X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=a3ab09e504925e2e9526a019ea94fecd75a68666;hp=a6eed6f401298102bf6b0b7c46279ddcbe57f1f4;hb=1daf8121524246932b18be8dd7d63e792dee5de2;hpb=c14901bdebb311531fb85b02c7c6eebf6e8e4388 diff --git a/TODO b/TODO index a6eed6f40..a3ab09e50 100644 --- a/TODO +++ b/TODO @@ -1,4 +1,10 @@ Bugfixes: + +* enabling an instance unit creates pointless link, and + the unit will be started with getty@getty.service: + $ systemctl enable getty@.service + ln -s '/usr/lib/systemd/system/getty@.service' '/etc/systemd/system/getty.target.wants/getty@.service' + * check systemd-tmpfiles for selinux context hookup for mknod(), symlink() and similar * swap units that are activated by one name but shown in the kernel under another are semi-broken @@ -11,32 +17,26 @@ Bugfixes: * properly handle .mount unit state tracking when two mount points are stacked one on top of another on the exact same mount point. -* stop importing kernel exported env variables. The utterly broken logic in - the kernel exports every kernel command line option which is not recognized - as a built-in module option as an env variable. Systemd should not pass-on - that nonsense, a kernel command line option is a command line option not an - env variable: - $ cat /proc/252/environ - initrd=\6a9857a393724b7a981ebb5b8495b9ea\3.10.0-2.fc20.x86_64\initrd +* When we detect invalid UTF-8, we cant't use it in an error message: + log...("Path is not UTF-8 clean, ignoring assignment: %s", rvalue); -Fedora 19: +* shorten the message to sane length: -* external: maybe it is time to patch procps so that "ps" links to - libsystemd-logind to print a pretty service name, seat name, session - name in its output. Currently it only shows cgroup membership, but - that's sometimes kinda hard to parse for a human. + Cannot add dependency job for unit display-manager.service, ignoring: Unit display-manager.service failed to load: No such file or directory. See system logs and 'systemctl status display-manager.service' for details. -* cgroup attrs: - - update dbus interface docs in wiki +Fedora 20: + +* external: ps should gain colums for slice and machine * localed: - localectl: support new converted x11→console keymaps * when installing fedora with yum --installroot /var/run is a directory, not a symlink + https://bugzilla.redhat.com/show_bug.cgi?id=975864 CGroup Rework Completion: -* introduce "mainpid" for scopes +* introduce "mainpid" for scopes (or maybe not?) * implement system-wide DefaultCPUAccounting=1 switch (and similar for blockio, memory?) @@ -44,38 +44,93 @@ CGroup Rework Completion: * handle jointly mounted controllers correctly -* logind: implement session kill exceptions +* introduce high-level settings for RT budget, swappiness -* fix machine regstration to forward property array +Features: -* make BlockIODeviceWeight=, BlockIODeviceBandwidth= runtime settable +* saproxy: Support multiple inherited sockets mapped using different proxies -* split up BlockIOWeight= and BlockIODeviceWeight= +* saproxy: Use a nonblocking alternative to getaddrinfo -* introduce high-level settings for RT budget, swappiness +* saproxy: Until we can start daemons directly, find a less ugly, less racy alternative than shell scripts for the second man page example. -* man: document new bus apis +* saproxy: Support starting daemons directly without requiring a shell script; update man pages -Features: +* "systemctl cat" or "systemctl view" command or or so, that cats the backing unit file of a service, plus its drop-ins and shows them in a pager + +* rfkill,backlight: we probably should run the load tools inside of the udev rules so that the state is properly initialized by the time other software sees it + +* Add a new Distribute=$NUMBER key to socket units that makes use of SO_REUSEPORT to distribute network traffic on $NUMBER instances + +* tmpfiles: when applying ownership to /run/log/journal also do this for the journal fails contained in it + +* we probably should replace the left-over uses of strv_append() and replace them by strv_push() or strv_extend() + +* move config_parse_path_strv() out of conf-parser.c + +* libdsystemd-bus should expose utf8 validation calls + +* After coming back from hibernation reset hibernation swap partition using the /dev/snapshot ioctl APIs + +* If we try to find a unit via a dangling symlink generate a clean + error. Currently we just ignore it and read the unit from the search + path anyway. + +* When a Type=forking service fails and needed another