Martin Pitt 1592d554e5 condition: make ConditionCredential= also search the credential stores ...

Credentials can reach a system through the credential stores. E.g.
`systemd-imds --import` writes cloud provided credentials to
`/run/credstore/` in the initrd. `ImportCredential=` already finds them
there, but `ConditionCredential=` and `AssertCredential=` only checked
the credentials passed into the service manager itself. Hence, a
credential in the store could configure a service, but not decide
whether a unit runs.

Make the credential condition search the same credential store
directories as `ImportCredential=`. Only the existence of a credential
is checked, encrypted ones are not decrypted.

This is a behaviour change, see NEWS. As before, non-root callers which
can't access a credential store treat these as absent, otherwise this
would break running e.g. `systemd-analyze` or `sysetmd-sysupdate` as
user.

Signed-off-by: Martin Pitt <martin@amutable.com>

2026-10-20 06:55:47 +02:00

..

_data

docs: update external links

2026-01-31 01:11:11 +09:00

_includes

docs: update footer to 2026

2026-04-14 17:32:37 +01:00

_layouts

…

assets

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

fonts

…

var-log

meson: install README.logs independently of HAVE_SYSV_COMPAT

2024-11-29 14:18:15 +01:00

_config.yml

Revert "docs: don't suffix page permalink with a slash"

2024-04-17 20:53:49 +02:00

.gitattributes

…

.gitignore

…

API_FILE_SYSTEMS.md

docs: update external links

2026-01-31 01:11:11 +09:00

APPSTREAM_BUNDLE.md

sysupdate: Support changelogs & appstream metadata

2024-07-12 14:38:09 +01:00

ARCHITECTURE.md

Fix wording in two places

2026-02-09 11:01:15 +01:00

AUTOMATIC_BOOT_ASSESSMENT.md

docs: update external links

2026-01-31 01:11:11 +09:00

BACKPORTS.md

docs/BACKPORTS: update

2025-11-12 23:01:35 +00:00

BLOCK_DEVICE_LOCKING.md

docs: update external links

2026-01-31 01:11:11 +09:00

BOOT_LOADER_INTERFACE.md

docs: mention LoaderInfo efivar in BLI

2026-10-02 12:52:24 +02:00

BOOT_LOADER_SPECIFICATION.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

BOOT.md

systemd-boot: add a preferred setting that's similar to default but avoids booting known-bad entries

2026-02-18 03:28:12 +09:00

BUILDING_IMAGES.md

docs: update external links

2026-01-31 01:11:11 +09:00

CATALOG.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

CGROUP_DELEGATION.md

docs: Document manual cgroup controller management for Delegate=yes

2025-04-25 00:42:24 +01:00

CODE_OF_CONDUCT.md

docs/CODE_OF_CONDUCT: format text

2024-03-27 07:11:55 +01:00

CODE_QUALITY.md

ci: Drop codeql workflow

2026-03-24 17:55:26 +01:00

CODING_STYLE.md

CODING_STYLE: handle errors before the success path

2026-10-06 10:19:17 +02:00

CONTAINER_INTERFACE.md

docs: fix capability name, it's CAP_MKNOD not CAP_SYS_MKNOD (#41621)

2026-04-13 16:41:33 +01:00

CONTRIBUTING.md

Extend the AI policy a bit

2026-10-03 16:12:54 +02:00

CONTROL_GROUP_INTERFACE.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

CONVERTING_TO_HOMED.md

docs: update external links

2026-01-31 01:11:11 +09:00

COREDUMP_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

COREDUMP.md

docs: update external links

2026-01-31 01:11:11 +09:00

CREDENTIALS.md

condition: make ConditionCredential= also search the credential stores

2026-10-20 06:55:47 +02:00

DAEMON_SOCKET_ACTIVATION.md

docs/DAEMON_SOCKET_ACTIVATION

2024-06-03 15:22:54 +09:00

DEBUGGING.md

docs: update external links

2026-01-31 01:11:11 +09:00

DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

DISCOVERABLE_PARTITIONS.md

…

DISK-QUOTAS-PROJECTIDS.md

core: add quota support for State, Cache, and Log exec directories

2025-07-07 17:28:47 +00:00

DISTRO_PORTING.md

docs: update external links

2026-01-31 01:11:11 +09:00

ELF_DLOPEN_METADATA.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

ELF_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

ENVIRONMENT.md

dissect-image: enforce validatefs xattrs when mounting partitions

2026-10-17 17:44:29 +02:00

FACTORY_RESET.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

FAQ.md

docs: update external links

2026-01-31 01:11:11 +09:00

favicon.png

…

favicon.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

FILE_DESCRIPTOR_STORE.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

GOVERNANCE.md

Move subsystem maintainers to CODEOWNERS

2026-10-02 14:58:43 +02:00

GROUP_RECORD.md

docs: punctuation and a typo

2025-05-14 18:06:04 +02:00

HACKING.md

docs: Add explicit reference to unprivileged userns docs of mkosi

2025-12-28 09:31:47 +00:00

HOME_DIRECTORY.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

INCOMPATIBILITIES.md

docs/INCOMPATIBILITIES: fix typo

2026-02-09 02:36:50 +01:00

index.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

INHIBITOR_LOCKS.md

docs/INHIBITOR_LOCKS: Update sentence for the new mode added

2026-06-06 13:44:49 +01:00

INITRD_INTERFACE.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

JOURNAL_EXPORT_FORMATS.md

docs: update external links

2026-01-31 01:11:11 +09:00

JOURNAL_FILE_FORMAT.md

docs: wrap bare enum constants in inline code in JOURNAL_FILE_FORMAT

2026-03-12 09:37:24 +01:00

JOURNAL_NATIVE_PROTOCOL.md

docs: update external links

2026-01-31 01:11:11 +09:00

LABELS.md

docs: Add doc for describing the meaning of github labels

2026-10-02 14:56:31 +02:00

MEMORY_PRESSURE.md

docs: Update MEMORY_PRESSURE.md => PRESSURE.md

2026-04-09 22:47:10 +02:00

MINIMAL_BUILDS.md

tree-wide: drop unused libcap dependencies

2025-10-24 01:52:59 +09:00

MOUNT_REQUIREMENTS.md

docs/MOUNT_REQUIREMENTS: fix typo

2025-11-25 22:52:10 +09:00

MY_SERVICE_CANT_GET_REALTIME.md

docs: update external links

2026-01-31 01:11:11 +09:00

NETWORK_ONLINE.md

docs: update external links

2026-01-31 01:11:11 +09:00

OPTIMIZATIONS.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

OSC_CONTEXT.md

docs: add redirection of the osc context to uapi website

2025-12-18 10:50:23 +01:00

PACKAGE_METADATA_FOR_EXECUTABLE_FILES.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

PASSWORD_AGENTS.md

docs/PASSWORD_AGENTS: document the AcceptCached= field

2025-12-31 10:59:41 -05:00

PAX_CONTROL_GROUPS.md

docs: fix multiple grammar errors

2026-01-29 00:40:18 +09:00

PORTABILITY_AND_STABILITY.md

NEWS, docs: document SD_VARLINK_EXPERIMENTAL

2026-10-19 11:28:33 +02:00

PORTABLE_SERVICES.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

PORTING_TO_NEW_ARCHITECTURES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

PREDICTABLE_INTERFACE_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESET.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESSURE.md

docs: Update memory pressure docs for latest GLib support for it

2026-07-02 15:05:14 +01:00

RANDOM_SEEDS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

RELEASE.md

docs: note step to update obs workflow file on release

2026-02-09 09:36:53 +01:00

RESOLVED-VPNS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

ROOT_STORAGE_DAEMONS.md

docs: fix SurviveFinalKillSignal typo

2025-07-22 18:03:39 +01:00

ROOTFS_DISCOVERY.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

rootfs-discovery-flow.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

SECURITY.md

docs: say that the github form is preferred for security vulnerabilities

2026-06-01 15:06:20 +01:00

SEPARATE_USR_IS_BROKEN.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

style.css

docs: contain image sizing and prevent overflow on mobile

2026-03-12 09:38:03 +01:00

SYSLOG.md

docs: update external links

2026-01-31 01:11:11 +09:00

SYSTEMD_FILE_HIERARCHY_REQUIREMENTS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

sysupdate-objects.svg

docs: Add a diagram for the internals of sysupdate

2026-01-30 13:19:33 +09:00

TEMPORARY_DIRECTORIES.md

docs: update external links

2026-01-31 01:11:11 +09:00

TESTING_WITH_SANITIZERS.md

docs: fix mkosi section for Environment= setting

2025-04-16 08:30:25 +09:00

THE_CASE_FOR_THE_USR_MERGE.md

docs: update external links

2026-01-31 01:11:11 +09:00

TIPS_AND_TRICKS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

TPM2_NVINDEX_ASSIGNMENTS.md

docs: two follow-ups for NV Index registry commit

2026-10-16 09:16:07 +02:00

TPM2_PCR_MEASUREMENTS.md

docs: two follow-ups for NV Index registry commit

2026-10-16 09:16:07 +02:00

TRANSIENT-SETTINGS.md

cgroup: Add CPUSetPartition= setting

2026-05-14 08:55:44 +02:00

TRANSLATORS.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

UIDS-GIDS.md

nsresourced: Optionally map foreign UID range

2026-02-24 18:29:37 +01:00

USER_GROUP_API.md

userdb: suppress lookups outside of indicated ranges

2026-07-12 23:09:01 +02:00

USER_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

USER_RECORD_BLOB_DIRS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

USER_RECORD.md

Fix typos in USER_RECORD.md documentation

2026-08-16 10:25:33 +01:00

USERDB_AND_DESKTOPS.md

docs: update external links

2026-01-31 01:11:11 +09:00

VARLINK.md

NEWS, docs: document SD_VARLINK_EXPERIMENTAL

2026-10-19 11:28:33 +02:00

VM_INTERFACE.md

docs: fix typo

2024-03-15 04:04:01 +09:00

WRITING_DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

WRITING_DISPLAY_MANAGERS.md

docs: fix typo

2026-09-22 18:46:41 +02:00

WRITING_NETWORK_CONFIGURATION_MANAGERS.md

docs/WRITING_NETWORK_CONFIG_MANAGERS: format text

2024-03-27 07:31:54 +01:00

WRITING_RESOLVER_CLIENTS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

WRITING_VM_AND_CONTAINER_MANAGERS.md

docs: fix misleading VM/machined documentation

2026-04-02 12:55:33 +02:00