summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core/systemd
AgeCommit message (Collapse)Author
2024-05-22systemd-systemctl: Fix WantedBy processingBob Henz
An empty string assignment to WantedBy should clear all prior WantedBy settings. This matches behavior of the current systemd implementation. (From OE-Core rev: 8ede0083c28fadf1e83c9256618190b931edd306) Signed-off-by: Bob Henz <robert_henz@jabil.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c653bfc68b06bfd4fa07ba18322599a130b1c59a) Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-04-17systemd: Fix vlan qos mappingSana Kazi
Drop unnecessary restriction for QoS mapping. Also adds tests for vlan QoS mapping. Link: https://github.com/systemd/systemd/commit/fe830b84d4002582e7aefb16e5e09fd0195f21c8.patch PR: https://github.com/systemd/systemd/pull/27761 Signed-off-by: Sana Kazi <sana.kazi@kpit.com> Signed-off-by: Sana Kazi <sana.kazisk19@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-02-09systemd: Only add myhostname to nsswitch.conf if in PACKAGECONFIGJermain Horsman
Currently myhostname is always added to nsswitch.conf even if it is not included in PACKAGECONFIG. This is based on changes made in OE-core rev: ba3a78c08cb0ce08afde049610d3172b9e3b0695 Cc: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-01-16systemd: fix CVE-2023-7008Hitendra Prajapati
Upstream-Status: Backport from https://github.com/systemd/systemd/commit/3b4cc1437b51fcc0b08da8cc3f5d1175eed25eb1 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-31systemd-systemctl: fix errors in instance name expansionYuta Hayama
If the instance name indicated by %i begins with a number, the meaning of the replacement string "\\1{}".format(instance) is ambiguous. To indicate group number 1 regardless of the instance name, use "\g<1>". Signed-off-by: Yuta Hayama <hayama@lineo.co.jp> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d18b939fb08b37380ce95934da38e6522392621c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-17systemd: Backport nspawn: make sure host root can write to the uidmapped ↵Marek Vasut
mounts we prepare for the container payload Backport fix for systemd nspawn uidmap handling from systemd v253 . Without this, attempt to start mkosi generated debian stable 12 container would ultimately fail (per "$ strace -ff") with: " symlinkat("usr/lib/aarch64-linux-gnu", 8, "lib64") = -1 EOVERFLOW (Value too large for defined data type) " Command to generate test container: " mkosi --distribution debian --release stable --architecture arm64 \ --cache-dir /home/oe/cache/ --format tar --compress-output xz \ --output-dir /home/oe/output/ --checksum 1 --root-password root \ --package systemd --package udev --package dbus " Command to import test container and start it, which triggers the failure: " $ machinectl pull-tar http://192.168.1.300/image.tar.xz default $ machinectl read-only default false $ rm -f /var/lib/machines/default/etc/machine-id $ dbus-uuidgen --ensure=/var/lib/machines/default/etc/machine-id $ machinectl start default " Minimal command to trigger the failure once container is imported: " $ strace -ff systemd-nspawn --keep-unit --boot --link-journal=try-guest --network-veth -U --settings=override --machine=default " Extracted from systemd MR: https://github.com/systemd/systemd/pull/22774 Further explanation by Christian Brauner at second half of: https://github.com/systemd/systemd/issues/20989 Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-06-17systemd-systemctl: support instance expansion in WantedByIan Ray
Refactor _process_deps to expand systemd instance specifier "%i" to the template instance. This change expands on prior commit e510222b57 ("systemd-systemctl: fix instance template WantedBy symlink construction") by substituting every "%i" pattern-match with the instance name. The regexp handles the following cases: * svc-wants@%i.service * sys-subsystem-net-devices-%i.device Signed-off-by: Ian Ray <ian.ray@ge.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 9356276137267a29ae2289d796a2940918375308) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-06-09systemd-networkd: backport fix for rm unmanaged wifiC. Andy Martin
Upstream v250 of systemd-newtorkd contains a race which will drop the config of unmanaged wireless interfaces during reconfigure or carrier loss. This bug is fixed in v251 by this commit: commit a0e99a377a2f22c0ba460d3e7228214008714c14 Author: Yu Watanabe <watanabe.yu+github@gmail.com> Date: Mon Jan 31 19:08:27 2022 +0900 network: remove only managed configs on reconfigure or carrier lost Otherwise, if the carrir of the non-managed interface is lost, the configs such as addresses or routes on the interface will be removed by networkd. A bug was filed upstream on v250 to have upstream backport but was rejected as "version-too-ancient", so backport this commit as a patch to systemd-networkd for kirkstone. Fixes: [YOCTO #15134] Signed-off-by: C. Andy Martin <cam@myfastmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-05-24systemd-systemctl: fix instance template WantedBy symlink constructionMartin Siegumfeldt
Fix issue of the below instance template systemd service dependency [Install] WantedBy=svc-wants@%i.service creating the symlink (instance "a" example) /etc/systemd/system/svc-wants@%i.service.wants/svc-wanted-by@a.service which should be /etc/systemd/system/svc-wants@a.service.wants/svc-wanted-by@a.service as implemented by this change. The functionality appears regressed just after "thud" baseline when the logic was refactored from shell script into python (commit 925e30cb104ece7bfa48b78144e758a46dc9ec3f) (From OE-Core rev: 308397f0bb3d6f3d4e9ec2c6a10823184049c9b5) Signed-off-by: Martin Siegumfeldt <mns@gomspace.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 372b29c8ad270d4d430c26a4e614976c7029afaf) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-03-23systemd: fix wrong nobody-group assignmentPiotr Łobacz
The generated /etc/group file had a wrong group name for nobody-group which was nobody with same id as nogroup groupd. This was leading to duplcate groups, with same ids and different names. More can be read on this link: https://bugzilla.yoctoproject.org/show_bug.cgi?id=11766 Signed-off-by: Piotr Łobacz <p.lobacz@welotec.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d69fccf2e5d108dd7c6059310924588d36a45865) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-03-23systemd: fix CVE-2022-4415Peter Marko
Backport from v250-stable branch (v250.9) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-03-14systemd: add group sgx to udev packagePeter Marko
>From NEWS for v250: * Device nodes for the Software Guard eXtension enclaves (sgx_vepc) are now also owned by the system group "sgx". >From NEWS for v248: * Intel SGX enclave device nodes (which expose a security feature of newer Intel CPUs) will now be owned by a new system group "sgx". Fixes following journal error entry during startup: /lib/udev/rules.d/50-udev-default.rules:43 Unknown group 'sgx', ignoring This is seen already on kirkstone. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bab455cd9b1b82e778f8523a767eb281edf6689e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-01-12systemd: backport another change from v252 to fix build with ↵Martin Jansa
CVE-2022-45873.patch * CVE-2022-45873.patch was backported from systemd/main, but it doesn't build without another change from v252 when elfutils PACKAGECONFIG is enabled. * fixes: | ../git/src/shared/elf-util.c: In function 'parse_elf_object': | ../git/src/shared/elf-util.c:792:27: error: void value not ignored as it ought to be | 792 | r = json_variant_dump(package_metadata, JSON_FORMAT_FLUSH, json_out, NULL); | | ^ Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-01-12systemd: CVE-2022-45873 deadlock in systemd-coredump via a crash with a long ↵Hitendra Prajapati
backtrace Upstream-Status: Backport from https://github.com/systemd/systemd/commit/076b807be472630692c5348c60d0c2b7b28ad437 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-11-25systemd: add group render to udev packagePeter Marko
From NEWS for v236: * The "uaccess" udev tag has been dropped from /dev/kvm and /dev/dri/renderD*. These devices now have the 0666 permissions by default (but this may be changed at build-time). /dev/dri/renderD* will now be owned by the "render" group along with /dev/kfd. Without the group systemd-udevd startup logs: /lib/udev/rules.d/50-udev-default.rules:39 Unknown group 'render', ignoring /lib/udev/rules.d/50-udev-default.rules:40 Unknown group 'render', ignoring Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 84efd72d48616405dbe4d73ec95917077144ed09) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-11-17systemd: Consider PACKAGECONFIG in RRECOMMENDSNiko Mauno
Since RRECOMMENDS declaration implictly induces building the recipes that provide the runtime recommended packages, conditionalize adding such values according to associated PACKAGECONFIG settings in order to avoid redundant building. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit a1989add927f7805378fe4d5afbde780b747ba77) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-11-17systemd: CVE-2022-3821 Fix buffer overrunHitendra Prajapati
Upstream-Status: Backport from https://github.com/systemd/systemd-stable/commit/72d4c15a946d20143cd4c6783c802124bc894dc7 Affects "systemd <= 251" Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-09-13systemd: Add 'no-dns-fallback' PACKAGECONFIG optionniko.mauno@vaisala.com
systemd defines a default set of fallback DNS servers in https://github.com/systemd/systemd/blob/v251/meson_options.txt#L328-L330 By adding a PACKAGECONFIG knob providing a convenient way to opt out, and then adding that value to systemd's PACKAGECONFIG, the output from runtime 'resolvectl status' command no longer contains the following line: Fallback DNS Servers: 1.1.1.1#cloudflare-dns.com 8.8.8.8#dns.google 1.0.0.1#cloudflare-dns.com 8.8.4.4#dns.google 2606:4700:4700::1111#cloudflare-dns.com 2001:4860:4860::8888#dns.google 2606:4700:4700::1001#cloudflare-dns.com 2001:4860:4860::8844#dns.google (From OE-Core rev: 2b300d6b9ec6288a99d9dacb24a86949caf99e55) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-09-13systemd: Fix unwritable /var/lock when no sysvinit handlingniko.mauno@vaisala.com
Commit 8089cefed8e83c0348037768c292058f1bcbbbe5 ("systemd: Add PACKAGECONFIG for sysvinit") decoupled enabling of systemd's sysvinit handling behavior behind a distinct PACKAGECONFIG feature. This new option affects among other things the installing of tmpfiles.d/legacy.conf, which is responsible for creating /run/lock directory, which is pointed to by /var/lock symlink provided by base-files package. In case the option is not enabled, then base-files provided /var/lock is a dangling symlink on resulting rootfs, causing problems with certain Linux userspace components that rely on existence of writable /var/lock directory. As an example: # fw_printenv Error opening lock file /var/lock/fw_printenv.lock Since Filesystem Hierarchy Standard Version 3.0 states in https://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch05s09.html that Lock files should be stored within the /var/lock directory structure. Ensure the /run/lock directory is always created, so that lock files can be stored under /var/lock also when 'sysvinit' handling is disabled. (From OE-Core rev: 85e5ee2c35cf5778c3aefda45f526e8f6a511131) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-07-28systemd: Added base_bindir into pkg_postinst:udev-hwdb.leimaohui
Otherwise in sdk environment, the base_bindir is empty and the path of UDEVADM="${base_bindir}/udevadm" is not correct. Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 235b6fccd2a9ce4eb9bfb3be8ac271cff0ea5fea) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-20systemd: systemd-systemctl: Support instance conf files during enableNick Potenski
Add ability to parse instance-specific conf files when enabling an instance of a templated unit during postinstall. Signed-off-by: Nick Potenski <nick.potenski@garmin.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit baa0ecf3271008cf60cd830c54a71f191aebb81c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-16systemd: update 0008-add-missing-FTW_-macros-for-musl.patchPavel Zhukov
Fixes fuzz warning with insane class ihnerited introduced in 4c3f51142b Kirkstone specific, master has been updated to 251.2 and FTBFS with musl [Yocto 14838] Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-09systemd: Correct 0001-pass-correct-parameters-to-getdents64.patchJiaqing Zhao
Current patch removes the uint8_t* cast in src/basic/recurse-dir.c:57 to fix musl build, but it changes the value here as pointer arithmetic is type-depended in C. This patch corrects the behavior by adding an extra cast to struct dirent*. Also changes the patch's Upstream-Status to Inappropriate as it's musl- specific. Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e9e43d7f7488c4da8598759c4882cceeda9d2095) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Correct path returned in sd_path_lookup()Jiaqing Zhao
In oe-core, sysusers.d/sysctl.d/binfmt.d/modules-load.d are still kept under /usr/lib instead of /lib changed in systemd v246. This patch corrects the SD_PATH_{SYSUSERS,SYSCTL,BINFMT,MODULES_LOAD} returned in sd_path_lookup() back to the /usr/lib ones. Also updates the patch description and upstream status. Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 8d913ab6db3ae4b2786a64a086d519a40dcb8c4d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Drop 0002-don-t-use-glibc-specific-qsort_r.patchJiaqing Zhao
musl 1.2.3 implements qsort_r function. Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 0c2bbf66c7a00268457ac10fed4bef3714da8651) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Remove __compare_fn_t type in musl-specific patchJiaqing Zhao
Since systemd v250, commit d8f16737005e ("sort-util: avoid using glibc's internal __compar_d_fn_t type"), __compare_fn_t type is no longer used. This patch removes that type in the musl-specific patch. Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 89c8a3f96dfeb444213fd6c523e1495c49065ccc) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Drop 0001-test-parse-argument-Include-signal.h.patchJiaqing Zhao
This patch has already been upstreamed in commit systemd/850f0008bff7 ("test-parse-argument: Include signal.h") since v249 stable release. Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> (cherry picked from commit 25d8defc806ed760d371423a7ef99bd872462d1e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Update patch statusKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2cdfc505ce4e00ae9b4abd962c60c9fec6c3db6c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Drop 0016-Hide-__start_BUS_ERROR_MAP-and-__stop_BUS_ERROR_MAP.patchKhem Raj
This patch was effectively needed when usng gold linker but it has been fixed in binutils [1], it was seen in systemd as well [2] This however, should not happen with latest binutils and systemd has already reverted the fix since it was a tool error [1] https://sourceware.org/bugzilla/show_bug.cgi?id=18548 [2] https://github.com/systemd/systemd/issues/234 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e57707e820f548b3ad940ee6de9e45b4de869565) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Document future actions needed for set of musl patchesKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 433d51c3840d03623509ce8e3a1b3679f8771164) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-06-02systemd: Drop redundant musl patchesKhem Raj
These patches are no longer needed in version 250, they have been dragged along rebasing over releases unnessarily. Lets remove them Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 216fe2b8e53640ae5794e9426de56cd87637dde4) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-05-16systemd: Fix build regression with latest updateKhem Raj
This happens when ptest is enabled with clang compiler Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a1f51bae8e4717da2375b9a476c368554a795487) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-05-16systemd: upgrade 250.4 -> 250.5Alexander Kanavin
Latest stable branch update Drop 0029-network-enable-KeepConfiguration-when-running-on-net.patch as patch merged upstream. Changes: 4a31fa2fb0 (tag: v250.5) hwdb: run "update-hwdb-autosuspend" e92e2d0e3b hwdb: run "update-hwdb" e1e4395775 hwdb: make sure "ninja update-hwdb" works on f35 1fe496fc3b hwdb: fix parser to work with newer pyparsing 32e7c65372 manager: prohibit clone3() in seccomp filters 45335a3eed nspawn: fix --ephemeral with --machine 79b86adcbd nspawn: fix locating config files with --ephemeral c202d402d9 resolve: fix typo in dns_class_is_pseudo() 9f689fda54 sd-ipv4acd: actually drop the arp packet from one of the host interface e3d57bc301 sd-event: make inotify event work after the process is forked a5fc32fa34 sd-event: do not kill a child process from another child c36ab05b4f sd-event: do not update signal fd after PID is changed e006b56c18 sd-event: set pid to event source after all setup processes finished d2e3b5a841 sd-event: rebreak comments 6673131917 core: fix dm-verity auto-discovery in MountImageUnit() 10ee46a2ca analyze: Fix verify exit status regression df6253cbda hwdb: fix parsing options 9727b9ee7b core: command argument can be longer than PATH_MAX 12f05b856c network: ignore all errors in loading .network files b5dfdf0301 analyze: fix offline check for syscal filter 8ed1490de6 analyze: fix offline check for 'native' syscall architecture 72d0c6b171 missing-syscall: define MOVE_MOUNT_T_EMPTY_PATH if missing bba396d78c journal-remote: refuse to specify --trust option when gnutls is disabled 8d4c0d2383 calendarspec: fix possibly skips next elapse d9ea8dab6d copy: use FLAGS_SET() in copy_xattr() 077ca08b38 journal: preserve acls when rotating user journals with NOCOW attribute set 25b3c48ec5 macro: account for negative values in DECIMAL_STR_WIDTH() 8f2f6a94d8 network: enable KeepConfiguration= when running on network filesystem 61649fbada stat-util: introduce path_is_network_fs() 3f6e62eccb network-generator: rename DHCP_TYPE_DHCP -> DHCP_TYPE_DHCP4 a7585a3a38 hwdb: Add AV production access to Elgado Stream Deck devices 18c0096ec2 Add AV production controllers to hwdb and add uaccess 2298094b2c packit: drop bfq patch 7cda67d4f4 packit: build on and use Fedora 36 spec file 056bae9f1b Packit: build SRPMs in Copr 6253eb576c journal-file: if we are going down, don't use event loop to schedule post c901bc8680 journald: make sure SIGTERM handling doesn't get starved out ed46ff2bd6 random-seed: hash together old seed and new seed before writing out file 6d3e2f0188 resolved: Allow test-resolved-stream to run concurrently 781b2b2e66 resolved: Read as much as possible per stream EPOLLIN event 03692af607 resolved: Avoid multiple SSL writes per DoT packet 3227f542a7 resolved: Make event flags logic robust for DoT 9c710c66c3 resolve: llmnr: fix never hit condition d65808ef7e resolve: mention that dns_stream_update() needs to be called after dns_stream_take_read_packet() b2f82f643a resolve: call dns_stream_take_read_packet() in on_stream_io() fe4c208c98 resolve: make dns_stream_new() take on_packet and complete callbacks f447648ae4 resolved: Test for DnsStream (plain TCP DNS and DoT) 88b4e8f74e resolved: Fix DoT timeout on multiple answer records d5b871bdfe test: increase image size c3aead5568 random-util: unify RANDOM_ALLOW_INSECURE and !RANDOM_BLOCK and simplify Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e07ba76fc78b44f338e574644a8ae3b6cddc9f08) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-04-28update_udev_hwdb: fix multilib issue with systemdKai Kang
It duplicates udevadm in systemd recipe to make it could run update_udev_hwdb with multilib enabled. Since systemd last update, it deploys a shared library libsystemd-shared-250.so in /lib/systemd/. The library will be overwritten when multilib enabled. Then if both udev-hwdb and lib32-udev-hwdb are installed, it fails to run the multilib version postinstall intercept update_udev_hwdb: | /path/to/build/tmp-glibc/work/intel_x86_64-wrs-linux/wrlinux-image-small/1.0-r1/rootfs/usr/libexec/lib32-udevadm: error while loading shared libraries: libsystemd-shared-250.so: wrong ELF class: ELFCLASS64 `udevadm hwdb --update` just concatenates .hwdb files in dirs /etc/udev/hwdb.d and /lib/udev/hwdb.d. The output file hwdb.bin is identical with the one created by lib32-udevadm. So do NOT duplicate lib32-udevadm in systemd and eudev. And update intercept script update_udev_hwdb that re-run udevadm with same arch qemuwrapper if run ${binprefix}qemuwrapper failed. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3dba872a42c2be7d0865a30118984ab013850292) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-04-28systemd-boot: remove outdated EFI_LD commentMartin Jansa
* efi-ld meson option was changed in systemd 250: https://github.com/systemd/systemd/commit/fe330f02dfebbaa462e0f4590de1049e47da54b9 the value was changed with the systemd upgrade in: https://git.openembedded.org/openembedded-core/commit/?id=e22188e47d2fce2406d9db9c95289b3878eda69f but the comment originally from: https://git.openembedded.org/openembedded-core/commit/?id=603e50f3db224a0e36a65decb9a98df41b9e22b3 no longer makes any sense, remove it Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c14dbe3d3c1abf5f95310162288f861bfd312900) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2022-03-17systemd: Update 250.3 -> 250.4Richard Neill
The following security and bug-fix patches are included as part of the 250.4 update: c6603da3ad boot: Properly check status code of console_key_read 2198c08d07 core: really skip automatic restart when a JOB_STOP job is pending 367041af81 pid1: set SYSTEMD_NSS_DYNAMIC_BYPASS=1 env var for dbus-daemon 160eeab224 virt: Fix Xen Dom0 detection logic to no longer report as VM 514a4c051c network: bridge: fix endian of vlan protocol 4dbc210124 resolve: fix possible memleak d82bd80cf4 resolve: fix potential memleak and use-after-free dcba78244e util: another set of CVE-2021-4034 assert()s 74dfb51f70 sd-dhcp6-client: fix sending prefix delegation request during rebind df59c65a23 mkdir: allow to create directory whose path contains symlink ae95ca27be sd-dhcp-lease: fix memleak 2b04d3b3fc sd-dhcp-lease: fix reading unaligned memory 1ef56ad928 network: xfrm: refuse zero interface ID 7dc0f80588 sd-dhcp-lease: fix a memory leak in dhcp_lease_parse_search_domains 426807c54b sd-dhcp-lease: fix an infinite loop found by the fuzzer 0456e3aaaa oomd: fix race with path unavailability when killing cgroups As the following two patches: 0001-mkdir-allow-to-create-directory-whose-path-contains-.patch 0001-src-fundamental-list-fundamental_source_paths-using-.patch have been merged in 250.4 or replaced, remove them. Signed-off-by: Richard Neill <richard.neill@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-27systemd: move systemd shared library into its own packageStefan Herbrechtsmeier
Move the systemd shared library (libsystemd-shared.so) into its own package to prevent a runtime dependency from udev package to systemd package and thereby to a second init manager. Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-21systemd: fix DeprecationWarning about regexpsMartin Jansa
* fixes: oe-core/meta/classes/package.bbclass:1342: DeprecationWarning: invalid escape sequence \. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-20meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX ↵Richard Purdie
license identifiers An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-07systemd: enable KeepConfiguration= when running on network filesystemPavel Zhukov
This fix boot from NFS for systemd enabled systems. Previously systemd-networkd dropped network configuration on exit from initrd even if there're NFS mount. [YOCTO #14708] Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-07systemd: Minimize udev package size if DISTRO_FEATURES doen't contain sysvinitStefan Herbrechtsmeier
Link udev shared with systemd helper to minimize the udev package size if DISTRO_FEATURES doesn't configure sysvinit to be used. It is only usefull to link udev static with systemd helper if udev should be installed without systemd such as a mixed sysvinit and systemd environment [RP: Fixed to use sysvinit distro feature instead of systemd] Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-07systemd: Add link-udev-shared PACKAGECONFIGStefan Herbrechtsmeier
Add a PACKAGECONFIG to link systemd-udev and its helpers to libsystemd-shared.so. If enabled the udev package depends on the systemd package. Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-05systemd: allow to create directory whose path contains symlinkPavel Zhukov
Systemd version 250 has a regression which blocks mountd service from creating subdirectories if path contains symlink. This blocks bind mounts under /var/run, /lib for example. Bug-Url: https://github.com/systemd/systemd/issues/22334 Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-26systemd: Forward port musl patchesKhem Raj
Redo the header include patch and add fixes for new code. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-20systemd: update 250.1 -> 250.3Alexander Kanavin
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-14systemd: Avoid a Python deprecation warningPeter Kjellerstedt
This avoids the following warning: WARNING: .../meta/recipes-core/systemd/systemd_250.1.bb: Var <do_install>:1: DeprecationWarning: invalid escape sequence \$ seen when doing `devtool finish --force-patch-refresh systemd meta`. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-11systemd-boot: restore reproducibilityAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-11systemd: update 249.7 -> 250.1Alexander Kanavin
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-12-16systemd: Fix systemd-journal-gateway user/groupsFlorian Amstutz
The systemd-journal-gateway user and group are never added to an image since the package name added to USERADD_PACKES is wrong. Signed-off-by: Florian Amstutz <florian.amstutz@scs.ch> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-11-25systemd: update 249.6 -> 249.7Alexander Kanavin
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>