systemd (257.9-1~deb13u1) trixie; urgency=medium
* Update upstream source from tag 'upstream/257.9' Update to upstream
version '257.9' with Debian dir
9b05cb6904e089147c1521b0ced983a575d8abe4
-- Luca Boccassi <bluca@debian.org> Wed, 03 Sep 2025 19:38:20 +0100
systemd (257.8-1~deb13u1) trixie; urgency=medium
* ukify: recommend sbsigntool | pesign for signing (Closes: #1108803)
* Move bootctl zsh completion file too to new package
* systemd-boot-tools: change architecture to linux-any. The tool can be
used for cross-building, and it's available on all architectures, not
just EFI ones
* systemd-boot: fix initramfs post-update hook for uncompressed kernels
(Closes: #1109098)
* systemd-boot: register interest in systemd-boot-signed trigger
(Closes: #1109984)
* NEWS: fix typo (Closes: #1109979)
* systemd-boot: fix registering/removing uncompressed kernels
* d/t/control: prefer systemd-boot-tools if available
* Update upstream source from tag 'upstream/257.8' Update to upstream
version '257.8' with Debian dir
7153da4dd3bde82b88c5f48d704826e431373076
-- Luca Boccassi <bluca@debian.org> Sun, 10 Aug 2025 15:04:51 +0100
systemd (257.7-1) unstable; urgency=medium
* udev: add 'clock' system group for PTP rules
* systemd-boot: remove fb too on removal
* systemd-boot: reduce harmless noise on cleanup (Closes: #1108264)
* Update upstream source from tag 'upstream/257.7' Update to upstream
version '257.7' with Debian dir
ef416841c96628293f494812ad2d395cf865f7b5
-- Luca Boccassi <bluca@debian.org> Wed, 25 Jun 2025 13:40:07 +0100
systemd (257.6-1) unstable; urgency=medium
[ Luca Boccassi ]
* d/copyright: use GPL URL instead of old FSF postal address.
* d/signing-template/copyright: use GPL URL instead of old FSF postal
address.
* d/control: bump Standards-Version to 4.7.2, no changes
* Add version to systemd-boot-efi-signed virtual package. Otherwise
dependency on systemd-boot-efi-signed (>= 257.5-2) is not satisfiable
(Closes: #1104663)
* systemd-homed: add dependency on polkitd (Closes: #1105743)
* systemd-boot: fix BOOT.CSV usage (Closes: #1106024)
* Update upstream source from tag 'upstream/257.6' Update to upstream
version '257.6' with Debian dir
907f7fd2ae07adbab0ffd7b9235fc25435f12bab
(Fixes CVE-2025-4598)
* Drop patches, merged upstream
[ Tim Small ]
* document requirement to sync *.link files with initrd (Closes:
#1005282)
[ Kirill Rekhov ]
* Set upstream metadata fields: Security-Contact
-- Luca Boccassi <bluca@debian.org> Thu, 29 May 2025 17:52:48 +0100
systemd (257.5-2) unstable; urgency=medium
* Backport new patch to workaround /lib64 symlink incompatibility
(Closes: #1079329)
-- Luca Boccassi <bluca@debian.org> Mon, 07 Apr 2025 18:39:22 +0100
systemd (257.5-1) unstable; urgency=medium
* Add NEWS entry to warn about network connectivity loss due to mDNS,
and workaround
* Use Conflicts instead of Breaks/Replaces for file move (Closes:
#1101965)
* Update upstream source from tag 'upstream/257.5' Update to upstream
version '257.5' with Debian dir
2218d137fd911b8d5c2849535b066d27f01406b2
* Drop backports, included in 257.5
* Remove conflicts with dracut:arm64 and build nspawn:arm64 again. A
mutually satisfactory solution for #1079329 has been agreed and is
being worked on, so temporarily reintroduce #1079329 until it's ready
in a few days as per agreement with ctte.
-- Luca Boccassi <bluca@debian.org> Sun, 06 Apr 2025 18:41:17 +0100
systemd (257.4-9) unstable; urgency=medium
* resolved: break mDNS, remove conflict with avahi. Feedback from users
is to prefer breaking mDNS rather than avoiding avahi. Ship a drop-in
to disable mDNS by default, so that users relying on mDNS for
reachability can hopefully notice it and mask it before upgrading
(Closes: #1098914)
-- Luca Boccassi <bluca@debian.org> Wed, 02 Apr 2025 11:19:09 +0100
systemd (257.4-8) unstable; urgency=medium
[ Luca Boccassi ]
* systemd.preinst: do not use systemctl libsystemd-shared might not be
unpacked yet, so check things manually (Closes: #1101698)
* systemd.preinst: fix shellcheck warnings
* d/t/boot-and-services: skip gdm3 test in nested LXD run. It is flaky
and fails half the times, not much value in checking a desktop session
inside a nested container
* reintroduce systemd-resolved, with conflict on avahi-daemon. It turns
out the cloud images have a hard dependency on resolved. In order to
avoid having to change them, reintroduce the package, with a hard
conflict on avahi-daemon to avoid reintroducing #1098914 (Closes:
#1101532)
[ Yu Watanabe ]
* d/rules: drop nscd meson option. The meson option was deprecated by
28f1f1a5e652508d6e61ace8918e8b831e4b62b4 (v257).
-- Luca Boccassi <bluca@debian.org> Tue, 01 Apr 2025 21:43:18 +0100
systemd (257.4-7) unstable; urgency=medium
* autopkgtest: when nested tests-in-lxd skips don't fail outer run
* Backport patches to fix integration tests skipping
* autopkgtest: re-enable integration tests
-- Luca Boccassi <bluca@debian.org> Sat, 29 Mar 2025 19:07:36 +0000
systemd (257.4-6) unstable; urgency=medium
* systemd: conflict with dracut on arm64. Same as the systemd-
nspawn/arm64 changes of 257.4-4. As correctly pointed out on the
reopened #1079329 this combination also creates incompatibilities, so
add an explicit package conflict to fix this occurrence too as
requested by the reporter. (Closes: #1079329)
* d/control: fix systemd-boot and systemd-boot-tools descriptions
* Add Lintian override for 'unknown-field Protected'
-- Luca Boccassi <bluca@debian.org> Fri, 28 Mar 2025 23:33:26 +0000
systemd (257.4-5) unstable; urgency=medium
* Add missing dh-exec shbang to d/systemd-tests.install
-- Luca Boccassi <bluca@debian.org> Fri, 28 Mar 2025 10:28:09 +0000
systemd (257.4-4) unstable; urgency=medium
[ Luca Boccassi ]
* Update tzdata-legacy version constraint for new bookworm-p-u tzdata
version
* systemd-boot: do case-insensitive parsing of efibootmgr output
(Closes: #1100653)
* userdbd: use wildcard to install units
* systemd-container: use more wildcards to install files
* Handle new tmp mount on upgrade in preinst rather than postinst. Avoid
race with new units being activated and pulling it in at the same time
(Closes: #1101175)
* autopkgtest: remove workaround for 'meson compiile mkosi' and use
'mkosi -f' instead to avoid slow rebuilds
* autopkgtest: drop versioning constraints on tzdata. These do not seem
to be necessary in order for autopkgtest to pull in the package, so
drop them as they need to be constantly updated due to p-u uploads
* Move leftover resolved files to its own package. A few files were
mistakenly shipping in the main systemd package even though they are
part of resolved, due to a refactor from some time ago. Move them
over.
* Drop systemd-resolved package. The ctte has declared that the way the
systemd-resolved tool works is incompatible with their decision to
prioritize avahi in Debian. Furthermore, the resolved tool is being
used to inflict pain on the maintainer, and induce burnout.
Regrettably, the only safe solution to ensure this package is
compliant with this decision is to drop it, as all reasonable
alternatives put forward have been rejected:
https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
(Closes: #1098914)
* Drop systemd-nspawn on arm64. The ctte has declared that the way the
systemd-nspawn binary works on arm64 is incompatible with their
decision to leave in place a recently introduced change in the debian-
specific base-files package, which caused a dpkg regression.
Furthermore, the nspawn tool is being used to inflict pain on the
maintainer, and induce burnout. Regrettably, the only safe solution to
ensure this package is compliant with this decision is to drop the
binary on arm64, as all reasonable alternatives put forward have been
rejected:
https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
(Closes: #1079329)
[ Nick Rosbrook ]
* Add myself to Uploaders
[ Andrea Pappacoda ]
* d/control: only conflict against opensysusers << 0.7.3-4.1~
opensysusers 0.7.3-4.1 is no longer co-installable with systemd as it
conflicts with systemd-sysusers, so it is no longer needed to conflict
against it systemd-side.
-- Luca Boccassi <bluca@debian.org> Fri, 28 Mar 2025 01:24:32 +0000
systemd (257.4-3) unstable; urgency=medium
* Fix versioned breaks/replaces for sd-boot-tools (Closes: #1100412)
-- Luca Boccassi <bluca@debian.org> Thu, 13 Mar 2025 15:25:54 +0000
systemd (257.4-2) unstable; urgency=medium
* Split bootctl to new systemd-boot-tools package (Closes: #1086860)
-- Luca Boccassi <bluca@debian.org> Tue, 11 Mar 2025 14:48:10 +0000
systemd (257.4-1) unstable; urgency=medium
[ Nick Rosbrook ]
* d/rules: fix bpftool path discovery on ubuntu
* initramfs-tools: copy hwdb.bin to initramfs. The contents of hwdb.bin
may influence udev during early boot. E.g., this may change network
interface naming decisions. Hence, make sure it is available in the
initrd. This adds about 2MB to the size of the compressed initrd.
* d/t/tests-in-lxd: skip test on any setup error. When this test fails
becacuse of snap install, or lxd tools, we prefer to skip because we
never reached the stage where we are actually testing systemd.
[ Luca Boccassi ]
* Set tty device node mode to 0600 (Closes: #1093870)
* d/rules: ignore more blhc false positives
* systemd-resolved: recommend libidn2-0. Without it in some cases
hostname resolution fails (Closes: #1097699)
* README: add note about out-of-tree patches being forbidden. Prompted
by #1098221
* systemd-sysv: add Protected: yes (Closes: #1098260)
* Update upstream source from tag 'upstream/257.4' Update to upstream
version '257.4' with Debian dir
2121ac2e2a87e081b31f819aea969e38b6147ce3
-- Luca Boccassi <bluca@debian.org> Thu, 06 Mar 2025 14:52:08 +0000
systemd (257.3-1) unstable; urgency=medium
* d/t/control: do not pull in gdm3 on loong64. Not installable, skip it
like s390x/riscv/armel
* systemd-boot: warn if efibootmgr is not installed. As it means the
boot entry won't be created, since it's a recommends
* systemd-boot: fix creating bootvar on arm64
* systemd-boot: check that bootvar really points to sd-boot. Otherwise
it could be a leftover with another second stage. Check both encoded
and decoded strings.
* Drop fallback for missing linux-bpf-dev package
* ukify: depend on python3-zstandard and recommend python3-lz4 arm64
kernels are getting zboot+zstd so zstandard will be required for uname
probing. lz4 might be used externally so just recommend it.
* Update upstream source from tag 'upstream/257.3' Update to upstream
version '257.3' with Debian dir
1531e0bcaea1d2bf600be6d542bae876d1829da9
* autopkgtest: fix mkosi config section
-- Luca Boccassi <bluca@debian.org> Thu, 13 Feb 2025 19:54:00 +0000
systemd (257.2-3) unstable; urgency=medium
* signing template: add override for executable-not-elf-or-script
* libsystemd-dev/libudev-dev: depend on libcap-dev. These libraries link
with libcap, so a dependency is needed for static builds
* systemd-boot: use boot entry argument instead of installing as
grub.efi on ESP. It turns out Shim can load sd-boot if the boot entry
is set correctly.
* systemd-boot: always check that the boot entry is set, even with Shim
is already installed
* libudev1: add udeb back to shlibs. Without this, packages building
udebs against libudev-dev will end up depending on libudev1 instead of
libudev1-udeb.
-- Luca Boccassi <bluca@debian.org> Thu, 23 Jan 2025 15:17:08 +0000
systemd (257.2-2) unstable; urgency=medium
[ Luca Boccassi ]
* Enable libseccomp on loong64 and hppa
* Enable UEFI on loong64
* Do not install sd-resolved and drop breaks-testbed from fast tests.
* d/t/control: remove 'flaky' from tests-in-lxd
* d/t/upstream: take into account autopkgtest pinning
* signing template: fix Lintian warnings and errors
* Link systemctl against libsystemd-shared. This was disabled when we
did not have a libsystemd-shared package, but it's now available so we
can change this again. This makes the stripped systemctl binary size
go from 1.6M down to 291K.
* signing template: always set urgency to 'high' The main package has
autopkgtest so gets a bonus, make sure the signed package also
migrates fast by default. It will always be blocked by the main
package anyway due to the dependency.
* Drop udeb packages. The udeb packages will be moved to a new systemd-
udeb repository, to reduce udeb churn and to unblock changes in the
main packages, such as building udev without static linking libudev
and libsystemd-shared, which shrinks the size of the binary from 1.6M
down to 611K
[ Philipp Kern ]
* Update README.source in the signing-template. This previously referred
to fwupd, which is where it was copied from.
-- Luca Boccassi <bluca@debian.org> Fri, 17 Jan 2025 09:53:01 +0000
systemd (257.2-1) unstable; urgency=medium
* Update upstream source from tag 'upstream/257.2' (Closes: #1092125)
* Drop all patches, merged upstream
-- Luca Boccassi <bluca@debian.org> Tue, 07 Jan 2025 20:48:25 +0000
systemd (257.1-7) unstable; urgency=medium
* Add missing d/copyright file to signed template packages
* d/t/tests-in-lxd: more fixes for debci compatibility
-- Luca Boccassi <bluca@debian.org> Sat, 04 Jan 2025 01:55:59 +0000
systemd (257.1-6) unstable; urgency=medium
* d/t/tests-in-lxd: drop auto-apt-proxy.conf from container
* Drop build dependency on libxen-dev on armhf, no longer available
(Closes: #1091545)
-- Luca Boccassi <bluca@debian.org> Fri, 03 Jan 2025 11:39:41 +0000
systemd (257.1-5) unstable; urgency=medium
* d/t/tests-in-lxd: install auto-apt-proxy in the nested container.
* d/t/upstream: do not use --verbose with 'meson test'
* d/t/upstream: do not mask machined and instead use mkosi workaround
* d/t/upstream: switch from btrfs to ext4 and use nspawn again. Kernel
6.12 broke mounting btrfs volumes from loop devices, switch to ext4 as
a workaround and use nspawn again, as it's faster
-- Luca Boccassi <bluca@debian.org> Thu, 26 Dec 2024 18:59:19 +0000
systemd (257.1-4) unstable; urgency=medium
* d/t/upstream: decrease parallelism to nproc - 1
* d/t/upstream: do not use nspawn for tests
* d/t/upstream: disable homed/userdbd in the test runner
* d/t/upstream: mask systemd-machined
* Backport patch to workaround issue in new mdadm
-- Luca Boccassi <bluca@debian.org> Sun, 22 Dec 2024 13:57:12 +0000
systemd (257.1-3) unstable; urgency=medium
* autopkgtest: mark tests-in-lxd as flaky
-- Luca Boccassi <bluca@debian.org> Sat, 21 Dec 2024 01:19:14 +0000
systemd (257.1-2) unstable; urgency=medium
* Various fixes for d/t/tests-in-lxd
-- Luca Boccassi <bluca@debian.org> Fri, 20 Dec 2024 15:27:15 +0000
systemd (257.1-1) unstable; urgency=medium
[ Luca Boccassi ]
* test: fix flaky boot-and-services test.
* d/t/upstream: fix mkosi syntax warnings
* systemd-ukify: recommend python3-cryptography. One of the verbs uses
it, so add a recommend to pull it in by default (Closes: #1090759)
* d/watch: restrict to v257.x series
* Update upstream source from tag 'upstream/257.1' (Closes: #1087616)
* Drop patches, merged upstream
* Install systemd-creds bash completion
[ Nick Rosbrook ]
* d/t/tests-in-lxd: run some tests under LXD
* debian/tests/boot-and-services: drop test_no_failed
* debian/control: add Breaks: systemd (<< ${binary:Version}) for udev.
This ensures that systemd is also upgraded whenever udev is upgraded.
* d/control: make systemd-sysv Depends: on matching version of systemd
* d/systemd-resolved.postinst: copy existing /etc/resolv.conf on new
installs
[ Balint Reczey ]
* debian/systemd.postinst: Skip daemon-reexec and try-restarts during
shutdown. LP #1803391
-- Luca Boccassi <bluca@debian.org> Thu, 19 Dec 2024 21:41:25 +0000
systemd (257-2) unstable; urgency=medium
[ Aurelien Jarno ]
* udev: install dmi_memory_id and its rules on riscv64.
[ Luca Boccassi ]
* Backport patches to fix test failures
-- Luca Boccassi <bluca@debian.org> Wed, 11 Dec 2024 18:31:08 +0000
systemd (257-1) unstable; urgency=medium
* Update to new upstream version v257. For a full list of changes:
https://github.com/systemd/systemd/releases/tag/v257-rc1
* Update symbols file for v257
-- Luca Boccassi <bluca@debian.org> Tue, 10 Dec 2024 19:57:21 +0000
systemd (257~rc3-1) unstable; urgency=medium
[ Luca Boccassi ]
* systemd-ukify: recommend systemd-boot-efi for the stub (Closes:
#1087808)
* Increase minimum sections in stub PE header on arm64/armhf/riscv64 to
500. Allows riscv64 to include all current DTBs with some room to grow
(Closes: #1087817)
* Bump version in tzdata dependency due to p-u upload
* Update to new upstream version v257~rc3. For a full list of changes:
https://github.com/systemd/systemd/releases/tag/v257-rc3
* Drop patches, merged upstream
* Update symbols for 257~rc3
[ Ben Hutchings ]
* sysctl: Add file trigger on /usr/lib/sysctl.d to restart systemd-
sysctl. (Closes: #1085160)
-- Luca Boccassi <bluca@debian.org> Wed, 27 Nov 2024 21:21:02 +0000
systemd (257~rc2-3) unstable; urgency=low
* Backport patch to remove faulty unit test assertion
-- Luca Boccassi <bluca@debian.org> Sat, 16 Nov 2024 10:13:56 +0000
systemd (257~rc2-2) unstable; urgency=low
* Backport patch to fix FTBFS due to failing unit test
-- Luca Boccassi <bluca@debian.org> Sat, 16 Nov 2024 00:36:08 +0000
systemd (257~rc2-1) unstable; urgency=low
* d/t/control: add more packages to dummy hint-testsuite-triggers. A
regression was introduced by nvme-cli in testing because the testsuite
doesn't depend on it anymore directly, as mkosi builds it in the
image. Add back all the tools/libraries that are only part of the
mkosi guest image, so that autopkgtest triggers when they get updated,
and regressions can be flagged before they migrate to testing.
