~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2015-08-20	import: don't create sparse tar archives	Vincent Batts
	Sparse archives are good for files like utmp/wtmp and journals, but it is still expenseive in having to read the files twice to archive them. Additionally there is a supportability issue as GNU sparse archives are not supported by many archive libraries and tooling.
2015-06-10	tree-wide: whenever we fork off a foreign child process reset signal ↵	Lennart Poettering
	mask/handlers Also, when the child is potentially long-running make sure to set a death signal. Also, ignore the result of the reset operations explicitly by casting them to (void).
2015-05-29	util: split out signal-util.[ch] from util.[ch]	Lennart Poettering
	No functional changes.
2015-03-09	importd: add API for exporting container/VM images	Lennart Poettering
	Also, expose it in machinectl.
2015-03-05	importd: add new bus calls for importing local tar and raw images	Lennart Poettering
	This also adds "machinectl import-raw" and "machinectl import-tar" to wrap these new bus calls. THe commands basically do for local files that "machinectl pull-raw" and friends do for remote files.
2015-03-05	import: rename download code from "import" to "pull"	Lennart Poettering
	That way we can call the code for local container/VM imports "import" without confusion.
2015-03-02	import: add support for gpg2 for verifying imported images	Lennart Poettering
	gpg2 insists on created a trust db even if we tun off all trust db support. Hence create a temporary home where the trust db is placed, and remove it after use.
2015-02-03	util: rework strappenda(), and rename it strjoina()	Lennart Poettering
	After all it is now much more like strjoin() than strappend(). At the same time, add support for NULL sentinels, even if they are normally not necessary.
2015-01-23	import: we need CAP_DAC_OVERRIDE for untarring systems after all	Lennart Poettering

2015-01-22	import: lock tar into its own private network namespace	Lennart Poettering
	That way it cannot get access to the network
2015-01-22	import: drop all capabilities when invoking tar	Lennart Poettering

2015-01-22	import: make the user verficiation keyring override the vendor keyring, ↵	Lennart Poettering
	instead of extending it This way the user has the ability to remove keys from the vendor-supplied keyring if he intends so.
2015-01-22	import: introduce new mini-daemon systemd-importd, and make machinectl a ↵	Lennart Poettering
	client to it The old "systemd-import" binary is now an internal tool. We still use it as asynchronous backend for systemd-importd. Since the import tool might require some IO and CPU resources (due to qcow2 explosion, and decompression), and because we might want to run it with more minimal priviliges we still keep it around as the worker binary to execute as child process of importd. machinectl now has verbs for pulling down images, cancelling them and listing them.