic paths
  over.
  Paths under /run/lock are still managed by systemd for lack of
  better place.

- Drop systemd's dependency on udev (jsc#PM-2677)
  In some environments (i.e. containers) udev is usually not necessary
  but pulls in unnecessary packages.

- Now that chkconfig/insserv are history, let's implement the strict
  minimum in systemd-sysv-install to enable/disable SysV init scripts
  (bsc#1186595 bsc#1186359)
  Indeed there's no much point in dropping SysV support completely
  until upstream will do especially since 3rd party applications such
  as vmware still rely on it, see bsc#1186359).

- Allow the sysusers config files shipped by systemd rpms to be
  overriden during system installation (bsc#1171962)
- While at it, add a comment to explain why we don't use

OBS-URL: https://build.opensuse.org/request/show/902866
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=330
2021-07-01 05:05:27 +00:00
Dominique Leuenberger
a1b0bcc020 Accepting request 885896 from Base:System
- systemd.spec: clean some of the build deps up:
  - libpcre is redundant with libpcre2 (only required by the full
    build) and the mini variant needs none of them. Hence drop the ref
    to libpcre.
  - normally libidn2 is needed by some optional features in
    systemd-network (only). But it's implicitly pulled in by libgnutls
    (required by the main package). Let's make sure the related
    features won't be disabled inadvertently in the future by making
    the dep explicit.

- enable libiptc for masquerading support in networkd

- create subpackage systemd-experimental to host pstore, repart,
  userdb and homed

OBS-URL: https://build.opensuse.org/request/show/885896
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=329
2021-06-03 22:33:07 +00:00
Richard Brown
48bab5088b Accepting request 882182 from Base:System
- Import commit 14581e01203df7aa63c7c8383a12e6ebe258476f (merge of v246.13)
  423b1e759c Revert "resolved: gracefully handle with packets with too large RR count" (bsc#1183745)
  4723778738 meson.build: make xinitrcdir configurable (bsc#1183408)
  [...]
  For a complete list of changes, visit:
  9753d1c175...14581e0120
- Drop 0001-Revert-resolved-gracefully-handle-with-packets-with-.patch
  as it's part of v246.13.
- Make use of the new build option to ship xinitrc in
  /usr/etc/X11/xinit/xinitrc.d (bsc#1183408)

- Add 0001-Revert-resolved-gracefully-handle-with-packets-with-.patch
  Temporary workaround for bsc#1183745 (upstream issue 18917) until an
  actual fix is found.

- Default to the "unified" cgroup hierarchy. At this point, most
  users of cgroup (such as docker, libvirt, kubernetes) should be 
  ready for this change. It's still possible to switch back to the
  old "hybrid" hierarchy by passing "systemd.unified_cgroup_hierarchy=0"
  option to the kernel command line.

OBS-URL: https://build.opensuse.org/request/show/882182
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=328
2021-04-08 20:12:54 +00:00
Dominique Leuenberger
4678053d4f Accepting request 879358 from Base:System
- Import commit 9753d1c17545a5d46530696cb14254f5f12024f1 (merge of v246.11)
  For a complete list of changes, visit:
  134cf1c8bc...9753d1c175
- Rebase 0001-conf-parser-introduce-early-drop-ins.patch

- Import commit 13bc08870147b35f87cefb074aec22e767b7ac04
  846d61e0a1 boot: Move console declarations to missing_efi.h
  171a37228b boot: Add startswith() and endswith() functions with no_case variants
  0fad9f309a boot: Drop unnecessary braces
  c38bbb0874 boot: Fix void pointer arithmetic warning
  438210924b boot: Replace raw efivar gets with typed variants
  e46cb3e4a0 boot: Add  efivar_get/set_uint64_le() functions
  e16bee35c8 boot: Rename efivar_get/set_int() to efivar_get/set_uint_string()
  2808d0e9a3 boot: Tighten scope of variables used in loops
  d3f3d57743 boot: Add efivar_get_boolean_u8()
  0551ecce71 boot: Make all efivar util functions take the guid as an argument
  8376ba3b9f boot: Turn all guid constants into C99 compound initializers
  166fc2dad2 boot: Enable C99
  c87d66e261 boot: Move Secure Boot logic to new file
  da7bba9438 udev: fix memleak
  e06139117c nspawn: make rootfs relative to oci bundle path (bsc#1182598)
  8ba587d46c PATCH] Always free deserialized_subscribed on reload (bsc#1180020)

