Revisions of systemd

Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1164306 from Franck Bui's avatar Franck Bui (fbui) (revision 419)
- Move systemd-repart from experimental to udev.

- Add 0001-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.

- The following patches have been merged into SUSE/v255 branch hence removed
  from the OBS project.
  5006-cgroup-Add-EffectiveMemoryMax-EffectiveMemoryHigh-an.patch
  5007-test-Convert-rlimit-test-to-subtest-of-generic-limit.patch
  5008-test-Add-effective-cgroup-limits-testing.patch
  5009-cgroup-Restrict-effective-limits-with-global-resourc.patch
  5010-cgroup-Rename-effective-limits-internal-table.patch
- Import commit 56b53b17bcd8311dfb53f05b359b2812593883ab
  56b53b17bc cgroup: Rename effective limits internal table (jsc#PED-5659)
  7c9202317c cgroup: Restrict effective limits with global resource provision (jsc#PED-5659)
  da858e68eb test: Add effective cgroup limits testing (jsc#PED-5659)
  2f013357a5 test: Convert rlimit test to subtest of generic limit testing (jsc#PED-5659)
  0a3ea7f367 cgroup: Add EffectiveMemoryMax=, EffectiveMemoryHigh= and EffectiveTasksMax= properties (jsc#PED-5659)

- Drop split_usr build conditional since both split-usr and unmerged-usr
  supports have been removed since v255.
- Don't use the "Patch:" directive with a suffix number as since the suffix
  doesn't serve any purpose.
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1159582 from Franck Bui's avatar Franck Bui (fbui) (revision 418)
- Import commit be772961ada05afab21a72e225d28c26ef9fb1ea (merge of v255.4)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/3986ed5117e1563adfce3f5a8e088a77016c0aee...be772961ada05afab21a72e225d28c26ef9fb1ea

- Import commit 3986ed5117e1563adfce3f5a8e088a77016c0aee
  3986ed5117 test: drop route from test-functions

- Account for upstream changes to the quotaon and quotacheck services

- Create /etc/sysusers.d as expected by sysusers.d(5)

- Move C API manual pages to systemd-doc, this saves buildroots
  770+ files and time (mandb is run in %posttrans).
- Delete supplements on base-documentation from that.
- Courtesy of spec formatters, remove redundant %defattr.
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1152118 from Thomas Blume's avatar Thomas Blume (tsaupe) (revision 417)
- Fix syntax required for OBS source validator

- Upgrade to v255.3 (commit 96edf7ad1866172b994cafb4df49e27d68ce8e87)
  See https://github.com/openSUSE/systemd/blob/SUSE/v255/NEWS for details.
  - This includes the following bug fixes:
    - commit 6e10405aa25fe5e76b740d9ec59730e3f4470c7a (bsc#1219766)
  - The following patches have been rebased:
    - 0002-rc-local-fix-ordering-startup-for-etc-init.d-boot.lo.patch
    - 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch
    - 0009-pid1-handle-console-specificities-weirdness-for-s390.patch
    - 5001-Revert-udev-update-devlink-with-the-newer-device-nod.patch
    - 5002-Revert-udev-revert-workarounds-for-issues-caused-by-.patch
  - The following patches have been removed since they're part of v255:
    - 5003-cgroup-rename-TasksMax-structure-to-CGroupTasksMax.patch
    - 5004-bus-print-properties-ignore-CGROUP_LIMIT_MAX-for-Mem.patch
    - 5005-bus-print-properties-prettify-more-unset-properties.patch
  - systemd-boot has been added to the list of the dependencies of the
    systemd-testsuite package as the installation of the bootloader is now
    tested.
  - the following patches have been backported on top of v255.3:
    96edf7ad18 service: Demote log level of NotifyAccess= messages to debug (bsc#1210113 jsc#PED-6214)
    fdde7f26d6 vconsole-setup: don't fail if the only found vc is already used by plymouth (bsc#1218618)
    f96c587d41 rules: set up tty permissions and group for /dev/hvc* nodes (bsc#1218137)
    63a41b8899 vconsole-setup: remember the correct error value when open_terminal() fails
    f51a2e038c vconsole-setup: handle the case where the vc is in KD_GRAPHICS mode more gracefully (bsc#1215282)
    15025a04c4 test: make sure to install the filesystem package in the test image on SUSE
    06fecfb635 test: make sure that sd-boot is installed before testing bootctl
    1e8788ea68 test: install systemd-boot in openSUSE test images
    6e2875ad43 test/test-shutdown.py: optionally display the test I/Os in a dedicated log file
    4be1a801b4 test-69: send SIGTERM to ask systemd-nspawn to properly stop the container
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1149219 from Franck Bui's avatar Franck Bui (fbui) (revision 416)
- Import commit 31f1148f75a1155d3eb37fd1a450096d669ec65b
  31f1148f75 seccomp: include `fchmodat2` in `@file-system` (bsc#1219766)
  001f349c57 service: Demote log level of NotifyAccess= messages to debug (bsc#1210113 jsc#PED-6214) 

- Add a new %upstream macro to support building from upstream sources. This
  will allow upstream to build systemd rpms using the opensuse systemd packaging
  specs. These rpms will be built and used in upstream's mkosi based hacking and
  testing environment to test changes and in the future to run integration tests
  as well. By building the rpms using the opensuse packaging specs, the idea is
  to catch more issues ahead of time as the mkosi environment will behave more
  like a regular opensuse system.
- Add new %version_override and %version_release macros to allow overriding the
  version and release of the rpm respectively.
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1147539 from Franck Bui's avatar Franck Bui (fbui) (revision 415)
- Import commit 53e2aaaf9d69fb1c8f6ae2c9f8a99b02d70d318f
  53e2aaaf9d vconsole-setup: don't fail if the only found vc is already used by plymouth (bsc#1218618)
  22c4878430 vconsole-setup: port to main-func.h boilerplate

- systemd-testsuite: depend on "qemu" instead of "qemu-kvm", the latter is
  obsolete. (bsc#1218684)

- Import commit fbf9f32eb774ba6ec54e0d5d53b36baaf3e6b146
  fbf9f32eb7 test/test-shutdown.py: optionally display the test I/Os in a dedicated log file
  cd012774df test-69: send SIGTERM to ask systemd-nspawn to properly stop the container
  d883b83244 man: Document ranges for distributions config files and local config files

- Import commit fa94ab006d09686cef121aaa3baa10cf5ca95e19 (merge of v254.9)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/67a5ac1043417d900bf417a884372ae14a96ef69...fa94ab006d09686cef121aaa3baa10cf5ca95e19

- Update the version of libbpf dlopened by systemd (weak dependency) (bsc#1219440)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1144939 from Franck Bui's avatar Franck Bui (fbui) (revision 414)
- Drop python3-pefile dependency from the experimental package. MicroOs is fond
  of the experimental stuff but OTOH it doesn't ship python3. Let's drop the
  dependency for now, users of ukify are invited to install python3-pe manually.

- Move systemd-reboot.service from udev to the main package as this service is
  useful in containers.

  It includes the following fix:
    029272750f resolved: actually check authenticated flag of SOA transaction (bsc#1218297 CVE-2023-7008)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1141007 from Franck Bui's avatar Franck Bui (fbui) (revision 413)
- Add patches that implement [jsc#PED-5659]
  5003-cgroup-rename-TasksMax-structure-to-CGroupTasksMax.patch
  5004-bus-print-properties-ignore-CGROUP_LIMIT_MAX-for-Mem.patch
  5005-bus-print-properties-prettify-more-unset-properties.patch
  5006-cgroup-Add-EffectiveMemoryMax-EffectiveMemoryHigh-an.patch
  5007-test-Convert-rlimit-test-to-subtest-of-generic-limit.patch
  5008-test-Add-effective-cgroup-limits-testing.patch
  5009-cgroup-Restrict-effective-limits-with-global-resourc.patch
  5010-cgroup-Rename-effective-limits-internal-table.patch
  They are temporarily put in quarantine to get broader testing but should be
  eventually moved to the git repo.
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1138298 from Franck Bui's avatar Franck Bui (fbui) (revision 411)
- Add 5001-Revert-udev-update-devlink-with-the-newer-device-nod.patch
      5002-Revert-udev-revert-workarounds-for-issues-caused-by-.patch
  It seems that systemd upstream has a dubious way to fix broken code these
  days... let's revert these hacks until a final decision is taken to solve
  https://github.com/systemd/systemd/issues/28141. See also
  https://github.com/systemd/systemd/pull/30075.

- Import commit 67a5ac1043417d900bf417a884372ae14a96ef69 (merge of v254.8)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/071ac409a0564863657d8f8a5a35e6a4f914695f...67a5ac1043417d900bf417a884372ae14a96ef69

- udev(-mini)?: ensure %_modulesloaddir exists and is owned
  properly. Allows other packages to install modules without worry
  of the parent directory. We do not ensure /etc/modules-load.d
  exists in the -mini flavor, as that directory is not meant to be
  used by packages.

  071ac409a0 rules: set up tty permissions and group for /dev/hvc* nodes (bsc#1218137)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1134212 from Franck Bui's avatar Franck Bui (fbui) (revision 410)
- udev: only require kmod in the full flavor. udev-mini is only
  used inside OBS in a strictly defined setup and udev will never
  have to load device drivers there.

- Import commit 071ac409a0564863657d8f8a5a35e6a4f914695f
  071ac409a0 rules: set up tty permissions and group for /dev/hvc* nodes
  f693b3ed8a vconsole-setup: remember the correct error value when open_terminal() fails
  963d838bad vconsole-setup: handle the case where the vc is in KD_GRAPHICS mode more gracefully (bsc#1215282)
  6f53f71d2d vconsole-setup: simplify error handling
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1132619 from Franck Bui's avatar Franck Bui (fbui) (revision 409)
- Explicitely provide 'group(systemd-journal)' from the main package (bsc#1217852)

- Import commit ce08cd5f66e1a661c2b9ed764ad7036decd76503
  ce08cd5f66 man/standard-conf: directory paths should end with '/'
  8324cbfde7 config files: update their header to reflect that they can be installed in /usr
  bc36846ad2 Reflect the fact that main config files can be installed in /usr
  e304a11f33 config files: more recommendations of `systemd-analyze cat-config`
  c45cecf279 meson: add build option for install path of main config files
  cc61b052c6 vconsole-setup: use a consistent log level when setfont fails with EX_OSERR (bsc#1212970)
  4fe3653dab tmpfiles: ignore EINVAL with --graceful (bsc#1216628)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1130178 from Franck Bui's avatar Franck Bui (fbui) (revision 408)
- udev: Tighten permissions for DRM render nodes (bsc#1217118). Note that this
  implicitly enables `uaccess`, so any logged-in user still gets access
  regardless of group membership. Some use cases, e.g. remote access via ssh,
  might require you to add the desired user to the `render` group.
  See:
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/3S3HAWVODHC2FQI4E76IFGCSRVRJ63KG/
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1122219 from Franck Bui's avatar Franck Bui (fbui) (revision 407)
- Disable utmp support
  The announcement can be found at:
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/MYIWGQEE54VJDBYXMQCEY7XKEAIUFLAU/
  The user visible consequence of it is that /run/utmp file is no more created.
  systemd itself doesn't depend on utmp anymore since "shared/wall: use logind
  if build without utmp support" has been backported.
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1121115 from Franck Bui's avatar Franck Bui (fbui) (revision 406)
- Fix typo in /etc/systemd/user.confd.d (bsc#1216676)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1120043 from Franck Bui's avatar Franck Bui (fbui) (revision 405)
- Import commit b53f364c264cd598d4210b64285a55d362b47b89
  b53f364c26 test: install af_packet kernel module on openSUSE
  86b7521a3c shared/wall: use logind if build without utmp support
  65aac5858f errno-util: allow ERRNO_IS_* to accept types wider than int
  8f93b89db4 basic/errno-util: add wrappers which only accept negative errno
  1b815b3e76 Introduce RET_GATHER and use it in src/shared/

- Drop 0001-conf-parser-introduce-early-drop-ins.patch
  The usage of drop-ins is now the official way for configuring systemd and its
  various daemons on Factory/ALP.
  See: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/KWRBTAVQ6MGHVAHKDZZ6GIRX4RMHKHQ6/

- Ship the main configuration files in /usr/lib/
  Besides the fact that shipping files in /etc is not recommended anymore, this
  change will hopefully encourage users to customize the defaults via the mean
  of drop-ins hence removing the risk of conflicts with downstream
  customization.
  In contrary, shipping empty directories *.conf.d/ in /etc is not a concern and
  should suggest users to create drop-ins (bsc#1207056).

