Lennart Poettering d0badc0a61 sysupdate: add simple "freshness" validation to systemd-sysupdate ...

In order to make "freeze" attacks against the update logic harder let's
add the ability to encode a "Best Before" date into SHA256SUMS directory
listings: if the current time is already beyond that time, we'll ignore
the SHA256SUMS as "stale" and fail the upgrade. Or in other words: the
freeze attack will now result in a client-side error eventually, instead
of success state.

The best before data is encoded in an optional pseudo-file listed in SHA256SUMS:
any file named BEST-BEFORE-YYYY-MM-DD.

2026-01-20 21:22:35 +01:00

..

_data

docs: replace link to RHEL7 document with RHEL9 documents

2025-01-07 02:05:16 +09:00

_includes

Update footer.html to 2025

2025-02-17 19:49:32 +00:00

_layouts

docs: adapt forward layout to systemd.io design

2022-05-21 18:09:50 +02:00

assets

docs/DEBUGGING: add screenshot and fix path to it

2024-03-27 06:53:46 +01:00

fonts

docs: make it pretty

2019-12-11 17:04:20 +01:00

var-log

meson: install README.logs independently of HAVE_SYSV_COMPAT

2024-11-29 14:18:15 +01:00

_config.yml

Revert "docs: don't suffix page permalink with a slash"

2024-04-17 20:53:49 +02:00

.gitattributes

docs: mark spdx headers with the default license to website files

2021-10-18 09:43:18 +02:00

.gitignore

gitignore: add jekyll cache directory

2021-06-24 10:20:29 +02:00

API_FILE_SYSTEMS.md

docs/API_FILE_SYSTEM: format text

2024-03-27 07:11:53 +01:00

APPSTREAM_BUNDLE.md

sysupdate: Support changelogs & appstream metadata

2024-07-12 14:38:09 +01:00

ARCHITECTURE.md

docs: mention src/include/ directories

2025-07-11 13:05:46 +09:00

AUTOMATIC_BOOT_ASSESSMENT.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

BACKPORTS.md

docs/BACKPORTS: update

2025-11-12 23:01:35 +00:00

BLOCK_DEVICE_LOCKING.md

tree-wide: open block device locks in writable mode

2025-10-22 22:56:02 +02:00

BOOT_LOADER_INTERFACE.md

Boot loader menu docs and tweaks (#39842)

2025-12-17 23:00:59 +00:00

BOOT_LOADER_SPECIFICATION.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

BOOT.md

docs(boot): fix typo in code block

2025-09-27 00:21:53 +09:00

BUILDING_IMAGES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

CATALOG.md

tree-wide: "human readable" → "human-readable"