service that + service is not cleaned up again when it has StopWhenUnneeded=yes + http://lists.freedesktop.org/archives/systemd-devel/2013-July/012141.html + +* refuse boot if /etc/os-release is missing or /etc/machine-id cannot be set up + +* ensure scope units may be started only a single time + +* document that in instead of FsckPassNo= people should just add a manual dep to systemd-fsck@.service to their mount units. + +* better error message if you run systemctl without systemd running + +* systemctl status output should should include list of triggering units and their status + +* for transient units, instead of writing out drop-ins for all properties consider serializing them in the normal serialization stream + +* logind: when logging out, remove user-owned sysv and posix IPC objects + +* session scopes/user unit: add RequiresMountsFor for the home directory of the user + +* add a man page containing packaging guidelines and recommending usage of things like Documentation=, PrivateTmp=, PrivateNetwork= and ReadOnlyDirectories=/etc /usr. + +* journalctl: instead --after-cursor= maybe have a --cursor=XYZ+1 syntax? + +* given that logind/machined now let PID 1 do all nasty work we can + probably reduce the capability set they retain substantially. + +* btrfs raid assembly: some .device jobs stay stuck in the queue -* do we really need both hasprefix() and startswith()? +* Fedora: add an rpmlint check that verifies that all unit files in the RPM are listed in %systemd_post macros. + +* Fedora: post FPC ticket to move add %tmpfiles_create to the packaging guidelines + +* make sure gdm doesn't use multi-user-x but the new default X configuration file, and then remove multi-user-x from systemd + +* when parsing calendar timestamps support the UTC timezone (even if we won't support arbitrary timezone specs, support UTC itself certainly makes sense), also support syntaxes such as +0200 * when a kernel driver logs in a tight loop we should ratelimit that too. +* "systemctl disable" of a unit instance removes all symlinks, should + only remove the instance symlink (systemctl disable of a template + unit however should remove them all). + +* journald: optionally, log debug messages to /run but everything else to /var + +* systemctl list-unit-files should list generated files (and probably with a new state "generated" for them, or so) + * journald: when we drop syslog messages because the syslog socket is full, make sure to write how many messages are lost as first thing to syslog when it works again. -* prohibit Restart= set with Type=oneshot - * man: the documentation of Restart= currently is very misleading and suggests the tools from ExecStartPre= might get restarted. * load .d/*.conf dropins for device units -* move systemctl set-log-level to systemd-analyze? - -* move "systemctl dump" to systemd-analyze - * add a fixed dbus path for "my own unit", "my own session", ... to PID1, logind, ... * service_coldplug() appears to reinstall the wrong stop timeout watch? @@ -88,15 +143,11 @@ Features: * journald: make sure ratelimit is actually really per-service with the new cgroup changes -* libsystemd-logind: sd_session_is_active() and friends: verify - validity of session name before appending it to a path - * gparted needs to disable auto-activation of mount units somehow, or - maybe we should stop doing auto-activiation of this after boot + maybe we should stop doing auto-activation of this after boot entirely. https://bugzilla.gnome.org/show_bug.cgi?id=701676 - -* when a service changes state make reflect that in the - RUNNING/LISTENING states of its socket + Maybe take a BSD lock at the disk device node and teach udev to + check for that and suppress event handling. * when recursively showing the cgroup hierarchy, optionally also show the hierarchies of child processes @@ -107,11 +158,9 @@ Features: * something pulls in pcre as so dep into our daemons such as hostnamed. -* cgroup-agent: downgrade error messages - * document systemd-journal-flush.service properly -* chane systemd-journal-flush into a service that stays around during +* change systemd-journal-flush into a service that stays around during boot, and causes the journal to be moved back to /run on shutdown, so that we don't keep /var busy. This needs to happen synchronously, hence doing this via signals is not going to work. @@ -119,9 +168,6 @@ Features: * allow implementation of InaccessibleDirectories=/ plus ReadOnlyDirectories=... for whitelisting files for a service. -* libsystemd-journal: - - return ECHILD as soon as somebody tries to reuse a journal object across a fork() - * libsystemd-bus: - default policy (allow uid == 0 and our own uid) - enforce alignment of pointers passed in @@ -133,9 +179,7 @@ Features: - merge busctl into systemctl or so? - synthesize sd_bus_message objects from kernel messages - properly implement name registry ioctls for kdbus - - get rid of object hash table, use decision tree everyhwere instead? - implement monitor logic - - object vtable logic - longer term: * priority queues * priority inheritance @@ -152,9 +196,9 @@ Features: * Introduce a way how we can kill the main process of a service with KillSignal, but all processes with SIGKILL later on https://bugzilla.redhat.com/show_bug.cgi?id=952634 -* maybe add a warning to the unit file parses whern the acces mode of unit files is non-sensical. +* maybe add a warning to the unit file parses where the access mode of unit files is nonsensical. -* investigate endianess issues of UUID vs. GUID +* investigate endianness issues of UUID vs. GUID * dbus: when a unit failed to load (i.e. is in UNIT_ERROR state), we should be able to safely try another attempt when the bus call LoadUnit() is invoked. @@ -174,8 +218,6 @@ Features: * logind: add Suspend() bus calls which take timestamps to fix double suspend issues when somebody hits suspend and closes laptop quickly. -* we need dynamic units - * cgtop: make cgtop useful in a container * test/: @@ -183,8 +225,6 @@ Features: - make stuff in test/ work with separate output dir - remove all the duplicated code in test/ -* suppress log output on shutdown when "quiet" is used - * systemctl delete x.snapshot leaves no trace in logs (at least at default level). * make the coredump collector tool move itself into the user's cgroup @@ -196,21 +236,13 @@ Features: /etc should always override /run+/usr and also any symlink destination. -* remove duplicate default deps logic from fstab-generator vs. mount.c - * when isolating, try to figure out a way how we implicitly can order all units we stop before the isolating unit... -* teach udev + logind's uaccess to somehow handle the "dead" device nodes from: - /lib/modules/$(uname -r)/modules.devname - and apply ACLs to them if they have TAG=="uaccess" in udev rules. - * add ConditionArchitecture= or so * teach ConditionKernelCommandLine= globs or regexes (in order to match foobar={no,0,off}) -* we should log capabilities too - * Support SO_REUSEPORT with socket activation: - Let systemd maintain a pool of servers. - Use for seamless upgrades, by running the new server before stopping the @@ -231,7 +263,7 @@ Features: and we might want to requeue the mounts local-fs acquired through that automatically. -* rework specifier logic so that we can distuingish OOM errors from other errors +* rework specifier logic so that we can distinguish OOM errors from other errors * systemd-inhibit: make taking delay locks useful: support sending SIGINT or SIGTERM on PrepareForSleep() @@ -241,13 +273,13 @@ Features: * documentation: recommend to connect the timer units of a service to the service via Also= in [Install] -* add a tool that lists active timer units plus their next elapstion and the time the units ran last +* add a tool that lists active timer units plus their next elapse and the time the units ran last * man: document the very specific env the shutdown drop-in tools live in * shutdown logging: store to EFI var, and store to USB stick? -* man: extend runlevel(8) to mention that runlevels suck, and are dead. Maybe add runlevel(7) with a note about that too +* man: extend runlevel(8) to mention that runlevels suck, and are dead. Maybe add runlevel(7) with a note about that too * systemctl: maybe add "systemctl add-wants" or so... @@ -268,9 +300,6 @@ Features: * timedate: have global on/off switches for auto-time (NTP), and auto-timezone that connman can subscribe to. -* Honour "-" prefix for InaccessibleDirectories= and ReadOnlyDirectories= to - suppress errors of the specified path doesn't exist - * dev-setup.c: when running in a container, create a tiny stub udev database with the systemd tag set for all network interfaces found, so that libudev reports them as present, and systemd's .device units @@ -285,7 +314,7 @@ Features: - write man page for efi boot generator - honor language efi variables for default language selection (if there are any?) - honor timezone efi variables for default timezone selection (if there are any?) - - introduce bootctl (backed by systemd-bootd) to control