Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3338 commits
Select commit Hold shift + click to select a range
9c57f70
repart: Sort the partition list by partition offset
jonas2515 May 29, 2026
7efb51b
repart: expand specifiers in MakeSymlinks= target
kwohlfahrt Jun 22, 2026
9028d3a
Add NEWS entry
kwohlfahrt Jun 22, 2026
7a4436e
core: create abstraction/more properties for the "Exec" part of Unit…
poettering Jun 22, 2026
6caa501
ssl-util: support OpenSSL 4
bluca Jun 20, 2026
7be9032
ssl-util: prefer OpenSSL 4
bluca Jun 20, 2026
93e9c2c
shared/tpm2: support chunked reads of NV indexes
chrisccoulson Jun 2, 2026
d5d3fbc
repart: make vfat creation reproducible (#42446)
poettering Jun 22, 2026
6b158b7
tree-wide: Beef up openssl logging
daandemeyer Jun 3, 2026
a8e5746
log: add log_struct_once macro
bluca Jun 22, 2026
8ff1bdf
journal: add catalog message for missing dlopen dep
bluca Jun 22, 2026
34f71b8
ssl-util: add cleanup helper for SSL_CTX
bluca Jun 21, 2026
c8c83bd
resolved: load libcrypto/libssl lazily on first use and make them opt…
bluca Jun 21, 2026
5e39866
resolve: fix transaction leak in dns_transaction_new() error path
lionheartyu Jun 22, 2026
f38a534
ssl-util: support OpenSSL 4 (#42676)
bluca Jun 22, 2026
4545910
report-basic, networkd: add Version, KernelTimestamp, Address metrics…
bluca Jun 22, 2026
f8a1943
btrfs-util,rm-rf: clean up subvolumes without user_subvol_rm_allowed
bluca Jun 20, 2026
7d3b32d
core: add method to enqueue multiple jobs in a single call
bluca Aug 29, 2024
fe83c5b
sha256: add sha256_direct_hex() helper
poettering Jun 19, 2026
90d285a
recurse-dir: optionally, only enumerate dentries of a specific type
poettering Jun 18, 2026
dbd35fd
string-util: introduce STRING_FILENAME_PART flag for string_is_safe()
poettering Jun 16, 2026
180893f
sysupdate: split out component validation/enumeration into sysupdate-…
poettering Jun 16, 2026
39ff563
sysupdate: some smaller clean-ups
poettering Jun 17, 2026
d82e256
sysupdate: introduce "installdb" that keeps track of installed resources
poettering Jun 17, 2026
7201ca4
sysupdate: port to new help-util.[ch] apis
poettering Jun 18, 2026
5efc3f5
ci: add test-case for new cleanup logic
poettering Jun 18, 2026
ee7c048
systemctl: add --kernel-cmdline-reuse option
bluca Jun 20, 2026
01c0aa8
Expand specifiers in `MakeSymlinks=` target in `repart.d` (#42694)
bluca Jun 22, 2026
6e0c73b
resolved: load libcrypto/libssl lazily on first use and make them opt…
bluca Jun 22, 2026
4dc1e31
machine-tags: extend syntax to support key/value pairs (#42618)
bluca Jun 22, 2026
710d5ae
sysupdate: keep database of installed files/patterns, and use to GC t…
poettering Jun 22, 2026
0c61866
manager: make systemd+executor a multicall binary
keszybz May 21, 2026
de2ec84
veritysetup: don't measure root hash signature after unsigned fallback
katexochen Jun 17, 2026
47cbfc8
po: Translated using Weblate (Korean)
simmon-nplob Jun 22, 2026
413cbc9
po: Translated using Weblate (Romanian)
Jun 22, 2026
4729d45
Translations update from Fedora Weblate (#42699)
bluca Jun 22, 2026
5201719
shared: add configfs-tsm attestation report helper
katexochen Jun 19, 2026
f381853
report: add systemd-report-sign-tsm backend
katexochen Jun 19, 2026
983f861
Add handling for '-1' when parsing vsock CID (#42654)
gpotter2 Jun 22, 2026
7020bd3
oci-util: fix and harden oci_registry_is_valid()
lionheartyu Jun 22, 2026
d90ae91
imds: fix logging
poettering Jun 1, 2026
55db8dc
imds: expose instance metadata as an io.systemd.Metrics provider
poettering May 30, 2026
2d0f4ff
imds: use help-util.h helpers for --help output
poettering May 31, 2026
33bb855
repart: Sort the partition list by partition offset (#42488)
poettering Jun 22, 2026
294458f
homed: fix min_free tracking in manager_rebalance_calculate()
lionheartyu Jun 22, 2026
8b25e0f
systemctl: use new EnqueueUnitJobMany() when available
bluca May 19, 2026
e2e0d61
portablectl: use new EnqueueUnitJobMany() when available
bluca May 19, 2026
7034441
test: add coverage for multi-unit transactions
bluca May 19, 2026
32a162d
core: add method to enqueue multiple jobs in a single call (#42182)
bluca Jun 22, 2026
7e045f9
report: add systemd-report-sign-tsm backend (#42683)
poettering Jun 22, 2026
78a5271
imds: expose imds info fields also as metrics (#42409)
poettering Jun 22, 2026
662e02a
tpm2-util: refuse NvPCR extend when the NV index is gone
katexochen Jun 17, 2026
e514dad
pcrextend: refuse empty measurement over Varlink
katexochen Jun 17, 2026
d76ce20
confidential-virt: treat an unreadable SEV MSR as confidential
katexochen Jun 17, 2026
fb1bdb9
confidential-virt: read the TDX CPUID leaf unconditionally
katexochen Jun 18, 2026
7c433f3
boot: read the TDX CPUID leaf unconditionally
katexochen Jun 23, 2026
6b395fd
metrics: add METRIC_FAMILY_TYPE_OBJECT type
mvo5 Jun 22, 2026
f053364
shared: add OUTPUT_SKIP_UNPRINTABLE to log-show
mvo5 Jun 22, 2026
b436be5
journal: expose last 10 high priority logs as metrics
mvo5 Jun 16, 2026
6981edb
TODO: remove "10 most recent emergency message as metrics" todo
mvo5 Jun 23, 2026
9d26739
confidential-virt: fix comment regarding vmm.c location
katexochen Jun 23, 2026
6e39099
growfs: downgrade dependency on libcryptsetup to optional
bluca Jun 22, 2026
70d2064
various measurement-related fixes (#42698)
poettering Jun 23, 2026
7a71341
core: fix assertion when inactive unit pulled in by try-restart and s…
bluca Jun 23, 2026
c58fdad
journal: expose last 10 high priority logs as metrics (#42621)
poettering Jun 23, 2026
a7aa25b
tpm2-setup: call DLOPEN_TPM2 to add dependency and fail immediately i…
bluca Jun 22, 2026
1e8d527
confidential-virt: fixes to detection and reporting (#42697)
poettering Jun 23, 2026
e1bdd51
xattr-util: use empty_to_null() where appropriate
poettering Jun 2, 2026
f304250
socket-util: add new helper socket_xattr_supported()
poettering Jun 3, 2026
96a37e3
sd-varlink: mark varlink sockets and entrypoint inodes as varlink via…
poettering Jun 2, 2026
ce97f9f
varlinkctl: port to new help-util.[ch] apis
poettering Jun 2, 2026
cc17477
core: add socket xattr settings for socket unit
poettering Jun 2, 2026
ce72c94
bpf-restrict-fsaccess: move STAT_DEV_TO_KERNEL into generic code
poettering Jun 2, 2026
daae289
sd-netlink: beef up sock-diag code a bit
poettering Jun 2, 2026
52e6c18
varlinkctl: add 'list-sockets' verb
poettering Jun 2, 2026
53fc4c4
units: tag all .varlink sockets with the right xattrs
poettering Jun 3, 2026
941a9ff
tree-wide: relax access mode of private Varlink sockets a bit
poettering Jun 3, 2026
627655b
man: document sd_varlink_server_listen_address() and friends
poettering Jun 3, 2026
b0688a6
update TODO
poettering Jun 3, 2026
926bf65
test: skip fdstore tests if test-fdstore is not available
mrc0mmand Jun 23, 2026
9797d8f
sd-varlink: mark varlink sockets via xattrs (#42454)
poettering Jun 24, 2026
2e44ad8
core: derive restrict-fsaccess initramfs_s_dev offset from skeleton
Jun 23, 2026
55fb3fc
core: pin restrict-fsaccess initramfs_s_dev store width to skeleton f…
Jun 24, 2026
1dcd296
test-execute: use per-Exec timeout instead of per-service timeout
bluca Jun 23, 2026
5bd7cc7
sysupdate: automatically clean up orphaned files after auto-update
poettering Jun 23, 2026
72984e3
po: Translated using Weblate (Romanian)
RePierre Jun 24, 2026
bb025e3
sysupdate: automatically clean up orphaned files after auto-update (#…
poettering Jun 24, 2026
8168aca
units: tag more units correctly with varlink xattrs
poettering Jun 24, 2026
9e7b8b7
core: import trusted initrd credentials
katexochen Jun 3, 2026
62fde7b
shared: add userspace cpio writer for credentials
katexochen May 23, 2026
76b62b0
vmspawn: deliver credentials via initrd cpio under SEV-SNP
katexochen May 23, 2026
236bade
man: document SEV-SNP credential delivery via initrd cpio
katexochen May 23, 2026
95a372a
vpick: take separate root_fd and dir_fd arguments
poettering May 28, 2026
d36bdc9
sysupdate: notify hook subscribers after a successful update
poettering May 28, 2026
27b7fb9
pcrlock: recompute PCR policy on completed system update
poettering May 28, 2026
1421e6c
bootctl: add link-auto/LinkAuto and auto-link on completed system update
poettering May 28, 2026
9422832
sysext: refresh sysexts and confexts on completed system update
poettering May 28, 2026
be1643b
systemd-boot-update: condition on UEFI
poettering May 29, 2026
89dd065
test: verify sysupdate invokes the notification callout directory
poettering May 28, 2026
9ac1b6c
test: verify bootctl link-auto and io.systemd.BootControl.LinkAuto
poettering May 28, 2026
01f3f2a
TODO: drop bootctl link + sysupdate integration item
poettering May 28, 2026
f66144c
string-util: check for short input in previous_ansi_sequence()
bluca Jun 24, 2026
b48228a
hwdb: map Brazilian ThinkPad T14 Gen 1 slash key to KEY_RO
LucasTavaresA Jun 24, 2026
84f6da6
sysupdate: do a varlink callout to a ready when completing an update,…
poettering Jun 24, 2026
218ac81
resolved: avoid dangling hashmap entry on RegisterService failure
bluca Jun 24, 2026
a6e2bfe
resolved: fix potential use-after-free when freeing DNS extra stub li…
bluca Jun 24, 2026
1f9d56a
hostname-setup: avoid O(N^2) string building in wildcard substitution
bluca Jun 24, 2026
2e79d39
dhcp-message-dump: guard against negative option type before indexing
bluca Jun 24, 2026
6ebf344
core: actually sort the parsed LUO session list
bluca Jun 24, 2026
45033e3
sd-future: drop redundant branch in test reader fiber
bluca Jun 24, 2026
1b1900a
test: add TEST-92-TPM2-SWTPM for the software TPM fallback
katexochen Jun 23, 2026
df2baac
tpm2: stop the software TPM before the ESP is unmounted on shutdown
katexochen Jun 23, 2026
2f1c3b8
units: harden systemd-tpm2-swtpm.service
katexochen Jun 17, 2026
a9e8f89
sd-journal: fix memzero size in data hash table setup
lionheartyu Jun 25, 2026
da02521
sysupdate: propagate transfer_instance_vacuum() errors
lionheartyu Jun 25, 2026
32165a1
network: roll back ipv6ll_address on link_ipv6ll_gained() failure
lionheartyu Jun 25, 2026
cd346b8
Assorted coverity fixes (#42738)
poettering Jun 25, 2026
3daf3e1
core: fix fd leak in exec_shared_runtime_deserialize_one
lionheartyu Jun 25, 2026
bc4dfc2
basic: add assert() when doing pointer deref
mvo5 Jun 23, 2026
68b59ca
systemctl: fix continue placement in clean-or-freeze error handling
lionheartyu Jun 25, 2026
a762c92
sd-lldp-rx: keep object ref around event callbacks
bluca Jun 24, 2026
f986294
dhcp6: reject IA_PD_PREFIX with invalid prefix length
bluca Jun 24, 2026
a0343da
core: derive restrict-fsaccess initramfs_s_dev offset from skeleton (…
keszybz Jun 25, 2026
d30e87e
uid-range: fix out-of-bounds write in uid_range_partition()
bluca Jun 24, 2026
89f1f76
unit-name: use FLAGS_SET() more
mrc0mmand Jun 17, 2026
15bee24
journald: bound field length in extra-fields reader
jmestwa-coder Jun 24, 2026
087b0eb
units: harden systemd-report-sign-plain@.service
katexochen Jun 24, 2026
5ce1786
polkit: check if user authenticated as admin
bluca Sep 19, 2025
6815a48
machined: allow privileged users to register other users machines
bluca Sep 19, 2025
364bc15
machined: allow privileged users to register other users machines (#3…
bluca Jun 25, 2026
77f7c7e
po: Translated using Weblate (Romanian)
RePierre Jun 25, 2026
11160d9
po: Translated using Weblate (Romanian)
Jun 25, 2026
a0a5787
po: Translated using Weblate (Spanish)
cyphra Jun 25, 2026
14b1a92
unit-name: introduce "strict" mode for unit name mangling
mrc0mmand Jun 17, 2026
e4000c0
Translations update from Fedora Weblate (#42749)
bluca Jun 25, 2026
47b6a20
fileio: add write_string_filef_at()
katexochen Jun 25, 2026
abf9616
tpm2: write swtpm config files atomically via the state directory fd
katexochen Jun 24, 2026
e3ebdb8
tpm2: re-manufacture software TPM when state dir is incomplete
katexochen Jun 23, 2026
3498b84
Couple of hardening changes for utils flagged by kres (#42732)
keszybz Jun 25, 2026
b14acfd
Fix: core fixes (#42744)
keszybz Jun 25, 2026
80c92c8
shared/tpm2-util: use a define instead of a const static variable
keszybz Jun 25, 2026
39863e2
homectl: retry DeactivateHome on transient busy errors
bluca May 8, 2026
45f561b
mkosi: update mkosi ref to f7762b71437227922a367bb89597843c77494ef9
bluca Jun 25, 2026
f889170
journal-gatewayd: fix signed overflow in n_skip handling
bluca Jun 24, 2026
94d4918
journal-remote: fix hostname double-free on request_meta() error paths
bluca Jun 24, 2026
7662ced
journal: Recover filtered journal queries after crash truncated writes
cdown Jun 17, 2026
90acfb3
journal: Tolerate lost tail hash chain nodes
cdown Jun 18, 2026
b9d0960
test-journal: Test recovery with header more recent than data
cdown Jun 17, 2026
1041959
test-journal: Test bisecting reads when missing per-data entry array
cdown Jun 17, 2026
f6a6fc0
test-journal: Test hash chain lookups when the tail is lost
cdown Jun 18, 2026
16e96b0
tpm2: add SWTPM fallback test, fixes and hardening (#42722)
poettering Jun 25, 2026
b2fcb12
networkd/resolved hardening fixes flagged by kres (#42736)
poettering Jun 25, 2026
f301d07
homed: fix home_unlocking_finish reporting success as failure
lionheartyu Jun 25, 2026
f9ac5e3
Fix: network sysupdate (#42745)
poettering Jun 25, 2026
4162b65
unit-name: introduce "strict" mode for unit name mangling (#42638)
poettering Jun 25, 2026
a38b4c3
analyze: don't treat user-scope services as running as root in `secur…
Jun 25, 2026
27556c0
journal: Prevent total log loss on unclean shutdown at high write rat…
yuwata Jun 25, 2026
dc5c099
nss-resolve: fix blank array checks and improve NSS status codes
lionheartyu Jun 16, 2026
46ece03
vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)
poettering Jun 25, 2026
2da8cd0
journald-remote/gateway hardening fixes flagged by kres (#42733)
poettering Jun 25, 2026
d2a7043
pcrlock: reject device path node shorter than its header
jmestwa-coder Jun 25, 2026
3754ceb
tmpfiles: do not fail when trying to apply ACL during mkosi build
bluca Jun 22, 2026
313986f
hwbd: correctly map Bluetooth Key on MSI Modern 15 H AI C1MG laptop
Fede2782 Jun 26, 2026
e61a070
man: fix first argument in Environment= expansion example
wyu71 Jun 26, 2026
23bfc4b
sysupdate: Fix an early return path return value
pwithnall Jun 24, 2026
7f3c271
sysupdate: Factor context creation out of installdb_cleanup_component()
pwithnall Jun 23, 2026
49cf024
sysupdate: Factor process_image() into context_make_{offline,online}()
pwithnall May 29, 2026
ed088f8
sysupdate: Change Context to be stack allocated
pwithnall May 29, 2026
97db6fb
shared: Add a image_policy_copy() helper method
pwithnall May 29, 2026
f91ac1a
sysupdate: Move global arg_* variables into Context
pwithnall May 29, 2026
6ff8027
sysupdate: Minor fix to a cleanup function on an error path
pwithnall Jun 2, 2026
06a6111
sysupdate: Factor out core of `components` verb
pwithnall Jun 2, 2026
28b9b57
sysupdate: Factor some Target handling code out of sysupdated
pwithnall Jun 4, 2026
0b3eeb1
sd-json: Fix validation of optional fields within a mandatory struct
pwithnall Jun 4, 2026
d0fbca0
test: Factor out check-new calls in sysupdate integration tests
pwithnall Jun 1, 2026
2d201a1
sysupdate: Add basic varlink interface scaffolding
pwithnall May 29, 2026
7757ec3
sysupdate: Add varlink CheckNew() method
pwithnall May 29, 2026
dffff8b
test: Test error handling for non-existent targets in sysupdate
pwithnall Jun 18, 2026
e261b55
sysupdate: Fix some clang-tidy lint warnings for argument names
pwithnall Jun 26, 2026
c5f08a2
json-util: generalize json_dispatch_address_family
enr0n Jun 19, 2026
3f73f1e
json-util: introduce json_dispatch_in_addr_data
enr0n Jun 23, 2026
cc6bc69
resolve: add query string field to io.systemd.Resolve.DNSError
enr0n Jun 19, 2026
1a787e5
mkosi: add postmarketos support
yuwata Sep 14, 2025
0627dcc
ci/mkosi: add postmarketos job
yuwata Sep 28, 2025
71c6c88
hwdb: add touchpad toggle mapping for MSI Katana GF66 12UD
dirhamtriyadi Jun 26, 2026
4952662
sysupdate: Add a stub varlink interface and implement CheckNew (#42422)
poettering Jun 26, 2026
0cc0b50
mkosi: add postmarketOS (#39823)
yuwata Jun 26, 2026
35d6116
resolvectl: use varlink instead of dbus for ResolveHostname
enr0n Jun 19, 2026
5ff17fb
resolvectl: use varlink instead of dbus for ResolveAddress
enr0n Jun 19, 2026
cfac7ec
resolvectl: use varlink instead of dbus for ResolveRecord
enr0n Jun 19, 2026
3ecf3ab
test: relax grep for DNS query refusal
enr0n Jun 19, 2026
4e1943a
nss-resolve: use resolve-varlink-util.h helpers
enr0n Jun 19, 2026
fa6fe46
resolvectl: use varlink instead of dbus for ResolveService
enr0n Jun 19, 2026
2358f40
sysupdate: Address review feedback on CheckNew varlink scaffolding
poettering Jun 26, 2026
d983d23
resolvectl: use more varlink (#41840)
yuwata Jun 27, 2026
ee6522d
journal-importer: avoid false maybe-uninitialized warning
yuwata Jun 23, 2026
82ff3f7
iovec-util: introduce several helper functions
yuwata Jun 23, 2026
fff2c0b
journalctl: use iovec for fsprg state and friends
yuwata Jun 23, 2026
20e0244
sd-journal: use iovec for fsprg state and friends
yuwata Jun 23, 2026
c286c0d
journal: use recognizable error code
yuwata Jun 25, 2026
cb317e9
mkosi: update debian commit reference to 0b390d268323a49191a9a3bcc07a…
bluca Jun 27, 2026
0b57cfd
mkosi: pull new split-out packages for deb/ubuntu
bluca Jun 27, 2026
79acf88
journal-authenticate: refuse invalid start and interval parameters
yuwata Jun 27, 2026
4826f76
journal-verify: coding style fixlets
yuwata Jun 25, 2026
1828327
journalctl-misc: several cleanups
yuwata Jun 25, 2026
a97de75
journal: use FSS_HEADER_SIGNATURE at one more place
yuwata Jun 25, 2026
0609bb1
journal: drop journal_file_tag_seqnum() and embed into journal_file_a…
yuwata Jun 25, 2026
e7f81e4
journal: several cleanups for journal sealing feature (#42770)
yuwata Jun 27, 2026
91631d8
mkosi: update debian commit ref and install new split-out packages (#…
bluca Jun 27, 2026
130eca9
journal-authenticate: move functions
yuwata Jun 25, 2026
ede9ff4
journal-authenticate: move one more function
yuwata Jun 25, 2026
2647d82
journal-authenticate: move several more functions
yuwata Jun 25, 2026
7061e6f
journal-authenticate: merge several functions into journal_file_maybe…
yuwata Jun 25, 2026
0a12d5a
journal-authenticate: check overflow
yuwata Jun 25, 2026
254cc90
journal-authenticate: several trivial cleanups
yuwata Jun 25, 2026
4b97dc5
journal-authenticate: initialize hmac when necessary
yuwata Jun 26, 2026
9177635
sd-journal: introduce JournalAuthContext
yuwata Jun 25, 2026
14236c0
journal-authenticate: save mmaped size rather than file size field in…
yuwata Jun 27, 2026
24c4729
sd-journal: drop libgcrypt dependency from libsystemd
yuwata Jun 25, 2026
2e077b5
sd-journal: allow to read sealed journal files when sealing is not su…
yuwata Jun 27, 2026
a09feb7
sd-journal: allow to verify sealed journals even when sealing support…
yuwata Jun 27, 2026
e8d21b7
test-journal-verify: replace HAVE_GCRYPT ifdef with journal_auth_supp…
yuwata Jun 27, 2026
d956568
test-fsprg: add unit test for FSPRG
yuwata Jun 19, 2026
73568eb
crypto-util: sort symbols
yuwata Jun 25, 2026
2b2ca3d
crypto-util: load several more functions from libcrypto.so
yuwata Jun 25, 2026
7fae5c5
fsprg-openssl: rewrite fsprg with OpenSSL
yuwata Jun 19, 2026
005e94d
journal: replace gcrypt with openssl
yuwata Jun 22, 2026
6461c1b
tree-wide: drop gcrypt dependency from all binaries except for unit t…
yuwata Jun 22, 2026
ca5100d
gcrypt-util: drop several unused definitions
yuwata Jun 23, 2026
77ee077
shared: add a generic prompt_loop_yes_no() helper
poettering May 28, 2026
846b0ef
mute-console: allow NULL being passed
poettering Jun 16, 2026
39d08de
cryptenroll: collect all enrollment parameters in an EnrollContext
poettering May 28, 2026
fd3fb3a
cryptenroll: add an "unlock_password" field to ExecContext
poettering Jun 24, 2026
0df41e9
cryptenroll: expose enrollment as an io.systemd.CryptEnroll Varlink s…
poettering May 28, 2026
2bbcf6c
cryptenroll: move load_volume_key_keyfile() to cryptenroll-password.c
poettering May 29, 2026
5f2d4fb
cryptenroll: add --unlock-empty to unlock via an empty password
poettering May 29, 2026
e298331
cryptenroll: add --unlock-headless as a new pseudo-unlock mechanism
poettering May 29, 2026
0089a46
cryptenroll: add interactive --firstboot enrollment wizard
poettering May 28, 2026
47dc8ab
cryptenroll: refuse reading a key longer than 4 MiB
poettering Jun 22, 2026
2d69104
test: cover the io.systemd.CryptEnroll Varlink interface
poettering May 28, 2026
65079c0
shell-completion: catch up with cryptenroll command line
poettering Jun 24, 2026
2868b61
update TODO
poettering May 29, 2026
dc416f5
journal: replace libgcrypt with openssl (#42695)
yuwata Jun 27, 2026
7804fd1
vmspawn: complain loudly if we can't prepare a unix socket for virtiofsd
mrc0mmand Jun 27, 2026
5a03efc
Correct allocation size computation in xescape_full
joukewitteveen Jun 21, 2026
c99674a
numa: add support for preferred-many and weighted-interleave policies
lionheartyu Jun 22, 2026
313e2a3
run: make custom slice imply XDG_SESSION_CLASS=none
rpigott Jun 17, 2026
339dcb2
cryptenroll: add interactive mode and Varlink IPC API (#42380)
poettering Jun 28, 2026
8b8d819
Revert "mkosi: Grow the root partition on boot"
yuwata Jun 28, 2026
52beda7
clonesetup: add support to clone devices via /etc/clonetab
src-up Dec 10, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
20 changes: 19 additions & 1 deletion .clang-tidy
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@ Checks: '
bugprone-suspicious-string-compare,
bugprone-swapped-arguments,
bugprone-tautological-type-limits,
bugprone-unsafe-functions,
bugprone-unused-return-value,
misc-header-include-cycle,
misc-include-cleaner,
Expand All @@ -37,7 +38,6 @@ CheckOptions:
# of them related to musl).
misc-include-cleaner.IgnoreHeaders: '
endian\.h;
getopt\.h;
sys/stat\.h;
sys/statvfs\.h;
sys/syscall\.h;
Expand All @@ -50,8 +50,26 @@ CheckOptions:
varlink-io\.systemd\..*;
varlink-idl-common\.h;
unistd\.h
'
bugprone-unsafe-functions.ReportDefaultFunctions: false
bugprone-unsafe-functions.CustomFunctions: '
^fgets$,read_line(),is potentially dangerous;
^strtok$,extract_first_word(),is potentially dangerous;
^strsep$,extract_first_word(),is potentially dangerous;
^dup$,fcntl() with F_DUPFD_CLOEXEC,is potentially dangerous;
^htonl$,htobe32(),is confusing;
^htons$,htobe16(),is confusing;
^ntohl$,be32toh(),is confusing;
^ntohs$,be16toh(),is confusing;
^strerror$,STRERROR() or printf %m,is not thread-safe;
^accept$,accept4(),is not O_CLOEXEC-safe;
^dirname$,path_extract_directory(),is icky;
^basename$,path_extract_filename(),is icky;
^setmntent$,libmount_parse_fstab(),libmount parser should be used instead;
^getmntent$,mnt_table_next_fs(),libmount parser should be used instead
'
misc-header-include-cycle.IgnoredFilesList: 'glib-2.0'
RemovedArgs: ['-fwide-exec-charset=UCS2', '-maccumulate-outgoing-args']
WarningsAsErrors: '*'
ExcludeHeaderFilterRegex: 'blkid\.h|gmessages\.h|gstring\.h'
HeaderFileExtensions:
Expand Down
12 changes: 12 additions & 0 deletions .clangd
Original file line number Diff line number Diff line change
@@ -1,4 +1,16 @@
# SPDX-License-Identifier: LGPL-2.1-or-later

# Strip GCC-only flags from compile_commands.json before clang sees them.
# clangd reports these as driver-level "unknown argument" errors which can't
# be silenced via Diagnostics.Suppress, so they must be removed instead.
# -fwide-exec-charset: used by EFI boot code to make L"..." literals UTF-16
# -maccumulate-outgoing-args: GCC x86 codegen flag, no clang equivalent
CompileFlags:
Remove: [-fwide-exec-charset=*, -maccumulate-outgoing-args]

Diagnostics:
UnusedIncludes: Strict
# __no_reorder__ is a GCC-only attribute (see _no_reorder_ in
# src/fundamental/macro.h). Meson detects it during configure
# with GCC and enables it unconditionally, so clangd flags every use.
Suppress: [unknown-attributes]
8 changes: 8 additions & 0 deletions .dir-locals.el
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,14 @@
(meson-mode . ((meson-indent-basic . 8)))
(sh-mode . ((sh-indentation . 4)))
(awk-mode . ((c-basic-offset . 8)))
(python-mode . ((indent-tabs-mode . nil)
(tab-width . 4)
(fill-column . 109)
(python-indent-def-block-scale . 1)))
(python-ts-mode . ((indent-tabs-mode . nil)
(tab-width . 4)
(fill-column . 109)
(python-indent-def-block-scale . 1)))
(nil . ((indent-tabs-mode . nil)
(tab-width . 8)
(fill-column . 79))) )
1 change: 1 addition & 0 deletions .gitattributes
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
*.[ch] whitespace=tab-in-indent,trailing-space
src/include/uapi/**/*.[ch] whitespace=trailing-space
*.gpg binary generated
*.bmp binary
*.base64 generated
Expand Down
3 changes: 2 additions & 1 deletion .github/ISSUE_TEMPLATE/bug_report.yml
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,7 @@ body:
- 'homectl'
- 'hostnamectl'
- 'hardware database files'
- 'importctl'
- 'journalctl'
- 'kernel-install'
- 'loginctl'
Expand Down Expand Up @@ -112,7 +113,7 @@ body:
- 'systemd-homed'
- 'systemd-hostnamed'
- 'systemd-hwdb'
- 'systemd-import'
- 'systemd-importd'
- 'systemd-journal-gatewayd'
- 'systemd-journal-remote'
- 'systemd-journal-upload'
Expand Down
3 changes: 2 additions & 1 deletion .github/ISSUE_TEMPLATE/feature_request.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ body:
- 'homectl'
- 'hostnamectl'
- 'hardware database files'
- 'importctl'
- 'journalctl'
- 'kernel-install'
- 'loginctl'
Expand Down Expand Up @@ -51,7 +52,7 @@ body:
- 'systemd-homed'
- 'systemd-hostnamed'
- 'systemd-hwdb'
- 'systemd-import'
- 'systemd-importd'
- 'systemd-journal-gatewayd'
- 'systemd-journal-remote'
- 'systemd-journal-upload'
Expand Down
2 changes: 1 addition & 1 deletion .github/advanced-issue-labeler.yml
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ policy:
keys: ['systemd-hwdb', 'hardware database files']

- name: import
keys: ['systemd-import']
keys: ['systemd-importd', 'importctl']

- name: journal
keys: ['systemd-journald', 'journalctl']
Expand Down
12 changes: 0 additions & 12 deletions .github/codeql-config.yml

This file was deleted.

44 changes: 0 additions & 44 deletions .github/codeql-custom.qls

This file was deleted.

68 changes: 0 additions & 68 deletions .github/codeql-queries/PotentiallyDangerousFunction.ql

This file was deleted.

110 changes: 0 additions & 110 deletions .github/codeql-queries/UninitializedVariableWithCleanup.ql

This file was deleted.

11 changes: 0 additions & 11 deletions .github/codeql-queries/qlpack.yml

This file was deleted.

Loading
Loading