X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=90c321c3f6100ac68a4e7a01ee2c3ed264747433;hp=ea9933d1003ba52ace96565c19928c86e5f63c8a;hb=5ebbc3f32fc2c5f04dcb2647f51674a0532f1d18;hpb=679829e4aa1461a2db7537aae4c68c6780362c06 diff --git a/TODO b/TODO index ea9933d10..90c321c3f 100644 --- a/TODO +++ b/TODO @@ -29,31 +29,43 @@ External: * When lz4 gets an API for lz4 command output, make use of it to compress coredumps in a way compatible with /usr/bin/lz4. -Features: +Release 219 preparations: + +* support mbr raw disk images in systemd-nspawn, so that we can boot + fedora cloud images unmodified (change suffix for search for files + .gpt → .raw). + +* dkr import hash verification + +* rework journald sigbus stuff to use mutex + +* create importd daemon, move "systemd-import" tool into machinectl * change default container location from /var/lib/container to /var/lib/machines -* import pull-gpt: create writable snapshot of downloaded image, by the right name +Features: -* nspawn: when start a container "foobar" look for its configuration in a file "foobar.nspawn" in /etc/systemd/nspawn/ as well as next to the actualy directory or image to boot +* nspawn should lock container images while running off them -* Port various tools to make use of verbs.[ch], where applicable +* when invoking "loginctl session-status" default to callers session -* Check all invocations of access() and consider turning them into laccess() +* logind,machined: add generic catch-all polkit verbs for most priviliged operations, similar to systemd itself -* "machinectl start/enable/disable foo" as aliases for "systemctl start/enable/disable systemd-nspawn@foo.service" +* "machinectl status" should also show logs of the container in question -* "machinectl snapshot" to make a snapshot of a tree or container into /var/lib/containers +* nspawn: don't change superblock mount options from nspawn for cgroup hierarchies -* "machinectl rm" to remove a container tree from /var/lib/containers +* "machinectl list-images" should show os-release data, as well as machine-info data (including deployment level) -* "machinectl history" +* nspawn: when start a container "foobar" look for its configuration in a file "foobar.nspawn" in /etc/systemd/nspawn/ as well as next to the actualy directory or image to boot -* "machinectl diff" +* Port various tools to make use of verbs.[ch], where applicable -* "machinectl read-only" +* Check all invocations of access() and consider turning them into laccess() + +* "machinectl history" -* show btrfs quota in machinectl +* "machinectl diff" * "machinectl commit" that takes a writable snapshot of a tree, invokes a shell in it, and marks it read-only after use @@ -61,15 +73,9 @@ Features: * add transparent btrfs pool in a loopback file in /var if btrfs operations (such as systemd-import pull-dkr) are used and /var is not a btrfs file system -* systemd-nspawn -M should look for gpt images if neither -D nor -i are specified. - -* systemd-nspawn -i should run things read-only if image file has no writable bits - * systemd-nspawn -x should support ephemeral instances of gpt images -* systemd-import pull-gpt should make a read-only download, plus a writable reflinked copy - -* machinectl list should show crtimes of snapshots and GPT images +* move machinectl's mount and copy commands into machined * hostnamectl: show root image uuid @@ -80,10 +86,6 @@ Features: * port libmount hookup to use API's own inotify interface, as soon as that is table in libmount -* journald: broken file systems are real (btrfs), we need to handle - SIGBUS in some way if we cannot write or read from the disk. - https://bugzilla.redhat.com/show_bug.cgi?id=1151848 - * "systemctl preset-all" should probably order the unit files it operates on lexicographically before starting to work, in order to ensure deterministic behaviour if two unit files conflict (like DMs @@ -95,7 +97,7 @@ Features: * systemd-journal-upload (or a new, related tool): allow pushing out journal messages onto the network in BSD syslog protocol, - continously. Default to some link-local IP mcast group, to make this + continuously. Default to some link-local IP mcast group, to make this useful as a one-stop debugging tool. * synchronize console access with BSD locks: @@ -340,18 +342,10 @@ Features: * sd-bus: - kdbus: process fd=-1 for incoming msgs - make dsrt happy, and change userspace header for kdbus to yyyyuta{tv}v - - kdbus: PID/TID goes missing for method calls from outside the PID namespace? - - kdbus: the kernel should not allow messages to be delivered that have a reply serial != 0, reply-expect unset, but no appropriate window - - kdbus: timestamps on kernel's NameOwnerChanged messages? - - kdbus' busnames.target should get pulled in by basic.target - - Ignore .busname units on classic D-Bus boots, systemd-resolved cannot be started on kdbus - without the active policy and should get a Wants=org.freedesktop.resolve1.busname to - pull-in the policy. - port to sd-resolve for connecting to TCP dbus servers - kdbus: maybe add controlling tty metadata fields - see if we can introduce a new sd_bus_get_owner_machine_id() call to retrieve the machine ID of the machine of the bus itself - when kdbus does not take our message without memfds, try again with memfds - - introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list - see if we can drop more message validation on the sending side - add API to clone sd_bus_message objects - make AddMatch calls on dbus1 transports async? @@ -598,11 +592,7 @@ Features: * currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab is not * nspawn: - - bind mount read-only the cgroup tree higher than nspawn - refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK). - - introduce machines.target to order after all nspawn instances - - systemd-nspawn@.service should fail if some nspawn arg is invalid, with Type=notify - - PID 1 doesn't apply nspawns devices cgroup policy * cryptsetup: - cryptsetup-generator: allow specification of passwords in crypttab itself