Repository navigation

use /etc/clonetab to provide devices to be cloned - #1

Open

src-up wants to merge 117 commits into

mainfrom

PR-etc-clonetab

Open

use /etc/clonetab to provide devices to be cloned#1
src-up wants to merge 117 commits into
mainfrom
PR-etc-clonetab

Commits on Jul 2, 2026
- core: add all manager timestamps to metrics report
  bluca
  committed
  c32bd8b
- report: drop redundant .generate = NULL metric initializers
  bluca
  committed
  cb615e6
- resolve: fix segfault when built with OPENSSL_NO_DEPRECATED_3_0
  yuwata
  committed
  6268b09
- crypto-util: load several more symbols
  yuwata
  committed
  5fec709
- resolve: add unit test for dnssec_rsa_verify_raw()
  yuwata
  committed
  6bf0540
- resolve: make dnssec_rsa_verify_raw() take struct iovec
  yuwata
  committed
  918193b
- resolved: migrate RSA key construction to OpenSSL 3 EVP API
  yuwata
  committed
  cd3c085
- resolve: add unit test for dnssec_ecdsa_verify_raw()
  yuwata
  committed
  59fa4dd
- resolve: make dnssec_ecdsa_verify_raw() take struct iovec
  yuwata
  committed
  13be553
- resolved: migrate ECDSA verification to OpenSSL 3 EVP API
  yuwata
  committed
  c18ee62
- crypto-util: drop unused deprecated symbols
  yuwata
  committed
  ec35f20
- crypto-util: simplify pubkey_fingerprint()
  yuwata
  committed
  c0c6a9e
- crypto-util: use correct cleanup function for OpenSSL buffers
  yuwata
  committed
  94e8d72
- crypto-util: simplify openssl_extract_public_key()
  yuwata
  committed
  fc54be2
- crypto-util: drop manual endianness handling in rsa_pkey_from_n_e()
  yuwata
  committed
  b5e7513
- memory-util: drop unused memdup_reverse()
  yuwata
  committed
  75bc106
- crypto-util: drop dlopen_libcrypto() from static functions
  yuwata
  committed
  3aaffa4
- crypto-util: make OpenSSL ENGINE API symbols optional during dlopen
  yuwata
  committed
  7c21061
- crypto-util: move functions
  yuwata
  committed
  7301e26
- crypto-util: drop redundant logs
  yuwata
  committed
  f63cc9a
- crypto-util: allow loading private keys from engine/provider without UI support
  yuwata
  committed
  805f8c6
- crypto-util: make OpenSSL UI API symbols optional during dlopen
  yuwata
  committed
  d26da0a
- crypto-util: drop unused symbol
  yuwata
  committed
  71a94be
- ci/build-test: try to build with OPENSSL_NO_DEPRECATED
  yuwata
  committed
  4bf6e75
- bless-boot: avoid false maybe-uninitialized warning
  yuwata
  committed
  d04423c
- tpm2: optionally disable TPMA_NV_ORDERLY for NvPCRs
  poettering
  committed
  55be5e1
- tpm2: cache NvPCR NV space exhaustion via flag files in /run/
  poettering
  committed
  8aaa8de
- update TODO
  poettering
  committed
  a84642e
- Improve OpenSSL 4 support (#42843)
  yuwata
  authored
  2d372e2
- test: ignore fails when the formatted timezone differs from the current one
  
  mrc0mmand
  authored and
  yuwata
  committed
  7273d38
Commits on Jul 3, 2026
- tpm2: optionally disable TPMA_NV_ORDERLY for NvPCRs (#42848)
  poettering
  authored
  9d37c61
- calendarspec: warn on weekday/date conflict in systemd-analyze and systemd-run
  
  lionheartyu
  authored and
  poettering
  committed
  21de611
- core: add all manager timestamps to metrics report (#42842)
  keszybz
  authored
  8c4218a
- machined: drop superfluos 'supervisor' varlink input parameter for register method
  
  bluca
  authored and
  keszybz
  committed
  b7769aa
- journal: move audit-type.[ch] and related generators to src/journal
  yuwata
  committed
  193749a
- tree-wide: get rid of backslashes in file names
  
