Changes between Initial Version and Version 1 of Ticket #4298, comment 2
- Timestamp:
- 07/10/2018 08:12:35 PM (6 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Ticket #4298, comment 2
initial v1 1 1 2 {{{ 2 3 3 CHANGES WITH 239: 4 4 5 *NETWORK INTERFACE DEVICE NAMING CHANGES: systemd-udevd's "net_id"5 NETWORK INTERFACE DEVICE NAMING CHANGES: systemd-udevd's "net_id" 6 6 builtin will name network interfaces differently than in previous 7 7 versions for virtual network interfaces created with SR-IOV and NPAR … … 23 23 not renamed and the kernel default (eth<n>) was used. 24 24 25 *AF_INET and AF_INET6 are dropped from RestrictAddressFamilies= in25 AF_INET and AF_INET6 are dropped from RestrictAddressFamilies= in 26 26 systemd-logind.service. Since v235, IPAddressDeny=any has been set to 27 27 the unit. So, it is expected that the default behavior of … … 32 32 e.g. NIS. 33 33 34 *When the RestrictNamespaces= unit property is specified multiple34 When the RestrictNamespaces= unit property is specified multiple 35 35 times, then the specified types are merged now. Previously, only the 36 36 last assignment was used. So, if distribution packagers or … … 38 38 may be necessary to update the file. 39 39 40 *When OnFailure= is used in combination with Restart= on a service40 When OnFailure= is used in combination with Restart= on a service 41 41 unit, then the specified units will no longer be triggered on 42 42 failures that result in restarting. Previously, the specified units … … 46 46 documentation. 47 47 48 *systemd-tmpfiles will now print a notice whenever it encounters48 systemd-tmpfiles will now print a notice whenever it encounters 49 49 tmpfiles.d/ lines referencing the /var/run/ directory. It will 50 50 recommend reworking them to use the /run/ directory instead (for … … 54 54 them. 55 55 56 *systemctl disable/unmask/preset/preset-all cannot be used with56 systemctl disable/unmask/preset/preset-all cannot be used with 57 57 --runtime. Previously this was allowed, but resulted in unintuitive 58 58 behaviour that wasn't useful. systemctl disable/unmask will now undo … … 60 60 any relevant symlinks both in /run and /etc. 61 61 62 *Note that all long-running system services shipped with systemd will62 Note that all long-running system services shipped with systemd will 63 63 now default to a system call whitelist (rather than a blacklist, as 64 64 before). In particular, systemd-udevd will now enforce one too. For … … 69 69 reboot and clock changing operations from udev rules. 70 70 71 *sd-boot acquired new loader configuration settings to optionally turn71 sd-boot acquired new loader configuration settings to optionally turn 72 72 off Windows and MacOS boot partition discovery as well as 73 73 reboot-into-firmware menu items. It is also able to pick a better … … 75 75 configuration settings to change the resolution explicitly. 76 76 77 *systemd-resolved now supports DNS-over-TLS. It's still77 systemd-resolved now supports DNS-over-TLS. It's still 78 78 turned off by default, use DNSOverTLS=opportunistic to turn it on in 79 79 resolved.conf. We intend to make this the default as soon as couple … … 81 81 establishing a TLS/TCP connection are implemented. 82 82 83 *systemd-resolved.service and systemd-networkd.service now set83 systemd-resolved.service and systemd-networkd.service now set 84 84 DynamicUser=yes. The users systemd-resolve and systemd-network are 85 85 not created by systemd-sysusers. 86 86 87 *The systemd-resolve tool has been renamed to resolvectl (it also87 The systemd-resolve tool has been renamed to resolvectl (it also 88 88 remains available under the old name, for compatibility), and its 89 89 interface is now verb-based, similar in style to the other <xyz>ctl 90 90 tools, such as systemctl or loginctl. 91 91 92 *The resolvectl/systemd-resolve tool also provides 'resolvconf'92 The resolvectl/systemd-resolve tool also provides 'resolvconf' 93 93 compatibility. It may be symlinked under the 'resolvconf' name, in 94 94 which case it will take arguments and input compatible with the 95 95 Debian and FreeBSD resolvconf tool. 96 96 97 *Support for suspend-then-hibernate has been added, i.e. a sleep mode97 Support for suspend-then-hibernate has been added, i.e. a sleep mode 98 98 where the system initially suspends, and after a time-out resumes and 99 99 hibernates again. 100 100 101 *networkd's ClientIdentifier= now accepts a new option "duid-only". If101 networkd's ClientIdentifier= now accepts a new option "duid-only". If 102 102 set the client will only send a DUID as client identifier. 103 103 104 *The nss-systemd glibc NSS module will now enumerate dynamic users and104 The nss-systemd glibc NSS module will now enumerate dynamic users and 105 105 groups in effect. Previously, it could resolve UIDs/GIDs to user 106 106 names/groups and vice versa, but did not support enumeration. 107 107 108 *journald's Compress= configuration setting now optionally accepts a108 journald's Compress= configuration setting now optionally accepts a 109 109 byte threshold value. All journal objects larger than this threshold 110 110 will be compressed, smaller ones will not. Previously this threshold 111 111 was not configurable and set to 512. 