Features:
+* machined: provide calls GetMachineByAddress() on the manager interface to get the machine for a local IP address, and GetAddress() on the Machine interface to get the Address for a machine. Implement via forking off child process which quickly joins the cotnainer and passes data to parent. Show this in "machinectl status", and use it to implement NSS module to provide automatic name resolution for containers.
+
+* add generator that pulls in systemd-network from containers when CAP_NET_ADMIN is set, more than the loopback device is defined, even when it is otherwise off
+
+* logind: avoid suspending on SW_LID if SW_DOCK is set
+
* MessageQueueMessageSize= and RLimitFSIZE= (and suchlike) should use parse_iec_size().
* man: move .link, .network and .netdev documentation into their own
man pages maybe called "systemd.link(5)", "systemd.network(5)" and
"systemd.netdev(5)" or so.
-* extend device cgroup controller support to allow enabling groups of
- device nodes, so that pts can be allowed in whole. For that,
- introduce the syntax "block-XYZ" and "char-XYZ" in addition to the
- existing "/dev/foobar", where XYZ then is looked up in /proc/devices
- and mapped to one or more majors.
-
-* Add all pts device nodes to those allowed by default when the device
- controller is used.
-
* "busctl status" works only as root on dbus1, since we cannot read
/proc/$PID/exe
* timedate: have global on/off switches for auto-time (NTP), and auto-timezone that connman can subscribe to.
-* dev-setup.c: when running in a container, create a tiny stub udev
- database with the systemd tag set for all network interfaces found,
- so that libudev reports them as present, and systemd's .device units
- will be activated.
-
* merge unit_kill_common() and unit_kill_context()
* introduce ExecCondition= in services
* nspawn:
- nspawn: consider changing users for -u with /usr/bin/getent, so that NSS resolving works correctly
- - nspawn: implement personality changes a la linux32(8)
- nspawn: --read-only is not applied recursively to submounts
- - nspawn: make use of device cgroup controller by default
- bind mount read-only the cgroup tree higher than nspawn
- - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters, selinux exec context
+ - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters
- refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK).
- support taking a btrfs snapshot at startup and dropping it afterwards
- maybe: hookup nspawn and PrivateNetwork=yes with "ip netns"
~ianmdlvl / elogind.git / blobdiff