summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* sd-dhcp-client: make sure timers fire immediatelyTom Gundersen2014-03-18
| | | | | | | | | | | | The default slack caused there to be a delay before timers fired. Solve it by setting timers that should trigger immediately to trigger far in the past. This brings down the ideal-case dhcp lease acquisition time from about 500ms to about 50ms (over a veth pair, so no network latency involved). All the rest of the time (except for ~0.5ms) is spent in the bind() call in, dhcp_network_bind_raw_socket(). I don't know if there is anything to be done about that though...
* microhttpd-util: avoid double free on errorZbigniew Jędrzejewski-Szmek2014-03-18
| | | | | | | | | It seems that resources are properly deallocated by MHD_destroy_response, even if enqueuing the request fails. Also replace a trivial printf with alloca and fixup log message (it'll now be something like "Connection from CN=some.host.name", which seems clear enough.)
* journal-remote: do not attempt to read from µhttpd connectionsZbigniew Jędrzejewski-Szmek2014-03-18
| | | | This chunk got lost in one of the rebases :(
* machinectl: reimplement machinectl's "reboot" verb on top of "kill", and add ↵Lennart Poettering2014-03-18
| | | | | | | | | new verb "poweroff" There's really no point to send the reboot SIGINT from machinectl directly, if machined can do that anyway. This saves code, and makes machinectl network transparent for these verbs. And while we are at it we can easily add a "poweroff" verb in addition to "reboot". Yay!
* machined: fix Kill() bus call on machine objects when "what" is specified as ↵Lennart Poettering2014-03-18
| | | | "leader"
* update TODOLennart Poettering2014-03-18
|
* core: remount /sys/fs/cgroup/ read-only after we mounted all controllersLennart Poettering2014-03-18
| | | | | | Given that glibc searches for /dev/shm by just looking for any tmpfs we should be more careful with providing tmpfs instances arbitrary code might end up writing to.
* cgroup: it's not OK to invoke alloca() in loopsLennart Poettering2014-03-18
|
* systemctl: sort local host entry before container in list-machines outputLennart Poettering2014-03-18
|
* systemctl: prefix list-units and list-machines output with a circle ↵Lennart Poettering2014-03-18
| | | | | | indicating a failure state (Subject to --no-legend)
* timedatectl: clear ADJ_MAXERROR to make sure we keep STA_SYNC setKay Sievers2014-03-18
|
* systemd-run: extend bash completionThomas Hindoe Paaboel Andersen2014-03-17
| | | | | | | | | | | | --system -H --host -M --machine --service-type (options: simple forking oneshot dbus notify idle) --uid --gid --nice --setenv -p --property (options read from bus_append_unit_property_assignment)
* remove unused variableThomas Hindoe Paaboel Andersen2014-03-17
|
* man: networkd - additional examples related to bridgingpoma2014-03-17
|
* build-sys: move sd-login src/login → src/libsystemd/sd-loginLennart Poettering2014-03-17
| | | | | | After all, it is ultimately linked to libsystems.so anyway, thus belongs there and shares very little with the rest of logind, hence let's move this away.
* update TODOLennart Poettering2014-03-17
|
* sd-login: add calls that retrieve credentials of peers connected to AF_UNIX ↵Lennart Poettering2014-03-17
| | | | | | | peers This is supposed to be an extension of SO_PEERCRED and SO_PEERSEC, except for cgroup information.
* update TODOLennart Poettering2014-03-17
|
* core, libsystemd, systemd, timedate, udev: spelling fixesMiklos Vajna2014-03-17
|
* man: improve wording of systemctl's --after/--beforeJason St. John2014-03-17
| | | | | | | | | | | | Commit 4a77ca7 was an attempt at fixing the wording of --after and --before, but the new wording was unclear. Split the combined --after/--before section into a separate section for each, explicitly state what each option does, and add information about how these lists are generated. Reported-by: Andrey Borzenkov <arvidjaar@gmail.com> Reported-by: Lennart Poettering <lennart@poettering.net>
* build-sys: bump required µhttpd versionZbigniew Jędrzejewski-Szmek2014-03-17
| | | | | MHD_USE_EPOLL_LINUX_ONLY, MHD_USE_DUAL_STACK are only available in next-but-last release.
* journal-remote: implement inheriting http(s) socketsZbigniew Jędrzejewski-Szmek2014-03-17
| | | | | | | Now --listen-http=-3 --listen-https=-4 can be used to spawn a µhttpd server on those two ports, in http and https modes respectively. As before, --listen-http=3 --listen-https=4 will launch µhttpd servers on ports 3 and 4.
* microhttpd-util: use static buffer for static messagesZbigniew Jędrzejewski-Szmek2014-03-17
| | | | | | | | | | | Most of the messages we send do not require a allocating and freeing a buffer, to optimize this by using const strings. Also, rename respond_error to mhd_respond*, since it is used not only for errors. Make use of information from printf to avoid one extra call to strlen.
