X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=4f32c52f341732e728c58837957c7c37ff747e8c;hp=78da71791201fb5a9898b2719fbf86527270619c;hb=a19554ed92a7460b4e709cc40c558cde827ab85b;hpb=424a19f8a2061c6b058283228734010b2fa24db4 diff --git a/TODO b/TODO index 78da71791..4f32c52f3 100644 --- a/TODO +++ b/TODO @@ -1,22 +1,4 @@ Bugfixes: -* always open() tty6 to keep X from using it; move debug shell to tty6 - -* Fedora: rename /usr/lib/systemd/system-preset/99-default.preset to 90-default.preset - -* there is nothing to warn about here :) - $ systemctl stop systemd-udevd.service systemd-udevd-kernel.socket systemd-udevd-control.socket - Warning: Stopping systemd-udevd.service, but it can still be activated by: - systemd-udevd-control.socket - systemd-udevd-kernel.socket - -* kill /etc/timezone handling entirely? What does it provide? - - /etc/localtime carries the same information already: - $ ls -l /etc/localtime; cat /etc/timezone - lrwxrwxrwx 1 root root 33 Jul 27 09:55 /etc/localtime -> /usr/share/zoneinfo/Europe/Berlin - Europe/Berlin - - systemd enforces /usr to be available at bootup, so we can - enforce the use of the symlink - * check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar * swap units that are activated by one name but shown in the kernel under another are semi-broken @@ -31,67 +13,150 @@ Bugfixes: * properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point. -* we pull src/core/manager.h into src/shared/src/shared/path-lookup.c which is the wrong direction - rename enum "ManagerRunningAs" to "SystemdRunningAs" and move it to shared/ +F18: -* crash happens when running a service as forking and then changing it to simple and reloading. +* Retest multi-seat - Jul 09 18:20:57 mop systemd[1]: usbmuxd.service operation timed out. Terminating. - Jul 09 18:20:57 mop systemd[1]: Unit usbmuxd.service entered failed state. - Jul 09 18:22:24 mop systemd[1]: PID 21814 read from file /var/run/usbmuxd.pid does not exist. - Jul 09 18:22:24 mop systemd[1]: Unit usbmuxd.service entered failed state. - Jul 09 18:22:33 mop systemd[1]: Reloading. - Jul 09 18:22:37 mop systemd[1]: Assertion 's->type == SERVICE_FORKING' failed at src/core/service.c:3007, function service_sigchld_eve...Aborting. - Jul 09 18:22:37 mop systemd[1]: Caught , dumped core as pid 21865. - Jul 09 18:22:37 mop systemd[1]: Freezing execution. - Jul 09 18:22:37 mop [21866]: Process 21865 (systemd) dumped core. +Features: -* support *static* (/run) hibernate inhibitors. All rpm -i actions should completely prevent any - sort of hibernate action until the next reboot. If the kernel or any other base tool is replaced - by rpm, the resume path might fail, the for resume needed kernel might even be uninstalled, and - the whole situation leads directly to data loss. +* journactl: support negative filtering, i.e. FOOBAR!="waldo" -Features: +* drop header/footer from systemctl --failed output if there are no entries shown, print nice message instead, and hook that into ExecStartPre of rescue.service/emergency.service -* hw watchdog: optionally try to use the preset watchdog timeout instead of always overriding it +* add libsystemd-password or so to query passwords during boot using the password agent logic -* after deserializing sockets in socket.c we should reapply sockopts and things +* journal: when rotating, copy over old acls/access mode -* journald: warn if we drop messages we forward to the syslog socket +* journal: document why we do not give ownership to journal files to the user that created them but use FS ACLs for that -* does vasprintf advance the struct vaargs? http://pastie.org/pastes/4712773/text +* journal: send out marker messages every now and then, and immediately sync with fdatasync() afterwards, in order to have hourly guaranteed syncs. -* do shutdown audit/utmp msgs inside of PID 1, get rid of systemd-update-utmp-runlevel +* journal: when we haven't written anything in a while, sync to disk and mark file as offline, in order to be more often than not in a clean state -* make use of macros like this: +* journal-send.c, log.c: when the log socket is clogged, and we drop, count this and write a message about this when it gets unclogged again. - #define _cleanup_free_ __attribute__((cleanup(freep))) - #define _cleanup_fclose_ __attribute__((cleanup(fclosep))) +* If we show an error about a unit (such as not showing up) and it has no Description string, then show a description string generated form the reverse of unit_name_mangle(). -* make timer units go away after they elapsed +* fedup: add --unit to systemctl switch-root somehow +* fedup: don't delete initrd on switch-root +* fedup: generator -+ refuse automount triggers when automount is queued for stop, much like we refuse socket triggers when sockets are queued for stop +* journalctl/gatewayd: GELF output -* perfomance messages for selinux are gone from debug log? +* journal: find a way to allow dropping history early, based on priority, other rules -* http://lists.freedesktop.org/archives/systemd-devel/2012-September/006502.html +* journal: When interleaving journal files cache binary search results so that + we can cheaply continue where we left off. + +* journal: When used on NFS, check payload hashes + +* journal: When used on NFS make sure wake up sd_journal_wait() every 2s, to handle missing inotify + +* "See journal for details" messages should include "journalctl -u" command line + +* document that people can use file system ACLs to manage access to journal files, with example + +* don't show cgroup in "systemctl status" if empty/non-existant, especially for foreign .mount units + +* timedated: export boolean that clarifies whether NTP is even available + +* timedated: refuse time changes when NTP is on + +* clean up date formatting and parsing so that all absolute/relative timestamps we format can also be parsed + +* introduce hybrid-sleep.target + +* _SOURCE_MONOTONIC_TIMESTAMP entries from the kernel seem to be off by 1000000 + +* document unit_name_mangle() + +* add new command to systemctl: "systemctl system-reexec" which reexecs as many daemons as virtually possible + +* introduce generic AUGMENT_PID=, AUGMENT_DEVICE= fields + +* deal with sendmail/postfix exclusivity + +* systemctl enable: improve the success messages (i.e. more human readable, less shell-like) + +* systemctl enable: fail if target to alias into doesn't exist? maybe show how many units are enabled afterwards? + +* on shutdown: move utmp, wall, audit logic all into PID 1 itself, get rid of systemd-update-utmp-runlevel + +* add "provisioning" instructions to setup an empty /etc + /var + - used to setup a new container from a shared /usr + - superset of tmpfiles model + - instructions shipped by packages and stored in /usr/lib/ + - compose /etc/passwd and /etc/group, copy files + - able to create uid + gid used by packages, for file ownership + +* make repeated alt-ctrl-del presses printing a dump, or even force a reboot without + waiting for the timeout + +* high level net_prio setting in execution context + +* Introduce journalctl -b to show journal messages of a previous boot + +* hostnamed: before returning information from /etc/machine-info.conf check the modification data and reread. Similar for localed, ... + +* currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab isn't + +* WorkingDirectory: support env var replacements like in ExecStart= so that people can use $HOME + +* refuse boot if /etc/machine-id is not useful + +* nspawn: consider changing users for -u with su, so that NSS resolving works correctly + +* nspawn: implement personality changes a la linux32(8) + +* nspawn: reset all aux groups + +* cryptsetup-generator: warn if the password files are world-readable + +* cryptsetup-generator: add RequiresMountsFor= to cryptseup service files referencing a file, similar for devices + +* cryptsetup-generator: allow specification of passwords in crypttab itself + +* document that deps in [Unit] sections ignore Alias= fileds in + [Install] units of other units, unless those units are disabled + +* need to update LGPL2.1 text to newest version (with updated FSF address) + +* allow users from "wheel" to start/stop services + +* systemctl: when powering down/suspending check for inhibitors, and warn. -* don't use writev() in tmpfiles for sake of compat with sysfs? +* instantiated [Install] for target units + https://bugs.freedesktop.org/show_bug.cgi?id=54377 + +* support *static* (/run) hibernate inhibitors. All rpm -i actions should completely prevent any + sort of hibernate action until the next reboot. If the kernel or any other base tool is replaced + by rpm, the resume path might fail, the for resume needed kernel might even be uninstalled, and + the whole situation leads directly to data loss. + +* move debug shell to tty6 and make sure this doesn't break the gettys on tty6 + +* move cryptsetup key caching into kernel keyctl? + https://bugs.freedesktop.org/show_bug.cgi?id=54982 + +* make nspawn work without terminal + +* hw watchdog: optionally try to use the preset watchdog timeout instead of always overriding it + https://bugs.freedesktop.org/show_bug.cgi?id=54712 + +* after deserializing sockets in socket.c we should reapply sockopts and things + +* make timer units go away after they elapsed + +* http://lists.freedesktop.org/archives/systemd-devel/2012-September/006502.html * come up with a nice way to write queue/read_ahead_kb for a block device without interfering with readahead * journald: add kernel cmdline option to disable ratelimiting for debug purposes -* Add a way to reference the machine/boot ID from ExecStart= and similar command lines - * move PID 1 segfaults to /var/lib/systemd/coredump? * Document word splitting syntax for ExecStart= and friends -* merge: github.com/systemd/python-systemd - -* when writing journal entries order field items by their address to improve speed on rotating media - * create /sbin/init symlinks from the build system * Query Paul Moore about relabelling socket fds while they are open @@ -100,24 +165,14 @@ Features: * journald: check whether it is OK if the client can still modify delivered journal entries -* json: use jensson - * json: properly serialize multiple fields with the same name per entry -* journald: add option to choose between "split up nothing", "split up login user journals", "split up all user journals" - * journal live copy, based on libneon (client) and libmicrohttpd * document in wiki json serialization -* python-journal merge - * system-wide seccomp filter -* securityfs: don't mount in container - -* slave/shared remount root fs in container might clash with CAP_SYS_MOUNTS - * ability to pass fds into systemd * system.conf should have controls for cgroups @@ -126,22 +181,14 @@ Features: * currently system services appear not to generate core dumps... -* wall messages for shutdown should move to logind - * allow writing multiple conditions in unit files on one line -* There's something wrong with escaping unit names: http://lists.freedesktop.org/archives/systemd-devel/2012-August/006292.html - * cleanup ellipsation for log output in journalctl and systemctl status: have a sane way to disable ellipsation, and disable it by default when invoked in less/more -* enforce limits on fds openened by socket units - * explore multiple service instances per listening socket idea * testing tool for socket activation: some binary that listens on a socket and passes it on using the usual socket activation protocol to some server. -* maybe make systemd-detect-virt suid? or use fscaps? - * shutdown: don't read-only mount anything when running in container * nspawn: --read-only is not applied recursively to submounts @@ -173,16 +220,8 @@ Features: * dracut-shutdown needs to be ordered before unmounting /boot -* wiki: document new logind LockSessions() call - * initialize the hostname from the fs label of /, if /etc/hostname does not exist? -* logind: different policy actions for idle, suspend, shutdown blockers: allow idle blockers by default, don't allow suspend blockers by default - -* install README to /etc/rc.d/init.d (if support for that is enabled) helping people who use "ls" there to figure out which services exist. - -* logind: ignore inactive login screens when checking whether power key should be handled - * rename "userspace" to "core-os" * systemctl: "Journal has been rotated since unit was started." message is misleading @@ -197,8 +236,6 @@ Features: * logind: wakelock/opportunistic suspend support -* switch-root: sockets need relabelling - * systemd-analyze post-boot is broken for initrd * man: clarify that time-sync.target is not only sysv compat but also useful otherwise. Same for similar targets @@ -217,8 +254,6 @@ Features: * introduce Type=pid-file -* systemctl list-unit-files appears to be broken for symlinked units in /usr/lib - * maybe allow services with ExecStop= set, but no ExecStart=? * efi: implement /forcefsck as uefi variables thus not requiring file system altering to trigger a file system check @@ -246,10 +281,6 @@ Features: * support rd.luks.allow-discards= kernel cmdline params in cryptsetup generator -* systemctl: when stopping a service which has triggres and warning about it actually check the TriggeredBy= deps fields - -* journal: hook up with EFI firmware log - * nspawn: make use of device cgroup contrller by default * drop accountsservice's StandardOutput=syslog and Type=dbus fields @@ -297,8 +328,6 @@ Features: * Add pretty name for seats in logind -* selinux: merge systemd selinux access controls (dwalsh) - * ConditionSecurity= should learn about IMA * Auke: merge Auke's bootchart @@ -344,14 +373,10 @@ Features: * add command to systemctl to plot dependency graph as tree (see rhbz 795365) -* make logind reserve tty9 or so for text logins, so that gdm never picks it up - * add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/ * default unix qlen is too small (10). bump sysctl? add sockopt? -* Possibly, detect whether SysV init scripts can do reloading by looking for "echo Usage:" lines - * figure out whether we should leave dbus around during shutdown * dbus: in fedora, make the machine a symlink to /etc/machine-id @@ -362,8 +387,6 @@ Features: * logind: add equivalent to sd_pid_get_owner_uid() to the D-Bus API -* journal: API for looking for retrieving "all values of this field" - * journal: deal nicely with byte-by-byte copied files, especially regards header * journal: local deserializer of export mode, http server @@ -372,10 +395,6 @@ Features: * document the exit codes when services fail before they are exec()ed -* systemctl journal command - -* journalctl: --cursor support - * save coredump in Windows/Mozilla minidump format * support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting) @@ -390,9 +409,6 @@ Features: * when an instanced service exits, remove its parent cgroup too if possible. -* if we can not get user quota for tmpfs, mount a separate tmpfs instance - for every user in /run/user/$USER with a configured maximum size - * default to actual 32bit PIDs, via /proc/sys/kernel/pid_max * be able to specify a forced restart of service A where service B depends on, in case B @@ -417,8 +433,6 @@ Features: * move PAM code into its own binary -* warn if the user stops a service but not its associated socket - * logind: spawn user@..service on login * logind: non-local X11 server handling @@ -454,6 +468,7 @@ Features: * GC unreferenced jobs (such as .device jobs) * write blog stories about: + - hwdb: what belongs into it, lsusb - enabling dbus services - status update - how to make changes to sysctl and sysfs attributes @@ -461,13 +476,16 @@ Features: - how to pass throw-away units to systemd, or dynamically change properties of existing units - how to integrate cgconfig and suchlike with systemd - resource control in systemd - - inhibiting - testing with Harald's awesome test kit - - restart + - auto-restart + - journalctl advanced usage + - how to make use of the journal submission APIs + - same for journal browsing + - the journal HTTP iface * allow port=0 in .socket units -* move readahead files into /var, look for them with .path units +* move readahead files into /var (look for them with .path units?) * teach dbus to activate all services it finds in /etc/systemd/services/org-*.service @@ -489,20 +507,13 @@ Features: * timer events with system resume -* timer events on calendar time: - maybe use this time syntax? http://ohse.de/uwe/uschedule/uschedule.html - * dot output for --test showing the 'initial transaction' -* calendar time support in timer, iCalendar semantics for the timer stuff (RFC2445) - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=99ee5315dac6211e972fa3f23bcc9a0343ff58c4 - -* implicitly import "defaults" settings file into all types +* calendar time support in timer: + https://docs.google.com/document/pub?id=1bAMyFAjWLpzR3GTDYdgj5FWRMxoZiWw5zmUHEtvdHKA * writable cgroups dbus properties for live changes -* read config fragments for all units from /lib/systemd/system/foobar.service.d/ to override/extend specific settings - * port over to LISTEN_FDS/LISTEN_PID: - rpcbind (/var/run/rpcbind.sock!) HAVEPATCH - cups HAVEPATCH @@ -512,8 +523,6 @@ Features: - bluetoothd (/var/run/sdp! @/org/bluez/audio!) - distccd -* auditd service files - * fingerprint.target, wireless.target, gps.target, netdevice.target * io priority during initialization @@ -564,8 +573,10 @@ Regularly: * set_put(), hashmap_put() return values check. i.e. == 0 doesn't free()! -* use __secure_getenv() instead of getenv() where appropriate +* use secure_getenv() instead of getenv() where appropriate + +Scheduled for removal or fixing: -Scheduled for removal (or fixing): +* xxxOverridable dependencies (probably: fix) -* xxxOverridable dependencies +* support for early-boot SysV services (definitely: remove)