98bc28d824 tmpfiles: constify item_compatible() parameters
3faf1a2648 test: adapt install_pam() for openSUSE
b7ca34fa28 test: add test checking tmpfiles conf file precedence
2713693d93 test tmpfiles: add a test for 'w+'
ce2cbefe38 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
769f5a0cbe Support -D_FORTIFY_SOURCE=3 by using __builtin_dynamic_object_size.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1277
1c229f8fc1 cryptsetup: fall back to traditional unlocking if any TPM2 operation fails
8881f21539 cryptsetup: fix typo
5882148902 journald: make use of CLAMP() in cache_space_refresh()
6ee0601f73 journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
fe928f3d49 fs-util: make sure openat_report_new() initializes return param also on shortcut
3881af1806 fs-util: fix typos in comments
96060b73ba journal-file: port journal_file_open() to openat_report_new()
611d9955bb fs-util: add openat_report_new() wrapper around openat()
f16edb41d4 network: ignore all errors in loading .network files (bsc#1197968)
5422730a7b meson: build kernel-install man page when necessary
45c627cfc2 build: include status of TPM2 in the feature string show by --version
- Drop 0001-meson-build-kernel-install-man-page-when-necessary.patch
It's been merged in the SUSE git repo.
This includes the following bug fixes:
- upstream commit 34357545590d4791d1acbbeb07ae8f7636e187cb (bsc#1198093)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1274
sub-package: they may deserve a dedicated sub-package in the future but for
now move them to udev so they aren't installed in systemd based containers.
- Move a bunch of components operating on (mainly block) devices into udev as
without udev they're most likely useless.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1268
37b683c832 journal: preserve acls when rotating user journals with NOCOW attribute set
d043fabebc journal: when copying journal file to undo NOCOW flag, go via fd
78c2766689 journal-file: explicitly handle file systems that do not support hole punching
7ecfb4b098 journal-file: fix error handling of pread() in journald_file_punch_holes()
c4946a412c journal-file: don't use pread() when determining where to append, use mmap as before
d3fbd20628 journal: various fixes to journal_file_read_object()
5897a8e8d4 shared: Handle filesystems that don't support hole punching in COPY_HOLES
27746408e2 journal: Truncate file instead of punching hole in final object
59b6130030 shared: Ensure COPY_HOLES copies trailing holes
ac9ccba73f journal: stat journal file after truncating
0257283444 journal: Copy holes when archiving BTRFS journal files
26c2a9952d shared: Copy holes in sparse files in copy_bytes_full()
6c7191dece copy: fix wrong argument passed to S_ISREG() in copy_file_fd_full()
af0a43024d udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1263
targets (bsc#1196567)
The script 'upgrade-from-pre-210.sh' used to initialize the default target
during migration from sysvinit to systemd. However it created symlinks to
runlevel targets, which are deprecated and might be missing when
systemd-sysvcompat package is not installed. If such symlinks are found the
script now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
let's use the default systemd target, which is the graphical.target one. In
most cases it will do the right thing anyway.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1258
Make sure that all mini variants won't be installed in real systems and won't
be involved when building medias with kiwi. Note that sub-packages that
requires systemd (such as udev) don't need any special treatment since the
specific deps are inherited from the main (mini) package.
- spec: simplify systemd-mini-doc dependencies by assuming that the doc
sub-package can't be a build requirement for other packages.
- spec: libsystemd-mini and libudev-mini need to provide libsystemd and libudev
respectively
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1251
systemd-sysvinit was probably provided to allow systems to switch from
sysvinit to systemd by overwriting /sbin/init with a link to systemd. But this
isn't very useful anymore due to the fact that sysvinit is not supported since
several years. Therefore the subpackage contains now the files needed to keep
backward compatibility with SysV init scripts (most notably sysv-generator)
and has been renamed accordingly. The few files that are not specific to
sysvinit (such as /bin/init) have been moved to the main package.
Normally this new subpackage shouldn't be needed (since all packages use
systemd unit files) unless a 3rd party application is installed and still
relies on SysV init scripts.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1250
actually installed when %{with machined} is true.
- Call ldconfig when container subpackage is installed since it ships
nss-mymachines NSS plug-in module.
- Drop 0006-sysv-generator-add-back-support-for-SysV-scripts-for.patch
0009-sysv-add-back-support-for-all-virtual-facility-and-f.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1243
41334be59e meson: minor cleanup
3db0c28462 sysusers: split up systemd.conf
- Drop 0012-resolved-create-etc-resolv.conf-symlink-at-runtime.patch (bsc#1195153)
Since v241, the patch isn't useful anymore because resolved is no more able to
create /etc/resolv.conf symlink by itself,it runs as 'systemd-resolve'
user. The symlink is now handled by a tmpfiles config file which is only
installed when systemd-resolved is. The tmpfiles config file has currently a
lower priority than the one shipped by netconfig.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1240
and systemd-container respectively.
These modules are plug-in modules hence the shared library packaging policy
doesn't apply for them. Moreover they're pretty useless alone without their
respective systemd services, Hence let's reduce the number of sub-packages as
the list keeps increasing.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1238
material.
- Extract bits from 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch
which are not specific to the handling of 'Required-Start:' and move them into a
new patch 1010-sysv-add-back-support-for-all-virtual-facility-and-f.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1222
For a complete list of changes, visit:
458220239c...e2ca79dd77
- Drop the following patches as they have been merged into SUSE/v249 branch:
5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1221
e95df40b09 shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
078e04305d shared/rm_rf: refactor rm_rf() to shorten code a bit
6d560d0aca shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
6666ff056c localectl: don't omit keymaps files that are symlinks (bsc#1191826)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1220
5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
These patches will be dropped and cherry-picked from upstream once upstream
will commit them in their main branch.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1219
30cbebc56f tmpfiles: 'st' may have been used uninitialized
5443654ec0 macro: add new helper RET_NERRNO()
8d90ecc435 rm-rf: optionally fsync() after removing directory tree
591344010d rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
8c7762c4f1 Bump the max number of inodes for /dev to a million (bsc#1192858)
dc9476c881 journal: don't remove the flushed flag when journald is stopped
29efc29efd TEST-10: don't attempt to write a byte to the socket
773fb785b6 Bump the max number of inodes for /dev to 128k (bsc#1192858)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1218
Change the default implementation of pam_setcred() again, previously
customized to run the full "auth" PAM stack and only call pam_deny.so which is
basically the SUSE default behavior without pam_warn.so.
This is considered safer, especially on SLE where a regression was spotted by
QA.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1217
For a complete list of changes, visit:
c34c987126...523f32df57
- Import commit c34c98712600bc206919ec6ed136195f75ac1967
f99aa40c6e TEST-12: make sure 'adm' group exist
6c7194ff99 TEST-08: don't force ext4 for /
dd1814b8f9 test: use kbd-mode-map we ship in one more test case
94c5febf2a test: fix TEST-10-ISSUE-2467
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1213
3b4a005095 meson: add missing include directory when using xkbcommon
4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514)
78466e4464 meson: drop the list of valid net naming schemes
b9a2098f9d netif-naming: inline one iterator variable
d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1203
Build conditionals (%bcond_with and %bcond_without) are used to
define a specific feature of systemd. "gnu-efi" is rather an
implemenation detail. Also not really sure what "efi" option alone
is useful for since systemd-boot & co depends on "gnu-efi".
- Enable sd_boot support for aarch64
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1202
are established (bsc#1190515)
systemd-user PAM service needs to define a default implementation of
pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
is used, which consists of pam_warn.so + pam_deny.so, and will throw
a warning each time a user logs in.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1197
This setgid bit has been already reviewed in the past and wasn't a
concern. However we want the mode/ownership adjusted by tmpfiles and
avoid the duplication of these info in rpm.
- Don't ghost own any directories created dynamically by tmpfiles
Again rpmlint complains but it doesn't seem to make sense to try to
track all paths (including theirs perms, ownerships...) created
dynamically. And 'rpm -V' is likely to report issues later with
these paths anyway.
This effectively partially reverts the two previous commits.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1194
This sub package was introduced in order to configure persistent
journal and also to make sure that another syslog provider (such as
rsyslog) couldn't be installed at the same time: each syslog
provider conflicts with each others.
However this mechanism didn't work since uninstalling systemd-logger
wasn't magically turning off persistent logging because
/var/log/journal is likely to be populated hence not removed.
