Commit Graph

1851 Commits

Author SHA1 Message Date
Martin Pitt
1d744b97d4 libnss-*.prerm: Remove possible [key=value] options from NSS modules as well
Parameterize remove_nss_entry() so that it is exactly the same in all postrms
and thus easier to test and keep in sync. Move from the complicated Perl
subroutine to a simpler sed.

LP: #1625584
2016-09-20 13:25:28 +02:00
Martin Pitt
c80c55b22d debian/tests/storage: Avoid stderr output of stopping systemd-cryptsetup@.service 2016-09-20 13:25:28 +02:00
Martin Pitt
10a2cd99c0 Revert "networkd: remove route if carrier is lost"
This causes networkd to drop addresses from unmanaged interfaces in some
cases.

Closes: #837759
2016-09-20 11:08:53 +02:00
Martin Pitt
f8545fd5a1 Ubuntu: Move ondemand.service from static to runtime enablement
This makes it easier to keep performance, by disabling ondemand.service.

Side issue in LP: #1579278
2016-09-19 22:37:07 +02:00
Martin Pitt
2fafc36128 debian/extra/set-cpufreq: Use powersave with intel_pstate
This is what we did on xenial, and apparently powersave is still actually
better than performance. Thanks to Doug Smythies for the measurements!

LP: #1579278
2016-09-19 22:37:07 +02:00
Martin Pitt
972e467665 debian/tests/systemd-fsckd: Robustify check for "unit was running"
In some cases ActiveEnterTimestampMonotonic is zero even for units that did
run. Stop trying to interpret individual properties and just rely on "systemctl
status" to do it for us.

This also shows the complete status output on test failure, which eases
debugging.

LP: #1624406
2016-09-19 22:36:59 +02:00
Martin Pitt
bc96cb3052 systemd.postinst: Drop setcap call for systemd-detect-virt
This hasn't been necessary any more since
https://github.com/systemd/systemd/commit/fdd25311

Drop corresponding libcap2-bin dependency.
2016-09-19 22:36:59 +02:00
Martin Pitt
39fc527be0 debian/tests/boot-smoke: Only run 5 iterations
20 iterations take about 45 minutes in our cloud environment, so dial that down
for now. It's simple enough to bump back once we actually run into a hard to
reproduce boot failure, but it has not happened in a long time.

Gbp-Dch: Short
2016-09-19 22:36:59 +02:00
Martin Pitt
9e202a3291 73-usb-net-by-mac.rules: Split kernel command line import line
Reportedly this makes the rule actually work on some platforms. Thanks Alp
Toker!

LP: #1593379
2016-09-19 22:36:59 +02:00
Michael Biebl
8dc6998c2e fsckd: Do not exit on idle timeout if there are still clients connected
systemd-fsckd's event loop terminates if nothing happens for 30 seconds.
Exiting prematurely while fsck is still running but simply too slow to
send us progress updates would close the socket and fsck would receive
SIGPIPE when it writes to the socket. If this happens, the fsck process
is aborted and the file system check is not completed.

Closes: #788050
LP: #1547844
2016-09-19 22:36:10 +02:00
Martin Pitt
05e6495492 releasing package systemd version 231-6 2016-09-11 15:01:40 +02:00
Martin Pitt
fcc60f980f Add Ref()/Unref() bus calls for units
Patches cherry-picked from upstream master. This is a prerequisite to wait for
a unit to stop in a race-free manner (#4098)

Gbp-Dch: Short
2016-09-11 11:35:11 +02:00
Martin Pitt
79e10aaee1 networkd: remove route if carrier is lost
Patch cherry-picked from upstream master.

Gbp-Dch: Short
2016-09-11 09:13:16 +02:00
Martin Pitt
f3c4eafa52 systemctl: consider service running only when it is in active or reloading state
Patch cherry-picked from upstream master.

Gbp-Dch: Short
2016-09-11 09:09:31 +02:00
Martin Pitt
4d0a5249de networkd: limit the number of routes to the kernel limit
Patch cherry-picked from upstream master.

