X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=9b8df458b762d946ec1c3ce3db9053fa405ca032;hp=ac5ae71fd1cf16425b34a08c0cd20d805b97c8ec;hb=862e8bf8c63bd74b915798677f1894da11b2be60;hpb=69af45035913e7119cffd94c542bd3039600e45d diff --git a/TODO b/TODO index ac5ae71fd..9b8df458b 100644 --- a/TODO +++ b/TODO @@ -1,4 +1,10 @@ Bugfixes: + +* enabling an instance unit creates a pointless link, and + the unit will be started with getty@getty.service: + $ systemctl enable getty@.service + ln -s '/usr/lib/systemd/system/getty@.service' '/etc/systemd/system/getty.target.wants/getty@.service' + * check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar * swap units that are activated by one name but shown in the kernel under another are semi-broken @@ -7,36 +13,28 @@ Bugfixes: automount points even when the original .automount file did not exist anymore. Only the .mount unit was still around. -* make polkit checks async - * properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point. -* stop importing kernel exported env variables. The utterly broken logic in - the kernel exports every kernel command line option which is not recognized - as a built-in module option as an env variable. Systemd should not pass-on - that nonsense, a kernel command line option is a command line option not an - env variable: - $ cat /proc/252/environ - initrd=\6a9857a393724b7a981ebb5b8495b9ea\3.10.0-2.fc20.x86_64\initrd +* When we detect invalid UTF-8, we cannot use it in an error message: + log...("Path is not UTF-8 clean, ignoring assignment: %s", rvalue); + +* shorten the message to sane length: -Fedora 19: + Cannot add dependency job for unit display-manager.service, ignoring: Unit display-manager.service failed to load: No such file or directory. See system logs and 'systemctl status display-manager.service' for details. -* external: maybe it is time to patch procps so that "ps" links to - libsystemd-logind to print a pretty service name, seat name, session - name in its output. Currently it only shows cgroup membership, but - that's sometimes kinda hard to parse for a human. +Fedora 20: -* cgroup attrs: - - update dbus interface docs in wiki +* external: ps should gain colums for slice and machine * localed: - localectl: support new converted x11→console keymaps * when installing fedora with yum --installroot /var/run is a directory, not a symlink + https://bugzilla.redhat.com/show_bug.cgi?id=975864 CGroup Rework Completion: -* introduce "mainpid" for scopes +* introduce "mainpid" for scopes (or maybe not?) * implement system-wide DefaultCPUAccounting=1 switch (and similar for blockio, memory?) @@ -44,64 +42,109 @@ CGroup Rework Completion: * handle jointly mounted controllers correctly -* logind: implement session kill exceptions +* introduce high-level settings for RT budget, swappiness -* make BlockIODeviceWeight=, BlockIODeviceBandwidth= runtime settable +Features: -* introduce high-level settings for RT budget, swappiness +* add field to transient units that indicate whether systemd or somebody else saves/restores its settings, for integration with libvirt -* man: document new bus apis +* direct connections to PID 1/XDG_RUNTIME_DIR, wait filter, reboot() filter unification, unify dispatch table in systemctl_main() and friends, convert all to bus_log_create_error() -* Send SIGHUP and SIGTERM in session scopes +* bus: access policy as vtable flag -Features: +* journalctl: support -M to read journal of containers and determine journal directory from root directory of container + +* tmpfiles: to make sure we don't delete unpacked tarballs with old timestamps right-away never delete stuff that is inside a directory with a new mtime + +* "systemctl mask" should find all names by which a unit is accessible + (i.e. by scanning for symlinks to it) and link them all to /dev/null + +* Automatically configure swap partition to use for hibernation by looking for largest swap partition on the root disk? + +* remove NSS usage from PID 1 (notably the specifiers) + +* socket-proxyd: + - Support multiple inherited sockets mapped to different remote hosts + - Use a nonblocking alternative to getaddrinfo + - Until we can start daemons directly, find a less ugly, less racy alternative than shell scripts for the second man page example. + - Support starting daemons directly without requiring a shell script; update man pages + +* optimize the cgroup propagation bits, especially unit_get_members_mask(), cgroup_context_get_mask() + +* "systemctl cat" or "systemctl view" command or or so, that cats the backing unit file of a service, plus its drop-ins and shows them in a pager + +* rfkill,backlight: we probably should run the load tools inside of the udev rules so that the state is properly initialized by the time other software sees it + +* Add a new Distribute=$NUMBER key to socket units that makes use of SO_REUSEPORT to distribute network traffic on $NUMBER instances + +* tmpfiles: when applying ownership to /run/log/journal, also do this for the journal fails contained in it + +* we probably should replace the left-over uses of strv_append() and replace them by strv_push() or strv_extend() + +* move config_parse_path_strv() out of conf-parser.c + +* libdsystemd-bus should expose utf8 validation calls + +* After coming back from hibernation reset hibernation swap partition using the /dev/snapshot ioctl APIs + +* If we try to find a unit via a dangling symlink, generate a clean + error. Currently, we just ignore it and read the unit from the search + path anyway. + +* When a Type=forking service fails and needed another service, that + service is not cleaned up again when it has StopWhenUnneeded=yes + http://lists.freedesktop.org/archives/systemd-devel/2013-July/012141.html + +* refuse boot if /etc/os-release is missing or /etc/machine-id cannot be set up + +* ensure scope units may be started only a single time + +* better error message if you run systemctl without systemd running + +* systemctl status output should should include list of triggering units and their status + +* for transient units, instead of writing out drop-ins for all properties consider serializing them in the normal serialization stream + +* logind: when logging out, remove user-owned sysv and posix IPC objects + +* session scopes/user unit: add RequiresMountsFor for the home directory of the user + +* add a man page containing packaging guidelines and recommending usage of things like Documentation=, PrivateTmp=, PrivateNetwork= and ReadOnlyDirectories=/etc /usr. + +* journalctl: instead --after-cursor= maybe have a --cursor=XYZ+1 syntax? + +* given that logind/machined now let PID 1 do all nasty work, we can + probably reduce the capability set they retain substantially. + +* btrfs raid assembly: some .device jobs stay stuck in the queue * Fedora: add an rpmlint check that verifies that all unit files in the RPM are listed in %systemd_post macros. * Fedora: post FPC ticket to move add %tmpfiles_create to the packaging guidelines -* add rpm macros for applying tmpfiles --create after package installation +* make sure gdm doesn't use multi-user-x but the new default X configuration file, and then remove multi-user-x from systemd * when parsing calendar timestamps support the UTC timezone (even if we won't support arbitrary timezone specs, support UTC itself certainly makes sense), also support syntaxes such as +0200 -* when a kernel driver logs in a tight loop we should ratelimit that too. +* when a kernel driver logs in a tight loop, we should ratelimit that too. -* "systemctl disable" of a unit instance removes all symlinks, should +* "systemctl disable" of a unit instance removes all symlinks, but should only remove the instance symlink (systemctl disable of a template unit however should remove them all). * journald: optionally, log debug messages to /run but everything else to /var -* journald: optionally, when messages with a high log priority are logged, sync() immediately. - -* introduce %v resolving to the string returned by "uname -r" - * systemctl list-unit-files should list generated files (and probably with a new state "generated" for them, or so) -* Get rid of systemd-sysv: - https://fedoraproject.org/wiki/User:Toshio/Systemd_Convert_draft - -* do we really need both hasprefix() and startswith()? - -* when a kernel driver logs in a tight loop we should ratelimit that too. - * journald: when we drop syslog messages because the syslog socket is full, make sure to write how many messages are lost as first thing to syslog when it works again. -* prohibit Restart= set with Type=oneshot - * man: the documentation of Restart= currently is very misleading and suggests the tools from ExecStartPre= might get restarted. * load .d/*.conf dropins for device units -* move systemctl set-log-level to systemd-analyze? - -* move "systemctl dump" to systemd-analyze - -* add a fixed dbus path for "my own unit", "my own session", ... to PID1, logind, ... - -* service_coldplug() appears to reinstall the wrong stop timeout watch? +* service_coldplug() appears to reinstall the wrong stop timeout watch. * transient units: allow creating auxiliary units with the same call @@ -111,26 +154,18 @@ Features: * journald: make sure ratelimit is actually really per-service with the new cgroup changes -* libsystemd-logind: sd_session_is_active() and friends: verify - validity of session name before appending it to a path - * gparted needs to disable auto-activation of mount units somehow, or maybe we should stop doing auto-activation of this after boot entirely. https://bugzilla.gnome.org/show_bug.cgi?id=701676 - -* when a service changes state make reflect that in the - RUNNING/LISTENING states of its socket + Maybe take a BSD lock at the disk device node and teach udev to + check for that and suppress event handling. * when recursively showing the cgroup hierarchy, optionally also show the hierarchies of child processes * document logic of auto/noauto and fail/nofail in fstab in systemd.mount or systemd-fstab-generator man page -* we should properly escape ssh hostnames we add into dbus server strings - -* something pulls in pcre as so dep into our daemons such as hostnamed. - -* cgroup-agent: downgrade error messages +* something pulls in pcre as shared object dependency into our daemons such as hostnamed. * document systemd-journal-flush.service properly @@ -153,9 +188,8 @@ Features: - merge busctl into systemctl or so? - synthesize sd_bus_message objects from kernel messages - properly implement name registry ioctls for kdbus - - get rid of object hash table, use decision tree everyhwere instead? - implement monitor logic - - object vtable logic + - properly map matches with well-known names against messages with unique names - longer term: * priority queues * priority inheritance @@ -194,16 +228,12 @@ Features: * logind: add Suspend() bus calls which take timestamps to fix double suspend issues when somebody hits suspend and closes laptop quickly. -* we need dynamic units - * cgtop: make cgtop useful in a container * test/: - add 'set -e' to scripts in test/ - make stuff in test/ work with separate output dir - - remove all the duplicated code in test/ - -* suppress log output on shutdown when "quiet" is used + - qemu wrapper script: http://www.spinics.net/lists/kvm/msg72389.html * systemctl delete x.snapshot leaves no trace in logs (at least at default level). @@ -216,15 +246,9 @@ Features: /etc should always override /run+/usr and also any symlink destination. -* remove duplicate default deps logic from fstab-generator vs. mount.c - * when isolating, try to figure out a way how we implicitly can order all units we stop before the isolating unit... -* teach udev + logind's uaccess to somehow handle the "dead" device nodes from: - /lib/modules/$(uname -r)/modules.devname - and apply ACLs to them if they have TAG=="uaccess" in udev rules. - * add ConditionArchitecture= or so * teach ConditionKernelCommandLine= globs or regexes (in order to match foobar={no,0,off}) @@ -286,9 +310,6 @@ Features: * timedate: have global on/off switches for auto-time (NTP), and auto-timezone that connman can subscribe to. -* Honour "-" prefix for InaccessibleDirectories= and ReadOnlyDirectories= to - suppress errors of the specified path doesn't exist - * dev-setup.c: when running in a container, create a tiny stub udev database with the systemd tag set for all network interfaces found, so that libudev reports them as present, and systemd's .device units @@ -299,11 +320,10 @@ Features: * introduce ExecCondition= in services * EFI: - - fsck hookup for the ESP mount is missing - write man page for efi boot generator - honor language efi variables for default language selection (if there are any?) - honor timezone efi variables for default timezone selection (if there are any?) - - introduce bootctl (backed by systemd-bootd) to control temporary and persistent default boot goal plus efi variables + - change bootctl to be backed by systemd-bootd to control temporary and persistent default boot goal plus efi variables * maybe do not install getty@tty1.service symlink in /etc but in /usr? @@ -322,17 +342,13 @@ Features: - logind: wakelock/opportunistic suspend support - Add pretty name for seats in logind - logind: allow showing logout dialog from system? - - logind: spawn user@..service on login - logind: non-local X11 server handling - logind: add equivalent to sd_pid_get_owner_uid() to the D-Bus API - pam: when leaving a session explicitly exclude the ReleaseSession() caller process from the killing spree - - logind: GetSessionByPID() should accept 0 as PID value - we should probably handle SIGTERM/SIGINT to not leave dot files around, just in case * exec: when deinitializating a tty device fix the perms and group, too, not only when initializing. Set access mode/gid to 0620/tty. -* DeviceAllow/DeviceDeny: disallow everything by default, but whitelist /dev/zero, /dev/null and friends - * service: watchdog logic: for testing purposes allow ping, but do not require pong * journal: @@ -405,11 +421,14 @@ Features: * timer units: - configurable jitter for timer events + - Adjust timers to be triggered at the same time as sd-event timers - timer events with system resume - timer units should get the ability to trigger when: o CLOCK_REALTIME makes jumps (TFD_TIMER_CANCEL_ON_SET) o DST changes - Support 2012-02~4 as syntax for specifying the fourth to last day of the month. + - Modulate timer frequency based on battery state + - anacron-like feature * update the kernel's TZ (sys_tz) when DST changes @@ -420,10 +439,6 @@ Features: mode, it will never touch the RTC if the no reliable time source is active or the user did not request anything like it. -* hwdb: - - implement conditional properties (dmi matches) - - hwdb --filter=ID_DRIVE_* - * if booted in "quiet" mode, and an error happens, turn on status output again, so that the emergency mode isn't totally surprising. Also, terminate plymouth. @@ -511,8 +526,6 @@ Features: * Query Paul Moore about relabelling socket fds while they are open -* system.conf should have controls for cgroups - * allow writing multiple conditions in unit files on one line * explore multiple service instances per listening socket idea @@ -530,8 +543,6 @@ Features: when done. That means clients don't get a successful method reply, but much rather a disconnect on success. -* remember which condition failed for services, not just the fact that something failed - * use opterr = 0 for all getopt tools * properly handle loop back mounts via fstab, especially regards to fsck/passno @@ -562,8 +573,6 @@ Features: * when breaking cycles drop sysv services first, then services from /run, then from /etc, then from /usr -* move passno parsing to fstab generator - * automount: implement expire: - set superblock timeout AUTOFS_DEV_IOCTL_TIMEOUT_CMD - periodically run AUTOFS_DEV_IOCTL_EXPIRE_CMD @@ -582,7 +591,6 @@ Features: * udev: - remove src/udev/udev-builtin-firmware.c (CONFIG_FW_LOADER_USER_HELPER=n) - move to LGPL - - unify utf8 validator code with shared/ - kill scsi_id - add trigger --subsystem-match=usb/usb_device device @@ -606,10 +614,6 @@ Features: * support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting) -* clean up session cgroups that remain after logout (think sshd), but eventually run empty - -* when an instanced service exits, remove its parent cgroup too if possible. - * default to actual 32bit PIDs, via /proc/sys/kernel/pid_max * be able to specify a forced restart of service A where service B depends on, in case B @@ -643,6 +647,8 @@ Features: when we start a service in order to avoid confusion when a user assumes starting a service is enough to make it accessible +* support User= and Group= attributes for AF_UNIX sockets. + * Make it possible to set the keymap independently from the font on the kernel cmdline. Right now setting one resets also the other. @@ -720,6 +726,14 @@ Features: - document initcall_debug - kernel cmdline "bootchart" option for simplicity? +* udev-link-config: + - Make sure ID_PATH is always exported and complete for + network devices where possible, so we can safely rely + on Path= matching + - NamePolicy= replace the current naming rules + - MACPolicy= support 'firmware', 'synthetic' and 'random' + - Check if Driver= is broken, or just my driver (bcma) + External: * dbus: