X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=0ae1427bead7b3cf362d74774331b27680bbe0da;hp=57c057227b51573fbfec0ebd4994bbcb60d5cad0;hb=b77c08e06b67d5b1dd8aaf67b732e93851d8ae43;hpb=9b1c2626cef16722603bded9bb52033aba34dd74 diff --git a/TODO b/TODO index 57c057227..0ae1427be 100644 --- a/TODO +++ b/TODO @@ -25,14 +25,37 @@ External: * Fedora: post FPC ticket to move add %tmpfiles_create to the packaging guidelines -Preparation for 209: - -* Review new libraries - -* libsystemd-journal returns the object created as first param in sd_journal_new(), sd_bus_new() and suchlike as last... - Features: +* nspawn: name normal veth ifaces on the host "ve-*", and those + already added to a bridge "vb-*". That way we can later on install + catchall matches that identify these interfaces and run DHCP on them. + +* "busctl status" works only as root on dbus1, since we cannot read + /proc/$PID/exe + +* systemctl (and possibly related tools): support a new switch that + allows enumerating units in local containers recursively. "systemctl + list-units -R" or so should not only lists on the host, but also the + services in all containers in a pretty way, to give an overview of + the entire system. Also, maybe add "systemctl list-machines" which + works like "machinectl list" but includes information about the + health status of each registered machine. For that we should + probably implement something that encodes the system health status + in a single enum state, i.e. something like a system-wide state + starting → running → failed → stopping, that is based on the current + job queue and a check for failed services. Maybe then change + "systemctl status" without args to output this state along with a + selection of other data, such as the uptime or so. + +* generalize ConditionXYZ= logic and make it available in networkd's + .network, .netdev, .network files, too. This is particularly useful + to match on containers with ConditionVirtualization to + conditionalize network setups for containers + +* doc: remove documentation for .include, drop-in snippets are the + better replacement. + * Add a seccomp-based filter for socket() calls to limit services to specific address families (for example: AF_UNIX), inspired by Android's sandboxing