112 112 113 *A new system.conf setting NoNewPrivileges= is now available which may113 A new system.conf setting NoNewPrivileges= is now available which may 114 114 be used to turn off acquisition of new privileges system-wide 115 115 (i.e. set Linux' PR_SET_NO_NEW_PRIVS for PID 1 itself, and thus also … … 120 120 in particular su and sudo. 121 121 122 *A new service systemd-time-sync-wait.service has been added. If122 A new service systemd-time-sync-wait.service has been added. If 123 123 enabled it will delay the time-sync.target unit at boot until time 124 124 synchronization has been received from the network. This … … 127 127 services. 128 128 129 *When hibernating, systemd will now inform the kernel of the image129 When hibernating, systemd will now inform the kernel of the image 130 130 write offset, on kernels new enough to support this. This means swap 131 131 files should work for hibernation now. 132 132 133 *When loading unit files, systemd will now look for drop-in unit files133 When loading unit files, systemd will now look for drop-in unit files 134 134 extensions in additional places. Previously, for a unit file name 135 135 "foo-bar-baz.service" it would look for dropin files in … … 146 146 name following the last dash. 147 147 148 *Unit files and other configuration files that support specifier148 Unit files and other configuration files that support specifier 149 149 expansion now understand another three new specifiers: %T and %V will 150 150 resolve to /tmp and /var/tmp respectively, or whatever temporary … … 152 152 /etc (for system units) or $XDG_CONFIG_HOME (for user units). 153 153 154 *The ExecStart= lines of unit files are no longer required to154 The ExecStart= lines of unit files are no longer required to 155 155 reference absolute paths. If non-absolute paths are specified the 156 156 specified binary name is searched within the service manager's … … 159 159 use absolute paths for all binaries specified in unit files. 160 160 161 *Units gained a new load state "bad-setting", which is used when a161 Units gained a new load state "bad-setting", which is used when a 162 162 unit file was loaded, but contained fatal errors which prevent it 163 163 from being started (for example, a service unit has been defined 164 164 lacking both ExecStart= and ExecStop= lines). 165 165 166 *coredumpctl's "gdb" verb has been renamed to "debug", in order to166 coredumpctl's "gdb" verb has been renamed to "debug", in order to 167 167 support alternative debuggers, for example lldb. The old name 168 168 continues to be available however, for compatibility reasons. Use the … … 170 170 to pick an alternative debugger instead of the default gdb. 171 171 172 *systemctl and the other tools will now output escape sequences that172 systemctl and the other tools will now output escape sequences that 173 173 generate proper clickable hyperlinks in various terminal emulators 174 174 where useful (for example, in the "systemctl status" output you can … … 184 184 https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda 185 185 186 *networkd's .network files now support a new IPv6MTUBytes= option for186 networkd's .network files now support a new IPv6MTUBytes= option for 187 187 setting the MTU used by IPv6 explicitly as well as a new MTUBytes= 188 188 option in the [Route] section to configure the MTU to use for … … 194 194 settings. 195 195 196 *networkd will now automatically make use of the kernel's route196 networkd will now automatically make use of the kernel's route 197 197 expiration feature, if it is available. 198 198 199 *udevd's .link files now support setting the number of receive and199 udevd's .link files now support setting the number of receive and 200 200 transmit channels, using the RxChannels=, TxChannels=, 201 201 OtherChannels=, CombinedChannels= settings. 202 202 203 *Support for UDPSegmentationOffload= has been removed, given its203 Support for UDPSegmentationOffload= has been removed, given its 204 204 limited support in hardware, and waning software support. 205 205 206 *networkd's .netdev files now support creating "netdevsim" interfaces.207 208 *PID 1 learnt a new bus call GetUnitByControlGroup() which may be used206 networkd's .netdev files now support creating "netdevsim" interfaces. 207 208 PID 1 learnt a new bus call GetUnitByControlGroup() which may be used 209 209 to query the unit belonging to a specific kernel control group. 210 210 211 *systemd-analyze gained a new verb "cat-config", which may be used to211 systemd-analyze gained a new verb "cat-config", which may be used to 212 212 dump the contents of any configuration file, with all its matching 213 213 drop-in files added in, and honouring the usual search and masking … … 221 221 list of tmpfiles.d/ lines in place. 222 222 223 *timedatectl gained three new verbs: "show" shows bus properties of223 timedatectl gained three new verbs: "show" shows bus properties of 224 224 systemd-timedated, "timesync-status" shows the current NTP 225 225 synchronization state of systemd-timesyncd, and "show-timesync" 226 226 shows bus properties of systemd-timesyncd. 227 227 228 *systemd-timesyncd gained a bus interface on which it exposes details228 systemd-timesyncd gained a bus interface on which it exposes details 229 229 about its state. 