Bugfixes:
+* killing nspawn with ]]] results in:
+ machine-f20.scope stopping timed out. Killing.
+ Stopped Container f20.
+ Unit machine-f20.scope entered failed state.
+ and it cannot be started again
+
* enabling an instance unit creates a pointless link, and
the unit will be started with getty@getty.service:
$ systemctl enable getty@.service
Features:
+* hookup nspawn and PrivateNetwork=yes with "ip netns"
+
+* socket units: support creating sockets in different namespace,
+ opening it up for JoinsNamespaceOf=. This would require to fork off
+ a tiny process that joins the namespace and creates/binds the socket
+ and passes this back to PID1 via SCM_RIGHTS. This also could be used
+ to allow Chown/chgrp on sockets without requiring NSS in PID 1.
+
* sd-resolve:
- make sure event loop integration works similar to event loop integration in other libs
- maybe drop _free() call, introduce _unref() instead
- implement monitor logic
- see if we can drop more message validation on the sending side
- add API to clone sd_bus_message objects
- - SD_BUS_COMMENT() macro for inclusion in vtables, syntax inspired by gdbus
- systemd-bus-proxyd needs to enforce good old XML policy
- upload minimal kdbus policy into the kernel at boot
- kdbus: matches against source or destination pids for an "strace -p"-like feel. Problem: The PID info needs to be available in userspace too...
- bus proxy: override unique id sender for messages from driver to match the well-known name
- bus driver: GetNameOwner() for "org.freedesktop.DBus" should return "org.freedesktop.DBus"
- update systemd.special(7) to mention that dbus.socket is only about the compatibility socket now
+ - bus proxy should fake seclabel when connecting to kdbus
* sd-event
- allow multiple signal handlers per signal?