  daandemeyer
  authored and
  keszybz
  committed
  d04fbcf
- boot: reject GPT headers with SizeOfPartitionEntry below the minimum
  bluca
  committed
  d06d8a2
- include: do not override kernel headers with libaudit headers
  yuwata
  committed
  0d06dba
- sysinstall: Look for valid kernel image before installing
  jsparber
  committed
  98b875b
- sysinstall: Add varlink interface
  jsparber
  committed
  c17d0c7
- test: Add basic test for sysinstall varlink interface
  jsparber
  committed
  2acdbae
- tree-wide: drop unnecessary header inclusions
  yuwata
  committed
  09859db
- pull: introduce pull-forward.h
  yuwata
  committed
  0f607da
- meson: use tpm2_cflags dependency rather than tpm2
  yuwata
  committed
  e51a012
- meson: do not pass space-separated list of libraries
  yuwata
  committed
  dc28de0
- meson: merge three glib cflags dependencies
  yuwata
  committed
  cff4248
- meson: merge two libelf-related clfags dependencies
  yuwata
  committed
  4c5cbc9
- tree-wide: check if necessary cflags dependencies are set
  yuwata
  committed
  5280cd7
- ci/build-test: add build test for -Dsystemd-multicall-binary=true
  yuwata
  committed
  738884d
- Add varlink interface for sysinstall (#42261)
  poettering
  authored
  79c6e4f
- test-socket-util: convert to new ASSERT macros
  
  keszybz
  authored and
  bluca
  committed
  713a2cf
- sysupdate: drop redundant ()
  poettering
  committed
  ea21c6d
- sysupdate: replace local specifier_table[] by common system_and_tmp_specifier_table[]
  poettering
  committed
  5275695
- sysupdate: align macro backslashes like we usually do
  poettering
  committed
  922849a
- sysupdate: split out reading of feature files into separate helper
  poettering
  committed
  8a502c4
- sysupdate: rename read_definitions() → read_transfers()
  poettering
  committed
  5512775
- sysupdate: split out url config parser into new file
  poettering
  committed
  138829b
- boot: make device_path_next_node() robust against malformed zero-length nodes
  bluca
  committed
  3bcd707
- boot: initialize return parameters on zero-length EFI variable read
  bluca
  committed
  7b7599b
- boot: don't unquote an empty value in line_get_key_value()
  bluca
  committed
  7378b51
- boot: reject inner kernel entry point outside the image
  bluca
  committed
  ecf3f50
- boot: bound PE section VirtualSize before zeroing the inner kernel
  bluca
  committed
  feeba8f
- boot: check PE section against SizeOfImage
  bluca
  committed
  dc55e4a
- boot: restore RW/RO memory attributes on every error
  bluca
  committed
  ba0c1c6
- boot: restore parent loaded image when initrd registration fails
  bluca
  committed
  baad174
- boot: require a minimum PE optional header size in verify_pe()
  bluca
  committed
  918e8f9
- tree-wide: add mechanism to detect missing cflags dependencies (#42866)
  keszybz
  authored
  977d37f
- test: register SysInstall Varlink IDL in test-varlink-idl.c
  poettering
  committed
  61ddb06
- prep work for #42651 (#42871)
  poettering
  authored
  346d3fe
- boot: various hardening fixes flagged by kres (#42767)
  bluca
  authored
  1b16936
- po: Translated using Weblate (Czech)
  
  nijel
  authored and
  weblate
  committed
  6a7f0e6
- po: Translated using Weblate (French)
  
  HarmfulBreeze
  authored and
  weblate
  committed
  85b8fd5
- po: Translated using Weblate (Chinese (Simplified) (zh_CN))
  
  JesseGuoTech
  authored and
  weblate
  committed
  40533dc
- Translations update from Fedora Weblate (#42878)
  bluca
  authored
  19ddfe2
- varlink: properly linebreak upgrade/more flag generation
  poettering
  committed
  85a210c
- hwdb: map mic-mute key on Logitech K950 (Bluetooth)
  
  MPW1412
  authored and
  bluca
  committed
  7961b4a
Commits on Jul 4, 2026
- hwdb: Make Amlogic burn mode work out-of-box
  