230 230 231 *A new environment variable $SYSTEMD_TIMEDATED_NTP_SERVICES is now231 A new environment variable $SYSTEMD_TIMEDATED_NTP_SERVICES is now 232 232 understood by systemd-timedated. It takes a colon-separated list of 233 233 unit names of NTP client services. The list is used by 234 234 "timedatectl set-ntp". 235 235 236 *systemd-nspawn gained a new --rlimit= switch for setting initial236 systemd-nspawn gained a new --rlimit= switch for setting initial 237 237 resource limits for the container payload. There's a new switch 238 238 --hostname= to explicitly override the container's hostname. A new … … 246 246 control of /etc/localtime handling of the container. 247 247 248 *systemd-detect-virt gained a new --list switch, which will print a248 systemd-detect-virt gained a new --list switch, which will print a 249 249 list of all currently known VM and container environments. 250 250 251 *Support for "Portable Services" has been added, see251 Support for "Portable Services" has been added, see 252 252 doc/PORTABLE_SERVICES.md for details. Currently, the support is still 253 253 experimental, but this is expected to change soon. Reflecting this … … 256 256 /usr/lib/systemd/portablectl instead. 257 257 258 *journalctl's and systemctl's -o switch now knows a new log output258 journalctl's and systemctl's -o switch now knows a new log output 259 259 mode "with-unit". The output it generates is very similar to the 260 260 regular "short" mode, but displays the unit name instead of the … … 264 264 compatibility with classic /var/log/messages formatting is required. 265 265 266 *A new --dump-bus-properties switch has been added to the systemd266 A new --dump-bus-properties switch has been added to the systemd 267 267 binary, which may be used to dump all supported D-Bus properties. 268 268 (Options which are still supported, but are deprecated, are *not* 269 269 shown.) 270 270 271 *sd-bus gained a set of new calls:271 sd-bus gained a set of new calls: 272 272 sd_bus_slot_set_floating()/sd_bus_slot_get_floating() may be used to 273 273 enable/disable the "floating" state of a bus slot object, … … 279 279 objects and set their description string already during allocation. 280 280 281 *sd-event gained support for watching inotify events from the event281 sd-event gained support for watching inotify events from the event 282 282 loop, in an efficient way, sharing inotify handles between multiple 283 283 users. For this a new function sd_event_add_inotify() has been added. 284 284 285 *sd-event and sd-bus gained support for calling special user-supplied285 sd-event and sd-bus gained support for calling special user-supplied 286 286 destructor functions for userdata pointers associated with 287 287 sd_event_source, sd_bus_slot, and sd_bus_track objects. For this new … … 292 292 sd_event_source_get_destroy_callback have been added. 293 293 294 *The "net.ipv4.tcp_ecn" sysctl will now be turned on by default.295 296 *PID 1 will now automatically reschedule .timer units whenever the294 The "net.ipv4.tcp_ecn" sysctl will now be turned on by default. 295 296 PID 1 will now automatically reschedule .timer units whenever the 297 297 local timezone changes. (They previously got rescheduled 298 298 automatically when the system clock changed.) 299 299 300 *New documentation has been added to document cgroups delegation,300 New documentation has been added to document cgroups delegation, 301 301 portable services and the various code quality tools we have set up: 302 302 … … 305 305 https://github.com/systemd/systemd/blob/master/doc/CODE_QUALITY.md 306 306 307 *The Boot Loader Specification has been added to the source tree.307 The Boot Loader Specification has been added to the source tree. 308 308 309 309 https://github.com/systemd/systemd/blob/master/doc/BOOT_LOADER_SPECIFICATION.md … … 312 312 changes are now accepted through the usual github PR workflow. 313 313 314 *pam_systemd will now look for PAM userdata fields systemd.memory_max,314 pam_systemd will now look for PAM userdata fields systemd.memory_max, 315 315 systemd.tasks_max, systemd.cpu_weight, systemd.io_weight set by 316 316 earlier PAM modules. The data in these fields is used to initialize … … 319 319 external user databases. 320 320 321 *socket units with Accept=yes will now maintain a "refused" counter in321 socket units with Accept=yes will now maintain a "refused" counter in 322 322 addition to the existing "accepted" counter, counting connections 323 323 refused due to the enforced limits. 324 324 325 *The "systemd-path search-binaries-default" command may now be use to325 The "systemd-path search-binaries-default" command may now be use to 326 326 query the default, built-in $PATH PID 1 will pass to the services it 327 327 manages. 328 328 329 *A new unit file setting PrivateMounts= has been added. It's a boolean329 A new unit file setting PrivateMounts= has been added. It's a boolean 330 330 option. If enabled the unit's processes are invoked in their own file 331 331 system namespace. Note that this behaviour is also implied if any … … 336 336 wher this is now used by default. 337 337 338 *ConditionSecurity= gained a new value "uefi-secureboot" that is true338 ConditionSecurity= gained a new value "uefi-secureboot" that is true 339 339 when the system is booted in UEFI "secure mode". 340 340