Moreover using a subpackage to configure the mode of journald was
overkill and the usual ways (main conf file or drop-ins) should be
preferred.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1190
8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh
1527bcc5dd test: make the installation of the debug tools optional in the image
f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1189
- it's been renamed into 'systemd-testsuite'
- it includes the extended tests too
- the relevant commits have been backported to SUSE/v249 so no SUSE
specific patch is needed to run the extended tests (see below)
- the deps needed by the extended tests have been added
- Import commit 7f23815a706cf2b2df3eac2eb2f8220736b8f427
ad216581b6 test: if haveged is part of initrd it needs to be installed in the image too
088fbb71d0 test: adapt install_pam() for openSUSE
4d631c1f0c Revert "test: adapt TEST-13-NSPAWN-SMOKE for SUSE"
ef956eb8a2 test: on openSUSE the static linked version of busybox is named "busybox-static"
6f7ce633b0 TEST-13-*: in busybox container sleep(1) takes a delay in seconds only
278baaa3ec test: don't try to find BUILD_DIR when NO_BUILD is set
3bba2f876a test: add support for NO_BUILD=1 on openSUSE
d77cbc1b64 test: make busybox TEST-13-only dependency
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1178
42ec1d537a login: use a hwdb entry for tagging Parallels' fb devices with 'master-of-seat' tag
ecc7c7b462 login: use a hwdb entry for tagging HyperV's fb devices with 'master-of-seat' tag
a4cfd70476 login: XGI Z7/Z9 (XG20 core) graphic chip requires master-of-seat to be set (bsc#1187154)
ef553e0199 sd-dhcp-client: tentatively ignore FORCERENEW command (bsc#1185972 CVE-2020-13529)
aae6c575fc sd-dhcp-client: logs when dhcp client unexpectedly gains a new lease
258a3d2043 sd-dhcp-client: shorten code a bit
0a80303114 sd-dhcp-client: check error earlier and reduce indentation
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1170
Added 1001-unit-name-generate-a-clear-error-code-when-convertin.patch
Added 1002-basic-unit-name-do-not-use-strdupa-on-a-path.patch
Added 1003-basic-unit-name-adjust-comments.patch
These patches will be moved to the git repo once the bug will become
public.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1169
minimum in systemd-sysv-install to enable/disable SysV init scripts
(bsc#1186595 bsc#1186359)
Indeed there's no much point in dropping SysV support completely
until upstream will do especially since 3rd party applications such
as vmware still rely on it, see bsc#1186359).
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1161
udev uses a different license (GPL-2.0-only) than the main package
and "osc service localrun format_spec_file" has the good taste to
restore the license tags for all other subpackages if one of the
subpackage tag differs.
- Drop "License:" tags from all subpackages and make it inherited
from the main package.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1158
This subpackage is mainly used before submitting a new version of
the systemd packages. As such it's not intended for regular users
hence can be removed/renamed at any time. One might wonder why the
unit tests are not executed during package builds (%check)... the
reason is that the environment used to build package (chroot) is too
limited and therefore only a subset of the unit tests would be
executed in this environment.
To disable the build of the subpackage, use "--without=tests".
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1155
See https://github.com/openSUSE/systemd/blob/SUSE/v248/NEWS for
details.
- A couple runtime dependencies on libraries are now tracked
manually (with Recommends:) due to the fact that some symbols of
these libs are dynamically loaded with dlopen() (heck!)
- oomd is left disablde for now
- pam configuration file 'systemd-user' is now shipped in
/usr/etc/pam.d
- Rebased 0001-conf-parser-introduce-early-drop-ins.patch
0003-strip-the-domain-part-from-etc-hostname-when-setting.patch
0006-sysv-generator-add-back-support-for-SysV-scripts-for.patch
- Dropped 0004-tmpfiles-support-exclude-statements-based-on-file-ow.patch
as it is SLE specific.
- Clean systemd-experimental up:
- Enclose "%package/%descriptoin experimental" within a "%if
%experimental/%endif" block condition
- List the build requirements in the sub-package instead of listing
them in the main package.
- Enable support for fido2, pwquality and qrencode in the home
stuff
- Improve the package description
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1149
- libpcre is redundant with libpcre2 (only required by the full
build) and the mini variant needs none of them. Hence drop the ref
to libpcre.
- normally libidn2 is needed by some optional features in
systemd-network (only). But it's implicitly pulled in by libgnutls
(required by the main package). Let's make sure the related
features won't be disabled inadvertently in the future by making
the dep explicit.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1146
423b1e759c Revert "resolved: gracefully handle with packets with too large RR count" (bsc#1183745)
4723778738 meson.build: make xinitrcdir configurable (bsc#1183408)
[...]