Gbp-Dch: Short
2016-09-11 09:08:38 +02:00
Martin Pitt
fbc31e073e Re-fix upstream version for upstream master builds
Commit d095cea broke UPSTREAM_VERSION for the shlibs file for upstream builds.
Re-fix like in commit d1cc137b.
2016-09-10 21:39:45 +02:00
Martin Pitt
a1bbdee842 debian/tests/smoke: Store udev db dump artifact on failure 2016-09-10 13:20:16 +02:00
Martin Pitt
061c04b766 resolved: recognize DNS names with more than one trailing dot as invalid
Patch cherry-picked from upstream master.

LP: #1600000

Gbp-Dch: Short
2016-09-09 18:00:22 +02:00
Dimitri John Ledkov
d095ceaa50 Use idiomatic variables from dpkg include. 2016-09-09 14:21:06 +02:00
Martin Pitt
58d2376608 Detect if seccomp is enabled but seccomp filtering is disabled
Patches cherry-picked from upstream master.

Closes: #832713

Gbp-Dch: Short
2016-09-07 08:21:44 +02:00
Felipe Sateler
4b1ba0037c git-cherry-pick: always recreate the patch-queue branch
But print the previous address in case it had other work
2016-09-03 10:03:42 -03:00
Martin Pitt
4acb6449b6 Add alternative iptables-dev build dependencies
libiptc-dev is very new and not yet present in stable Debian/Ubuntu releases.
Add it as a fallback build dependency for backports and upstream tests.
2016-08-28 12:07:09 +02:00
Martin Pitt
928d348b6c releasing package systemd version 231-5 2016-08-26 11:00:23 +02:00
Felipe Sateler
6e32c0be6c sysv-generator: better error reporting
When parsing the init script, show the file and line number where the
error was found. At the same time, add more context information if
available.

Closes: #830257
2016-08-25 14:52:43 +02:00
Michael Biebl
15482b0fd6 Wrap overlong changelog entries
"gbp dch" doesn't do that for us automatically.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=788496

Gbp-Dch: Ignore
2016-08-25 14:09:44 +02:00
Michael Biebl
5166e83472 Revert "logind: really handle *KeyIgnoreInhibited options in logind.conf"
The special 'key handling' inhibitors should always work regardless of
any *IgnoreInhibited settings – otherwise they're nearly useless.
Update man pages to clarify that *KeyIgnoreInhibited only apply to a
subset of locks

Closes: #834148
2016-08-25 14:01:38 +02:00
Martin Pitt
11be2b7168 systemd.NEWS: Point out that alternatively rcS scripts can be moved to rc[2-5]
Thanks to Petter Reinholdtsen for the suggestion!
2016-08-25 11:08:25 +02:00
Martin Pitt
9e30dcb793 bootctl: Automatically detect ESP partition
This makes bootctl work with Debian's /boot/efi/ mountpoint without having to
explicitly specify --path.

Patches cherry-picked from upstream master.
2016-08-25 08:55:12 +02:00
Michael Biebl
26187cfaa0 Enable iptables support
Closes: #787480
2016-08-24 13:13:00 +02:00
Martin Pitt
c41ccefca5 Add debian/extra/kernel-install.d/60-initrd.install
This kernel-install drop-in copies the initrd of the selected kernel to the
EFI partition.
2016-08-24 06:54:17 +02:00
Martin Pitt
578cd314d6 Ship kernel-install
This is an implementation of the freedesktop.org boot loader spec:

   https://www.freedesktop.org/wiki/Specifications/BootLoaderSpec/

Closes: #744301

Gbp-Dch: Short
2016-08-24 06:54:17 +02:00
Martin Pitt
b42e1f8af2 73-usb-net-by-mac.rules: Test for disabling 80-net-setup-link.rules more efficiently
Do not run readlink for *every* uevent, this should (at most) be done for USB
network devices, so move that test after that.

Also, stop calling readlink at all and just test if
/etc/udev/rules.d/80-net-setup-link.rules exists -- a common way to disable an
udev rule is to just "touch" it in /etc/udev/rule.d/ (i. e. empty file), and if
the rule is customized we cannot really predict anyway if the user wants
MAC-based USB net names or not.

