X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=ee682c0f522d9656135b51c3c8e9cca7193c8b8a;hp=fedcf591823f1e55e4294d97ebf8b0c124b555a5;hb=92ff080be100aff15f292e2631921131c610afe7;hpb=2cd3aa24820e5d82375c8cc3e4446d884ee4fee0 diff --git a/TODO b/TODO index fedcf5918..ee682c0f5 100644 --- a/TODO +++ b/TODO @@ -29,31 +29,45 @@ External: * When lz4 gets an API for lz4 command output, make use of it to compress coredumps in a way compatible with /usr/bin/lz4. -Features: +Release 219 preparations: -* Port various tools to make use of verbs.[ch], where applicable +* support mbr raw disk images in systemd-nspawn, so that we can boot + fedora cloud images unmodified (change suffix for search for files + .gpt → .raw). -* Check all invocations of access() and consider turning them into laccess() +* dkr import hash verification + +* rework journald sigbus stuff to use mutex -* "machinectl run" that works like systemd-run, but allocates a pty in the container and attached the service to it +* create importd daemon, move "systemd-import" tool into machinectl -* "machinectl start/enable/disable foo" as aliases for "systemctl start/enable/disable systemd-nspawn@foo.service" +* change default container location from /var/lib/container to /var/lib/machines -* "machinectl snapshot" to make a snapshot of a tree or container into /var/lib/containers +Features: + +* nspawn: don't change superblock mount options from nspawn for cgroup hierarchies -* "machinectl rm" to remove a container tree from /var/lib/containers +* "machinectl list-images" should show os-release data, as well as machine-info data (including deployment level) + +* nspawn: when start a container "foobar" look for its configuration in a file "foobar.nspawn" in /etc/systemd/nspawn/ as well as next to the actualy directory or image to boot + +* Port various tools to make use of verbs.[ch], where applicable + +* Check all invocations of access() and consider turning them into laccess() * "machinectl history" * "machinectl diff" +* "machinectl commit" that takes a writable snapshot of a tree, invokes a shell in it, and marks it read-only after use + * "machinectl status" should show 10 most recent log lines of both the host logs of the unit of the machine, plus the logs generated in the machine -* make "machinectl login" use a new machined call AllocateMachinePty() or so to get a pty in a machine. That would open up logins to unprivileged clients +* add transparent btrfs pool in a loopback file in /var if btrfs operations (such as systemd-import pull-dkr) are used and /var is not a btrfs file system -* add transparent btrfs pool in a loopback file in /var if btrfs operations (such as systemd-import pull-dck) are used and /var is not a btrfs file system +* systemd-nspawn -x should support ephemeral instances of gpt images -* machined: open up certain commands to unprivileged clients via polkit +* move machinectl's mount and copy commands into machined * hostnamectl: show root image uuid @@ -64,12 +78,6 @@ Features: * port libmount hookup to use API's own inotify interface, as soon as that is table in libmount -* bash completion for busctl, to make it truly useful - -* journald: broken file systems are real (btrfs), we need to handle - SIGBUS in some way if we cannot write or read from the disk. - https://bugzilla.redhat.com/show_bug.cgi?id=1151848 - * "systemctl preset-all" should probably order the unit files it operates on lexicographically before starting to work, in order to ensure deterministic behaviour if two unit files conflict (like DMs @@ -81,7 +89,7 @@ Features: * systemd-journal-upload (or a new, related tool): allow pushing out journal messages onto the network in BSD syslog protocol, - continously. Default to some link-local IP mcast group, to make this + continuously. Default to some link-local IP mcast group, to make this useful as a one-stop debugging tool. * synchronize console access with BSD locks: @@ -128,8 +136,6 @@ Features: * systemd --user should issue sd_notify() upon reaching basic.target, not on becoming idle -* configure.ac pretends dbus was optional but actually hardcodes use of dbus' pkg-config file to determine various dbus dirs such as policy and activation dirs - * consider showing the unit names during boot up in the status output, not just the unit descriptions * dhcp: do we allow configuring dhcp routes on interfaces that are not the one we got the dhcp info from? @@ -328,18 +334,10 @@ Features: * sd-bus: - kdbus: process fd=-1 for incoming msgs - make dsrt happy, and change userspace header for kdbus to yyyyuta{tv}v - - kdbus: PID/TID goes missing for method calls from outside the PID namespace? - - kdbus: the kernel should not allow messages to be delivered that have a reply serial != 0, reply-expect unset, but no appropriate window - - kdbus: timestamps on kernel's NameOwnerChanged messages? - - kdbus' busnames.target should get pulled in by basic.target - - Ignore .busname units on classic D-Bus boots, systemd-resolved cannot be started on kdbus - without the active policy and should get a Wants=org.freedesktop.resolve1.busname to - pull-in the policy. - port to sd-resolve for connecting to TCP dbus servers - kdbus: maybe add controlling tty metadata fields - see if we can introduce a new sd_bus_get_owner_machine_id() call to retrieve the machine ID of the machine of the bus itself - when kdbus does not take our message without memfds, try again with memfds - - introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list - see if we can drop more message validation on the sending side - add API to clone sd_bus_message objects - make AddMatch calls on dbus1 transports async? @@ -586,11 +584,7 @@ Features: * currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab is not * nspawn: - - bind mount read-only the cgroup tree higher than nspawn - refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK). - - introduce machines.target to order after all nspawn instances - - systemd-nspawn@.service should fail if some nspawn arg is invalid, with Type=notify - - PID 1 doesn't apply nspawns devices cgroup policy * cryptsetup: - cryptsetup-generator: allow specification of passwords in crypttab itself