Commit Graph

1838 Commits

Author SHA1 Message Date
Martin Pitt
f3c4eafa52 systemctl: consider service running only when it is in active or reloading state
Patch cherry-picked from upstream master.

Gbp-Dch: Short
2016-09-11 09:09:31 +02:00
Martin Pitt
4d0a5249de networkd: limit the number of routes to the kernel limit
Patch cherry-picked from upstream master.

Gbp-Dch: Short
2016-09-11 09:08:38 +02:00
Martin Pitt
fbc31e073e Re-fix upstream version for upstream master builds
Commit d095cea broke UPSTREAM_VERSION for the shlibs file for upstream builds.
Re-fix like in commit d1cc137b.
2016-09-10 21:39:45 +02:00
Martin Pitt
a1bbdee842 debian/tests/smoke: Store udev db dump artifact on failure 2016-09-10 13:20:16 +02:00
Martin Pitt
061c04b766 resolved: recognize DNS names with more than one trailing dot as invalid
Patch cherry-picked from upstream master.

LP: #1600000

Gbp-Dch: Short
2016-09-09 18:00:22 +02:00
Dimitri John Ledkov
d095ceaa50 Use idiomatic variables from dpkg include. 2016-09-09 14:21:06 +02:00
Martin Pitt
58d2376608 Detect if seccomp is enabled but seccomp filtering is disabled
Patches cherry-picked from upstream master.

Closes: #832713

Gbp-Dch: Short
2016-09-07 08:21:44 +02:00
Felipe Sateler
4b1ba0037c git-cherry-pick: always recreate the patch-queue branch
But print the previous address in case it had other work
2016-09-03 10:03:42 -03:00
Martin Pitt
4acb6449b6 Add alternative iptables-dev build dependencies
libiptc-dev is very new and not yet present in stable Debian/Ubuntu releases.
Add it as a fallback build dependency for backports and upstream tests.
2016-08-28 12:07:09 +02:00
Martin Pitt
928d348b6c releasing package systemd version 231-5 2016-08-26 11:00:23 +02:00
Felipe Sateler
6e32c0be6c sysv-generator: better error reporting
When parsing the init script, show the file and line number where the
error was found. At the same time, add more context information if
available.

Closes: #830257
2016-08-25 14:52:43 +02:00
Michael Biebl
15482b0fd6 Wrap overlong changelog entries
"gbp dch" doesn't do that for us automatically.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=788496

Gbp-Dch: Ignore
2016-08-25 14:09:44 +02:00
Michael Biebl
5166e83472 Revert "logind: really handle *KeyIgnoreInhibited options in logind.conf"
The special 'key handling' inhibitors should always work regardless of
any *IgnoreInhibited settings – otherwise they're nearly useless.
Update man pages to clarify that *KeyIgnoreInhibited only apply to a
subset of locks

Closes: #834148
2016-08-25 14:01:38 +02:00
Martin Pitt
11be2b7168 systemd.NEWS: Point out that alternatively rcS scripts can be moved to rc[2-5]
Thanks to Petter Reinholdtsen for the suggestion!
2016-08-25 11:08:25 +02:00
Martin Pitt
9e30dcb793 bootctl: Automatically detect ESP partition
This makes bootctl work with Debian's /boot/efi/ mountpoint without having to
explicitly specify --path.

Patches cherry-picked from upstream master.
2016-08-25 08:55:12 +02:00
Michael Biebl
26187cfaa0 Enable iptables support
Closes: #787480
2016-08-24 13:13:00 +02:00
Martin Pitt
c41ccefca5 Add debian/extra/kernel-install.d/60-initrd.install
This kernel-install drop-in copies the initrd of the selected kernel to the
EFI partition.
2016-08-24 06:54:17 +02:00
Martin Pitt
578cd314d6 Ship kernel-install
This is an implementation of the freedesktop.org boot loader spec:

   https://www.freedesktop.org/wiki/Specifications/BootLoaderSpec/

Closes: #744301

Gbp-Dch: Short
2016-08-24 06:54:17 +02:00
Martin Pitt
b42e1f8af2 73-usb-net-by-mac.rules: Test for disabling 80-net-setup-link.rules more efficiently
Do not run readlink for *every* uevent, this should (at most) be done for USB
network devices, so move that test after that.