For a complete list of changes, visit:
9753d1c175...14581e0120
- Drop 0001-Revert-resolved-gracefully-handle-with-packets-with-.patch
as it's part of v246.13.
- Make use of the new build option to ship xinitrc in
/usr/etc/X11/xinit/xinitrc.d (bsc#1183408)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1145
This dependency is required because 'systemctl
{is-enabled,enable,disable} <initscript>" ends up calling
systemd-sysv-install which in its turn calls "chkconfig
--no-systemctl".
aaa_base package has a weird versioning but the '--no-systemctl'
option has been introduced starting from SLE12-SP2-GA, which shipped
version "13.2+git20140911.61c1681".
Spotted in bsc#1180083.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1137
This macro is supposed to operate on units but it was used without
passing any parameters. This call was probably used for issuing a
daemon-reload but the following calls to
%systemd_postun_with_restart imply that already. So let's simply
drop it.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1135
- Import commit 520e53b6d85087b05892ee637ae93f1b269e7e52 (merge of v246.9)
For a complete list of changes, visit:
2401461e5f...520e53b6d8
- Import commit 2401461e5f0e32922823d954c56106f96344070e
6131548b0f udev: link_update() should fail if the entry in symlink dir couldn't have been created
f6cb8c7d79 udev: make algorithm that selects highest priority devlink less susceptible to race conditions (bsc#1084748)
fc64e47291 basic/stat-util: make mtime check stricter and use entire timestamp
ae91d45d3d test/sys-script.py: add missing DEVNAME entries to uevents
09e3473a7a test/udev_test.pl: add "expected good" count
fc89379b5b test/udev-test.pl: suppress umount error message at startup
d9e114f10d test/sd-script.py: new helper script for udev testing
f2672eae66 test/udev-test.pl: generator for large list of block devices
42b68e43e2 test/udev-test.pl: add repeat count
eec8ec375a tests/udev-test.pl: add multiple device test
73b8f3cf93 test/udev-test.pl: count "good" results
ee04d70bb6 test/udev-test.pl: merge import parent tests into one
03942c8fbc test/udev-test.pl: merge "space and var with space" tests
ec95546189 test/udev-test.pl: remove bogus rules from magic subsys test
f704429217 test/udev-test.pl: Make some tests a little harder
ce1a877dc0 test/udev-test.pl: last_rule is unsupported
913c72ff2d test/udev-test.pl: fix wrong test descriptions
eeb25a1be6 test/udev-test.pl: allow checking multiple symlinks
00ab4292da test/udev-test.pl: test correctness of symlink targets
5b71ee2911 test/udev-test.pl: use computed devnode name
2e04bb9ae8 test/udev-test.pl: allow concurrent additions and removals
8816dd593c test/udev-test.pl: create rules only once
214418632d test/udev-test.pl: allow multiple devices per test
1eb6b23f27 udev-test: do not rely on "mail" group being defined
4a0a4dcf10 udev: Fix sound.target dependency (bsc#1179363)
OBS-URL: https://build.opensuse.org/request/show/856898
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1131
- Enable support for zstd compression
systemd-journald will now use zstd for compressing large fields in
journal files. systemd-coredump will also use this algorithm to
compress coredump files.
Please note that systemd older than v246 won't be able to read new
journal files as zstd algorithm is not supported by these versions.
This incompatible change was actually not the only one introduced by
v246 since the hash tables in journal files have been hardened
against hash collisions too in an incompatible way with older
versions.
OBS-URL: https://build.opensuse.org/request/show/856647
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1130
- Explicitly require group(kvm) by udev: the group used to be
created by system-users-hardware, but has been split/moved to
qemu/kvm, where it is more logical. The file
/usr/lib/udev/rules.d/50-udev-default.rules references this
group, thus we should make sure the group exists. Otherwise there
are errors in the journal in the form of:
/usr/lib/udev/rules.d/50-udev-default.rules:86 Unknown group 'kvm', ignoring
- Explicitly require group(kvm) by udev: the group used to be
created by system-users-hardware, but has been split/moved to
qemu/kvm, where it is more logical. The file
/usr/lib/udev/rules.d/50-udev-default.rules references this
group, thus we should make sure the group exists. Otherwise there
are errors in the journal in the form of:
/usr/lib/udev/rules.d/50-udev-default.rules:86 Unknown group 'kvm', ignoring
OBS-URL: https://build.opensuse.org/request/show/855679
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1129