- Make sure the udev socket units are reloaded during udev package updates

- fix-machines-btrfs-subvol.sh is only shipped when machined is built

OBS-URL: https://build.opensuse.org/request/show/879358
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=327
2021-03-17 19:14:01 +00:00
Richard Brown
6c52ec6e42 Accepting request 874480 from Base:System
- systemd requires aaa_base >= 13.2
  This dependency is required because 'systemctl
  {is-enabled,enable,disable} <initscript>" ends up calling
  systemd-sysv-install which in its turn calls "chkconfig
  --no-systemctl".
  aaa_base package has a weird versioning but the '--no-systemctl'
  option has been introduced starting from SLE12-SP2-GA, which shipped
  version "13.2+git20140911.61c1681".
  Spotted in bsc#1180083.

OBS-URL: https://build.opensuse.org/request/show/874480
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=326
2021-03-02 13:41:57 +00:00
Richard Brown
28eb9c368f Accepting request 873790 from Base:System
- Add 0001-conf-parser-introduce-early-drop-ins.patch
  Introduce early configuration drop-in file. This type of drop-ins
  are reserved for vendor own purposes only and should never been used
  by users. It might be removed in the future without any notice.

- Drop use of %systemd_postun in %postun
  This macro is supposed to operate on units but it was used without
  passing any parameters. This call was probably used for issuing a
  daemon-reload but the following calls to
  %systemd_postun_with_restart imply that already. So let's simply
  drop it.

OBS-URL: https://build.opensuse.org/request/show/873790
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=325
2021-02-22 13:39:31 +00:00
Dominique Leuenberger
488849158e Accepting request 869763 from Base:System
OBS-URL: https://build.opensuse.org/request/show/869763
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=324
2021-02-07 14:16:54 +00:00
Dominique Leuenberger
9ab73ef591 Accepting request 856900 from Base:System
OBS-URL: https://build.opensuse.org/request/show/856900
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=323
2020-12-22 10:26:02 +00:00
Dominique Leuenberger
b0c2cef737 Accepting request 855788 from Base:System
- Explicitly require group(kvm) by udev: the group used to be
  created by system-users-hardware, but has been split/moved to
  qemu/kvm, where it is more logical. The file
  /usr/lib/udev/rules.d/50-udev-default.rules references this
  group, thus we should make sure the group exists. Otherwise there
  are errors in the journal in the form of:
  /usr/lib/udev/rules.d/50-udev-default.rules:86 Unknown group 'kvm', ignoring

OBS-URL: https://build.opensuse.org/request/show/855788
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=322
2020-12-16 09:58:54 +00:00
Dominique Leuenberger
2e4c0c531a Accepting request 854320 from Base:System
OBS-URL: https://build.opensuse.org/request/show/854320
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=321
2020-12-12 19:27:10 +00:00
Dominique Leuenberger
21903917ec Accepting request 852344 from Base:System
OBS-URL: https://build.opensuse.org/request/show/852344
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=320
2020-12-03 17:41:21 +00:00
Dominique Leuenberger
f19f35f14a Accepting request 846424 from Base:System
OBS-URL: https://build.opensuse.org/request/show/846424
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=319
2020-11-09 12:56:30 +00:00
Dominique Leuenberger
ff977b3276 Accepting request 841477 from Base:System
OBS-URL: https://build.opensuse.org/request/show/841477
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=318
2020-10-15 11:46:59 +00:00
Dominique Leuenberger
b699d340b0 Accepting request 838928 from Base:System
OBS-URL: https://build.opensuse.org/request/show/838928
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=317
2020-10-02 15:16:52 +00:00
Dominique Leuenberger
f34966767e Accepting request 834932 from Base:System
OBS-URL: https://build.opensuse.org/request/show/834932
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=316
2020-09-17 12:35:38 +00:00
Dominique Leuenberger
cf0713e8c1 Accepting request 830355 from Base:System
OBS-URL: https://build.opensuse.org/request/show/830355
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=315
2020-08-31 15:14:56 +00:00
Dominique Leuenberger
41d1bc257a Accepting request 828165 from Base:System
OBS-URL: https://build.opensuse.org/request/show/828165
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=314
2020-08-23 07:20:30 +00:00
Dominique Leuenberger
22df5a332a Accepting request 823438 from Base:System
OBS-URL: https://build.opensuse.org/request/show/823438
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=313
2020-08-06 08:38:21 +00:00
Dominique Leuenberger
9ea81e08d6 Accepting request 816787 from Base:System
OBS-URL: https://build.opensuse.org/request/show/816787
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=312
2020-06-27 21:20:59 +00:00