X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=README;h=4358cd7d759336cd2f9893d3874abbd043b86cd8;hp=9aa63128dd99784897dba8e3dd83851545208821;hb=127dc4ea9487397b1ab70447e2f44d091e44ab5f;hpb=32dcef3ab1eb91ee469c3246ef859578dccd8a45 diff --git a/README b/README index 9aa63128d..4358cd7d7 100644 --- a/README +++ b/README @@ -30,7 +30,7 @@ AUTHOR: LICENSE: LGPLv2.1+ for all code - - except sd-daemon.[ch] and sd-readahead.[ch] which are MIT + - except sd-readahead.[ch] which is MIT - except src/shared/MurmurHash2.c which is Public Domain - except src/shared/siphash24.c which is CC0 Public Domain - except src/journal/lookup3.c which is Public Domain @@ -38,8 +38,12 @@ LICENSE: REQUIREMENTS: Linux kernel >= 3.0 + Linux kernel >= 3.3 for loop device partition support features with nspawn + Linux kernel >= 3.8 for Smack support + + Kernel Config Options: CONFIG_DEVTMPFS - CONFIG_CGROUPS (it's OK to disable all controllers) + CONFIG_CGROUPS (it is OK to disable all controllers) CONFIG_INOTIFY_USER CONFIG_SIGNALFD CONFIG_TIMERFD @@ -47,9 +51,7 @@ REQUIREMENTS: CONFIG_NET CONFIG_SYSFS CONFIG_PROC_FS - CONFIG_FHANDLE (mount and bind mount handling) - - Linux kernel >= 3.8 for Smack support + CONFIG_FHANDLE (libudev, mount and bind mount handling) Udev will fail to work with the legacy layout: CONFIG_SYSFS_DEPRECATED=n @@ -68,6 +70,9 @@ REQUIREMENTS: create additional symlinks in /dev/disk/ and /dev/tape: CONFIG_BLK_DEV_BSG + Required for PrivateNetwork in service units: + CONFIG_NET_NS + Optional but strongly recommended: CONFIG_IPV6 CONFIG_AUTOFS4_FS @@ -80,7 +85,7 @@ REQUIREMENTS: CONFIG_SCHED_DEBUG For UEFI systems: - CONFIG_EFI_VARS + CONFIG_EFIVAR_FS CONFIG_EFI_PARTITION Note that kernel auditing is broken when used with systemd's @@ -89,9 +94,17 @@ REQUIREMENTS: runtime using the kernel command line option "audit=0", or turn it off at kernel compile time using: CONFIG_AUDIT=n + If systemd is compiled with libseccomp support on + architectures which do not use socketcall() and where seccomp + is supported (this effectively means x86-64 and ARM, but + excludes 32-bit x86!), then nspawn will now install a + work-around seccomp filter that makes containers boot even + with audit being enabled. This works correctly only on kernels + 3.14 and newer though. TL;DR: turn audit off, still. glibc >= 2.14 libcap + libseccomp >= 1.0.0 (optional) libblkid >= 2.20 (from util-linux) (optional) libkmod >= 15 (optional) PAM >= 1.1.2 (optional) @@ -101,15 +114,12 @@ REQUIREMENTS: libattr (optional) libselinux (optional) liblzma (optional) - tcpwrappers (optional) libgcrypt (optional) libqrencode (optional) libmicrohttpd (optional) libpython (optional) make, gcc, and similar tools - To sucessfully use --compat-libs, gcc >= 4.8 seems necessary. - During runtime, you need the following additional dependencies: @@ -189,6 +199,9 @@ WARNINGS: about this, since this kind of file system setup is not really supported anymore by the basic set of Linux OS components. + systemd requires that the /run mount point exists. systemd also + requires that /var/run is a a symlink to /run. + For more information on this issue consult http://freedesktop.org/wiki/Software/systemd/separate-usr-is-broken