8118 Commits

Author	SHA1	Message	Date
Yu Watanabe	58cde42f65	core: rename MemoryZswapCurrent -> MemoryZSwapCurrent ... Follow-up for 26caa66867.	2023-11-13 13:54:56 +01:00
Florian Schmaus	26caa66867	cgroup: add support for memory.zswap.current	2023-11-12 21:10:40 +01:00
Mike Yuan	214bed77e8	Merge pull request #29941 from Flowdalic/cgroup-memory-swap-peak ... cgroup: add support for memory.swap.peak and memory.swap.current	2023-11-12 16:21:44 +08:00
Florian Schmaus	37533c9432	cgroup: add support for memory.swap.current ... In systemctl-show we only show current swap if ever swapped or non-zero. This reduces the noise on swapless systems, that would otherwise always show a swap value that never has the chance to become non-zero. It further reduces the noise for services that never swapped.	2023-11-11 12:16:29 +01:00
Florian Schmaus	aac3384e56	cgroup: add support for memory.swap.peak	2023-11-11 12:14:07 +01:00
cvlc12	f712b11df6	Update kernel-install man page, Ukify is the default UKI_GENERATOR ... Ukify is the default generator, and will be used if UKI_GENERATOR is unset. See https://github.com/systemd/systemd/pull/28687	2023-11-11 12:25:37 +09:00
Luca Boccassi	be0916f77c	Merge pull request #29955 from poettering/repart-seal-key ... repart: add --tpm2-seal-key= support, matching the recently added support cryptenroll has	2023-11-10 16:52:00 +00:00
Luca Boccassi	d8beda5023	Merge pull request #29947 from poettering/srk-beefup ... tpm2: make SRK easily accessible for use with systemd-cryptenroll --tpm2-device-key=	2023-11-10 16:47:46 +00:00
Lennart Poettering	342c70da7c	man: update --tpm2-device-key= docs to reference the new ways to get the SRK	2023-11-09 12:49:29 +01:00
Lennart Poettering	d30693f39b	analyze: add "srk" verb to extract current srk from TPM2 chip ... This is pretty low-level functionality, hence placed in systemd-analyze. This is useful for working with systemd-cryptenroll --tpm2-device-key=, as it acquires the SRK without requiring the full tpm2-tss tool set.	2023-11-09 12:48:27 +01:00
Lennart Poettering	fbe7db47f4	tpm2-setup: also save the SRK to the file system in TPM2_PUBLIC format ... We already save it in PEM format, also store it TPM2_PUBLIC format next to it. This is useful for usage with systemd-cryptenroll's --tpm2-device-key= switch.	2023-11-09 12:47:24 +01:00
Lennart Poettering	78fdf0f68b	repart: add --tpm2-device-key= to repart, too ... This adds what was added to systemd-cryptenroll recently to systemd-repart too. Follow-up for: c3a2a681be	2023-11-09 12:27:43 +01:00
Sam Leonard	6b30cad5e9	vmspawn: update man page to include vsock options	2023-11-09 10:36:26 +00:00
Lennart Poettering	b6be6a6721	man: document explicitly tha ReadWritePaths= cannot undo superblock read-only settings ... Fixes: #29266	2023-11-09 09:39:12 +01:00
Michal Sekletar	e5883df89f	man: document nameserver= option	2023-11-08 17:45:35 +00:00
Yu Watanabe	0fd9bea38e	man: fix typo ... Follow-up for a9d54de66d.	2023-11-09 00:09:13 +09:00
Lennart Poettering	d33121d27d	man: document that changing --uid= doesn't work ... Fixes: #28982	2023-11-08 14:28:10 +01:00
Lennart Poettering	28e3359fdc	man: document that Domains=local bind the domain to unicast DNS, not mDNS ... Fixes: #28983	2023-11-08 14:28:10 +01:00
Lennart Poettering	28562194c4	service: say explicitly that people should not use different NonBlocking= settings if they share socket units between multiple service units ... Fixes: #29600	2023-11-08 14:28:10 +01:00
Lennart Poettering	244101876c	man: explicitly document compat guarantees of cryptenroll vs. cryptsetup ... Fixes: #29743	2023-11-08 14:28:10 +01:00
Lennart Poettering	7480859a11	man,doc: document some aspects of user record management/homed a bit better ... Fixes: #29759	2023-11-08 12:40:08 +01:00
Lennart Poettering	3cb938bd12	man: be even clearer that tmpfiles user/group/mode are applied on existing inodes ... I think it was clear already, but let's be even clearer. Fixes: #29774	2023-11-08 12:39:19 +01:00
Lennart Poettering	a9d54de66d	man: update COREDUMP_xyz journal fields docs ... This completes/corrects the documentation for the following fields: COREDUMP_CGROUP= - doc where wrong, actually covered COREDUMP_PROC_CGROUP= COREDUMP_CMDLINE= → undocumented so far COREDUMP_PROC_CGROUP= → docs where there but incorrectly assigned to COREDUMP_CGROUP= COREDUMP_PROC_AUXV= → undocumented so far COREDUMP_SESSION= → undocumented so far Fixes: #29832	2023-11-08 12:38:27 +01:00
Lennart Poettering	2e290d55fd	man: add missing unit file section name to example ... Fixes: #29917	2023-11-08 12:37:26 +01:00
Lennart Poettering	e3c5842732	Merge pull request #28519 from ddstreet/tpm2_external_seal ... Update systemd-cryptenroll to enroll TPM using only public key	2023-11-08 10:28:28 +01:00