Commit graph

1,405 commits

Author SHA1 Message Date
Zbigniew Jędrzejewski-Szmek
14e219556a Version 256.17
- Fixes for systemd itself, systemd-networkd, systemd-ssh-generator,
  systemd-fstab-generator, bootctl, systemd-repart, systemd-vmspawn,
  the shared library code, udev rules, resolvectl, shell completions,
  documentation
- Update of the hardware database
2025-06-27 11:44:47 +02:00
Zbigniew Jędrzejewski-Szmek
904dcda391 Fix version confusion in %changelog 2025-06-27 11:37:40 +02:00
Zbigniew Jędrzejewski-Szmek
0c6358fb6d Version 257.6
- Fix for local information disclosure in systemd-coredump (CVE-2025-4598)
- Various other fixes
2025-05-29 19:59:09 +02:00
Zbigniew Jędrzejewski-Szmek
5a92c6fd4c Version 256.13
- Various small fixes in multiple components
2025-05-15 10:39:49 +02:00
Zbigniew Jędrzejewski-Szmek
5b3339107b Version 256.12
- Fixes for systemd itself, sd-boot, systemd-resolved, systemd-id128,
  systemd-networkd, systemd-logind, systemd-tmpfiles, systemd-vmspawn,
  systemd-userdb, udev, ukify, systemctl, homectl, fido2 code,
  virtualization detection, internal shared library, shell
  completions, documentation.
- Hardware database is updated
- Adds new DNSSEC anchor key for systemd-resolved
- Adds new Fedora keys for systemd-importd
- Adds a Georgian mapping to the keymap list
2025-03-07 10:25:02 +01:00
Daan De Meyer
ee233650c6 Make sure we pull in libbpf >= 2:1.4.7 if libbpf is installed
libbpf 1.4.0 + systemd 257 + a newer kernel results in segmentation
faults in libbpf 1.4.0, so let's explicitly pull in libbpf 1.5.0 or
newer to avoid this issue.

Fixes https://pagure.io/centos-sig-hyperscale/package-bugs/issue/22

(cherry picked from commit 8230f501b6)

Include epoch in versioned libbpf dependency

"""
$ rpmdev-vercmp '2:1.4.6-1.fc42' '1.5.0'
2:1.4.6-1.fc42 > 1.5.0
$ rpmdev-vercmp '2:1.4.6-1.fc42' '2:1.5.0'
2:1.4.6-1.fc42 < 2:1.5.0
"""

(cherry picked from commit 0d95af264f)

Drop libbpf versioned dependency version to 1.4.7

We don't need 1.5.0 to avoid the libbpf crash, the latest libbpf 1.4
patch release (1.4.7) also has the necessary fixes, so relax the
requirement a little to allow builds on Fedora 41 to succeed.

(cherry picked from commit ec182495e7)
2025-03-07 10:08:03 +01:00
Daan De Meyer
a40f4198a4 List the fallback Source0 first
packit will only rewrite the first Source0 that it finds, so we
list the Source0 that gets used if neither %branch nor %commit are
defined first.

(cherry picked from commit 5671cf6132)

[skip changelog]
2025-03-07 10:07:55 +01:00
Zbigniew Jędrzejewski-Szmek
72ca4d6761 Move some files into subpackages
- systemd-ac-power is moved to systemd-udev
- portablectl and importctl are moved to systemd-container (rhbz#2345551)

ac-power clearly is only useful for real hardware. portablectl
and importctl are niche tools that don't need to be in the main package
(even though they could theoretically be used not for containers).

Also split up some nested patterns into separate lines for readability.

(cherry picked from commit 49ec9f3286)
(cherry picked from commit 3671a5cc79)
2025-03-07 10:07:37 +01:00
Zbigniew Jędrzejewski-Szmek
40f67b2223 Version 256.11
- Fixes for assertion crashes and memory access issues in pid1 and
  systemd-machined, and other fixes for systemd-repart,
  systemd-resolved, systemd-stdio-bridge, sd-device, hibernation,
  and the hardware database.
2025-01-08 18:01:36 +01:00
Orion Poplawski
41b48d4660 Disable unmerged-bin taint for F41 (rhbz#2334525) 2025-01-04 12:16:21 -07:00
Zbigniew Jędrzejewski-Szmek
ee26ea473b Version 256.10
- Fixes for man pages, shell completion, logging, systemd-networkd, systemd-resolved,
  systemctl edit.
2024-12-21 10:45:52 +01:00
Zbigniew Jędrzejewski-Szmek
4eb922626d Recommend qemu-kvm-core instead of qemu-kvm
... (rhbz#2329979)

(cherry picked from commit 8dc31eaf04)
2024-12-03 14:13:36 +01:00
David Tardon
3ceacb33df Use %systemd_preun in systemd-resolved
With that, systemd-resolved.service is not only disabled but also
stopped on package uninstall.

... (rhbz#2305391)

(cherry picked from commit 009c64d6a2)
2024-11-29 15:15:01 +01:00
Zbigniew Jędrzejewski-Szmek
3f6fc0ca22 Version 256.9
- Resolves rhbz#2329211
2024-11-29 14:54:20 +01:00
Zbigniew Jędrzejewski-Szmek
c3994a98c6 Pull in qemu from systemd-container
Based on https://gitlab.archlinux.org/archlinux/packaging/packages/systemd/-/issues/27.

(cherry picked from commit 37c10f5b03)
2024-11-19 13:17:51 +01:00
Zbigniew Jędrzejewski-Szmek
269e3ec156 Version 256.8
- Improvements to logging, documentation, systemd, systemd-repart,
  systemd-networkd, systemd-network-generator, systemd-nspawn,
  systemd-resolved, systemd-run, systemd-dissect, systemd-pcrlock,
  systemd-logind, systemd-bsod, udev, ukify
- Resolves #2323323: system will boot to cgroup v2 automatically
  unless overriden
- Resolves #2321268: freezing of user processes is disabled
- Hardware database is updated
2024-11-14 19:47:25 +01:00
Zbigniew Jędrzejewski-Szmek
a92b30d3f4 Disable freezing of user sessions
... (rhbz#2321268)
2024-11-14 11:21:39 +01:00
Zbigniew Jędrzejewski-Szmek
2c6a4e2f90 Version 256.7
- Various small fixes in many components
- Documentation updates
2024-10-11 18:32:58 +02:00
Zbigniew Jędrzejewski-Szmek
bedc0270e7 Move yum/dnf protection removal config file under /usr
https://github.com/uapi-group/specifications/issues/76

Actually, add a new file under /usr, but keep the old file in /etc
because it's still needed for dnf. The new file in the new location
is useful because it means that we get the correct behaviour even when
/etc is emptied (on systems with new dnf version).

dnf5 reads the new location:
https://github.com/rpm-software-management/dnf5/issues/1107
https://github.com/rpm-software-management/dnf5/pull/1110
2024-09-24 16:35:29 +02:00
Zbigniew Jędrzejewski-Szmek
5a82129a41 Reword some descriptions
Also reflow %descriptions to 80 columns.

[skip changelog]
2024-09-20 17:45:09 +02:00
Matteo Croce
ce99022f7b Version 256.6
Bump version and remove already present ukify patch
2024-09-12 02:00:30 +02:00
Daan De Meyer
a67221c3f0 Always build ukify package
Even on non-uefi architectures, ukify can be used to build UKIs for
UEFI images. For example, mkosi can use it to build UKIs on s390x.
To enable this use case, let's always build ukify, but with a conditional
dependency on systemd-boot only on arches that support UEFI.
2024-08-29 12:58:16 +03:00
Daan De Meyer
abb115a905 Do not use patch to modify systemd-user pam config file
We still want the Fedora systemd-user pam config when building with
--noprep so let's install the pam config file using a regular source
instead of patching the one provided by systemd.
2024-08-28 11:38:58 +02:00
Daan De Meyer
196ec98228 Drop %upstream conditionalization for patches
rpm will imply --noprep when using --build-in-place in rpm 4.20 and
we're switching the mkosi rpm builds to use --noprep as well on older
rpm versions. This means we don't need to gate out patch applications
anymore with the %upstream macro.
2024-08-28 10:22:26 +02:00
Daan De Meyer
28076e6232 Only make python3-pillow Recommends on Fedora
python3-pillow is not available in CentOS Stream 9/10 so let's not
mark it as Recommends.
2024-08-27 15:04:08 +02:00
Davide Cavalca
a9807c4486 Do not require grubby on CentOS Stream 9
This is a fixup for 12d1f05029.
2024-08-24 08:29:51 -07:00
Zbigniew Jędrzejewski-Szmek
d38cacfd3a Version 256.5
- Includes the patches for the kernel change with kernel threads in
  leaf cgroups (https://github.com/systemd/systemd/pull/33885)
- Various smaller fixes
2024-08-20 19:18:05 +02:00
Zbigniew Jędrzejewski-Szmek
38291e13c1 Disable integration of userdb in sshd 2024-08-20 18:42:34 +02:00
Daan De Meyer
53118d2112 Backport patch to only read /proc/cmdline when not in container 2024-07-29 19:01:26 +02:00
Daan De Meyer
903e8e0f88 Backport upstream patch to try more initrd variants in 90-loaderentry.install
This makes sure that 90-loaderentry.install plays nicely with the
dracut kernel-install plugin that is shipped in Fedora and CentOS
Stream.
2024-07-29 17:59:27 +02:00
Zbigniew Jędrzejewski-Szmek
b29a66006c Version 256.4
- Hardware db update
- Minor fixes for systemd-udevd and varlink protocol
2024-07-25 12:50:06 +02:00
Daan De Meyer
1cdae03391 Update tmpfiles --destroy-data patch
Let's make sure we patch the integration test for systemd-tmpfiles
--purge as well so it doesn't fail.
2024-07-23 13:22:01 +02:00
Zbigniew Jędrzejewski-Szmek
4fd4ef72a6 Upload sources
[skip changelog]
2024-07-23 10:58:29 +02:00
Zbigniew Jędrzejewski-Szmek
3c3772150d Version 256.3
- A bunch of fixes for systemd (pid1)
- Various upgrades related to running tests in mkosi
2024-07-23 10:25:28 +02:00
Daan De Meyer
00babccdea Simplify BFQ scheduler enablement
This doesn't need to be a patch, let's instead install it as part of
%install to simplify things a little.
2024-07-20 17:08:03 +02:00
Fedora Release Engineering
ef8ddb130b Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-20 06:58:47 +00:00
Zbigniew Jędrzejewski-Szmek
5b4a5461d6 Fix changelog
rpmautospec doesn't like the merge: "unresolvable merge".
To avoid the issue, re-add the changelog file. Also, let's drop the
stuff that is only specific to EPEL, since this branch is primarily
for rawhide.
2024-07-19 16:57:23 +02:00
Daan De Meyer
a8c5c736f6 Only apply shorter shutdown timer changes on Fedora
We had a *lot* of breakage caused by this change internally so let's
make the spec a little more conservative by only applying the shorter
shutdown timer for Fedora builds.
2024-07-19 14:53:40 +00:00
Zbigniew Jędrzejewski-Szmek
f4e284cd7a Merge #150 Deal with systemd-timesyncd backport in EPEL 2024-07-19 14:52:52 +00:00
Daan De Meyer
12d1f05029 Don't claim /sbin/installkernel if building for CentOS Stream 9
CentOS Stream 9 has older grubby that still claims /sbin/installkernel
for itself so let's not install the symlink in that case.
2024-07-19 16:33:08 +02:00
Daan De Meyer
9378a0733a Deal with systemd-timesyncd backport in EPEL 2024-07-19 13:26:50 +02:00
Zbigniew Jędrzejewski-Szmek
79828f2753 spec: use "positive" conditions in conditionals
I think it's easier to read this way.

[skip changelog]
2024-07-18 10:12:15 +02:00
Daan De Meyer
c5d3af1638 Add build dependency on rsync on CentOS Stream 9
meson on CentOS Stream 9 is too old to properly handle symlinks
when installing test data so the systemd meson build script uses
rsync instead. Let's add the requisite build requires to make that
work.
2024-07-18 08:00:02 +00:00
Zbigniew Jędrzejewski-Szmek
8d080fb5cb Backport udma buffer access patch
... (rhbz#2298422)
2024-07-17 11:49:37 +02:00
Daan De Meyer
6084453807 Add support for building from a specific branch
For our nightly systemd build for the CentOS Hyperscale build it
would be very useful to download sources straight from git main on
github so let's allow defining the "branch" macro to do just that.
2024-07-16 19:24:32 +02:00
Daan De Meyer
cb9d631ca0 Update PR patch metadata
The PR was recently rebased so let's include the newest patch metadata
in the repo.
2024-07-16 18:17:54 +02:00
Zbigniew Jędrzejewski-Szmek
3889da947e In standalone subpackages, suggest coreutils-single
In a minimal installation, we pull in coreutils via dependencies.
coreutils-single is much smaller, so bias the resolved towards that.

$ sudo dnf5 install --releasever=rawhide --installroot=/var/tmp/inst1 --use-host-config \
  /var/lib/mock/fedora-rawhide-x86_64/result/systemd-standalone-{repart,shutdown,sysusers,tmpfiles}-256.2-5*rpm
After this operation 57 MiB will be used (install 57 MiB, remove 0 B).

$ sudo dnf5 install --releasever=rawhide --installroot=/var/tmp/inst1 --use-host-config \
  /var/lib/mock/fedora-rawhide-x86_64/result/systemd-standalone-{repart,shutdown,sysusers,tmpfiles}-256.2-6*rpm
After this operation 41 MiB will be used (install 41 MiB, remove 0 B).
2024-07-15 13:36:06 +02:00
Zbigniew Jędrzejewski-Szmek
b7800e3e66 Drop versions from Conflicts for standalone packages
Because the conflicts are in one direction, dnf may try to install older
systemd/systemd-duev and newer systemd-standalone-*. This is not what we want:

$ sudo dnf5 install systemd-standalone-repart
Updating and loading repositories:
Repositories loaded.
Package                             Arch    Version       Repository          Size
Downgrading:
 systemd                            x86_64  255.4-1.fc40  fedora          14.6 MiB
   replacing systemd                x86_64  256.2-1.fc40  @commandline    16.8 MiB
 systemd-container                  x86_64  255.4-1.fc40  fedora           1.4 MiB
   replacing systemd-container      x86_64  256.2-1.fc40  @commandline     1.5 MiB
 systemd-devel                      x86_64  255.4-1.fc40  fedora         550.3 KiB
   replacing systemd-devel          x86_64  256.2-1.fc40  @commandline   556.1 KiB
 systemd-libs                       x86_64  255.4-1.fc40  fedora           1.9 MiB
   replacing systemd-libs           x86_64  256.2-1.fc40  @commandline     2.0 MiB
 systemd-networkd                   x86_64  255.4-1.fc40  fedora           2.0 MiB
   replacing systemd-networkd       x86_64  256.2-1.fc40  @commandline     2.1 MiB
 systemd-oomd-defaults              noarch  255.4-1.fc40  fedora         187.0   B
   replacing systemd-oomd-defaults  noarch  256.2-1.fc40  @commandline   187.0   B
 systemd-pam                        x86_64  255.4-1.fc40  fedora           1.0 MiB
   replacing systemd-pam            x86_64  256.2-1.fc40  @commandline     1.1 MiB
 systemd-resolved                   x86_64  255.4-1.fc40  fedora         629.9 KiB
   replacing systemd-resolved       x86_64  256.2-1.fc40  @commandline   667.1 KiB
 systemd-rpm-macros                 noarch  255.4-1.fc40  fedora           9.5 KiB
   replacing systemd-rpm-macros     noarch  256.2-1.fc40  @commandline     9.3 KiB
 systemd-tests                      x86_64  255.4-1.fc40  fedora          16.5 MiB
   replacing systemd-tests          x86_64  256.2-1.fc40  @commandline    20.0 MiB
 systemd-udev                       x86_64  255.4-1.fc40  fedora          11.5 MiB
   replacing systemd-udev           x86_64  256.2-1.fc40  @commandline    11.7 MiB
 systemd-ukify                      noarch  255.4-1.fc40  fedora          69.9 KiB
   replacing systemd-ukify          noarch  256.2-1.fc40  @commandline    73.3 KiB
Installing:
 systemd-standalone-repart          x86_64  255.8-1.fc40  updates        986.6 KiB

Transaction Summary:
 Installing:        1 packages
 Replacing:        12 packages
 Downgrading:      12 packages

Also, declare the Conflicts on both sides, so that the issue is resolved
immediately. Otherwise, it could still occur when an older version of the
non-standalone packages are available (or installed).
2024-07-15 13:34:36 +02:00
Zbigniew Jędrzejewski-Szmek
a3524fc837 Use a more precise Recommends for libkxbcommon
The old one was the first one added, and referred to the package.
The later ones refer to the soname. Let's convert that one to that
too.
2024-07-14 11:28:29 +02:00
Daan De Meyer
980ede8c0f Drop machined revert
The selinux-policy was fixed (https://bugzilla.redhat.com/show_bug.cgi?id=2279923)
so let's drop the revert. The minimum version for the selinux-policy
Conflicts is updated to make sure it is installed.
2024-07-11 13:05:04 +02:00