Commit Graph

73017 Commits

Author SHA1 Message Date
Mike Yuan
b6d31deca4
shared/vpick: check deterministic suffix earlier
Follow-up for 421a4ba7e4
2024-04-20 07:17:04 +08:00
Mike Yuan
fde8fb7466
shared/vpick: flatten errno check 2024-04-20 07:16:24 +08:00
Mike Yuan
164f3d8f3d
shared/vpick: use strdup_to where appropriate 2024-04-20 07:16:00 +08:00
Lennart Poettering
bf49f3bb44
Merge pull request #31872 from tfg13/main
stub+ukify: Add support for UKI .ucode section
2024-04-19 23:59:13 +02:00
Lennart Poettering
6e10417ff6
Merge pull request #31889 from aplanas/fix_pcrlock_stdin
pcrlock: support measurement of big files
2024-04-19 23:57:28 +02:00
Luca Boccassi
0c8780babf
Merge pull request #32346 from yuwata/sd-radv-handle-header-param-gracefully
sd-radv: handle header param gracefully
2024-04-19 21:14:21 +02:00
Antonio Alvarez Feijoo
cc51dbe999 cpio: fix assert 2024-04-19 20:38:44 +02:00
Antonio Alvarez Feijoo
2f49ed9a01 stub: get uname from image before loading addons
Otherwise uname is always NULL before calling `load_addons()`, so it's not being
checked if .uname matches between addons and UKI.

Fixes 68f85761e2
2024-04-19 20:37:39 +02:00
Luca Boccassi
785d625c2a NEWS: note that portabled supports vpick too 2024-04-19 19:35:42 +01:00
Luca Boccassi
565f6130b2
Merge pull request #32142 from bluca/portable_vpick
portable: support vpick
2024-04-19 20:34:16 +02:00
Luca Boccassi
f5054c2e37
Merge pull request #32251 from CodethinkLabs/vmspawn/docs_improvements
vmspawn docs improvements
2024-04-19 20:33:05 +02:00
Zbigniew Jędrzejewski-Szmek
ef40ad963a
Merge pull request #32365 from poettering/gpt-auto-doc-fix
man: tweak gpt-auto-generator docs a bit
2024-04-19 18:49:11 +02:00
Lennart Poettering
366af154fa man: correct where we look for auxiliary partitions
We look for the root fs on the device of the booted ESP, and for the
other partitions on the device of the root fs. On EFI systems this
generally boils down to the same, but there are cases where this doesn't
hold, hence document this properly.

Fixes: #31199
2024-04-19 18:36:33 +02:00
Lennart Poettering
1bf7e13c55 man: add explicit column for gpt guid value in table 2024-04-19 18:36:16 +02:00
Lennart Poettering
6cfd19cfd1 man: add separate column for flag value to table 2024-04-19 18:34:43 +02:00
Frantisek Sumsal
20730c60dd labeler: merge "logind" label into "login"
Existing issues/PRs were migrated to the login label using:
$ gh search issues --repo systemd/systemd --label logind --limit=1000 --json number -q .[].number | \
        xargs gh issue edit --add-label login --remove-label logind
2024-04-19 18:31:51 +02:00
Sam Leonard
2068ef6804
man: vmspawn - clarify behaviour of omitting --linux=/--initrd= 2024-04-19 16:58:37 +01:00
Sam Leonard
9c50fd64b5
man: vmspawn - clarify behaviour of omitting --vsock-cid= 2024-04-19 16:56:13 +01:00
Sam Leonard
dae32b1a2a
man: removely overly verbose wording from the vmspawn man page 2024-04-19 16:42:13 +01:00
Sam Leonard
900d283ae0
man: vmspawn - reference later example to show use of --private-users 2024-04-19 16:42:13 +01:00
Sam Leonard
45ec09ba4b
man: clarify behaviour when omitting both -i/-D in vmspawn 2024-04-19 16:42:13 +01:00
Sam Leonard
e82d12a52f
man: fix entry for vmspawn's --ssh-key-type 2024-04-19 16:38:49 +01:00
Sam Leonard
1490debd62
man: add ssh example for vmspawn 2024-04-19 16:38:49 +01:00
Sam Leonard
b8db8e557b
man: add example --forward-journal= example for vmspawn 2024-04-19 16:38:49 +01:00
Sam Leonard
0f37ff38a8
man: add machinectl import-raw example for vmspawn 2024-04-19 16:38:48 +01:00
Alberto Planas
bb6fe2afbc pcrlock: add make_pcrlock_record_from_stream
To hash long files (like initrd) add the funcion
make_pcrlock_record_from_stream, that will read a long file (or stdin)
to generate the digests of multiple hashes, redading block by block.

Use this new function in verb_lock_raw and verb_lock_kernel_initrd.

Signed-off-by: Alberto Planas <aplanas@suse.com>
2024-04-19 16:43:00 +02:00
Daan De Meyer
f5fefec786 vmspawn: Fix shared memory check
We need the shared memory added if we're doing runtime mounts as well.
2024-04-19 16:22:07 +02:00
Lennart Poettering
fa6ea80958 man: document the last remaining bits of the hostnamed D-Bus interface 2024-04-19 16:02:14 +02:00
Tobias Fleig
d380337dc5 ukify: Add support for .ucode UKI section
This commit teaches ukify how to build a .ucode section into UKIs. This
section is functionally an initrd, intended for microcode updates.
2024-04-19 06:28:47 -07:00
Daan De Meyer
792eb0f440 mkosi: Build command line into the image
This allows using systemd-vmspawn itself while still getting a decent
experience.
2024-04-19 15:05:19 +02:00
Tobias Fleig
590ac4bd27 measure: Add .ucode UKI section support
This commit adds support for the new ".ucode" UKI section to
systemd-measure. It is functionally an initrd and is treated as such by
measure.
2024-04-19 05:58:56 -07:00
Tobias Fleig
aea81bc0ff stub: Add support for .ucode UKI section
This commit adds support for loading, measuring and handling a ".ucode"
UKI section. This section is functionally an initrd, intended for
microcode updates. As such it will always be passed to the kernel first.
2024-04-19 05:58:46 -07:00
Luca Boccassi
8257508c58 portable: support vpick
Resolve at attach/detach/inspect time, so that the image is pinned and requires
re-attaching on update, given files are extracted from it so just passing
img.v/ to RootImage= is not enough to get a portable image updated
2024-04-19 13:25:32 +01:00
Luca Boccassi
421a4ba7e4 vpick: add pick_filter_image_any filter that matches both dirs and images 2024-04-19 13:25:32 +01:00
Luca Boccassi
14f75708e2
Merge pull request #32349 from yuwata/sd-event-source-get-inotify-path
sd-event: introduce sd_event_source_get_inotify_path()
2024-04-19 12:19:06 +02:00
Luca Boccassi
87544df83c
Merge pull request #32345 from yuwata/sd-radv-send
sd-radv: introduce sd_radv_send(), and reset timer on sending unsplicited RA
2024-04-19 11:59:08 +02:00
Luca Boccassi
5dcd6b1d55
Merge pull request #31978 from nolange/fix_openssl_deprecations
Fix openssl deprecations
2024-04-19 11:20:44 +02:00
Yu Watanabe
d5f24a0ea9 sd-event,sd-journal: fix error handling of inotify_add_watch_fd()
Fixes a bug in 97ef539169 and
858749f731.
2024-04-19 11:10:55 +02:00
Lennart Poettering
3f011540fd update TODO 2024-04-19 10:54:22 +02:00
Krzesimir Nowak
d74d69ae53 test: Make the sysext test to run with --root and without
I was bitten several times by testing things only with --root flag, so this
commit prepares the existing test cases to run on / too. This required the test
cases to clean up after themselves, thus I have put each test case in a
separate subshell and used traps to do the cleanups.

I needed to change the hierarchy used by the test extension to /opt, because
unmounting /usr often failed with EBUSY.
2024-04-19 10:24:17 +02:00
Daan De Meyer
a2574ebf4d mkosi: Fix FORTIFY_SOURCE (again)
CentOS/Fedora use annobin which will complain if FORTIFY_SOURCE=0
is used so we disable those checks to avoid the warnings.

We also make sure that when we query the compilation flags so we can
add more, we set _fortify_level=0 and undefine _lto_flags so that we
don't get those flags in the result.
2024-04-19 10:17:09 +02:00
Krzesimir Nowak
d3577fb7ba sysext: Determine extensions earlier
Before any directory in root filesystem is potentially made.
2024-04-19 10:01:19 +02:00
Krzesimir Nowak
b2370203d9 sysext: Use EPROTO for child failure 2024-04-19 08:59:10 +02:00
Krzesimir Nowak
90ace86359 sysext: Use the new path-util helper 2024-04-19 08:33:04 +02:00
Krzesimir Nowak
581d8a1470 path-util: Add a helper for checking paths
The difference with the already existing path_equal_or_inode_same function is
that the new one does not swallow errors.
2024-04-19 08:30:40 +02:00
Yu Watanabe
74c4231ce5 sd-event: introduce sd_event_source_get_inotify_path()
This may be useful when there are multiple inotify event sources exist.
Without this, users need to manage the event sources and paths.
2024-04-19 14:23:11 +09:00
Yu Watanabe
fc6ec43c02 man: drop spurious version info for error code
Follow-up for 87fe0a6960.
2024-04-19 14:23:08 +09:00
Krzesimir Nowak
55c28a88f1 sysext: Make static const a macro instead 2024-04-19 07:21:35 +02:00
Krzesimir Nowak
3e8f4d92b4 sysext: Use string table for parsing mutable mode 2024-04-19 07:21:02 +02:00
Krzesimir Nowak
60c335a4bc test: Do not limit hierarchies 2024-04-19 07:20:52 +02:00