  niclimcy
  authored and
  bluca
  committed
  67f72f1
Commits on Jul 6, 2026
- vmspawn: select coco firmware via fw descriptors
  katexochen
  committed
  fc077f0
- vmspawn: verify selected fw matches requirements
  katexochen
  committed
  2f95c17
- vmspawn: allow opt-in Secure Boot firmware for coco
  katexochen
  committed
  6f2f5b9
- sd-device: bound the tag filter BPF program size
  bluca
  committed
  2f72db1
- hashmap: honor the value destructor in set_ensure_consume()
  bluca
  committed
  87e57c5
- sd-device: avoid 32-bit overflow in the monitor properties bounds check
  bluca
  committed
  7003a9b
- udev: track remaining buffer size across $links devlinks
  bluca
  committed
  a8d8009
- network: initialize dot_servers before CLEANUP_ARRAY
  bluca
  committed
  9cae6d9
- sd-netlink: disconnect the slot on async/match error paths
  bluca
  committed
  25c016f
- sd-bus: re-check match_callbacks_modified in the argNhas value loop
  bluca
  committed
  058b0de
- sd-bus: drop half-registered vtable members on failure
  bluca
  committed
  b7b1303
- udev: clear event back-pointer when freeing a worker
  bluca
  committed
  7eb7d46
- network: implement refcounting for SR-IOV objects
  bluca
  committed
  134df27
- resolve: anchor the service browser from mDNS maintenance queries
  bluca
  committed
  46c15e8
Commits on Jul 7, 2026
- vmspawn: discover firmware descriptors, opt-in secure boot support for coco (#42876)
  poettering
  authored
  7ab48ac
- journalctl: add follow mode to the varlink method
  
  mvo5
  authored and
  keszybz
  committed
  6bfd342
- hwdb: add MSI Claw 8 EX AI+ CG3EM to keyboard hwdb list
  
  matte-schwartz
  authored and
  bluca
  committed
  5f6ad50
- Assorted libsystemd/network hardening fixes flagged by kres (#42865)
  keszybz
  authored
  e20ab66
- mkosi: update fedora commit reference to 45c16dd369c961b70664e473552def34d5469664
  
  keszybz
  authored and
  bluca
  committed
  47af1ef
- meson: move 'conditions' to the end
  keszybz
  committed
  88b51ff
- meson: rename extract+objects to export+import
  keszybz
  committed
  f00ccf9
- meson: adjust naming of '*extract*' variables
  keszybz
  committed
  aad1e61
- meson: build .standalone versions of the report binaries
  keszybz
  committed
  9155c0a
- meson: use modern syntax for dict checks
  keszybz
  committed
  f731334
- mkosi: update fedora commit reference to 57cbcf979ce2dd872a871c59e87d2c65dfa996e6
  keszybz
  committed
  e785d81
- copy: keep replaced target after publish errors
  
  lionheartyu
  authored and
  keszybz
  committed
  366fa46
- pull: honor sync for OCI artifacts
  
  lionheartyu
  authored and
  keszybz
  committed
  d8c1f1d
- sbsign: write unaligned signature size into WIN_CERTIFICATE header
  
  Vsevolod Kozlov
  authored and
  keszybz
  committed
  93aadbf
- portable: detect drop-in-only attachments
  
  lionheartyu
  authored and
  keszybz
  committed
  a977bf4
- Adjust naming of meson variables and allow systemd-report* binaries to be built standalone (#42874)
  keszybz
  authored
  6b325a3
Commits on Jul 8, 2026
- gitignore: add .envrc, .direnv
  
  katexochen
  authored and
  poettering
  committed
  626161a
- sysinstall: Disable timeout for connection with repart
  
  jsparber
  authored and
  poettering
  committed
  d9c0d79
- core: support stdio fd passing in io.systemd.Unit.StartTransient
  
  lsjostro
  authored and
  mvo5
  committed
  231fddc
- measure-smbios: bound type 1 length before zeroing wake-up type
  
  jmestwa-coder
  authored and
  poettering
  committed
  636b173
- bootctl: Fix prepend when installing systemd-boot for the first time
  
  elliotberman
  authored and
  bluca
  committed
  1b03303
- fsck: don't apply invalid mode or repair values
  
  lionheartyu
  authored and
  bluca
  committed
  da9a330
- dns-rr: fix SOA JSON fields
  
  lionheartyu
  authored and
  bluca
  committed
  34a2223
- creds-util: log when we remove a secret from a different machine
  
  player131007
  authored and
  bluca
  committed
  0168b13
- sd-event: use CLOCK_BOOTTIME for rate limits
  
  mrc0mmand
  authored and
  bluca
  committed
  9ae50c7
- clonesetup: add support to clone devices via /etc/clonetab
  src-up
  committed
  411ad59

Commits

Commits on Jul 2, 2026

Commits on Jul 3, 2026

Commits on Jul 4, 2026

Commits on Jul 6, 2026

Commits on Jul 7, 2026

Commits on Jul 8, 2026