- systemd.spec: add files.portable and files.journal-remote

- Don't include entries listed in kbd-model-map.xkb-generated (provided by kbd
  package) in kbd-model-map anymore. Yast, the only user of these entries,
  directly parses kbd-model-map.xkb-generated now (bsc#1211104).

- tmpfiles-suse.conf: drop entries for /run/lock and /var/log/wtmp
  /run/lock is now defined by filesystem package and wtmp has been replaced by
  wtmpdb on TW.
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1115877 from Franck Bui's avatar Franck Bui (fbui) (revision 404)
- rpmlintrc: allow systemd-network and systemd-container sub-packages to ship
  shared libs. These are actually NSS plugins and are not really subject to
  shlib policy.

- Drop 5000-core-manager-run-generators-directly-when-we-are-in-.patch
  Since dracut-059+suse.447.g9d1fc722, this workaround is not needed anymore.

  This includes the following bug fixes:
    - upstream commit 3022916b4d2483452c3ddbbac9ee7c4372b1cb46 (bsc#1215241)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1113906 from Franck Bui's avatar Franck Bui (fbui) (revision 403)
- Import commit 9674bb256205e6c643feadbcccfd1ee8feeee684 (merge of v254.5)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/6ed5b11298005e07509832881a0c5ff1a80bf225...9674bb256205e6c643feadbcccfd1ee8feeee684

- Make sure to call %sysusers_create only when transfiletrigger is disabled.

- systemd.spec: switch to %ldconfig_scriptlets

- systemd.spec: add `%tmpfiles_create systemd-resolve`
  It's only needed by SLE distros since systemd packages rely on
  transtriggerfiles in Factory.

- Import commit 6ed5b11298005e07509832881a0c5ff1a80bf225 (merge of v254.4)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b6b4e5a8a82d1f13f265a4ef170f2d13be82789a...6ed5b11298005e07509832881a0c5ff1a80bf225
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1113047 from Franck Bui's avatar Franck Bui (fbui) (revision 402)
- systemd.spec: during package updates, restart localed, timedated and hostnamed
  if they're running.

- systemd.spec: when enabling units prefer enabling service units over socket
  ones for socket activable services. The services shipped by systemd
  automatically redirect the enablement request to the socket unit.
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1111019 from Franck Bui's avatar Franck Bui (fbui) (revision 401)
- systemd.spec: %regenerate_initrd_post is only used by udev sub-package hence
  move the build requirement pulling this macro in in the list of udev BRs.

- Don't ship after-local.service anymore. This was mostly a hack for people
  wanting to execute any random things once the boot was finished. We shouldn't
  encourage such practice and it actually conflicts with the sysv-generator
  which believes that /etc/init.d/after.local is SysV init script that needs to
  be converted into a native unit file.
  We still install a copy of this service in /etc if the user is relying on
  it, for backward compatibility.

- fixlet-systemd-post.sh: fix invalid use of rpm macro %{_localstatedir}
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1110245 from Franck Bui's avatar Franck Bui (fbui) (revision 400)
- Import commit b6b4e5a8a82d1f13f265a4ef170f2d13be82789a (merge of v254.3)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1f73719d67b9300c6bb75232d695d03410991098...b6b4e5a8a82d1f13f265a4ef170f2d13be82789a

- Make utmp support per project configureable [jsc#PED-3144]
- Make apparmor and selinux per project configureable [jsc#PED-2736]

- systemd.spec: don't use build conditionals (%bcond_with/%bcond_without) with
  the mini flavor to make sure that all the features remain disabled for this
  flavor regardless of what is enabled in the prjconf.

- Don't build systemd-doc with the mini flavor

- Explicitly require group(lp) by udev: this used to be provided by
  system-group-hardware, but with the introduction of
  system-user-lp (and systemd-users auto-generating groups) is now
  actually provided by system-user-lp. Latest versions of
  system-group-hardware clean this up and no longer also provide
  this group.

- Fix incorrect option name when calling pam-config for systemd-homed

- testsuite: Recommend selinux-policy-devel instead of requiring it in line with
  other tests. Add Recommends for selinux-policy-targeted as this is also
  required to run the test (in general any SELinux policy should do)

- systemd.spec: add journal translations to lang package

- Import commmit 1f73719d67b9300c6bb75232d695d03410991098
  1f73719d67 test-mountpoint-util: /root might be mounted
Displaying revisions 1 - 20 of 419
openSUSE Build Service is sponsored by