X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=21524f121455809a22f63bb918a61284663eb116;hp=d5b7ff27f7b141e28565d5f263530e24bb681395;hb=ee14023fd5720959d3ae22b23ed663efc42608fa;hpb=977db91c29083478c6fb7c7bf033e14c567df5d5 diff --git a/TODO b/TODO index d5b7ff27f..21524f121 100644 --- a/TODO +++ b/TODO @@ -29,45 +29,61 @@ External: * When lz4 gets an API for lz4 command output, make use of it to compress coredumps in a way compatible with /usr/bin/lz4. +Release 219 preparations: + +* support mbr raw disk images in systemd-nspawn, so that we can boot + fedora cloud images unmodified (change suffix for search for files + .gpt → .raw). + +* dkr import hash verification + +* rework journald sigbus stuff to use mutex + +* create importd daemon, move "systemd-import" tool into machinectl + +* change default container location from /var/lib/container to /var/lib/machines + +* merge input_id and evdev_id into generic input_id + Features: -* teach fd_get_crtime_at() the btrfs crtime +* bus-proxy: reload policy when PID 1 reports a reload -* import pull-gpt: create writable snapshot of downloaded image, by the right name +* the dbus1 connection user id is actually the euid, not the uid, and creds should return that -* nspawn: when start a container "foobar" look for its configuration in a file "foobar.nspawn" in /etc/systemd/nspawn/ as well as next to the actualy directory or image to boot +* add minimal NAT logic to networkd and nspawn. The former should be a simple NAT=yes|no|ipv4|ipv6 and expose a network on all other interfaces as NAT. The latter should get a "--port=" switch or so, which forwards one host port onto the container -* Port various tools to make use of verbs.[ch], where applicable +* introduce systemd-nspawn-ephemeral@.service, and hook it into "machinectl start" with a new --ephemeral switch -* Check all invocations of access() and consider turning them into laccess() +* nspawn should lock container images while running off them + +* logind,machined: add generic catch-all polkit verbs for most priviliged operations, similar to systemd itself -* "machinectl start/enable/disable foo" as aliases for "systemctl start/enable/disable systemd-nspawn@foo.service" +* "machinectl status" should also show internal logs of the container in question -* "machinectl snapshot" to make a snapshot of a tree or container into /var/lib/containers +* nspawn: don't change superblock mount options from nspawn for cgroup hierarchies -* "machinectl rm" to remove a container tree from /var/lib/containers +* "machinectl list-images" should show os-release data, as well as machine-info data (including deployment level) + +* nspawn: when start a container "foobar" look for its configuration in a file "foobar.nspawn" in /etc/systemd/nspawn/ as well as next to the actualy directory or image to boot + +* Port various tools to make use of verbs.[ch], where applicable + +* Check all invocations of access() and consider turning them into laccess() * "machinectl history" * "machinectl diff" -* show btrfs quota in machinectl - * "machinectl commit" that takes a writable snapshot of a tree, invokes a shell in it, and marks it read-only after use * "machinectl status" should show 10 most recent log lines of both the host logs of the unit of the machine, plus the logs generated in the machine * add transparent btrfs pool in a loopback file in /var if btrfs operations (such as systemd-import pull-dkr) are used and /var is not a btrfs file system -* systemd-nspawn -M should look for gpt images if neither -D nor -i are specified. - -* systemd-nspawn -i should run things read-only if image file has no writable bits - * systemd-nspawn -x should support ephemeral instances of gpt images -* systemd-import pull-gpt should make a read-only download, plus a writable reflinked copy - -* machinectl list should show crtimes of snapshots and GPT images +* move machinectl's mount and copy commands into machined * hostnamectl: show root image uuid @@ -78,10 +94,6 @@ Features: * port libmount hookup to use API's own inotify interface, as soon as that is table in libmount -* journald: broken file systems are real (btrfs), we need to handle - SIGBUS in some way if we cannot write or read from the disk. - https://bugzilla.redhat.com/show_bug.cgi?id=1151848 - * "systemctl preset-all" should probably order the unit files it operates on lexicographically before starting to work, in order to ensure deterministic behaviour if two unit files conflict (like DMs @@ -93,7 +105,7 @@ Features: * systemd-journal-upload (or a new, related tool): allow pushing out journal messages onto the network in BSD syslog protocol, - continously. Default to some link-local IP mcast group, to make this + continuously. Default to some link-local IP mcast group, to make this useful as a one-stop debugging tool. * synchronize console access with BSD locks: @@ -336,20 +348,13 @@ Features: ReadOnlyDirectories=... for whitelisting files for a service. * sd-bus: + - GetAllProperties() on a non-existing object does not result in a failure currently - kdbus: process fd=-1 for incoming msgs - make dsrt happy, and change userspace header for kdbus to yyyyuta{tv}v - - kdbus: PID/TID goes missing for method calls from outside the PID namespace? - - kdbus: the kernel should not allow messages to be delivered that have a reply serial != 0, reply-expect unset, but no appropriate window - - kdbus: timestamps on kernel's NameOwnerChanged messages? - - kdbus' busnames.target should get pulled in by basic.target - - Ignore .busname units on classic D-Bus boots, systemd-resolved cannot be started on kdbus - without the active policy and should get a Wants=org.freedesktop.resolve1.busname to - pull-in the policy. - port to sd-resolve for connecting to TCP dbus servers - kdbus: maybe add controlling tty metadata fields - see if we can introduce a new sd_bus_get_owner_machine_id() call to retrieve the machine ID of the machine of the bus itself - when kdbus does not take our message without memfds, try again with memfds - - introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list - see if we can drop more message validation on the sending side - add API to clone sd_bus_message objects - make AddMatch calls on dbus1 transports async? @@ -596,11 +601,7 @@ Features: * currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab is not * nspawn: - - bind mount read-only the cgroup tree higher than nspawn - refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK). - - introduce machines.target to order after all nspawn instances - - systemd-nspawn@.service should fail if some nspawn arg is invalid, with Type=notify - - PID 1 doesn't apply nspawns devices cgroup policy * cryptsetup: - cryptsetup-generator: allow specification of passwords in crypttab itself