temporary and persistent default boot goal plus efi variables + - change bootctl to be backed by systemd-bootd to control temporary and persistent default boot goal plus efi variables * maybe do not install getty@tty1.service symlink in /etc but in /usr? @@ -304,7 +333,6 @@ Features: - logind: wakelock/opportunistic suspend support - Add pretty name for seats in logind - logind: allow showing logout dialog from system? - - logind: spawn user@..service on login - logind: non-local X11 server handling - logind: add equivalent to sd_pid_get_owner_uid() to the D-Bus API - pam: when leaving a session explicitly exclude the ReleaseSession() caller process from the killing spree @@ -313,8 +341,6 @@ Features: * exec: when deinitializating a tty device fix the perms and group, too, not only when initializing. Set access mode/gid to 0620/tty. -* DeviceAllow/DeviceDeny: disallow everything by default, but whitelist /dev/zero, /dev/null and friends - * service: watchdog logic: for testing purposes allow ping, but do not require pong * journal: @@ -343,14 +369,13 @@ Features: - journal-send.c, log.c: when the log socket is clogged, and we drop, count this and write a message about this when it gets unclogged again. - journal: find a way to allow dropping history early, based on priority, other rules - journal: When used on NFS, check payload hashes - - Introduce journalctl -b to show journal messages of a previous boot - journald: check whether it is OK if the client can still modify delivered journal entries - journal live copy, based on libneon (client) and libmicrohttpd (server) - journald: add kernel cmdline option to disable ratelimiting for debug purposes - refuse taking lower-case variable names in sd_journal_send() and friends. - journald: we currently rotate only after MaxUse+MaxFilesize has been reached. - journal: deal nicely with byte-by-byte copied files, especially regards header - - journalctl: show multiline log messages sanely, expand tabs, and show all valid utf8 messages + - journalctl: expand tabs - journal: store euid in journal if it differs from uid - journal: sanely deal with entries which are larger than the individual file size, but where the components would fit - Replace utmp, wtmp, btmp, and lastlog completely with journal @@ -403,10 +428,6 @@ Features: mode, it will never touch the RTC if the no reliable time source is active or the user did not request anything like it. -* hwdb: - - implement conditional properties (dmi matches) - - hwdb --filter=ID_DRIVE_* - * if booted in "quiet" mode, and an error happens, turn on status output again, so that the emergency mode isn't totally surprising. Also, terminate plymouth. @@ -494,8 +515,6 @@ Features: * Query Paul Moore about relabelling socket fds while they are open -* system.conf should have controls for cgroups - * allow writing multiple conditions in unit files on one line * explore multiple service instances per listening socket idea @@ -513,8 +532,6 @@ Features: when done. That means clients don't get a successful method reply, but much rather a disconnect on success. -* remember which condition failed for services, not just the fact that something failed - * use opterr = 0 for all getopt tools * properly handle loop back mounts via fstab, especially regards to fsck/passno @@ -565,7 +582,6 @@ Features: * udev: - remove src/udev/udev-builtin-firmware.c (CONFIG_FW_LOADER_USER_HELPER=n) - move to LGPL - - unify utf8 validator code with shared/ - kill scsi_id - add trigger --subsystem-match=usb/usb_device device @@ -589,10 +605,6 @@ Features: * support crash reporting operation modes (https://live.gnome.org/GnomeOS/Design/Whiteboards/ProblemReporting) -* clean up session cgroups that remain after logout (think sshd), but eventually run empty - -* when an instanced service exits, remove its parent cgroup too if possible. - * default to actual 32bit PIDs, via /proc/sys/kernel/pid_max * be able to specify a forced restart of service A where service B depends on, in case B @@ -626,6 +638,8 @@ Features: when we start a service in order to avoid confusion when a user assumes starting a service is enough to make it accessible +* support User= and Group= attributes for AF_UNIX sockets. + * Make it possible to set the keymap independently from the font on the kernel cmdline. Right now setting one resets also the other. @@ -703,6 +717,8 @@ Features: - document initcall_debug - kernel cmdline "bootchart" option for simplicity? +* systemd-run is missing zsh completion scripts + External: * dbus: