Commit Graph

335 Commits

Author SHA1 Message Date
Florian Klink
f61a3bf8e8 systemd: nixpkgs-fmt
This was recently introduced, and apparently not nixpkgs-fmt'ed.

While there's no global consensus on nixpkgs-fmt'ing everything,
indenting this by 2 more spaces won't hurt.
2021-02-03 18:56:07 +01:00
Florian Klink
49cb525712 systemd: 247.2 -> 247.3 2021-02-03 18:56:06 +01:00
Jonathan Ringer
9bb3fccb5b treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix
continuation of #109595

pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.

python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
2021-01-19 01:16:25 -08:00
Ben Siraphob
16d91ee628 pkgs/os-specific: stdenv.lib -> lib 2021-01-17 23:26:08 +07:00
Andreas Rammhold
494ed4d6ee
systemd: patch runtime dlopen calls
This ensures that all the features that are implemented via dlopen(3)
are available (or explicitly deactivated) by pointing dlopen to the
absolute store path instead of relying on the linkers runtime lookup
code.

All of the dlopen calls have to be handled. When new ones are introduced
by upstream (or one of our patches) those must be explicitly declared,
otherwise the build will fail.

As of systemd version 247 we've seen a few errors like `libpcre2.… not
found` when using e.g. --grep with journalctl. Those errors should
become less unexpected now.

There are generally two classes of dlopen calls. Those that we want to
support and those that should be deactivated / unsupported. This change
enforces that we handle all dlopen calls explicitly. Meaning: There is
not a single dlopen call in the code source tree that we did not
explicitly handle.

In order to do this I introduced a list of attributes that maps from
shared object name to the package that contains them. The package can be
null meaning the reference should be nuked and the shared object will
never be loadable during runtime (because it points at an invalid store
path location).
2021-01-03 11:50:01 +01:00
Florian Klink
91b8237b48 systemd: 247.1 -> 247.2
Contains the following fixes:

 - 937118a5b2 journalctl: don't skip the entries that have the same seqnum
 - e017ac6a26 sd-bus: use SOCK_CLOEXEC on one more socket
 - db31432861 resolved: create stub-resolv.conf symlink with correct security label
 - f2ec15e2e5 efi: Only use arm flags if supported
 - cd43eee770 core: detect_container() may return negative errno
 - 04be042a1f meson: Fix reallocarray check
 - 5e906f483b network: do not assume address ready callback is always set to static addresses
 - 2ad7a2a96a network: drop assertions to check link state in netlink callback handlers
 - f375c8cbb5 network: do not reconfigure interface when the link gains carrier but udev not initialized it yet
 - 5d4909decf veritysetup: also place udev socket dep
 - 57ddb74245 cryptsetup: Fix crypto device missing issue after bootup
 - d3c224d441 network: fix SIGABRT related to unreachable route with DHCP6
 - c91648cc83 network: revert previous changes to address_compare_func()
 - d8b5d8c8c3 udev: Fix sound.target dependency
 - 669107ae68 meson: specify correct libqrencode version in meson dep
 - c07dc6cedc udev: link_update() should fail if the entry in symlink dir couldn't have been created
 - 367006c806 man: document that automount units are privileged
 - 5129808141 logind: fix closing of button input devices
 - 37f06c91ef Update logind-button.c
 - 9e9fda0a2d async: add trivial cleanup wrapper for asynchronous_close()
 - 4a2ca1ca4a Silence cgroups v1 read-only filesystem warning
 - ed1f8f4ba2 manager: Fix HW watchdog when systemd starts before driver loaded
 - 383a747164 cgroup: Also set blkio.bfq.weight
 - 48d41091ac nss-resolve: varlink_call() set error_id only when r >= 0
 - 56daba2deb missing: Define several syscall numbers for Alpha arch
 - f2a4b96276 Don't assume /run/systemd exists when creating unit-root
 - 553530fdc7 mkosi: Add findutils to Fedora config
 - e42990dfe3 mkosi: Add rpm to Fedora BuildPackages as it's needed by pkg-config
 - 6bacd1d971 mkosi: Replace iptables-dev with libiptc-dev in debian config
 - f1fc515c21 dissect: don't declare unused variables on archs that have no GPT discovery
 - 30d0c3f58c resolved: synthesize NODATA instead of NXDOMAIN if gateway exists, but of other protocol
 - 538ebbd7f3 local-addresses: make returning accumulated list optional
 - 228a22bb63 resolved: improve log message when we use TCP a bit
 - aa31dd9128 network: ignore broadcast address for /31 or /32 addresses
 - 85607cc094 network: fix verification for broadcast address
 - dc6ad6482a network: do not set broadcast if prefixlen is 31 or 32
 - 39ee319c75 stub: don't ever respond to datagrams coming in on non-localhost addreses, on the stub
 - cbea0e5a83 resolved: never allow _gateway lookups to go to the network
 - c4df66816b resolved: lower SERVFAIL cache timeout from 30s to 10s
 - b5e39c20d9 dns-domain: try IDN2003 rules if IDN2008 doesn't work
 - 2c354cedd2 virt: Properly detect nested UML inside another hypervisor
 - 10f2cfb715 resolved: properly check per-link NTA list
 - a8437c07e4 meson: use '_' as separator in fuzz test names
 - 81ef7623c8 man: mention that --key= is about *secret* keys
 - 4ef70ecefc meson: check that cxx variable is set before using it
2020-12-17 07:29:04 +01:00
Charlotte Van Petegem
9b1aa17909
systemd: 247 -> 247.1 2020-12-13 16:35:01 +01:00
Jörg Thalheim
97b412d4a6 systemd: fix pc files
upstream decided to make this non-configurable... Lets' revert to the
version before.
2020-12-11 08:37:42 +01:00
Jörg Thalheim
ef050bc3d1 systemd: 246.6 -> 247-rc2 2020-12-02 23:40:04 +01:00
Frederik Rietdijk
b2a3891e12 Merge master into staging-next 2020-11-27 15:09:19 +01:00
Florian Klink
b92942f466 systemd: use withPortabled in mesonFlags
No matter what withPortabled was being set, we always passed
-Dportabled=false in mesonFlags. Fix this.

Also, nixpkgs-fmt the file for consistency.
2020-11-25 00:22:37 +01:00
Graham Christensen
bc49a0815a
utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
Florian Klink
d22b3ed4bc systemd: switch to unified cgroup hierarchy by default
See https://www.redhat.com/sysadmin/fedora-31-control-group-v2 for
details on why this is desirable, and how it impacts containers.

Users that need to keep using the old cgroup hierarchy can re-enable it
by setting `systemd.unifiedCgroupHierarchy` to `false`.

Well-known candidates not supporting that hierarchy, like docker and
hidepid=… will disable it automatically.

Fixes #73800
2020-11-19 16:56:46 +01:00
Finn Behrens
7787fd2413 systemd: Add an option for homed
This is disabled by default to indicate that is hasn't been adiquately
tested with NixOS yet.
2020-11-03 17:35:26 -05:00
Antoine Eiche
859a44ebc0 systemd: set withRemote true by default
This also adds the libmicrohttpd as a `buildInput` when `withRemote`
is true.
2020-11-02 09:07:52 +01:00
Florian Klink
6dbc23e75d systemd: stop substituting inside fsck.c, stop substituting mke2fs
fsck.c doesn't refer to any of these binaries anymore, and the whole
systmed codebase not to /sbin/mke2fs.
2020-10-28 23:24:18 +01:00
Florian Klink
959cea2e80 systemd: add withPCRE2 option 2020-10-28 23:24:18 +01:00
Florian Klink
93dcbbf69d systemd: add withApparmor option 2020-10-28 23:24:18 +01:00
Florian Klink
065f057d0c systemd: add libgpgerror only to buildInputs if we build with resolved support 2020-10-28 23:24:18 +01:00
Florian Klink
e6dff1d666 systemd: drop libffi from buildInputs
This isn't used anywhere.
2020-10-28 23:24:18 +01:00
Florian Klink
e10a9a8506 systemd: add withMachined flag 2020-10-28 23:24:18 +01:00
Florian Klink
8526662a33 systemd: add withNss flag 2020-10-28 23:24:18 +01:00
Florian Klink
a079a6f026 systemd: add withUserDb flag 2020-10-28 23:24:18 +01:00
Florian Klink
e77326208e systemd: add withDocumentation flag 2020-10-28 23:24:18 +01:00
Florian Klink
f142493a6a systemd: add withShellCompletions flag 2020-10-28 23:24:18 +01:00
Florian Klink
1f9347431c systemd: add withPolkit option 2020-10-28 23:24:18 +01:00
Florian Klink
0b762c02ee systemd: disable efi if we don't build with withEfi is set to false 2020-10-28 23:24:17 +01:00
Florian Klink
54c35f0940 systemd: withEfi: move gnu-efi check into assertion 2020-10-28 23:24:17 +01:00
Florian Klink
13a910e3f6 systemd: make gcrypt optional 2020-10-28 23:24:17 +01:00
Florian Klink
585f4a140b systemd: add withAnalyze flag 2020-10-28 23:24:17 +01:00
Florian Klink
987906aa58 systemd: add withCoredump flag
… and default it to false for systemdMinimal
2020-10-28 23:24:17 +01:00
Florian Klink
c6aada2835 systemd: drop duplicate -Dlocaled=…
This is already configurable above.
2020-10-28 23:24:17 +01:00
Florian Klink
ff07c6b47d systemd: introduce withCompression flag
This will build systemd without some compression utils, useful for
systemdMinimal.
2020-10-28 23:24:17 +01:00
Florian Klink
5f257d7d2c systemd: cleanup cryptsetup input
use lib.getDev to retrieve the dev output. Don't pass it to buildInputs
if we don't build with withCryptsetup set to true.
2020-10-28 23:24:17 +01:00
Florian Klink
e1e01fa85e systemd: add withRemote option (default to false), make curl optional
This makes curl optional if both remote and importd are disabled, and
makes some assertions more robust by switching from curl.dev != null to
lib.getDev curl != null.
2020-10-28 23:24:17 +01:00
Florian Klink
39e733336c systemd: build without iptables when networkd is disabled
upstreams TODO mentions iptables-dev (libiptc) is also used for nspawn,
but it seems like it only makes use of this via networkd anyways (or
does these days) - at least systemdMinimal compiles successfully without
iptables in the build closure.
2020-10-28 23:24:17 +01:00
Florian Klink
8434da5715 systemd: remove perl from nativeBuildInputs
This was only used to patch a circular output reference from lib to out
on aarch64, but was removed in b68bddfbda,

This commit forgot to remove perl, so remove it now.
2020-10-28 23:24:17 +01:00
Florian Klink
6456e24d57 systemd: nixpkgs-fmt 2020-10-28 23:24:16 +01:00
Florian Klink
229184f6b5 systemd: reorder buildInputs
These are all unconditianally anyways.
2020-10-28 23:24:16 +01:00
Florian Klink
c6bbc945b4 systemd: stdenv.lib -> lib
This is a no-op and makes things a bit smaller.
2020-10-28 23:24:16 +01:00
Andreas Rammhold
5d03fe6ac4
Merge pull request #101792 from flokli/systemdminimal-without-glib
systemdMinimal: build without glib
2020-10-27 20:00:18 +01:00
Florian Klink
5f8a741abf systemdMinimal: build without glib
This takes glib (and by this, gtk-doc) out of systemdMinimal's build
closure.
2020-10-26 21:58:49 +01:00
Florian Klink
00c68337f5 systemd: fix 0019-*.patch
This was introduced in https://github.com/NixOS/nixpkgs/pull/99621, but
didn't follow the process documented in
pkgs/os-specific/linux/systemd/default.nix, namely, the `git am` and
`git format-patch` workflow, which caused
`0019-revert-get-rid-of-seat_can_multi_session.patch` to not apply with
`git am` due to missing authorship information.

I did apply this patch manually, and copied authorship information from
4e384ddc11.
2020-10-26 21:30:42 +01:00
Vladimír Čunát
336bc8283b
Re-Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2"
This reverts commit c778945806.

I believe this is exactly what brings the staging branch into
the right shape after the last merge from master (through staging-next);
otherwise part of staging changes would be lost
(due to being already reachable from master but reverted).
2020-10-26 08:19:17 +01:00
Vladimír Čunát
c778945806
Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2"
I'm sorry; I didn't notice it contained staging commits.

This reverts commit 17f5305b6c, reversing
changes made to a8a018ddc0.
2020-10-25 09:41:51 +01:00
Finn Behrens
2e52fca7c8
systemd: create options for smaller derivation
Co-Authored-By: Kirill Elagin <kirelagin@gmail.com>
2020-10-10 11:55:50 +02:00
Thomas Tuegel
b8318e2e5a
Merge pull request #99621 from ttuegel/staging--plasma-switch-user
systemd: show CanMultiSession again
2020-10-05 09:49:36 -05:00
Thomas Tuegel
4e384ddc11
systemd: show CanMultiSession again 2020-10-05 07:40:29 -05:00
Florian Klink
249b6f6b83 systemd: 246.5 -> 246.6 2020-09-27 16:45:27 +02:00
Andreas Rammhold
1f424f11ea systemd: 246.4 -> 246.5
Update to latest stable version. Changes:

d0f0f048ec sd-path: use ROOTPREFIX without suffixed slash
e662cf6d51 hashmap: make sure to initialize shared hash key atomically
da310c6b45 socket: downgrade log warnings about inability to set socket buffer sizes
ab6fcd9135 core: fix securebits setting
4f6925484d capability-util: add new function for raising setpcap
771436884d network: do not add prefix to RA if radv is not configured
fb2afc5f30 man: document the random delay of persistent timers
b2006ddc8f test-network: add test for ENOBUFS issue #17012
8758580ef5 backlight: do not claim that ID_BACKLIGHT_CLAMP= property is not set
57fc184a6c fs-util,tmpfiles: fix error handling of fchmod_opath()
db0f031e70 bootctl: don't accidentally propagate errors in "bootctl status"
3e2c806681 ethtool-util: don't pass error value that isn't used to log_syntax
b671730edb network: don't fail on various config parse errors
0ad86030c5 man: document that sd_bus_message_close_container() may only be called at end of container
f3da018017 cryptsetup: Fix null pointer dereference (#16987)
6f65eaf9c2 core: fix set keep caps for ambient capabilities
08338a234e core: fix comments on ambient capabilities
f0e6d9876d network: make log_link_error() or friends return void
35766dc61b core: make log_unit_error() or friends return void
3ed10b2ee8 core/slice: explicitly specify return value
2f6406914b udev: do not discard const qualifier
07671aa4cc sd-device: make log_device_error() or friends return void
d4bea73972 udev: explicitly specify return value
7db399be1e udev: return negative errno for invalid EVDEV_ABS_XXX= property
8c8d188e85 udev: make log_rule_error() or friends return void
4921375fd3 socket: fix copy/paste error
0f7fd97749 udev: warn if failed to set buffer size for device monitor
fc763d38d8 network: increase receive buffer size for device monitor
3bf7797f1f network: do not start device monitor if /sys is read-only
ebc0729c6a network: honor the buffer size specified in networkd.socket
ef3d2e178b core/socket: use fd_set_{rcv,snd}buf()
5dd4cc4b10 sd-device-monitor: use fd_set_rcvbuf()
fe9b92e566 util: introduce fd_set_{snd,rcv}buf()
4dcae66688 util: try to set with SO_{RCV,SND}BUFFORCE when requested size is larger than the kernel limit
4b6b523946 util: refuse to set too large value for socket buffer size
b4be8edb45 network: ignore error on increasing netlink receive buffer size
5ce47fb491 tree-wide: if get_block_device() returns zero devno, check for it in all cases
8ea6ec18e7 btrfs: if BTRFS_IOC_DEV_INFO returns /dev/root generate a friendly error message
e1ff4947d2 basic/log: make log_{info,warning,...} return void
8019995e9a tree-wide: correct cases where return log_{error,warning} is used without value
932f4c3e8b test-execute/exec-dynamicuser-statedir.service: fix quoting
16b9426f70 man: fix quickhelp listing in sysusers.d(5)
bde903d9e9 network: fix NDisc handling for the case when multiple routers exist
c965063b64 network: expose route_{hash,compare}_func()
6d24a40669 network: expose address_{hash,compare}_func()
054838a2e0 util: expose in6_addr_{hash,compare}_func()
58bd4a70de network: fixes gateway assignment through DHCPv4
8ad5382fe3 bash-completion: resolvectl: support 'log-level' command
a98bd75072 resolvectl: add 'log-level' to help message
78262fe807 core/socket: we may get ENOTCONN from socket_instantiate_service()
fecb3f00c4 homed: remember the secret even when the for_state is FIXATING_FOR_ACQUIRE
2020-09-27 16:45:27 +02:00