2025-07-07 11:21:25 +02:00

CGROUP_DELEGATION.md

docs: Document manual cgroup controller management for Delegate=yes

2025-04-25 00:42:24 +01:00

CODE_OF_CONDUCT.md

docs/CODE_OF_CONDUCT: format text

2024-03-27 07:11:55 +01:00

CODE_QUALITY.md

doc: fix integration tests guide reference

2025-06-04 07:29:16 +09:00

CODING_STYLE.md

docs: Document practice of using comments for argument names

2026-01-14 16:52:58 +01:00

CONTAINER_INTERFACE.md

docs: add comment about requiring the mount hierarchy to be mounted MS_SHARED

2025-11-02 00:19:57 +00:00

CONTRIBUTING.md

docs: Add policy on AI generated code to contributing doc

2025-07-29 18:40:26 +02:00

CONTROL_GROUP_INTERFACE.md

docs: reference cgroup v1 as historical and unsupported

2025-03-10 05:24:19 +09:00

CONVERTING_TO_HOMED.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

COREDUMP_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

COREDUMP.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

CREDENTIALS.md

docs: Clarify requirement

2024-12-28 12:24:42 +09:00

DAEMON_SOCKET_ACTIVATION.md

docs/DAEMON_SOCKET_ACTIVATION

2024-06-03 15:22:54 +09:00

DEBUGGING.md

docs/DEBUGGING.md: use an underscore in the kernel command line option

2024-04-29 14:16:57 +02:00

DESKTOP_ENVIRONMENTS.md

doc: fix typo

2024-10-17 00:49:59 +09:00

DISCOVERABLE_PARTITIONS.md

docs: DPS and BLS have moved to uapi-group.org

2022-11-02 07:31:18 +09:00

DISK-QUOTAS-PROJECTIDS.md

core: add quota support for State, Cache, and Log exec directories

2025-07-07 17:28:47 +00:00

DISTRO_PORTING.md

Drop support for SysV rc-local script support

2026-01-16 22:56:28 +09:00

ELF_DLOPEN_METADATA.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

ELF_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

ENVIRONMENT.md

sysupdate: add simple "freshness" validation to systemd-sysupdate

2026-01-20 21:22:35 +01:00

FACTORY_RESET.md

docs: document factory reset logic

2025-03-05 12:38:30 +01:00

FAQ.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

favicon.png

docs: make it pretty

2019-12-11 17:04:20 +01:00

favicon.svg

docs: mark spdx headers with the default license to website files

2021-10-18 09:43:18 +02:00

FILE_DESCRIPTOR_STORE.md

tree-wide: extend $LISTEN_FDS protocol with $LISTEN_PIDFDID

2025-10-22 09:34:14 +02:00

GOVERNANCE.md

docs: add a governance document

2025-09-24 08:48:17 +02:00

GROUP_RECORD.md

docs: punctuation and a typo

2025-05-14 18:06:04 +02:00

HACKING.md

docs: Add explicit reference to unprivileged userns docs of mkosi

2025-12-28 09:31:47 +00:00

HOME_DIRECTORY.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

INCOMPATIBILITIES.md

docs,man: more SysV compat removal notes

2026-01-18 15:50:54 +09:00

index.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

INHIBITOR_LOCKS.md

docs: properly document inhibitor locks

2025-06-26 15:21:01 +02:00

INITRD_INTERFACE.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

JOURNAL_EXPORT_FORMATS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

JOURNAL_FILE_FORMAT.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

JOURNAL_NATIVE_PROTOCOL.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

MEMORY_PRESSURE.md

docs: Update MEMORY_PRESSURE to mention recent improvements in GLib

2025-11-17 18:05:41 +01:00

MINIMAL_BUILDS.md

tree-wide: drop unused libcap dependencies

2025-10-24 01:52:59 +09:00

MOUNT_REQUIREMENTS.md

docs/MOUNT_REQUIREMENTS: fix typo

2025-11-25 22:52:10 +09:00

MY_SERVICE_CANT_GET_REALTIME.md

docs: fix typo in filename: REATLIME -> REALTIME

2024-09-17 10:21:54 +02:00

NETWORK_ONLINE.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

OPTIMIZATIONS.md

docs/OPTIMIZATIONS: format text

2024-03-27 07:11:59 +01:00

OSC_CONTEXT.md

docs: add redirection of the osc context to uapi website

2025-12-18 10:50:23 +01:00

PACKAGE_METADATA_FOR_EXECUTABLE_FILES.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

PASSWORD_AGENTS.md

docs/PASSWORD_AGENTS: document the AcceptCached= field

2025-12-31 10:59:41 -05:00

PAX_CONTROL_GROUPS.md

Restore docs/PAX_CONTROL_GROUPS

2025-03-14 20:33:37 +09:00

PORTABILITY_AND_STABILITY.md

tree-wide: "human readable" → "human-readable"

2025-07-07 11:21:25 +02:00

PORTABLE_SERVICES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

PORTING_TO_NEW_ARCHITECTURES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

PREDICTABLE_INTERFACE_NAMES.md

docs/PREDICTABLE_INTERACES: format text

2024-03-27 07:26:56 +01:00

PRESET.md

tree-wide: Add initrd presets

2025-07-03 17:43:01 +02:00

RANDOM_SEEDS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

RELEASE.md

docs/RELEASE: correct numbering without 7

2025-12-18 15:44:08 +01:00

RESOLVED-VPNS.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

ROOT_STORAGE_DAEMONS.md

docs: fix SurviveFinalKillSignal typo

2025-07-22 18:03:39 +01:00

ROOTFS_DISCOVERY.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

rootfs-discovery-flow.svg

doc: add document explaining the 3 key components of the boot and how we find the rootfs

2025-02-26 09:55:43 +01:00

SECURITY.md

docs/SECURITY: format text

2024-03-27 07:12:01 +01:00

SEPARATE_USR_IS_BROKEN.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

style.css

docs: desaturate dark-mode background color

2022-06-10 13:52:31 +02:00

SYSLOG.md

docs/SYSLOG: format text

2024-03-27 07:12:01 +01:00

SYSTEMD_FILE_HIERARCHY_REQUIREMENTS.md

docs/SYSTEMD_FILE_HIERARCHY: format text

2024-03-27 07:17:08 +01:00

TEMPORARY_DIRECTORIES.md

tree-wide: the env var is called $XDG_RUNTIME_DIR, not $XDG_RUNTIME_DIRECTORY

2025-07-15 12:49:08 +02:00

TESTING_WITH_SANITIZERS.md

docs: fix mkosi section for Environment= setting

2025-04-16 08:30:25 +09:00

THE_CASE_FOR_THE_USR_MERGE.md

tree-wise: use "lightweight" spelling

2024-10-18 18:43:40 +02:00

TIPS_AND_TRICKS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

TPM2_PCR_MEASUREMENTS.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

TRANSIENT-SETTINGS.md

core: add quota support for State, Cache, and Log exec directories

2025-07-07 17:28:47 +00:00

TRANSLATORS.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

UIDS-GIDS.md

docs: fix conversion / calculation errors

2025-10-20 10:36:08 +09:00

USER_GROUP_API.md

userdb: add support for looking up users or groups by uuid.

2025-07-21 19:29:42 +00:00

USER_NAMES.md

docs/USER_NAMES: format text

2024-03-27 07:12:04 +01:00

USER_RECORD_BLOB_DIRS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

USER_RECORD.md

Update USER_RECORD.md (#38283)

2025-07-22 18:27:37 +09:00

USERDB_AND_DESKTOPS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

VARLINK.md

docs: initial version of varlink guideline

2025-11-14 17:54:20 +01:00

VM_INTERFACE.md

docs: fix typo

2024-03-15 04:04:01 +09:00

WRITING_DESKTOP_ENVIRONMENTS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

WRITING_DISPLAY_MANAGERS.md

docs: drop link to obsolete multiseat page

2024-05-28 14:48:56 +02:00

WRITING_NETWORK_CONFIGURATION_MANAGERS.md

docs/WRITING_NETWORK_CONFIG_MANAGERS: format text

2024-03-27 07:31:54 +01:00

WRITING_RESOLVER_CLIENTS.md

docs/WRITING_RESOLVER_CLIENTS: update manpage link

2024-03-27 07:11:50 +01:00

WRITING_VM_AND_CONTAINER_MANAGERS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00