Commit Graph

73468 Commits

Author SHA1 Message Date
Daan De Meyer
b1670c52ad mkosi: Switch to fedora 40
Enable updates-testing and use the most recent mirror to make sure
we get util-linux 2.40.1 which contains a crucial fix to make sure
the serial terminal in virtual machines works properly.
2024-05-07 11:51:29 +02:00
Vladimir Stoiakin
ca6cb9c089 cryptsetup: make type-specific checks for PKCS#11 private keys 2024-05-07 11:07:01 +02:00
Luca Boccassi
5dbc2b21dc Merge pull request #32677 from keszybz/wording-fixes
Wording fixes
2024-05-07 11:03:44 +02:00
Adrian Wannenmacher
3a1694803b docs: minor improvements to CREDENTIALS.md
This commit fixes two instances of a miscount. As the number is not important in either case, and seemingly subject to changes, it was removed entirely.

Another sentence was reworded to improve readability.
2024-05-07 11:02:31 +02:00
Luca Boccassi
d78b695217 Merge pull request #32635 from poettering/cryptenroll-no-pcrlock-conflict
cryptenroll: don't try to use pcrlock in combination with signed PCR policy if both are available, because we don't actually support that right now
2024-05-07 09:49:30 +02:00
Zbigniew Jędrzejewski-Szmek
71322b95ad manager: resolve verb/noun mixup in log message
The word is used in "%s requested" so it should be a noun.
2024-05-07 09:42:47 +02:00
Moritz Sanft
34c3d57474 repart: respect SOURCE_DATE_EPOCH on mkdir_p_root
This let's systemd-repart respect the `SOURCE_DATE_EPOCH` environment
variable when creating directories in the local tree through `CopyFiles`
or `MakeDirectories`.

To do this, we pass a timestamp `ts` to `mkdir_p_root`, which it will
use to fix up `mtime` and `atime` of the directory it creates as
well as the `mtime` of the directory it creates the other directory *in*,
as the `mtime` of the latter is modified when creating a directory in it.

For the same reason, it also needs to fixup the `mtime` of the upper
directory when copying a file into it through `CopyFiles`.

If `SOURCE_DATE_EPOCH`, times are left as is. (`UTIME_OMIT`)
2024-05-07 09:29:58 +02:00
Luca Boccassi
4dc1be99d6 Merge pull request #32673 from DaanDeMeyer/mkosi
Various mkosi fixes
2024-05-07 09:25:59 +02:00
Zbigniew Jędrzejewski-Szmek
b36a3f0aea man: reword text and fix tense in description of sd_event_source_set_io_fd
Follow-up for 2fa480592d.
2024-05-07 08:53:58 +02:00
Takashi Sakamoto
9223a4993a hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII
Jörg M. Sigle contriutes configuration ROM image for Tascam IF-FW/DM mkII,
which includes a quirk that the values of model fields in both root and
unit directory entries are different. In device attributes, it appears
that the value of model attribute in unit device is different from the one
in node device.

This commit adds hwdb entry for the model.
2024-05-07 14:13:03 +09:00
Luca Boccassi
72558b03d4 doc: mention that units can be masked via credentials 2024-05-07 08:17:25 +08:00
Daan De Meyer
7681a8ee58 ci: Disable RuntimeBuildSources=
We build with debuginfo, so there's no point to starting virtiofsd
to mount the sources and build directory into the VM, so let's
disable that.
2024-05-06 22:23:37 +02:00
Daan De Meyer
8f59b036de mkosi: Install dhcp-server on OpenSUSE
Required for systemd-networkd-tests.py.
2024-05-06 20:21:32 +02:00
Daan De Meyer
f3548f28b3 meson: Fix formatting 2024-05-06 18:16:24 +02:00
Daan De Meyer
2c5dc1df1d mkosi: Install python3-psutil
Required to run systemd-networkd-tests.py. Already a dependency of
systemd-tests on Fedora so we don't add it there as it'll be pulled
in via the prepare script.
2024-05-06 18:15:54 +02:00
Daan De Meyer
15526060cc mkosi: Install radvd
Required for networkd integration tests.
2024-05-06 18:15:54 +02:00
Lennart Poettering
3f2402171b tpm2-util: tweak JSON condition check
As for the other fields let's check if the actual variable we serialize
is set before serializing it.

This shouldn't make any difference, since the pubkey and the PCR mask
should always be set together or neither, but I think it's easier to
grok this way, and makes the function nicely "dumb": it serializes what
is specified, without trying to be smart by suppressng specified fields.
2024-05-06 16:15:16 +02:00
Lennart Poettering
e6ca81d434 cryptenroll: determine TPM enrollment parmaeters only if we actually do TPM enrollments
Otherwise we'll do work (and possibly generate fatal errors) where we
really shouldn't.
2024-05-06 16:15:14 +02:00
Lennart Poettering
27f42786fe cryptenroll: do not combine pcrlock and signed PCR policies in TPM mode
We currently do not support pcrlock policies and signed PCR policies in
combination. Hence, when we auto-discover both, let's disable signed PCR
policies if pcrlock is available too (simple because that covers more
ground).

Fixes: #32565
2024-05-06 16:15:11 +02:00
Daan De Meyer
3d320785c4 Merge pull request #32664 from DaanDeMeyer/no-build
mkosi: Skip build if NO_BUILD is set
2024-05-06 16:01:24 +02:00
Daan De Meyer
fdf3820e54 mkosi: Configure coredump to store coredumps in the journal.
Makes it easier to debug coredumps that happen in CI as we can retrieve
them via the journal.
2024-05-06 14:44:43 +02:00
Daan De Meyer
71b7156bd3 mkosi: Add missing SPDX line 2024-05-06 14:44:27 +02:00
Daan De Meyer
21e9282bc2 mkosi: Only look for services in /usr and /etc 2024-05-06 14:40:29 +02:00
Daan De Meyer
bda54ae03f mkosi: Skip build if NO_BUILD is set
This allows running the integration tests against the distro's packaged
version of systemd.
2024-05-06 14:40:26 +02:00
Daan De Meyer
453ce77c07 Merge pull request #32606 from DaanDeMeyer/mkosi
mkosi: Enable more integration tests
2024-05-06 13:11:43 +02:00