* Update upstream source from tag 'upstream/257_rc2'
* Drop all patches, merged upstream
* Install new systemd-keyutil binary in the systemd-repart package
* systemd-ukify: downgrade dependency on systemd, not mandatory. It is
necessary for the systemd-measure binary, but its usage is optional
behind a specific argument, so the dependency can be downgraded
(Closes: #1087322)
* systemd-ukify: recommend systemd-repart. Needed for the systemd-sbsign
and systemd-keyutil binaries
* d/rules: adjust blhc override to account for source files being moved
* Update lintian override to ignore false positive typos
-- Luca Boccassi <bluca@debian.org> Fri, 15 Nov 2024 19:49:02 +0000
systemd (257~rc1-4) unstable; urgency=medium
* Backport patch to fix TEST-07-PID1 integration test
-- Luca Boccassi <bluca@debian.org> Fri, 08 Nov 2024 01:09:19 +0000
systemd (257~rc1-3) unstable; urgency=low
* Backport another patch to fix test failure on buildd
-- Luca Boccassi <bluca@debian.org> Thu, 07 Nov 2024 11:13:25 +0000
systemd (257~rc1-2) unstable; urgency=low
* Backport patch to fix unit test failure on buildd
-- Luca Boccassi <bluca@debian.org> Thu, 07 Nov 2024 09:35:17 +0000
systemd (257~rc1-1) unstable; urgency=low
* gbp.conf: switch upstream branch to full upstream history
* Update to new upstream version v257~rc1. For a full list of changes:
https://github.com/systemd/systemd/releases/tag/v257-rc1
* Drop all patches, merged upstream
* Install new files
* List new libsystemd0 symbols
* Ignore Lintian warning dh-exec-script-without-dh-exec-features
* d/copyright: remove pattern for directory that is no longer present
-- Luca Boccassi <bluca@debian.org> Wed, 06 Nov 2024 23:58:55 +0000
systemd (256.7-3) unstable; urgency=medium
[ Luca Boccassi ]
* Backport patch to fix test failures with tzdata 2024b-1
* systemd-boot: provide provisional integration with shim. Not yet
used, will be active once the signed packages are available.
https://wiki.debian.org/SecureBoot#Secure_Boot_setup_with_systemd-boot
[ Kirill Rekhov ]
* d/systemd.postrm: delete more internal state directories on purge
-- Luca Boccassi <bluca@debian.org> Fri, 01 Nov 2024 18:13:09 +0000
systemd (256.7-2) unstable; urgency=medium
[ Nick Rosbrook ]
* d/systemd.postinst: do not restart systemd-binfmt.service if masked
(LP: #2077869)
[ Luca Boccassi ]
* systemd-boot: depend on systemd for kernel-install (Closes: #1085012)
* Disable utmp support, not y2038 safe. utmp support in tmux has been
disabled, so autopkgtest should no longer break
* Backport fixes for upstream autopkgtest suite
[ Benjamin Drung ]
* initramfs-tools: support missing /etc/udev/udev.conf. Installing
initramfs-tools fails in case `/etc/udev/udev.conf` is removed
(LP: #2084592)
-- Luca Boccassi <bluca@debian.org> Fri, 18 Oct 2024 15:47:12 +0100
systemd (256.7-1) unstable; urgency=medium
* autopkgtest: skip gdm3 on armel for smoke tests. Gnome is no longer
built for armel. (Closes: #1082516)
* New upstream version 256.7
* Mark dependencies on clang and bpftool as :native (Closes: #1083064)
* Revert "autopkgtest: skip TEST-64-UDEV-STORAGE due to qemu crash". The
qemu crash is now detected in the upstream integration test script.
-- Luca Boccassi <bluca@debian.org> Tue, 08 Oct 2024 18:37:53 +0100
systemd (256.6-1) unstable; urgency=medium
[ Helmut Grohne ]
* salsa-ci: test the stage1 build profile
[ Simon Chopin ]
* Filter out zdev rules in the initramfs hook (LP: #2044104). s390-tools
has its own initramfs customization logic that deals with those files.
[ Luca Boccassi ]
* Re-enable utmp support, tmux's autopkgtests require it. This will
break as logind writing into utmp will wrap around, so Trixie won't be
y2038 ready after all
* New upstream version 256.6
* Note systemd-cryptsetup package split in NEWS (Closes: #1079644)
-- Luca Boccassi <bluca@debian.org> Tue, 10 Sep 2024 18:28:21 +0200
systemd (256.5-2) unstable; urgency=medium
[ Helmut Grohne ]
* Fix stage1 build (Closes: #1078821)
[ Luca Boccassi ]
* Disable utmp support, replaced by wtmpdb. utmp is not y2038-safe, util-
linux has now turned it off and relies on logind, so disable utmp
support in logind too, as it is no longer necessary. wtmpdb replaces
the functionality.
-- Luca Boccassi <bluca@debian.org> Sun, 01 Sep 2024 22:03:06 +0100
systemd (256.5-1) unstable; urgency=medium
* New upstream version 256.5
* Drop patch merged upstream
* autopkgtest: skip TEST-64-UDEV-STORAGE due to qemu crash. This tests
randomly causes qemu to crash, making it very flaky, skip it
downstream
-- Luca Boccassi <bluca@debian.org> Thu, 15 Aug 2024 22:00:36 +0100
systemd (256.4-3) unstable; urgency=medium
* Drop redundant pot build. This was added many years ago, when
apparently the upstream pot generation wasn't run or wasn't working.
This is not the case anymore, pot files are regenerated upstream and
checked in on every release, so this manual step just updates the
timestamp in the existing template and nothing else. Drop it.
* Use debian/clean instead of override in d/rules
* Stop shipping empty /etc/init.d directory. We do not have any need for
it, and will soon stop supporting legacy init files, so stop shipping
it
* Use d/not-installed instead of manual removals. We no longer install
in the main package with a wildcard so we do not need to manually
delete files, listing them in d/not-installed is sufficient. The only
exceptions are files picked up by directory/wildcard entries in
dh_install that have to be deleted.
* autopkgtest: run upstream test last. It is the most complex and thus
the most likely to show temporary failures, so move it last so that
it's easier to read the logs
* autopkgtest: use hint-testsuite-triggers to ensure other packages
changes trigger our testsuite
* Depend on new linux-bpf-dev package where available
-- Luca Boccassi <bluca@debian.org> Sun, 11 Aug 2024 11:53:32 +0100
systemd (256.4-2) unstable; urgency=medium
* autopkgtest: allow localectl in localed tests.
-- Luca Boccassi <bluca@debian.org> Thu, 25 Jul 2024 13:18:09 +0100
systemd (256.4-1) unstable; urgency=medium
[ Nick Rosbrook ]
* Move systemd-time-wait-sync to systemd-timesyncd package
(LP: #1938058)
* d/t/boot-and-services: skip test_tmp_cleanup if tmp.mount is
overridden
* d/t/upstream: ensure correct ubuntu codename is used
* d/t/control: add Depends: lib{systemd,udev}-dev for upstream
[ Luca Boccassi ]
* Drop /etc/sysctl.d/99-sysctl.conf symlink procps no longer ships
/etc/sysctl.conf (Closes: #1076190)
* autopkgtest: add allow-stderr to timedated test
* autopkgtest: set Release= in mkosi.local.conf to distinguish testing
vs unstable
* Drop out-of-tree localed patch and use D-Bus policy instead. We can
forbid changing locale/keymap/keyboard via a D-Bus policy instead of
an out-of-tree patch.
* New upstream version 256.4 (Closes: #1074789)
* Install varlinkctl zsh completion file
* Drop last patch, all merged upstream
-- Luca Boccassi <bluca@debian.org> Wed, 24 Jul 2024 14:23:56 +0100
systemd (256.2-1) unstable; urgency=medium
* d/not-installed: fix shutdown.standalone path
* autopkgtest: skip qemu tests on arm64
* Add recommends on linux-sysctl-defaults. This package contains the
default sysctl settings, and is maintained by the kernel team. This is
not available in Ubuntu so keep it as a recommends for now, to avoid
breaking the upstream CI.
(Closes: #1027773)
* initramfs-tools: copy network drop-ins too (Closes: #1074564)
* d/e/checkout-upstream: fix shellcheck warnings
* d/e/checkout-upstream: do not fail if rebase fails
* d/e/checkout-upstream: switch packaging branch on upstream stable PRs.
* New upstream version 256.2 (Closes: #1074789)
* Install run0 zsh completion file
-- Luca Boccassi <bluca@debian.org> Fri, 05 Jul 2024 19:15:59 +0100
systemd (256.1-2) unstable; urgency=medium
* Bump breaks/replaces to conflicts for DEP17. Breaks/replaces are not
enough when moving files between packages and between locations as per
DEP17, so bump to Conflicts. (Closes: #1073922)
* autopkgtest: add dependency on libcryptsetup-dev in unit-tests suite
-- Luca Boccassi <bluca@debian.org> Sun, 23 Jun 2024 13:33:33 +0100
systemd (256.1-1) unstable; urgency=medium
* Bump versioned breaks against dracut to 102-2 (Closes: #1073290)
* autopkgtest: switch upstream suite to mkosi-based builds
* Add conflict against sysv-rc, insserv and startpar in systemd-sysv.
They are not needed, and having them installed causes problems.
(Closes: #1072562)
* New upstream version 256.1
* Drop section from binary packages where it matches the source package
* Override Lintian false positives about spare manpages
* Deduplicate template packages descriptions
* Add Lintian override for template package false positives
* Rename EFI architecture variable to avoid dpkg clash. Fixes Lintian
warning: debian-rules-sets-dpkg-architecture-variable
* Upload to unstable.
-- Luca Boccassi <bluca@debian.org> Tue, 18 Jun 2024 23:19:16 +0100
systemd (256-2) experimental; urgency=medium
* Add templated packages for UEFI Secure Boot signing of systemd-boot.
* Add systemd-standalone-shutdown package for exitrds. Allows building
minimal exitrd images, used to gracefully cleanup complex root
filesystems storage. Not intended for normal systems.
* Add systemd-repart package to reduce dependencies sd-repart pulls in
several libraries that binaries in the main systemd package do not
need, so split it out to reduce the dependencies of the main package
* Add systemd-cryptsetup package to reduce dependencies sd-
cryptsetup/integritysetup/veritysetup pull in several libraries that
other files in the main systemd package do not need, so split them out
to reduce the dependencies of the main package
* Move sd-sysupdate to systemd-container
* Move importd manpages to systemd-container, where the binaries are.
Left behind when importd was moved
* Move systemd-boot/stub manpages to systemd-boot. The EFI packages
should just have the EFI binaries, no point in duplicating the docs.
And the stub manpage should also be in the boot package, not the main
package.
-- Luca Boccassi <bluca@debian.org> Wed, 12 Jun 2024 01:30:51 +0100
systemd (256-1) unstable; urgency=medium
[ Kevin Fleming ]
* Additional workaround for links to legacy /usr/share/systemd/tmp.mount
placeholder
[ Yu Watanabe ]
* debian/extra/network: use NamePolicy=mac only when ID_NET_NAME_MAC is
set.
[ Luca Boccassi ]
* New upstream version 256. For a full list of changes, see:
https://github.com/systemd/systemd/releases/tag/v256
-- Luca Boccassi <bluca@debian.org> Tue, 11 Jun 2024 22:59:12 +0100
systemd (256~rc4-1) unstable; urgency=high
[ Luca Boccassi ]
* Restart managers on libc-upgrade dpkg trigger (Closes: #1072373)
* LimitCORE: restore default hard limit to infinity. The intention was
to change the soft limit, but by default it applies to both unless
specified, so fix it.
* New upstream version 256~rc4
* Drop patches merged upstream
[ Nick Rosbrook ]
* debian/extra: set ManagedOOMSwap=auto on -.slice. This has the effect
of disabling swap kill by default, so cgroups will only be monitored
for memory pressure, and not swap usage.
* debian/extra: use a drop-in resolved.conf to configure Cache=no-
negative. Only ship this on Ubuntu.
* debian/extra: use a dropin to configure Nice=-1 on systemd-
journald.service. Only ship this on Ubuntu.
[ Dan Streetman ]
* debian/tests/storage: without scsi_debug, skip test
-- Luca Boccassi <bluca@debian.org> Thu, 06 Jun 2024 20:49:17 +0100
systemd (256~rc3-7) unstable; urgency=medium
* NEWS: note that any leftover file in /tmp/ will be invisible due to
the tmpfs and other clarifications (Closes: #1072249)
* Add pkg.systemd.noukify profile. Will be useful for i386 reduced
builds
* d/rules: be more robust against non-existing dirs when deleting files
* Allow setting GENSYMBOLS_LEVEL from the environment. Needed when
building with llvm to work around #986746
-- Luca Boccassi <bluca@debian.org> Sat, 01 Jun 2024 12:30:39 +0100
systemd (256~rc3-6) unstable; urgency=medium
* NEWS: clarify tmpfiles.d entry (Closes: #1072155)
* Override false positive Lintian warning
* Add workaround for links to legacy /usr/share/systemd/tmp.mount
placeholder. Some users apparently link to the placeholder in
/usr/share/ so delete any such links, given we don't ship it anymore
(Closes: #1072187)
-- Luca Boccassi <bluca@debian.org> Thu, 30 May 2024 18:11:19 +0100
systemd (256~rc3-5) unstable; urgency=medium
* homed: fixup pam-auth-update file via trigger pam-auth-update assumes
nothing comes after a password module, but this is not true for
pam_systemd_home, which is a no-op for users not managed by homed.
Fixup common-password accordingly, using a trigger watching for pam-
auth-update files being installed.
-- Luca Boccassi <bluca@debian.org> Wed, 29 May 2024 01:04:53 +0100
systemd (256~rc3-4) unstable; urgency=medium
* autopkgtest: take into account compat tmp.conf in tmpfiles.d test.
* Backport patch to fix TEST-64-UDEV-STORAGE autopkgtest.
-- Luca Boccassi <bluca@debian.org> Tue, 28 May 2024 12:11:36 +0100
systemd (256~rc3-3) unstable; urgency=medium
[ Zbigniew Jędrzejewski-Szmek ]
* tests/boot-and-services: don't wait for systemd-tmpfiles-clean.service
to finish. It's a oneshot service, so the 'start' call above is
effectively synchronous.
* test/boot-and-services: use pidof instead of ps -C
[ Chris Hofstaedtler ]
* autopkgtest: install open-iscsi and tgt for upstream suite
[ Gioele Barabucci ]
* d/libnss-mymachines.nss: Install before `resolve` and `dns`. Installing
`mymachines` before `dns` and `resolve` (whatever comes first) is
suggested in the manpage. It also avoids leaking information about
local machines to the DNS resolver. (Closes: #825438, #851314)
* d/libnss-myhostname.nss: Install after `files`
[ Luca Boccassi ]
* Drop /bin/systemd legacy symlink. The systemd binary should not be in
the default PATH. This symlink was created due to some old
documentation (long since corrected) suggesting to use
init=/bin/systemd to test switching to systemd. (Closes: #913061)
* initramfs: call udevadm settle before control --exit to ensure workers
have stopped. Otherwise there might be lock files left under /run/
which will break 'nuke' and cause the boot to fail. (Closes: #1056564)
* Restore open files limit bump on boot. Broken packages ought to have
been fixed by now. (Closes: #1029152)
* Set default core limit to 0 via PAM for users. Otherwise it only
applies to services.
* Cleanup /var/tmp/ and /tmp/ on a timer by default. Remove the
downstream patch and restore the upstream behaviour set by the
tmpfiles.d which is to cleanup /var/tmp/ once a month and /tmp/ once
every 10 days. Can be overridden via: touch /etc/tmpfiles.d/tmp.conf
(Closes: #966621)
* Make /tmp/ a tmpfs by default. Restore the upstream default and make
/tmp/ a tmpfs. Can be overridden with: touch
/etc/systemd/system/tmp.mount or: systemctl mask tmp.mount
* Drop out-of-tree /run/lock patch and use a mount unit and tmpfiles.d
instead. Only lvm2 and open-iscsi have mentions of /run/lock and an
early-boot unit, so it's trivial to add ordering in those units
instead of maintaining an out-of-tree patch.
* homed: use standalone pam config file instead of pam-auth-config
pam_unix.so assumes that if anything comes before it then the password
has already been queried for sure. This doesn't work for homed, so
passwd breaks. pam-auth-config has this hard-coded assumption and it
cannot be disabled. Use an upstream standard pam config file instead.
(Closes: #1056166)
* NEWS: note recent changes
-- Luca Boccassi <bluca@debian.org> Tue, 28 May 2024 00:07:57 +0100
systemd (256~rc3-2) unstable; urgency=medium
* autopkgtest: do not install gdm3 on riscv64 tests. gnome-shell hasn't
built since last year for riscv64 due to #1058687 so the test fails as
it cannot be installed, skip it like on s390x.
-- Luca Boccassi <bluca@debian.org> Thu, 23 May 2024 16:31:42 +0100
systemd (256~rc3-1) unstable; urgency=medium
* Bump Breaks on dracut, on request of the maintainer (Closes: #1071278)
* autopkgtest: reboot before logind test
* Disable D-Bus introspection XML generation with nodoc profile
* autopkgtest: install systemd-dev for upstream suite too
* New upstream version 256~rc3
* Drop patches merged upstream
-- Luca Boccassi <bluca@debian.org> Wed, 22 May 2024 23:24:02 +0100
systemd (256~rc2-3) unstable; urgency=medium
* Explicitly enable systemd-boot only on supported architectures
-- Luca Boccassi <bluca@debian.org> Thu, 16 May 2024 22:51:08 +0100
systemd (256~rc2-2) unstable; urgency=medium
* Build depend on dh-dlopenlibdeps and dynamically generate dlopen
dependencies
* Backport patches to fix journald asserts Compress=yes (Closes:
#1071201)
-- Luca Boccassi <bluca@debian.org> Thu, 16 May 2024 17:40:43 +0100
systemd (256~rc2-1) unstable; urgency=medium
[ Luca Boccassi ]
* report-bug: add presubj template to recommend opening functionality
bugs upstream first
* report-bug: include runtime taints
* Recommend libzstd1 and suggest liblz4-1, liblzma5, libgcrypt20
* autopkgtest: install polkitd in upstream suite
* Build depend on rsync or meson >= 1.3.0 for follow-symlink workaround.
* Change links from freedesktop.org to systemd.io (Closes: #1070499)
* Add dependency on python3-psutil to systemd-tests, needed by networkd
test suite
* d/t/boot-and-services: drop tmp check. LXC now sets up a tmpfs on /tmp
as per upstream recommendation, so we cannot detect it via fstab
anymore. Just drop this test, as we are about to make /tmp a tmpfs
ourselves anyway.
* Set SBAT distro URL to tracker.d.o as suggested by EFI team
* Drop out-of-tree coredump patch and use config drop-ins instead. As
per: https://github.com/systemd/systemd/pull/27066 instead of carrying
an out-of-tree patch, use drop-ins to set the default pattern to
'core' and the default core limit to '0' in the systemd package, and a
higher priority drop-in to set the default core limit to 'infinity' in
the systemd-coredump package (it already ships a sysctl to set the
pattern). The end result is the same, but with config drop-ins instead
of patches.
* Drop out-of-tree fsckd daemon patch. This was dropped upstream long
ago, and Plymouth on Debian doesn't actually use this. A different
upstream change provides the required functionality.
* Drop out-of-tree systemctl scheduled shutdown fallback. This patch was
rejected upstream and there's no path to have it merged, so drop it
and restore the default behaviour in case of error.
* Drop out-of-tree fsck skip patch and use drop-in instead. Non-root
filesystems are only checked when mounted, so the other change is not
needed. The root one can be fixed with a drop-in instead of a patch.
* d/t/control: explicitly depend on systemd-dev for tests that run pkg-
config
* systemd.postinst: use DPKG_ROOT in one more place.
* NEWS: note scheduled shutdown failure case changes
* New upstream version 256~rc2
* Drop patches merged upstream
* Refresh patches for v256~rc2
* Install new files from v256~rc2
* Drop Lintian overrides for false positives that have been fixed
* Upload to unstable
[ Michael Marley ]
* Use absolute path when including libkmod in initramfs. The relative
path works fine when the hook is executed during a normal APT
install/update, but if the user runs "update-initramfs -u" from any
directory other than /, the relative path doesn't match anything,
libkmod is not included, and the system fails to boot due to not
loading the storage driver(s).
[ Michael Biebl ]
* Stop setting the build system explicitly. No longer necessary since
https://github.com/systemd/systemd/pull/31530
* Remove systemd-dev dependency from systemd and udev. This was a
temporary measure to ease the migration.
-- Luca Boccassi <bluca@debian.org> Wed, 15 May 2024 00:40:56 +0100
systemd (256~rc1-1~exp2) experimental; urgency=medium
* Backport patch to fix test-build-path on RISC-V/MIPS
* Backport patch to fix build reproducibility
* Backport patch to fix BPF build on s390x
-- Luca Boccassi <bluca@debian.org> Sat, 27 Apr 2024 18:14:25 +0100
systemd (256~rc1-1~exp) experimental; urgency=medium
* d/watch: switch to main repository
* New upstream version 256~rc1
* Drop Downgrade-a-couple-of-warnings-to-debug.patch. It is time to
start noticeably warning about these legacy setups
* Refresh patches for v256
* Build depend on libarchive-dev
* Install new tools, units and manpages
* Enable bpf and new nsresourced/mountfsd services. Requires vmlinux.h
from linux-headers-$ARCH, disable if not found
* Backport patch to fix unit test failure in build environment
* Update libsystemd symbols file
* Update Lintian overrides
-- Luca Boccassi <bluca@debian.org> Fri, 26 Apr 2024 12:22:04 +0100
systemd (255.5-1) sid; urgency=medium
[ Michael Biebl ]
* autopkgtest: depend on pkgconf rather than pkg-config
* Stop setting default-hierarchy to unified explicitly. It is already
the default and the meson option has been deprecated and is expected
to be removed in a future release. See https://github.com/systemd/syst
emd/commit/31323f21bb0ae7c712f43500c42997c91a6d20bf
* Replace Skip-flaky-test_resolved_domain_restricted_dns-in-
network.patch with a proper upstream fix.