LP: #1615021
2016-08-24 06:41:11 +02:00
Felipe Sateler
873c86d024 Replace Revert-units-add-a-basic-SystemCallFilter-3471.patch with upstream patch 2016-08-23 06:47:05 +02:00
Felipe Sateler
744ff7a7ad Add basic version of git-cherry-pick 2016-08-23 06:46:33 +02:00
Iain Lane
051e3398fd Let graphical-session-pre.target be manually started
LP: #1615341
2016-08-23 06:46:31 +02:00
Martin Pitt
0e897bf7a7 Replace Revert-pid1-reconnect-to-the-console-before-being-re-exec.patch with upstream patch
The reversion was done upstream, move in series and cherry-pick patch from
upstream master.

Gbp-Dch: Ignore
2016-08-20 06:34:07 +02:00
Martin Pitt
46c18d2d5f releasing package systemd version 231-4 2016-08-18 07:03:30 +02:00
Martin Pitt
f44d226629 Revert "pid1: reconnect to the console before being re-executed"
This unbreaks consoles after "daemon-reexec".

Closes: #834367
2016-08-16 20:49:31 +02:00
Martin Pitt
167ef84b4d releasing package systemd version 231-3 2016-08-15 09:58:55 +02:00
Martin Pitt
adfde94b5c Revert unit usage of MemoryDenyWriteExecute=yes as well
This is implemented through seccomp as well.

Closes: #832713
2016-08-15 09:56:07 +02:00
Martin Pitt
9d39d5c127 resolved resolvconf integration: Run resolvconf without privilege restrictions
On some architectures (at least ppc64el), running resolvconf does not work with
MemoryDenyWriteExecute=yes:

    Process: 4728 ExecStartPost=/bin/sh -c [ ! -e /run/resolvconf/enable-updates ] || echo "nameserver 127.0.0.53" | /sbin/resolvconf -a systemd-resolved (code=exited, status=127)

    Aug 15 07:16:39 autopkgtest sh[4659]: sed: error while loading shared libraries: cannot restore segment prot after reloc: Operation not permitted

LP: #1609740
2016-08-15 09:26:15 +02:00
Martin Pitt
e2ee845bc7 releasing package systemd version 231-2 2016-08-14 10:55:38 +02:00
Martin Pitt
39ccf2b0a0 Revert "units: add a basic SystemCallFilter (#3471)"
This causes fatal failures on kernels that don't have seccomp enabled. This can
be reactivated once https://github.com/systemd/systemd/issues/3882 is fixed.

Closes: #832713
Closes: #832893
2016-08-14 09:32:41 +02:00
Martin Pitt
2e9ebeb1f9 debian/tests/localed-x11-keymap: Check that localed works without /etc/default/keyboard
This reproduces #833849.
2016-08-14 09:24:29 +02:00
Martin Pitt
a4d7f8fb15 debian/tests/localed-x11-keymap: Robustify cleanup
Ensure that /etc/default/keyboard always gets restored even on a failure.

Gbp-Dch: Short
2016-08-14 09:23:36 +02:00
Simon McVittie
624a493054 localed: tolerate absence of /etc/default/keyboard
The debian-specific patch to read Debian config files was not tolerating
the absence of /etc/default/keyboard. This causes systemd-localed to
fail to start on systems where that file isn't populated (like embedded
systems without keyboards).

Closes: #833849
2016-08-12 10:03:57 -04:00
Martin Pitt
4356f08e01 debian/rules: Put back cleanup of *.busname
This is still necessary as upstream still ships *.busname units.

Closes: #833487

This reverts commit fa607af7b4.
2016-08-12 08:00:14 +02:00
Martin Pitt
05199cdc74 Replace debian/extra/user-units/graphical-session-pre.target with upstream patch
Gbp-Dch: Ignore
2016-08-02 16:38:11 +02:00
Martin Pitt
901ff1c664 Limit "link against /usr" check to some critical binaries only and add generators
-networkd, -timedated etc. can link against /usr.

Gbp-Dch: Short
2016-07-28 08:54:23 +02:00
Martin Pitt
19ec5e866c debian/systemd.NEWS: Fix urgency in 231-1
Gbp-Dch: Ignore
2016-07-28 08:08:40 +02:00