Merge pull request #29721 from poettering/systemd-project

New capsule@.service feature
This commit is contained in:
Zbigniew Jędrzejewski-Szmek
2024-03-26 13:19:33 +01:00
committed by GitHub
28 changed files with 717 additions and 55 deletions

6
TODO
View File

@@ -356,12 +356,6 @@ Features:
policy from currently booted kernel/event log, to close gap for first boot
for pre-built images
* add a new systemd-project@.service that is very similar to user@.service but
uses DynamicUser=1 and no PAMName= to invoke an unprivileged somewhat
light-weight service manager. Use HOME=/var/lib/systemd/projects/%i as home
dir. Similar for $XDG_RUNTIME_DIR. Start project@%i.target. Use LogField= to
add a field identifying the project.
* in sd-boot and sd-stub measure the SMBIOS vendor strings to some PCR (at
least some subset of them that look like systemd stuff), because apparently
some firmware does not, but systemd honours it. avoid duplicate measurement