Also, stop calling readlink at all and just test if
/etc/udev/rules.d/80-net-setup-link.rules exists -- a common way to disable an
udev rule is to just "touch" it in /etc/udev/rule.d/ (i. e. empty file), and if
the rule is customized we cannot really predict anyway if the user wants
MAC-based USB net names or not.

LP: #1615021
2016-08-24 06:41:11 +02:00
Felipe Sateler
873c86d024 Replace Revert-units-add-a-basic-SystemCallFilter-3471.patch with upstream patch 2016-08-23 06:47:05 +02:00
Felipe Sateler
744ff7a7ad Add basic version of git-cherry-pick 2016-08-23 06:46:33 +02:00
Iain Lane
051e3398fd Let graphical-session-pre.target be manually started
LP: #1615341
2016-08-23 06:46:31 +02:00
Martin Pitt
0e897bf7a7 Replace Revert-pid1-reconnect-to-the-console-before-being-re-exec.patch with upstream patch
The reversion was done upstream, move in series and cherry-pick patch from
upstream master.

Gbp-Dch: Ignore
2016-08-20 06:34:07 +02:00
Martin Pitt
46c18d2d5f releasing package systemd version 231-4 2016-08-18 07:03:30 +02:00
Martin Pitt
f44d226629 Revert "pid1: reconnect to the console before being re-executed"
This unbreaks consoles after "daemon-reexec".

Closes: #834367
2016-08-16 20:49:31 +02:00
Martin Pitt
167ef84b4d releasing package systemd version 231-3 2016-08-15 09:58:55 +02:00
Martin Pitt
adfde94b5c Revert unit usage of MemoryDenyWriteExecute=yes as well
This is implemented through seccomp as well.

Closes: #832713
2016-08-15 09:56:07 +02:00
Martin Pitt
9d39d5c127 resolved resolvconf integration: Run resolvconf without privilege restrictions
On some architectures (at least ppc64el), running resolvconf does not work with
MemoryDenyWriteExecute=yes:

    Process: 4728 ExecStartPost=/bin/sh -c [ ! -e /run/resolvconf/enable-updates ] || echo "nameserver 127.0.0.53" | /sbin/resolvconf -a systemd-resolved (code=exited, status=127)

    Aug 15 07:16:39 autopkgtest sh[4659]: sed: error while loading shared libraries: cannot restore segment prot after reloc: Operation not permitted

LP: #1609740
2016-08-15 09:26:15 +02:00
Martin Pitt
e2ee845bc7 releasing package systemd version 231-2 2016-08-14 10:55:38 +02:00
Martin Pitt
39ccf2b0a0 Revert "units: add a basic SystemCallFilter (#3471)"
This causes fatal failures on kernels that don't have seccomp enabled. This can
be reactivated once https://github.com/systemd/systemd/issues/3882 is fixed.

Closes: #832713
Closes: #832893
2016-08-14 09:32:41 +02:00
Martin Pitt
2e9ebeb1f9 debian/tests/localed-x11-keymap: Check that localed works without /etc/default/keyboard
This reproduces #833849.
2016-08-14 09:24:29 +02:00
Martin Pitt
a4d7f8fb15 debian/tests/localed-x11-keymap: Robustify cleanup
Ensure that /etc/default/keyboard always gets restored even on a failure.

Gbp-Dch: Short
2016-08-14 09:23:36 +02:00
Simon McVittie
624a493054 localed: tolerate absence of /etc/default/keyboard
The debian-specific patch to read Debian config files was not tolerating
the absence of /etc/default/keyboard. This causes systemd-localed to
fail to start on systems where that file isn't populated (like embedded
systems without keyboards).

