* Fedora: post FPC ticket to move add %tmpfiles_create to the packaging guidelines
-Preparation for 209:
+Features:
-* Review new libraries
+* machined: provide calls GetMachineByAddress() on the manager interface to get the machine for a local IP address, and GetAddress() on the Machine interface to get the Address for a machine. Implement via forking off child process which quickly joins the cotnainer and passes data to parent. Show this in "machinectl status", and use it to implement NSS module to provide automatic name resolution for containers.
-* libsystemd-journal returns the object created as first param in sd_journal_new(), sd_bus_new() and suchlike as last...
+* add generator that pulls in systemd-network from containers when CAP_NET_ADMIN is set, more than the loopback device is defined, even when it is otherwise off
-Features:
+* logind: avoid suspending on SW_LID if SW_DOCK is set
+
+* MessageQueueMessageSize= and RLimitFSIZE= (and suchlike) should use parse_iec_size().
+
+* man: move .link, .network and .netdev documentation into their own
+ man pages maybe called "systemd.link(5)", "systemd.network(5)" and
+ "systemd.netdev(5)" or so.
+
+* "busctl status" works only as root on dbus1, since we cannot read
+ /proc/$PID/exe
+
+* systemctl (and possibly related tools): support a new switch that
+ allows enumerating units in local containers recursively. "systemctl
+ list-units -R" or so should not only lists on the host, but also the
+ services in all containers in a pretty way, to give an overview of
+ the entire system. Also, maybe add "systemctl list-machines" which
+ works like "machinectl list" but includes information about the
+ health status of each registered machine. For that we should
+ probably implement something that encodes the system health status
+ in a single enum state, i.e. something like a system-wide state
+ starting → running → failed → stopping, that is based on the current
+ job queue and a check for failed services. Maybe then change
+ "systemctl status" without args to output this state along with a
+ selection of other data, such as the uptime or so.
+
+* Add a seccomp-based filter for socket() calls to limit services to
+ specific address families (for example: AF_UNIX), inspired by
+ Android's sandboxing
* implement Distribute= in socket units to allow running multiple
service instances processing the listening socket, and open this up
desktop UIs such as gnome-shell to freeze apps that are not visible
on screen, not unlike how job control works on the shell
-* machinectl bash completion is missing
-* busctl bash and zsh completions are outdated
+* completions:
+ - busctl zsh completion is outdated
+ - systemd-nspawn -Z/-L/-q is missing for zsh
+ - systemd-nspawn completion is missing for bash
+ - manager property enumeration was broken when systemd moved to /usr/lib/
* cgroups:
- implement system-wide DefaultCPUAccounting=1 switch (and similar for blockio, memory?)
- pid1: peek into activating message when activating a service
- test bloom filter generation indexes
- introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list
+ - port to sd-resolve for connecting to TCP dbus servers
+ - constructors for bus messages should probably not be OK with a NULL bus pointer
* sd-event
- allow multiple signal handlers per signal?
* when isolating, try to figure out a way how we implicitly can order
all units we stop before the isolating unit...
-* add ConditionArchitecture= or so
-
* teach ConditionKernelCommandLine= globs or regexes (in order to match foobar={no,0,off})
* after all byte-wise realloc() is slow, even on glibc, so i guess we
* timedate: have global on/off switches for auto-time (NTP), and auto-timezone that connman can subscribe to.
-* dev-setup.c: when running in a container, create a tiny stub udev
- database with the systemd tag set for all network interfaces found,
- so that libudev reports them as present, and systemd's .device units
- will be activated.
-
* merge unit_kill_common() and unit_kill_context()
* introduce ExecCondition= in services
- document in wiki how to map ical recurrence events to systemd timer unit calendar specifications
- add a man page containing packaging guidelines and recommending usage of things like Documentation=, PrivateTmp=, PrivateNetwork= and ReadOnlyDirectories=/etc /usr.
- document systemd-journal-flush.service properly
- - man: remove .include documentation, and instead push people to use .d/*.conf
- documentation: recommend to connect the timer units of a service to the service via Also= in [Install]
- man: document the very specific env the shutdown drop-in tools live in
- man: extend runlevel(8) to mention that runlevels suck, and are dead. Maybe add runlevel(7) with a note about that too
* nspawn:
- nspawn: consider changing users for -u with /usr/bin/getent, so that NSS resolving works correctly
- - nspawn: implement personality changes a la linux32(8)
- nspawn: --read-only is not applied recursively to submounts
- - nspawn: make use of device cgroup controller by default
- bind mount read-only the cgroup tree higher than nspawn
- - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters, selinux exec context
+ - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters
- refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK).
- support taking a btrfs snapshot at startup and dropping it afterwards
- maybe: hookup nspawn and PrivateNetwork=yes with "ip netns"
- move to LGPL
- kill scsi_id
- add trigger --subsystem-match=usb/usb_device device
+ - reimport udev db after MOVE events for devices without dev_t
* when a service has the same env var set twice we actually store it twice and return that in systemctl show -p... We should only show the last setting
- Make sure ID_PATH is always exported and complete for
network devices where possible, so we can safely rely
on Path= matching
- - Check if Driver= is broken, or just my driver (bcma)
* sd-rtnl:
- add support for exiting containers without reading them fully first
- add more keys to [Route] and [Address] sections
- add support for more DHCPv4 options (and, longer term, other kinds of dynamic config)
- add proper initrd support (in particular generate .network/.link files based on /proc/cmdline)
+ - add reduced [Link] support to .network files
External:
~ianmdlvl / elogind.git / blobdiff