* journal-remote: HTTP(s) supportZbigniew Jędrzejewski-Szmek2014-03-17
| | | | | | | | | | | | | | | | | The whole tool is made dependent on µhttpd availability. It should be easy to make the µhttpd parts conditional, but since transfer over HTTP seems to be the primary use case, currently this is not done. Current implementation uses nested epoll loops: sd-event is used for the external event loop, and µhttpd uses epoll in its own loop. Unfortunately µhttpd does not expose enough information to add the descriptors it uses to the external event loop. This means that starvation of other events is possible, if one of the inner µhttpd loops is constantly busy. This means that µhttpd servers should not be mixed with other sources. The TLS authentication parts haven't been really tested properly, and should not be take too seriously.
* journal-remote: tool to receive messages over the networkZbigniew Jędrzejewski-Szmek2014-03-17
|
* journal-gatewayd: check if certificate is signed by CAZbigniew Jędrzejewski-Szmek2014-03-17
| | | | | | | | | | If --trust=ca.crt is used, only clients presenting certificates signed by the ca will be allowed to proceed. No hostname matching is performed, so any client wielding a signed certificate will be authorized. Error functions are moved from journal-gateway to microhttp-util and made non-static, since now they are used in two source files.
* journal-gatewayd: log to journal from gnutlsZbigniew Jędrzejewski-Szmek2014-03-17
| | | | | | Prefix "gnutls: " is added. Some semi-random mapping of gnutls levels to syslog levels is done, but since gnutls levels seem to be used rather loosely, most end up as debug.
* build-sys: add check on gnutlsZbigniew Jędrzejewski-Szmek2014-03-17
|
* journal-gatewayd: ask clients to provide certificatesZbigniew Jędrzejewski-Szmek2014-03-17
| | | | | | | A certificate authority certificate will be presented to clients, causing them to present their client certificate, if it is signed by this authority (default behaviour of most clients). No certificate checking is actually performed.
* activate: export make_socket_fdZbigniew Jędrzejewski-Szmek2014-03-17
| | | | Also improve logging to print out the parsed address on error.
* shared: export is_dirZbigniew Jędrzejewski-Szmek2014-03-17
|
* journal: export valid_user_field and size definesZbigniew Jędrzejewski-Szmek2014-03-17
| | | | In preparation for use elsewhere.
* journal: extract duplicated code to a functionZbigniew Jędrzejewski-Szmek2014-03-17
|
* journal: extract duplicated code to a functionZbigniew Jędrzejewski-Szmek2014-03-17
|
* journald: remove stray reset of error return valueZbigniew Jędrzejewski-Szmek2014-03-17
|
* systemctl: introduce -r switch to show units running in local containers in ↵Lennart Poettering2014-03-17
| | | | addition to the host
* timedated: move test logging to test programKay Sievers2014-03-17
|
* timedated: update spike handlingKay Sievers2014-03-16
|
* timedated: update spike handlingKay Sievers2014-03-16
|
* timedated: handle external system time changesKay Sievers2014-03-16
|
* Use strlen even for constant stringsJosh Triplett2014-03-16
| | | | | | | | | | | GCC optimizes strlen("string constant") to a constant, even with -O0. Thus, replace patterns like sizeof("string constant")-1 with strlen("string constant") where possible, for clarity. In particular, for expressions intended to add up the lengths of components going into a string, this often makes it clearer that the expression counts the trailing '\0' exactly once, by putting the +1 for the '\0' at the end of the expression, rather than hidden in a sizeof in the middle of the expression.
* nspawn: UP the host side of the veth pair after adding it to a bridgeTom Gundersen2014-03-16
|
* sd-rtnl: never treat broadcasts as repliesTom Gundersen2014-03-16
| | | | | Otherwise the sequence number of a broadcast may match the sequence number of a pending unicast message and cause confusion.
* networkd: netdev - support joining already existing netdevsTom Gundersen2014-03-15
|
* sd-rtnl: make RTM_NEWLINK report EEXIST by defaultTom Gundersen2014-03-15
| | | | Use RTM_SETLINK to update an existing link.
* timedated: print delay and jitter in debug outputKay Sievers2014-03-15
|
* _sd_machines: Use machinectl --no-legendWieland Hoffmann2014-03-15
| | | | | Otherwise bogus entries from the header and footer would show up in the completion list.
* zsh completion: Install _sd_machines with _machinectlWieland Hoffmann2014-03-15
| | | | | _machinectl uses _sd_machines to provide a list of all available machines.
* timedated: use builtins for integer log and expZbigniew Jędrzejewski-Szmek2014-03-14
|
* journald: add support for wall forwardingSebastian Thorarensen2014-03-14
| | | | | | | | | | | | | | This will let journald forward logs as messages sent to all logged in users (like wall). Two options are added: * ForwardToWall (default yes) * MaxLevelWall (default emerg) 'ForwardToWall' is overridable by kernel command line option 'systemd.journald.forward_to_wall'. This is used to emulate the traditional syslogd behaviour of sending emergency messages to all logged in users.
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-30 14:27:01 +0000