Luca Boccassi 9876e88e23 ukify: add --pcrsig and --join-pcrsig arguments to append offline signature ...

Add a build parameter to take an existing UKI and attach a .pcrsig section
to it. This allows one to create a UKI with a .pcrpkey section with
--policy-digest to get the json output from sd-measure, sign the digest
offline, and attach the .pcrsig section with the signature later.

2025-02-07 13:58:51 +00:00

..

ac-power

…

analyze

tree-wide: always include our own headers with "" rather than <>

2025-01-21 17:05:36 +00:00

ask-password

tree-wide: use _cleanup_hashmap_free_ and friends

2025-01-19 03:48:15 +09:00

backlight

…

basic

basic/linux: update kernel headers from v6.14-rc1

2025-02-06 16:14:14 +00:00

battery-check

…

binfmt

…

bless-boot

…

boot

boot: rename efifirmware.[ch] -> efi-firmware.[ch]

2025-02-01 13:54:01 +09:00

bootctl

bootctl: move print block device path calls to command section of its own

2025-01-28 16:25:15 +00:00

busctl

…

cgls

…

cgroups-agent

…

cgtop

…

core

core/namespace: relabel bind mount source based on the target path

2025-02-07 12:24:31 +01:00

coredump

process-util: port pid_from_same_root_fs() to pidref, and port three places over to it

2025-01-16 11:55:21 +01:00

creds

cryptenroll/repart/creds: no longer default to binding against literal PCR 7

2025-01-30 10:32:26 +01:00

cryptenroll

cryptenroll,repart: print a log message if no access restrictions are applied to TPM-based encryption

2025-01-30 10:32:26 +01:00

cryptsetup

cryptenroll/repart/creds: no longer default to binding against literal PCR 7

2025-01-30 10:32:26 +01:00

debug-generator

…

delta

delta: add missing error check

2025-01-24 22:46:58 +09:00

detect-virt

…

dissect

mountpoint-util: rename fd_is_mount_point() to is_mount_point_at()

2025-01-22 01:37:31 +01:00

environment-d-generator

…

escape

…

firstboot

firstboot: Populate XKBLAYOUT and friends as well in vconsole.conf

2025-02-07 09:18:36 +09:00

fsck

…

fstab-generator

…

fundamental

uki: introduce support for a .efifw section

2025-01-31 10:05:00 +01:00

fuzz

catalog: modernize code

2025-01-23 18:19:28 +09:00

getty-generator

getty-generator: port to get_kernel_consoles()

2025-01-26 04:29:56 +01:00

gpt-auto-generator

…

growfs

…

hibernate-resume

Revert "Reduce priority of "cleared HibernateLocation" message"

2025-02-01 15:30:50 +09:00

home

homectl: make default area configurable

2025-02-06 09:23:49 +01:00

hostname

tree-wide: implement generic io.systemd.service Varlink interface in all long-running services

2025-01-18 23:24:29 +01:00

hwdb

meson: add install tags for udev and hwdb

2025-01-10 15:15:13 +09:00

id128

…

import

import-pubring.gpg: add openSUSE build key

2025-02-07 14:42:42 +01:00

initctl

…

integritysetup

integritysetup: use dispatch_verb()

2025-01-21 03:42:38 +09:00

journal

tree-wide: remove some spurious newlines

2025-01-29 16:17:46 +00:00

journal-remote

journal-remote: coding style fixlets

2025-01-27 10:09:08 +01:00

kernel-install

kernel-install: rename $ADDON_DIR -> $EXTRA_DIR

2025-02-07 19:46:57 +09:00

keyutil

…

libsystemd

json-util: add generic json_dispatch_filename() dispatch helper

2025-02-06 09:23:49 +01:00

libsystemd-network

dns-domain: accept encoded domain names without terminating zero label

2025-01-30 16:18:49 +00:00

libudev

pkg-config: add Requires.private: libcap

2025-01-23 10:28:47 +09:00

locale

vconsole-util: Introduce vconsole_serialize()

2025-02-07 09:18:36 +09:00

login

pam: introduce multiple per-user "areas", i.e. "sub-home-directories" of sorts

2025-02-06 09:23:49 +01:00

machine

machine: introduce io.systemd.MachineImage.CleanPool

2025-02-04 03:03:00 -08:00

machine-id-setup

machine-id-setup: rearrange --help to match how we do them these days

2025-01-20 11:31:55 +01:00

measure

ukify/measure: Revert changes to use SizeOfImage from Linux PE binary

2025-02-04 14:11:38 +01:00

modules-load

…

mount

libmount-util: introduce two helper functions

2025-01-25 09:34:01 +09:00

mountfsd

mntfsd: add api to mount dirs for containers

2025-01-23 21:48:02 +01:00

network

network/route: improve Gateway=_dhcp4 handling (#36183)

2025-02-05 12:19:01 +00:00

notify

notify: add support for MANAGERPIDFDID

2025-01-20 21:51:40 +01:00

nspawn

userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side

2025-01-27 23:51:57 +01:00

nsresourced

userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side

2025-01-27 23:51:57 +01:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

…

nss-systemd

userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side

2025-01-27 23:51:57 +01:00

oom

tree-wide: implement generic io.systemd.service Varlink interface in all long-running services

2025-01-18 23:24:29 +01:00

path

tree-wide: remove some spurious newlines

2025-01-29 16:17:46 +00:00

pcrextend

…

pcrlock

tree-wide: drop merely used _cleanup_ macros, and introduce several new ones (#36071)

2025-01-21 03:41:27 +09:00

portable

…

pstore

…

ptyfwd

ptyfwd: fix wrong userdata passed to PTY forwarding

2025-01-15 16:25:32 +01:00

quotacheck

…

random-seed

…

rc-local-generator

…

remount-fs

remount-fs: use hash ops with destructor

2025-01-23 18:22:53 +09:00

repart

repart: Don't fail when we're unable to read file attributes

2025-02-05 16:18:42 +01:00

reply-password

…

resolve

resolved: fix DNSSEC missing-key error

2025-02-05 22:11:55 +01:00

rfkill

…

rpm

rpm: mark udevd for reloading when an rules file is installed/updated

2025-01-22 20:44:38 +00:00

run

run0: add explicit support for opening sessions in specific areas

2025-02-06 09:23:49 +01:00

run-generator

…

sbsign

sbsign: Make sure output file mode respects umask

2025-01-20 10:06:11 +01:00

shared

udev/net: support to configure Energy Efficient Ethernet settings

2025-02-07 13:47:41 +09:00

shutdown

libmount-util: introduce two helper functions

2025-01-25 09:34:01 +09:00

sleep

…

socket-activate

meson: enable -Wzero-as-null-pointer-constant

2025-01-16 02:26:56 +01:00

socket-proxy

…

ssh-generator

tree-wide: remove some spurious newlines

2025-01-29 16:17:46 +00:00

stdio-bridge

stdio-bridge: fix polled fds

2025-01-07 15:51:16 +01:00

storagetm

…

sulogin-shell

…

sysctl

…

sysext

…

system-update-generator

…

systemctl

meson: add install tag for systemctl

2025-02-04 09:56:33 +01:00

systemd

tree-wide: insert a space at the end of comments

2025-01-25 05:24:23 +09:00

sysupdate

tree-wide: remove some spurious newlines

2025-01-29 16:17:46 +00:00

sysusers

sysusers: emit audit events for user and group creation (#35957)

2025-01-15 10:36:07 +01:00

sysv-generator

…

test

dns-domain: accept encoded domain names without terminating zero label

2025-01-30 16:18:49 +00:00

timedate

shared/bus-util: move bus_message_hash_ops to bus-message-util

2025-01-13 16:24:44 +01:00

timesync

meson: enable -Wzero-as-null-pointer-constant

2025-01-16 02:26:56 +01:00

tmpfiles

mountpoint-util: rename fd_is_mount_point() to is_mount_point_at()

2025-01-22 01:37:31 +01:00

tpm2-setup

…

tty-ask-password-agent

tty-ask-password-agent: use free_and_strdup_warn() for arg_device

2025-01-28 02:23:57 +01:00

udev

udev/net: support to configure Energy Efficient Ethernet settings

2025-02-07 13:47:41 +09:00

ukify

ukify: add --pcrsig and --join-pcrsig arguments to append offline signature

2025-02-07 13:58:51 +00:00

update-done

update-done: remove spurious trailing whitespace from MESSAGE.

2025-01-13 22:54:42 +01:00

update-utmp

sysusers: emit audit events for user and group creation

2025-01-15 10:35:28 +01:00

user-sessions

…

userdb

userdbd: implement server side filtering in the Multiplexer API

2025-01-27 23:51:57 +01:00

varlinkctl

…

vconsole

tree-wide: insert a space at the end of comments

2025-01-25 05:24:23 +09:00

veritysetup

veritysetup: use dispatch_verb()

2025-01-21 03:42:38 +09:00

version

…

vmspawn

vmspawn: ignore failure from sshd-vsock@ unit

2025-02-06 16:49:11 +01:00

volatile-root

…

vpick

…

xdg-autostart-generator

tree-wide: remove some spurious newlines

2025-01-29 16:17:46 +00:00