* Remove myself from Uploaders
[ Luca Boccassi ]
* autopkgtest: add dhcpcd5 as alternative dependency to dhcpcd-base
dhcpcd-base is not available in Jammy
* d/e/checkout-upstream: stop overriding sshconfdir. It actually works
after some upstream test fixes, and it is necessary for TEST-46-HOMED
to work
* autopkgtest: install systemd-resolved for all suites. Necessary to
avoid breaking the network on Ubuntu, in the upstream jammy-based CI
jobs. Can be dropped once jammy is no longer tested.
* autopkgtest: add breaks-testbed to more tests. Given resolved is
installed, the testbed needs to be reset to switch back to the default
network stack, otherwise installing packages in the salsa-ci
autopkgtest job fails
* autopkgtest: restrict systemd-boot-efi to architectures where it's
built
* Enable libpwquality support. Suggest it from systemd (used by
firstboot and cryptenroll) and depend on it from homed (user creation
is a core part of it). It's a dlopen() dependency. (Closes: #1063391)
* d/e/checkout-upstream: do not initialize submodules. They are used by
mkosi, not needed for CI builds
* Autopkgtest: add dependency on libkmod-dev to upstream suite.
* Switch build-depend form liblz4-tool to lz4. The former is deprecated
and now dropped, the latter is available since buster. (Closes: #1068730)
* initramfs hooks: pull in libkmod manually udev now opens it with
dlopen, so the ldd-based resolver will not see it, pull it in the
initramfs manually
* New upstream version 255.5
* Drop resolve-skip-IP_UNICAST_IF-for-local-sockets.patch, merged
upstream
* Refresh patches for v255.5
* Bump Standards-Version to 4.7.0, no changes
[ Daan De Meyer ]
* Build in developer mode when building for upstream. Developer mode
enables some helpful debugging options and enables various
experimental components such as systemd-vmspawn which we want to be
enabled when testing upstream.
-- Luca Boccassi <bluca@debian.org> Wed, 24 Apr 2024 16:34:40 +0100
systemd (255.4-1) sid; urgency=medium
[ Luca Boccassi ]
* Drop override for deprecated package-supports-alternative-init-but-no-
init.d-script warning
* Build-depend on pkgconf pkg-config is deprecated
* Move kernel-install initrd script to slightly later prefix
afea8e1a35e15382977d459241e8c56c180c862d moved it from 85 to 50, but
this conflicts with the upstream mkosi job, which also runs at 50 and
needs to run first. Move it back up slightly to 55 to fix the mkosi
builds, eg: https://github.com/systemd/systemd-
stable/actions/runs/7863691120/job/21454589626?pr=366
* Mark python3-pefile build dependency as native. As suggested in
#1063393
* Skip python3-pefile build dependency only if both nocheck and
noinsttests are set (Closes: #1063393)
* Build with -Dtests=false if nocheck and noinsttest profiles are set.
The required build dependencies will not be installed, so the tests
won't build.
* systemd-binfmt: use restart instead of try-restart on upgrade. It's
not a long-running service so it doesn't matter, and it fixes
installing a new binfmt provider (Closes: #1061960)
* d/e/checkout-upstream: do not rebase when building on systemd-stable
repo. We do rebase only pulls in the stable repo, and it's too much
hassle to figure out the right parent branch, given the webhook is
configured per repository rather than per branch, so just skip it
* d/e/checkout-upstream: build with default-timeout-sec=180. Helps with
slow daemon-reload on some CI runs. As requested by:
https://github.com/systemd/systemd/pull/27182
* d/e/checkout-upstream: enable log-trace by default. Its abscence
appears to cause TEST-10-ISSUE-2467 to reliably fail. Enable it while
we figure it out. Also probably it is helpful to have it always turned
on for the CI, to get more info out of test runs. See:
https://github.com/systemd/systemd/issues/19154
* d/e/checkout-upstream: do not install userdbd sshd config drop-in.
Breaks booting testbed in Jammy. Can be dropped after rebasing to
Noble.
* d/t/upstream: add dependencies on openssh, gnutls-bin, opensc and
softhsm2. Required for https://github.com/systemd/systemd/pull/28658
and https://github.com/systemd/systemd/pull/30777
* d/t/upstream: fix shellcheck warning. SC2086 (info): Double quote to
prevent globbing and word splitting.
* Add dependency on libkmod2 on udev, and suggestion on systemd dlopen()
dependency since https://github.com/systemd/systemd/pull/31131 but the
system can't boot without it, so add it as a dependency on udev which
is also needed outside of containers
* Update tzdata build dependency constraint to 2024a-1
* Drop libarchive-dev build dependency. Not useful for now, we'll re-add
it after the next release
* New upstream version 255.4
* Drop patches merged upstream
[ Daan De Meyer ]
* Fix libtss2-mu dependency. This package recently changed name so let's
update the Suggests to account for that.
* Add Suggests for libtss2-tcti-device systemd wants to use this library
when tpm2 support is enabled so let's make sure we list it in
Suggests. (https://github.com/systemd/systemd/blob/db11bab38ccf1ed257f
310d29070843d4c58ea01/meson.build#L1341)
* Make sure awk only matches PROJECT|PACKAGE_VERSION
* Use DEB_BUILD_MAINT_OPTIONS instead of meson options.
* Don't put debian revision in version tag when building for upstream.
* Allow users to configure DH_MISSING.
[ Frantisek Sumsal ]
* d/t/storage: ignore credential mounts when checking /proc/mounts.
[ Daniel P. Berrangé ]
* debian/rules: don't override default telinit-path. The 'telinit-path'
meson option is to be used to point to a non-systemd telinit binary
path. When systemctl is invoked as 'telinit', it will exec this binary
when it detects the current environment is not running under systemd.
If 'telinit-path' points back to 'systemctl', that would result in an
infinite re-execve() loop. (Closes: #1063147)
-- Luca Boccassi <bluca@debian.org> Tue, 27 Feb 2024 17:43:55 +0000
systemd (255.3-2) sid; urgency=medium
* Backport patches to fix reproducibility issues
* Salsa: re-enable reprotest
-- Luca Boccassi <bluca@debian.org> Mon, 29 Jan 2024 10:46:19 +0000
systemd (255.3-1) sid; urgency=medium
* New upstream version 255.3
* Drop patches merged upstream
* Refresh patches
-- Luca Boccassi <bluca@debian.org> Wed, 24 Jan 2024 20:03:15 +0000
systemd (255.2-4) sid; urgency=medium
* autopkgtest: add btrfs-progs Depends to upstream suite.
Required by TEST-83-BTRFS and testcase_btrfs_basic from
TEST-64-UDEV-STORAGE.
* Revert "test: deny-list TEST-13-NSPAWN"
This reverts commit df8e5367aca20e0c75c9c91f826d22d8a0f7e36d.
* autopkgtest: add multipath-tools and kpartx Depends to upstream suite.
Required by testcase_multipath_basic_failover from TEST-64-UDEV-STORAGE.
* test: install correct kpartx udev rules on Debian
-- Michael Biebl <biebl@debian.org> Sat, 06 Jan 2024 16:21:03 +0100
systemd (255.2-3) sid; urgency=medium
* Cherry-pick fixes for upstream integration tests.
Fixes TEST-07-PID1, TEST-08-INITRD (skip), TEST-26-SYSTEMCTL and
TEST-75-RESOLVED.
* Add explicit Build-Depends on debhelper (>= 13.11.6)
This ensures we have a recent enough version of dh_installsystemd that
supports service files in /usr/lib/.
* test: deny-list TEST-13-NSPAWN.
The default ram size of 1024M for qemu virt is not sufficient
to make the test pass reliably on Debian sid/trixie.
Disable the test for now until this has been addressed in debci:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059840
-- Michael Biebl <biebl@debian.org> Tue, 02 Jan 2024 11:44:49 +0100
systemd (255.2-2) unstable; urgency=medium
* udev: mips does not install dmi_memory_id and its rules
-- Luca Boccassi <bluca@debian.org> Sun, 24 Dec 2023 14:25:27 +0100
systemd (255.2-1) unstable; urgency=medium
* New upstream version 255.2
* Drop resolved-actually-check-authenticated-flag-of-SOA-transac.patch,
merged upstream
-- Luca Boccassi <bluca@debian.org> Sun, 24 Dec 2023 11:26:42 +0100
systemd (255.1-3) unstable; urgency=medium
* Upload to unstable
* Fix installation of dmi_memory_id on i386 and x32
* Explicitly disable bootloader for stage1 build.
This ensures that the stage1 build is not broken in a tainted build
environment.
* Mark missing man pages from stage1 build
-- Michael Biebl <biebl@debian.org> Sun, 24 Dec 2023 11:08:06 +0100
systemd (255.1-2) experimental; urgency=medium
[ Michael Biebl ]
* Upgrade the Breaks to Conflicts for the systemd-ukify package split.
This avoids potential loss of the /usr/lib/systemd/ukify compat symlink
for upgrades from bookworm-backports.
* Update package description of libnss-myhostname to use the correct IPv4
address (Closes: #1057953)
* resolved: actually check authenticated flag of SOA transaction.
Patch cherry-picked from upstream Git.
(CVE-2023-7008, Closes: #1059278)
* Explicitly disable ukify for stage1 builds
* Enable dh-exec for systemd.manpages and udev.install.
This enables files to be installed specific to certain architectures or
build profiles. Unfortunately for systemd.manpages this requires to add a
debian/tmp/ prefix to all files.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053834#46
* Restrict pcr/tpm2 related files to UEFI architectures.
Mirrors the python3-pyelftools [amd64 i386 arm64 armhf riscv64]
Build-Depends.
* Install dmi_memory_id and its udev rules file only on dmi architectures.
* Fix stage1 profile build
[ Helmut Grohne ]
* Restore diverted symlinks in systemd-sysv.postinst that may have been lost
due to /usr-merge (Closes: #1057220)
-- Michael Biebl <biebl@debian.org> Sun, 24 Dec 2023 00:52:15 +0100
systemd (255.1-1) experimental; urgency=medium
[ Luca Boccassi ]
* Drop pkgconfig-keep-unmerged-paths-for-udevdir.patch, no longer needed
* New upstream version 255.1
* Refresh patches
[ Michael Biebl ]
* autopkgtest: install systemd-boot-efi for upstream suite.
TEST-70-TPM2 (specifically test/units/testsuite-70.pcrlock.sh) requires
the EFI stub files from /usr/lib/systemd/boot/efi/.
* test: skip tests for unsupported localectl features.
Update the upstream test suite to skip tests for unsupported localectl
features in Debian. Fixes TEST-73-LOCALE.
Thanks to Nick Rosbrook
* Update symbol versions for the final 255 release
* Install systemd and udev files explicitly without duplicates.
Stop making systemd and udev "catch-all" packages and removing duplicate
files in debian/rules by compiling a list of files that are installed by
other systemd binary packages. This approach no longer works reliably
if we have arch "all" binary packages and we do a partial type "any" build.
Instead, list all files that are installed in systemd and udev
explicitly in .install and .manpages.
* Mark usr/lib/sysctl.d/50-pid-max.conf as arch specific.
It's only installed by Meson if cc.sizeof('long') > 4.
See https://wiki.debian.org/ArchitectureSpecificsMemo
* Fix arch "all" builds.
Files handled by debian/rules and dh-exec are not understood by
dh_missing. So mark those as not-installed.
See man dh_missing and
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831786
* Install standalone binaries using dh-exec
* Print empty directories
dh_missing will not fail on uninstalled (empty) directories.
So show them during build as it makes it easier to spot if all of them
are handled.
* Split ukify into a separate package named systemd-ukify.
The main motivation for splitting the tool (and its kernel-install
integration) into a separate package is the dependency on python3 and
python3-pefile, which are not suitable dependencies for the main systemd
package. (Closes: #1051981)
* Make the Conflicts against bfh-container and progress-linux-container
versioned
[ Nick Rosbrook ]
* debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE.
This ensures that testcase_mdadm_lvm in TEST-64-UDEV-STORAGE will run.
* debian/tests/upstream: drop blacklist support.
Upstream has been using deny-list-ubuntu-ci, rather than
blacklist-ubuntu-ci, for a while now. In Ubuntu, we use the
deny-list-upstream-ci convention too. Hence, it seems we can drop
support for the blacklist version.
-- Michael Biebl <biebl@debian.org> Wed, 20 Dec 2023 17:54:00 +0100
systemd (255-1) unstable; urgency=medium
* New upstream version 255. For a full list of changes, see:
https://github.com/systemd/systemd/releases/tag/v255
* Drop seccomp patches, merged upstream
-- Luca Boccassi <bluca@debian.org> Wed, 06 Dec 2023 21:24:09 +0000
systemd (255~rc4-2) unstable; urgency=medium
* Backport patches to fix seccomp issues on armhf/armel/ppc64el
-- Luca Boccassi <bluca@debian.org> Mon, 04 Dec 2023 16:56:42 +0000
systemd (255~rc4-1) unstable; urgency=medium
* New upstream version 255~rc4
-- Luca Boccassi <bluca@debian.org> Sat, 02 Dec 2023 02:16:07 +0000
systemd (255~rc3-3) unstable; urgency=medium
[ Oxan van Leeuwen ]
* Move kernel-install initrd script to earlier prefix. From systemd v255
onwards, the 60-ukify.install script automatically uses initrd files
that are present in the staging area. Move the initrd script to run
earlier, so that ukify can use the initrd. The only third-party
kernel-install script present in the Debian archive is
40-dkms.install, so it is not impacted by this change. Both dracut and
mkinitcpio upstream also ship their script with priority 50.
[ Luca Boccassi ]
* systemd.pc: point unit install directory to /usr/lib/systemd/system/
-- Luca Boccassi <bluca@debian.org> Thu, 30 Nov 2023 21:09:08 +0000
systemd (255~rc3-2) unstable; urgency=medium
* systemd: ignore '_systemctl kill' failures in postinst
-- Luca Boccassi <bluca@debian.org> Wed, 22 Nov 2023 22:23:49 +0000
systemd (255~rc3-1) unstable; urgency=medium
* d/systemd.install: mark pcrlock.d as !stage1. pcrlock configs are only
installed when libtss and libssl are available which is not the case
for stage1 builds, so mark accordingly
* New upstream version 255~rc3
* Drop patches merged upstream
* Refresh patches
* systemd: reexec user manager sessions on upgrade. So far we only
reexec'ed PID1, and ignored user managers, which means bug or security
fixes were not applied for running sessions till the next reboot. Fix
this using 'systemctl kill', which is asynchronous but works even if
the D-Bus user session is not active.
* autopkgtest: install dhcpcd-base for boot-and-services
-- Luca Boccassi <bluca@debian.org> Wed, 22 Nov 2023 21:33:09 +0000
systemd (255~rc2-3) unstable; urgency=medium
[ Michael Biebl ]
* Use canonical paths for scripts in debian/extra. Update scripts for
udev-udeb, initramfs-tools integration scripts and dhclient hook
script to use the new canonical paths in /usr.
[ Luca Boccassi ]
* Bump conflict with molly-guard to 0.8.2. The previous workarounds are
not enough, so a new upload will be needed. (Closes: #1056292)
* Backport patches to fix FTBFS on hppa and x32
-- Luca Boccassi <bluca@debian.org> Mon, 20 Nov 2023 20:58:27 +0000
systemd (255~rc2-2) unstable; urgency=medium
* Add versioned Breaks against dracut.
The introduction of systemd-executor in v255 breaks the initrd that is
generated by dracut. Without systemd-executor, a systemd based initrd
will fail to boot. The dracut package needs to be updated to include
this new binary. (Closes: #1056108)
-- Michael Biebl <biebl@debian.org> Sat, 18 Nov 2023 22:02:39 +0100
systemd (255~rc2-1) unstable; urgency=medium
[ Matthias Geiger ]
* Bump version number for udev.postinst and udev.maintscript
* Fix udev.postinst to preserve the enablement of the init script. When
transferring ownership of the udev init script to sysvinit, the
service was disabled as it didn't check for enablement before calling
update-rc.d. Thanks to Mark Hindley for the original fix. (Closes:
#1053301)
[ Luca Boccassi ]
* New upstream version 255~rc2
* Drop fix-build-without-SBAT_DISTRO.patch, merged upstream
* Refresh patches
* Upload to unstable
-- Luca Boccassi <bluca@debian.org> Wed, 15 Nov 2023 17:10:26 +0000
systemd (255~rc1-4) experimental; urgency=medium
* Add version to Conflict with molly-guard
* Move systemd-hwdb-update.service to udev package. Commit a12cf5d187cb
in 249-1 removed systemd-hwdb-update.service from udev, and 254.4-1
re-added it in systemd, so move it back to udev. (Closes: #1055863)
-- Luca Boccassi <bluca@debian.org> Mon, 13 Nov 2023 13:51:12 +0000
systemd (255~rc1-3) experimental; urgency=medium
* Do not ship repart.standalone and shutdown.standalone
* /usr/lib/sysvinit/telinit was dropped long ago, use /usr/sbin/telinit
* Add Suggests: libip4tc2 as it is now dlopen'ed
* Drop rc/rcS masking, no longer necessary
* Add Conflicts to avoid issues due to DEP17P3. libpam-elogind-compat,
opensysusers, bfh-container, molly-guard, and progress-linux-container
divert files from our packages, so DEP17P3 is triggered. Add
unversioned conflicts until those diversions are updated according to
DEP17M18, and then we can make the conflicts versioned. (Closes:
#1055485)
-- Luca Boccassi <bluca@debian.org> Tue, 07 Nov 2023 15:17:12 +0000
systemd (255~rc1-2) experimental; urgency=medium
* Build-depend on python3-pefile on all architectures ukify
* meson: use enabled/disabled instead of true/false for 'feature'
options
* meson: use canonical paths for configured tools too
-- Luca Boccassi <bluca@debian.org> Mon, 06 Nov 2023 22:36:23 +0000
systemd (255~rc1-1) experimental; urgency=medium
[ Michael Biebl ]
* Update symbol versions for the final 254 release
* Remove mangling of man pages post build trying to fix up paths. With
merged-/usr being mandatory, this is no longer necessary as the paths
will now always point to the correct location.
* Use a drop-in to avoid startup failures of systemd-logind when dbus is
missing. Instead of patching the systemd-logind.service file, use a
drop-in. This way the Debian specific change becomes more visible and
easier to override.
[ Luca Boccassi ]
* New upstream version 255~rc1
* Drop test-skip-test-path-on-Salsa-CI.patch, merged upstream
* Drop Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-back-to-.patch,
no longer necessary
* Refresh patches
* Temporarily keep systemd.pc and udev.pc pointing to legacy unmerged paths.
This will be dropped in the short term, but there are still a lot of
FTBFS when changing, so keep it for now
* systemd/udev: assert that the system is merged-usr. Support for
unmerged system was dropped project-wide. Things will break subtly if
ran on such unsupported setups, so add an explicit assert at preinst.
* Drop deprecated split-usr and install files from /usr
* Install new pam_systemd_loadkey module. If configured, and systemd-
cryptsetup and logind are used, the crypsetup passphrase is passed to
the PAM stack for later authentication steps such as the GNOME
keyring.
* Install the default pcrlock config files
* Update libsystemd0.symbols
* autopkgtest: add dependencies on python3-pefile and nvme-cli for
upstream suite
* Backport patch to fix arm64 cross-build
* Update Lintian overrides
-- Luca Boccassi <bluca@debian.org> Mon, 06 Nov 2023 20:25:25 +0000
systemd (254.5-1) unstable; urgency=medium
* New upstream version 254.5
* Refresh patches for 254.5
-- Luca Boccassi <bluca@debian.org> Sat, 30 Sep 2023 11:34:39 +0100
systemd (254.4-1) unstable; urgency=medium
[ Michael Biebl ]
* Fix installation of tzdata-legacy. Apply a version constraint to the
tzdata alternative. Specifically (<< 2023c-8), which is the version
tzdata was split. Otherwise tzdata-legacy is not considered, as tzdata
is installed by default. (Closes: #1051760)
* Drop obsolete Breaks/Replaces and migration code for versions older
than oldstable
* Drop -f from update-rc.d udev remove
[ Luca Boccassi ]
* upstream-ci: run unit tests from installed location. (Closes: #1051756)
* New upstream version 254.4. Fixes minor security issue in arm64
and riscv64 systemd-boot (EFI) with device tree blobs loading:
https://github.com/systemd/systemd/security/advisories/GHSA-6m6p-rjcq-334c
* Refresh patches
* Install factory-reset related units
[ Gioele Barabucci ]
* debian/udev.debian-udev.sysusers: Add Debian-specific sysusers for
udev
* d/udev.postinst: Do not use addgroup to add udev-related groups
* d/control: Remove adduser, it is no longer needed now that all
udev-related groups are generated via `sd-sysusers`.
-- Luca Boccassi <bluca@debian.org> Thu, 21 Sep 2023 11:13:06 +0100
systemd (254.3-1) unstable; urgency=medium
[ Daniel Andersson ]
* Add systemd-sysupdate.
[ Luca Boccassi ]
* New upstream version 254.2
* Refresh patches for 254.2
* New upstream version 254.3
[ Michael Biebl ]
* Remove obsolete SysV init script. Keep the udev alias for one more
release cycle.
* Use dh_installsystemd to handle systemd-udevd.service. This allows us
to drop a lot of custom maintscript code. Fix the formatting of the
udev maintscript code while at it.
* Add Conflicts against initscripts and orphan-sysvinit-scripts. Those
packages have undesirable side effects if systemd is the active init
system so ensure they can't be installed.
-- Luca Boccassi <bluca@debian.org> Mon, 11 Sep 2023 09:11:51 +0100
systemd (254.1-3) unstable; urgency=medium
[ Nick Rosbrook ]
* debian: ship libsystemd.a in libsystemd-dev.
Thanks to Serge Hallyn
* autopkgtest: add build test for static libsystemd
* debian/rules: build with -ffat-lto-objects.
Building with -flto=auto, but without -ffat-lto-objects, causes static
archives to end up without any code sections. This is needed to ship a
usable libsystemd.a in libsystemd-dev.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977596.
[ Luca Boccassi ]
* Backport patch to fix test-path failure on Salsa CI
[ Michael Biebl ]
* Ask before attaching the udev db information to the bug report
(Closes: #1041652)
* Install D-Bus interface files in systemd-dev.
Now that we have a dedicated -dev package, use that to install
/usr/share/dbus-1/interfaces.
* Clean up a couple more __pycache__ directories
* Remove workarounds for dh_installman.
No longer needed as stable ships a fixed debhelper.
* Remove all empty directories from (/usr)/lib.
This mitigates the accidental empty directory removal by dpkg on
merged-/usr systems. (Closes: #1036920)
* Remove no longer needed maintainer scripts migration code for versions
older then oldstable
* Revert "Add workaround for Meson regression to fix FTBFS on mips64el"
This reverts commit 97ebdcea6d0ce52973dd5a9cfeede1573a628bd0.
No longer needed as a fixed meson package is available now.
-- Michael Biebl <biebl@debian.org> Fri, 25 Aug 2023 12:04:10 +0200
systemd (254.1-2) unstable; urgency=medium
* Build-depend on tzdata-legacy | tzdata. Some timezones were split out,
but some unit tests need them, so pull in the new tzdata-legacy
package if it exists.
-- Luca Boccassi <bluca@debian.org> Thu, 10 Aug 2023 23:31:48 +0100
systemd (254.1-1) unstable; urgency=medium
[ Luca Boccassi ]
* systemd-userdbd: depend on libnss-systemd. This library provides nss
integration for userdbd/homed and is needed for homed logins
* New upstream version 254.1
* Refresh patches for v254.1
* systemd: do not ship empty .wants/ directories. These will conflict
with finalizing usrmerge as they are in /lib, so remove them for now.
systemctl enable creates them anyway when needed.
[ Helmut Grohne ]
* duplicate udev trigger interest for /usr-merge. As packages move their
files from / to /usr, dpkg will cease activating udev's trigger
interest for hwdb.d files. In DEP17, this is documented as P2. Since
there are only two packages in Debian affected by this issue, we opt
for an individual mitigation and explicitly duplicate the trigger
interest to both locations (M12). This is safe regardless of the other
chosen mitigations as trigger activations are accumulated.
-- Luca Boccassi <bluca@debian.org> Thu, 10 Aug 2023 21:41:13 +0100
systemd (254-1) unstable; urgency=medium
* New upstream version 254
* Drop patches merged upstream
* d/watch: switch back to stable repository
* Refresh patches
-- Luca Boccassi <bluca@debian.org> Fri, 28 Jul 2023 10:01:15 +0100
systemd (254~rc3-3) unstable; urgency=low
* Backport patch to fix FTBFS on armhf
* Add workaround for Meson regression to fix FTBFS on mips64el
-- Luca Boccassi <bluca@debian.org> Mon, 24 Jul 2023 20:50:48 +0100
systemd (254~rc3-2) unstable; urgency=medium
* ukify: enable only on UEFI architectures.
-- Luca Boccassi <bluca@debian.org> Mon, 24 Jul 2023 16:55:57 +0100
systemd (254~rc3-1) unstable; urgency=low
* Drop Suggests on transitional policykit-1 package
* Drop autopkgtest dependency on transitional policykit-1 package
* Ship ukify in systemd package (Closes: #1041399)
* New upstream version 254~rc3 (Closes: #1041648, #1041540)
* Drop patches merged upstream
* Refresh patches
-- Luca Boccassi <bluca@debian.org> Mon, 24 Jul 2023 12:59:37 +0100
systemd (254~rc2-3) unstable; urgency=low
* Upload to unstable
-- Luca Boccassi <bluca@debian.org> Sun, 16 Jul 2023 11:37:22 +0100
systemd (254~rc2-2) experimental; urgency=medium
* Backport two more mips64 fixes from upstream
-- Luca Boccassi <bluca@debian.org> Sat, 15 Jul 2023 15:07:20 +0100
systemd (254~rc2-1) experimental; urgency=medium
[ Luca Boccassi ]
* Bump dependency on Meson to 0.60
* upstream-ci: install libdw and libelf for boot-and-services too.
* upstream-ci: add libssl-dev to autopkgtest upstream suite.
* upstream-ci: add nftables.
* upstream-ci: add 'stress' to the upstream testsuite dependency list.
* tests/upstream: install curl.
* tests/upstream: bump timeout by 10 minutes.
* New upstream version 254~rc2
* Drop patches merged upstream
* Refresh patches for v254-rc2
[ Yu Watanabe ]
* autopkgtest: create directory to make accounts-daemon.service not
fail. The service requires /usr/share/accountsservice/interfaces, but
the directory is not packaged (at least in 22.08.8-6). This adds a
workaround for the failure.
-- Luca Boccassi <bluca@debian.org> Sat, 15 Jul 2023 01:29:39 +0100
systemd (254~rc1-4) experimental; urgency=medium
* Backport patches to fix FTBFS on mipsel, ia64, x32
* d/rules: explicitly disable EFI on x32. On x32 the cpu architecture is
just x86_64 so EFI will be enabled, and it will fail to build as
userland doesn't support building the EFI ABI. Disable it explicitly,
and leave it on 'auto' elsewhere.
-- Luca Boccassi <bluca@debian.org> Sun, 09 Jul 2023 15:13:53 +0100
systemd (254~rc1-3) experimental; urgency=medium
* Restrict pyelftools to UEFI-enabled architectures and drop explicit
meson settings.
-- Luca Boccassi <bluca@debian.org> Sat, 08 Jul 2023 00:40:33 +0100
systemd (254~rc1-2) experimental; urgency=medium
* Backport patch to fix fuzz test without cgroup access. Fix build on
buildds https://github.com/systemd/systemd/pull/28303
-- Luca Boccassi <bluca@debian.org> Fri, 07 Jul 2023 22:55:16 +0100
systemd (254~rc1-1) experimental; urgency=medium
[ Luca Boccassi ]
* d/watch: watch main repository
* New upstream version 254~rc1
* Refresh patches for v254-rc1
* Drop build dependency on gnu-efi and add python3-pyelftools. Move to
!stage1 given it's external python modules
* Install new libsystemd.3 manpage
* Install new mount.ddi alias for sd-dissect
* Update symbols file for 254
* Update Lintian overrides for systemd-tests
* autopkgtest: find test-udev in new location.
[ Zbigniew Jędrzejewski-Szmek ]
* autopkgtest: drop 'udev' test
https://github.com/systemd/systemd/pull/27534 makes it into a normal
unit test, so it will be invoked as part of 'upstream'.
-- Luca Boccassi <bluca@debian.org> Fri, 07 Jul 2023 11:05:37 +0100
systemd (253.5-1) unstable; urgency=medium
* New upstream version 253.5 (Closes: #1040035)
* Refresh patches for 253.5
-- Luca Boccassi <bluca@debian.org> Sat, 01 Jul 2023 11:57:46 +0100
systemd (253-4) unstable; urgency=medium
* Stop localed from writing to /etc/default/keyboard and symlink it to
/etc/vconsole.conf. Integration is not set up for now, but GDM needs
to query the configured values. Allow reading, but disallow setting
keymaps. (Closes: #1038762)
-- Luca Boccassi <bluca@debian.org> Sat, 24 Jun 2023 20:21:24 +0100
systemd (253-3) unstable; urgency=medium
* systemd-dev: add missing breaks/replaces with udev. (Closes: #1037924)
* Run the systemd-binfmt trigger unconditionally.
* Upload to unstable.
-- Luca Boccassi <bluca@debian.org> Tue, 20 Jun 2023 11:45:22 +0100
systemd (253-2) experimental; urgency=medium
* Add systemd-dev package for pkg-config files. Move systemd.pc and
udev.pc to systemd-dev, so that packages can build-depend on a small
package instead of the whole set of binaries. (Closes: #945922,
#917549)
-- Luca Boccassi <bluca@debian.org> Mon, 12 Jun 2023 00:22:52 +0100
systemd (253-1) experimental; urgency=medium
* New upstream version 253. For a full list of changes, see:
https://github.com/systemd/systemd/releases/tag/v253
* d/watch: switch back to stable repository.
* Update symbols file
-- Luca Boccassi <bluca@debian.org> Wed, 15 Feb 2023 20:36:32 +0000
systemd (253~rc3-1) experimental; urgency=medium
* New upstream version 253~rc3
* Refresh patches
-- Luca Boccassi <bluca@debian.org> Fri, 10 Feb 2023 18:23:21 +0000
systemd (253~rc2-1) experimental; urgency=medium
* New upstream version 253~rc2
* systemd: make /etc/default/locale a symlink to /etc/locale.conf. Let's
match upstream's filename and keep a backward-compatibility symlink
for older tools. The content of the files match anyway.
* Update timedated autopkgtest. We no longer support /etc/timezone, as
/etc/localtime is always available
* Drop patches merged upstream
* Drop Don-t-enable-audit-by-default.patch. We can disable the socket
now
* Drop Use-Debian-specific-config-files.patch, no longer needed
* systemd-boot-system-token was renamed to systemd-boot-random-seed
* Add new libsystemd symbols
* Update Lintian override for new so bump
* Remove systemd-localed drop-in, no longer needed. The change was
merged upstream
* Drop udev-drop-SystemCallArchitectures-native-from-systemd-ude.patch
and use a drop-in
* Drop Re-enable-journal-forwarding-to-syslog.patch and use a drop-in
* Drop TuxOnIce out-of-tree patch. The
SYSTEMD_BYPASS_HIBERNATION_MEMORY_CHECK environment variable can be
used to skip the check, so it is no longer necessary to maintain a
patch.
* Drop autopkgtest denylist patches. No longer needed, the tests are
working now
* Drop Revert-core-set-RLIMIT_CORE-to-unlimited-by-default.patch, we now
use the unified hierarchy
* Drop Let-graphical-session-pre.target-be-manually-started.patch, not
used anymore
* Refresh patches
* Do not install repart/shutdown standalone binaries
* Build with libxen-dev. Buildtime-only dependency, enables support for
kexec on Xen (via ioctl, so no new runtime dependency).
* Do not install ukify script for now
* Update NEWS file
* locale: disable keymap support
* d/watch: use main repository
* Refresh patches
-- Luca Boccassi <bluca@debian.org> Wed, 08 Feb 2023 20:36:58 +0000
systemd (252.11-1) unstable; urgency=medium
* New upstream version 252.11
* Refresh patches
-- Luca Boccassi <bluca@debian.org> Sun, 11 Jun 2023 23:05:40 +0100
systemd (252.6-1) unstable; urgency=medium
* Update timedated autopkgtest. We no longer support /etc/timezone, as
/etc/localtime is always available (cherry picked from commit
6ef7bb0ce0f89e732a8b95624af059e52c3712b5)
* Stop supporting /etc/timezone and just rely on /etc/localtime
* systemd-boot: update on package upgrade, if installed
* Override Lintian warning in systemd-coredump
* d/watch: restrict to v252.x for bookworm
* New upstream version 252.6
* Refresh patches
* systemd-boot: enable on install (Closes: #1031118)
-- Luca Boccassi <bluca@debian.org> Tue, 28 Feb 2023 11:15:45 +0000
systemd (252.5-2) unstable; urgency=medium
* Fix boot-and-services autopkgtest.
-- Luca Boccassi <bluca@debian.org> Mon, 30 Jan 2023 01:03:48 +0000
systemd (252.5-1) unstable; urgency=medium
[ Nick Rosbrook ]
* debian/tests: remove systemd-fsckd autopkgtest. This test never runs
in Debian autopkgtest because of missing machine isolation
requirements, and it nevers runs in Ubuntu because: SKIP: root file
system is being checked by initramfs already Since the test is not
providing any good feedback, and generally has not been maintained,
let's just remove it.
[ Luca Boccassi ]
* New upstream version 252.5
* Drop patches merged in v252.5
* Refresh patches
* Set default status format to 'combined': show both unit name and
description in logs/boot messages
-- Luca Boccassi <bluca@debian.org> Sun, 29 Jan 2023 19:39:28 +0000
systemd (252.4-2) unstable; urgency=medium
[ Michael Biebl ]
* Refresh patches
* Tweak description of systemd and systemd-sysv package.
Remove redundancy and de-emphasize sysvinit.
* autopkgtest: add psmsic to upstream suite.
Needed for the killall binary.
See https://github.com/systemd/systemd/pull/24569
* autopkgtest: add xkb-data, locales and locales-all to upstream suite.
Use locales-all so all necessary locales can be installed into the test
image without having to generate them on-the-fly.
See https://github.com/systemd/systemd/pull/23709
* autopkgtest: prefer knot-dnssecutils over knot-dnsutils for upstream
suite.
The kzonecheck utility required by TEST-75-RESOLVED was split out from
knot-dnsutils into knot-dnssecutils so update the test dependencies
accordingly. Keep knot-dnsutils as alternative dependency to make
backports easier.
* Cherry-pick upstream fixes for TEST-74-AUX-UTILS
* Cherry-pick upstream fix for TEST-73-LOCALE
* Skip firstboot --prompt-keymap check in TEST-74-AUX-UTILS.
This test requires compatible keymaps from kbd which are not available
in Debian.
[ Luca Boccassi ]
* autopkgtest: add netlabel-tools to networkd-test.py suite.
The netlabelctl tool is needed to test the NetLabel integration.
See https://github.com/systemd/systemd/pull/23888
* autopkgtest: add bsdutils to upstream suite.
The logger utility is now used in TEST-04-JOURNAL.
See https://github.com/systemd/systemd/pull/23086
* autopkgtest: add knot, knot-dnsutils, bind9-dnsutils, bind9-host to
upstream suite.
Needed by TEST-75-RESOLVED.
See https://github.com/systemd/systemd/pull/23104
* autopkgtest: add jq to upstream suite.
Needed by TEST-58-REPART.
See https://github.com/systemd/systemd/pull/24572
* autopkgtest: add mtools to upstream suite.
Needed by TEST-58-REPART.
See https://github.com/systemd/systemd/pull/24944
* autopkgtest: add erofs-utils to upstream suite.
Needed by TEST-58-REPART.
See https://github.com/systemd/systemd/pull/25686
-- Michael Biebl <biebl@debian.org> Wed, 25 Jan 2023 09:17:24 +0100
systemd (252.4-1) unstable; urgency=medium
* Enable p11kit. Backport patch to dlopen-ify p11kit support and enable
it. (Closes: #1023635)
* New upstream version 252.4. (Closes: #1026831 and fixes CVE-2022-4415)
* Refresh patches
* Bump Standards-Version to 4.6.2, no changes
-- Luca Boccassi <bluca@debian.org> Thu, 22 Dec 2022 12:26:41 +0100
systemd (252.3-2) unstable; urgency=medium
* Skip flaky test_resolved_domain_restricted_dns in networkd-test.py.
This test is part of DnsmasqClientTest and does not work reliably under
LXC/debci, so skip it for the time being. (Closes: #1025908)
-- Michael Biebl <biebl@debian.org> Tue, 13 Dec 2022 01:03:58 +0100
systemd (252.3-1) unstable; urgency=medium
* New upstream version 252.3
* Rebase patches
-- Michael Biebl <biebl@debian.org> Sat, 10 Dec 2022 20:14:11 +0100
systemd (252.2-2) unstable; urgency=medium
* Keep policykit-1 as alternative dependency to polkitd for systemd.
This will make backports easier.
* Update remaining policykit-1 (test) dependencies and prefer polkitd.
Keep the policykit-1 dependency as alternative for easier backports.
(Closes: #1025591)
-- Michael Biebl <biebl@debian.org> Tue, 06 Dec 2022 20:30:29 +0100
systemd (252.2-1) unstable; urgency=medium
[ Helmut Grohne ]
* Explicitly B-D on libcrypt-dev (Closes: #1024646)
[ Nick Rosbrook ]
* Add handling for /etc/default/locale to firstboot. The TEST-74-AUX-
UTILS upstream test revealed that firstboot does not currently handle
Debian's /etc/default/locale.
[ Luca Boccassi ]
* Build depend on dh-package-notes, sequence was removed. Only the
makefile is in use now, no files are generated at build time as
--package-metadata from the linkers is used now
* New upstream version 252.2
* Refresh patches
-- Luca Boccassi <bluca@debian.org> Mon, 28 Nov 2022 22:35:56 +0000
systemd (252.1-1) unstable; urgency=medium
* d/watch: switch back to stable repository
* New upstream version 252.1 (Closes: #1023607 #1023515)
* Drop patches merged upstream
* Refresh patches
* Suggest polkitd instead of policykit-1 (deprecated)
-- Luca Boccassi <bluca@debian.org> Tue, 08 Nov 2022 14:23:22 +0000
systemd (252-3) unstable; urgency=medium
* Backport patches to fix tmpfiles error and missing /dev/serial/by-
id/usb-* (Closes: #1023311)
* Drop :native suffix from python3-pyparsing build dependency (Closes:
#1023442)
* Enable support for libqrencode. dlopen() feature so no additional cost.
Allows printing out recovery keys in QR format.
-- Luca Boccassi <bluca@debian.org> Sun, 06 Nov 2022 14:16:52 +0000
systemd (252-2) unstable; urgency=medium
[ Jochen Sprickerhof ]
* Let dh_installsysusers fix the /var/log/journal permissions.
dh_installsysusers adds a systemd-sysusers in #DEBHELPER#. Otherwise
it fails with: /usr/lib/tmpfiles.d/systemd.conf:28: Failed to resolve
group 'systemd-journal'. Regression of fa0aade329. (Closes: #1023248)
* Move restarting units after #DEBHELPER#. This makes sure that systemd-
sysusers was executed as well as systemd-tmpfiles to setup proper
permissions for /var/log/journal before systemd-journald is being
restarted.
-- Luca Boccassi <bluca@debian.org> Tue, 01 Nov 2022 12:06:18 +0000
systemd (252-1) unstable; urgency=medium
* Use systemd-sysusers to setup systemd users and groups
* New upstream version 252
* Drop patches merged upstream
* libsystemd0: set symbols version to 252
* Drop unused lintian override
-- Luca Boccassi <bluca@debian.org> Mon, 31 Oct 2022 22:02:43 +0000
systemd (252~rc3-2) unstable; urgency=medium
* Upload to unstable.
-- Luca Boccassi <bluca@debian.org> Thu, 27 Oct 2022 15:24:32 +0100
systemd (252~rc3-1) experimental; urgency=medium
* New upstream version 252~rc3
* Refresh patches
* Backport patches to fix tests without machine-id. Drop out-of-tree
patch and backport upstream fixes.
-- Luca Boccassi <bluca@debian.org> Tue, 25 Oct 2022 01:30:02 +0100
systemd (252~rc2-1) experimental; urgency=medium
[ Jan Kiszka ]
* Enable systemd-boot for riscv64. Tested against U-Boot 2022.10 as UEFI
provider on the RZ/Five. Signed-off-by: Jan Kiszka
<jan.kiszka@siemens.com>
[ Helmut Grohne ]
* Conditionalize installation of cryptsetup plugins in stage1 using dh-
exec (Closes: #1021821)
[ Michael Biebl ]
* Install sysusers.d and tmpfiles.d man pages in standalone packages
(Closes: #1021933)
[ Luca Boccassi ]
* d/watch: switch to non-stable repo
* New upstream version 252~rc2
* Drop patches merged upstream
* Refresh patches
* Update symbols file
* Update Lintian overrides
* autopkgtest: update expected output of localectl
-- Luca Boccassi <bluca@debian.org> Sat, 22 Oct 2022 01:10:00 +0100
systemd (251.6-1) unstable; urgency=medium
* New upstream version 251.6
* Rebase patches
* Use dh_installsystemd to enable machines.target in systemd-container
-- Michael Biebl <biebl@debian.org> Fri, 14 Oct 2022 16:34:00 +0200
systemd (251.5-3) unstable; urgency=medium
* Update symbol versions for the v251 release
* ata_id: fix getting Response Code from SCSI Sense Data (Closes: #1021579)
* logind: do not emit beep in wall messages (Closes: #1019510)
* logind: remember our idle state and use it to detect idle level
transitions (Closes: #963135)
* logind: fix getting property OnExternalPower via D-Bus (Closes: #1021644)
-- Michael Biebl <biebl@debian.org> Wed, 12 Oct 2022 17:01:05 +0200
systemd (251.5-2) unstable; urgency=medium
[ Luca Boccassi ]
* Build and install libcryptsetup token plugins.
The interfaces are now mature and enabled in Debian/Ubuntu in
libcryptsetup, so enable and ship the plugins
[ Michael Biebl ]
* salsa-ci: drop no longer needed workaround for lintian false positives
* udev: fix regression in udev-builtin path_id when processing NVME devices
(Closes: #1021547)
[ наб ]
* systemd-sysv.postinst: which -> command -v
-- Michael Biebl <biebl@debian.org> Tue, 11 Oct 2022 00:51:55 +0200
systemd (251.5-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 251.5
* Install NEWS.Debian file into all binary packages.
While it increases the disk footprint a little, it ensures that NEWS
entries are reliably shown by apt-listchanges.
* Handle removal of /var/log/README.
Remove /var/log/README symlink when the systemd package is purged.
This symlink is created via tmpfiles and documents that /var/log no
longer contains the traditional syslog text files. (Closes: #877414)
* Rebase patches
[ наб ]
* debian/extra/kernel/postinst.d/systemd-boot: prefix with zz-
Since we explicitly (though this is hidden by indirection through
85-initrd.install) depend on /boot/initrd.img-$1 existing or not existing,
hard-order ourselves at the end. The zz- prefix matches grub.
* debian/extra/kernel-install.d/85-initrd.install: install default initrd
with versioned basename.
This fixes #1020396 in a superior way by using
$KERNEL_INSTALL_STAGING_AREA, available since systemd v251.
By just copying the file we both simplify our code, but defer to
90-loaderentry to correctly permission it, and simply never generate an
unversioned initrd in the first place! (Closes: #1020396)
* debian/extra/kernel-install.d/85-initrd.install: explicitly ignore unknown
verbs
* debian/extra/kernel/postrm.d/systemd-boot: prefix with zz-
Doesn't actually matter, but the kernel handbook says we must and we
already renamed postinst. (Closes: #1014581)
[ Luca Boccassi ]
* Enable firstboot, disabled by default on Debian.
Currently the first-boot conditions are not met by any Debian
image (/etc/machine-id with content uninitialized, so we can
just enable the build and ship it in the main package.
This lets image builders (eg: cloud images) tinker with it.
https://www.freedesktop.org/software/systemd/man/machine-id.html#First%20Boot%20Semantics
(Closes: #844528)
-- Michael Biebl <biebl@debian.org> Sun, 02 Oct 2022 21:23:49 +0200
systemd (251.4-3) unstable; urgency=medium
* resolv.conf: take backup as a fallback in case resolved/resolv.conf
is not available, and restore on uninstall, which is necessary for
piuparts checks.
-- Luca Boccassi <bluca@debian.org> Sat, 27 Aug 2022 22:39:04 +0100
systemd (251.4-2) unstable; urgency=medium
[ Johannes Schauer Marin Rodrigues ]
* use systemd-sysusers instead of adduser. This allows dropping the
dependency on adduser (reducing the dependency set) and in turn allows
for DPKG_ROOT support of systemd.
* debian/systemd.postinst: add --root argument to systemctl and
systemd-* calls for DPKG_ROOT support
[ Luca Boccassi ]
* resolved: use DPKG_ROOT and make postinst shellcheck-happy
* resolved: switch from .links to postinst/rm
* Update Lintian overrides for new incompatible syntax
-- Luca Boccassi <bluca@debian.org> Fri, 26 Aug 2022 23:16:23 +0100
systemd (251.4-1) unstable; urgency=medium
* New upstream version 251.4
* Rebase patches
* Rebuild against fixed dh-nss to avoid duplicates in /etc/nsswitch.conf
(Closes: #1017096)
-- Michael Biebl <biebl@debian.org> Sun, 14 Aug 2022 20:06:18 +0200
systemd (251.3-2) unstable; urgency=medium
[ Luca Boccassi ]
* libnss-systemd: also let userdbd manage passwords.
As of upstream commit:
https://github.com/systemd/systemd/commit/f43a19ecd6e3415e
in v249 userdbd can also synthesize shadow/gshadow records,
so add the shadow config to nsswitch.conf on installation.
(Closes: #1004326)
* homed: make PAM rules higher priority than unix users.
Make sure homed is tried first when logging in. This is required
after adding nss-systemd support for 'shadow' in /etc/nsswitch.conf.
See Arch bug: https://bugs.archlinux.org/task/72967
[ Gioele Barabucci ]
* d/control: Use dh_installnss
* d/libnss-myhostname.nss: Install NSS service `myhostname` via dh_installnss
* d/libnss-mymaschines.nss: Install NSS service `mymaschines` via dh_installnss
* d/libnss-resolve.nss: Install NSS service `resolve` via dh_installnss
* d/libnss-systemd.nss: Install NSS service `systemd` via dh_installnss
-- Michael Biebl <biebl@debian.org> Fri, 12 Aug 2022 19:06:38 +0200
systemd (251.3-2~exp2) experimental; urgency=medium
* Note in systemd.NEWS that resolved has moved to a new package
* systemd-resolved: move conffile from systemd. Copied from systemd-
timesyncd
-- Luca Boccassi <bluca@debian.org> Sun, 07 Aug 2022 00:06:03 +0100
systemd (251.3-2~exp1) experimental; urgency=medium
* Split systemd-resolved into its own package which takes over
/etc/resolv.conf (Closes: #939904)
-- Luca Boccassi <bluca@debian.org> Thu, 04 Aug 2022 14:55:48 +0100
systemd (251.3-1) unstable; urgency=medium
* New upstream version 251.3
* Rebase patches
-- Michael Biebl <biebl@debian.org> Wed, 13 Jul 2022 23:05:40 +0200
systemd (251.2-8) unstable; urgency=medium
* autopkgtest: install openssl for upstream test.
Install openssl explicitly and do not rely on other packages, like
swtpm-libs, to pull this dependency for us.
Used by TEST-50-DISSECT, which otherwise just silently skips the test.
* Add versioned dependency on init-system-helpers to systemd-homed.
Ensure that we have a version of deb-systemd-helper which properly
handles loops in Also= dependencies. (Closes: #1014115)
* Demote shlibs dependencies of libsystemd0 from Pre-Depends to Depends.
As systemctl, which is quasi-essential, no longer links against
libsystemd0, we do not need those strict requirements anymore.
* Work around some more dh_installman issues
-- Michael Biebl <biebl@debian.org> Wed, 06 Jul 2022 21:23:38 +0200
systemd (251.2-7) unstable; urgency=medium
[ Luca Boccassi ]
* sd-boot: add kernel hooks scripts
[ Andrea Pappacoda ]
* sd-boot: add initramfs hook (Closes: #826045)
[ Michael Biebl ]
* sd-boot: exit early in initramfs and kernel hook scripts if package is
removed but not purged
* Do not fail with older binutils.
Test if the linker supports --no-warn-execstack and --no-warn-rwx-segments
before using those flags. (Closes: #1013967)
-- Michael Biebl <biebl@debian.org> Tue, 28 Jun 2022 14:33:37 +0200
systemd (251.2-6) unstable; urgency=medium
[ Helmut Grohne ]
* Mark systemd-userdbd and systemd-homed as !stage1 (Closes: #1012738)
[ Luca Boccassi ]
* Remove unused Lintian overrides
* Stop overriding the build directory name.
We don't do a separate udeb build anymore, so there's no need
to specify a separate build directory.
* Use execute_before_/after_ instead of override_
* Add nodoc profile support.
Co-authored-by: Michael Biebl <biebl@debian.org>
[ Michael Biebl ]
* Do not fail EFI build with newer binutils (Closes: #1013482)
* shared/microhttp-util: silence gcc warning
* Clarify NEWS message about systemd-boot split (Closes: #1013340)
-- Michael Biebl <biebl@debian.org> Fri, 24 Jun 2022 10:12:34 +0200
systemd (251.2-5) unstable; urgency=medium
* Tweak description of systemd-homed package
* Move shlibs dependencies of libsystemd-shared from Pre-Depends to Depends
(Closes: #1012637)
* Add versioned Breaks against sicherboot for the systemd-boot split
(Closes: #1012625)
* Drop old Conflicts against hal from udev.
The hal package has been gone for several release cycles, so this
Conflicts should not be necessary anymore.
-- Michael Biebl <biebl@debian.org> Fri, 10 Jun 2022 23:51:50 +0200
systemd (251.2-4) unstable; urgency=medium
* Use try-restart in systemd-binfmt dpkg trigger
* Fix bashism in kernel-install
* Upload to unstable
-- Michael Biebl <biebl@debian.org> Fri, 10 Jun 2022 09:16:48 +0200
systemd (251.2-3) experimental; urgency=medium
[ Luca Boccassi ]
* Add systemd-userdbd package. This can be used to synthetize dynamic
user/groups, and can be useful by itself. It will also be used by
homed.
* Add systemd-homed package (Closes: #976960)
* Add systemd-boot-efi multiarch package. Allows EFI binaries for
different architectures to be co-installed. Useful when the EFI has a
different architecture, or to manipulate images. The userspace tooling
doesn't need to match the EFI binaries. Also allows one to reduce the
number of packages and dependencies needed when i386 is not a full
architecture, but a subset for libraries and for EFI support.
[ Michael Biebl ]
* Move homectl and userdbctl to /usr/bin
* Install libsystemd-shared into rootpkglibdir
* Split out libsystemd-shared into its own package. Since libsystem-
shared is an internal implementation detail, do not generate a shlibs
file for it. This means dh_shlibdeps needs to be told explicitly where
it can find libsystemd-shared. Mark this new package as Multi-Arch:
same. (Closes: #990547)
* Split out systemd-boot into its own package
* Add NEWS entry for the systemd-boot package split
-- Luca Boccassi <bluca@debian.org> Wed, 08 Jun 2022 23:56:04 +0100
systemd (251.2-2) unstable; urgency=medium
* sha256: fix compilation on efi-ia32
-- Michael Biebl <biebl@debian.org> Sat, 04 Jun 2022 00:14:28 +0200
systemd (251.2-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 251.2
- logind: do not print wall messages to local pseudoterminals
(Closes: #1012155)
* Rebase patches
* Fix parsing of command line options in fsckd (Closes: #1009032)
* Do not require a valid version when parsing sd-boot loader entries
(Closes: #993292)
* Add dpkg file trigger for systemd-binfmt to update binfmt registrations
* Use a single NEWS file shipped in the main systemd package
[ Luca Boccassi ]
* autopkgtest: add cryptsetup-initramfs for upstream suite.
Needed for https://github.com/systemd/systemd/pull/23517
-- Michael Biebl <biebl@debian.org> Fri, 03 Jun 2022 19:37:06 +0200
systemd (251.1-1) unstable; urgency=medium
[ Luca Boccassi ]
* Switch from gnutls to openssl. Upstream is slowly phasing out gnutls.
Start switching to openssl. Drops support for '--trust' in the
journal-gatewayd and journal-remote programs.
* New upstream version 251.1
* Add systemd-journal-remote.NEWS to inform about dropping --trust
[ Michael Biebl ]
* Enable pager Hyperlink ANSI sequence support. This requires less ≥
563. Add a versioned Breaks accordingly.
* Drop unnecessary version constraints / dependencies
* Update liblz4-dev Build-Depends as per meson.build
-- Luca Boccassi <bluca@debian.org> Thu, 26 May 2022 00:58:46 +0100
systemd (251-2) unstable; urgency=medium
* Salsa CI: suppress lintian false positive on dbgsym.
* Upload to unstable.
-- Luca Boccassi <bluca@debian.org> Mon, 23 May 2022 12:30:28 +0100
systemd (251-1) experimental; urgency=medium
* New upstream version 251. For a full list of changes, see:
https://github.com/systemd/systemd/releases/tag/v251
* Refresh patches
* Revert manual removal of ndisc test case, merged upstream
* Bump Standards-Version to 4.6.1, no changes
-- Luca Boccassi <bluca@debian.org> Sat, 21 May 2022 15:04:13 +0100
systemd (251~rc3-2) experimental; urgency=medium
* Backport removal of ndisc test case, breaks build on armhf/armel.
-- Luca Boccassi <bluca@debian.org> Mon, 16 May 2022 00:37:36 +0100
systemd (251~rc3-1) experimental; urgency=medium
* autopkgtest: add allow-stderr to boot-and-services. Sometimes we see
some ignored logs, don't fail the test run if that happens
* autopkgtest: disable networkd in rebooting tests. It seems that on
Semaphore CI, running in Bullseye images, having both Network-Manager
and systemd-networkd enabled causes 'systemctl start network-
online.target' to get stuck, and fail the run. Disable networkd in
those tests. See: https://github.com/systemd/systemd/issues/22991
* autopkgtest: mark networkd-test.py as breaks-testbed. It will modify
the network configuration, which will often make the network stop
working. Mark it as breaks-testbed so that a new runner is started.
* autopkgtest: ignore rng-tools-debian failure in boot-and-services. It
seems sometimes it fails, which has happened on jammy-amd64:
https://bugs.debian.org/969568
* New upstream version 251~rc3
* Drop sd-device-always-translate-sysname-to-sysfs-filename.patch,
merged upstream
* Rebase patches
* Update lintian-overrides for false positives
-- Luca Boccassi <bluca@debian.org> Sun, 15 May 2022 14:11:49 +0100
systemd (251~rc2-2) experimental; urgency=medium
* sd-device: always translate sysname to sysfs filename
-- Michael Biebl <biebl@debian.org> Wed, 11 May 2022 15:26:49 +0200
systemd (251~rc2-1) experimental; urgency=medium
* New upstream version 251~rc2
* Rebase patches
* Update symbols file for libsystemd0
-- Michael Biebl <biebl@debian.org> Thu, 05 May 2022 22:50:15 +0200
systemd (251~rc1-3) experimental; urgency=medium
[ Luca Boccassi ]
* autopkgtest: install swtpm and tpm2-tools for upstream suite.
Required by https://github.com/systemd/systemd/pull/22563
[ Michael Biebl ]
* Do not ship /usr/lib/tmpfiles.d/systemd-resolve.conf in systemd.
It potentially creates a broken symlink if systemd-resolved is not
enabled. For now the symlink to stub-resolv.conf needs to be created
manually. (Closes: #1007018)
* hwdb: fix parsing options (Closes: #1008989)
-- Michael Biebl <biebl@debian.org> Tue, 05 Apr 2022 22:13:09 +0200
systemd (251~rc1-2) experimental; urgency=medium
[ Michael Biebl ]
* Revert "Ignore libsystemd-core in dh_shlibdeps"
This reverts commit c1d5ad5ac989376aa8100dea9ad9d7af0f0408d9.
We need the shlibs dependencies of libsystemd-shared and
libsystemd-core.
* Adjust library search path for dh_shlibdeps.
libsystemd-core uses libsystemd-shared but doesn't have RUNPATH or
RPATH set. So tell dh_shlibdeps where it can find the library.
[ Luca Boccassi ]
* autopkgtest: update unit-config test for new relative symlinking.
Required by https://github.com/systemd/systemd/pull/22649
* autopkgtest: install libnss packages for unit-tests suite.
Required to enable nss tests:
https://github.com/systemd/systemd/issues/21975
* autopkgtest: install libnss packages for upstream suite.
Required to enable nss tests:
https://github.com/systemd/systemd/issues/21975
* autopkgtest: install python3-pexpect and screen for upstream suite.
Required for new test:
https://github.com/systemd/systemd/pull/21838
-- Michael Biebl <biebl@debian.org> Sat, 02 Apr 2022 13:44:14 +0200
systemd (251~rc1-1) experimental; urgency=medium
[ Michael Biebl ]
* New upstream version 251~rc1
* Rebase patches
* Update symbols file for libsystemd0
* Install shell completions for oomctl in systemd-oomd
[ Luca Boccassi ]
* Ignore libsystemd-core in dh_makeshlibs
* Ignore libsystemd-core in dh_shlibdeps
* Add libsystemd-core to shlibs.local.in
-- Michael Biebl <biebl@debian.org> Sat, 02 Apr 2022 09:57:22 +0200
systemd (250.4-1) unstable; urgency=medium
[ Dimitri John Ledkov ]
* udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
[ Luca Boccassi ]
* Build with dh_package_notes
* New upstream version 250.4
* Drop patches merged upstream
* Remove unneeded ${shlibs:Depends}
* autopkgtest: add libdw-dev to unit-tests job.
* Rebase patches on top of v250.4
-- Luca Boccassi <bluca@debian.org> Tue, 15 Mar 2022 11:03:08 +0000
systemd (250.3-2) unstable; urgency=medium
[ Yu Watanabe ]
* upstream-ci: logind test: use drop-in config
* upstream-ci: logind test: also show logs of systemd-suspend.service
* upstream-ci: logind test: make sure the fake lid switch processed by
udevd. Also, wait for other uevents, which possibly triggered by the
lid switch, being processed.
* upstream-ci: logind test: fix drop-in config.
[ Luca Boccassi ]
* Add myself to Uploaders
* systemd-tests: ignore hardening-no-relro too. Test binaries, we don't
care about hardening flags
* Backport patches to fix build reproducibility. EFI binaries have the
path embedded which breaks reproducibility, backport patches from
upstream to fix it.
[ Michael Biebl ]
* Add Recommends: dbus-user-session to libpam-systemd. For a fully
functioning systemd --user instance we want dbus-user-session
installed.
* Report status of dbus-user-session in systemd reportbug template. Most
users will likely file bugs for systemd --user related issues against
the main systemd package and not libpam-systemd.
-- Luca Boccassi <bluca@debian.org> Wed, 26 Jan 2022 23:35:36 +0000
systemd (250.3-1) unstable; urgency=medium
[ Luca Boccassi ]
* Update d/copyright listing for debian/*
Fixes Lintian warning: update-debian-copyright
* d/copyright: remove unused GPL-2 stanza
* d/watch: bump to version 4
* d/control: drop redundant Section/Priority fields.
Fixes Lintian warning: installable-field-mirrors-source
* d/control: extend descriptions of libudev and libsystemd
* systemd-oomd: add dependency on adduser.
Needed by postinst script.
* systemd-oomd: fix description-synopsis-starts-with-article Lintian warning
* systemd-standalone-*: copy manpages too
* Lintian: ignore very-long-line-length-in-source-file.
It's not a useful check, and it flags test data and such.
* Lintian: ignore source-contains-data-from-ieee-data-oui-db.
Data formats are not compatible, this is for hwdb.
* Lintian: ignore systemd-service-file-missing-install-key.
If we don't add [Install], it's because we don't want it and the units are
events-driven or enabled statically.
* Lintian: ignore spare-manual-page.
Lintian is not really good at associating manpages to package contents,
so just ignore this, as we have and will keep adding docs related
to unit types and so on.
* Lintian: ignore package-supports-alternative-init-but-no-init.d-script.
Well, duh!
* Lintian: ignore package-contains-documentation-outside-usr-share-doc.
False positives on test data and a web page.
* Lintian: ignore current set of package-contains-empty-directory.
These are shipped to provide a skeleton installation.
* Update Lintian override for
systemd-service-file-refers-to-unusual-wantedby-target
* Lintian: ignore systemd: shared-library-lacks-prerequisites false positive
on EFI binary
* Lintian: ignore maintainer-script-calls-systemctl in more packages
* Lintian: ignore executable-not-elf-or-script false positives for EFI
binaries
* Lintian: ignore spellcheck false positives
* Lintian: ignore hardening-no-fortify-functions for test binaries
* Ignore blhc false positives.
blhc hits false positives due to EFI PE-COFF binaries,
c++ fuzzing binaries and meson flags listings, ignore them.
* Add d/gitlab-ci.yml.
Disable unit tests, as some are failing due to the build environment.
[ Michael Biebl ]
* New upstream version 250.3
- network: wireguard: do not add routes to AllowedIPs= by default.
(Closes: #1003955)
* Add Recommends: libdw1 to systemd-coredump.
Starting with v250, systemd-coredump will use libdw/libelf via dlopen()
rather than directly linking against it. It is not a hard dependency but
we want to have it installed by default.
While hard-coding the library name is not ideal, we currently don't have
better means to derive this information automatically. (Closes: #1003879)
-- Michael Biebl <biebl@debian.org> Tue, 18 Jan 2022 18:52:45 +0100
systemd (250.2-3) unstable; urgency=medium
[ Luca Boccassi ]
* Build with and suggest fido2 and tpm libraries.
These are used via dlopen only if available by some tools like
systemd-cryptsetup, systemd-cryptenroll and systemd-repart,
with graceful fallbacks if they are not found.
Build-depend on them so that the features get compiled in
(apart from stage1 builds), and add appropriate Suggests.
(Closes: #991129, #1003383)
* Disable libcryptsetup-plugins.
They are new, and might not even be supported by libcryptsetup yet
* Build-depend on libssl-dev.
Required to use libfido2-dev until #1003699 is fixed
[ Michael Biebl ]
* Don't stop systemd-oomd.socket during upgrades.
This works around an issue in systemd which doesn't process multiple
units that are passed to systemctl as a single transaction with the
correct ordering. (Closes: #1003641)
-- Michael Biebl <biebl@debian.org> Fri, 14 Jan 2022 13:54:34 +0100
systemd (250.2-2) unstable; urgency=medium
* Ship systemd-oomd.socket in correct systemd-oomd package
* Don't install dbus-org.freedesktop.oom1.service symlink (Closes: #1003580)
-- Michael Biebl <biebl@debian.org> Wed, 12 Jan 2022 20:52:26 +0100
systemd (250.2-1) unstable; urgency=medium
* New upstream version 250.2
- shared/rm-rf: loop over nested directories instead of recursing.
Fixes uncontrolled recursion in systemd-tmpfiles.
(CVE-2021-3997, Closes: #1003467)
* test: explicitly configure oomd stuff via dropins
* autopkgtest: add systemd-oomd dependency to upstream test.
We want systemd-oomd to be tested via the upstream provided
TEST-55-OOMD.
* Rebase patches
* Upload to unstable
-- Michael Biebl <biebl@debian.org> Tue, 11 Jan 2022 12:58:15 +0100
systemd (250.1-2) experimental; urgency=medium
[ Lukas Märdian ]
* d/rules: Enable build of systemd-oomd
* d/control: Ship oomd in a systemd-oomd package.
Deploying the default configuration as used in Fedora.
* Start systemd-oomd.service after package installation
[ Michael Biebl ]
* oomd: move oomctl to bindir
* Enable systemd-repart and ship it in the main systemd package.
Add fdisk as test dependency, needed by test-repart which calls sfdisk.
* test-repart: append /sbin and /usr/sbin to $PATH= so sfdisk can be found
-- Michael Biebl <biebl@debian.org> Sat, 08 Jan 2022 23:45:06 +0100
systemd (250.1-1) experimental; urgency=medium
* New upstream version 250.1
* Rebase patches
-- Michael Biebl <biebl@debian.org> Wed, 05 Jan 2022 21:42:54 +0100
systemd (250-2) experimental; urgency=medium
* Drop separate udeb build.
The only real benefit from a separate build apparently is that udev does
not get a dependency on libacl and libselinux. But we have udebs for
those dependencies anyway.
Dropping the separate build basically cuts the build times in half and
simplifies debian/rules quite a bit.
It also brings udev as used in d-i closer to what is actually used in
the installed system, which is a good thing.
* Cherry-pick various fixes targeted for v250-stable
-- Michael Biebl <biebl@debian.org> Sun, 02 Jan 2022 21:41:56 +0100
systemd (250-1) experimental; urgency=medium
* New upstream version 250
* Rebase patches
* Update symbol versions for the v250 release
-- Michael Biebl <biebl@debian.org> Fri, 24 Dec 2021 13:02:05 +0100
systemd (250~rc3-1) experimental; urgency=medium
[ Michael Biebl ]
* New upstream version 250~rc3
* Switch debian-branch to experimental
* Bump meson Build-Depends to (>= 0.53.2)
* Rebase patches
* Update symbols file for libsystemd0
* Update removal of upstream provided license files
* Use -Durlify=false instead of shipping an upstream revert patch
* Explicitly disable OpenSSL support.
We don't want to pick up an OpenSSL dependency in a tainted build
environment and pull a second crypto stack into systemd's dependencies.
* autopkgtest: install dbus-user-session for upstream test.
Required by TEST-43-PRIVATEUSER-UNPRIV and TEST-20-MAINPIDGAMES.
* Revert "Temporarily disable LTO"
* Small updates to debian/copyright
* Remove dbus introspection files
[ Luca Boccassi ]
* autopkgtest: install libdw and libelf for upstream test.
Pulled in via dlopen since https://github.com/systemd/systemd/pull/21454
-- Michael Biebl <biebl@debian.org> Tue, 21 Dec 2021 01:10:16 +0100
systemd (249.7-1) unstable; urgency=medium
* New upstream version 249.7
* Rebase patches
-- Michael Biebl <biebl@debian.org> Fri, 19 Nov 2021 21:11:45 +0100
systemd (249.6-3) unstable; urgency=medium
* scope: count successful cgroup additions when delegating via D-Bus
(Closes: #999745)
-- Michael Biebl <biebl@debian.org> Thu, 18 Nov 2021 21:13:02 +0100
systemd (249.6-2) unstable; urgency=medium
* Consider dbus-broker in systemd-logind.service Condition check
(Closes: #999569)
* Temporarily disable LTO.
This is a test to see if it fixes the failure to build reproducibly on
arm*.
* sysusers: split up systemd.conf (Closes: #990349)
-- Michael Biebl <biebl@debian.org> Sat, 13 Nov 2021 18:29:11 +0100
systemd (249.6-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 249.6
* Rebase patches
* test: use kbd-mode-map we ship in one more test case
* Bump Standards-Version to 4.6.0
* Drop obsolete C/R upstart from systemd-sysv
* Drop obsolete dpkg (>= 1.19.3) | systemd-sysv dependency from udev.
It was added to ensure we have a dpkg with --notify-await which is now
satisfied by a dpkg from oldstable.
* Make the C/R against systemd versioned in
systemd-standalone-{sysusers,tmpfiles}
Those were added to facilitate an upgrade from bullseye. The version
makes it more explicit.
* Drop obsolete migration code for RAMTMP, TPMTIME and UTC
[ Luca Boccassi ]
* Depend on default-dbus-system-bus | dbus-system-bus.
Allows users to install only a single system bus implementation.
Prefer the default (dbus-daemon).
-- Michael Biebl <biebl@debian.org> Thu, 11 Nov 2021 22:04:31 +0100
systemd (249.5-2) unstable; urgency=medium
[ Helmut Grohne ]
* Fix FTCBFS: Annotate python3-jinja2 dependency with :native
(Closes: #996501)
[ Michael Biebl ]
* hwdb: Allow console users access to media* nodes (Closes: #996749)
-- Michael Biebl <biebl@debian.org> Tue, 02 Nov 2021 17:29:45 +0100
systemd (249.5-1) unstable; urgency=medium
* New upstream version 249.5
* Rebase patches
* Update debian/copyright
* Clean up lintian overrides
-- Michael Biebl <biebl@debian.org> Tue, 12 Oct 2021 22:39:59 +0200
systemd (249.4-2) unstable; urgency=medium
* Upload to unstable
* Remove unused initialize_coredump() function
* Fix #993738 by pulling the patches from upstream PR#20603
-- Michael Biebl <biebl@debian.org> Tue, 12 Oct 2021 14:03:31 +0200
systemd (249.4-1) experimental; urgency=medium
* New upstream version 249.4
* Rebase patches
-- Michael Biebl <biebl@debian.org> Mon, 30 Aug 2021 11:20:16 +0200
systemd (249.3-4) experimental; urgency=medium
* Add Conflicts/Replaces: systemd to systemd-standalone-{sysusers,tmpfiles}
This allows upgrades from older systemd versions which do not have
Provides: systemd-{sysusers,tmpfiles}. (Closes: #992376)
-- Michael Biebl <biebl@debian.org> Wed, 25 Aug 2021 09:35:03 +0200
systemd (249.3-3) experimental; urgency=medium
* Use C/R/P for systemd-sysusers and systemd-tmpfiles.
It's an interface/facility that can only be provided by a single package
at a time.
-- Michael Biebl <biebl@debian.org> Thu, 12 Aug 2021 22:45:02 +0200
systemd (249.3-2) experimental; urgency=medium
* Provide standalone binaries for sysusers and tmpfiles (Closes: #946456)
* Fix test dependencies of upstream test.
After splitting out the standalone binaries for sysusers and tmpfiles
into separate packages (which conflict with the main systemd package),
we can no longer use the '@' notation in the upstream test.
This reverts commit 5eeeb1b562a1a9802df105091bda4741c263336d and also
adds systemd-tests and systemd-timesyncd to the upstream test
dependencies.
-- Michael Biebl <biebl@debian.org> Sun, 08 Aug 2021 22:51:18 +0200
systemd (249.3-1) experimental; urgency=medium
* New upstream version 249.3
* Rebase patches
* Remove obsolete systemd-resolve compat symlink
-- Michael Biebl <biebl@debian.org> Sun, 08 Aug 2021 22:39:25 +0200
systemd (249.2-2) experimental; urgency=medium
* Remove obsolete upgrade code from maintainer scripts
* Clean up old versions from maintscript files
* Drop obsolete systemd Breaks/Replaces
* Drop obsolete python-dbusmock Breaks
* Turn versioned systemd-shim Breaks into unversioned Conflicts.
There never was a fixed systemd-shim version before it was removed from
the archive.
* Drop patches which are no longer needed after bullseye
* Stop setting up device symlinks for CD-RW/DVD drives.
Those udev rules were a Debian specific workaround that were mainly
added for compat with older software which wasn't able to automatically
discover those types of devices. Those rules didn't provide
stable/predictable names though, so remove them. (Closes: #991639)
* autopkgtest: add systemd-timesyncd dependency to timedated test.
We need systemd-timesyncd in the timedated test, not just an arbitrary
provider of time-daemon.
* autopkgtest: clean up dependencies of boot-smoke test.
A lot of the dependencies are not needed but were originally added to
avoid a testbed reset and make it possible to reuse the testbed of the
upstream test. This turned out to be a maintenance problem and the
dependencies were not updated accordingly. Instead of trying to keep the
two tests in sync, trim down the boot-smoke dependencies to its bare
minimum.
-- Michael Biebl <biebl@debian.org> Sat, 31 Jul 2021 21:49:05 +0200
systemd (249.2-1) experimental; urgency=medium
* New upstream version 249.2
* Rebase patches
-- Michael Biebl <biebl@debian.org> Fri, 23 Jul 2021 21:44:35 +0200
systemd (249.1-1) experimental; urgency=medium
* New upstream version 249.1
- basic/unit-name: do not use strdupa() on a path (CVE-2021-33910)
-- Michael Biebl <biebl@debian.org> Tue, 20 Jul 2021 21:20:12 +0200
systemd (249-1) experimental; urgency=medium
* New upstream version 249
* Rebase patches
* Update symbol versions for the v249 release
* Fix removal of systemd-hwdb-update.service.
As we don't support factory-reset, we don't need this service.
In Debian, the hwdb binary database is updated via a dpkg file trigger.
-- Michael Biebl <biebl@debian.org> Wed, 07 Jul 2021 22:33:31 +0200
systemd (249~rc3-1) experimental; urgency=medium
* New upstream version 249~rc3
* Rebase patches
-- Michael Biebl <biebl@debian.org> Thu, 01 Jul 2021 23:55:11 +0200
systemd (249~rc2-1) experimental; urgency=medium
* New upstream version 249~rc2
* Rebase patches
-- Michael Biebl <biebl@debian.org> Sun, 27 Jun 2021 17:10:18 +0200
systemd (249~rc1-1) experimental; urgency=medium
[ Michael Biebl ]
* New upstream version 249~rc1
* Rebase patches
* Replace m4 Build-Depends with python3-jinja2
* Update symbols file for libsystemd0
* test: do not run 'meson configure' if NO_BUILD is set
* test: drop the mawk-incompatible expression
* Add gawk <!nocheck> to Build-Depends.
It is used in tools/check-directives.sh which is run during "meson test".
* autopkgtest: add udev dependency to unit-tests.
Without a properly set up hwdb the test-sd-hwdb test is skipped.
[ Luca Boccassi ]
* autopkgtest: add dependency on dosfstools for upstream test.
Needed to create EFI partition (vfat)
-- Michael Biebl <biebl@debian.org> Thu, 17 Jun 2021 18:09:43 +0200
systemd (248.3-1) experimental; urgency=medium
[ Michael Biebl ]
* New upstream version 248.3
* Rebase patches
[ Dan Streetman ]
* d/t: replace 'root-unittests' shell script with simple call to upstream script.
The upstream test runner script is much better, as it only prints failing test
output, and gives a summary of the test results at the end.
-- Michael Biebl <biebl@debian.org> Wed, 19 May 2021 13:09:57 +0200
systemd (248.2-1) experimental; urgency=medium
* New upstream version 248.2
-- Michael Biebl <biebl@debian.org> Sun, 09 May 2021 21:17:10 +0200
systemd (248.1-1) experimental; urgency=medium
[ Michael Biebl ]
* New upstream version 248.1
* Rebase patches
* d/e/checkout-upstream: switch to main branch
* Update make-fbdev-blacklist to not blacklist hyperv_fb
[ Luca Boccassi ]
* systemd.install: catch all files installed in usr/bin and bin.
At the moment, individual binaries are mentioned specifically in the
install file. When new binaries are added, manual work is needed to get
them packaged, which affects the upstream autopkgtest-based CI.
Change systemd.install to instead pick up everything from usr/bin and bin.
* upstream suite: add build-dep on vim-tiny.
Required by some of the images in the upstream test suite
[ Zbigniew Jędrzejewski-Szmek ]
* Let "upstream" test use upstream test runner
[ Dan Streetman ]
* Slight adjustments to previous patch for deny/black-list naming.
Also add in two vars used by the integration runner script
* d/t/upstream: use NO_BUILD=1.
Also don't bother sed-modifying test-functions file, as the NO_BUILD
changes remove the need for that.
* d/t/control: install all binary packages for upstream test.
With the change to just call the upstream script to run the integration
tests, the packages to test need to be installed so the test-function
script can list out the files each package contains, and copy those files
into each nspawn and/or qemu testbed. Without all packages installed,
some tests fail; specifically TEST-30 currently requires systemd-timesyncd
which was not previously installed for the 'upstream' test suite.
This changes the control file to just install all binary packages, using
the '@' notation.
* d/t/boot-smoke: update test to avoid false negatives
[ Frantisek Sumsal ]
* upstream-ci: fix test_no_failed() check.
Without `--plain` `systemctl` prints a circle (●) in the first column
for each failed service, which with the current code interferes with
attempted journal listing for each such service.
-- Michael Biebl <biebl@debian.org> Fri, 07 May 2021 12:25:15 +0200
systemd (248-1) experimental; urgency=medium
[ Balint Reczey ]
* New upstream version 248
- add support for answering DNSSEC questions on the stub resolver
(Closes: #988132)
- turn off DNSSEC validation when timesyncd resolves hostnames
(Closes: #898530)
- add networkd/nspawn nftables backend
(Closes: #934584)
- support ipv6 for masquerade and dnat in nspawn and networkd
(Closes: #934676)
* Refresh patches
* debian/rules: Enable new systemd-sysext tool
* debian/rules: Build support for flushing of the nscd caches
* debian/rules: Build translations for debs but not for udebs
* debian/rules: Build without TPM2 support.
This is a new feature and needs further review.
* Ship systemd-cryptenroll in systemd package
* Update symbols file for libsystemd0
* debian/tests/control: Upstream test depends on attr
* debian/udev.postinst: Create the sgx system group.
Intel SGX enclave device nodes are now owned by this group.
* debian/rules: Don't ship README files in (/usr)/lib/*.d.
README files are typically shipped in /usr/share/doc.
* Revert "pager: stop disabling urlification under a pager"
Debian and Ubuntu do not yet have a less version that supports
urlification. This requires less 563 or later.
-- Michael Biebl <biebl@debian.org> Thu, 06 May 2021 23:00:08 +0200
systemd (247.9-4) unstable; urgency=medium
* Revert "tests/udev-test.pl: add multiple device test"
Follow-up to make sure the udev autopkgtest passes successfully again
after reverting the multipath symlink race fix.
* test: Fix flakiness in TEST-10-ISSUE-2467
* autopktest: Fix timedated test dependencies.
Add an explicit systemd-timesyncd dependency as it is required by the
timedated test.
* autopkgtest: Merge configuration of logind test with timedated and related
tests.
They share the same restrictions and merging them avoids a bit of
duplication.
* Revert "test: disable DnsmasqClientTest.test_resolved_etc_hosts in
networkd-test.py"
Let's see if this test is still flaky on debci.
* networkd-test: fix resolved_domain_restricted_dns.
Cherry-pick upstream commit which hopefully fixes the flakiness in
DnsmasqClientTest.test_resolved_domain_restricted_dns.
-- Michael Biebl <biebl@debian.org> Fri, 01 Oct 2021 10:12:14 +0200
systemd (247.9-3) unstable; urgency=medium
* Revert multipath symlink race fix.
Revert upstream commits which caused a regression in udev resulting in
long delays when processing partitions with the same label.
(Closes: #993738)
-- Michael Biebl <biebl@debian.org> Sat, 25 Sep 2021 22:01:17 +0200
systemd (247.9-2) unstable; urgency=medium
* Demote systemd-timesyncd from Depends to Recommends.
This avoids a dependency cycle between systemd and systemd-timesyncd and
thus makes dist upgrades more predictable and robust.
It also allows minimal, systemd based containers where no NTP client is
strictly necessary.
To ensure that systemd-timesyncd is installed in a default installation
created by d-i, bump its priority to standard. (Closes: #986651, #993947)
-- Michael Biebl <biebl@debian.org> Wed, 22 Sep 2021 21:10:53 +0200
systemd (247.9-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 247.9
* Rebase patches
* Fix removal of systemd-hwdb-update.service.
As we don't support factory-reset, we don't need this service.
In Debian, the hwdb binary database is updated via a dpkg file trigger.
[ Balint Reczey ]
* debian/rules: Don't ship README files in (/usr)/lib/*.d.
README files are typically shipped in /usr/share/doc.
-- Michael Biebl <biebl@debian.org> Sun, 15 Aug 2021 21:10:56 +0200
systemd (247.3-6) unstable; urgency=high
* Non-maintainer upload (acked by maintainers)
* unit-name: generate a clear error code when converting an overly long fs
path to a unit name
* basic/unit-name: do not use strdupa() on a path (CVE-2021-33910)
* basic/unit-name: adjust comments
-- Salvatore Bonaccorso <carnil@debian.org> Tue, 13 Jul 2021 19:29:24 +0200
systemd (247.3-5) unstable; urgency=medium
* udev-udeb: setup /dev/fd, /dev/std{in,out,err} symlinks.
As systemd-udevd no longer sets them up itself, we create them manually
after mounting devtmpfs. This avoids breaking applications which expect
those symlinks. (Closes: #975018)
-- Michael Biebl <biebl@debian.org> Mon, 12 Apr 2021 20:21:24 +0200
systemd (247.3-4) unstable; urgency=medium
[ Luca Boccassi ]
* Backport patch to fix assert with invalid LoadCredentials=
Regression introduced in v247, fixed in v249, see:
https://github.com/systemd/systemd/issues/19178
(Closes: #986302)
[ Michael Biebl ]
* network: Delay addition of IPv6 Proxy NDP addresses.
Fixes "IPv6 Proxy NDP addresses are being lost from interfaces after
networkd adds them". (Closes: #985510)
-- Michael Biebl <biebl@debian.org> Sun, 11 Apr 2021 16:06:46 +0200
systemd (247.3-3) unstable; urgency=medium
* pkg-config: make prefix overridable again (Closes: #984763)
* Revert "units: turn off DNSSEC validation when timesyncd resolves
hostnames"
Support for SYSTEMD_NSS_RESOLVE_VALIDATE=0 requires the changes from
https://github.com/systemd/systemd/pull/17823 for the dnssec bypass
logic. Those are rather invasive changes and not suitable for a stable
backport.
-- Michael Biebl <biebl@debian.org> Thu, 11 Mar 2021 18:09:35 +0100
systemd (247.3-2) unstable; urgency=medium
* Downgrade a couple of warnings to debug.
If a package still ships only a SysV init script or if a service file or
tmpfile uses /var/run, downgrade those messages to debug. We can use
lintian to detect those issues.
For service files and tmpfiles in /etc, keep the warning, as those files
are typically added locally and aren't checked by lintian.
(Closes: #981407)
* core: fix mtime calculation of dropin files
(Closes: #975289)
* analyze: slightly reword PrivateTmp= message
(Closes: #931753)
* rules: move ID_SMARTCARD_READER definition to a <70 configuration
(Closes: #978011)
* units: turn off DNSSEC validation when timesyncd resolves hostnames
(Closes: #898530)
* table: drop trailing white spaces of the last cell in row
(Closes: #980820)
-- Michael Biebl <biebl@debian.org> Sat, 06 Mar 2021 22:32:14 +0100
systemd (247.3-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 247.3
* Rebase patches
[ Ioanna Alifieraki ]
* systemctl: return error code when scheduled shutdown fails
-- Michael Biebl <biebl@debian.org> Wed, 03 Feb 2021 17:11:39 +0100
systemd (247.2-5) unstable; urgency=medium
[ Matthias Klumpp ]
* Configure localed to run locale-gen to generate missing locale.
This applies an (upstreamed) patch to permit systemd-localed to run
locale-gen to generate missing locale when requested to switch the
system locale.
This makes localectl usable on Debian for changing locale without
breaking system localization or even prevent certain applications from
running at all after switching to a non-generated locale.
[ Michael Biebl ]
* systemctl: do not shutdown immediately on scheduled shutdown.
When, for whatever reason, a scheduled shutdown fails to be set, systemd
will proceed with immediate shutdown without allowing the user to react.
This is counterintuitive because when a scheduled shutdown is issued,
it means the user wants to shutdown at a specified time in the future,
not immediately. (Closes: #931235)
* test: disable DnsmasqClientTest.test_resolved_etc_hosts in
networkd-test.py.
This test appears to be flaky.
See: #979716
* Bump Standards-Version to 4.5.1
* Set upstream metadata fields: Bug-Submit, Bug-Database, Repository,
Repository-Browse
-- Michael Biebl <biebl@debian.org> Mon, 18 Jan 2021 13:45:15 +0100
systemd (247.2-4) unstable; urgency=medium
* Move libraries and NSS modules from /lib to /usr/lib.
Keep libpam_systemd.so installed in /lib, as PAM doesn't support
loading PAM modules from /usr/lib on a split-usr system.
-- Michael Biebl <biebl@debian.org> Sat, 02 Jan 2021 17:06:01 +0100
systemd (247.2-3) unstable; urgency=medium
* test: use modern qemu numa arguments
This fixes TEST-36-NUMAPOLICY from the upstream autopkgtest when using
qemu >= 5.2.
* Increase timeout when running unit tests.
The default timeout for individual unit tests is 30s. On slower
architectures and environments like reproducible-builds, this sometimes
is not enough.
Instead of fine-tuning the timeout for each individual test, we instead
increase the timeouts by a factor of 10.
* init-functions, getty-static.service: Don't hard-code path to systemctl
binary.
This should simplify an eventual move of systemctl from /bin to
/usr/bin.
* getty-static.service: Skip if dbus-broker is installed.
Check for the binary in /usr/bin as this makes it easier to move the
service files from /lib/systemd to /usr/lib/systemd.
-- Michael Biebl <biebl@debian.org> Sat, 26 Dec 2020 13:33:41 +0100
systemd (247.2-2) unstable; urgency=medium
* Switch to "unified" cgroup hierarchy (i.e. cgroupv2) (Closes: #943981)
-- Michael Biebl <biebl@debian.org> Mon, 21 Dec 2020 20:06:49 +0100
systemd (247.2-1) unstable; urgency=medium
[ Balint Reczey ]
* debian/systemd.NEWS: Mention udev rules changes in 247
[ Michael Biebl ]
* New upstream version 247.2
* Rebase patches
* test: fix fd_is_mount_point() check
-- Michael Biebl <biebl@debian.org> Sun, 20 Dec 2020 20:44:31 +0100
systemd (247.1-4) unstable; urgency=medium
[ наб ]
* debian/extra/kernel-install.d/85-initrd.install: Don't install initrd when
an explicit path was passed (Closes: #970213)
* debian/extra/kernel-install.d/85-initrd.install: Match initrd installation
messages and uninstallation to 90-loaderentry.install
[ Michael Biebl ]
* sd-device: keep escaped strings in DEVLINK= property (Closes: #976699)
-- Michael Biebl <biebl@debian.org> Fri, 11 Dec 2020 20:25:31 +0100
systemd (247.1-3) unstable; urgency=medium
* d/t/timedated: Ignore return code of dbus-monitor in wait_mon()
We are not really interested in the return code and error messages from
dbus-monitor after killing it, so ignore them to avoid undesired
autopkgtest failures.
-- Michael Biebl <biebl@debian.org> Thu, 03 Dec 2020 23:53:29 +0100
systemd (247.1-2) unstable; urgency=medium
[ Michael Biebl ]
* Upload to unstable
* Revert "d/t/timedated: use /bin/bash to work around job handling issue in
dash"
[ Balint Reczey ]
* debian/tests/timedated: Wait for the killed child only.
There may be other children of the script due to autopkgtest machinery
and they exit after the script exited. (LP: #1904406)
-- Michael Biebl <biebl@debian.org> Wed, 02 Dec 2020 23:25:32 +0100
systemd (247.1-1) experimental; urgency=medium
* New upstream version 247.1
-- Michael Biebl <biebl@debian.org> Tue, 01 Dec 2020 17:17:28 +0100
systemd (247-1) experimental; urgency=medium
* New upstream version 247
* Rebase patches
* Update symbol versions for the v247 release
-- Michael Biebl <biebl@debian.org> Thu, 26 Nov 2020 19:46:41 +0100
systemd (247~rc2-3) experimental; urgency=medium
* Merge changes from unstable
* sd-device: make sd_device_has_current_tag() compatible with udev database
generated by older udevd
(Closes: #974730)
* Add Breaks: udev (<< 247~) to systemd.
This ensures that udev is upgraded alongside systemd and both support
the new udev tags concept introduced in v247. (Closes: #975554)
-- Michael Biebl <biebl@debian.org> Thu, 26 Nov 2020 18:18:53 +0100
systemd (247~rc2-2) experimental; urgency=medium
* missing: define several syscall numbers for MIPS arch (Closes: #974619)
-- Michael Biebl <biebl@debian.org> Fri, 13 Nov 2020 19:22:04 +0100
systemd (247~rc2-1) experimental; urgency=medium
[ Michael Biebl ]
* New upstream version 247~rc2
- tmpfiles: Handle filesystems without ACL support in more cases
(Closes: #972135)
* Rebase patches
* Explicitly disable oomd
* Use -Dmode=release as we want a release, not developer, build
* Update symbols file for libudev1 and libsystemd0
[ Luca Boccassi ]
* systemd-container: install systemd-dissect binary.
Required for TEST-50-DISSECT since:
https://github.com/systemd/systemd/pull/16046
* d/t/control: install squashfs-tools for upstream test.
Required by TEST-50-DISSECT since upstream PR:
https://github.com/systemd/systemd/pull/16046
[ Dan Streetman ]
* d/control: update meson minimum version
https://github.com/systemd/systemd/pull/13842#issuecomment-601105975
* d/t/upstream: convert 'blacklist' term to 'deny-list'
Support transition for upstream-ci from
https://github.com/systemd/systemd/pull/16262
-- Michael Biebl <biebl@debian.org> Thu, 12 Nov 2020 21:23:22 +0100
systemd (246.6-5) unstable; urgency=medium
* Drop non-functional DefaultTasksMax patch.
This patch was supposed to remove the DefaultTasksMax limit, but lost
its actual logic over 4 years ago, when the patches were rebased for the
v231 release. Since nobody has complained so far, we can assume it is
safe to drop this patch. (Closes: #975335)
* test-seccomp: accept ENOSYS from sysctl(2) too.
It seems that kernel 5.9 started returning that.
* test/test-functions: copy /usr/lib/pam.d into $initdir.
The systemd-user file has been moved from /etc/pam.d into /usr/lib/pam.d,
so test-functions needs to copy it from /usr/lib/pam.d instead.
-- Michael Biebl <biebl@debian.org> Tue, 24 Nov 2020 21:53:25 +0100
systemd (246.6-4) unstable; urgency=medium
* Revert "Trigger a systemctl daemon-reload when init scripts are installed
or removed"
Remove the dpkg file trigger which called systemctl daemon-reload whenever
a SysV init script was installed. We have proper support in debhelper
nowadays which makes this superfluous and we want to avoid unnecessary
systemctl daemon-reload calls.
-- Michael Biebl <biebl@debian.org> Thu, 19 Nov 2020 22:35:48 +0100
systemd (246.6-3) unstable; urgency=medium
* pam: include pam_keyinit session module in systemd-user.
We want that systemd --user gets its own keyring, not the basic keyring
set up by systemd --system.
* pam: move systemd-user PAM config from /etc/pam.d to /usr/lib/pam.d.
This is supported since PAM 1.2 and we want as little files in /etc as
possible.
* init-functions: update LSB hook to not use ignore-dependencies
job-mode=ignore-dependencies, as currently used in the LSB hook during
bootup and shutdown, can have undesired side-effects, like changing the
ordering of services and ultimately causing them to fail, due to unmet
dependencies.
So simplify that, and only apply --no-block on reload requests during
bootup and shutdown. (Closes: #960594)
* d/t/timedated: use /bin/bash to work around job handling issue in dash.
See: #975010
-- Michael Biebl <biebl@debian.org> Tue, 17 Nov 2020 23:34:07 +0100
systemd (246.6-2) unstable; urgency=medium
* XDG autostart improvements
- Add support for Path= in XDG Desktop File
- Ignore more common XDG Desktop Entry fields
- Lower most info messages to debug level (Closes: #968116)
* Re-enable seccomp support on riscv64.
This should be safe now, as the code has fallbacks for systems with
older libseccomp versions.
* Move sysusers.d/sysctl.d/binfmt.d/modules-load.d back to /usr.
In Debian, late mounting of /usr is no longer supported, so it is safe
to install those files in /usr.
We want those facilities in /usr, not /, as this will make an eventual
switch to a merged-usr setup easier. (Closes: #971282)
* units: update serial-getty@.service to support 57600 baud rate
(Closes: #969144)
* bootspec: don't fail with EIO if searching for ESP and finding one without
an enveloping partition table
(Closes: #970534)
-- Michael Biebl <biebl@debian.org> Thu, 15 Oct 2020 23:48:34 +0200
systemd (246.6-1) unstable; urgency=medium
* New upstream version 246.6
* Rebase patches
-- Michael Biebl <biebl@debian.org> Mon, 21 Sep 2020 20:28:36 +0200
systemd (246.5-1) unstable; urgency=medium
* New upstream version 246.5
- network: fix NDisc handling for the case when multiple routers exist
(Closes: #969599)
- core/socket: we may get ENOTCONN from socket_instantiate_service()
(Closes: #970156)
* Rebase patches
-- Michael Biebl <biebl@debian.org> Mon, 14 Sep 2020 08:04:39 +0200
systemd (246.4-1) unstable; urgency=medium
* New upstream version 246.4
* Rebase patches
-- Michael Biebl <biebl@debian.org> Wed, 02 Sep 2020 13:30:52 +0200
systemd (246.3-1) unstable; urgency=medium
* New upstream version 246.3
* Rebase patches
-- Michael Biebl <biebl@debian.org> Sat, 29 Aug 2020 18:39:32 +0200
systemd (246.2-2) unstable; urgency=medium
[ Balint Reczey ]
* debian/systemd.postinst: Restart systemd-networkd.socket on incompatible
change.
PassCredentials=yes is replaced with PassPacketInfo=yes and extra padding is
dropped, too.
(Closes: #968589, LP: #1891716)
[ Michael Biebl ]
* Fix restart of systemd-networkd.socket.
We can't restart the socket while systemd-networkd.service is still
active. Instead we stop the socket and ensure, that a try-restart of
systemd-networkd.service also starts the socket.
* seccomp: Add support for riscv64 (Closes: #954312)
* Support missing conditions/asserts everywhere (Closes: #968612)
* path: Skip directories when finalising $PATH search (Closes: #969006)
-- Michael Biebl <biebl@debian.org> Sat, 29 Aug 2020 16:24:49 +0200
systemd (246.2-1) unstable; urgency=medium
* New upstream version 246.2
* Remove resolvconf.conf drop-in, resolved integration moved to resolvconf
package
* Rebase patches
* Add versioned Breaks against resolvconf (<< 1.83~) to systemd.
The PathExists= directive was changed in v246 to match the documented
behaviour but now causes resolvconf-pull-resolved.service to be
continuously triggered by resolvconf-pull-resolved.path.
This requires a fix in the resolvconf package, see #968015.
(Closes: #967906)
* Keep journal files compatible with older versions.
Disable the KEYED-HASH journal feature by default and keep LZ4 (instead
of ZSTD) as default compression for new journal files. Otherwise journal
files are incompatible and can't be read by older journalctl
implementations.
This patch can be dropped in bullseye+1, as journalctl from bullseye
will then be able to read journal files with those features.
(Closes: #968055)
-- Michael Biebl <biebl@debian.org> Mon, 17 Aug 2020 22:28:09 +0200
systemd (246.1-1) unstable; urgency=medium
* New upstream version 246.1
* Rebase patches
-- Michael Biebl <biebl@debian.org> Sun, 16 Aug 2020 13:14:46 +0200
systemd (246-2) unstable; urgency=medium
* Upload to unstable
-- Michael Biebl <biebl@debian.org> Mon, 03 Aug 2020 09:46:27 +0200
systemd (246-1) experimental; urgency=medium
* New upstream version 246
* Rebase patches
* Update symbols file for libsystemd0
* Bump libapparmor-dev Build-Depends to (>= 2.13)
* Disable libfido2 support.
This is only used by homed which we don't enable.
-- Michael Biebl <biebl@debian.org> Thu, 30 Jul 2020 22:22:24 +0200
systemd (245.7-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 245.7
- resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver
(Closes: #965371)
- basic/cap-list: parse/print numerical capabilities
(Closes: #964926)
* Rebase patches
[ Dan Streetman ]
* Add libzstd-dev and zstd as build and test deps.
https://github.com/systemd/systemd/pull/15422
-- Michael Biebl <biebl@debian.org> Mon, 27 Jul 2020 23:24:47 +0200
systemd (245.6-3) unstable; urgency=medium
[ Dan Streetman ]
* d/t/upstream: capture new merged 'system.journal' from tests.
https://github.com/systemd/systemd/pull/15281
* d/t/upstream: use --directory or --file param for journalctl.
Properly tell journalctl if the journal to parse is a dir or file.
* d/t/storage: check for ext2 or ext4 fs when using crypttab 'tmp' option.
https://github.com/systemd/systemd/pull/15853
[ Martin Pitt ]
* debian/tests/localed-locale: Fix for environments without en_US.UTF-8.
Unconditionally back up/restore locale configuration files and generate
en_US.UTF-8. Previously the test failed in environments which have some
locale other than en_US.UTF-8 in /etc/default/locale.
Also fix the assertion of /etc/locale.conf not being present after
localectl. This only applies to Debian/Ubuntu tests, not upstream ones.
[ Dimitri John Ledkov ]
* Enable EFI/bootctl on armhf.
-- Michael Biebl <biebl@debian.org> Tue, 14 Jul 2020 18:16:57 +0200
systemd (245.6-2) unstable; urgency=medium
[ Dan Streetman ]
* 40-vm-hotadd.rules: check offline before onlining memory/cpus.
The kernel will return EINVAL if the memory or cpu is already online,
which is harmless, but adds a confusing error to the log. Avoid the error
message by only onlining if the memory or cpu is currently offline.
(LP: #1876018)
[ Michael Biebl ]
* d/t/boot-and-services: use canonical name for NetworkManager service
* Fix build with libmicrohttpd 0.9.71.
The return type of callbacks was changed from int to an enum.
[ Youfu Zhang ]
* fsckd: avoid useless CR displayed on console (LP: #1692353)
[ Balint Reczey ]
* dhclient-exit-hooks.d/timesyncd: Act only when systemd-timesyncd is available.
Otherwise the hook script might trigger an error if the
systemd-timesyncd package is uninstalled but not purged. (LP: #1873031)
-- Michael Biebl <biebl@debian.org> Sun, 05 Jul 2020 11:44:39 +0200
systemd (245.6-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 245.6
* Rebase patches
[ Balint Reczey ]
* debian/tests/boot-and-services: Handle missing fstab (LP: #1877078)
-- Michael Biebl <biebl@debian.org> Mon, 08 Jun 2020 00:56:37 +0200
systemd (245.5-3) unstable; urgency=medium
[ Michael Biebl ]
* Bump priority of libnss-systemd to standard
* logind: avoid shadow lookups when doing userdb client side
* Disable DNSSEC support by default in resolved.
The upstream default, DNSSEC=allow-downgrade can lead to compatibility
issues with certain network access points. Previously, DNSSEC support
was only turned off when built for a stable Debian release, but it is
safer and more consistent to just generally change the default to
DNSSEC=no. (Closes: #959996)
* Bump debhelper compatibility level to 13.
Use the debhelper-compat package to declare the compatibility level and
drop debian/compat.
* Convert to dh_installsystemd and disable dh_installsystemduser
* Drop custom initramfs update code.
Now handled by dh_installinitramfs which is enabled by default in compat
level 12 and above.
[ Dan Streetman ]
* Cherry-pick fix from upstream master to adjust UseGateway= default
- network: change UseGateway= default to UseRoutes= setting
- network: honor SetDNSRoutes= even if UseGateway=False
(LP: #1867375)
[ Topi Miettinen ]
* Delete empty lines at end of file.
Upstream commit hooks don't allow empty lines and of course they serve no
purpose.
-- Michael Biebl <biebl@debian.org> Sun, 17 May 2020 19:28:49 +0200
systemd (245.5-2) unstable; urgency=medium
* Cherry-pick various fixes from upstream master
- network: add a flag to ignore gateway provided by DHCP server
- userdb: when doing client-side NSS look-ups optionally avoid shadow
look-ups
- nss-systemd: don't synthesize root/nobody when iterating
- core: make sure we don't get confused when setting TERM for a tty fd
- core: make sure to restore the control command id, too
* Install 60-block.rules in udev-udeb and initramfs-tools.
The block device rules were split out from 60-persistent-storage.rules
into its own rules file in v220. Those rules ensure that change events
are emitted and the udev db is updated after metadata changes.
Thanks to Pascal Hambourg (Closes: #958397)
-- Michael Biebl <biebl@debian.org> Mon, 27 Apr 2020 17:38:44 +0200
systemd (245.5-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 245.5
* Rebase patches
[ Dan Streetman ]
* Follow symlinks when finding link files to copy into initramfs.
If the /{etc,lib}/systemd/network directory itself is a symlink, the find
command will not actually find any of the files in the dir it links to.
Use the find -L param to follow symlinks.
(LP: #1868892)
* Remove Ubuntu-specific ondemand.service.
New processors handle scaling/throttling in internal firmware
(e.g. intel_pstate), and do not require OS config.
Additionally, nobody else does this, not even Debian.
-- Michael Biebl <biebl@debian.org> Sat, 18 Apr 2020 20:41:18 +0200
systemd (245.4-4) unstable; urgency=medium
* Drop Conflicts: virtualbox-guest-utils from systemd-timesyncd.
Otherwise this could lead to virtualbox-guest-utils being uninstalled on
upgrades which is not intended. (Closes: #956436)
* pid1: automatically generate systemd-remount-fs.service deps, plus enable
systemd-pstore from sysinit.target
* Fix systemd-pstore.service enablement symlink on upgrades.
It is now started via sysinit.target. Also clean up the symlink on
purge.
-- Michael Biebl <biebl@debian.org> Mon, 13 Apr 2020 11:34:31 +0200
systemd (245.4-3) unstable; urgency=medium
[ Dan Streetman ]
* d/rules: in dh_auto_test, include meson param --print-errorlogs.
Also, don't cat testlog.txt; it's noisy and not very helpful.
Upstream request:
https://github.com/systemd/systemd/pull/14338#issuecomment-603432989
[ Michael Biebl ]
* pid1: by default make user units inherit their umask from the user manager
(Closes: #945000)
* user-util: rework how we validate user names.
This reworks the user validation infrastructure. There are now two
modes. In regular mode we are strict and test against a strict set of
valid chars. And in "relaxed" mode we just filter out some really
obvious, dangerous stuff. i.e. strict is whitelisting what is OK, but
"relaxed" is blacklisting what is really not OK.
The idea is that we use strict mode whenever we allocate a new user,
while "relaxed" mode is used when we process users registered elsewhere.
(Closes: #955541)
-- Michael Biebl <biebl@debian.org> Fri, 10 Apr 2020 11:55:15 +0200
systemd (245.4-2) unstable; urgency=medium
[ Balint Reczey ]
* Ship systemd-timesyncd in a separate package.
The new systemd-timesyncd package conflicting with other NTP-related
packages resolves the problems arising when running systemd-timesyncd
and other NTP servers on the same system.
(LP: #1849156, Closes: #805927, #947936)
-- Michael Biebl <biebl@debian.org> Sat, 04 Apr 2020 08:59:50 +0200
systemd (245.4-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 245.4
- Allow names starting with a digit (Closes: #954174)
- Recognize davfs as network file system (Closes: #954755)
* Enable systemd-pstore.service by default on new installs and upgrades
(Closes: #952767)
* Revert "Enable seccomp support on riscv64"
This requires further changes to the source code and a newer, not yet
officially released, libseccomp. Since this complicates backports revert
this change for the time being.
[ Dan Streetman ]
* d/t/logind: use grep -s when checking /sys/power/state.
Some kernels in Ubuntu (e.g. linux-kvm) do not enable CONFIG_PM, which
results in stderr output when the logind test tries to grep the power
state file, causing the test to fail. The test already handles skipping
the test if suspend isn't supported, so just use -s to suppress grep
from printing to stderr if the file doesn't exist.
-- Michael Biebl <biebl@debian.org> Thu, 02 Apr 2020 11:58:18 +0200
systemd (245.2-1) unstable; urgency=medium
* New upstream version 245.2
* Rebase patches
* Enable seccomp support on riscv64 (Closes: #954077)
* Drop migration code for the switch from DynamicUser=yes to no.
This code is no longer needed as it only affected systems between 239-1
and 239-5, i.e. it never affected a stable release.
-- Michael Biebl <biebl@debian.org> Wed, 18 Mar 2020 23:32:08 +0100
systemd (245-2) unstable; urgency=medium
* Revert "job: Don't mark as redundant if deps are relevant"
This change negatively affects plymouth which was no longer properly
stopped after the system has completed booting. The running plymouth
daemon can trigger a VT switch (to tty1). (Closes: #953670)
-- Michael Biebl <biebl@debian.org> Thu, 12 Mar 2020 13:55:26 +0100
systemd (245-1) unstable; urgency=medium
[ Balint Reczey ]
* New upstream version 245
* Refresh patches
* Update symbols
[ Michael Biebl ]
* Disable repart, userdb, homed, fdisk, pwquality, p11kit feature.
Those are new features which drag in new dependencies and need further
review first.
* analyze: Fix table time output
* execute: Fix migration from DynamicUser=yes to no
* Drop manual clean up of /var/lib/private/systemd/timesync.
This is now done properly by systemd itself when a service switches from
DynamicUser=yes to no.
-- Michael Biebl <biebl@debian.org> Wed, 11 Mar 2020 13:33:37 +0100
systemd (244.3-1) unstable; urgency=medium
* New upstream version 244.3
- Revert "Support Plugable UD-PRO8 dock"
Unfortunately the same usb hub is used in other places, and causes
numerous regressions. (Closes: #951330)
-- Michael Biebl <biebl@debian.org> Sat, 15 Feb 2020 15:44:45 +0100
systemd (244.2-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 244.2
- polkit: when authorizing via PolicyKit re-resolve callback/userdata
instead of caching it (CVE-2020-1712, Closes: #950732)
* Rebase patches
* Bump Standards-Version to 4.5.0
[ Balint Reczey ]
* Remove empty /var/log/journal/ on purge
-- Michael Biebl <biebl@debian.org> Fri, 07 Feb 2020 19:24:20 +0100
systemd (244.1-3) unstable; urgency=medium
* Update documentation regarding network interface naming.
Document that 73-usb-net-by-mac.link needs to be masked together with
99-default.link if one wants to disable the systemd naming scheme and keep
the kernel-provided names. (Closes: #946196)
* Update debian/rules clean target to remove all Python bytecode
* Update systemd package description.
Recommend init=/lib/systemd/systemd instead of init=/bin/systemd.
The latter is just a compat symlink which might go away eventually.
* shared/dropin: fix assert for invalid drop-in.
Fixes an assertion when running systemctl cat on inexistent
unit templates. (Closes: #950489)
* core: call dynamic_user_acquire() only when 'group' is non-null.
Fixes an assertion in systemd which could happen if a unit is reloaded
and the unit is in bad-setting state. (Closes: #950409)
* Don't fail upgrade if /proc is not mounted.
Applying ACLs on /var/log/journal via systemd-tmpfiles requires a
mounted /proc. Skip this step if /proc is not available, e.g. in a
chroot. (Closes: #950533)
-- Michael Biebl <biebl@debian.org> Tue, 04 Feb 2020 00:11:55 +0100
systemd (244.1-2) unstable; urgency=medium
* Report status of libpam-systemd and libnss-systemd in systemd reportbug
template.
Since the libpam-systemd Recommends was moved from systemd to
systemd-sysv we no longer get this information automatically, so request
it explicitly.
* Drop btrfs-progs Recommends from systemd-container.
Upstream has dropped the logic of setting up /var/lib/machines as btrfs
loopback mount so this Recommends is no longer necessary.
* Fix processing of dpkg triggers in systemd.
We need to use $@ instead of "$@" so we can iterate through the
individual trigger names which are passed as a space separated list in
the second argument.
* Fix cleanup of timesyncd state directory
* Enable persistent journal.
Create /var/log/journal on upgrades and new installs. This enables
persistent journal in auto mode. (Closes: #717388)
-- Michael Biebl <biebl@debian.org> Sat, 01 Feb 2020 02:59:12 +0100
systemd (244.1-1) unstable; urgency=medium
[ Michael Biebl ]
* New upstream version 244.1
- network: fix segfault in parsing SendOption= (Closes: #946475)
* core: don't allow perpetual units to be masked (Closes: #948710)
[ Balint Reczey ]
* debian/watch: Switch to watch tags at github.com/systemd/systemd-stable.
Upstream point releases appear there.
[ Helmut Grohne ]
* Add basic support for the noinsttest build profile
* Annotate dbus build dependency with <!noinsttest>
The dbus library is needed for building tests. As such it must be
present unless we disable both build time and installed tests.
Previously, building with the nocheck profile worked, but it didn't
reproduce a regular build.
-- Michael Biebl <biebl@debian.org> Sat, 25 Jan 2020 18:53:23 +0100
systemd (244-3) unstable; urgency=medium
* Update udev-udeb to use 73-usb-net-by-mac.link
-- Michael Biebl <biebl@debian.org> Mon, 02 Dec 2019 23:44:52 +0100
systemd (244-2) unstable; urgency=medium
* Add lintian override for udev.
60-autosuspend-chromiumos.rules triggers a udev-rule-missing-subsystem
warning. This is a false positive, as SUBSYSTEM is tested at the
beginning of the rules file.
* Add lintian override for systemd-container
systemd-nspawn@.service triggers a
systemd-service-file-refers-to-unusual-wantedby-target warning but
nspawn containers are supposed to be started via machines.target.
* Make it easier to override MAC based name policy for USB network adapters.
Replace 73-usb-net-by-mac.rules with 73-usb-net-by-mac.link. The .link
file provides the same functionality but makes it easier to set a custom
name for USB network adapters via the systemd.link mechanism.
Thanks to Benjamin Poirier (Closes: #941636)
* Move libpam-systemd Recommends from systemd to systemd-sysv.
libpam-systemd is only really useful if systemd is PID 1 and the systemd
package should be installable without affecting another installed init
system. (Closes: #926316)
* Upload to unstable
-- Michael Biebl <biebl@debian.org> Mon, 02 Dec 2019 17:57:55 +0100
systemd (244-1) experimental; urgency=medium
* New upstream version 244
- udev: do not propagate error when executing PROGRAM and IMPORT{program}
(Closes: #944675)
- sd-event: don't invalidate source type on disconnect
(Closes: #945332)
* Rebase patches
-- Michael Biebl <biebl@debian.org> Sat, 30 Nov 2019 16:39:57 +0100
systemd (243-9) unstable; urgency=medium
[ Daniel Kahn Gillmor ]
* resolved: fix connection failures with TLS 1.3 and GnuTLS (Closes: #945507)
-- Michael Biebl <biebl@debian.org> Fri, 29 Nov 2019 21:33:19 +0100
systemd (243-8) unstable; urgency=medium
* udevadm: ignore EROFS and return earlier.
Fixes failures of "udevadm trigger" in containers with a readonly /sys.
(Closes: #944860)
* udev: silence warning about PROGRAM+= or IMPORT+= rules (Closes: #944917)
* man: add entry about SpeedMeter= (Closes: #944597)
* udev: drop SystemCallArchitectures=native from systemd-udevd.service.
We can't really control what helper programs are run from other udev
rules. E.g. running i386 binaries under amd64 is a valid use case and
should not trigger a SIGSYS failure. (Closes: #869719)
-- Michael Biebl <biebl@debian.org> Tue, 19 Nov 2019 09:17:12 +0100
systemd (243-7) unstable; urgency=medium
* Fix build failure on arm64 with libseccomp >= 2.4.2
-- Michael Biebl <biebl@debian.org> Fri, 15 Nov 2019 22:01:17 +0100
systemd (243-6) unstable; urgency=medium
* Revert "sysusers: properly mark generated accounts as locked"
We shouldn't lock the accounts because people actually need to use them, and
if they are locked, various tools will refuse.
* udev: ignore error caused by device disconnection.
During an add or change event, the device may be disconnected.
(Closes: #944586)
* udev: do not append newline when writing attributes
-- Michael Biebl <biebl@debian.org> Thu, 14 Nov 2019 14:09:49 +0100
systemd (243-5) unstable; urgency=medium
* Switch default hierarchy (back) to hybrid.
Since v243, the new upstream default is unified, but this still causes
regressions in important packages, like LXC or Docker, so switch the
default back to hybrid for now.
* Drop masks for SysV init scripts that have been dropped
* Drop masks for SysV init scripts provided by initscripts and bootlogd
* logind: fix emission of PropertiesChanged signal for users and seats
* Bump Standards Version to 4.4.1
* Upload to unstable
-- Michael Biebl <biebl@debian.org> Mon, 11 Nov 2019 00:58:41 +0100
systemd (243-4) experimental; urgency=medium
* Merge changes from unstable branch
-- Michael Biebl <biebl@debian.org> Sat, 09 Nov 2019 01:15:08 +0100
systemd (243-3) experimental; urgency=medium
* Import patches from v243-stable branch (up to ef677436aa)
-- Michael Biebl <biebl@debian.org> Mon, 14 Oct 2019 15:26:01 +0200
systemd (243-2) experimental; urgency=medium
* Import patches from v243-stable branch (up to fab6f010ac)
-- Michael Biebl <biebl@debian.org> Sun, 22 Sep 2019 12:46:02 +0200
systemd (243-1) experimental; urgency=medium
* New upstream version 243
* Merge changes from unstable branch
-- Michael Biebl <biebl@debian.org> Thu, 05 Sep 2019 01:21:49 +0200
systemd (243~rc2-1) experimental; urgency=medium
* New upstream version 243~rc2
- man: document that "systemd-analyze blame/critical-chain" is not useful
to track down job latency. (Closes: #920234)
- systemctl: process all units matched by a glob in the cat verb by
default. (Closes: #904913)
- units: automatically revert to /run logging on shutdown if necessary.
Prevents /var staying busy on shutdown due to journald.
(Closes: #851402)
- bash-completion: don't sort syslog priorities. (Closes: #913222)
- man: add example for setting multiple properties at once.
(Closes: #807464)
* Rebase patches
* Update symbols file for libsystemd0
* core: stop removing non-existent and duplicate lookup paths
* Install static-nodes-permissions.conf tmpfile in udev
-- Michael Biebl <biebl@debian.org> Sat, 31 Aug 2019 00:20:41 +0200
systemd (242-8) unstable; urgency=medium
[ Dan Streetman ]
* d/extra/rules/73-special-net-names.rules: use $$ instead of $ in PROGRAM=
value.
Fixes incorrect variable substitution.
* Rework and improve blacklist handling in debian/tests/upstream
[ Balint Reczey ]
* Various improvements to debian/extra/checkout-upstream making it more
straightforward to override the default behaviour
* Use package version as systemd's reported version (LP: #1849158)
[ Michael Biebl]
* debiant/tests/udev: replace deprecated ADTTMP with AUTOPKGTEST_TMP
-- Michael Biebl <biebl@debian.org> Fri, 08 Nov 2019 23:18:00 +0100
systemd (242-7) unstable; urgency=medium
* sleep: properly pass verb to sleep script
* core: factor root_directory application out of apply_working_directory.
Fixes RootDirectory not working when used in combination with User.
(Closes: #939408)
* shared/bus-util: drop trusted annotation from
bus_open_system_watch_bind_with_description().
This ensures that access controls on systemd-resolved's D-Bus interface
are enforced properly.
(CVE-2019-15718, Closes: #939353)
-- Michael Biebl <biebl@debian.org> Wed, 04 Sep 2019 19:34:17 +0200
systemd (242-6) unstable; urgency=medium
[ Dan Streetman ]
* d/t/control: upstream test requires qemu-system-ppc on ppc64el
* d/t/control: install seabios for upstream test.
Some archs (at least arm64) qemu implementation require the vga bios.
[ Michael Biebl ]
* Drop unused lintian override
* network: fix ListenPort= in [WireGuard] section (Closes: #936198)
* d/e/r/73-usb-net-by-mac.rules: import net.ifnames only for network devices
(Closes: #934589)
* d/e/r/73-usb-net-by-mac.rules: skip if iface name was provided by
user-space
* Drop dbus activation stub service.
Since dbus 1.11.0, a dbus-daemon that is run with --systemd-activation
automatically assumes that o.fd.systemd1 is an activatable service.
As a result, with a new enough dbus version,
/usr/share/dbus-1/services/org.freedesktop.systemd1.service and
/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service
become unnecessary and can be removed. (Closes: #914015)
* Revert "core: check start limit on condition checks too"
If a unit was referenced too often, it hit the restart limit and the
unit was marked as failed. Fixes a regression introduced in v242.
(Closes: #935829)
[ Michael Prokop ]
* README.Debian: document KillUserProcesses behavior in Debian
-- Michael Biebl <biebl@debian.org> Tue, 03 Sep 2019 11:09:07 +0200
systemd (242-5) unstable; urgency=medium
[ Dan Streetman ]
* d/rules: add CONFFGLAGS_UPSTREAM to dh_auto_configure -- params
[ Michael Biebl ]
* core: never propagate reload failure to service result.
Fixes a regression introduced in v239 where the main process of a
service unit gets killed on reload if ExecReload fails. (Closes: #936032)
* shared/seccomp: add sync_file_range2.
Some architectures need the arguments to be reordered because of alignment
issues. Otherwise, it's the same as sync_file_range.
Fixes sync_file_range failures in nspawn containers on arm, ppc.
(Closes: #935091)
* bash-completion: don't sort syslog priorities.
By default, the available completions are sorted alphabetically, which
is counterproductive in case of syslog priorities. Override the default
behavior using the `nosort` option. (Closes: #913222)
* test-bpf: skip test when run inside containers
-- Michael Biebl <biebl@debian.org> Thu, 29 Aug 2019 16:18:18 +0200
systemd (242-4) unstable; urgency=medium
* Upload to unstable
-- Michael Biebl <biebl@debian.org> Wed, 21 Aug 2019 22:09:13 +0200
systemd (242-3) experimental; urgency=medium
[ Dan Streetman ]
* d/t/boot-and-services: fix test_failing()
* d/t/boot-and-services: check for any kernel message, not just first kernel
message (Closes: #929730)
* d/t/upstream: add TEST-30, TEST-34 to blacklist
* d/t/timedated: replace systemctl is-active with systemctl show
* d/t/control: root-unittests can break networking, add breaks-testbed
* d/t/control: mark udev test skippable
* d/t/upstream: always cleanup after (and before) each test
* d/t/control: upstream test requires dmeventd
* d/e/checkout-upstream: don't remove .git
* d/e/checkout-upstream: move change to debian/ files above other changes
* d/e/checkout-upstream: add UPSTREAM_KEEP_CHANGELOG param
* d/e/checkout-upstream: create git commits for each change
* d/e/checkout-upstream: switch from 'quilt' to 'native' format
* d/e/checkout-upstream: set user.name, user.email if unset
* d/t/storage: change plaintext_name to include testname
* d/t/storage: increase wait for plaintext_dev from 5 to 30 seconds
* d/t/storage: wait for service to start, only stop if active
* d/t/storage: don't search for 'scsi_debug' in ask_password
* d/t/storage: manage scsi_debug using add_hosts (Closes: #929728)
* d/t/storage: use short timeout waiting for scsi_debug block dev to appear
* d/t/storage: convert password agent into normal Thread
* d/t/storage: fail if socket info not in ask_password contents
* d/t/boot-smoke: pass failure reason to fail() to print instead of separate
echo
* d/t/boot-smoke: in fail() set +e so errors are ignored while gathering
data
* d/t/boot-smoke: gather still running jobs in fail()
* d/t/boot-smoke: wait for is-system-running
* d/t/boot-smoke: call fail if pidof polkitd fails
* d/t/boot-smoke: remove check for running jobs
[ Michael Biebl ]
* d/t/boot-smoke: check for NetworkManager instead of D-Bus activated
polkitd (Closes: #934992)
-- Michael Biebl <biebl@debian.org> Wed, 21 Aug 2019 00:12:22 +0200
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog systemd-container`.
Generated by dwww version 1.16 on Tue Dec 16 07:15:05 CET 2025.