Closes: #833849
2016-08-12 10:03:57 -04:00
Martin Pitt
4356f08e01 debian/rules: Put back cleanup of *.busname
This is still necessary as upstream still ships *.busname units.

Closes: #833487

This reverts commit fa607af7b4.
2016-08-12 08:00:14 +02:00
Martin Pitt
05199cdc74 Replace debian/extra/user-units/graphical-session-pre.target with upstream patch
Gbp-Dch: Ignore
2016-08-02 16:38:11 +02:00
Martin Pitt
901ff1c664 Limit "link against /usr" check to some critical binaries only and add generators
-networkd, -timedated etc. can link against /usr.

Gbp-Dch: Short
2016-07-28 08:54:23 +02:00
Martin Pitt
19ec5e866c debian/systemd.NEWS: Fix urgency in 231-1
Gbp-Dch: Ignore
2016-07-28 08:08:40 +02:00
Martin Pitt
fe6f39598e Revert "debian/rules: Ignore libcap-ng.so in the "does anything link against /usr" check"
libcap-ng 0.7.7-3 got moved to /lib so this is not necessary any more.

This reverts commit 0b7af9aab8.

Gbp-Dch: Ignore
2016-07-28 08:00:56 +02:00
Martin Pitt
d1cc137be7 debian/rules: Fix UPSTREAM_VERSION for upstream master builds
Only consider the first number instead of everything up to the last -, so that
shlibs.local will match the actual generated internal library name.

Gbp-Dch: Short
2016-07-26 21:42:43 +02:00
Martin Pitt
3449c64db5 releasing package systemd version 231-1 2016-07-26 12:26:29 +02:00
Martin Pitt
4c7ade0a69 Set Debian/Ubuntu downstream support URL in journal catalogs
Closes: #769187
2016-07-26 12:16:54 +02:00
Martin Pitt
0e8c0dbf25 Update changelog 2016-07-26 12:16:54 +02:00
Martin Pitt
65b8d9b166 Dynamically add upstream version to debian/shlibs.local 2016-07-26 12:16:54 +02:00
Martin Pitt
fa607af7b4 debian/rules: Drop obsolete cleanup of *.busname
Gbp-Dch: Ignore
2016-07-26 11:38:09 +02:00
Martin Pitt
1c9d6bdbb8 systemd.NEWS: Bump version to 231-1
Gbp-Dch: Ignore
2016-07-26 11:38:09 +02:00
Martin Pitt
106676a209 Add debian/extra/units-ubuntu/user@.service.d/timeout.conf
This avoids long hangs during shutdown if user services fail/hang due to X.org
going away too early. This is mostly a workaround, so only install for
Ubuntu for now.
2016-07-26 10:39:22 +02:00
Martin Pitt
cf8239f7b3 Add graphical-session-pre.target user unit
We need an "early" session target for things like gnome-keyring, openssh's
ssh-agent, session-migration etc. which all need to start before the main
desktop. These export environment variables to systemd/D-Bus such as
SSH_AUTH_SOCK or update the gsettings database.

This will be upstreamed soon once the structure for graphical systemd sessions
settles down.

Gbp-Dch: Short
2016-07-26 09:33:32 +02:00
Martin Pitt
1f91809801 Add graphical-session.target user unit
Patch cherry-picked from upstream master.
2016-07-26 09:33:32 +02:00
Martin Pitt
6f114a73db Update changelog 2016-07-26 09:33:32 +02:00
Martin Pitt
d4478997d5 New upstream release 231
- Fix "Failed to create directory /str/sys/fs/selinux: Read-only file system"
   warning. (Closes: #830693)

Drop cherry-picked patches and adjust the others for the new upstream release.

Add new symbols. Bump version in debian/shlibs.local
2016-07-26 09:33:20 +02:00