Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-12-29 | Revert "machined: don't force terminate registered machines" | Lennart Poettering | |
This reverts commit 206e7a5f7b55ac61188efd895e65ab26e478cbb2. We actually want to allow shutting down containers that use RegisterMachine() rather than CreateMachine() to register their own unit. It should be safe to do so, since the primary usecase for RegisterMachine() are container managers that run only a single container within their own unit, such as systemd-nspawn. | |||
2014-12-29 | machined: ignore spurious error | Lennart Poettering | |
2014-12-29 | machinectl: add "enable" and "disable" verbs for enabling/disabling ↵ | Lennart Poettering | |
systemd-nspawn for containers This is basically just a shortcut for "systemctl enable systemd-nspawn@<foobar>.service", but does escaping. | |||
2014-12-29 | machinectl: add new "start" verb to start a container as a service in nspawn | Lennart Poettering | |
2014-12-28 | machined: Fix MarkReadOnly method's name on bus | Sylvain Plantefève | |
2014-12-28 | machined: don't look for images on each property get, but cache the image ↵ | Lennart Poettering | |
object inbetween | |||
2014-12-28 | machined: add support for reporting image size via btrfs quota | Lennart Poettering | |
2014-12-28 | machinectl/machined: implement "rename", "clone", "read-only" verbs for ↵ | Lennart Poettering | |
machine images | |||
2014-12-28 | machined: add "machinectl remove" for removing images | Lennart Poettering | |
2014-12-28 | machined: Move image discovery logic into src/shared, so that we can make ↵ | Lennart Poettering | |
use of it from nspawn | |||
2014-12-26 | machinectl: add status commands | Lennart Poettering | |
2014-12-26 | machined: fix search patch magic for '.host' image | Lennart Poettering | |
2014-12-26 | machined: make image read-only check indepenednt on own privs | Lennart Poettering | |
2014-12-26 | machinectl: mark read-only images when listing in red | Lennart Poettering | |
2014-12-26 | machined: when discovering images, implicitly add ".host" as pseudo image ↵ | Lennart Poettering | |
referring to the host's own directory tree | |||
2014-12-26 | machined: fix image search path iteration | Lennart Poettering | |
2014-12-26 | machined: let's also check machine directories in /usr and /usr/local | Lennart Poettering | |
2014-12-26 | machinectl: left-align times | Lennart Poettering | |
2014-12-26 | machined: be more thorough when checking whether an image is writable or not | Lennart Poettering | |
2014-12-25 | machined: remove spurious include of <sys/capability.h> | Filipe Brandenburger | |
They do not use any functions from libcap directly. The CAP_KILL constant in use by these files comes from <linux/capability.h> imported through "missing.h". Tested that "systemd-machined" builds cleanly and works after this change. | |||
2014-12-25 | machined: beef up machined image listing with creation/modification times of ↵ | Lennart Poettering | |
subvolumes We make use of the btrfs subvol crtime for this, and for gpt images of a manually managed xattr, if we can. | |||
2014-12-24 | machined: fix writability check for GPT images | Lennart Poettering | |
2014-12-24 | sd-bus: rename sd_bus_open_system_container() to sd_bus_open_system_machine() | Lennart Poettering | |
Pretty much everywhere else we use the generic term "machine" when referring to containers in API, so let's do though in sd-bus too. In particular, since the concept of a "container" exists in sd-bus too, but as part of the marshalling system. | |||
2014-12-23 | machined: introduce polkit for OpenLogin() call | Lennart Poettering | |
This way "machinectl login" can be opened up to run without privileges. | |||
2014-12-23 | machinectl: rework 'machinectl login' to use OpenMachineLogin() | Lennart Poettering | |
2014-12-23 | machined: add new call OpenMachineLogin() that starts a getty in a container ↵ | Lennart Poettering | |
on a pty and returns the pty master fd to the client This is a one-stop solution for "machinectl login", and should simplify getting logins in containers. | |||
2014-12-23 | systemd-run: support -t mode when combined with -M | Lennart Poettering | |
For that, ask machined for a container PTY and use that. | |||
2014-12-23 | machined: add OpenMachinePTY() bus call for allocating a PTY device within a ↵ | Lennart Poettering | |
container Then, port "machinectl" over to make use of it. | |||
2014-12-23 | machinectl,nspawn: don't print extra final newline if pty terminal output ↵ | Lennart Poettering | |
was newline-terinated anyway | |||
2014-12-23 | run: add a new "-t" mode for invoking a binary on an allocated TTY | Lennart Poettering | |
2014-12-19 | machined: add a full bus object for images | Lennart Poettering | |
2014-12-19 | machined: add new GetImage() bus call for retrieving the bus path for an image | Lennart Poettering | |
2014-12-19 | machinectl: port machinectl to new verbs logic | Lennart Poettering | |
2014-12-19 | machined/machinectl: add logic to show list of available images | Lennart Poettering | |
This adds a new bus call to machined that enumerates /var/lib/container and returns all trees stored in it, distuingishing three types: - GPT disk images, which are files suffixed with ".gpt" - directory trees - btrfs subvolumes | |||
2014-12-18 | machinectl: add new commands for copying files from/to containers | Lennart Poettering | |
2014-12-18 | machinectl: implement "bind" command to create additional bind mounts from ↵ | Lennart Poettering | |
host to container during runtime | |||
2014-12-12 | copy: use btrfs reflinking only whe we know we copy full files | Lennart Poettering | |
2014-12-10 | sd-bus: move common errors src/shared/bus-errors.h → ↵ | Lennart Poettering | |
src/libsystemd/sd-bus/bus-common-errors.h Stuff in src/shared/ should not use stuff from src/libsystemd/ really. | |||
2014-12-04 | rtnl: when querying local addresses and gateways, take address family into ↵ | Lennart Poettering | |
account | |||
2014-11-28 | treewide: another round of simplifications | Michal Schmidt | |
Using the same scripts as in f647962d64e "treewide: yet more log_*_errno + return simplifications". | |||
2014-11-28 | treewide: use log_*_errno whenever %m is in the format string | Michal Schmidt | |
If the format string contains %m, clearly errno must have a meaningful value, so we might as well use log_*_errno to have ERRNO= logged. Using: find . -name '*.[ch]' | xargs sed -r -i -e \ 's/log_(debug|info|notice|warning|error|emergency)\((".*%m.*")/log_\1_errno(errno, \2/' Plus some whitespace, linewrap, and indent adjustments. | |||
2014-11-28 | treewide: a few more log_*_errno + return simplifications | Michal Schmidt | |
The one in tmpfiles.c:create_item() even looks like it fixes a bug. | |||
2014-11-28 | treewide: yet more log_*_errno + return simplifications | Michal Schmidt | |
Using: find . -name '*.[ch]' | while read f; do perl -i.mmm -e \ 'local $/; local $_=<>; s/(if\s*\([^\n]+\))\s*{\n(\s*)(log_[a-z_]*_errno\(\s*([->a-zA-Z_]+)\s*,[^;]+);\s*return\s+\g4;\s+}/\1\n\2return \3;/msg; print;' $f done And a couple of manual whitespace fixups. | |||
2014-11-28 | treewide: no need to negate errno for log_*_errno() | Michal Schmidt | |
It corrrectly handles both positive and negative errno values. | |||
2014-11-28 | treewide: auto-convert the simple cases to log_*_errno() | Michal Schmidt | |
As a followup to 086891e5c1 "log: add an "error" parameter to all low-level logging calls and intrdouce log_error_errno() as log calls that take error numbers", use sed to convert the simple cases to use the new macros: find . -name '*.[ch]' | xargs sed -r -i -e \ 's/log_(debug|info|notice|warning|error|emergency)\("(.*)%s"(.*), strerror\(-([a-zA-Z_]+)\)\);/log_\1_errno(-\4, "\2%m"\3);/' Multi-line log_*() invocations are not covered. And we also should add log_unit_*_errno(). | |||
2014-11-28 | log: fix order of log_unit_struct() to match other logging calls | Lennart Poettering | |
Also, while we are at it, introduce some syntactic sugar for creating ERRNO= and MESSAGE= structured logging fields. | |||
2014-11-06 | machined: reorder method calls in vtable | Lennart Poettering | |
2014-11-05 | core: introduce new Delegate=yes/no property controlling creation of cgroup ↵ | Lennart Poettering | |
subhierarchies For priviliged units this resource control property ensures that the processes have all controllers systemd manages enabled. For unpriviliged services (those with User= set) this ensures that access rights to the service cgroup is granted to the user in question, to create further subgroups. Note that this only applies to the name=systemd hierarchy though, as access to other controllers is not safe for unpriviliged processes. Delegate=yes should be set for container scopes where a systemd instance inside the container shall manage the hierarchies below its own cgroup and have access to all controllers. Delegate=yes should also be set for user@.service, so that systemd --user can run, controlling its own cgroup tree. This commit changes machined, systemd-nspawn@.service and user@.service to set this boolean, in order to ensure that container management will just work, and the user systemd instance can run fine. | |||
2014-10-31 | ptyforward: rework PTY forwarder logic used by nspawn to utilize the normal ↵ | Lennart Poettering | |
event loop We really should not run manual event loops anymore, but standardize on sd_event, so that we can run sd_bus connections from it eventually. | |||
2014-10-23 | label: unify code to make directories, symlinks | Lennart Poettering | |