X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=b116451f5bad3001acc2ac14313a7018ac9be020;hp=fb118f155028d32d6012f61f8dca0484be7a4a5a;hb=5a85ca1cb622fda4a39c8a6f00dccea7f8a1e82a;hpb=c343be283b7152554bac0c02493a4e1759c163f7 diff --git a/TODO b/TODO index fb118f155..b116451f5 100644 --- a/TODO +++ b/TODO @@ -32,14 +32,15 @@ External: Features: +* support empty /etc boots nicely: + - apply presets at first boot + - tmpfiles: allow overriding of /etc/mtab + - tmpfiles: add nice way to copy files /usr/share/etc → /etc + * generator that automatically discovers btrfs subvolumes, identifies their purpose based on some xattr on them. * support setting empty environment variables with Environment= and EnvironmentFile= -* tmpfiles: figure out relation between Z and m? - -* systemd-notify: fake ucred of msg to PID of parent, if that works, with fallback to our own if it doesn't. - * machined/machinectl: sort IP addresses we return by scope and protocol * machined: write NSS module for looking up IP addresses for machines @@ -68,18 +69,10 @@ Features: * Add timeout to early-boot, and shut down the system if it is hit. Solves the laptop-in-bag problem and is useful for embedded cases -* ImmutableSystem=yes/no or so to mount /usr, /boot read-only/invisible, and leave /var and /etc writable - -* InaccessibleHome=yes/no or so to hide /home and /run/user from a service - -* Run most system services with cgroupfs read-only and procfs with a more secure mode +* Run most system services with cgroupfs read-only and procfs with a more secure mode (doesn't work, since the hidepid= option is per-pid-namespace, not per-mount) * sd-event: generate a failure of a default event loop is executed out-of-thread -* add "M" as recursive version of "m" to tmpfiles, then use it for - chowning /run/log/journal (but not /var/log/journal), so that we - adjust the perms of journal files created before tmpfiles ran. - * expose "Locked" property on logind sesison objects * add bus api to query unit file's X fields. @@ -98,10 +91,6 @@ Features: do not have to open it to know that it is not interesting for us, for the most common operations. -* support transient mount units - -* add an "input" group to udev logic and add all input devices to it - * add generator that pulls in systemd-network from containers when CAP_NET_ADMIN is set, more than the loopback device is defined, even when it is otherwise off @@ -161,8 +150,6 @@ Features: * Automatically configure swap partition to use for hibernation by looking for largest swap partition on the root disk? -* socket-proxyd: Use sd-resolve to resolve the server address - * rfkill,backlight: we probably should run the load tools inside of the udev rules so that the state is properly initialized by the time other software sees it * After coming back from hibernation reset hibernation swap partition using the /dev/snapshot ioctl APIs @@ -189,17 +176,15 @@ Features: ReadOnlyDirectories=... for whitelisting files for a service. * sd-bus: - - make AddMatch calls on dbus1 transports async - when kdbus does not take our message without memfds, try again with memfds - systemd-bus-proxyd needs to enforce good old XML policy - - port exit-on-idle logic to byebye ioctl - allow updating attach flags during runtime - pid1: peek into activating message when activating a service - introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list - - constructors for bus messages should probably not be OK with a NULL bus pointer - - .busname units should not use get_user_creds()/get_cgroup_creds() but instead do NSS only in temporarily forked off child + - port to sd-resolve for connecting to TCP dbus servers - see if we can drop more message validation on the sending side - add API to clone sd_bus_message objects + - make AddMatch calls on dbus1 transports async? - kdbus: matches against source or destination pids for an "strace -p"-like feel. Problem: The PID info needs to be available in userspace too... - longer term: priority inheritance - dbus spec updates: @@ -210,7 +195,6 @@ Features: - path escaping - update systemd.special(7) to mention that dbus.socket is only about the compatibility socket now - test bloom filter generation indexes - - port to sd-resolve for connecting to TCP dbus servers * sd-event - allow multiple signal handlers per signal? @@ -464,9 +448,7 @@ Features: * currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab is not * nspawn: - - nspawn: --read-only is not applied recursively to submounts - bind mount read-only the cgroup tree higher than nspawn - - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters - refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK). - support taking a btrfs snapshot at startup and dropping it afterwards @@ -483,9 +465,6 @@ Features: * make timer units go away after they elapsed -* http://lists.freedesktop.org/archives/systemd-devel/2012-September/006502.html - (network and remote-fs on shutdown) - * come up with a nice way to write queue/read_ahead_kb for a block device without interfering with readahead * move PID 1 segfaults to /var/lib/systemd/coredump? @@ -500,8 +479,6 @@ Features: * MountFlags=shared acts as MountFlags=slave right now. -* ReadOnlyDirectories= is not applied recursively to submounts - * drop PID 1 reloading, only do reexecing (difficult: Reload() currently is properly synchronous, Reexec() is weird, because we cannot delay the response properly until we are back, so instead of @@ -552,8 +529,6 @@ Features: * introduce mix of BindTo and Requisite -* add DeleteSocketsOnStop=yes|no option to socket units - * There's currently no way to cancel fsck (used to be possible via C-c or c on the console) * add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/ @@ -599,8 +574,6 @@ Features: when we start a service in order to avoid confusion when a user assumes starting a service is enough to make it accessible -* support User= and Group= attributes for AF_UNIX sockets. (difficult, requires NSS from PID 1?) - * Make it possible to set the keymap independently from the font on the kernel cmdline. Right now setting one resets also the other. @@ -613,8 +586,6 @@ Features: - readahead: when bumping /sys readahead variable save mtime and compare later to detect changes - readahead: make use of EXT4_IOC_MOVE_EXT, as used by http://e4rat.sourceforge.net/ -* add support for /bin/mount -s - * GC unreferenced jobs (such as .device jobs) * write blog stories about: