Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

There seems to be a heap-use-after-free in l2tp_tunnel_done #15968

Closed
evverx opened this issue May 29, 2020 · 2 comments · Fixed by #15976
Closed

There seems to be a heap-use-after-free in l2tp_tunnel_done #15968

evverx opened this issue May 29, 2020 · 2 comments · Fixed by #15976
Labels
bug 🐛 Programming errors, that need preferential fixing network
Milestone

Comments

@evverx
Copy link
Member

evverx commented May 29, 2020

It's basically the same as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22736 but I additionally minimized the testcase manually because something fishy is going on on ClusterFuzz: google/oss-fuzz#3886

$ cat ./minimized-from-2516740bca66689d3a95670e2d3aabcc4561850d
[NetDev]
Name=t
[L2TP]
b
Remote=1.8.0.2

[L2TPSession]
SessionId=
[L2TP]
PeerTunnelId=2
[NetDev]
Kind=l2tp
[L2TP]
TunnelId=4

$ ./out/fuzz-netdev-parser ./minimized-from-2516740bca66689d3a95670e2d3aabcc4561850d
INFO: Seed: 1650202338
INFO: Loaded 2 modules   (200022 inline 8-bit counters): 136784 [0x7f1c0ac231b0, 0x7f1c0ac44800), 63238 [0xae3290, 0xaf2996),
INFO: Loaded 2 PC tables (200022 PCs): 136784 [0x7f1c0ac44800,0x7f1c0ae5ad00), 63238 [0xaf2998,0xbe99f8),
./out/fuzz-netdev-parser: Running 1 inputs 1 time(s) each.
Running: ./minimized-from-2516740bca66689d3a95670e2d3aabcc4561850d
=================================================================
==5183==ERROR: AddressSanitizer: heap-use-after-free on address 0x604000000610 at pc 0x000000590c09 bp 0x7ffe4de6ab20 sp 0x7ffe4de6ab18
READ of size 8 at 0x604000000610 thread T0
    #0 0x590c08 in l2tp_session_free /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:46:16
    #1 0x58efa8 in l2tp_tunnel_done /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:720:9
    #2 0x544ca1 in netdev_free /home/vagrant/systemd/build/../src/network/netdev/netdev.c:205:17
    #3 0x544359 in netdev_unref /home/vagrant/systemd/build/../src/network/netdev/netdev.c:210:1
    #4 0x62f8c9 in manager_free /home/vagrant/systemd/build/../src/network/networkd-manager.c:1877:22
    #5 0x543466 in LLVMFuzzerTestOneInput /home/vagrant/systemd/build/../src/network/fuzz-netdev-parser.c:25:1
    #6 0x44e408 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x44e408)
    #7 0x433525 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x433525)
    #8 0x43c469 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x43c469)
    #9 0x42c4c6 in main (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c4c6)
    #10 0x7f1c096b01a2 in __libc_start_main (/lib64/libc.so.6+0x271a2)
    #11 0x42c51d in _start (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c51d)

0x604000000610 is located 0 bytes inside of 40-byte region [0x604000000610,0x604000000638)
freed by thread T0 here:
    #0 0x50e037 in free (/home/vagrant/systemd/out/fuzz-netdev-parser+0x50e037)
    #1 0x590009 in netdev_l2tp_tunnel_verify /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:706:25
    #2 0x550903 in netdev_load_one /home/vagrant/systemd/build/../src/network/netdev/netdev.c:738:21
    #3 0x54343b in LLVMFuzzerTestOneInput /home/vagrant/systemd/build/../src/network/fuzz-netdev-parser.c:23:16
    #4 0x44e408 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x44e408)
    #5 0x433525 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x433525)
    #6 0x43c469 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x43c469)
    #7 0x42c4c6 in main (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c4c6)
    #8 0x7f1c096b01a2 in __libc_start_main (/lib64/libc.so.6+0x271a2)

previously allocated by thread T0 here:
    #0 0x50e33f in malloc (/home/vagrant/systemd/out/fuzz-netdev-parser+0x50e33f)
    #1 0x58dd61 in l2tp_session_new_static /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:78:13
    #2 0x58d31e in config_parse_l2tp_session_id /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:531:13
    #3 0x7f1c0a1c330e in next_assignment /home/vagrant/systemd/build/../src/shared/conf-parser.c:133:32
    #4 0x7f1c0a1bb7d3 in parse_line /home/vagrant/systemd/build/../src/shared/conf-parser.c:271:16
    #5 0x7f1c0a1ba0bc in config_parse /home/vagrant/systemd/build/../src/shared/conf-parser.c:396:21
    #6 0x7f1c0a1bc63e in config_parse_many_files /home/vagrant/systemd/build/../src/shared/conf-parser.c:453:21
    #7 0x7f1c0a1bcca7 in config_parse_many /home/vagrant/systemd/build/../src/shared/conf-parser.c:512:16
    #8 0x55034f in netdev_load_one /home/vagrant/systemd/build/../src/network/netdev/netdev.c:729:13
    #9 0x54343b in LLVMFuzzerTestOneInput /home/vagrant/systemd/build/../src/network/fuzz-netdev-parser.c:23:16
    #10 0x44e408 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x44e408)
    #11 0x433525 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x433525)
    #12 0x43c469 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x43c469)
    #13 0x42c4c6 in main (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c4c6)
    #14 0x7f1c096b01a2 in __libc_start_main (/lib64/libc.so.6+0x271a2)

SUMMARY: AddressSanitizer: heap-use-after-free /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:46:16 in l2tp_session_free
Shadow bytes around the buggy address:
  0x0c087fff8070: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd
  0x0c087fff8080: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fa
  0x0c087fff8090: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd
  0x0c087fff80a0: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd
  0x0c087fff80b0: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd
=>0x0c087fff80c0: fa fa[fd]fd fd fd fd fa fa fa fa fa fa fa fa fa
  0x0c087fff80d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c087fff80e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c087fff80f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c087fff8100: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c087fff8110: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==5183==ABORTING
@evverx evverx added bug 🐛 Programming errors, that need preferential fixing network labels May 29, 2020
@poettering poettering added this to the v246 milestone May 29, 2020
@evverx
Copy link
Member Author

evverx commented May 29, 2020

The plot thickens. The same testcase sometimes causes the fuzz target to crash with another backtrace:

./out/fuzz-netdev-parser: Running 1 inputs 1 time(s) each.
Running: ../clusterfuzz-testcase-fuzz-netdev-parser-5133720507121664
=================================================================
==19727==ERROR: AddressSanitizer: heap-use-after-free on address 0x6030000118f5 at pc 0x0000004e8f02 bp 0x7ffc3458a540 sp 0x7ffc34589cf0
READ of size 1 at 0x6030000118f5 thread T0
    #0 0x4e8f01 in __interceptor_strcmp.part.0 (/home/vagrant/systemd/out/fuzz-netdev-parser+0x4e8f01)
    #1 0x6cb08d in network_config_compare_func /home/vagrant/systemd/build/../src/network/networkd-util.c:127:13
    #2 0x7f232fc814f3 in base_bucket_scan /home/vagrant/systemd/build/../src/basic/hashmap.c:1204:29
    #3 0x7f232fc83174 in internal_hashmap_remove /home/vagrant/systemd/build/../src/basic/hashmap.c:1358:15
    #4 0x59099e in l2tp_session_free /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:47:17
    #5 0x590009 in netdev_l2tp_tunnel_verify /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:706:25
    #6 0x550903 in netdev_load_one /home/vagrant/systemd/build/../src/network/netdev/netdev.c:738:21
    #7 0x54343b in LLVMFuzzerTestOneInput /home/vagrant/systemd/build/../src/network/fuzz-netdev-parser.c:23:16
    #8 0x44e408 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x44e408)
    #9 0x433525 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x433525)
    #10 0x43c469 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x43c469)
    #11 0x42c4c6 in main (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c4c6)
    #12 0x7f232ef361a2 in __libc_start_main (/lib64/libc.so.6+0x271a2)
    #13 0x42c51d in _start (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c51d)

0x6030000118f5 is located 5 bytes inside of 31-byte region [0x6030000118f0,0x60300001190f)
freed by thread T0 here:
    #0 0x50e037 in free (/home/vagrant/systemd/out/fuzz-netdev-parser+0x50e037)
    #1 0x590a22 in l2tp_session_free /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:49:9
    #2 0x590009 in netdev_l2tp_tunnel_verify /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:706:25
    #3 0x550903 in netdev_load_one /home/vagrant/systemd/build/../src/network/netdev/netdev.c:738:21
    #4 0x54343b in LLVMFuzzerTestOneInput /home/vagrant/systemd/build/../src/network/fuzz-netdev-parser.c:23:16
    #5 0x44e408 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x44e408)
    #6 0x433525 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x433525)
    #7 0x43c469 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x43c469)
    #8 0x42c4c6 in main (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c4c6)
    #9 0x7f232ef361a2 in __libc_start_main (/lib64/libc.so.6+0x271a2)

previously allocated by thread T0 here:
    #0 0x50e4f7 in calloc (/home/vagrant/systemd/out/fuzz-netdev-parser+0x50e4f7)
    #1 0x6cb2d4 in network_config_section_new /home/vagrant/systemd/build/../src/network/networkd-util.c:139:14
    #2 0x58db6a in l2tp_session_new_static /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:68:13
    #3 0x58d31e in config_parse_l2tp_session_id /home/vagrant/systemd/build/../src/network/netdev/l2tp-tunnel.c:531:13
    #4 0x7f232fa4930e in next_assignment /home/vagrant/systemd/build/../src/shared/conf-parser.c:133:32
    #5 0x7f232fa417d3 in parse_line /home/vagrant/systemd/build/../src/shared/conf-parser.c:271:16
    #6 0x7f232fa400bc in config_parse /home/vagrant/systemd/build/../src/shared/conf-parser.c:396:21
    #7 0x7f232fa4263e in config_parse_many_files /home/vagrant/systemd/build/../src/shared/conf-parser.c:453:21
    #8 0x7f232fa42ca7 in config_parse_many /home/vagrant/systemd/build/../src/shared/conf-parser.c:512:16
    #9 0x55034f in netdev_load_one /home/vagrant/systemd/build/../src/network/netdev/netdev.c:729:13
    #10 0x54343b in LLVMFuzzerTestOneInput /home/vagrant/systemd/build/../src/network/fuzz-netdev-parser.c:23:16
    #11 0x44e408 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x44e408)
    #12 0x433525 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x433525)
    #13 0x43c469 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/vagrant/systemd/out/fuzz-netdev-parser+0x43c469)
    #14 0x42c4c6 in main (/home/vagrant/systemd/out/fuzz-netdev-parser+0x42c4c6)
    #15 0x7f232ef361a2 in __libc_start_main (/lib64/libc.so.6+0x271a2)

SUMMARY: AddressSanitizer: heap-use-after-free (/home/vagrant/systemd/out/fuzz-netdev-parser+0x4e8f01) in __interceptor_strcmp.part.0
Shadow bytes around the buggy address:
  0x0c067fffa2c0: fd fd fa fa fd fd fd fd fa fa fd fd fd fd fa fa
  0x0c067fffa2d0: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fd
  0x0c067fffa2e0: fa fa fd fd fd fd fa fa fd fd fd fa fa fa fd fd
  0x0c067fffa2f0: fd fd fa fa fd fd fd fd fa fa fd fd fd fd fa fa
  0x0c067fffa300: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fd
=>0x0c067fffa310: fa fa fd fd fd fd fa fa fd fd fd fd fa fa[fd]fd
  0x0c067fffa320: fd fd fa fa fd fd fd fd fa fa 00 00 00 07 fa fa
  0x0c067fffa330: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fd
  0x0c067fffa340: fa fa fd fd fd fd fa fa fd fd fd fd fa fa fd fd
  0x0c067fffa350: fd fa fa fa fd fd fd fd fa fa fd fd fd fa fa fa
  0x0c067fffa360: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==19727==ABORTING

@ssahani
Copy link
Contributor

ssahani commented May 30, 2020

@evverx does this fixes #15976 ?

evverx added a commit to evverx/systemd that referenced this issue May 31, 2020
mrc0mmand pushed a commit that referenced this issue May 31, 2020
halstead pushed a commit to openembedded/openembedded-core that referenced this issue Aug 7, 2020
Drop backport of CVE-2020-13776 (merged upstream), refresh
0001-binfmt-Don-t-install-dependency-links-at-install-tim.patch. Refresh
musl patches for v246.

Commits:

  ae366f3acb NEWS: last rites
  cae1e8fb88 loop-device: implicitly sync device on detach
  3660da17b0 Merge pull request #16624 from keszybz/timesync-retry-interval
  e7e954243a udev: fix codesonar warnings
  b67ec8e5b2 pid1: stop limiting size of /dev/shm
  2f2c60d7fe path-util: make use of TAKE_PTR() where we can
  b6eb208b29 hwdb: Add EliteBook to use micmute hotkey
  c8f3d7672c repart: log fixes
  5919bd3df3 timesync: increase retry interval more slowly
  8588146f69 added alternative version of SurfTab Twin
  2ac7eec3b5 network: fix use of uninitialized value
  b209cff2ad network: Fix "Unknown section 'DHCPv6PrefixDelegation'." message
  c05b8edde0 NEWS: mention about [DHCPv6PrefixDelegation] section
  dd57cf6444 meson: run 'ninja man/update-man-rules' again
  6b222c4b02 man: fix link markup
  0cfb490fe9 Merge pull request #16585 from yuwata/network-dhcp6-fixes
  ee56c072b9 Merge pull request #16590 from keszybz/test-fs-util-relax
  f8528230b3 Merge pull request #16576 from keszybz/bump-tmp-size
  b1d666ac58 test-cgroup-util: Handle result=NULL as empty string
  f649325ba7 firstboot: Update help string with --root-shell options
  c550cb7f8c test-sleep: add more logging, show secure boot mode
  02e1eb6d02 NEWS: mention new tmpfs limits
  362a55fc14 Bump /tmp size back to 50% of RAM
  99e015e28c network: rename settings about DHCPv6 Prefix Delegation
  61c0ef4ff3 network: make RADVPrefixDelegation enum bitfield
  ea121d8f25 network: update address infomation even if link is in failed or linger state
  e55265184b network: do not assume static addresses are configured
  15797d6a2b network: check at least one dynamic address is assigned when DHCP is enabled
  1633c45731 network: dhcp6: drop addresses and delegated prefixes on client stop
  1c09d84e42 network: rename ipv4ll_address -> ipv4ll_address_configured
  b0b9776656 network: ndisc: also remove old DNSSL or RDNSS records after an SLAAC address is ready
  69203fba70 network: ndisc: remove old addresses and routes after at least one SLAAC address becomes ready
  6e537f62d7 network: dhcp4: release old lease after the new address become ready
  80b0e86084 network: make address/route_configure optionally return created Address/Route object
  8eec0b9da5 network: set key destructor in several hash_ops
  5f58af25e6 network: make link_check_ready() return earlier if the link is not in 'configuring' state
  3336e946da network: ndisc: do not set configured flags when addresses or routes are not assigned yet
  5d8c3ec1e9 network: make link enter failed state if address_update() failed
  97f000744f network: introduce callback called when an address becomes ready
  c9d223e803 test-network: add tests for prefix routes
  3606ca659e network: add debug log for configuring address
  c21ed6812e test-ndisc-rs: increase timeouts
  500727c220 test-path: increase timeout
  933ab8199d test-fs-util: do not assume /dev is always real
  31363bd564 firstboot: Check if the given shell exists
  97efde65d8 network: radv: Send RA on newly-added dynamic prefix
  c8f12abc73 Fix clang-11 issues
  116d6d2965 catalog: update Polish translation
  f527c6fa08 resolvectl: fix older resolved or networkd support to set DNS servers
  e128723dae Merge pull request #16566 from poettering/nspawn-osrelease-fixes
  a8bd4bab75 Merge pull request #16567 from keszybz/more-news
  199a892218 selinux: handle getcon_raw producing a NULL pointer, despite returning 0
  d05f7b5007 semaphoreci: update Debian release to bullseye
  38821a0e29 update TODO
  d64e32c245 nspawn: rework how /run/host/ is set up
  62b0ee9eb1 portabled: update host's os-release path
  98aac2ad5a doc: update os-release spec with new path for container host's file
  549719699c NEWS: fix typo in path
  d130181fd8 nspawn: add missing spdx header
  e9769453e3 Merge pull request #16561 from yuwata/test-ordered-set
  8047ac8fdc core: clean more env vars from env block pid1 receives
  337f0b0094 NEWS: reorder entries a bit and add a few items
  8b25484af3 NEWS: update contributors list for v246-pre
  c015d657ec hwdb: update again for v246
  b226422cd7 firstboot: don't create /etc/passwd with mode 000
  2a2e78e969 nspawn: fix MS_SHARED mount propagation for userns containers
  fe224669fb Update mkosi.ubuntu to 'focal'
  6f5d73aba6 network: compare with peer address if it is specified
  01b92946c5 Merge pull request #16532 from yuwata/network-sync-state-file
  d4fa0493a7 test-ordered-set: add a case where we get 0 for duplicate entries
  5cf821acf8 man: do not say that isolate is like switching runlevels
  402e1e699f Merge pull request #16557 from keszybz/two-ci-fixes
  2645d4bcc1 test: clarify that ordered_set_put() returns -EEXIST if entry is duplicated
  0390b094f5 meson: do not choke on time epoch when there are no git tags
  960a64691f semaphore: pull in tree explicitly
  495454f40f update NEWS
  82ff544160 Merge pull request #16496 from DaanDeMeyer/firstboot-shell
  bd190899bb Get SOURCE_EPOCH from the latest git tag instead of NEWS
  00b868e857 Merge pull request #16542 from keszybz/make-targets-fail-again
  c3f8a065e9 execute: take ownership of more fields in ExecParameters
  28900a1bfe firstboot: Add --root-shell option
  c4a53ebf7a firstboot: Tighten up passwd/shadow handling
  94d1ddbd7c pid1: target units can fail through dependencies
  74c8e3c4e0 Revert "units: drop OnFailure= from .target units"
  771b52427a core/job: adjust whitespace and comment
  7f8c1e95a5 test-network: add test for duplicated IPv6Token=
  2c62149509 network: ndisc: ignore duplicated IPv6Token=
  92ee90af47 network: ndisc: do not store duplicated data in Set
  3bb4126262 Merge pull request #16536 from poettering/time-clock-map-fixes
  3dbd8a15d5 util: use IN6_ARE_ADDR_EQUAL() macro
  f91b234077 test-network: drop unnecessary sleep() in NetworkdStateFileTests.test_state_file
  1b14222124 network: make bus methods sync link state file
  c2a6595014 network: introduce link_save_and_clean()
  f281fc1e95 tree-wide: use siphash24_compress_string() where it is applicable
  1c568d65ac util: introduce siphash24_compress_string()
  6c04fccb1d util: make siphash24_compress_boolean() inline
  e3643b00a8 test-path: decrease variable scope
  8f8c7801e9 test: increase timeout for test-path
  2859bb932b Merge pull request #16530 from yuwata/udev-fix-race-in-renaming-network-interface
  63fdaa36c5 Merge pull request #16407 from bluca/verity_reuse
  8fa2cd83c6 Revert "man: add note about systemd-vconsole-setup.service and tty as input/output"
  2aa5a13aa9 test: adapt test-functions for SUSE
  f25e9eda52 Merge pull request #16514 from keszybz/zstd-decompress-fix
  b876b07812 Merge pull request #16540 from poettering/acl-fix
  ac1f3ad05f verity: re-use already open devices if the hashes match
  536879480a dm-util: use CRYPT_DEACTIVATE_DEFERRED instead of ioctl
  d81be4e752 coredump: port to use common add_acls_for_user()
  2ea6247e01 acl-util: fix error handling in add_acls_for_user()
  002674387c offline-passwd: use chase_symlinks()
  628db21130 update TODO
  0da322d9a4 man: update docs with the new functions and other enhancements
  7cbb7d62c6 homectl: fix warning about unused function
  06847d0fba TODO: add entry for XZ
  e4a321fc08 journal/compress: remove loop in decompress_startswith_zstd()
  a24153279e journal/compress: fix zstd decompression with capped output size
  b4a11ca3f2 journal: use -EPROTONOSUPPORT for unknown compression
  76cbafcdd4 sd-journal: when enumerating, continue even after an inaccessible field
  04dffc0add user-util: indentation fix
  58afc4f8e4 core: don't acquire dual timestamp needlessly if we don't need it in .timer handling
  d3926f9a46 test: add basic test for clock mapping
  7c0eb30e32 time-util: rework clock conversion logic
  4c967576da update NEWS
  6456dafa12 Merge pull request #16504 from poettering/read-file-ipc
  c400d040ce import: always prefer GNU tar, to avoid cmdline incompatibilities
  3177b9270c fileio: add brief explanations for flags
  49f16281c9 tree-wide: use READ_FULL_FILE_CONNECT_SOCKET at various places
  c668aa8b35 fileio: allow to read base64/hex data as strings
  b93d3f6b81 fileio: add support for read_full_file() on AF_UNIX stream sockets
  f294470262 fileio: add explicit flag for generating world executable warning when reading file
  2e3e2750bb Merge pull request #16519 from yuwata/networkctl-altnames
  739b9a4354 Merge pull request #16353 from yuwata/network-dns-sni
  28266c446a udev: drop unnecessary checks
  ae353ec2f6 udev: save ID_RENAMING= property to database before renaming network interface
  1cdea1a2f7 network: update one log message
  08de6f945d test: run systemd-dissect and systemd-run with log level debug in TEST-50-DISSECT
  3a978b30cd logind: Fix org.freedesktop.login1.set-reboot-to-boot-loader-menu saving to the wrong file in the non EFI case
  ddbab78f9a bus: use bus_log_connect_error to print error message
  711dd5db9e man: update explanation about the format to specify DNS servers
  a574b7d152 resolvectl: use bus_message_read_in_addr_auto()
  7695e2cbbe network, resolve: use bus_message_read_ifindex() or friends
  3dd95ab6c5 util: introduce bus_message_read_ifindex()
  10d4620467 util: introduce bus_mesage_read_dns_servers()
  976009897b util: introduce helper functions to read in_addr from bus message
  e293e755d5 util: drop duplicated inclusion of sd-bus.h
  66479677a9 test-network: add tests for DNS= with port number and SNI
  a747e71c56 resolvectl: show DNS servers with port and SNI
  b1881e8320 resolvectl: make DNS servers can be specified with port number and SNI
  8e56ea4c88 resolve: add DBus properties which support DNS SNI and port number
  95ce1ba87b resolve: add DBus method to set DNS server with port number and SNI
  4e11ddfdd3 network: add DBus method to set DNS server with port number and SNI
  87d6489776 network: save DNS servers specified by DBus interface
  6458176514 network: do not save DNS= entries not match link ifindex
  e77bd3fdff network: support port number and SNI in [Network] DNS=
  8aa5afd20f resolve: read/save port number and SNI from/into link state file
  b6af282475 resolve: compare port and SNI in dns_server_hash_ops
  1b86009298 resolve: also compare port and SNI in dns_server_find()
  da9de7385a resolve: support port specifier in DNS= setting
  395aa34023 resolve: ignore empty server name
  408f8fbc0f util: introduce 'struct in_addr_full' and its helper functions
  a723fb85da util: introduce in_addr_port_ifindex_name_from_string_auto() and in_addr_port_ifindex_name_to_string()
  cbe194b39e resolve: propagate error in link_load_user()
  eced0d2a46 Merge pull request #16518 from yuwata/network-fix-failure-in-updating-mac-address
  2665327a41 travis: compile with -O1 with clang
  d7d717b7e2 docs: Document xdg-autostart parameter X-systemd-skip
  4c0668bc14 Merge pull request #16478 from bluca/dissect_tests
  6a097936b2 docs: Update section about XDG autostart generator
  e6791b5522 Merge pull request #16497 from DaanDeMeyer/mkosi
  7e8279c0a6 Merge pull request #16501 from yuwata/udev-fix-renaming
  807667f7ac network: stop already running engines before updating MAC address
  96fe813c42 radv: introduce sd_radv_is_running()
  48c5398951 networkctl: do not ignore -EOPNOTSUPP when reading netlink message
  ae5b779252 networkctl: sort alternative names
  0ef1adf512 vconsole-setup: downgrade log message when setting font fails on dummy console
  628f08b66d sd-netlink: make timeout message sealed
  d735e4f2d6 Merge pull request #16505 from yuwata/network-manage-foreign-routes-cleanups
  ed4512d009 nspawn: set container_host env vars before user arguments
  a9c9b18a95 networkd: Use NLM_F_ACK on the netlink message to add a neighbor.
  d3f45d130e clang-format: set Break afer enum to false
  4573592ddf Merge pull request #16512 from keszybz/offline-passwd-altfiles
  241947d1b4 shared/offline-passwd: look at /usr/lib/{passwd,group} too
  3e5d2264b5 Move offline-password.[ch] to shared and add test-offline-passwd
  55678b9eae build: skip installation of 2 files if feature is disabled
  0119ab3d6c Merge pull request #16476 from keszybz/qemu-autosuspend-rules
  a8c10331b4 network: replace NDISC -> NDisc in log messages
  5eec0a0810 network: introduce address_exists() helper function
  d15818f227 network: update debug log when foreign routes are received with ManageForeignRoutes=no
  5ff1ef31f2 network: do not enumerate routes if ManageForeignRoutes=no
  97fdae33df udev: do not try to reassign alternative names
  434a348380 netlink: do not fail when new interface name is already used as an alternative name
  1498252614 netlink: introduce rtnl_get/delete_link_alternative_names()
  77547d5313 hwdb: check that uppercase digits are used in modalias patterns
  7f16ef9fba Merge pull request #16490 from yuwata/network-radv-ndisc-cleanups
  457763aa03 hwdb: allow spaces in usb: matches and similar patterns
  dc9e9a18be Merge pull request #16491 from keszybz/udev-logging
  e5f0010659 mkosi: Update help comment in settings files
  172ad053ff mkosi: Keep mkosi.default out of the repository.
  9e79123884 tree-wide: use SYNTHETIC_ERRNO with log_device_* in more places
  46d4149d0f sd-device: use LOG_PRI() in log_device_full()
  b5ef66101a analyze: CAP_RAWIO -> CAP_SYS_RAWIO
  94ec163ad2 timedatectl: do not show (null) if the address of NTP server is not resolved
  ec8bebbcc2 Add autosuspend rules for emulated QEMU devices
  df7667323d udev: change the modalias string for usb devices to include the device name
  d6d4961b01 udev: don't complain when udev_watch_end() is called without udev_watch_init()
  6b9f5f01cb basic/string-table: reduce variable scope
  5992f362bf udevadm: use STR_IN_SET(), add comment
  fe20121a4c sd-device: use strjoin instead of asprintf
  22ba4525d3 udev: tweak debug logs for udev rules
  12254ccab0 man: add more details for IMPORT, PROGRAM and RUN keys
  ba60127df7 udev: accept OPTIONS+= without any fuss
  b6a80b83bc udev: accept IMPORT{}= without any fuss
  13e8a49a58 network: ndisc: any failures in processing event make the link in failed state
  c97785168b network: radv: clean up conf parsers
  19b4864346 hwdb/autosuspend: add missing parenthesis
  d96edb2c6e network: downgrade log level in conf parsers
  4d939d2c84 Merge pull request #16485 from bluca/nspawn_os_release_mounts
  9e54462cd5 Merge pull request #16482 from poettering/coverity-246
  14f1c47a0c nspawn: mount os-release in two steps to make it read-only
  eafc7d6056 nspawn: use access/F_OK instead of stat to check for file existence
  2094cd49c4 shared/os-util: fix comment style to follow guidelines
  cc76bf01e3 basic/mkdir: use uid_is_valid instead of manual check
  40282752a2 Merge pull request #16483 from poettering/man-env-d-no-session
  27806670ef Merge pull request #16480 from yuwata/network-fix-dhcp4-races
  3f13f9159f man: configuration files contain assignments, no directories
  d320bfa558 man: GNOME is usually capitalized
  a449b7198c man: don't claim environment.d/ was about sessions
  3cd4459003 Revert "selinux: cache enforced status and treat retrieve failure as enforced mode"
  8e32ad9557 machine: fix if check
  f63ef93703 execute: fix if check
  0ded0e40ab dhcp4: only renewing lease when the client already has a lease
  330f899079 load-fragment: downgrade log messages we ignore to LOG_WARNING
  89a5385fb7 mountpoint-util: fix error handling
  f766d9af38 network: dhcp4: add two warnings
  153cf04139 network: dhcp4: fix another race with SendDecline=yes
  75be72d139 network: dhcp4: also release old lease in dhcp_lease_lost()
  8d5bb13d78 core: fix invalid assertion
  aeba8dd523 network: fix typo
  2bc148add0 test: exercise RootImage, RootHash and RootVerity in TEST-50-DISSECT
  0f5d24a8b9 test: pre-assemble minimal image for TEST-50-DISSECT at build time
  a5f1d665d7 test: exercise systemd-dissect with GPT and verity in TEST-50-DISSECT
  6939873412 test: exercise systemd-dissect --mount in TEST-50-DISSECT
  42165319b1 update TODO
  95b29f3267 Merge pull request #16396 from yuwata/network-configured-flag
  b8ff0663e8 Merge pull request #16468 from keszybz/two-unrelated-patches
  43bf28741f network: drop doubled white space
  93b0b88c3a network: free address when it is removed
  6906794dd1 network: dhcp4: do not assign new address before old one is not removed
  5d976f5f64 network: do not call link_check_ready() in link_request_set_routing_policy_rule()
  0c816fcc7b network: make link_request_set_nexthop() called from link_request_set_routes() or route_handler()
  659ad3a0af network: do not make link in configured state when no address is assigned
  d98c546dac network: ndisc: split ndisc_configured flag into for addresses and routes
  01c344bdd4 network: ndisc: do not ignore remaining addresses
  571f953934 test-network: wait for addresses are not in tentative state
  39373cb984 network: add debugging log why link is not in configured state yet
  c5fcd8a70a test-network: check assigned address is not tentative state
  491b79aeac test-network: set IPv6AcceptRA=no if no dynamic addresses are not required
  eb01a2dfb1 network: make link_request_set_nexthop() static
  a4623f84ed network: add a debugging log
  feb596b5c3 network: include error code in the log message
  2a877f4560 network: set dhcp6_xxx_configured flag after routes/addresses are assigned
  ee5c1311ee logs: when embedding catalog info in log output use a dash of color and unicode
  a996ead6a2 Merge pull request #16398 from poettering/machined-varlink
  26698337f3 timer: Adjust calendar timers based on monotonic timer instead of realtime
  d3e0662c7d Revert "ci: turn off the "upstream-systemd-ci" ppa"
  06bb441102 test: Add "finish" rule to .PHONY
  76830e2500 Merge pull request #16462 from keszybz/rpm-macro-warnings
  b56a877ef8 test-fs-util: use log_info instead of printf
  d4ff79bbe1 ci: turn off the "upstream-systemd-ci" ppa
  6cdc429454 Merge pull request #16340 from keszybz/var-tmp-readonly
  56a13a495c pid1: create ro private tmp dirs when /tmp or /var/tmp is read-only
  a318a5659a man: document F1 in sd-boot too
  1061fc1c17 rpm: include macro name in errors for two args macros too
  281014b73e rpm: adjust various macros to print macro name in the error message
  8800df5f71 Merge pull request #16430 from mikhailnov/fix-rpm-create-package-macros
  dad2062f40 update TODO
  38ccb55731 nss-mymachines: drop support for UID/GID resolving
  4c2cf15751 man: document new varlink service
  4751364e76 machined: implement user/group lookup varlink API in machined too
  74d1b7d2ad machined: refactor UID/GID machine translation
  a07f18cd30 process-util: make sure procfs_file_alloca() works for non-literal field names too
  56870d324b docs: permit user/group services that do not support enumeration
  16a4a2f8cc update TODO
  08ef688656 analyze: make testing ConditionPathExistsGlob= work
  4519c7c706 update TODO
  77ee1783eb udevadm: beef up deprecation log warning
  a18c7865be meson: do not install testdata when -Dinstall-tests=false
  60b45a80c1 Update .clang-format
  5b72b34708 Make the instructions slightly easier to read
  8ba6c15a82 Merge pull request #16437 from systemd/coverity-gcc-10
  b7067c4d87 coverity: install systemd
  1374448add coverity: switch back to Fedora 31
  46072ae35a repart: include more relevant information in the warning message, fix test
  5553041a62 Merge pull request #16435 from gaoyi1988/master
  6b949d2605 NEWS: mention source mode for MACVLAN or MACVTAP
  ddcdcac519 Merge pull request #16432 from cgzones/selinux_err_fix
  0d3a8bc7eb test: add test case for multi matches when use "||"
  1e67a9c2cd udev: specify the end of value
  d67b1d18fc bus: use bus_log_parse_error to print message
  f2df56bfea namespace: unify logging in mount_tmpfs
  db06c162e8 shared: fix error handling in make_inaccessible_nodes
  3e6e0856cd rpm: avoid hiding errors and output in *_create_package macros
  93406fd379 rpm: avoid odd symbols in EOF indicator
  b159831b61 Merge pull request #16424 from keszybz/cap-bpf-compat
  b0ff0eaa01 Merge pull request #16426 from cgzones/run_user_label
  675fa6ea28 man: fix some manvolnum
  abad72be4d namespace: fix MAC labels of TemporaryFileSystem=
  8d9cbd809d selinux: create standard user-runtime nodes with default context
  7a3e4dc38b basic: add helper function mknod_label()
  5149990e1f NEWS: grammar improvements (#16413)
  5c53766f28 Added MSI Prestige15 A10SC specific keycodes
  d0571b758b Add support for HP Elitebook x360 1040 G6 micmute button
  ed1de7108e Explain how to determine hierarchy type from shell
  5700780389 basic/cap-list: reduce scope of variables
  864a25d99b basic/capability-util: let cap_last_cap() return unsigned integer
  417770f303 basic/cap-list: parse/print numerical capabilities
  76fb53c94a install: fix wrong data type
  a38c68a18a NEWS: drop duplicate entry, add --image= entry
  976efe1b80 NEWS: add date
  a127c6208f userdb: fix dlopen call
  5157d719f0 Merge pull request #16411 from ddstreet/bridge_without_carrier_fails
  5961d35a5b NEWS: add blurb about os-release and $container_host_*
  55aacd502b Merge pull request #15891 from bluca/host_os_release
  001c07cfff test-netowrk: in test_bridge_configure_without_carrier, avoid strange test failures
  48c190822b Merge pull request #16405 from sipraga/master
  02b0109af5 Merge pull request #15955 from anitazha/nullorempty
  4e3376d43a test-network: don't print networkctl output for passing subtests
  62320feb9f Merge pull request #16404 from keszybz/release-246-prep
  2e7090e94d test: bump the TEST-47 sleeps once again
  0d0de133f0 network: add support for MACVLAN source mode
  3994922baf meson: bump version numbers for v246
  72e5190878 NEWS: update contributors list for v246-rc
  9c70fc2164 git-contrib: simplify implementation a bit
  cbc056c819 core: wrap some long lines and other formatting changes
  24e2494407 Merge pull request #16385 from JackFangXN/master
  43b24a0716 sd-device: use log_device_debug_errno()
  4b6607d949 table use table_log_print_error() instead of table_log_show_error
  df83eb546b table add table_log_sort_error()
  d836018a73 table add table_log_show_error()
  c253a95bca Merge pull request #16379 from yuwata/network-dhcp6-delegated-prefix-address-handler
  21d19a7a13 docs: update information where to file bugs against RHEL/CentOS versions of systemd
  2e2f6a01a0 Merge pull request #16143 from fbuihuu/fstab-generator-fix
  5dc60faae5 add error message when bind mount src missing
  3650173fec network: make address_handler() static
  a211ff4b84 network: introduce own address handler for dhcp6 delegated prefix
  2b0bf3ccf8 Merge pull request #16301 from poettering/firstboot-image
  9870cfdf7f Merge pull request #16388 from keszybz/xdg-desktop-fuzz-case
  60e3a5a252 Merge pull request #16390 from keszybz/coverity-and-typos
  dea7f5cc87 xdg-autostart: ignore all empty entries in multi-string entries
  f4e1a42592 man: match parentheses
  d1ca1f7c2a xdg-autostart: avoid quadratic behaviour in strv parsing
  a53f024d71 journald: minor wording tweak in message
  cd990847b9 tree-wide: more repeated words
  0da425df65 networkd: use capitalized "IP" and "TOS" in messages
  8ab0f03266 journal/compress: drop "future" code in zstd compression
  d7b34e3841 all: fix minor typos
  5d043c9fdf update NEWS
  cbe952fe1f update TODO
  737ec51444 TODO
  a122502077 firstboot: add option to turn off welcome text display
  dcfdd62184 man: document the new --image= switch of systemd-firstboot
  3ff9fa591e firstboot: add --image= switch
  827ea52125 mount-util: use UMOUNT_NOFOLLOW in recursive umounter
  e49ee28522 mount-util: add destructor helper that umounts + rmdirs a path
  e2ec9c4d3a namespace-util: introduce helper for combining unshare() + MS_SLAVE remount
  9ecf5d9340 fuzz: add test case that should already be resolved
  cda667722c core: refresh unit cache when building a transaction if UNIT_NOT_FOUND
  3f2e15abc5 sleep: one spelling unification
  77ecc1aaa5 Merge pull request #16380 from yuwata/network-dhcp6-update-prefix-route
  9389a271b7 Merge pull request #16381 from yuwata/dhcp4-renewing
  a240147bdc Merge pull request #16383 from yuwata/network-dhcp6-radv-update-prefix
  7f6e342c93 hwdb: Add Google Pixel Slate (nocturne) (#16377)
  58e6c62191 network: fix memleak
  1d596fdec2 network: do not restart radv engine when adding prefix
  8fc2a5dff4 network: fix indentation
  290696e512 Revert "network: Don't send RA with zero router lifetime when restarting radv"
  c1495f8e9d fix typo
  d469cea3bd network: Don't send RA with zero router lifetime when restarting radv While investigating https://github.com/systemd/systemd/issues/16356, I discovered that networkd stops the radv service before adding or updating prefixes and then starts it again.  This causes networkd to send an RA with a router lifetime of zero, causing the routes to flap on systems receiving the RA for a fraction of a second before radv is started again and proper RAs are sent.  That has the potential to cause issues with latency-sensitive traffic like gaming or VoIP.  This patch adds a boolean argument to the sd_radv_stop() function to control this behavior.  The zero lifetime RA is still sent whenever radv is actually being stopped, but when it is being restarted for a prefix update (from networkd-dhcp6.c), the final RA is no longer sent to avoid the route flapping.
  921693a0f3 dhcp4: do not try to renew address when client has no lease
  ceaec54a3c dhcp4: do not renew address if client is not running yet
  f050c94df0 network: always update acquired prefix route
  1419ff0401 network: decrease indentation level
  cecd68c70f network: fix indentation
  c82012605b Merge pull request #16374 from keszybz/docs-and-networkd
  08bf20287c hwdb: update again for v246
  98ebef62c7 DHCPv4: client add support for DHCP server allow list
  b3077c47a8 Merge pull request #16344 from keszybz/update-utmp-erofs
  c5bc4f77d9 hwdb: add another Logitech M705 mouse variant
  5544cd3199 Merge pull request #16373 from JackFangXN/master
  9a61e8fca2 unit-name: fix a potential memory leak
  1f68f77292 networkd: we should not loop when extract_first_word() fails
  8dc647fd30 man: do not say that tasks are threads and processes
  24c8d4d3f4 man: one more typo
  b37e4d9c87 Merge pull request #16370 from keszybz/tree-wide-spelling
  e26538dd04 network: tc: fix n_prio bounds check
  f987a261b4 userdbctl homectl use table_log_add_error()
  f04a98e13f Fix two typos found by codespell
  bdac560801 tree-wide: drop quotes from around [section]
  e9dd698407 tree-wide: fixes for assorted grammar and spelling issues
  a64911f9b7 travis: install missing deps for the Coverity run
  c5fbdebec6 Merge pull request #16287 from yuwata/udevadm-info-attribute-walk
  4276749dd3 shared/install: do not require /dev/null to be present in chroots
  3da49ad55a catalog: update Polish translation
  ca1d199b48 update-utmp: do not fail on EROFS
  c2a9909377 Define _cleanup_ helper for setutxent()+endutxent()
  bf795c47bc test: use KILL instead of SIGKILL in TEST-52-HONORFIRSTSHUTDOWN
  21c7fe6d12 sd-device: be more defensive in FOREACH_DEVICE_SYSATTR
  2fadbb4535 core: set private section name for automount units
  c2056dd6f9 hwdb: Pavilion 13 x360: Tablet mode and SYSRQ key
  071be2fa9f Merge pull request #15442 from poettering/fido2
  21df146501 udevadm: sort entries in `udevadm info -a` by attribute name
  fadcc12229 sd-device: make FOREACH_DEVICE_SYSATTR() list attributes in subdirectories
  33d943d168 initialize arg_clock_usec
  9e99bfbd5a Merge pull request #16348 from yuwata/news-sriov
  640f3b143d core: check null_or_empty for masked units instead of /dev/null
  71af436c63 NEWS: mention .network [SR-IOV] section
  554a97ba23 NEWS: WithoutRA= is not a boolean option anymore
  a68da22257 NEWS: tweak WithoutRA= description a bit more
  272ac70a21 various daemons: emit Stopping... notification before destructing the manager object
  cc090ca7fe initctl: use _cleanup_ and run()
  e9d9d50cef initctl,update-utmp: define iterator variable in loop
  bc9d1dbfc8 update-utmp,initctl: drop ppid check
  c03ef420fa network: tc: rename several settings which take size in bytes
  25b67032a8 Merge pull request #16343 from jirislaby/master
  cc832f9772 Merge pull request #16338 from keszybz/spelling2
  63b7e7b4ba Merge pull request #16336 from yuwata/ifindex-cleanups
  cbdf02952e NEWS: update document about WithoutRA=
  1447dc625a Merge pull request #16219 from ssahani/network-sr-iov
  74986a0f88 hwdb: Add accel orientation quirk for UMAX VisionBook 10Wi Pro
  52e085af82 tree-wide: "unparseable" → "unparsable"
  13adf35343 resolve: use appropriate type
  5e958e1d6c util: use setsockopt_int() at one more place
  1a6c913676 libsystemd-network: rename index -> ifindex
  7fa69c0a6f dhcp6, radv: only accept valid ifindex
  15e6a6e87b tree-wide: spell "lifecycle" without hyphen everywhere
  37b22b3b47 tree: wide "the the" and other trivial grammar fixes
  838d39af93 network: Allow DHCPv6 client  to start solicit mode
  51115fdc42 l10n: update Czech Translation
  6371e69b49 fstab-generator: introduce an helper to write extra dependencies specified via the mount options
  045c5faf5a fstab-generator: extra dependencies specified in fstab should be applied to the mount unit
  c8fe23d45c update TODO
  4442c26942 man: update homectl man page with documentation for new features
  fe2520fbb5 docs: document new FIDO2 user record fields
  0eb3be4644 homectl: add --pkcs11-uri=auto and --pkcs-11-uri=list support
  2af3966af3 homectl: add acquired fido2 PIN to user record
  93295a2501 homectl: split out pkcs#11 related code bits into own .c/.h file
  c98811d837 homectl: rework how we log when doing a home directory update
  8e62dfb12a homectl: do generic error handling/retry also when creating a home directory
  f737186ab1 homectl: show touch emoji when asking for PKCS#11 protected auth path
  85b1294488 pam-systemd-home: print helpful message when token's PIN is locked
  7b78db28e5 homed: add support for authenticating with fido2 hmac-secret tokens
  1c0c4a43c6 homectl: add support for enrolling FIDO2 HMAC-SECRET tokens
  5e4fa456fa user-record: add fields for FIDO2 HMAC authentication options
  af4fbd463f build-sys: add libfido2 as optional dependency
  c0bde0d240 user-record: rename JSON field "pkcs11Pin" to "tokenPin"
  d00f318323 user-record: securely erase pkcs#11 when assigned NULL too
  7b8d55b72c homectl: add missing log messages when json_variant_format() fails
  c63ec11bf5 pkcs11-util: reduce scope of a variable
  1146b664e6 macro: add new FOREACH_POINTER() macro magic
  428d32afea locale-util: add support for touch emoji
  830ffbce1b doc: add recentry introduced transient settings
  9457b6bb21 Merge pull request #16303 from poettering/dbus-util-split
  3d2c26925f test-network: add tests for SR-IOV
  c3a5025dc6 network: add MACAddress= setting in [SR-IOV] section
  e64b31c848 network: add VLANProtocol= setting in [SR-IOV] section
  518cd6b527 network: Introduce SR-IOV
  5908ddd763 sd-netlink: Add SR-IOV netlink properties
  b46d8c1c70 udev: spi: include chip select number in ID_PATH
  d17eabb105 Fix build with µhttpd 0.9.71
  116739cfb6 Merge pull request #16316 from yuwata/backlight-use-actual-brightness
  5c236388c3 update TODO
  6c3a19d5b3 Merge pull request #16313 from yuwata/network-move-ipv6ll-gen-mode
  7233e91af0 core: store timestamps of unit load attempts
  f93dd4b940 Merge pull request #16282 from poettering/repart-copy-blocks
  437b9a7f75 backlight: read current backlight brightness from 'actual_brightness' attribute
  daa227a320 backlight: call log_setup_service() before logging
  74f1bb5c9f backlight: use SYNTHETIC_ERRNO() macro
  40af3d020f shared: split out property get helpers
  9176326ba2 shared: split out code for printing properties
  807542bece shared: split out code that maps properties to local structs
  9b71e4ab90 shared: actually move all BusLocator related calls to bus-locator.c
  c664cf5607 shared: split out BusObjectImplementor APIs
  7aee1e7304 hwdb: adjust touchpad edge detection for X1Tab3 (#16310)
  aa0b850bca NEWS: minor fixes
  6f6296b93f network: move IPv6LinkLocalAddressGenerationMode= to [Network] section
  3ea58e010d NEWS: add several entries about networkd
  26b0fda9b7 test-repart: allow the test to pass on non-amd64 architectures
  e4f8d5e01f shell-completion: add missing verbs for networkctl
  8f843190ff test: bump the timeout for systemd-hwdb-update.service under ASan
  0e31a6c2ad Merge pull request #16142 from poettering/random-seed-cmdline
  bed0b7dfc0 pid1: warn if people use User=nobody (#16293)
  7143b95552 efi: define cache functions inside EFI_ENABLE ifdef
  cb713f1696 tree-wide: spellcheck fixes
  7f56c26d10 NEWS: reorder entries with some minor additions
  0cffae953a core: add device mapper to allow-list with DevicePolicy=closed and RootImage
  b47261e5cb update TODO
  e78228b1b0 update TODO
  10f9436c2d Merge pull request #16281 from poettering/logind-cache-more-efi
  0090b551e6 Add quotes for -n
  22aa58adc9 JOURNAL_FILE_FORMAT: minor markdown fixes
  1f19ae0ffb NEWS: add more items for 246
  af2697e83d logind: also cache LoaderEntryOneShot EFI variable
  e8df4eee65 efi-loader: cache LoaderConfigTimeoutOneShot too
  6eea6e30ab tmpfile-util: typo fixes
  95fc17bf46 util: add missing header guard
  12d14b7373 Merge pull request #16096 from poettering/journal-hash-fix
  a79be2f807 hwdb: update for v246
  7caaf44777 update TODO
  757bc2e4c1 repart: add new CopyBlocks= setting
  3f11426f52 Merge pull request #16275 from yuwata/network-deprecate-netdevsim
  fdf3e48c44 udev: split attribute assignment for MMC cards
  6d88513e6b portabled: create temp file for unit, not directory
  823e917f13 selinux: check mac_selinux_init() in tests
  0986bb9b95 Merge pull request #16278 from keszybz/fix-man-links
  66ed28d332 Merge pull request #15624 from poettering/hostnamed-instant
  98506a41fe Merge pull request #15697 from OhNoMoreGit/fix-path-units
  5c0102f83f update TODO
  c85cf04fa3 compress: do something roughly reasonable when building without compressor
  3afe5c00a5 coredump: use log_error_errno() where appropriate
  d80b051cea tree-wide: add new HAVE_COMPRESSION compile time flag
  70cd1e561c docs: document the new journal file format additions
  bbcd38e41e docs: import journal file format docs from fdo wiki
  8653185a9e journal: support zstd compression for large objects in journal files
  0dbe57ee86 journal-file: when individual hash chains grow too large, rotate
  4ce534f4cd journal: use a different hash function for each journal file
  7851ec6634 journal: make signature arrays const
  20b0acfacd journal: rename hash64() to jenkins_hash64()
  f4474e004d journal-file: rename return parameters to ret_xyz
  5030c85a3e journal-file: also show field hash table size in debug output
  e958c05703 journal-file: simplify boot ID acquiring
  cde8c5f722 journal: store NE hash instead of LE hash in Match object
  a76560915f journal-file: use FLAGS_SET where appropriate
  e9ece6a0e3 journal: fix definition of _OBJECT_COMPRESSED_MAX
  d1d8f0f369 macro: add CONST_MIN() similar to CONST_MAX()
  4a5a01ccdd man: reword awkward sentence
  55cf7779f2 man: fix various internal references
  b7a4734551 man: fix links to various external man pages
  f49bead3b0 Merge pull request #16257 from keszybz/two-fuzzer-issues
  b7d81d19cc Merge pull request #16249 from bluca/root_verity_sig
  d7f4ad203a hostnamed: minimize caching of /etc/hostname, /etc/os-release and /etc/machine-info
  aa994368c9 hostnamed: don't cache local hostname either
  a055076988 ci: free up some resources on Pipelines
  efa5bef285 ci: switch to Ubuntu Bionic on Semaphore
  440988666c test-network: remove unused config
  59a9ef1022 network: deprecate netdevsim support in .netdev config
  d4d55b0d13 core: add RootHashSignature service parameter
  c2923fdcd7 dissect/nspawn: add support for dm-verity root hash signature
  035e8e50d7 veritysetup: add support for dm-verity root hash signature
  e60d3b13df Merge pull request #16265 from Werkov/fix-16248
  fd7c7fc8ee Merge pull request #16271 from yuwata/network-cleanups-around-link-get
  e41de5e491 missing: Add new Linux capabilities
  6b000af4f2 tree-wide: avoid some loaded terms
  f23810da20 fuzz-udev-rules: -ENOBUFS should be accepted too
  85fbebe61a journal: fix buffer overrun when urlifying
  f50f597217 network: fix typo in comment
  7936917e3e network: do not update operstate when netdev is not ready
  e856ed00f9 network: fix assertion in link_get()
  25b831bac8 network: check that received ifindex is valid
  d184fb39b6 test: Test memory limit parsing
  67e2baff6b cgroup: Parse infinity properly for memory protections
  b18573e16f ci: bring back Coverity part 2
  595cb4211a ci: bring back Coverity
  c4e90266db Merge pull request #16093 from yuwata/network-htb-add-settings-15213
  f9044b74c5 Merge pull request #16106 from yuwata/network-tc-ets
  f83803a649 Merge pull request #16238 from keszybz/set-handling-more
  41d1f469cf log: introduce log_parse_environment_cli() and log_setup_cli()
  3f8ed9fd96 update TODO
  18d9cee002 man: document systemd.random-seed=
  d247f232a8 core: add new systemd.random_seed= kernel command line option for seeding entropy pool
  4dd055f907 random-util: add common helper random_write_entropy() for crediting entropy to the kernel's pool
  45250e66cc pid1: don't apply "systemd.clock_usec" kernel cmdline parameter outside of PID 1
  97f1c6af8c random-seed: use ERRNO_IS_NOT_SUPPORTED() where appropriate
  e198eba7c2 sysv-generator: reduce scope of variables
  80ce54adaf socket-proxy: use structured initialization in one place
  add74e8929 basic/hashmap,set: propagate allocation location info in _copy()
  35e601d4f9 tree-wide: use set_ensure_consume() in various places
  39dbd0c74c networkd: take ref immediately after storing item in set
  d02fd8b1c6 core/bpf-firewall: use the correct cleanup function
  648c339c49 logind: fix possible memleak of message if the message was already in the set
  d378ef708b portable: rework set handling in portable_detach()
  ab9dd0b997 resolved: fix memleak on duplicate host lines in /etc/hosts
  ceb17827fa resolved: simplify allocation failure handling in dns_stub_process_query()
  b8b46b1ce5 basic/set,hashmap: pass through allocation info in more cases
  fcc1d0315d basic/set: add set_ensure_consume()
  a1ba8c5b71 feature to honor first shutdown request to completion
  7bf6babfa2 Merge pull request #16112 from poettering/nss-systemd-block-fix
  bc8d57f290 Merge pull request #16223 from cgzones/user_selinux
  3d9fbea43e selinux: update mac_selinux_free()
  1cdc42f283 hwdb: add another Logitech G502 Hero variant (#16256)
  0d0248c665 Merge pull request #16246 from benzea/benzea/xdg-autostart
  21856e3462 Merge pull request #16213 from yuwata/network-cleanup-link-state-file
  87d25bdead make-autosuspend-rules: restore compatibility with Python3 < 3.6
  db3b8d5d41 fuzz-udev-rules: rewrite to not require root privileges
  a9ba0e328f Make failures of mac_selinux_init() fatal
  a11bfc17dc Initialize SELinux in user instances
  c238a1f5f1 udev: split rules object creation and loading
  037b0a47b0 userdb: replace recursion lock
  6e78726e20 nss-systemd: skip /etc/gshadow look-ups when we just need the GID of a group
  88d775b734 util: add dlfcn-util.h
  21385e639a man: replace perl bug tracker link that went away with link to paper
  92d64d1444 man: s/PROGRAMM/PROGRAM/
  311a0e2ee6 Revert "cgroup: Allow empty assignments of Memory{Low,Min}="
  73083ca238 portabled: implement container host os-release interface
  e1bb4b0d1d nspawn: implement container host os-release interface
  34e0d56ce2 Container interface: document exposing the host's os-release
  b3b1a08a56 nspawn: use mkdir_p_safe instead of homegrown version
  17b99e377b basic/mkdir: introduce safe recursive variants
  3d0c8750c5 networkctl: display DHCPv4 server address
  fd1f3b3eed dhcp: fix entry name in parsing lease file
  46986251d6 network: drop duplicated information from link state file
  5202be27ee sd-network: drop unused functions
  862e710820 networkctl: use lease file to get DHCPv4 client ID
  d41fa6ee91 networkctl: use lease file to get DHCPv4 address
  35cab5f99d networkctl: load DHCPv4 lease file and use timezone data from the lease file
  ef0daa1129 libsystemd-network: move prototypes of dhcp_lese_save/load() to network-internal.h
  cc479760b4 Revert "job: Don't mark as redundant if deps are relevant"
  9d9a9500cd xdg-autostart: Ignore all files with GNOME autostart phase
  566cb7e23b xdg-autostart: Fix info message if Type= is not Application
  0389f4fa81 core: add RootHash and RootVerity service parameters
  6fe01ced0e nspawn: mkdir selinux mount point once, but not twice
  75ae672bb2 Merge pull request #16196 from mrc0mmand/travis-simplification
  5c9918aca0 Merge pull request #16216 from nabijaczleweli/make-a-fuss
  65804d6aff selinux-util: tweak log_enforcing_errno() to return the errno passed in or 0 when in non-enforcing mode
  9e1732924d test-functions: read /usr/etc/nsswitch.conf if /etc/nsswitch.conf does not exist (#16195)
  affa893da0 man/sd-makefs: link to btrfs.wiki.kernel.org for btrfs-man5, since the man-pages link is dead
  2edc494216 Merge pull request #16237 from keszybz/revert-message-type-check
  c2c193f79a Merge pull request #16179 from keszybz/auto-suspend-hwdb
  b98f393d88 bus-message: add macro for calculation of offset from the page
  b17af3e503 bus-message: avoid dereferencing a NULL pointer
  a9c9f79ece Revert "bus-message: immediately reject messages with invalid type"
  6cd55d6f74 shared/bus-util: fix misleading error handling
  e2ab8e09c8 udevadm-monitor: simplify creation of arg_tag_filter set
  804a436582 fuzz-netdev-parser: add test case for earlier version of preceding patches
  44e9342078 netdev/wireguard: do not invalidate peer on invalid syntax
  de7fef4b6e tree-wide: use set_ensure_put()
  0f9ccd9552 basic/set: add set_ensure_put()
  aaffd34933 sd-device: use set_put_strdup() in one more place
  29bd6012f1 resolved: introduce dns_transaction_gcp()
  7b33ff7388 make-autosuspend-rules: remove one instance of "whitelist"
  88936ed6f9 rules: remove 61-autosuspend-manual.rules
  39d5b72e32 hwdb: enable autosuspend for Wacom Pen and EMV Smartcard Reader
  aa549ff397 test: also verify the generated autosuspend hwdb file
  79dc5d35dd tools: rewrite make-autosuspend-rules.py and add udev rules
  5fde0607a8 Merge pull request #16235 from yuwata/network-fix-warning-16224
  bc694c06e6 log: Prefer logging to CLI unless JOURNAL_STREAM is set
  7830b5c103 Merge pull request #16059 from keszybz/resolve-single-label-names
  b7e8286b4a Merge pull request #15926 from fbuihuu/rework-show-status
  8db8f99eb9 man: add note regarding editing user groups
  c4e585a36b network: add missing break
  1e42c269cb Merge pull request #16239 from keszybz/cleanups
  e6175fbe45 ci: pass -Werror using CFLAGS
  8d9982e30d network: drop unnecessary "&"
  a51a3247e5 man: Fix a typo of session
  c2ad8c0978 man/sd-makefs: also mention /sbin/mkswap
  2bd5e1b272 man: document the new option
  3b5bd7d6b8 resolved: optionally allow single-label A/AAAA queries
  c2f1e83e27 resolved: drop bit-field annotations for fields in Manager
  7877e5ca7c resolved: add dns_query_candidate_freep()
  801d25ef0f man: rework description of Domains=
  876c75fe87 udev: do not execute hwdb builtin import twice or thrice
  b753e8358c test-network: add tests for ETS
  d474aa51bf network: tc: introduce Enhanced Transmission Selection (ETS)
  4dec921889 sd-netlink: add netlink properties of Enhanced Transmission Selection (ETS)
  3a712fda86 sd-boot: Add small comments after device-specific key macros
  034d0eb962 Merge pull request #16191 from poettering/repart-spec
  bc3b868b42 Merge pull request #16208 from yuwata/udev-fix-16207
  cc17c4c9a1 network: do not fail to configure non-nl80211 wifi interfaces
  845d784e54 network: drop casting in memcpy()ing IPv6 address
  5eb6ef8b45 udev: udev_event_apply_format() always make buf NUL terminated
  bc568a7a35 udev: fix error handling of sd_device_get_parent()
  2a71d57f4e network: clean-up DHCP lease server data configuration
  d5da3ada8e Merge pull request #16061 from filbranden/standalone1
  2ee7e54b9e test-network: add tests for HTB settings
  d9eacc1cdd network: tc: add more settings for HTB
  120b5c0bbe network: DHCPv6 - Add support to set token on the LAN interface
  8d2d64166e efi: use stub for cache_efi_options_variable if !ENABLE_EFI
  ffc8eeae62 USER_RECORD: fix typo
  0116d27a30 travis: sort dependencies
  305efcaf3c travis: drop stuff moved to GH Actions
  eeb8c7accf travis: use a matrix for similar jobs
  fb08381c14 repart: if now minimal size is specified, default to 10M
  e031166e15 repart: add simple specifier expansion in Label=
  cdfd853744 update TODO
  d9b6decd88 README: add reference to systemd.io
  77169ed09b update TODO
  d8a9dd0dc1 hwdb: Mask rfkill event from intel-hid on HP platforms
  c73624a553 man: do not say that systemd-modules-load.service only uses static config
  6fe95d3020 sd-boot: Work around malformed CR key code
  7daaf56761 hwdb: Add accel orientation quirk for Odys Fusion Win 12 2in1
  cb24fad361 Merge pull request #16170 from keszybz/man-user@
  387536b3a9 man: mention systemd-user-runtime-dir in user@.service too
  7283fbfd0c efi: Skip parsing SystemdOptions if there's an error getting it.
  25c86e4c39 networkd: Add missing match_wlan_iftype check to network_verify
  f1a20afacd man: Document the crypttab keyfile syntax specifying a device
  550c14fedd Merge pull request #16163 from DaanDeMeyer/resolved-edns-info
  6df8a6c753 Improve message for scheduled shutdown or reboot
  b4564641be hwdb: generate a hwdb file instead of rules for autosuspend
  4677c3da97 man: really fix conditional in homed.conf
  4f0ef40deb man: drop obsolete HAVE_PYTHON conditional
  a2095c0698 update-man-rules: properly filter out directives index again
  4f571b4061 resolved: Log the feature level we're downgrading from as well
  209b2592ed efi: Cache contents of EFI variable SystemdOptions
  6d0f38017c test: in test_bridge_configure_without_carrier, ignore setup_state
  e034886b80 resolved: Don't complain too much when downgrading from EDNS
  ac4e03d45b login: filenames in /run/systemd/users are uids
  a2c7035976 cifuzz: build fuzz target with UBsan and MSan as well
  135a1add7b turn off fuzzit part 2
  60950f3c25 Merge pull request #16144 from mrc0mmand/gh-actions-followup
  86a23f38ab ci: tweak the dependency installation
  3d0a45d5da ci: tweak the compilation options
  4e1a13db89 ci: move the build check script to workflows directory
  0664249ffc ci: do the compiler-detection magic in the test script
  ed6727d40a Merge pull request #16137 from poettering/sleep-fixlets
  119111645b Merge pull request #16136 from mrc0mmand/travis-cleanup
  35cd3db4e5 ci: add homed/zstd dependencies
  aab86b12dd github: move the clang/gcc build check to GH Actions
  241616d57d Merge pull request #16124 from ssahani/dhcpv6-duid
  43bba15ac8 pid1: rename manager_set_{show_status,watchdog}_overridden() into manager_override_(show_status,watchdog}
  0bb007f7a2 pid1: add a new SetShowStatus() bus call to override/restore show status mode
  3ceb347130 pid1: introduce an helper to handle the show-status marker
  2c4702057b sleep: pass error we see to log function
  1326de0158 sleep-config: modernize destructors
  c732e87979 sleep-config: downgrade log level in can_s2h()
  c02540dc9e sleep: clean up debug/error logging
  6f9120ad61 sleep-config: return correct error code
  c0d8fbfa34 sleep-config: add more debug logging
  48c6399ad8 github: rename CIFuzz workflow file to cifuzz.yml
  b31fba440c travis: bump Ubuntu release to Bionic
  2b918da5a1 journal: drop the assert-only variable completely
  5a573f2b91 travis: replace set (+|-)e with travis_terminate
  0f2d351f79 tree-wide: port to fd_wait_for_event()
  db64ba81c6 meson: build standalone version of systemd-tmpfiles
  8ef8f3d5a7 meson: add a new -Dstandalone-binaries=true option
  639118854f networkctl: Display DHCP6 DUID
  a9deab2eec sd-network: Introduce APIs to get DHCP6 DUID
  7e738e7b70 network: DHCP6 - save DUID to state file
  6b7d5b6eaf network: DHCP6 - introduce DHCP6 DUID to string
  24bd74ae03 Merge pull request #15940 from keszybz/names-set-optimization
  4c150809eb update TODO
  e47add9edc test: make TEST-02-CRYPTSETUP a bit more robust
  bb9244781c core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts
  6a881daf85 docs: Change suffix for desktop applications to support non-transient services
  d5da196319 journal: simplify vsnprintf() ret value check
  97033ba455 pager: set PR_DEATHSIG for pager to SIGINT rather than SIGTERM
  c85b6ff1b2 docs: point contributors to list of most recent systemd releases
  51b367b86d Merge pull request #16111 from poettering/bitlck-fix
  9664be199a Merge pull request #16118 from poettering/inaccessible-fixlets
  2befe404d4 Merge pull request #16120 from poettering/udevd-fixlets
  e2ea005681 core: do not touch instance from unit_choose_id()
  934ef6a522 core: create socket service instances with the correct name from the start
  ada4b34ec7 core: rework error messages in unit_add_name()
  d383acad25 core: when adding names to unit, require matching instance strings
  4562c35527 core: store unit aliases in a separate set
  02939ee001 Merge pull request #16087 from mrc0mmand/travis-build-check
  dad28bffd6 tree-wide: check POLLNVAL everywhere
  dfa64b64a7 tree-wide: mark assert()-only variables as unused
  b36746c90e travis: check build with various compiler options
  45204921be Merge pull request #16104 from ssahani/dhcpv6-iaid
  2ffadd3cee AppArmor: Support for loading a set of pre-compiled profiles at startup time
  d689f0f20a Merge pull request #16058 from Werkov/fix-memory-protection-default
  4f4f37b20d Merge pull request #16046 from bluca/dissect_squashfs_verity
  2233c2703c man: udevadm: mention non-zero exit code on settle
  60b316b1e9 test-network: wait 2min for the bridge being in configured state
  69876f94ab doc: Try to clarify automount dependency confusion
  fa0e23c900 docs: use bool in varlink interface definition
  48b747fa03 inaccessible: move inaccessible file nodes to /systemd/ subdir in runtime dir always
  b8c9074534 login: use ERRNO_IS_PRIVILEGE() where appropriate
  d582afe144 mkdir: use log_full_errno() where appropriate
  6b2229c6c6 udev: set fewer process properties
  fe56acd8e0 udevd: use cpus_in_affinity_mask()
  57b611a5bf Merge pull request #16074 from msekletar/freezer-test-flakes
  6930d069a3 cryptsetup: pass selected mode to crypt_load() when doing LUKS
  5af39ac850 cryptsetup: try to load bitlocker superblock only if requested
  8b8ae7959d hwbd entry for  Dell Inspiron Chromebook 14 2-in-1 sensor (#16109)
  f01994380e login: allow individual USB ports to be assigned to seats
  e7cbe5cb9e dissect: support single-filesystem verity images with external verity hash
  331ee15f18 networkctl: DHCPv6 - display IAID
  01dd138031 sd-network: Introduce API to get DHCPv6 IAID
  18d8a2cf30 network: DHCPv6 - export IAID to state file
  d69d4038ec dhcp6: Provide method to access IAID
  ed66590d15 Merge pull request #16080 from YmrDtnJu/9p
  bf76080180 core: let user define start-/stop-timeout behaviour
  8b5616fa91 Merge pull request #16073 from keszybz/shell-completion
  d3d0b763b4 Merge pull request #15953 from keszybz/gdb-script
  44a419540e pid1: rework handling of m->show_status
  0d6d3cf055 pid1: rename manager_get_show_status() to manager_should_show_status()
  b309078ab9 pid1: make more use of show_status_on()
  5a36324962 Merge pull request #16047 from poettering/udev-ro-block
  707dc7949c update TODO
  a4d1bef73f Merge pull request #16085 from ssahani/network-client-id
  6cc27c29ad Add 'bitlk' option to mount Bitlocker drives with cryptsetup.
  c15ab81ed9 mount-tool: Replace fstype_is_{network,api_vfs} with fstype_is_blockdev_backed
  ac2474e4ff basic: New function fstype_is_blockdev_backed for fstypes that need a blockdev
  b11e98037c hwdb: add HP Spectre x360's mic mute switch
  b1481b2092 Merge pull request #16092 from yuwata/network-accept-local-16090
  a34a2933e9 man: single-char parameters take no '='
  048b4dc2e1 units: tweak udev unit descriptions
  95ac523030 udev: optionally mark all block devices read-only as they pop up
  b1806441bb dissect-image: wait for udev for single filesystem images too
  2153bbc81a networkctl: Display DHCP4 client ID
  daec96821d sd-network: Introduce API to access DHCP4 client ID
  5dfaf89b5b network: DHCP4 client ID save in state file
  29f69c5741 test-network: add test for IPv4AcceptLocal=
  94d76d071e network: introduce IPv4AcceptLocal= setting
  a07e962549 homed help --uid short option
  7887e58051 test: avoid failing due to unexpected precision
  6495ceddf3 Merge pull request #16033 from poettering/parse-int-fixlets
  a742f9828e resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver
  9141594cae lldp: fix assertion checking argument for sd_lldp_set_neighbors_max()
  7487b48688 man: fix typo Takse -> Takes
  3a9692dd05 shell-completion: add homectl for bash
  3ac33bc966 kernel-install: extend --help
  ea9f36ac83 Merge pull request #15378 from msekletar/udev-kill-signal
  2884836e3c core: fix the return value in order to make sure we don't dipatch method return too early
  a0d79df8e5 tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw
  42e57a4eb2 test: add test for parse_uid_range()
  53c6db99fa tests: beef up integer parsing tests
  fc80cabcf5 parse-util: also parse integers prefixed with 0b and 0o
  60eb1f0728 parse-util: rewrite parse_uid_range() on top of parse_uid()
  f5979b63cc user-util: be stricter in parse_uid()
  c44702a8bd parse-util: rewrite parse_mode() on top of safe_atou_full()
  aa85e4d3ce parse-util: make return parameter optional in safe_atou16_full()
  c78eefc135 parse-util: allow '-0' as alternative to '0' and '+0'
  707e93aff8 parse-util: allow tweaking how to parse integers
  3611ed7378 test: add integration test for udev event timeout
  e209926778 udev: make signal that we use to kill workers on timeout configurable
  0ce8092109 Merge pull request #15466 from elmarco/dhcp-leases
  b3753406c0 turn off fuzzit
  d9ce1c2493 networkctl: print DHCP leases
  090c923b4d networkctl: factor out link_get_property()
  7be3261222 sd-dhcp-client: add sd_dhcp_client_id_to_string()
  aaec2d7b9b macro.h: add sizeof_field() helper
  00ebe01156 sd-dhcp-client: make struct sd_dhcp_client_id reusable
  cf72a78660 networkd: expose DHCPServer interface on links
  38ee31a6e4 networkd: start a DBus interface for the DHCP server
  36d35f2259 sd-dhcp-server: notify callback on lease changed
  5b03043a75 sd-dhcp-server: add sd_dhcp_server_set_callback()
  3cd5924c85 network: make link become configured state when at least one dynamic protocol provide an address
  168561f2eb change fs/file-max to LONG_MAX instead of ULONG_MAX
  161bc1b627 Merge pull request #16057 from keszybz/resolvectl-sorted-no-nta
  bb9a9e33c9 Merge pull request #15171 from ssahani/tc-qfq
  0d63e7dd0b Merge pull request #16056 from keszybz/minor-doc-updates
  ecc04067f9 seccomp: filter openat2() entirely in seccomp_restrict_sxid()
  7ade8982ca core: remove support for ".include" stanza
  c643bda5ec network: read driver name from ethtool
  33bece166c basic/sort-util: adorn qsort_safe with a prefix underscore
  bacafb0990 pstore: use typesafe_qsort
  eb10767565 resolvect: sort status output by link number
  c9d243cdef resolvectl,systemctl: reduce scope of variables
  6cf3011c6c Introduce strcasecmp_ptr() and use it in a few places
  6773049a4c resolvectl: do not show NTA lists in status
  891ff9633f test-network: add tests for QFQ
  4d7ddaf97b network: tc: introduce [QuickFairQueueingClass] section
  b12aaee5ab network: tc: introduce Quick Fair Queueing (QFQ)
  c33f1e5a3f sd-netlink: add netlink properties of Quick Fair Queueing (QFQ)
  6161b35d5e Merge pull request #16048 from poettering/conf-parser-mtime
  c9e0695675 core: set source_mtime after load dropins
  4f9ff96a55 conf-parser: return mtime in config_parse() and friends
  5aca2e6733 conf-parse: fix pretty bad typo
  22ed4a6d9a fs-util: add stat_warn_permissions() that operates on struct stat instead of fd
  7183b22f12 Merge pull request #15996 from yuwata/network-dhcp6-route-metric-15295
  53aa85af24 cgroup: Allow empty assignments of Memory{Low,Min}=
  db2b8d2e28 cgroup: Make empty assignments reset to default
  21c8397694 tests: Fix description of test units
  eee9b30af4 basic/efivars: try re-reading efivars without delay first
  75f6d5d87e fd-util: be more careful with fclose() errnos
  112bed84bf update TODO
  927b9b8f63 man: add note that emergency.target inherits mount state
  41a7c3bf5d units: uppercase the description
  b68edd3006 man,mkosi: bump Fedora version
  68f6c58354 test: temporarily block test 48 on Ubuntu's autopkgtest
  8dd91cb55b network: drop an unused function
  c24dd73952 network: move DHCPv6 related conf parsers to networkd-dhcp6.c
  bdad94d0d6 network: set both dhcp_route_metric and dhcp6_route_metric by DHCP.RouteMetric= for backward compatibility
  1bf1bfd958 network: add DHCPv6.RouteMetric=
  132be2b868 network: use uint32_t instead of unsigned for route priority
  d06661ab66 Merge pull request #16030 from yuwata/network-read-mtime-of-dropin-configs-15521
  397288e3eb Merge pull request #15991 from keszybz/uids-gids-only-decimal
  9f83091e3c network: also read mtime of drop-in configs
  c4473dec34 network: do not propagte error on stat()
  63e2d1714e udev: single binary replacing udevd and udevadm
  0e77fc66bc network: fix double free in macsec_receive_channel_free()
  b9d19abd38 Merge pull request #16029 from yuwata/network-wireguard-without-peers-15786
  6597cb324a Merge pull request #15990 from jwrdegoede/hwdb-accel-quirks
  da3509f0f5 test-network: add test for wireguard without peers
  50254f5500 network: wireguard: set ListenPort= when no peers are configured
  dc851c00c3 Merge pull request #15982 from keszybz/shell-completion-and-help
  f3e4b1e07c Merge pull request #15884 from ssahani/dhcpv6-vendor
  a8b46548e6 Merge pull request #15993 from mrc0mmand/news-update
  fdd156dd99 tests: add a testcase triggering https://github.com/systemd/systemd/issues/15968
  1d16f661eb NEWS: fix several typos
  156a5fd297 basic/user-util: always use base 10 for user/group numbers
  f7091f458e loginctl: define loop iterators in the loop header
  a7a8dcffc2 hwdb: Add accel orientation quirk for Trekstor Surftab Twin 10.1 ST10432-8
  b5f829a2da hwdb: Add accel orientation quirk for Toshiba Encore WT10A tablet
  aa0cb635f1 network: L2TP fix crash
  9774347b57 Fix typo.
  2cac801f0f stat-util: trivial empty_or_null() tweaks
  b054e69bf9 Check ambient set against bounding set prior to applying ambient set
  bed695375a udev: when the BSD lock on a block device is taken, don't complain
  66fcfdfde7 core: add forgotten return in error path
  05dd19fad3 shared/efi-loader: remove check that uses absolute tick value
  753a71ad1d gpt: include homed GPT partition type in well-known partition table
  3668722049 units: don't set PrivateNetwork= in systemd-homed.service
  2bca2d77d3 resolved-dns-query: remove dns_query_candidate_is_routable
  a3f6020432 sd-network: fix inverted error message
  a7a9fe3c93 network: allow empty assignment to PreferredLifetime=
  8df6fc1241 Update resolvectl zsh completion
  c1a83277d0 shared: treat generator units as vendor units
  1f382d818d tree-wide: fix bad errno checks
  667c207683 bus-message: immediately reject messages with invalid type
  116a8eadb6 bus-message: fix negative offset with ~empty message
  4d5779d886 load-fragment: fix a typo
  c8b6de003a NEWS: retroactively document Family=
  cf6b8e6ec5 man: fix dir name in sysctl.d(5)
  6d009b7a25 journalctl,elsewhere: make sure --file=foo fails with sane error msg if foo is not readable
  cf786ef164 makefs: log about OOM condition
  0b1839822f blockdev: propagate one more unexpected error
  d78ce949d0 repart: don't insist on coming up on partition label ourselves
  9e1363fcc6 journal: fix dropping first record during upload to remote journal
  50cb4e418d meson: initialize time-epoch to reproducible builds compatible value
  76abe079b7 limit-util: quieten a very common debug message that is misleading
  b3e484a3b1 shared: fix integer overflow in calendarspec
  0c29eea969 repart: suppress complaints about lack of BLKRRPART when operating on regular file
  3db52f5ed8 repart: explain when we exit early and don't do a thing
  d99cba3aaa mount: introduce mount_is_nofail() helper
  7bc4bcea15 mount: default startup dependencies and default network ones are orthogonal
  7fe617fa53 mount: introduce mount_add_default_ordering_dependencies()
  e1c091b6d4 automount: fix handling of default dependencies for automount units
  ae05a137c9 mount: let pid1 alone handle the default dependencies for mount units
  f1fb197176 mount: mount unit activated by automount unit should be only ordered against the automount unit
  c9bcc69703 generator: don't generate device dependencies for extrinsic mounts
  ebac09ea0a fstab-util: introduce fstab_is_extrinsic()
  a20e4ea0ed device: drop refuse_after
  2799fffac1 man: drop some left-over mentions of StandardOutput=syslog
  144aff9c3b sd-netlink: remove unused RTNL_WQUEUE_MAX define
  34ca8df8e1 test: Add return 0 to main() function (even it is not strictly necessary)
  6e03f328a9 network: 'cur' variable cannot be null, so simplify code
  8d0c97f6ca tree-wide: Initialize _cleanup_ variables if needed
  4f174e49ae netlink: Fix assert condition on n_containers
  3905ce532c journald: Increase stdout buffer size sooner, when almost full
  5a37eb7c61 core: don't bind varlink socket if running in test mode
  33fff72ce6 pam_systemd: also print debug lines when ending a session
  ba9af79ccb pam_systemd_home: use correct macro for converting ptr to fd
  6199235489 Fix misuse of PAM_PROMPT_ECHO_OFF in systemd-homed
  c180a2c452 shared/ethtool-util: hush gcc warnings about array bounds
  1addba4aac core: fix compilation with gcc -O3
  9c46b97161 random-util: use ERRNO_IS_NOT_SUPPORTED() macro
  d85f9093d2 tmpfiles: clarify that "!" lines are filtered before collisions are checked
  2fac966a5c man: mention the exclamation mark and minus sign literally, to make things searchable
  4f61be3373 man: clarify that exit status name mappings are unaffected by SuccessExitStatus=
  b747d74a41 seccomp-util: add new syscalls from kernel 5.6 to syscall filter table
  c30d8caf8b tree-wide: Replace assert() by assert_se() when there is side effect
  b6e8e3be7e networkctl: use uint64_t for link speed throughout
  be66ce6089 tree-wide: use CMSG_SPACE() (and not CMSG_LEN()) to allocate control buffers
  1cb197798a man: suffix pam options with "=" where arg is required too
  a5fe01d3da test: Use assert_se() where variables are only checked by assert
  6960efd198 tree-wide: Fix, replace assert() by assert_se() when there is side effect
  93c1b03074 tree-wide: Mark as _unused_ variables that are only used in assert()
  c7679d7a9f tree-wide: Workaround -Wnonnull GCC bug
  073b257fd7 man: bring example PAM snippet of pam_systemd and pam_systemd_home back in sync
  855291a81c man: highlight relevant lines in pam_systemd_home.so example PAM snippet
  f89ad7c0fd login: include pam_systemd_home.so in the default PAM snippet we ship for user@.service
  9357f9466f test: Skip test-boot-timestamps on permission denied
  cad4ebe14e sysusers: be extra careful when locking accounts
  551e6f233a shared/install: print name of offending file in error
  c6a2e51232 systemctl: fix --root support in querying presets
  6f1eedbfdd systemctl: fix hint when 'systemctl help' is given
  925521df7c shared/unit-file: fix resolution of absoulute symlinks with --root
  756ba362e8 man: mention that ProtectSystem= also takes care of /efi
  4f77cf43b5 man: systemd.service: systemd-analyze exit-codes -> exit-status
  7c6ea7a053 man: expand on the star…end/repetition time expressions
  e06b940792 calendarspec: be more graceful with two kinds of calendar expressions
  f3dd0b476d calendarspec: minor simplification
  3581c16d56 shutdown: fix spacing in shutdown error message
  9556255349 nspawn: mount custom paths before writing to /etc
  37447b7e78 repart: fix partition maximum size segfault
  7f231ba503 link: Add units and fix typo in (Rx|Tx)BufferSize= manpage. Clean up the implementation slightly
  e75d2cdb0b main: bump RLIMIT_MEMLOCK by physical RAM size
  e16b9a1e31 nspawn: be more careful with creating/chowning directories to overmount
  765d184a69 homectl: say "home area" in more places
  c11bff4fa7 userdbctl: make --help fit in 80 columns
  0e56c2ef3f shell-completion/zsh: update systemd-analyze completions
  2bb580f994 zsh: fix disable/enable completion
  607a19a309 cgroup-util: check for SYSFS_MAGIC when detecting cgroup format
  ddb3c38efc stat-util: no need to open a file to check fs type
  bd8842304c sysusers,tmpfiles: always mention error when failing to replace specifiers
  bdea9b65d2 sysusers: add accidentally forgotten 'return'
  17b059774d man: document binfmt's new --unregister switch
  560380d8ec binfmt: also unregister binfmt entries from unit
  80835d9c51 binfmt: modernize code a bit
  a1745741b8 shutdown: unregister al…
halstead pushed a commit to openembedded/openembedded-core that referenced this issue Aug 8, 2020
Drop backport of CVE-2020-13776 (merged upstream), refresh
0001-binfmt-Don-t-install-dependency-links-at-install-tim.patch. Refresh
musl patches for v246.

Commits:

  ae366f3acb NEWS: last rites
  cae1e8fb88 loop-device: implicitly sync device on detach
  3660da17b0 Merge pull request #16624 from keszybz/timesync-retry-interval
  e7e954243a udev: fix codesonar warnings
  b67ec8e5b2 pid1: stop limiting size of /dev/shm
  2f2c60d7fe path-util: make use of TAKE_PTR() where we can
  b6eb208b29 hwdb: Add EliteBook to use micmute hotkey
  c8f3d7672c repart: log fixes
  5919bd3df3 timesync: increase retry interval more slowly
  8588146f69 added alternative version of SurfTab Twin
  2ac7eec3b5 network: fix use of uninitialized value
  b209cff2ad network: Fix "Unknown section 'DHCPv6PrefixDelegation'." message
  c05b8edde0 NEWS: mention about [DHCPv6PrefixDelegation] section
  dd57cf6444 meson: run 'ninja man/update-man-rules' again
  6b222c4b02 man: fix link markup
  0cfb490fe9 Merge pull request #16585 from yuwata/network-dhcp6-fixes
  ee56c072b9 Merge pull request #16590 from keszybz/test-fs-util-relax
  f8528230b3 Merge pull request #16576 from keszybz/bump-tmp-size
  b1d666ac58 test-cgroup-util: Handle result=NULL as empty string
  f649325ba7 firstboot: Update help string with --root-shell options
  c550cb7f8c test-sleep: add more logging, show secure boot mode
  02e1eb6d02 NEWS: mention new tmpfs limits
  362a55fc14 Bump /tmp size back to 50% of RAM
  99e015e28c network: rename settings about DHCPv6 Prefix Delegation
  61c0ef4ff3 network: make RADVPrefixDelegation enum bitfield
  ea121d8f25 network: update address infomation even if link is in failed or linger state
  e55265184b network: do not assume static addresses are configured
  15797d6a2b network: check at least one dynamic address is assigned when DHCP is enabled
  1633c45731 network: dhcp6: drop addresses and delegated prefixes on client stop
  1c09d84e42 network: rename ipv4ll_address -> ipv4ll_address_configured
  b0b9776656 network: ndisc: also remove old DNSSL or RDNSS records after an SLAAC address is ready
  69203fba70 network: ndisc: remove old addresses and routes after at least one SLAAC address becomes ready
  6e537f62d7 network: dhcp4: release old lease after the new address become ready
  80b0e86084 network: make address/route_configure optionally return created Address/Route object
  8eec0b9da5 network: set key destructor in several hash_ops
  5f58af25e6 network: make link_check_ready() return earlier if the link is not in 'configuring' state
  3336e946da network: ndisc: do not set configured flags when addresses or routes are not assigned yet
  5d8c3ec1e9 network: make link enter failed state if address_update() failed
  97f000744f network: introduce callback called when an address becomes ready
  c9d223e803 test-network: add tests for prefix routes
  3606ca659e network: add debug log for configuring address
  c21ed6812e test-ndisc-rs: increase timeouts
  500727c220 test-path: increase timeout
  933ab8199d test-fs-util: do not assume /dev is always real
  31363bd564 firstboot: Check if the given shell exists
  97efde65d8 network: radv: Send RA on newly-added dynamic prefix
  c8f12abc73 Fix clang-11 issues
  116d6d2965 catalog: update Polish translation
  f527c6fa08 resolvectl: fix older resolved or networkd support to set DNS servers
  e128723dae Merge pull request #16566 from poettering/nspawn-osrelease-fixes
  a8bd4bab75 Merge pull request #16567 from keszybz/more-news
  199a892218 selinux: handle getcon_raw producing a NULL pointer, despite returning 0
  d05f7b5007 semaphoreci: update Debian release to bullseye
  38821a0e29 update TODO
  d64e32c245 nspawn: rework how /run/host/ is set up
  62b0ee9eb1 portabled: update host's os-release path
  98aac2ad5a doc: update os-release spec with new path for container host's file
  549719699c NEWS: fix typo in path
  d130181fd8 nspawn: add missing spdx header
  e9769453e3 Merge pull request #16561 from yuwata/test-ordered-set
  8047ac8fdc core: clean more env vars from env block pid1 receives
  337f0b0094 NEWS: reorder entries a bit and add a few items
  8b25484af3 NEWS: update contributors list for v246-pre
  c015d657ec hwdb: update again for v246
  b226422cd7 firstboot: don't create /etc/passwd with mode 000
  2a2e78e969 nspawn: fix MS_SHARED mount propagation for userns containers
  fe224669fb Update mkosi.ubuntu to 'focal'
  6f5d73aba6 network: compare with peer address if it is specified
  01b92946c5 Merge pull request #16532 from yuwata/network-sync-state-file
  d4fa0493a7 test-ordered-set: add a case where we get 0 for duplicate entries
  5cf821acf8 man: do not say that isolate is like switching runlevels
  402e1e699f Merge pull request #16557 from keszybz/two-ci-fixes
  2645d4bcc1 test: clarify that ordered_set_put() returns -EEXIST if entry is duplicated
  0390b094f5 meson: do not choke on time epoch when there are no git tags
  960a64691f semaphore: pull in tree explicitly
  495454f40f update NEWS
  82ff544160 Merge pull request #16496 from DaanDeMeyer/firstboot-shell
  bd190899bb Get SOURCE_EPOCH from the latest git tag instead of NEWS
  00b868e857 Merge pull request #16542 from keszybz/make-targets-fail-again
  c3f8a065e9 execute: take ownership of more fields in ExecParameters
  28900a1bfe firstboot: Add --root-shell option
  c4a53ebf7a firstboot: Tighten up passwd/shadow handling
  94d1ddbd7c pid1: target units can fail through dependencies
  74c8e3c4e0 Revert "units: drop OnFailure= from .target units"
  771b52427a core/job: adjust whitespace and comment
  7f8c1e95a5 test-network: add test for duplicated IPv6Token=
  2c62149509 network: ndisc: ignore duplicated IPv6Token=
  92ee90af47 network: ndisc: do not store duplicated data in Set
  3bb4126262 Merge pull request #16536 from poettering/time-clock-map-fixes
  3dbd8a15d5 util: use IN6_ARE_ADDR_EQUAL() macro
  f91b234077 test-network: drop unnecessary sleep() in NetworkdStateFileTests.test_state_file
  1b14222124 network: make bus methods sync link state file
  c2a6595014 network: introduce link_save_and_clean()
  f281fc1e95 tree-wide: use siphash24_compress_string() where it is applicable
  1c568d65ac util: introduce siphash24_compress_string()
  6c04fccb1d util: make siphash24_compress_boolean() inline
  e3643b00a8 test-path: decrease variable scope
  8f8c7801e9 test: increase timeout for test-path
  2859bb932b Merge pull request #16530 from yuwata/udev-fix-race-in-renaming-network-interface
  63fdaa36c5 Merge pull request #16407 from bluca/verity_reuse
  8fa2cd83c6 Revert "man: add note about systemd-vconsole-setup.service and tty as input/output"
  2aa5a13aa9 test: adapt test-functions for SUSE
  f25e9eda52 Merge pull request #16514 from keszybz/zstd-decompress-fix
  b876b07812 Merge pull request #16540 from poettering/acl-fix
  ac1f3ad05f verity: re-use already open devices if the hashes match
  536879480a dm-util: use CRYPT_DEACTIVATE_DEFERRED instead of ioctl
  d81be4e752 coredump: port to use common add_acls_for_user()
  2ea6247e01 acl-util: fix error handling in add_acls_for_user()
  002674387c offline-passwd: use chase_symlinks()
  628db21130 update TODO
  0da322d9a4 man: update docs with the new functions and other enhancements
  7cbb7d62c6 homectl: fix warning about unused function
  06847d0fba TODO: add entry for XZ
  e4a321fc08 journal/compress: remove loop in decompress_startswith_zstd()
  a24153279e journal/compress: fix zstd decompression with capped output size
  b4a11ca3f2 journal: use -EPROTONOSUPPORT for unknown compression
  76cbafcdd4 sd-journal: when enumerating, continue even after an inaccessible field
  04dffc0add user-util: indentation fix
  58afc4f8e4 core: don't acquire dual timestamp needlessly if we don't need it in .timer handling
  d3926f9a46 test: add basic test for clock mapping
  7c0eb30e32 time-util: rework clock conversion logic
  4c967576da update NEWS
  6456dafa12 Merge pull request #16504 from poettering/read-file-ipc
  c400d040ce import: always prefer GNU tar, to avoid cmdline incompatibilities
  3177b9270c fileio: add brief explanations for flags
  49f16281c9 tree-wide: use READ_FULL_FILE_CONNECT_SOCKET at various places
  c668aa8b35 fileio: allow to read base64/hex data as strings
  b93d3f6b81 fileio: add support for read_full_file() on AF_UNIX stream sockets
  f294470262 fileio: add explicit flag for generating world executable warning when reading file
  2e3e2750bb Merge pull request #16519 from yuwata/networkctl-altnames
  739b9a4354 Merge pull request #16353 from yuwata/network-dns-sni
  28266c446a udev: drop unnecessary checks
  ae353ec2f6 udev: save ID_RENAMING= property to database before renaming network interface
  1cdea1a2f7 network: update one log message
  08de6f945d test: run systemd-dissect and systemd-run with log level debug in TEST-50-DISSECT
  3a978b30cd logind: Fix org.freedesktop.login1.set-reboot-to-boot-loader-menu saving to the wrong file in the non EFI case
  ddbab78f9a bus: use bus_log_connect_error to print error message
  711dd5db9e man: update explanation about the format to specify DNS servers
  a574b7d152 resolvectl: use bus_message_read_in_addr_auto()
  7695e2cbbe network, resolve: use bus_message_read_ifindex() or friends
  3dd95ab6c5 util: introduce bus_message_read_ifindex()
  10d4620467 util: introduce bus_mesage_read_dns_servers()
  976009897b util: introduce helper functions to read in_addr from bus message
  e293e755d5 util: drop duplicated inclusion of sd-bus.h
  66479677a9 test-network: add tests for DNS= with port number and SNI
  a747e71c56 resolvectl: show DNS servers with port and SNI
  b1881e8320 resolvectl: make DNS servers can be specified with port number and SNI
  8e56ea4c88 resolve: add DBus properties which support DNS SNI and port number
  95ce1ba87b resolve: add DBus method to set DNS server with port number and SNI
  4e11ddfdd3 network: add DBus method to set DNS server with port number and SNI
  87d6489776 network: save DNS servers specified by DBus interface
  6458176514 network: do not save DNS= entries not match link ifindex
  e77bd3fdff network: support port number and SNI in [Network] DNS=
  8aa5afd20f resolve: read/save port number and SNI from/into link state file
  b6af282475 resolve: compare port and SNI in dns_server_hash_ops
  1b86009298 resolve: also compare port and SNI in dns_server_find()
  da9de7385a resolve: support port specifier in DNS= setting
  395aa34023 resolve: ignore empty server name
  408f8fbc0f util: introduce 'struct in_addr_full' and its helper functions
  a723fb85da util: introduce in_addr_port_ifindex_name_from_string_auto() and in_addr_port_ifindex_name_to_string()
  cbe194b39e resolve: propagate error in link_load_user()
  eced0d2a46 Merge pull request #16518 from yuwata/network-fix-failure-in-updating-mac-address
  2665327a41 travis: compile with -O1 with clang
  d7d717b7e2 docs: Document xdg-autostart parameter X-systemd-skip
  4c0668bc14 Merge pull request #16478 from bluca/dissect_tests
  6a097936b2 docs: Update section about XDG autostart generator
  e6791b5522 Merge pull request #16497 from DaanDeMeyer/mkosi
  7e8279c0a6 Merge pull request #16501 from yuwata/udev-fix-renaming
  807667f7ac network: stop already running engines before updating MAC address
  96fe813c42 radv: introduce sd_radv_is_running()
  48c5398951 networkctl: do not ignore -EOPNOTSUPP when reading netlink message
  ae5b779252 networkctl: sort alternative names
  0ef1adf512 vconsole-setup: downgrade log message when setting font fails on dummy console
  628f08b66d sd-netlink: make timeout message sealed
  d735e4f2d6 Merge pull request #16505 from yuwata/network-manage-foreign-routes-cleanups
  ed4512d009 nspawn: set container_host env vars before user arguments
  a9c9b18a95 networkd: Use NLM_F_ACK on the netlink message to add a neighbor.
  d3f45d130e clang-format: set Break afer enum to false
  4573592ddf Merge pull request #16512 from keszybz/offline-passwd-altfiles
  241947d1b4 shared/offline-passwd: look at /usr/lib/{passwd,group} too
  3e5d2264b5 Move offline-password.[ch] to shared and add test-offline-passwd
  55678b9eae build: skip installation of 2 files if feature is disabled
  0119ab3d6c Merge pull request #16476 from keszybz/qemu-autosuspend-rules
  a8c10331b4 network: replace NDISC -> NDisc in log messages
  5eec0a0810 network: introduce address_exists() helper function
  d15818f227 network: update debug log when foreign routes are received with ManageForeignRoutes=no
  5ff1ef31f2 network: do not enumerate routes if ManageForeignRoutes=no
  97fdae33df udev: do not try to reassign alternative names
  434a348380 netlink: do not fail when new interface name is already used as an alternative name
  1498252614 netlink: introduce rtnl_get/delete_link_alternative_names()
  77547d5313 hwdb: check that uppercase digits are used in modalias patterns
  7f16ef9fba Merge pull request #16490 from yuwata/network-radv-ndisc-cleanups
  457763aa03 hwdb: allow spaces in usb: matches and similar patterns
  dc9e9a18be Merge pull request #16491 from keszybz/udev-logging
  e5f0010659 mkosi: Update help comment in settings files
  172ad053ff mkosi: Keep mkosi.default out of the repository.
  9e79123884 tree-wide: use SYNTHETIC_ERRNO with log_device_* in more places
  46d4149d0f sd-device: use LOG_PRI() in log_device_full()
  b5ef66101a analyze: CAP_RAWIO -> CAP_SYS_RAWIO
  94ec163ad2 timedatectl: do not show (null) if the address of NTP server is not resolved
  ec8bebbcc2 Add autosuspend rules for emulated QEMU devices
  df7667323d udev: change the modalias string for usb devices to include the device name
  d6d4961b01 udev: don't complain when udev_watch_end() is called without udev_watch_init()
  6b9f5f01cb basic/string-table: reduce variable scope
  5992f362bf udevadm: use STR_IN_SET(), add comment
  fe20121a4c sd-device: use strjoin instead of asprintf
  22ba4525d3 udev: tweak debug logs for udev rules
  12254ccab0 man: add more details for IMPORT, PROGRAM and RUN keys
  ba60127df7 udev: accept OPTIONS+= without any fuss
  b6a80b83bc udev: accept IMPORT{}= without any fuss
  13e8a49a58 network: ndisc: any failures in processing event make the link in failed state
  c97785168b network: radv: clean up conf parsers
  19b4864346 hwdb/autosuspend: add missing parenthesis
  d96edb2c6e network: downgrade log level in conf parsers
  4d939d2c84 Merge pull request #16485 from bluca/nspawn_os_release_mounts
  9e54462cd5 Merge pull request #16482 from poettering/coverity-246
  14f1c47a0c nspawn: mount os-release in two steps to make it read-only
  eafc7d6056 nspawn: use access/F_OK instead of stat to check for file existence
  2094cd49c4 shared/os-util: fix comment style to follow guidelines
  cc76bf01e3 basic/mkdir: use uid_is_valid instead of manual check
  40282752a2 Merge pull request #16483 from poettering/man-env-d-no-session
  27806670ef Merge pull request #16480 from yuwata/network-fix-dhcp4-races
  3f13f9159f man: configuration files contain assignments, no directories
  d320bfa558 man: GNOME is usually capitalized
  a449b7198c man: don't claim environment.d/ was about sessions
  3cd4459003 Revert "selinux: cache enforced status and treat retrieve failure as enforced mode"
  8e32ad9557 machine: fix if check
  f63ef93703 execute: fix if check
  0ded0e40ab dhcp4: only renewing lease when the client already has a lease
  330f899079 load-fragment: downgrade log messages we ignore to LOG_WARNING
  89a5385fb7 mountpoint-util: fix error handling
  f766d9af38 network: dhcp4: add two warnings
  153cf04139 network: dhcp4: fix another race with SendDecline=yes
  75be72d139 network: dhcp4: also release old lease in dhcp_lease_lost()
  8d5bb13d78 core: fix invalid assertion
  aeba8dd523 network: fix typo
  2bc148add0 test: exercise RootImage, RootHash and RootVerity in TEST-50-DISSECT
  0f5d24a8b9 test: pre-assemble minimal image for TEST-50-DISSECT at build time
  a5f1d665d7 test: exercise systemd-dissect with GPT and verity in TEST-50-DISSECT
  6939873412 test: exercise systemd-dissect --mount in TEST-50-DISSECT
  42165319b1 update TODO
  95b29f3267 Merge pull request #16396 from yuwata/network-configured-flag
  b8ff0663e8 Merge pull request #16468 from keszybz/two-unrelated-patches
  43bf28741f network: drop doubled white space
  93b0b88c3a network: free address when it is removed
  6906794dd1 network: dhcp4: do not assign new address before old one is not removed
  5d976f5f64 network: do not call link_check_ready() in link_request_set_routing_policy_rule()
  0c816fcc7b network: make link_request_set_nexthop() called from link_request_set_routes() or route_handler()
  659ad3a0af network: do not make link in configured state when no address is assigned
  d98c546dac network: ndisc: split ndisc_configured flag into for addresses and routes
  01c344bdd4 network: ndisc: do not ignore remaining addresses
  571f953934 test-network: wait for addresses are not in tentative state
  39373cb984 network: add debugging log why link is not in configured state yet
  c5fcd8a70a test-network: check assigned address is not tentative state
  491b79aeac test-network: set IPv6AcceptRA=no if no dynamic addresses are not required
  eb01a2dfb1 network: make link_request_set_nexthop() static
  a4623f84ed network: add a debugging log
  feb596b5c3 network: include error code in the log message
  2a877f4560 network: set dhcp6_xxx_configured flag after routes/addresses are assigned
  ee5c1311ee logs: when embedding catalog info in log output use a dash of color and unicode
  a996ead6a2 Merge pull request #16398 from poettering/machined-varlink
  26698337f3 timer: Adjust calendar timers based on monotonic timer instead of realtime
  d3e0662c7d Revert "ci: turn off the "upstream-systemd-ci" ppa"
  06bb441102 test: Add "finish" rule to .PHONY
  76830e2500 Merge pull request #16462 from keszybz/rpm-macro-warnings
  b56a877ef8 test-fs-util: use log_info instead of printf
  d4ff79bbe1 ci: turn off the "upstream-systemd-ci" ppa
  6cdc429454 Merge pull request #16340 from keszybz/var-tmp-readonly
  56a13a495c pid1: create ro private tmp dirs when /tmp or /var/tmp is read-only
  a318a5659a man: document F1 in sd-boot too
  1061fc1c17 rpm: include macro name in errors for two args macros too
  281014b73e rpm: adjust various macros to print macro name in the error message
  8800df5f71 Merge pull request #16430 from mikhailnov/fix-rpm-create-package-macros
  dad2062f40 update TODO
  38ccb55731 nss-mymachines: drop support for UID/GID resolving
  4c2cf15751 man: document new varlink service
  4751364e76 machined: implement user/group lookup varlink API in machined too
  74d1b7d2ad machined: refactor UID/GID machine translation
  a07f18cd30 process-util: make sure procfs_file_alloca() works for non-literal field names too
  56870d324b docs: permit user/group services that do not support enumeration
  16a4a2f8cc update TODO
  08ef688656 analyze: make testing ConditionPathExistsGlob= work
  4519c7c706 update TODO
  77ee1783eb udevadm: beef up deprecation log warning
  a18c7865be meson: do not install testdata when -Dinstall-tests=false
  60b45a80c1 Update .clang-format
  5b72b34708 Make the instructions slightly easier to read
  8ba6c15a82 Merge pull request #16437 from systemd/coverity-gcc-10
  b7067c4d87 coverity: install systemd
  1374448add coverity: switch back to Fedora 31
  46072ae35a repart: include more relevant information in the warning message, fix test
  5553041a62 Merge pull request #16435 from gaoyi1988/master
  6b949d2605 NEWS: mention source mode for MACVLAN or MACVTAP
  ddcdcac519 Merge pull request #16432 from cgzones/selinux_err_fix
  0d3a8bc7eb test: add test case for multi matches when use "||"
  1e67a9c2cd udev: specify the end of value
  d67b1d18fc bus: use bus_log_parse_error to print message
  f2df56bfea namespace: unify logging in mount_tmpfs
  db06c162e8 shared: fix error handling in make_inaccessible_nodes
  3e6e0856cd rpm: avoid hiding errors and output in *_create_package macros
  93406fd379 rpm: avoid odd symbols in EOF indicator
  b159831b61 Merge pull request #16424 from keszybz/cap-bpf-compat
  b0ff0eaa01 Merge pull request #16426 from cgzones/run_user_label
  675fa6ea28 man: fix some manvolnum
  abad72be4d namespace: fix MAC labels of TemporaryFileSystem=
  8d9cbd809d selinux: create standard user-runtime nodes with default context
  7a3e4dc38b basic: add helper function mknod_label()
  5149990e1f NEWS: grammar improvements (#16413)
  5c53766f28 Added MSI Prestige15 A10SC specific keycodes
  d0571b758b Add support for HP Elitebook x360 1040 G6 micmute button
  ed1de7108e Explain how to determine hierarchy type from shell
  5700780389 basic/cap-list: reduce scope of variables
  864a25d99b basic/capability-util: let cap_last_cap() return unsigned integer
  417770f303 basic/cap-list: parse/print numerical capabilities
  76fb53c94a install: fix wrong data type
  a38c68a18a NEWS: drop duplicate entry, add --image= entry
  976efe1b80 NEWS: add date
  a127c6208f userdb: fix dlopen call
  5157d719f0 Merge pull request #16411 from ddstreet/bridge_without_carrier_fails
  5961d35a5b NEWS: add blurb about os-release and $container_host_*
  55aacd502b Merge pull request #15891 from bluca/host_os_release
  001c07cfff test-netowrk: in test_bridge_configure_without_carrier, avoid strange test failures
  48c190822b Merge pull request #16405 from sipraga/master
  02b0109af5 Merge pull request #15955 from anitazha/nullorempty
  4e3376d43a test-network: don't print networkctl output for passing subtests
  62320feb9f Merge pull request #16404 from keszybz/release-246-prep
  2e7090e94d test: bump the TEST-47 sleeps once again
  0d0de133f0 network: add support for MACVLAN source mode
  3994922baf meson: bump version numbers for v246
  72e5190878 NEWS: update contributors list for v246-rc
  9c70fc2164 git-contrib: simplify implementation a bit
  cbc056c819 core: wrap some long lines and other formatting changes
  24e2494407 Merge pull request #16385 from JackFangXN/master
  43b24a0716 sd-device: use log_device_debug_errno()
  4b6607d949 table use table_log_print_error() instead of table_log_show_error
  df83eb546b table add table_log_sort_error()
  d836018a73 table add table_log_show_error()
  c253a95bca Merge pull request #16379 from yuwata/network-dhcp6-delegated-prefix-address-handler
  21d19a7a13 docs: update information where to file bugs against RHEL/CentOS versions of systemd
  2e2f6a01a0 Merge pull request #16143 from fbuihuu/fstab-generator-fix
  5dc60faae5 add error message when bind mount src missing
  3650173fec network: make address_handler() static
  a211ff4b84 network: introduce own address handler for dhcp6 delegated prefix
  2b0bf3ccf8 Merge pull request #16301 from poettering/firstboot-image
  9870cfdf7f Merge pull request #16388 from keszybz/xdg-desktop-fuzz-case
  60e3a5a252 Merge pull request #16390 from keszybz/coverity-and-typos
  dea7f5cc87 xdg-autostart: ignore all empty entries in multi-string entries
  f4e1a42592 man: match parentheses
  d1ca1f7c2a xdg-autostart: avoid quadratic behaviour in strv parsing
  a53f024d71 journald: minor wording tweak in message
  cd990847b9 tree-wide: more repeated words
  0da425df65 networkd: use capitalized "IP" and "TOS" in messages
  8ab0f03266 journal/compress: drop "future" code in zstd compression
  d7b34e3841 all: fix minor typos
  5d043c9fdf update NEWS
  cbe952fe1f update TODO
  737ec51444 TODO
  a122502077 firstboot: add option to turn off welcome text display
  dcfdd62184 man: document the new --image= switch of systemd-firstboot
  3ff9fa591e firstboot: add --image= switch
  827ea52125 mount-util: use UMOUNT_NOFOLLOW in recursive umounter
  e49ee28522 mount-util: add destructor helper that umounts + rmdirs a path
  e2ec9c4d3a namespace-util: introduce helper for combining unshare() + MS_SLAVE remount
  9ecf5d9340 fuzz: add test case that should already be resolved
  cda667722c core: refresh unit cache when building a transaction if UNIT_NOT_FOUND
  3f2e15abc5 sleep: one spelling unification
  77ecc1aaa5 Merge pull request #16380 from yuwata/network-dhcp6-update-prefix-route
  9389a271b7 Merge pull request #16381 from yuwata/dhcp4-renewing
  a240147bdc Merge pull request #16383 from yuwata/network-dhcp6-radv-update-prefix
  7f6e342c93 hwdb: Add Google Pixel Slate (nocturne) (#16377)
  58e6c62191 network: fix memleak
  1d596fdec2 network: do not restart radv engine when adding prefix
  8fc2a5dff4 network: fix indentation
  290696e512 Revert "network: Don't send RA with zero router lifetime when restarting radv"
  c1495f8e9d fix typo
  d469cea3bd network: Don't send RA with zero router lifetime when restarting radv While investigating https://github.com/systemd/systemd/issues/16356, I discovered that networkd stops the radv service before adding or updating prefixes and then starts it again.  This causes networkd to send an RA with a router lifetime of zero, causing the routes to flap on systems receiving the RA for a fraction of a second before radv is started again and proper RAs are sent.  That has the potential to cause issues with latency-sensitive traffic like gaming or VoIP.  This patch adds a boolean argument to the sd_radv_stop() function to control this behavior.  The zero lifetime RA is still sent whenever radv is actually being stopped, but when it is being restarted for a prefix update (from networkd-dhcp6.c), the final RA is no longer sent to avoid the route flapping.
  921693a0f3 dhcp4: do not try to renew address when client has no lease
  ceaec54a3c dhcp4: do not renew address if client is not running yet
  f050c94df0 network: always update acquired prefix route
  1419ff0401 network: decrease indentation level
  cecd68c70f network: fix indentation
  c82012605b Merge pull request #16374 from keszybz/docs-and-networkd
  08bf20287c hwdb: update again for v246
  98ebef62c7 DHCPv4: client add support for DHCP server allow list
  b3077c47a8 Merge pull request #16344 from keszybz/update-utmp-erofs
  c5bc4f77d9 hwdb: add another Logitech M705 mouse variant
  5544cd3199 Merge pull request #16373 from JackFangXN/master
  9a61e8fca2 unit-name: fix a potential memory leak
  1f68f77292 networkd: we should not loop when extract_first_word() fails
  8dc647fd30 man: do not say that tasks are threads and processes
  24c8d4d3f4 man: one more typo
  b37e4d9c87 Merge pull request #16370 from keszybz/tree-wide-spelling
  e26538dd04 network: tc: fix n_prio bounds check
  f987a261b4 userdbctl homectl use table_log_add_error()
  f04a98e13f Fix two typos found by codespell
  bdac560801 tree-wide: drop quotes from around [section]
  e9dd698407 tree-wide: fixes for assorted grammar and spelling issues
  a64911f9b7 travis: install missing deps for the Coverity run
  c5fbdebec6 Merge pull request #16287 from yuwata/udevadm-info-attribute-walk
  4276749dd3 shared/install: do not require /dev/null to be present in chroots
  3da49ad55a catalog: update Polish translation
  ca1d199b48 update-utmp: do not fail on EROFS
  c2a9909377 Define _cleanup_ helper for setutxent()+endutxent()
  bf795c47bc test: use KILL instead of SIGKILL in TEST-52-HONORFIRSTSHUTDOWN
  21c7fe6d12 sd-device: be more defensive in FOREACH_DEVICE_SYSATTR
  2fadbb4535 core: set private section name for automount units
  c2056dd6f9 hwdb: Pavilion 13 x360: Tablet mode and SYSRQ key
  071be2fa9f Merge pull request #15442 from poettering/fido2
  21df146501 udevadm: sort entries in `udevadm info -a` by attribute name
  fadcc12229 sd-device: make FOREACH_DEVICE_SYSATTR() list attributes in subdirectories
  33d943d168 initialize arg_clock_usec
  9e99bfbd5a Merge pull request #16348 from yuwata/news-sriov
  640f3b143d core: check null_or_empty for masked units instead of /dev/null
  71af436c63 NEWS: mention .network [SR-IOV] section
  554a97ba23 NEWS: WithoutRA= is not a boolean option anymore
  a68da22257 NEWS: tweak WithoutRA= description a bit more
  272ac70a21 various daemons: emit Stopping... notification before destructing the manager object
  cc090ca7fe initctl: use _cleanup_ and run()
  e9d9d50cef initctl,update-utmp: define iterator variable in loop
  bc9d1dbfc8 update-utmp,initctl: drop ppid check
  c03ef420fa network: tc: rename several settings which take size in bytes
  25b67032a8 Merge pull request #16343 from jirislaby/master
  cc832f9772 Merge pull request #16338 from keszybz/spelling2
  63b7e7b4ba Merge pull request #16336 from yuwata/ifindex-cleanups
  cbdf02952e NEWS: update document about WithoutRA=
  1447dc625a Merge pull request #16219 from ssahani/network-sr-iov
  74986a0f88 hwdb: Add accel orientation quirk for UMAX VisionBook 10Wi Pro
  52e085af82 tree-wide: "unparseable" → "unparsable"
  13adf35343 resolve: use appropriate type
  5e958e1d6c util: use setsockopt_int() at one more place
  1a6c913676 libsystemd-network: rename index -> ifindex
  7fa69c0a6f dhcp6, radv: only accept valid ifindex
  15e6a6e87b tree-wide: spell "lifecycle" without hyphen everywhere
  37b22b3b47 tree: wide "the the" and other trivial grammar fixes
  838d39af93 network: Allow DHCPv6 client  to start solicit mode
  51115fdc42 l10n: update Czech Translation
  6371e69b49 fstab-generator: introduce an helper to write extra dependencies specified via the mount options
  045c5faf5a fstab-generator: extra dependencies specified in fstab should be applied to the mount unit
  c8fe23d45c update TODO
  4442c26942 man: update homectl man page with documentation for new features
  fe2520fbb5 docs: document new FIDO2 user record fields
  0eb3be4644 homectl: add --pkcs11-uri=auto and --pkcs-11-uri=list support
  2af3966af3 homectl: add acquired fido2 PIN to user record
  93295a2501 homectl: split out pkcs#11 related code bits into own .c/.h file
  c98811d837 homectl: rework how we log when doing a home directory update
  8e62dfb12a homectl: do generic error handling/retry also when creating a home directory
  f737186ab1 homectl: show touch emoji when asking for PKCS#11 protected auth path
  85b1294488 pam-systemd-home: print helpful message when token's PIN is locked
  7b78db28e5 homed: add support for authenticating with fido2 hmac-secret tokens
  1c0c4a43c6 homectl: add support for enrolling FIDO2 HMAC-SECRET tokens
  5e4fa456fa user-record: add fields for FIDO2 HMAC authentication options
  af4fbd463f build-sys: add libfido2 as optional dependency
  c0bde0d240 user-record: rename JSON field "pkcs11Pin" to "tokenPin"
  d00f318323 user-record: securely erase pkcs#11 when assigned NULL too
  7b8d55b72c homectl: add missing log messages when json_variant_format() fails
  c63ec11bf5 pkcs11-util: reduce scope of a variable
  1146b664e6 macro: add new FOREACH_POINTER() macro magic
  428d32afea locale-util: add support for touch emoji
  830ffbce1b doc: add recentry introduced transient settings
  9457b6bb21 Merge pull request #16303 from poettering/dbus-util-split
  3d2c26925f test-network: add tests for SR-IOV
  c3a5025dc6 network: add MACAddress= setting in [SR-IOV] section
  e64b31c848 network: add VLANProtocol= setting in [SR-IOV] section
  518cd6b527 network: Introduce SR-IOV
  5908ddd763 sd-netlink: Add SR-IOV netlink properties
  b46d8c1c70 udev: spi: include chip select number in ID_PATH
  d17eabb105 Fix build with µhttpd 0.9.71
  116739cfb6 Merge pull request #16316 from yuwata/backlight-use-actual-brightness
  5c236388c3 update TODO
  6c3a19d5b3 Merge pull request #16313 from yuwata/network-move-ipv6ll-gen-mode
  7233e91af0 core: store timestamps of unit load attempts
  f93dd4b940 Merge pull request #16282 from poettering/repart-copy-blocks
  437b9a7f75 backlight: read current backlight brightness from 'actual_brightness' attribute
  daa227a320 backlight: call log_setup_service() before logging
  74f1bb5c9f backlight: use SYNTHETIC_ERRNO() macro
  40af3d020f shared: split out property get helpers
  9176326ba2 shared: split out code for printing properties
  807542bece shared: split out code that maps properties to local structs
  9b71e4ab90 shared: actually move all BusLocator related calls to bus-locator.c
  c664cf5607 shared: split out BusObjectImplementor APIs
  7aee1e7304 hwdb: adjust touchpad edge detection for X1Tab3 (#16310)
  aa0b850bca NEWS: minor fixes
  6f6296b93f network: move IPv6LinkLocalAddressGenerationMode= to [Network] section
  3ea58e010d NEWS: add several entries about networkd
  26b0fda9b7 test-repart: allow the test to pass on non-amd64 architectures
  e4f8d5e01f shell-completion: add missing verbs for networkctl
  8f843190ff test: bump the timeout for systemd-hwdb-update.service under ASan
  0e31a6c2ad Merge pull request #16142 from poettering/random-seed-cmdline
  bed0b7dfc0 pid1: warn if people use User=nobody (#16293)
  7143b95552 efi: define cache functions inside EFI_ENABLE ifdef
  cb713f1696 tree-wide: spellcheck fixes
  7f56c26d10 NEWS: reorder entries with some minor additions
  0cffae953a core: add device mapper to allow-list with DevicePolicy=closed and RootImage
  b47261e5cb update TODO
  e78228b1b0 update TODO
  10f9436c2d Merge pull request #16281 from poettering/logind-cache-more-efi
  0090b551e6 Add quotes for -n
  22aa58adc9 JOURNAL_FILE_FORMAT: minor markdown fixes
  1f19ae0ffb NEWS: add more items for 246
  af2697e83d logind: also cache LoaderEntryOneShot EFI variable
  e8df4eee65 efi-loader: cache LoaderConfigTimeoutOneShot too
  6eea6e30ab tmpfile-util: typo fixes
  95fc17bf46 util: add missing header guard
  12d14b7373 Merge pull request #16096 from poettering/journal-hash-fix
  a79be2f807 hwdb: update for v246
  7caaf44777 update TODO
  757bc2e4c1 repart: add new CopyBlocks= setting
  3f11426f52 Merge pull request #16275 from yuwata/network-deprecate-netdevsim
  fdf3e48c44 udev: split attribute assignment for MMC cards
  6d88513e6b portabled: create temp file for unit, not directory
  823e917f13 selinux: check mac_selinux_init() in tests
  0986bb9b95 Merge pull request #16278 from keszybz/fix-man-links
  66ed28d332 Merge pull request #15624 from poettering/hostnamed-instant
  98506a41fe Merge pull request #15697 from OhNoMoreGit/fix-path-units
  5c0102f83f update TODO
  c85cf04fa3 compress: do something roughly reasonable when building without compressor
  3afe5c00a5 coredump: use log_error_errno() where appropriate
  d80b051cea tree-wide: add new HAVE_COMPRESSION compile time flag
  70cd1e561c docs: document the new journal file format additions
  bbcd38e41e docs: import journal file format docs from fdo wiki
  8653185a9e journal: support zstd compression for large objects in journal files
  0dbe57ee86 journal-file: when individual hash chains grow too large, rotate
  4ce534f4cd journal: use a different hash function for each journal file
  7851ec6634 journal: make signature arrays const
  20b0acfacd journal: rename hash64() to jenkins_hash64()
  f4474e004d journal-file: rename return parameters to ret_xyz
  5030c85a3e journal-file: also show field hash table size in debug output
  e958c05703 journal-file: simplify boot ID acquiring
  cde8c5f722 journal: store NE hash instead of LE hash in Match object
  a76560915f journal-file: use FLAGS_SET where appropriate
  e9ece6a0e3 journal: fix definition of _OBJECT_COMPRESSED_MAX
  d1d8f0f369 macro: add CONST_MIN() similar to CONST_MAX()
  4a5a01ccdd man: reword awkward sentence
  55cf7779f2 man: fix various internal references
  b7a4734551 man: fix links to various external man pages
  f49bead3b0 Merge pull request #16257 from keszybz/two-fuzzer-issues
  b7d81d19cc Merge pull request #16249 from bluca/root_verity_sig
  d7f4ad203a hostnamed: minimize caching of /etc/hostname, /etc/os-release and /etc/machine-info
  aa994368c9 hostnamed: don't cache local hostname either
  a055076988 ci: free up some resources on Pipelines
  efa5bef285 ci: switch to Ubuntu Bionic on Semaphore
  440988666c test-network: remove unused config
  59a9ef1022 network: deprecate netdevsim support in .netdev config
  d4d55b0d13 core: add RootHashSignature service parameter
  c2923fdcd7 dissect/nspawn: add support for dm-verity root hash signature
  035e8e50d7 veritysetup: add support for dm-verity root hash signature
  e60d3b13df Merge pull request #16265 from Werkov/fix-16248
  fd7c7fc8ee Merge pull request #16271 from yuwata/network-cleanups-around-link-get
  e41de5e491 missing: Add new Linux capabilities
  6b000af4f2 tree-wide: avoid some loaded terms
  f23810da20 fuzz-udev-rules: -ENOBUFS should be accepted too
  85fbebe61a journal: fix buffer overrun when urlifying
  f50f597217 network: fix typo in comment
  7936917e3e network: do not update operstate when netdev is not ready
  e856ed00f9 network: fix assertion in link_get()
  25b831bac8 network: check that received ifindex is valid
  d184fb39b6 test: Test memory limit parsing
  67e2baff6b cgroup: Parse infinity properly for memory protections
  b18573e16f ci: bring back Coverity part 2
  595cb4211a ci: bring back Coverity
  c4e90266db Merge pull request #16093 from yuwata/network-htb-add-settings-15213
  f9044b74c5 Merge pull request #16106 from yuwata/network-tc-ets
  f83803a649 Merge pull request #16238 from keszybz/set-handling-more
  41d1f469cf log: introduce log_parse_environment_cli() and log_setup_cli()
  3f8ed9fd96 update TODO
  18d9cee002 man: document systemd.random-seed=
  d247f232a8 core: add new systemd.random_seed= kernel command line option for seeding entropy pool
  4dd055f907 random-util: add common helper random_write_entropy() for crediting entropy to the kernel's pool
  45250e66cc pid1: don't apply "systemd.clock_usec" kernel cmdline parameter outside of PID 1
  97f1c6af8c random-seed: use ERRNO_IS_NOT_SUPPORTED() where appropriate
  e198eba7c2 sysv-generator: reduce scope of variables
  80ce54adaf socket-proxy: use structured initialization in one place
  add74e8929 basic/hashmap,set: propagate allocation location info in _copy()
  35e601d4f9 tree-wide: use set_ensure_consume() in various places
  39dbd0c74c networkd: take ref immediately after storing item in set
  d02fd8b1c6 core/bpf-firewall: use the correct cleanup function
  648c339c49 logind: fix possible memleak of message if the message was already in the set
  d378ef708b portable: rework set handling in portable_detach()
  ab9dd0b997 resolved: fix memleak on duplicate host lines in /etc/hosts
  ceb17827fa resolved: simplify allocation failure handling in dns_stub_process_query()
  b8b46b1ce5 basic/set,hashmap: pass through allocation info in more cases
  fcc1d0315d basic/set: add set_ensure_consume()
  a1ba8c5b71 feature to honor first shutdown request to completion
  7bf6babfa2 Merge pull request #16112 from poettering/nss-systemd-block-fix
  bc8d57f290 Merge pull request #16223 from cgzones/user_selinux
  3d9fbea43e selinux: update mac_selinux_free()
  1cdc42f283 hwdb: add another Logitech G502 Hero variant (#16256)
  0d0248c665 Merge pull request #16246 from benzea/benzea/xdg-autostart
  21856e3462 Merge pull request #16213 from yuwata/network-cleanup-link-state-file
  87d25bdead make-autosuspend-rules: restore compatibility with Python3 < 3.6
  db3b8d5d41 fuzz-udev-rules: rewrite to not require root privileges
  a9ba0e328f Make failures of mac_selinux_init() fatal
  a11bfc17dc Initialize SELinux in user instances
  c238a1f5f1 udev: split rules object creation and loading
  037b0a47b0 userdb: replace recursion lock
  6e78726e20 nss-systemd: skip /etc/gshadow look-ups when we just need the GID of a group
  88d775b734 util: add dlfcn-util.h
  21385e639a man: replace perl bug tracker link that went away with link to paper
  92d64d1444 man: s/PROGRAMM/PROGRAM/
  311a0e2ee6 Revert "cgroup: Allow empty assignments of Memory{Low,Min}="
  73083ca238 portabled: implement container host os-release interface
  e1bb4b0d1d nspawn: implement container host os-release interface
  34e0d56ce2 Container interface: document exposing the host's os-release
  b3b1a08a56 nspawn: use mkdir_p_safe instead of homegrown version
  17b99e377b basic/mkdir: introduce safe recursive variants
  3d0c8750c5 networkctl: display DHCPv4 server address
  fd1f3b3eed dhcp: fix entry name in parsing lease file
  46986251d6 network: drop duplicated information from link state file
  5202be27ee sd-network: drop unused functions
  862e710820 networkctl: use lease file to get DHCPv4 client ID
  d41fa6ee91 networkctl: use lease file to get DHCPv4 address
  35cab5f99d networkctl: load DHCPv4 lease file and use timezone data from the lease file
  ef0daa1129 libsystemd-network: move prototypes of dhcp_lese_save/load() to network-internal.h
  cc479760b4 Revert "job: Don't mark as redundant if deps are relevant"
  9d9a9500cd xdg-autostart: Ignore all files with GNOME autostart phase
  566cb7e23b xdg-autostart: Fix info message if Type= is not Application
  0389f4fa81 core: add RootHash and RootVerity service parameters
  6fe01ced0e nspawn: mkdir selinux mount point once, but not twice
  75ae672bb2 Merge pull request #16196 from mrc0mmand/travis-simplification
  5c9918aca0 Merge pull request #16216 from nabijaczleweli/make-a-fuss
  65804d6aff selinux-util: tweak log_enforcing_errno() to return the errno passed in or 0 when in non-enforcing mode
  9e1732924d test-functions: read /usr/etc/nsswitch.conf if /etc/nsswitch.conf does not exist (#16195)
  affa893da0 man/sd-makefs: link to btrfs.wiki.kernel.org for btrfs-man5, since the man-pages link is dead
  2edc494216 Merge pull request #16237 from keszybz/revert-message-type-check
  c2c193f79a Merge pull request #16179 from keszybz/auto-suspend-hwdb
  b98f393d88 bus-message: add macro for calculation of offset from the page
  b17af3e503 bus-message: avoid dereferencing a NULL pointer
  a9c9f79ece Revert "bus-message: immediately reject messages with invalid type"
  6cd55d6f74 shared/bus-util: fix misleading error handling
  e2ab8e09c8 udevadm-monitor: simplify creation of arg_tag_filter set
  804a436582 fuzz-netdev-parser: add test case for earlier version of preceding patches
  44e9342078 netdev/wireguard: do not invalidate peer on invalid syntax
  de7fef4b6e tree-wide: use set_ensure_put()
  0f9ccd9552 basic/set: add set_ensure_put()
  aaffd34933 sd-device: use set_put_strdup() in one more place
  29bd6012f1 resolved: introduce dns_transaction_gcp()
  7b33ff7388 make-autosuspend-rules: remove one instance of "whitelist"
  88936ed6f9 rules: remove 61-autosuspend-manual.rules
  39d5b72e32 hwdb: enable autosuspend for Wacom Pen and EMV Smartcard Reader
  aa549ff397 test: also verify the generated autosuspend hwdb file
  79dc5d35dd tools: rewrite make-autosuspend-rules.py and add udev rules
  5fde0607a8 Merge pull request #16235 from yuwata/network-fix-warning-16224
  bc694c06e6 log: Prefer logging to CLI unless JOURNAL_STREAM is set
  7830b5c103 Merge pull request #16059 from keszybz/resolve-single-label-names
  b7e8286b4a Merge pull request #15926 from fbuihuu/rework-show-status
  8db8f99eb9 man: add note regarding editing user groups
  c4e585a36b network: add missing break
  1e42c269cb Merge pull request #16239 from keszybz/cleanups
  e6175fbe45 ci: pass -Werror using CFLAGS
  8d9982e30d network: drop unnecessary "&"
  a51a3247e5 man: Fix a typo of session
  c2ad8c0978 man/sd-makefs: also mention /sbin/mkswap
  2bd5e1b272 man: document the new option
  3b5bd7d6b8 resolved: optionally allow single-label A/AAAA queries
  c2f1e83e27 resolved: drop bit-field annotations for fields in Manager
  7877e5ca7c resolved: add dns_query_candidate_freep()
  801d25ef0f man: rework description of Domains=
  876c75fe87 udev: do not execute hwdb builtin import twice or thrice
  b753e8358c test-network: add tests for ETS
  d474aa51bf network: tc: introduce Enhanced Transmission Selection (ETS)
  4dec921889 sd-netlink: add netlink properties of Enhanced Transmission Selection (ETS)
  3a712fda86 sd-boot: Add small comments after device-specific key macros
  034d0eb962 Merge pull request #16191 from poettering/repart-spec
  bc3b868b42 Merge pull request #16208 from yuwata/udev-fix-16207
  cc17c4c9a1 network: do not fail to configure non-nl80211 wifi interfaces
  845d784e54 network: drop casting in memcpy()ing IPv6 address
  5eb6ef8b45 udev: udev_event_apply_format() always make buf NUL terminated
  bc568a7a35 udev: fix error handling of sd_device_get_parent()
  2a71d57f4e network: clean-up DHCP lease server data configuration
  d5da3ada8e Merge pull request #16061 from filbranden/standalone1
  2ee7e54b9e test-network: add tests for HTB settings
  d9eacc1cdd network: tc: add more settings for HTB
  120b5c0bbe network: DHCPv6 - Add support to set token on the LAN interface
  8d2d64166e efi: use stub for cache_efi_options_variable if !ENABLE_EFI
  ffc8eeae62 USER_RECORD: fix typo
  0116d27a30 travis: sort dependencies
  305efcaf3c travis: drop stuff moved to GH Actions
  eeb8c7accf travis: use a matrix for similar jobs
  fb08381c14 repart: if now minimal size is specified, default to 10M
  e031166e15 repart: add simple specifier expansion in Label=
  cdfd853744 update TODO
  d9b6decd88 README: add reference to systemd.io
  77169ed09b update TODO
  d8a9dd0dc1 hwdb: Mask rfkill event from intel-hid on HP platforms
  c73624a553 man: do not say that systemd-modules-load.service only uses static config
  6fe95d3020 sd-boot: Work around malformed CR key code
  7daaf56761 hwdb: Add accel orientation quirk for Odys Fusion Win 12 2in1
  cb24fad361 Merge pull request #16170 from keszybz/man-user@
  387536b3a9 man: mention systemd-user-runtime-dir in user@.service too
  7283fbfd0c efi: Skip parsing SystemdOptions if there's an error getting it.
  25c86e4c39 networkd: Add missing match_wlan_iftype check to network_verify
  f1a20afacd man: Document the crypttab keyfile syntax specifying a device
  550c14fedd Merge pull request #16163 from DaanDeMeyer/resolved-edns-info
  6df8a6c753 Improve message for scheduled shutdown or reboot
  b4564641be hwdb: generate a hwdb file instead of rules for autosuspend
  4677c3da97 man: really fix conditional in homed.conf
  4f0ef40deb man: drop obsolete HAVE_PYTHON conditional
  a2095c0698 update-man-rules: properly filter out directives index again
  4f571b4061 resolved: Log the feature level we're downgrading from as well
  209b2592ed efi: Cache contents of EFI variable SystemdOptions
  6d0f38017c test: in test_bridge_configure_without_carrier, ignore setup_state
  e034886b80 resolved: Don't complain too much when downgrading from EDNS
  ac4e03d45b login: filenames in /run/systemd/users are uids
  a2c7035976 cifuzz: build fuzz target with UBsan and MSan as well
  135a1add7b turn off fuzzit part 2
  60950f3c25 Merge pull request #16144 from mrc0mmand/gh-actions-followup
  86a23f38ab ci: tweak the dependency installation
  3d0a45d5da ci: tweak the compilation options
  4e1a13db89 ci: move the build check script to workflows directory
  0664249ffc ci: do the compiler-detection magic in the test script
  ed6727d40a Merge pull request #16137 from poettering/sleep-fixlets
  119111645b Merge pull request #16136 from mrc0mmand/travis-cleanup
  35cd3db4e5 ci: add homed/zstd dependencies
  aab86b12dd github: move the clang/gcc build check to GH Actions
  241616d57d Merge pull request #16124 from ssahani/dhcpv6-duid
  43bba15ac8 pid1: rename manager_set_{show_status,watchdog}_overridden() into manager_override_(show_status,watchdog}
  0bb007f7a2 pid1: add a new SetShowStatus() bus call to override/restore show status mode
  3ceb347130 pid1: introduce an helper to handle the show-status marker
  2c4702057b sleep: pass error we see to log function
  1326de0158 sleep-config: modernize destructors
  c732e87979 sleep-config: downgrade log level in can_s2h()
  c02540dc9e sleep: clean up debug/error logging
  6f9120ad61 sleep-config: return correct error code
  c0d8fbfa34 sleep-config: add more debug logging
  48c6399ad8 github: rename CIFuzz workflow file to cifuzz.yml
  b31fba440c travis: bump Ubuntu release to Bionic
  2b918da5a1 journal: drop the assert-only variable completely
  5a573f2b91 travis: replace set (+|-)e with travis_terminate
  0f2d351f79 tree-wide: port to fd_wait_for_event()
  db64ba81c6 meson: build standalone version of systemd-tmpfiles
  8ef8f3d5a7 meson: add a new -Dstandalone-binaries=true option
  639118854f networkctl: Display DHCP6 DUID
  a9deab2eec sd-network: Introduce APIs to get DHCP6 DUID
  7e738e7b70 network: DHCP6 - save DUID to state file
  6b7d5b6eaf network: DHCP6 - introduce DHCP6 DUID to string
  24bd74ae03 Merge pull request #15940 from keszybz/names-set-optimization
  4c150809eb update TODO
  e47add9edc test: make TEST-02-CRYPTSETUP a bit more robust
  bb9244781c core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts
  6a881daf85 docs: Change suffix for desktop applications to support non-transient services
  d5da196319 journal: simplify vsnprintf() ret value check
  97033ba455 pager: set PR_DEATHSIG for pager to SIGINT rather than SIGTERM
  c85b6ff1b2 docs: point contributors to list of most recent systemd releases
  51b367b86d Merge pull request #16111 from poettering/bitlck-fix
  9664be199a Merge pull request #16118 from poettering/inaccessible-fixlets
  2befe404d4 Merge pull request #16120 from poettering/udevd-fixlets
  e2ea005681 core: do not touch instance from unit_choose_id()
  934ef6a522 core: create socket service instances with the correct name from the start
  ada4b34ec7 core: rework error messages in unit_add_name()
  d383acad25 core: when adding names to unit, require matching instance strings
  4562c35527 core: store unit aliases in a separate set
  02939ee001 Merge pull request #16087 from mrc0mmand/travis-build-check
  dad28bffd6 tree-wide: check POLLNVAL everywhere
  dfa64b64a7 tree-wide: mark assert()-only variables as unused
  b36746c90e travis: check build with various compiler options
  45204921be Merge pull request #16104 from ssahani/dhcpv6-iaid
  2ffadd3cee AppArmor: Support for loading a set of pre-compiled profiles at startup time
  d689f0f20a Merge pull request #16058 from Werkov/fix-memory-protection-default
  4f4f37b20d Merge pull request #16046 from bluca/dissect_squashfs_verity
  2233c2703c man: udevadm: mention non-zero exit code on settle
  60b316b1e9 test-network: wait 2min for the bridge being in configured state
  69876f94ab doc: Try to clarify automount dependency confusion
  fa0e23c900 docs: use bool in varlink interface definition
  48b747fa03 inaccessible: move inaccessible file nodes to /systemd/ subdir in runtime dir always
  b8c9074534 login: use ERRNO_IS_PRIVILEGE() where appropriate
  d582afe144 mkdir: use log_full_errno() where appropriate
  6b2229c6c6 udev: set fewer process properties
  fe56acd8e0 udevd: use cpus_in_affinity_mask()
  57b611a5bf Merge pull request #16074 from msekletar/freezer-test-flakes
  6930d069a3 cryptsetup: pass selected mode to crypt_load() when doing LUKS
  5af39ac850 cryptsetup: try to load bitlocker superblock only if requested
  8b8ae7959d hwbd entry for  Dell Inspiron Chromebook 14 2-in-1 sensor (#16109)
  f01994380e login: allow individual USB ports to be assigned to seats
  e7cbe5cb9e dissect: support single-filesystem verity images with external verity hash
  331ee15f18 networkctl: DHCPv6 - display IAID
  01dd138031 sd-network: Introduce API to get DHCPv6 IAID
  18d8a2cf30 network: DHCPv6 - export IAID to state file
  d69d4038ec dhcp6: Provide method to access IAID
  ed66590d15 Merge pull request #16080 from YmrDtnJu/9p
  bf76080180 core: let user define start-/stop-timeout behaviour
  8b5616fa91 Merge pull request #16073 from keszybz/shell-completion
  d3d0b763b4 Merge pull request #15953 from keszybz/gdb-script
  44a419540e pid1: rework handling of m->show_status
  0d6d3cf055 pid1: rename manager_get_show_status() to manager_should_show_status()
  b309078ab9 pid1: make more use of show_status_on()
  5a36324962 Merge pull request #16047 from poettering/udev-ro-block
  707dc7949c update TODO
  a4d1bef73f Merge pull request #16085 from ssahani/network-client-id
  6cc27c29ad Add 'bitlk' option to mount Bitlocker drives with cryptsetup.
  c15ab81ed9 mount-tool: Replace fstype_is_{network,api_vfs} with fstype_is_blockdev_backed
  ac2474e4ff basic: New function fstype_is_blockdev_backed for fstypes that need a blockdev
  b11e98037c hwdb: add HP Spectre x360's mic mute switch
  b1481b2092 Merge pull request #16092 from yuwata/network-accept-local-16090
  a34a2933e9 man: single-char parameters take no '='
  048b4dc2e1 units: tweak udev unit descriptions
  95ac523030 udev: optionally mark all block devices read-only as they pop up
  b1806441bb dissect-image: wait for udev for single filesystem images too
  2153bbc81a networkctl: Display DHCP4 client ID
  daec96821d sd-network: Introduce API to access DHCP4 client ID
  5dfaf89b5b network: DHCP4 client ID save in state file
  29f69c5741 test-network: add test for IPv4AcceptLocal=
  94d76d071e network: introduce IPv4AcceptLocal= setting
  a07e962549 homed help --uid short option
  7887e58051 test: avoid failing due to unexpected precision
  6495ceddf3 Merge pull request #16033 from poettering/parse-int-fixlets
  a742f9828e resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver
  9141594cae lldp: fix assertion checking argument for sd_lldp_set_neighbors_max()
  7487b48688 man: fix typo Takse -> Takes
  3a9692dd05 shell-completion: add homectl for bash
  3ac33bc966 kernel-install: extend --help
  ea9f36ac83 Merge pull request #15378 from msekletar/udev-kill-signal
  2884836e3c core: fix the return value in order to make sure we don't dipatch method return too early
  a0d79df8e5 tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw
  42e57a4eb2 test: add test for parse_uid_range()
  53c6db99fa tests: beef up integer parsing tests
  fc80cabcf5 parse-util: also parse integers prefixed with 0b and 0o
  60eb1f0728 parse-util: rewrite parse_uid_range() on top of parse_uid()
  f5979b63cc user-util: be stricter in parse_uid()
  c44702a8bd parse-util: rewrite parse_mode() on top of safe_atou_full()
  aa85e4d3ce parse-util: make return parameter optional in safe_atou16_full()
  c78eefc135 parse-util: allow '-0' as alternative to '0' and '+0'
  707e93aff8 parse-util: allow tweaking how to parse integers
  3611ed7378 test: add integration test for udev event timeout
  e209926778 udev: make signal that we use to kill workers on timeout configurable
  0ce8092109 Merge pull request #15466 from elmarco/dhcp-leases
  b3753406c0 turn off fuzzit
  d9ce1c2493 networkctl: print DHCP leases
  090c923b4d networkctl: factor out link_get_property()
  7be3261222 sd-dhcp-client: add sd_dhcp_client_id_to_string()
  aaec2d7b9b macro.h: add sizeof_field() helper
  00ebe01156 sd-dhcp-client: make struct sd_dhcp_client_id reusable
  cf72a78660 networkd: expose DHCPServer interface on links
  38ee31a6e4 networkd: start a DBus interface for the DHCP server
  36d35f2259 sd-dhcp-server: notify callback on lease changed
  5b03043a75 sd-dhcp-server: add sd_dhcp_server_set_callback()
  3cd5924c85 network: make link become configured state when at least one dynamic protocol provide an address
  168561f2eb change fs/file-max to LONG_MAX instead of ULONG_MAX
  161bc1b627 Merge pull request #16057 from keszybz/resolvectl-sorted-no-nta
  bb9a9e33c9 Merge pull request #15171 from ssahani/tc-qfq
  0d63e7dd0b Merge pull request #16056 from keszybz/minor-doc-updates
  ecc04067f9 seccomp: filter openat2() entirely in seccomp_restrict_sxid()
  7ade8982ca core: remove support for ".include" stanza
  c643bda5ec network: read driver name from ethtool
  33bece166c basic/sort-util: adorn qsort_safe with a prefix underscore
  bacafb0990 pstore: use typesafe_qsort
  eb10767565 resolvect: sort status output by link number
  c9d243cdef resolvectl,systemctl: reduce scope of variables
  6cf3011c6c Introduce strcasecmp_ptr() and use it in a few places
  6773049a4c resolvectl: do not show NTA lists in status
  891ff9633f test-network: add tests for QFQ
  4d7ddaf97b network: tc: introduce [QuickFairQueueingClass] section
  b12aaee5ab network: tc: introduce Quick Fair Queueing (QFQ)
  c33f1e5a3f sd-netlink: add netlink properties of Quick Fair Queueing (QFQ)
  6161b35d5e Merge pull request #16048 from poettering/conf-parser-mtime
  c9e0695675 core: set source_mtime after load dropins
  4f9ff96a55 conf-parser: return mtime in config_parse() and friends
  5aca2e6733 conf-parse: fix pretty bad typo
  22ed4a6d9a fs-util: add stat_warn_permissions() that operates on struct stat instead of fd
  7183b22f12 Merge pull request #15996 from yuwata/network-dhcp6-route-metric-15295
  53aa85af24 cgroup: Allow empty assignments of Memory{Low,Min}=
  db2b8d2e28 cgroup: Make empty assignments reset to default
  21c8397694 tests: Fix description of test units
  eee9b30af4 basic/efivars: try re-reading efivars without delay first
  75f6d5d87e fd-util: be more careful with fclose() errnos
  112bed84bf update TODO
  927b9b8f63 man: add note that emergency.target inherits mount state
  41a7c3bf5d units: uppercase the description
  b68edd3006 man,mkosi: bump Fedora version
  68f6c58354 test: temporarily block test 48 on Ubuntu's autopkgtest
  8dd91cb55b network: drop an unused function
  c24dd73952 network: move DHCPv6 related conf parsers to networkd-dhcp6.c
  bdad94d0d6 network: set both dhcp_route_metric and dhcp6_route_metric by DHCP.RouteMetric= for backward compatibility
  1bf1bfd958 network: add DHCPv6.RouteMetric=
  132be2b868 network: use uint32_t instead of unsigned for route priority
  d06661ab66 Merge pull request #16030 from yuwata/network-read-mtime-of-dropin-configs-15521
  397288e3eb Merge pull request #15991 from keszybz/uids-gids-only-decimal
  9f83091e3c network: also read mtime of drop-in configs
  c4473dec34 network: do not propagte error on stat()
  63e2d1714e udev: single binary replacing udevd and udevadm
  0e77fc66bc network: fix double free in macsec_receive_channel_free()
  b9d19abd38 Merge pull request #16029 from yuwata/network-wireguard-without-peers-15786
  6597cb324a Merge pull request #15990 from jwrdegoede/hwdb-accel-quirks
  da3509f0f5 test-network: add test for wireguard without peers
  50254f5500 network: wireguard: set ListenPort= when no peers are configured
  dc851c00c3 Merge pull request #15982 from keszybz/shell-completion-and-help
  f3e4b1e07c Merge pull request #15884 from ssahani/dhcpv6-vendor
  a8b46548e6 Merge pull request #15993 from mrc0mmand/news-update
  fdd156dd99 tests: add a testcase triggering https://github.com/systemd/systemd/issues/15968
  1d16f661eb NEWS: fix several typos
  156a5fd297 basic/user-util: always use base 10 for user/group numbers
  f7091f458e loginctl: define loop iterators in the loop header
  a7a8dcffc2 hwdb: Add accel orientation quirk for Trekstor Surftab Twin 10.1 ST10432-8
  b5f829a2da hwdb: Add accel orientation quirk for Toshiba Encore WT10A tablet
  aa0cb635f1 network: L2TP fix crash
  9774347b57 Fix typo.
  2cac801f0f stat-util: trivial empty_or_null() tweaks
  b054e69bf9 Check ambient set against bounding set prior to applying ambient set
  bed695375a udev: when the BSD lock on a block device is taken, don't complain
  66fcfdfde7 core: add forgotten return in error path
  05dd19fad3 shared/efi-loader: remove check that uses absolute tick value
  753a71ad1d gpt: include homed GPT partition type in well-known partition table
  3668722049 units: don't set PrivateNetwork= in systemd-homed.service
  2bca2d77d3 resolved-dns-query: remove dns_query_candidate_is_routable
  a3f6020432 sd-network: fix inverted error message
  a7a9fe3c93 network: allow empty assignment to PreferredLifetime=
  8df6fc1241 Update resolvectl zsh completion
  c1a83277d0 shared: treat generator units as vendor units
  1f382d818d tree-wide: fix bad errno checks
  667c207683 bus-message: immediately reject messages with invalid type
  116a8eadb6 bus-message: fix negative offset with ~empty message
  4d5779d886 load-fragment: fix a typo
  c8b6de003a NEWS: retroactively document Family=
  cf6b8e6ec5 man: fix dir name in sysctl.d(5)
  6d009b7a25 journalctl,elsewhere: make sure --file=foo fails with sane error msg if foo is not readable
  cf786ef164 makefs: log about OOM condition
  0b1839822f blockdev: propagate one more unexpected error
  d78ce949d0 repart: don't insist on coming up on partition label ourselves
  9e1363fcc6 journal: fix dropping first record during upload to remote journal
  50cb4e418d meson: initialize time-epoch to reproducible builds compatible value
  76abe079b7 limit-util: quieten a very common debug message that is misleading
  b3e484a3b1 shared: fix integer overflow in calendarspec
  0c29eea969 repart: suppress complaints about lack of BLKRRPART when operating on regular file
  3db52f5ed8 repart: explain when we exit early and don't do a thing
  d99cba3aaa mount: introduce mount_is_nofail() helper
  7bc4bcea15 mount: default startup dependencies and default network ones are orthogonal
  7fe617fa53 mount: introduce mount_add_default_ordering_dependencies()
  e1c091b6d4 automount: fix handling of default dependencies for automount units
  ae05a137c9 mount: let pid1 alone handle the default dependencies for mount units
  f1fb197176 mount: mount unit activated by automount unit should be only ordered against the automount unit
  c9bcc69703 generator: don't generate device dependencies for extrinsic mounts
  ebac09ea0a fstab-util: introduce fstab_is_extrinsic()
  a20e4ea0ed device: drop refuse_after
  2799fffac1 man: drop some left-over mentions of StandardOutput=syslog
  144aff9c3b sd-netlink: remove unused RTNL_WQUEUE_MAX define
  34ca8df8e1 test: Add return 0 to main() function (even it is not strictly necessary)
  6e03f328a9 network: 'cur' variable cannot be null, so simplify code
  8d0c97f6ca tree-wide: Initialize _cleanup_ variables if needed
  4f174e49ae netlink: Fix assert condition on n_containers
  3905ce532c journald: Increase stdout buffer size sooner, when almost full
  5a37eb7c61 core: don't bind varlink socket if running in test mode
  33fff72ce6 pam_systemd: also print debug lines when ending a session
  ba9af79ccb pam_systemd_home: use correct macro for converting ptr to fd
  6199235489 Fix misuse of PAM_PROMPT_ECHO_OFF in systemd-homed
  c180a2c452 shared/ethtool-util: hush gcc warnings about array bounds
  1addba4aac core: fix compilation with gcc -O3
  9c46b97161 random-util: use ERRNO_IS_NOT_SUPPORTED() macro
  d85f9093d2 tmpfiles: clarify that "!" lines are filtered before collisions are checked
  2fac966a5c man: mention the exclamation mark and minus sign literally, to make things searchable
  4f61be3373 man: clarify that exit status name mappings are unaffected by SuccessExitStatus=
  b747d74a41 seccomp-util: add new syscalls from kernel 5.6 to syscall filter table
  c30d8caf8b tree-wide: Replace assert() by assert_se() when there is side effect
  b6e8e3be7e networkctl: use uint64_t for link speed throughout
  be66ce6089 tree-wide: use CMSG_SPACE() (and not CMSG_LEN()) to allocate control buffers
  1cb197798a man: suffix pam options with "=" where arg is required too
  a5fe01d3da test: Use assert_se() where variables are only checked by assert
  6960efd198 tree-wide: Fix, replace assert() by assert_se() when there is side effect
  93c1b03074 tree-wide: Mark as _unused_ variables that are only used in assert()
  c7679d7a9f tree-wide: Workaround -Wnonnull GCC bug
  073b257fd7 man: bring example PAM snippet of pam_systemd and pam_systemd_home back in sync
  855291a81c man: highlight relevant lines in pam_systemd_home.so example PAM snippet
  f89ad7c0fd login: include pam_systemd_home.so in the default PAM snippet we ship for user@.service
  9357f9466f test: Skip test-boot-timestamps on permission denied
  cad4ebe14e sysusers: be extra careful when locking accounts
  551e6f233a shared/install: print name of offending file in error
  c6a2e51232 systemctl: fix --root support in querying presets
  6f1eedbfdd systemctl: fix hint when 'systemctl help' is given
  925521df7c shared/unit-file: fix resolution of absoulute symlinks with --root
  756ba362e8 man: mention that ProtectSystem= also takes care of /efi
  4f77cf43b5 man: systemd.service: systemd-analyze exit-codes -> exit-status
  7c6ea7a053 man: expand on the star…end/repetition time expressions
  e06b940792 calendarspec: be more graceful with two kinds of calendar expressions
  f3dd0b476d calendarspec: minor simplification
  3581c16d56 shutdown: fix spacing in shutdown error message
  9556255349 nspawn: mount custom paths before writing to /etc
  37447b7e78 repart: fix partition maximum size segfault
  7f231ba503 link: Add units and fix typo in (Rx|Tx)BufferSize= manpage. Clean up the implementation slightly
  e75d2cdb0b main: bump RLIMIT_MEMLOCK by physical RAM size
  e16b9a1e31 nspawn: be more careful with creating/chowning directories to overmount
  765d184a69 homectl: say "home area" in more places
  c11bff4fa7 userdbctl: make --help fit in 80 columns
  0e56c2ef3f shell-completion/zsh: update systemd-analyze completions
  2bb580f994 zsh: fix disable/enable completion
  607a19a309 cgroup-util: check for SYSFS_MAGIC when detecting cgroup format
  ddb3c38efc stat-util: no need to open a file to check fs type
  bd8842304c sysusers,tmpfiles: always mention error when failing to replace specifiers
  bdea9b65d2 sysusers: add accidentally forgotten 'return'
  17b059774d man: document binfmt's new --unregister switch
  560380d8ec binfmt: also unregister binfmt entries from unit
  80835d9c51 binfmt: modernize code a bit
  a1745741b8 shutdown: unregister al…
kraj pushed a commit to YoeDistro/poky-old that referenced this issue Aug 8, 2020
Drop backport of CVE-2020-13776 (merged upstream), refresh
0001-binfmt-Don-t-install-dependency-links-at-install-tim.patch. Refresh
musl patches for v246.

Commits:

  ae366f3acb NEWS: last rites
  cae1e8fb88 loop-device: implicitly sync device on detach
  3660da17b0 Merge pull request #16624 from keszybz/timesync-retry-interval
  e7e954243a udev: fix codesonar warnings
  b67ec8e5b2 pid1: stop limiting size of /dev/shm
  2f2c60d7fe path-util: make use of TAKE_PTR() where we can
  b6eb208b29 hwdb: Add EliteBook to use micmute hotkey
  c8f3d7672c repart: log fixes
  5919bd3df3 timesync: increase retry interval more slowly
  8588146f69 added alternative version of SurfTab Twin
  2ac7eec3b5 network: fix use of uninitialized value
  b209cff2ad network: Fix "Unknown section 'DHCPv6PrefixDelegation'." message
  c05b8edde0 NEWS: mention about [DHCPv6PrefixDelegation] section
  dd57cf6444 meson: run 'ninja man/update-man-rules' again
  6b222c4b02 man: fix link markup
  0cfb490fe9 Merge pull request #16585 from yuwata/network-dhcp6-fixes
  ee56c072b9 Merge pull request #16590 from keszybz/test-fs-util-relax
  f8528230b3 Merge pull request #16576 from keszybz/bump-tmp-size
  b1d666ac58 test-cgroup-util: Handle result=NULL as empty string
  f649325ba7 firstboot: Update help string with --root-shell options
  c550cb7f8c test-sleep: add more logging, show secure boot mode
  02e1eb6d02 NEWS: mention new tmpfs limits
  362a55fc14 Bump /tmp size back to 50% of RAM
  99e015e28c network: rename settings about DHCPv6 Prefix Delegation
  61c0ef4ff3 network: make RADVPrefixDelegation enum bitfield
  ea121d8f25 network: update address infomation even if link is in failed or linger state
  e55265184b network: do not assume static addresses are configured
  15797d6a2b network: check at least one dynamic address is assigned when DHCP is enabled
  1633c45731 network: dhcp6: drop addresses and delegated prefixes on client stop
  1c09d84e42 network: rename ipv4ll_address -> ipv4ll_address_configured
  b0b9776656 network: ndisc: also remove old DNSSL or RDNSS records after an SLAAC address is ready
  69203fba70 network: ndisc: remove old addresses and routes after at least one SLAAC address becomes ready
  6e537f62d7 network: dhcp4: release old lease after the new address become ready
  80b0e86084 network: make address/route_configure optionally return created Address/Route object
  8eec0b9da5 network: set key destructor in several hash_ops
  5f58af25e6 network: make link_check_ready() return earlier if the link is not in 'configuring' state
  3336e946da network: ndisc: do not set configured flags when addresses or routes are not assigned yet
  5d8c3ec1e9 network: make link enter failed state if address_update() failed
  97f000744f network: introduce callback called when an address becomes ready
  c9d223e803 test-network: add tests for prefix routes
  3606ca659e network: add debug log for configuring address
  c21ed6812e test-ndisc-rs: increase timeouts
  500727c220 test-path: increase timeout
  933ab8199d test-fs-util: do not assume /dev is always real
  31363bd564 firstboot: Check if the given shell exists
  97efde65d8 network: radv: Send RA on newly-added dynamic prefix
  c8f12abc73 Fix clang-11 issues
  116d6d2965 catalog: update Polish translation
  f527c6fa08 resolvectl: fix older resolved or networkd support to set DNS servers
  e128723dae Merge pull request #16566 from poettering/nspawn-osrelease-fixes
  a8bd4bab75 Merge pull request #16567 from keszybz/more-news
  199a892218 selinux: handle getcon_raw producing a NULL pointer, despite returning 0
  d05f7b5007 semaphoreci: update Debian release to bullseye
  38821a0e29 update TODO
  d64e32c245 nspawn: rework how /run/host/ is set up
  62b0ee9eb1 portabled: update host's os-release path
  98aac2ad5a doc: update os-release spec with new path for container host's file
  549719699c NEWS: fix typo in path
  d130181fd8 nspawn: add missing spdx header
  e9769453e3 Merge pull request #16561 from yuwata/test-ordered-set
  8047ac8fdc core: clean more env vars from env block pid1 receives
  337f0b0094 NEWS: reorder entries a bit and add a few items
  8b25484af3 NEWS: update contributors list for v246-pre
  c015d657ec hwdb: update again for v246
  b226422cd7 firstboot: don't create /etc/passwd with mode 000
  2a2e78e969 nspawn: fix MS_SHARED mount propagation for userns containers
  fe224669fb Update mkosi.ubuntu to 'focal'
  6f5d73aba6 network: compare with peer address if it is specified
  01b92946c5 Merge pull request #16532 from yuwata/network-sync-state-file
  d4fa0493a7 test-ordered-set: add a case where we get 0 for duplicate entries
  5cf821acf8 man: do not say that isolate is like switching runlevels
  402e1e699f Merge pull request #16557 from keszybz/two-ci-fixes
  2645d4bcc1 test: clarify that ordered_set_put() returns -EEXIST if entry is duplicated
  0390b094f5 meson: do not choke on time epoch when there are no git tags
  960a64691f semaphore: pull in tree explicitly
  495454f40f update NEWS
  82ff544160 Merge pull request #16496 from DaanDeMeyer/firstboot-shell
  bd190899bb Get SOURCE_EPOCH from the latest git tag instead of NEWS
  00b868e857 Merge pull request #16542 from keszybz/make-targets-fail-again
  c3f8a065e9 execute: take ownership of more fields in ExecParameters
  28900a1bfe firstboot: Add --root-shell option
  c4a53ebf7a firstboot: Tighten up passwd/shadow handling
  94d1ddbd7c pid1: target units can fail through dependencies
  74c8e3c4e0 Revert "units: drop OnFailure= from .target units"
  771b52427a core/job: adjust whitespace and comment
  7f8c1e95a5 test-network: add test for duplicated IPv6Token=
  2c62149509 network: ndisc: ignore duplicated IPv6Token=
  92ee90af47 network: ndisc: do not store duplicated data in Set
  3bb4126262 Merge pull request #16536 from poettering/time-clock-map-fixes
  3dbd8a15d5 util: use IN6_ARE_ADDR_EQUAL() macro
  f91b234077 test-network: drop unnecessary sleep() in NetworkdStateFileTests.test_state_file
  1b14222124 network: make bus methods sync link state file
  c2a6595014 network: introduce link_save_and_clean()
  f281fc1e95 tree-wide: use siphash24_compress_string() where it is applicable
  1c568d65ac util: introduce siphash24_compress_string()
  6c04fccb1d util: make siphash24_compress_boolean() inline
  e3643b00a8 test-path: decrease variable scope
  8f8c7801e9 test: increase timeout for test-path
  2859bb932b Merge pull request #16530 from yuwata/udev-fix-race-in-renaming-network-interface
  63fdaa36c5 Merge pull request #16407 from bluca/verity_reuse
  8fa2cd83c6 Revert "man: add note about systemd-vconsole-setup.service and tty as input/output"
  2aa5a13aa9 test: adapt test-functions for SUSE
  f25e9eda52 Merge pull request #16514 from keszybz/zstd-decompress-fix
  b876b07812 Merge pull request #16540 from poettering/acl-fix
  ac1f3ad05f verity: re-use already open devices if the hashes match
  536879480a dm-util: use CRYPT_DEACTIVATE_DEFERRED instead of ioctl
  d81be4e752 coredump: port to use common add_acls_for_user()
  2ea6247e01 acl-util: fix error handling in add_acls_for_user()
  002674387c offline-passwd: use chase_symlinks()
  628db21130 update TODO
  0da322d9a4 man: update docs with the new functions and other enhancements
  7cbb7d62c6 homectl: fix warning about unused function
  06847d0fba TODO: add entry for XZ
  e4a321fc08 journal/compress: remove loop in decompress_startswith_zstd()
  a24153279e journal/compress: fix zstd decompression with capped output size
  b4a11ca3f2 journal: use -EPROTONOSUPPORT for unknown compression
  76cbafcdd4 sd-journal: when enumerating, continue even after an inaccessible field
  04dffc0add user-util: indentation fix
  58afc4f8e4 core: don't acquire dual timestamp needlessly if we don't need it in .timer handling
  d3926f9a46 test: add basic test for clock mapping
  7c0eb30e32 time-util: rework clock conversion logic
  4c967576da update NEWS
  6456dafa12 Merge pull request #16504 from poettering/read-file-ipc
  c400d040ce import: always prefer GNU tar, to avoid cmdline incompatibilities
  3177b9270c fileio: add brief explanations for flags
  49f16281c9 tree-wide: use READ_FULL_FILE_CONNECT_SOCKET at various places
  c668aa8b35 fileio: allow to read base64/hex data as strings
  b93d3f6b81 fileio: add support for read_full_file() on AF_UNIX stream sockets
  f294470262 fileio: add explicit flag for generating world executable warning when reading file
  2e3e2750bb Merge pull request #16519 from yuwata/networkctl-altnames
  739b9a4354 Merge pull request #16353 from yuwata/network-dns-sni
  28266c446a udev: drop unnecessary checks
  ae353ec2f6 udev: save ID_RENAMING= property to database before renaming network interface
  1cdea1a2f7 network: update one log message
  08de6f945d test: run systemd-dissect and systemd-run with log level debug in TEST-50-DISSECT
  3a978b30cd logind: Fix org.freedesktop.login1.set-reboot-to-boot-loader-menu saving to the wrong file in the non EFI case
  ddbab78f9a bus: use bus_log_connect_error to print error message
  711dd5db9e man: update explanation about the format to specify DNS servers
  a574b7d152 resolvectl: use bus_message_read_in_addr_auto()
  7695e2cbbe network, resolve: use bus_message_read_ifindex() or friends
  3dd95ab6c5 util: introduce bus_message_read_ifindex()
  10d4620467 util: introduce bus_mesage_read_dns_servers()
  976009897b util: introduce helper functions to read in_addr from bus message
  e293e755d5 util: drop duplicated inclusion of sd-bus.h
  66479677a9 test-network: add tests for DNS= with port number and SNI
  a747e71c56 resolvectl: show DNS servers with port and SNI
  b1881e8320 resolvectl: make DNS servers can be specified with port number and SNI
  8e56ea4c88 resolve: add DBus properties which support DNS SNI and port number
  95ce1ba87b resolve: add DBus method to set DNS server with port number and SNI
  4e11ddfdd3 network: add DBus method to set DNS server with port number and SNI
  87d6489776 network: save DNS servers specified by DBus interface
  6458176514 network: do not save DNS= entries not match link ifindex
  e77bd3fdff network: support port number and SNI in [Network] DNS=
  8aa5afd20f resolve: read/save port number and SNI from/into link state file
  b6af282475 resolve: compare port and SNI in dns_server_hash_ops
  1b86009298 resolve: also compare port and SNI in dns_server_find()
  da9de7385a resolve: support port specifier in DNS= setting
  395aa34023 resolve: ignore empty server name
  408f8fbc0f util: introduce 'struct in_addr_full' and its helper functions
  a723fb85da util: introduce in_addr_port_ifindex_name_from_string_auto() and in_addr_port_ifindex_name_to_string()
  cbe194b39e resolve: propagate error in link_load_user()
  eced0d2a46 Merge pull request #16518 from yuwata/network-fix-failure-in-updating-mac-address
  2665327a41 travis: compile with -O1 with clang
  d7d717b7e2 docs: Document xdg-autostart parameter X-systemd-skip
  4c0668bc14 Merge pull request #16478 from bluca/dissect_tests
  6a097936b2 docs: Update section about XDG autostart generator
  e6791b5522 Merge pull request #16497 from DaanDeMeyer/mkosi
  7e8279c0a6 Merge pull request #16501 from yuwata/udev-fix-renaming
  807667f7ac network: stop already running engines before updating MAC address
  96fe813c42 radv: introduce sd_radv_is_running()
  48c5398951 networkctl: do not ignore -EOPNOTSUPP when reading netlink message
  ae5b779252 networkctl: sort alternative names
  0ef1adf512 vconsole-setup: downgrade log message when setting font fails on dummy console
  628f08b66d sd-netlink: make timeout message sealed
  d735e4f2d6 Merge pull request #16505 from yuwata/network-manage-foreign-routes-cleanups
  ed4512d009 nspawn: set container_host env vars before user arguments
  a9c9b18a95 networkd: Use NLM_F_ACK on the netlink message to add a neighbor.
  d3f45d130e clang-format: set Break afer enum to false
  4573592ddf Merge pull request #16512 from keszybz/offline-passwd-altfiles
  241947d1b4 shared/offline-passwd: look at /usr/lib/{passwd,group} too
  3e5d2264b5 Move offline-password.[ch] to shared and add test-offline-passwd
  55678b9eae build: skip installation of 2 files if feature is disabled
  0119ab3d6c Merge pull request #16476 from keszybz/qemu-autosuspend-rules
  a8c10331b4 network: replace NDISC -> NDisc in log messages
  5eec0a0810 network: introduce address_exists() helper function
  d15818f227 network: update debug log when foreign routes are received with ManageForeignRoutes=no
  5ff1ef31f2 network: do not enumerate routes if ManageForeignRoutes=no
  97fdae33df udev: do not try to reassign alternative names
  434a348380 netlink: do not fail when new interface name is already used as an alternative name
  1498252614 netlink: introduce rtnl_get/delete_link_alternative_names()
  77547d5313 hwdb: check that uppercase digits are used in modalias patterns
  7f16ef9fba Merge pull request #16490 from yuwata/network-radv-ndisc-cleanups
  457763aa03 hwdb: allow spaces in usb: matches and similar patterns
  dc9e9a18be Merge pull request #16491 from keszybz/udev-logging
  e5f0010659 mkosi: Update help comment in settings files
  172ad053ff mkosi: Keep mkosi.default out of the repository.
  9e79123884 tree-wide: use SYNTHETIC_ERRNO with log_device_* in more places
  46d4149d0f sd-device: use LOG_PRI() in log_device_full()
  b5ef66101a analyze: CAP_RAWIO -> CAP_SYS_RAWIO
  94ec163ad2 timedatectl: do not show (null) if the address of NTP server is not resolved
  ec8bebbcc2 Add autosuspend rules for emulated QEMU devices
  df7667323d udev: change the modalias string for usb devices to include the device name
  d6d4961b01 udev: don't complain when udev_watch_end() is called without udev_watch_init()
  6b9f5f01cb basic/string-table: reduce variable scope
  5992f362bf udevadm: use STR_IN_SET(), add comment
  fe20121a4c sd-device: use strjoin instead of asprintf
  22ba4525d3 udev: tweak debug logs for udev rules
  12254ccab0 man: add more details for IMPORT, PROGRAM and RUN keys
  ba60127df7 udev: accept OPTIONS+= without any fuss
  b6a80b83bc udev: accept IMPORT{}= without any fuss
  13e8a49a58 network: ndisc: any failures in processing event make the link in failed state
  c97785168b network: radv: clean up conf parsers
  19b4864346 hwdb/autosuspend: add missing parenthesis
  d96edb2c6e network: downgrade log level in conf parsers
  4d939d2c84 Merge pull request #16485 from bluca/nspawn_os_release_mounts
  9e54462cd5 Merge pull request #16482 from poettering/coverity-246
  14f1c47a0c nspawn: mount os-release in two steps to make it read-only
  eafc7d6056 nspawn: use access/F_OK instead of stat to check for file existence
  2094cd49c4 shared/os-util: fix comment style to follow guidelines
  cc76bf01e3 basic/mkdir: use uid_is_valid instead of manual check
  40282752a2 Merge pull request #16483 from poettering/man-env-d-no-session
  27806670ef Merge pull request #16480 from yuwata/network-fix-dhcp4-races
  3f13f9159f man: configuration files contain assignments, no directories
  d320bfa558 man: GNOME is usually capitalized
  a449b7198c man: don't claim environment.d/ was about sessions
  3cd4459003 Revert "selinux: cache enforced status and treat retrieve failure as enforced mode"
  8e32ad9557 machine: fix if check
  f63ef93703 execute: fix if check
  0ded0e40ab dhcp4: only renewing lease when the client already has a lease
  330f899079 load-fragment: downgrade log messages we ignore to LOG_WARNING
  89a5385fb7 mountpoint-util: fix error handling
  f766d9af38 network: dhcp4: add two warnings
  153cf04139 network: dhcp4: fix another race with SendDecline=yes
  75be72d139 network: dhcp4: also release old lease in dhcp_lease_lost()
  8d5bb13d78 core: fix invalid assertion
  aeba8dd523 network: fix typo
  2bc148add0 test: exercise RootImage, RootHash and RootVerity in TEST-50-DISSECT
  0f5d24a8b9 test: pre-assemble minimal image for TEST-50-DISSECT at build time
  a5f1d665d7 test: exercise systemd-dissect with GPT and verity in TEST-50-DISSECT
  6939873412 test: exercise systemd-dissect --mount in TEST-50-DISSECT
  42165319b1 update TODO
  95b29f3267 Merge pull request #16396 from yuwata/network-configured-flag
  b8ff0663e8 Merge pull request #16468 from keszybz/two-unrelated-patches
  43bf28741f network: drop doubled white space
  93b0b88c3a network: free address when it is removed
  6906794dd1 network: dhcp4: do not assign new address before old one is not removed
  5d976f5f64 network: do not call link_check_ready() in link_request_set_routing_policy_rule()
  0c816fcc7b network: make link_request_set_nexthop() called from link_request_set_routes() or route_handler()
  659ad3a0af network: do not make link in configured state when no address is assigned
  d98c546dac network: ndisc: split ndisc_configured flag into for addresses and routes
  01c344bdd4 network: ndisc: do not ignore remaining addresses
  571f953934 test-network: wait for addresses are not in tentative state
  39373cb984 network: add debugging log why link is not in configured state yet
  c5fcd8a70a test-network: check assigned address is not tentative state
  491b79aeac test-network: set IPv6AcceptRA=no if no dynamic addresses are not required
  eb01a2dfb1 network: make link_request_set_nexthop() static
  a4623f84ed network: add a debugging log
  feb596b5c3 network: include error code in the log message
  2a877f4560 network: set dhcp6_xxx_configured flag after routes/addresses are assigned
  ee5c1311ee logs: when embedding catalog info in log output use a dash of color and unicode
  a996ead6a2 Merge pull request #16398 from poettering/machined-varlink
  26698337f3 timer: Adjust calendar timers based on monotonic timer instead of realtime
  d3e0662c7d Revert "ci: turn off the "upstream-systemd-ci" ppa"
  06bb441102 test: Add "finish" rule to .PHONY
  76830e2500 Merge pull request #16462 from keszybz/rpm-macro-warnings
  b56a877ef8 test-fs-util: use log_info instead of printf
  d4ff79bbe1 ci: turn off the "upstream-systemd-ci" ppa
  6cdc429454 Merge pull request #16340 from keszybz/var-tmp-readonly
  56a13a495c pid1: create ro private tmp dirs when /tmp or /var/tmp is read-only
  a318a5659a man: document F1 in sd-boot too
  1061fc1c17 rpm: include macro name in errors for two args macros too
  281014b73e rpm: adjust various macros to print macro name in the error message
  8800df5f71 Merge pull request #16430 from mikhailnov/fix-rpm-create-package-macros
  dad2062f40 update TODO
  38ccb55731 nss-mymachines: drop support for UID/GID resolving
  4c2cf15751 man: document new varlink service
  4751364e76 machined: implement user/group lookup varlink API in machined too
  74d1b7d2ad machined: refactor UID/GID machine translation
  a07f18cd30 process-util: make sure procfs_file_alloca() works for non-literal field names too
  56870d324b docs: permit user/group services that do not support enumeration
  16a4a2f8cc update TODO
  08ef688656 analyze: make testing ConditionPathExistsGlob= work
  4519c7c706 update TODO
  77ee1783eb udevadm: beef up deprecation log warning
  a18c7865be meson: do not install testdata when -Dinstall-tests=false
  60b45a80c1 Update .clang-format
  5b72b34708 Make the instructions slightly easier to read
  8ba6c15a82 Merge pull request #16437 from systemd/coverity-gcc-10
  b7067c4d87 coverity: install systemd
  1374448add coverity: switch back to Fedora 31
  46072ae35a repart: include more relevant information in the warning message, fix test
  5553041a62 Merge pull request #16435 from gaoyi1988/master
  6b949d2605 NEWS: mention source mode for MACVLAN or MACVTAP
  ddcdcac519 Merge pull request #16432 from cgzones/selinux_err_fix
  0d3a8bc7eb test: add test case for multi matches when use "||"
  1e67a9c2cd udev: specify the end of value
  d67b1d18fc bus: use bus_log_parse_error to print message
  f2df56bfea namespace: unify logging in mount_tmpfs
  db06c162e8 shared: fix error handling in make_inaccessible_nodes
  3e6e0856cd rpm: avoid hiding errors and output in *_create_package macros
  93406fd379 rpm: avoid odd symbols in EOF indicator
  b159831b61 Merge pull request #16424 from keszybz/cap-bpf-compat
  b0ff0eaa01 Merge pull request #16426 from cgzones/run_user_label
  675fa6ea28 man: fix some manvolnum
  abad72be4d namespace: fix MAC labels of TemporaryFileSystem=
  8d9cbd809d selinux: create standard user-runtime nodes with default context
  7a3e4dc38b basic: add helper function mknod_label()
  5149990e1f NEWS: grammar improvements (#16413)
  5c53766f28 Added MSI Prestige15 A10SC specific keycodes
  d0571b758b Add support for HP Elitebook x360 1040 G6 micmute button
  ed1de7108e Explain how to determine hierarchy type from shell
  5700780389 basic/cap-list: reduce scope of variables
  864a25d99b basic/capability-util: let cap_last_cap() return unsigned integer
  417770f303 basic/cap-list: parse/print numerical capabilities
  76fb53c94a install: fix wrong data type
  a38c68a18a NEWS: drop duplicate entry, add --image= entry
  976efe1b80 NEWS: add date
  a127c6208f userdb: fix dlopen call
  5157d719f0 Merge pull request #16411 from ddstreet/bridge_without_carrier_fails
  5961d35a5b NEWS: add blurb about os-release and $container_host_*
  55aacd502b Merge pull request #15891 from bluca/host_os_release
  001c07cfff test-netowrk: in test_bridge_configure_without_carrier, avoid strange test failures
  48c190822b Merge pull request #16405 from sipraga/master
  02b0109af5 Merge pull request #15955 from anitazha/nullorempty
  4e3376d43a test-network: don't print networkctl output for passing subtests
  62320feb9f Merge pull request #16404 from keszybz/release-246-prep
  2e7090e94d test: bump the TEST-47 sleeps once again
  0d0de133f0 network: add support for MACVLAN source mode
  3994922baf meson: bump version numbers for v246
  72e5190878 NEWS: update contributors list for v246-rc
  9c70fc2164 git-contrib: simplify implementation a bit
  cbc056c819 core: wrap some long lines and other formatting changes
  24e2494407 Merge pull request #16385 from JackFangXN/master
  43b24a0716 sd-device: use log_device_debug_errno()
  4b6607d949 table use table_log_print_error() instead of table_log_show_error
  df83eb546b table add table_log_sort_error()
  d836018a73 table add table_log_show_error()
  c253a95bca Merge pull request #16379 from yuwata/network-dhcp6-delegated-prefix-address-handler
  21d19a7a13 docs: update information where to file bugs against RHEL/CentOS versions of systemd
  2e2f6a01a0 Merge pull request #16143 from fbuihuu/fstab-generator-fix
  5dc60faae5 add error message when bind mount src missing
  3650173fec network: make address_handler() static
  a211ff4b84 network: introduce own address handler for dhcp6 delegated prefix
  2b0bf3ccf8 Merge pull request #16301 from poettering/firstboot-image
  9870cfdf7f Merge pull request #16388 from keszybz/xdg-desktop-fuzz-case
  60e3a5a252 Merge pull request #16390 from keszybz/coverity-and-typos
  dea7f5cc87 xdg-autostart: ignore all empty entries in multi-string entries
  f4e1a42592 man: match parentheses
  d1ca1f7c2a xdg-autostart: avoid quadratic behaviour in strv parsing
  a53f024d71 journald: minor wording tweak in message
  cd990847b9 tree-wide: more repeated words
  0da425df65 networkd: use capitalized "IP" and "TOS" in messages
  8ab0f03266 journal/compress: drop "future" code in zstd compression
  d7b34e3841 all: fix minor typos
  5d043c9fdf update NEWS
  cbe952fe1f update TODO
  737ec51444 TODO
  a122502077 firstboot: add option to turn off welcome text display
  dcfdd62184 man: document the new --image= switch of systemd-firstboot
  3ff9fa591e firstboot: add --image= switch
  827ea52125 mount-util: use UMOUNT_NOFOLLOW in recursive umounter
  e49ee28522 mount-util: add destructor helper that umounts + rmdirs a path
  e2ec9c4d3a namespace-util: introduce helper for combining unshare() + MS_SLAVE remount
  9ecf5d9340 fuzz: add test case that should already be resolved
  cda667722c core: refresh unit cache when building a transaction if UNIT_NOT_FOUND
  3f2e15abc5 sleep: one spelling unification
  77ecc1aaa5 Merge pull request #16380 from yuwata/network-dhcp6-update-prefix-route
  9389a271b7 Merge pull request #16381 from yuwata/dhcp4-renewing
  a240147bdc Merge pull request #16383 from yuwata/network-dhcp6-radv-update-prefix
  7f6e342c93 hwdb: Add Google Pixel Slate (nocturne) (#16377)
  58e6c62191 network: fix memleak
  1d596fdec2 network: do not restart radv engine when adding prefix
  8fc2a5dff4 network: fix indentation
  290696e512 Revert "network: Don't send RA with zero router lifetime when restarting radv"
  c1495f8e9d fix typo
  d469cea3bd network: Don't send RA with zero router lifetime when restarting radv While investigating https://github.com/systemd/systemd/issues/16356, I discovered that networkd stops the radv service before adding or updating prefixes and then starts it again.  This causes networkd to send an RA with a router lifetime of zero, causing the routes to flap on systems receiving the RA for a fraction of a second before radv is started again and proper RAs are sent.  That has the potential to cause issues with latency-sensitive traffic like gaming or VoIP.  This patch adds a boolean argument to the sd_radv_stop() function to control this behavior.  The zero lifetime RA is still sent whenever radv is actually being stopped, but when it is being restarted for a prefix update (from networkd-dhcp6.c), the final RA is no longer sent to avoid the route flapping.
  921693a0f3 dhcp4: do not try to renew address when client has no lease
  ceaec54a3c dhcp4: do not renew address if client is not running yet
  f050c94df0 network: always update acquired prefix route
  1419ff0401 network: decrease indentation level
  cecd68c70f network: fix indentation
  c82012605b Merge pull request #16374 from keszybz/docs-and-networkd
  08bf20287c hwdb: update again for v246
  98ebef62c7 DHCPv4: client add support for DHCP server allow list
  b3077c47a8 Merge pull request #16344 from keszybz/update-utmp-erofs
  c5bc4f77d9 hwdb: add another Logitech M705 mouse variant
  5544cd3199 Merge pull request #16373 from JackFangXN/master
  9a61e8fca2 unit-name: fix a potential memory leak
  1f68f77292 networkd: we should not loop when extract_first_word() fails
  8dc647fd30 man: do not say that tasks are threads and processes
  24c8d4d3f4 man: one more typo
  b37e4d9c87 Merge pull request #16370 from keszybz/tree-wide-spelling
  e26538dd04 network: tc: fix n_prio bounds check
  f987a261b4 userdbctl homectl use table_log_add_error()
  f04a98e13f Fix two typos found by codespell
  bdac560801 tree-wide: drop quotes from around [section]
  e9dd698407 tree-wide: fixes for assorted grammar and spelling issues
  a64911f9b7 travis: install missing deps for the Coverity run
  c5fbdebec6 Merge pull request #16287 from yuwata/udevadm-info-attribute-walk
  4276749dd3 shared/install: do not require /dev/null to be present in chroots
  3da49ad55a catalog: update Polish translation
  ca1d199b48 update-utmp: do not fail on EROFS
  c2a9909377 Define _cleanup_ helper for setutxent()+endutxent()
  bf795c47bc test: use KILL instead of SIGKILL in TEST-52-HONORFIRSTSHUTDOWN
  21c7fe6d12 sd-device: be more defensive in FOREACH_DEVICE_SYSATTR
  2fadbb4535 core: set private section name for automount units
  c2056dd6f9 hwdb: Pavilion 13 x360: Tablet mode and SYSRQ key
  071be2fa9f Merge pull request #15442 from poettering/fido2
  21df146501 udevadm: sort entries in `udevadm info -a` by attribute name
  fadcc12229 sd-device: make FOREACH_DEVICE_SYSATTR() list attributes in subdirectories
  33d943d168 initialize arg_clock_usec
  9e99bfbd5a Merge pull request #16348 from yuwata/news-sriov
  640f3b143d core: check null_or_empty for masked units instead of /dev/null
  71af436c63 NEWS: mention .network [SR-IOV] section
  554a97ba23 NEWS: WithoutRA= is not a boolean option anymore
  a68da22257 NEWS: tweak WithoutRA= description a bit more
  272ac70a21 various daemons: emit Stopping... notification before destructing the manager object
  cc090ca7fe initctl: use _cleanup_ and run()
  e9d9d50cef initctl,update-utmp: define iterator variable in loop
  bc9d1dbfc8 update-utmp,initctl: drop ppid check
  c03ef420fa network: tc: rename several settings which take size in bytes
  25b67032a8 Merge pull request #16343 from jirislaby/master
  cc832f9772 Merge pull request #16338 from keszybz/spelling2
  63b7e7b4ba Merge pull request #16336 from yuwata/ifindex-cleanups
  cbdf02952e NEWS: update document about WithoutRA=
  1447dc625a Merge pull request #16219 from ssahani/network-sr-iov
  74986a0f88 hwdb: Add accel orientation quirk for UMAX VisionBook 10Wi Pro
  52e085af82 tree-wide: "unparseable" → "unparsable"
  13adf35343 resolve: use appropriate type
  5e958e1d6c util: use setsockopt_int() at one more place
  1a6c913676 libsystemd-network: rename index -> ifindex
  7fa69c0a6f dhcp6, radv: only accept valid ifindex
  15e6a6e87b tree-wide: spell "lifecycle" without hyphen everywhere
  37b22b3b47 tree: wide "the the" and other trivial grammar fixes
  838d39af93 network: Allow DHCPv6 client  to start solicit mode
  51115fdc42 l10n: update Czech Translation
  6371e69b49 fstab-generator: introduce an helper to write extra dependencies specified via the mount options
  045c5faf5a fstab-generator: extra dependencies specified in fstab should be applied to the mount unit
  c8fe23d45c update TODO
  4442c26942 man: update homectl man page with documentation for new features
  fe2520fbb5 docs: document new FIDO2 user record fields
  0eb3be4644 homectl: add --pkcs11-uri=auto and --pkcs-11-uri=list support
  2af3966af3 homectl: add acquired fido2 PIN to user record
  93295a2501 homectl: split out pkcs#11 related code bits into own .c/.h file
  c98811d837 homectl: rework how we log when doing a home directory update
  8e62dfb12a homectl: do generic error handling/retry also when creating a home directory
  f737186ab1 homectl: show touch emoji when asking for PKCS#11 protected auth path
  85b1294488 pam-systemd-home: print helpful message when token's PIN is locked
  7b78db28e5 homed: add support for authenticating with fido2 hmac-secret tokens
  1c0c4a43c6 homectl: add support for enrolling FIDO2 HMAC-SECRET tokens
  5e4fa456fa user-record: add fields for FIDO2 HMAC authentication options
  af4fbd463f build-sys: add libfido2 as optional dependency
  c0bde0d240 user-record: rename JSON field "pkcs11Pin" to "tokenPin"
  d00f318323 user-record: securely erase pkcs#11 when assigned NULL too
  7b8d55b72c homectl: add missing log messages when json_variant_format() fails
  c63ec11bf5 pkcs11-util: reduce scope of a variable
  1146b664e6 macro: add new FOREACH_POINTER() macro magic
  428d32afea locale-util: add support for touch emoji
  830ffbce1b doc: add recentry introduced transient settings
  9457b6bb21 Merge pull request #16303 from poettering/dbus-util-split
  3d2c26925f test-network: add tests for SR-IOV
  c3a5025dc6 network: add MACAddress= setting in [SR-IOV] section
  e64b31c848 network: add VLANProtocol= setting in [SR-IOV] section
  518cd6b527 network: Introduce SR-IOV
  5908ddd763 sd-netlink: Add SR-IOV netlink properties
  b46d8c1c70 udev: spi: include chip select number in ID_PATH
  d17eabb105 Fix build with µhttpd 0.9.71
  116739cfb6 Merge pull request #16316 from yuwata/backlight-use-actual-brightness
  5c236388c3 update TODO
  6c3a19d5b3 Merge pull request #16313 from yuwata/network-move-ipv6ll-gen-mode
  7233e91af0 core: store timestamps of unit load attempts
  f93dd4b940 Merge pull request #16282 from poettering/repart-copy-blocks
  437b9a7f75 backlight: read current backlight brightness from 'actual_brightness' attribute
  daa227a320 backlight: call log_setup_service() before logging
  74f1bb5c9f backlight: use SYNTHETIC_ERRNO() macro
  40af3d020f shared: split out property get helpers
  9176326ba2 shared: split out code for printing properties
  807542bece shared: split out code that maps properties to local structs
  9b71e4ab90 shared: actually move all BusLocator related calls to bus-locator.c
  c664cf5607 shared: split out BusObjectImplementor APIs
  7aee1e7304 hwdb: adjust touchpad edge detection for X1Tab3 (#16310)
  aa0b850bca NEWS: minor fixes
  6f6296b93f network: move IPv6LinkLocalAddressGenerationMode= to [Network] section
  3ea58e010d NEWS: add several entries about networkd
  26b0fda9b7 test-repart: allow the test to pass on non-amd64 architectures
  e4f8d5e01f shell-completion: add missing verbs for networkctl
  8f843190ff test: bump the timeout for systemd-hwdb-update.service under ASan
  0e31a6c2ad Merge pull request #16142 from poettering/random-seed-cmdline
  bed0b7dfc0 pid1: warn if people use User=nobody (#16293)
  7143b95552 efi: define cache functions inside EFI_ENABLE ifdef
  cb713f1696 tree-wide: spellcheck fixes
  7f56c26d10 NEWS: reorder entries with some minor additions
  0cffae953a core: add device mapper to allow-list with DevicePolicy=closed and RootImage
  b47261e5cb update TODO
  e78228b1b0 update TODO
  10f9436c2d Merge pull request #16281 from poettering/logind-cache-more-efi
  0090b551e6 Add quotes for -n
  22aa58adc9 JOURNAL_FILE_FORMAT: minor markdown fixes
  1f19ae0ffb NEWS: add more items for 246
  af2697e83d logind: also cache LoaderEntryOneShot EFI variable
  e8df4eee65 efi-loader: cache LoaderConfigTimeoutOneShot too
  6eea6e30ab tmpfile-util: typo fixes
  95fc17bf46 util: add missing header guard
  12d14b7373 Merge pull request #16096 from poettering/journal-hash-fix
  a79be2f807 hwdb: update for v246
  7caaf44777 update TODO
  757bc2e4c1 repart: add new CopyBlocks= setting
  3f11426f52 Merge pull request #16275 from yuwata/network-deprecate-netdevsim
  fdf3e48c44 udev: split attribute assignment for MMC cards
  6d88513e6b portabled: create temp file for unit, not directory
  823e917f13 selinux: check mac_selinux_init() in tests
  0986bb9b95 Merge pull request #16278 from keszybz/fix-man-links
  66ed28d332 Merge pull request #15624 from poettering/hostnamed-instant
  98506a41fe Merge pull request #15697 from OhNoMoreGit/fix-path-units
  5c0102f83f update TODO
  c85cf04fa3 compress: do something roughly reasonable when building without compressor
  3afe5c00a5 coredump: use log_error_errno() where appropriate
  d80b051cea tree-wide: add new HAVE_COMPRESSION compile time flag
  70cd1e561c docs: document the new journal file format additions
  bbcd38e41e docs: import journal file format docs from fdo wiki
  8653185a9e journal: support zstd compression for large objects in journal files
  0dbe57ee86 journal-file: when individual hash chains grow too large, rotate
  4ce534f4cd journal: use a different hash function for each journal file
  7851ec6634 journal: make signature arrays const
  20b0acfacd journal: rename hash64() to jenkins_hash64()
  f4474e004d journal-file: rename return parameters to ret_xyz
  5030c85a3e journal-file: also show field hash table size in debug output
  e958c05703 journal-file: simplify boot ID acquiring
  cde8c5f722 journal: store NE hash instead of LE hash in Match object
  a76560915f journal-file: use FLAGS_SET where appropriate
  e9ece6a0e3 journal: fix definition of _OBJECT_COMPRESSED_MAX
  d1d8f0f369 macro: add CONST_MIN() similar to CONST_MAX()
  4a5a01ccdd man: reword awkward sentence
  55cf7779f2 man: fix various internal references
  b7a4734551 man: fix links to various external man pages
  f49bead3b0 Merge pull request #16257 from keszybz/two-fuzzer-issues
  b7d81d19cc Merge pull request #16249 from bluca/root_verity_sig
  d7f4ad203a hostnamed: minimize caching of /etc/hostname, /etc/os-release and /etc/machine-info
  aa994368c9 hostnamed: don't cache local hostname either
  a055076988 ci: free up some resources on Pipelines
  efa5bef285 ci: switch to Ubuntu Bionic on Semaphore
  440988666c test-network: remove unused config
  59a9ef1022 network: deprecate netdevsim support in .netdev config
  d4d55b0d13 core: add RootHashSignature service parameter
  c2923fdcd7 dissect/nspawn: add support for dm-verity root hash signature
  035e8e50d7 veritysetup: add support for dm-verity root hash signature
  e60d3b13df Merge pull request #16265 from Werkov/fix-16248
  fd7c7fc8ee Merge pull request #16271 from yuwata/network-cleanups-around-link-get
  e41de5e491 missing: Add new Linux capabilities
  6b000af4f2 tree-wide: avoid some loaded terms
  f23810da20 fuzz-udev-rules: -ENOBUFS should be accepted too
  85fbebe61a journal: fix buffer overrun when urlifying
  f50f597217 network: fix typo in comment
  7936917e3e network: do not update operstate when netdev is not ready
  e856ed00f9 network: fix assertion in link_get()
  25b831bac8 network: check that received ifindex is valid
  d184fb39b6 test: Test memory limit parsing
  67e2baff6b cgroup: Parse infinity properly for memory protections
  b18573e16f ci: bring back Coverity part 2
  595cb4211a ci: bring back Coverity
  c4e90266db Merge pull request #16093 from yuwata/network-htb-add-settings-15213
  f9044b74c5 Merge pull request #16106 from yuwata/network-tc-ets
  f83803a649 Merge pull request #16238 from keszybz/set-handling-more
  41d1f469cf log: introduce log_parse_environment_cli() and log_setup_cli()
  3f8ed9fd96 update TODO
  18d9cee002 man: document systemd.random-seed=
  d247f232a8 core: add new systemd.random_seed= kernel command line option for seeding entropy pool
  4dd055f907 random-util: add common helper random_write_entropy() for crediting entropy to the kernel's pool
  45250e66cc pid1: don't apply "systemd.clock_usec" kernel cmdline parameter outside of PID 1
  97f1c6af8c random-seed: use ERRNO_IS_NOT_SUPPORTED() where appropriate
  e198eba7c2 sysv-generator: reduce scope of variables
  80ce54adaf socket-proxy: use structured initialization in one place
  add74e8929 basic/hashmap,set: propagate allocation location info in _copy()
  35e601d4f9 tree-wide: use set_ensure_consume() in various places
  39dbd0c74c networkd: take ref immediately after storing item in set
  d02fd8b1c6 core/bpf-firewall: use the correct cleanup function
  648c339c49 logind: fix possible memleak of message if the message was already in the set
  d378ef708b portable: rework set handling in portable_detach()
  ab9dd0b997 resolved: fix memleak on duplicate host lines in /etc/hosts
  ceb17827fa resolved: simplify allocation failure handling in dns_stub_process_query()
  b8b46b1ce5 basic/set,hashmap: pass through allocation info in more cases
  fcc1d0315d basic/set: add set_ensure_consume()
  a1ba8c5b71 feature to honor first shutdown request to completion
  7bf6babfa2 Merge pull request #16112 from poettering/nss-systemd-block-fix
  bc8d57f290 Merge pull request #16223 from cgzones/user_selinux
  3d9fbea43e selinux: update mac_selinux_free()
  1cdc42f283 hwdb: add another Logitech G502 Hero variant (#16256)
  0d0248c665 Merge pull request #16246 from benzea/benzea/xdg-autostart
  21856e3462 Merge pull request #16213 from yuwata/network-cleanup-link-state-file
  87d25bdead make-autosuspend-rules: restore compatibility with Python3 < 3.6
  db3b8d5d41 fuzz-udev-rules: rewrite to not require root privileges
  a9ba0e328f Make failures of mac_selinux_init() fatal
  a11bfc17dc Initialize SELinux in user instances
  c238a1f5f1 udev: split rules object creation and loading
  037b0a47b0 userdb: replace recursion lock
  6e78726e20 nss-systemd: skip /etc/gshadow look-ups when we just need the GID of a group
  88d775b734 util: add dlfcn-util.h
  21385e639a man: replace perl bug tracker link that went away with link to paper
  92d64d1444 man: s/PROGRAMM/PROGRAM/
  311a0e2ee6 Revert "cgroup: Allow empty assignments of Memory{Low,Min}="
  73083ca238 portabled: implement container host os-release interface
  e1bb4b0d1d nspawn: implement container host os-release interface
  34e0d56ce2 Container interface: document exposing the host's os-release
  b3b1a08a56 nspawn: use mkdir_p_safe instead of homegrown version
  17b99e377b basic/mkdir: introduce safe recursive variants
  3d0c8750c5 networkctl: display DHCPv4 server address
  fd1f3b3eed dhcp: fix entry name in parsing lease file
  46986251d6 network: drop duplicated information from link state file
  5202be27ee sd-network: drop unused functions
  862e710820 networkctl: use lease file to get DHCPv4 client ID
  d41fa6ee91 networkctl: use lease file to get DHCPv4 address
  35cab5f99d networkctl: load DHCPv4 lease file and use timezone data from the lease file
  ef0daa1129 libsystemd-network: move prototypes of dhcp_lese_save/load() to network-internal.h
  cc479760b4 Revert "job: Don't mark as redundant if deps are relevant"
  9d9a9500cd xdg-autostart: Ignore all files with GNOME autostart phase
  566cb7e23b xdg-autostart: Fix info message if Type= is not Application
  0389f4fa81 core: add RootHash and RootVerity service parameters
  6fe01ced0e nspawn: mkdir selinux mount point once, but not twice
  75ae672bb2 Merge pull request #16196 from mrc0mmand/travis-simplification
  5c9918aca0 Merge pull request #16216 from nabijaczleweli/make-a-fuss
  65804d6aff selinux-util: tweak log_enforcing_errno() to return the errno passed in or 0 when in non-enforcing mode
  9e1732924d test-functions: read /usr/etc/nsswitch.conf if /etc/nsswitch.conf does not exist (#16195)
  affa893da0 man/sd-makefs: link to btrfs.wiki.kernel.org for btrfs-man5, since the man-pages link is dead
  2edc494216 Merge pull request #16237 from keszybz/revert-message-type-check
  c2c193f79a Merge pull request #16179 from keszybz/auto-suspend-hwdb
  b98f393d88 bus-message: add macro for calculation of offset from the page
  b17af3e503 bus-message: avoid dereferencing a NULL pointer
  a9c9f79ece Revert "bus-message: immediately reject messages with invalid type"
  6cd55d6f74 shared/bus-util: fix misleading error handling
  e2ab8e09c8 udevadm-monitor: simplify creation of arg_tag_filter set
  804a436582 fuzz-netdev-parser: add test case for earlier version of preceding patches
  44e9342078 netdev/wireguard: do not invalidate peer on invalid syntax
  de7fef4b6e tree-wide: use set_ensure_put()
  0f9ccd9552 basic/set: add set_ensure_put()
  aaffd34933 sd-device: use set_put_strdup() in one more place
  29bd6012f1 resolved: introduce dns_transaction_gcp()
  7b33ff7388 make-autosuspend-rules: remove one instance of "whitelist"
  88936ed6f9 rules: remove 61-autosuspend-manual.rules
  39d5b72e32 hwdb: enable autosuspend for Wacom Pen and EMV Smartcard Reader
  aa549ff397 test: also verify the generated autosuspend hwdb file
  79dc5d35dd tools: rewrite make-autosuspend-rules.py and add udev rules
  5fde0607a8 Merge pull request #16235 from yuwata/network-fix-warning-16224
  bc694c06e6 log: Prefer logging to CLI unless JOURNAL_STREAM is set
  7830b5c103 Merge pull request #16059 from keszybz/resolve-single-label-names
  b7e8286b4a Merge pull request #15926 from fbuihuu/rework-show-status
  8db8f99eb9 man: add note regarding editing user groups
  c4e585a36b network: add missing break
  1e42c269cb Merge pull request #16239 from keszybz/cleanups
  e6175fbe45 ci: pass -Werror using CFLAGS
  8d9982e30d network: drop unnecessary "&"
  a51a3247e5 man: Fix a typo of session
  c2ad8c0978 man/sd-makefs: also mention /sbin/mkswap
  2bd5e1b272 man: document the new option
  3b5bd7d6b8 resolved: optionally allow single-label A/AAAA queries
  c2f1e83e27 resolved: drop bit-field annotations for fields in Manager
  7877e5ca7c resolved: add dns_query_candidate_freep()
  801d25ef0f man: rework description of Domains=
  876c75fe87 udev: do not execute hwdb builtin import twice or thrice
  b753e8358c test-network: add tests for ETS
  d474aa51bf network: tc: introduce Enhanced Transmission Selection (ETS)
  4dec921889 sd-netlink: add netlink properties of Enhanced Transmission Selection (ETS)
  3a712fda86 sd-boot: Add small comments after device-specific key macros
  034d0eb962 Merge pull request #16191 from poettering/repart-spec
  bc3b868b42 Merge pull request #16208 from yuwata/udev-fix-16207
  cc17c4c9a1 network: do not fail to configure non-nl80211 wifi interfaces
  845d784e54 network: drop casting in memcpy()ing IPv6 address
  5eb6ef8b45 udev: udev_event_apply_format() always make buf NUL terminated
  bc568a7a35 udev: fix error handling of sd_device_get_parent()
  2a71d57f4e network: clean-up DHCP lease server data configuration
  d5da3ada8e Merge pull request #16061 from filbranden/standalone1
  2ee7e54b9e test-network: add tests for HTB settings
  d9eacc1cdd network: tc: add more settings for HTB
  120b5c0bbe network: DHCPv6 - Add support to set token on the LAN interface
  8d2d64166e efi: use stub for cache_efi_options_variable if !ENABLE_EFI
  ffc8eeae62 USER_RECORD: fix typo
  0116d27a30 travis: sort dependencies
  305efcaf3c travis: drop stuff moved to GH Actions
  eeb8c7accf travis: use a matrix for similar jobs
  fb08381c14 repart: if now minimal size is specified, default to 10M
  e031166e15 repart: add simple specifier expansion in Label=
  cdfd853744 update TODO
  d9b6decd88 README: add reference to systemd.io
  77169ed09b update TODO
  d8a9dd0dc1 hwdb: Mask rfkill event from intel-hid on HP platforms
  c73624a553 man: do not say that systemd-modules-load.service only uses static config
  6fe95d3020 sd-boot: Work around malformed CR key code
  7daaf56761 hwdb: Add accel orientation quirk for Odys Fusion Win 12 2in1
  cb24fad361 Merge pull request #16170 from keszybz/man-user@
  387536b3a9 man: mention systemd-user-runtime-dir in user@.service too
  7283fbfd0c efi: Skip parsing SystemdOptions if there's an error getting it.
  25c86e4c39 networkd: Add missing match_wlan_iftype check to network_verify
  f1a20afacd man: Document the crypttab keyfile syntax specifying a device
  550c14fedd Merge pull request #16163 from DaanDeMeyer/resolved-edns-info
  6df8a6c753 Improve message for scheduled shutdown or reboot
  b4564641be hwdb: generate a hwdb file instead of rules for autosuspend
  4677c3da97 man: really fix conditional in homed.conf
  4f0ef40deb man: drop obsolete HAVE_PYTHON conditional
  a2095c0698 update-man-rules: properly filter out directives index again
  4f571b4061 resolved: Log the feature level we're downgrading from as well
  209b2592ed efi: Cache contents of EFI variable SystemdOptions
  6d0f38017c test: in test_bridge_configure_without_carrier, ignore setup_state
  e034886b80 resolved: Don't complain too much when downgrading from EDNS
  ac4e03d45b login: filenames in /run/systemd/users are uids
  a2c7035976 cifuzz: build fuzz target with UBsan and MSan as well
  135a1add7b turn off fuzzit part 2
  60950f3c25 Merge pull request #16144 from mrc0mmand/gh-actions-followup
  86a23f38ab ci: tweak the dependency installation
  3d0a45d5da ci: tweak the compilation options
  4e1a13db89 ci: move the build check script to workflows directory
  0664249ffc ci: do the compiler-detection magic in the test script
  ed6727d40a Merge pull request #16137 from poettering/sleep-fixlets
  119111645b Merge pull request #16136 from mrc0mmand/travis-cleanup
  35cd3db4e5 ci: add homed/zstd dependencies
  aab86b12dd github: move the clang/gcc build check to GH Actions
  241616d57d Merge pull request #16124 from ssahani/dhcpv6-duid
  43bba15ac8 pid1: rename manager_set_{show_status,watchdog}_overridden() into manager_override_(show_status,watchdog}
  0bb007f7a2 pid1: add a new SetShowStatus() bus call to override/restore show status mode
  3ceb347130 pid1: introduce an helper to handle the show-status marker
  2c4702057b sleep: pass error we see to log function
  1326de0158 sleep-config: modernize destructors
  c732e87979 sleep-config: downgrade log level in can_s2h()
  c02540dc9e sleep: clean up debug/error logging
  6f9120ad61 sleep-config: return correct error code
  c0d8fbfa34 sleep-config: add more debug logging
  48c6399ad8 github: rename CIFuzz workflow file to cifuzz.yml
  b31fba440c travis: bump Ubuntu release to Bionic
  2b918da5a1 journal: drop the assert-only variable completely
  5a573f2b91 travis: replace set (+|-)e with travis_terminate
  0f2d351f79 tree-wide: port to fd_wait_for_event()
  db64ba81c6 meson: build standalone version of systemd-tmpfiles
  8ef8f3d5a7 meson: add a new -Dstandalone-binaries=true option
  639118854f networkctl: Display DHCP6 DUID
  a9deab2eec sd-network: Introduce APIs to get DHCP6 DUID
  7e738e7b70 network: DHCP6 - save DUID to state file
  6b7d5b6eaf network: DHCP6 - introduce DHCP6 DUID to string
  24bd74ae03 Merge pull request #15940 from keszybz/names-set-optimization
  4c150809eb update TODO
  e47add9edc test: make TEST-02-CRYPTSETUP a bit more robust
  bb9244781c core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts
  6a881daf85 docs: Change suffix for desktop applications to support non-transient services
  d5da196319 journal: simplify vsnprintf() ret value check
  97033ba455 pager: set PR_DEATHSIG for pager to SIGINT rather than SIGTERM
  c85b6ff1b2 docs: point contributors to list of most recent systemd releases
  51b367b86d Merge pull request #16111 from poettering/bitlck-fix
  9664be199a Merge pull request #16118 from poettering/inaccessible-fixlets
  2befe404d4 Merge pull request #16120 from poettering/udevd-fixlets
  e2ea005681 core: do not touch instance from unit_choose_id()
  934ef6a522 core: create socket service instances with the correct name from the start
  ada4b34ec7 core: rework error messages in unit_add_name()
  d383acad25 core: when adding names to unit, require matching instance strings
  4562c35527 core: store unit aliases in a separate set
  02939ee001 Merge pull request #16087 from mrc0mmand/travis-build-check
  dad28bffd6 tree-wide: check POLLNVAL everywhere
  dfa64b64a7 tree-wide: mark assert()-only variables as unused
  b36746c90e travis: check build with various compiler options
  45204921be Merge pull request #16104 from ssahani/dhcpv6-iaid
  2ffadd3cee AppArmor: Support for loading a set of pre-compiled profiles at startup time
  d689f0f20a Merge pull request #16058 from Werkov/fix-memory-protection-default
  4f4f37b20d Merge pull request #16046 from bluca/dissect_squashfs_verity
  2233c2703c man: udevadm: mention non-zero exit code on settle
  60b316b1e9 test-network: wait 2min for the bridge being in configured state
  69876f94ab doc: Try to clarify automount dependency confusion
  fa0e23c900 docs: use bool in varlink interface definition
  48b747fa03 inaccessible: move inaccessible file nodes to /systemd/ subdir in runtime dir always
  b8c9074534 login: use ERRNO_IS_PRIVILEGE() where appropriate
  d582afe144 mkdir: use log_full_errno() where appropriate
  6b2229c6c6 udev: set fewer process properties
  fe56acd8e0 udevd: use cpus_in_affinity_mask()
  57b611a5bf Merge pull request #16074 from msekletar/freezer-test-flakes
  6930d069a3 cryptsetup: pass selected mode to crypt_load() when doing LUKS
  5af39ac850 cryptsetup: try to load bitlocker superblock only if requested
  8b8ae7959d hwbd entry for  Dell Inspiron Chromebook 14 2-in-1 sensor (#16109)
  f01994380e login: allow individual USB ports to be assigned to seats
  e7cbe5cb9e dissect: support single-filesystem verity images with external verity hash
  331ee15f18 networkctl: DHCPv6 - display IAID
  01dd138031 sd-network: Introduce API to get DHCPv6 IAID
  18d8a2cf30 network: DHCPv6 - export IAID to state file
  d69d4038ec dhcp6: Provide method to access IAID
  ed66590d15 Merge pull request #16080 from YmrDtnJu/9p
  bf76080180 core: let user define start-/stop-timeout behaviour
  8b5616fa91 Merge pull request #16073 from keszybz/shell-completion
  d3d0b763b4 Merge pull request #15953 from keszybz/gdb-script
  44a419540e pid1: rework handling of m->show_status
  0d6d3cf055 pid1: rename manager_get_show_status() to manager_should_show_status()
  b309078ab9 pid1: make more use of show_status_on()
  5a36324962 Merge pull request #16047 from poettering/udev-ro-block
  707dc7949c update TODO
  a4d1bef73f Merge pull request #16085 from ssahani/network-client-id
  6cc27c29ad Add 'bitlk' option to mount Bitlocker drives with cryptsetup.
  c15ab81ed9 mount-tool: Replace fstype_is_{network,api_vfs} with fstype_is_blockdev_backed
  ac2474e4ff basic: New function fstype_is_blockdev_backed for fstypes that need a blockdev
  b11e98037c hwdb: add HP Spectre x360's mic mute switch
  b1481b2092 Merge pull request #16092 from yuwata/network-accept-local-16090
  a34a2933e9 man: single-char parameters take no '='
  048b4dc2e1 units: tweak udev unit descriptions
  95ac523030 udev: optionally mark all block devices read-only as they pop up
  b1806441bb dissect-image: wait for udev for single filesystem images too
  2153bbc81a networkctl: Display DHCP4 client ID
  daec96821d sd-network: Introduce API to access DHCP4 client ID
  5dfaf89b5b network: DHCP4 client ID save in state file
  29f69c5741 test-network: add test for IPv4AcceptLocal=
  94d76d071e network: introduce IPv4AcceptLocal= setting
  a07e962549 homed help --uid short option
  7887e58051 test: avoid failing due to unexpected precision
  6495ceddf3 Merge pull request #16033 from poettering/parse-int-fixlets
  a742f9828e resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver
  9141594cae lldp: fix assertion checking argument for sd_lldp_set_neighbors_max()
  7487b48688 man: fix typo Takse -> Takes
  3a9692dd05 shell-completion: add homectl for bash
  3ac33bc966 kernel-install: extend --help
  ea9f36ac83 Merge pull request #15378 from msekletar/udev-kill-signal
  2884836e3c core: fix the return value in order to make sure we don't dipatch method return too early
  a0d79df8e5 tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw
  42e57a4eb2 test: add test for parse_uid_range()
  53c6db99fa tests: beef up integer parsing tests
  fc80cabcf5 parse-util: also parse integers prefixed with 0b and 0o
  60eb1f0728 parse-util: rewrite parse_uid_range() on top of parse_uid()
  f5979b63cc user-util: be stricter in parse_uid()
  c44702a8bd parse-util: rewrite parse_mode() on top of safe_atou_full()
  aa85e4d3ce parse-util: make return parameter optional in safe_atou16_full()
  c78eefc135 parse-util: allow '-0' as alternative to '0' and '+0'
  707e93aff8 parse-util: allow tweaking how to parse integers
  3611ed7378 test: add integration test for udev event timeout
  e209926778 udev: make signal that we use to kill workers on timeout configurable
  0ce8092109 Merge pull request #15466 from elmarco/dhcp-leases
  b3753406c0 turn off fuzzit
  d9ce1c2493 networkctl: print DHCP leases
  090c923b4d networkctl: factor out link_get_property()
  7be3261222 sd-dhcp-client: add sd_dhcp_client_id_to_string()
  aaec2d7b9b macro.h: add sizeof_field() helper
  00ebe01156 sd-dhcp-client: make struct sd_dhcp_client_id reusable
  cf72a78660 networkd: expose DHCPServer interface on links
  38ee31a6e4 networkd: start a DBus interface for the DHCP server
  36d35f2259 sd-dhcp-server: notify callback on lease changed
  5b03043a75 sd-dhcp-server: add sd_dhcp_server_set_callback()
  3cd5924c85 network: make link become configured state when at least one dynamic protocol provide an address
  168561f2eb change fs/file-max to LONG_MAX instead of ULONG_MAX
  161bc1b627 Merge pull request #16057 from keszybz/resolvectl-sorted-no-nta
  bb9a9e33c9 Merge pull request #15171 from ssahani/tc-qfq
  0d63e7dd0b Merge pull request #16056 from keszybz/minor-doc-updates
  ecc04067f9 seccomp: filter openat2() entirely in seccomp_restrict_sxid()
  7ade8982ca core: remove support for ".include" stanza
  c643bda5ec network: read driver name from ethtool
  33bece166c basic/sort-util: adorn qsort_safe with a prefix underscore
  bacafb0990 pstore: use typesafe_qsort
  eb10767565 resolvect: sort status output by link number
  c9d243cdef resolvectl,systemctl: reduce scope of variables
  6cf3011c6c Introduce strcasecmp_ptr() and use it in a few places
  6773049a4c resolvectl: do not show NTA lists in status
  891ff9633f test-network: add tests for QFQ
  4d7ddaf97b network: tc: introduce [QuickFairQueueingClass] section
  b12aaee5ab network: tc: introduce Quick Fair Queueing (QFQ)
  c33f1e5a3f sd-netlink: add netlink properties of Quick Fair Queueing (QFQ)
  6161b35d5e Merge pull request #16048 from poettering/conf-parser-mtime
  c9e0695675 core: set source_mtime after load dropins
  4f9ff96a55 conf-parser: return mtime in config_parse() and friends
  5aca2e6733 conf-parse: fix pretty bad typo
  22ed4a6d9a fs-util: add stat_warn_permissions() that operates on struct stat instead of fd
  7183b22f12 Merge pull request #15996 from yuwata/network-dhcp6-route-metric-15295
  53aa85af24 cgroup: Allow empty assignments of Memory{Low,Min}=
  db2b8d2e28 cgroup: Make empty assignments reset to default
  21c8397694 tests: Fix description of test units
  eee9b30af4 basic/efivars: try re-reading efivars without delay first
  75f6d5d87e fd-util: be more careful with fclose() errnos
  112bed84bf update TODO
  927b9b8f63 man: add note that emergency.target inherits mount state
  41a7c3bf5d units: uppercase the description
  b68edd3006 man,mkosi: bump Fedora version
  68f6c58354 test: temporarily block test 48 on Ubuntu's autopkgtest
  8dd91cb55b network: drop an unused function
  c24dd73952 network: move DHCPv6 related conf parsers to networkd-dhcp6.c
  bdad94d0d6 network: set both dhcp_route_metric and dhcp6_route_metric by DHCP.RouteMetric= for backward compatibility
  1bf1bfd958 network: add DHCPv6.RouteMetric=
  132be2b868 network: use uint32_t instead of unsigned for route priority
  d06661ab66 Merge pull request #16030 from yuwata/network-read-mtime-of-dropin-configs-15521
  397288e3eb Merge pull request #15991 from keszybz/uids-gids-only-decimal
  9f83091e3c network: also read mtime of drop-in configs
  c4473dec34 network: do not propagte error on stat()
  63e2d1714e udev: single binary replacing udevd and udevadm
  0e77fc66bc network: fix double free in macsec_receive_channel_free()
  b9d19abd38 Merge pull request #16029 from yuwata/network-wireguard-without-peers-15786
  6597cb324a Merge pull request #15990 from jwrdegoede/hwdb-accel-quirks
  da3509f0f5 test-network: add test for wireguard without peers
  50254f5500 network: wireguard: set ListenPort= when no peers are configured
  dc851c00c3 Merge pull request #15982 from keszybz/shell-completion-and-help
  f3e4b1e07c Merge pull request #15884 from ssahani/dhcpv6-vendor
  a8b46548e6 Merge pull request #15993 from mrc0mmand/news-update
  fdd156dd99 tests: add a testcase triggering https://github.com/systemd/systemd/issues/15968
  1d16f661eb NEWS: fix several typos
  156a5fd297 basic/user-util: always use base 10 for user/group numbers
  f7091f458e loginctl: define loop iterators in the loop header
  a7a8dcffc2 hwdb: Add accel orientation quirk for Trekstor Surftab Twin 10.1 ST10432-8
  b5f829a2da hwdb: Add accel orientation quirk for Toshiba Encore WT10A tablet
  aa0cb635f1 network: L2TP fix crash
  9774347b57 Fix typo.
  2cac801f0f stat-util: trivial empty_or_null() tweaks
  b054e69bf9 Check ambient set against bounding set prior to applying ambient set
  bed695375a udev: when the BSD lock on a block device is taken, don't complain
  66fcfdfde7 core: add forgotten return in error path
  05dd19fad3 shared/efi-loader: remove check that uses absolute tick value
  753a71ad1d gpt: include homed GPT partition type in well-known partition table
  3668722049 units: don't set PrivateNetwork= in systemd-homed.service
  2bca2d77d3 resolved-dns-query: remove dns_query_candidate_is_routable
  a3f6020432 sd-network: fix inverted error message
  a7a9fe3c93 network: allow empty assignment to PreferredLifetime=
  8df6fc1241 Update resolvectl zsh completion
  c1a83277d0 shared: treat generator units as vendor units
  1f382d818d tree-wide: fix bad errno checks
  667c207683 bus-message: immediately reject messages with invalid type
  116a8eadb6 bus-message: fix negative offset with ~empty message
  4d5779d886 load-fragment: fix a typo
  c8b6de003a NEWS: retroactively document Family=
  cf6b8e6ec5 man: fix dir name in sysctl.d(5)
  6d009b7a25 journalctl,elsewhere: make sure --file=foo fails with sane error msg if foo is not readable
  cf786ef164 makefs: log about OOM condition
  0b1839822f blockdev: propagate one more unexpected error
  d78ce949d0 repart: don't insist on coming up on partition label ourselves
  9e1363fcc6 journal: fix dropping first record during upload to remote journal
  50cb4e418d meson: initialize time-epoch to reproducible builds compatible value
  76abe079b7 limit-util: quieten a very common debug message that is misleading
  b3e484a3b1 shared: fix integer overflow in calendarspec
  0c29eea969 repart: suppress complaints about lack of BLKRRPART when operating on regular file
  3db52f5ed8 repart: explain when we exit early and don't do a thing
  d99cba3aaa mount: introduce mount_is_nofail() helper
  7bc4bcea15 mount: default startup dependencies and default network ones are orthogonal
  7fe617fa53 mount: introduce mount_add_default_ordering_dependencies()
  e1c091b6d4 automount: fix handling of default dependencies for automount units
  ae05a137c9 mount: let pid1 alone handle the default dependencies for mount units
  f1fb197176 mount: mount unit activated by automount unit should be only ordered against the automount unit
  c9bcc69703 generator: don't generate device dependencies for extrinsic mounts
  ebac09ea0a fstab-util: introduce fstab_is_extrinsic()
  a20e4ea0ed device: drop refuse_after
  2799fffac1 man: drop some left-over mentions of StandardOutput=syslog
  144aff9c3b sd-netlink: remove unused RTNL_WQUEUE_MAX define
  34ca8df8e1 test: Add return 0 to main() function (even it is not strictly necessary)
  6e03f328a9 network: 'cur' variable cannot be null, so simplify code
  8d0c97f6ca tree-wide: Initialize _cleanup_ variables if needed
  4f174e49ae netlink: Fix assert condition on n_containers
  3905ce532c journald: Increase stdout buffer size sooner, when almost full
  5a37eb7c61 core: don't bind varlink socket if running in test mode
  33fff72ce6 pam_systemd: also print debug lines when ending a session
  ba9af79ccb pam_systemd_home: use correct macro for converting ptr to fd
  6199235489 Fix misuse of PAM_PROMPT_ECHO_OFF in systemd-homed
  c180a2c452 shared/ethtool-util: hush gcc warnings about array bounds
  1addba4aac core: fix compilation with gcc -O3
  9c46b97161 random-util: use ERRNO_IS_NOT_SUPPORTED() macro
  d85f9093d2 tmpfiles: clarify that "!" lines are filtered before collisions are checked
  2fac966a5c man: mention the exclamation mark and minus sign literally, to make things searchable
  4f61be3373 man: clarify that exit status name mappings are unaffected by SuccessExitStatus=
  b747d74a41 seccomp-util: add new syscalls from kernel 5.6 to syscall filter table
  c30d8caf8b tree-wide: Replace assert() by assert_se() when there is side effect
  b6e8e3be7e networkctl: use uint64_t for link speed throughout
  be66ce6089 tree-wide: use CMSG_SPACE() (and not CMSG_LEN()) to allocate control buffers
  1cb197798a man: suffix pam options with "=" where arg is required too
  a5fe01d3da test: Use assert_se() where variables are only checked by assert
  6960efd198 tree-wide: Fix, replace assert() by assert_se() when there is side effect
  93c1b03074 tree-wide: Mark as _unused_ variables that are only used in assert()
  c7679d7a9f tree-wide: Workaround -Wnonnull GCC bug
  073b257fd7 man: bring example PAM snippet of pam_systemd and pam_systemd_home back in sync
  855291a81c man: highlight relevant lines in pam_systemd_home.so example PAM snippet
  f89ad7c0fd login: include pam_systemd_home.so in the default PAM snippet we ship for user@.service
  9357f9466f test: Skip test-boot-timestamps on permission denied
  cad4ebe14e sysusers: be extra careful when locking accounts
  551e6f233a shared/install: print name of offending file in error
  c6a2e51232 systemctl: fix --root support in querying presets
  6f1eedbfdd systemctl: fix hint when 'systemctl help' is given
  925521df7c shared/unit-file: fix resolution of absoulute symlinks with --root
  756ba362e8 man: mention that ProtectSystem= also takes care of /efi
  4f77cf43b5 man: systemd.service: systemd-analyze exit-codes -> exit-status
  7c6ea7a053 man: expand on the star…end/repetition time expressions
  e06b940792 calendarspec: be more graceful with two kinds of calendar expressions
  f3dd0b476d calendarspec: minor simplification
  3581c16d56 shutdown: fix spacing in shutdown error message
  9556255349 nspawn: mount custom paths before writing to /etc
  37447b7e78 repart: fix partition maximum size segfault
  7f231ba503 link: Add units and fix typo in (Rx|Tx)BufferSize= manpage. Clean up the implementation slightly
  e75d2cdb0b main: bump RLIMIT_MEMLOCK by physical RAM size
  e16b9a1e31 nspawn: be more careful with creating/chowning directories to overmount
  765d184a69 homectl: say "home area" in more places
  c11bff4fa7 userdbctl: make --help fit in 80 columns
  0e56c2ef3f shell-completion/zsh: update systemd-analyze completions
  2bb580f994 zsh: fix disable/enable completion
  607a19a309 cgroup-util: check for SYSFS_MAGIC when detecting cgroup format
  ddb3c38efc stat-util: no need to open a file to check fs type
  bd8842304c sysusers,tmpfiles: always mention error when failing to replace specifiers
  bdea9b65d2 sysusers: add accidentally forgotten 'return'
  17b059774d man: document binfmt's new --unregister switch
  560380d8ec binfmt: also unregister binfmt entries from unit
  80835d9c51 binfmt: modernize code a bit
  a1745741b8 shutdown: unregister al…
clrpackages pushed a commit to clearlinux-pkgs/systemd that referenced this issue Aug 27, 2020
24bisquitz (1):
      Add a device to 60-sensor.hwdb

Adam Nielsen (1):
      login: allow individual USB ports to be assigned to seats

Alan Perry (1):
      add error message when bind mount src missing

Alexander Malafeev (1):
      Fix volume control keys on Lenovo Yoga S940

Alin Popa (1):
      watchdog: reduce watchdog pings in timeout interval

Alvin Šipraga (1):
      network: add support for MACVLAN source mode

Amitanand.Chikorde (1):
      udev: fix codesonar warnings

Amos Bird (1):
      hwdb: adjust touchpad edge detection for X1Tab3 (#16310)

AndreRH (1):
      hwdb: Add accel orientation quirk for Odys Fusion Win 12 2in1

Andreas Rammhold (5):
      sd-netlink: remove unused RTNL_WQUEUE_MAX define
      in-addr-util: introduce in_addr_prefix_nth
      in-addr-util: removed in_addr_prefix_next implementation
      networkd: Add support for setting a preferred subnet id for IPv6 PD leases
      editorconfig: add man configuration

Andrew Doran (1):
      DHCP client: make SendOption work for DHCPv6 too.

Anita Zhang (7):
      core: transition to FINAL_SIGTERM state after ExecStopPost=
      cgroup-util: helper to cg_get_attribute and convert to uint64_t
      cgroup-util: cg_get_xattr_malloc helper
      core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts
      core: check null_or_empty for masked units instead of /dev/null
      man: fix some manvolnum
      analyze: CAP_RAWIO -> CAP_SYS_RAWIO

Ankit Jain (1):
      journal-send: Fix the limitation of LINE_MAX

Arnaud Ferraris (1):
      login: allow non-console sessions to change vt

Arthur Moraes do Lago (1):
      Add Logitech G502 HERO to mouse hwdb

Arusekk (1):
      Fall back to kexec when no kexec binary exists

Axel Rasmussen (1):
      selinux: handle getcon_raw producing a NULL pointer, despite returning 0

Balaji Punnuru (1):
      util: return the correct correct wd from inotify helpers

Balint Reczey (4):
      units: Don't mount tracefs in LXC
      user-util: Allow names starting with a digit
      shared: Don't try calling NULL callback in bus_wait_for_units_clear
      test: Skip test-boot-timestamps on permission denied

Bastien Nocera (1):
      hwdb: Force "mouse" type on Logitech Ultrathin Touch Mouse

Benjamin Berg (16):
      core: Move environment generator path lookup into path-lookup.c
      path-lookup: Split out helper to get paths from environment
      path-lookup: Allow setting generator paths via environment
      test: Add test for setting generator paths via environment
      man: Add documentation for generator path environment variables
      core: Fix resolution of nested DM devices for cgroups
      docs: Add some notes about managing graphical user sessions
      docs: Change prefix for desktop applications to app-
      sysv-generator: Downgrade directory listing fails to warning
      xdg-autostart-generator: Add a generator for XDG autostart files
      man: Add systemd-xdg-autostart-generator man page
      test: Add test for XDG desktop file parsing and interpretation
      fuzz: Add an XDG desktop file fuzzer
      xdg-autostart: Fix info message if Type= is not Application
      xdg-autostart: Ignore all files with GNOME autostart phase
      docs: Update section about XDG autostart generator

Benjamin Dahlhoff (2):
      Added Chuwi Hibook Pro (Model: CWI526) (#15770)
      added alternative version of SurfTab Twin

Benjamin Robin (18):
      tree-wide: Mark as _unused_ variables that are only used in assert()
      tree-wide: Fix, replace assert() by assert_se() when there is side effect
      test: Use assert_se() where variables are only checked by assert
      resize-fs: Use xsprintf instead of snprintf
      meson: Do not drop warnings (unused variable) when NDEBUG is defined
      tree-wide: Workaround -Wnonnull GCC bug
      tree-wide: Replace assert() by assert_se() when there is side effect
      basic: Allow to call STRV_FOREACH_BACKWARDS() with a char * const * strv
      core: Update prototype of notify_message, tags list is read only
      journald: Increase stdout buffer size sooner, when almost full
      test: Add a test case for #15654
      test: Stricter test case for #15654 (Add more checks)
      core: Parse the tags list sooner, and use it for multiple function
      netlink: Fix assert condition on n_containers
      tree-wide: Initialize _cleanup_ variables if needed
      network: 'cur' variable cannot be null, so simplify code
      systemctl: Check clean_or_freeze_unit(): Add assert if unknown method
      test: Add return 0 to main() function (even it is not strictly necessary)

Chris Down (5):
      virt: Detect proot virtualisation by ptrace metadata
      virt: Use cache for VIRTUALIZATION_PROOT
      man: systemd.service: systemd-analyze exit-codes -> exit-status
      service: Display updated WatchdogUSec from sd_notify
      doc: Try to clarify automount dependency confusion

Chris Kerr (1):
      man: Fix typo in suggested permissions

Christian Göttsche (18):
      selinux: add trigger for policy reload to refresh internal selabel cache
      selinux: cache enforced status and treat retrieve failure as enforced mode
      selinux: delay mac_selinux_enforcing call after SELinux was determined to be enabled
      selinux: add unlikely compiler hints for cache functions
      selinux: add debug logging to cache functions
      selinux: print enforcing state in access check debug message
      selinux: add parenthesis to function names in log messages
      Initialize SELinux in user instances
      Make failures of mac_selinux_init() fatal
      selinux: update mac_selinux_free()
      selinux: check mac_selinux_init() in tests
      basic: add helper function mknod_label()
      selinux: create standard user-runtime nodes with default context
      namespace: fix MAC labels of TemporaryFileSystem=
      shared: fix error handling in make_inaccessible_nodes
      namespace: unify logging in mount_tmpfs
      network: fix typo
      Fix clang-11 issues

Christian Hesse (1):
      shared/ask-password-api: do not show hint on echo

Christian Oder (1):
      hwdb: Add accel orientation quirk for Chuwi Hi10 X

Ciprian Hacman (1):
      Support journal-upload HTTPS without key and certificate

Clinton Roy (1):
      NEWS: grammar improvements (#16413)

Corey Hinshaw (1):
      Add SetType method to login Session interface

Daan De Meyer (89):
      sd-bus: Add sd_bus_set_fd documentation along with some cleanups.
      sd-bus: Remove unused man cite of `sd_bus_slot_new_signal`.
      sd-bus: Add sd_bus_method_call/sd_bus_method_call_async docs + cleanups.
      sd-bus: sd_bus_call/sd_bus_call_async_docs + cleanups.
      sd-bus: sd_bus_set/get_method_call_timeout docs + cleanups.
      sd-bus: add sd_bus_message_seal docs + cleanups
      sd-bus: Add sd_bus_reply_method_return docs + cleanups
      Silence Wstring-plus-int warning when using clangd with GCC.
      sd-bus: Add sd_bus_send docs + cleanups.
      sd-bus: Add sd_bus_slot_get_current_* docs
      sd-bus: Fix pointer alignment
      sd-bus: Wrap add_object_vtable docs at 100 columns
      sd-bus: Fix typos in sd_bus_add_object_vtable docs
      sd-bus: Add sd_bus_add_object and callback docs
      sd-bus: Add note about sd_bus_reply_method_return to SD_BUS_METHOD docs
      sd-bus: Add sd_bus_get/set_priority docs + fixes
      sd-bus: sd_bus_call docs improvements
      sd-bus: Deprecate priority functions
      sd-bus: remove unused priority logic
      sd-bus: sd_bus_message_append fixes
      sd-bus: Add sd_bus_get/set_property docs
      meson: Exclude more deprecated functions from check-api-docs
      sd-bus: Fix sd_bus_close.xml line wrapping
      sd-bus: Add sd_bus_can_send docs
      sd-bus: Use pointer syntax for sd_bus_set_exec argv parameter
      sd-bus: Add sd_bus_set_exec docs
      man: review of import1(5)
      man: fixes from online review
      D-Bus docs: Use method instead of call
      sd-bus: Add sd_bus_add_filter docs
      sd-bus: Add sd_bus_add_object_manager docs
      D-Bus docs: systemd1 fixes
      sd-bus: Add sd_bus_set_server, sd_bus_get_bus_id docs
      sd-bus: sd_bus_add_object docs fixes
      sd-bus: Add sd_bus_add_node_enumerator docs
      sd-bus: Small sd_bus_add_object_manager docs fix
      sd-bus: Add sd_bus_emit_* docs
      sd-bus: Add sd_bus_get_current_* docs
      sd-bus: sd_bus_get_current_* docs fixes
      sd-bus: Add sd_bus_is_server + sd_bus_set/is_bus_client docs
      sd-bus: Add sd_bus_get/set_exit_on_disconnect docs
      sd-bus: Small sd_bus_set_server doc fix
      sd-bus: Rewrap sd_bus_get_fd docs
      sd-bus: sd_bus_get_fd docs typo fix
      sd-bus: Rewrap sd_bus_set_description docs
      sd-bus: Add sd_bus_get_scope/tid/unique_name docs
      sd-bus: Rewrap sd_bus_set_close_on_exit + small fixes
      sd-bus: Rewrap sd_bus_set_server docs at 109 columns
      sd-bus: Add sd_bus_set/is_monitor docs
      sd-bus: Add sd_bus_list_names docs
      sd-bus: Add sd_bus_message_read_strv docs
      sd-bus: Clarify sd_bus_list_names results ownership
      sd-bus: Add sd_bus_message_at_end docs
      sd-bus: Add sd_bus_get/set_allow_interactive_authorization docs
      sd-bus: Add sd_bus_message_get_error/errno docs
      sd-bus: Fix typo in sd_bus_message_append_array docs
      sd-bus: Add sd_bus_message_open/close/enter/exit_container docs
      sd-bus: Add sd_bus_message_peek_type docs
      sd-bus: Add sd_bus_send_to docs
      sd-bus: Add sd_bus_get_name_machine_id docs
      sd-bus: Add sd_bus_message_get_creds docs
      sd-bus: Add sd_bus_get_name/owner_creds docs
      sd-bus: Cite sd_bus_creds_unref in sd_bus_get_name_creds docs
      sd-bus: Add sd_bus_get_creds_mask docs
      sd-bus: Add sd_bus_query_sender_creds/privilege docs
      sd-bus: Add a nicer way of specifying sd-bus vtable method arguments
      resolved: Break include cycles
      resolved: Fix build error due to missing include.
      firstboot: Don't check twice if /etc/shadow exists
      sysusers: Move sync_rights and rename_and_apply_smack to basic
      fileio: Refactor sync_rights to take fds as arguments
      fileio: Rename rename_and_apply_smack to rename_and_apply_smack_floor_label.
      firstboot: Add --force option
      firstboot: Add --delete-root-password option
      Remove systemd-firstboot --force entry from TODO
      firstboot: Add --root-password-hashed option
      firstboot: Add --kernel-command-line option
      update NEWS
      resolved: Don't complain too much when downgrading from EDNS
      resolved: Log the feature level we're downgrading from as well
      networkd: Add missing match_wlan_iftype check to network_verify
      log: Prefer logging to CLI unless JOURNAL_STREAM is set
      mkosi: Keep mkosi.default out of the repository.
      mkosi: Update help comment in settings files
      firstboot: Tighten up passwd/shadow handling
      firstboot: Add --root-shell option
      Get SOURCE_EPOCH from the latest git tag instead of NEWS
      firstboot: Check if the given shell exists
      firstboot: Update help string with --root-shell options

Dan Callaghan (1):
      core: set private section name for automount units

Dan Streetman (19):
      man: sort log parameters in alphabetical order
      man: remove the '=' from --log-color and --log-location as they are optional arg
      log: add support for prefixing console log messages with current timestamp
      network: attach sd-event in link_load() when creating link dhcp_client or ipv4ll
      network: change UseGateway= default to UseRoutes= setting
      test: modify/add tests for UseRoutes= and UseGateway= configuration
      network: honor SetDNSRoutes= even if UseGateway=False
      test: verify RoutesToDNS= is independent of UseGateway=
      cgroup-util: check for SYSFS_MAGIC when detecting cgroup format
      test-cgroup: skip if /sys/fs/cgroup unknown fs
      test: find path for systemd-journal-remote
      network: Change IgnoreCarrierLoss default to value of ConfigureWithoutCarrier
      network: return 1 on start and 0 if ipv4ll is already started
      test: expand configure-without-carrier test
      test: add bridge configure-without-carrier test
      test: in test_bridge_configure_without_carrier, ignore setup_state
      test-network: don't print networkctl output for passing subtests
      test-netowrk: in test_bridge_configure_without_carrier, avoid strange test failures
      semaphoreci: update Debian release to bullseye

Dana Olson (1):
      ACCEL_MOUNT_MATRIX for additional Acer Spin model

Daniel Fullmer (1):
      sd-boot: fix menu ordering with boot counting

Daniel Rusek (1):
      l10n: update Czech Translation

Dave Reisner (1):
      Revert "job: Don't mark as redundant if deps are relevant"

David Edmundson (3):
      path-lookup: Use default value for XDG_CONFIG_DIRS if environment is not set
      docs: Change suffix for desktop applications to support non-transient services
      docs: Document xdg-autostart parameter X-systemd-skip

David Wood (1):
      network: Fix split in `SendOption=` on client and server

Denis Pronin (1):
      Support compiling with clang and gnu11 standard

Diego Escalante Urrelo (1):
      hwdb: Fix brightness keys for Logitech K811

Dimitri John Ledkov (1):
      meson: initialize time-epoch to reproducible builds compatible value

Einsler Lee (1):
      change fs/file-max to LONG_MAX instead of ULONG_MAX

Elisei Roca (2):
      test-functions: read /usr/etc/nsswitch.conf if /etc/nsswitch.conf does not exist (#16195)
      test: adapt test-functions for SUSE

Emmanuel Garette (1):
      repart: fix partition maximum size segfault

Eric Anderson (1):
      socket-proxy: Support exit-on-idle

Eric DeVolder (1):
      pstore: introduce tmpfiles.d/systemd-pstore.conf

Evgeny Vereshchagin (32):
      travis: install ninja with pip
      ci: turn off FuzzBuzz
      semaphore: switch to upstream-ci
      oss-fuzz: point the badge directly to our logs
      cifuzz: upload artifacts only when the "run fuzzers" step fails
      build-system: bring back 'nonnull'
      semaphore: use dots instead of dashes
      ci: install fdisk on Debian
      cifuzz: set allowed-broken-targets-percentage to 0
      cifuzz: protect forks from CIFuzz
      README: add a CIFuzz badge
      build-system: build the fuzz targets with both ASan and UBSan
      fuzzit: turn on the pointer-overflow check
      oss-fuzz: turn on the pointer-overflow check
      docs: add a link to the Fossies codespell report
      tests: add a testcase for https://github.com/systemd/systemd/issues/15885
      add a test triggering https://github.com/systemd/systemd/issues/15907
      fuzzit: switch to -fundefined
      README: add a Fossies codespell badge
      tests: add a testcase triggering https://github.com/systemd/systemd/issues/15968
      turn off fuzzit
      turn off fuzzit part 2
      cifuzz: build fuzz target with UBsan and MSan as well
      ci: pass -Werror using CFLAGS
      ci: bring back Coverity
      ci: bring back Coverity part 2
      ci: switch to Ubuntu Bionic on Semaphore
      ci: free up some resources on Pipelines
      coverity: switch back to Fedora 31
      coverity: install systemd
      ci: turn off the "upstream-systemd-ci" ppa
      Revert "ci: turn off the "upstream-systemd-ci" ppa"

ExtinctFire (1):
      load-fragment: fix a typo

Ferran Pallarès Roca (1):
      Add Zowie ZA12 details to mouse hwdb

Filipe Brandenburger (7):
      meson: add a new -Dstandalone-binaries=true option
      meson: build standalone version of systemd-tmpfiles
      efi: Cache contents of EFI variable SystemdOptions
      efi: Skip parsing SystemdOptions if there's an error getting it.
      log: introduce log_parse_environment_cli() and log_setup_cli()
      test: Add "finish" rule to .PHONY
      timer: Adjust calendar timers based on monotonic timer instead of realtime

Filippo Falezza (1):
      Added MSI Prestige15 A10SC specific keycodes

Finn (1):
      Fix keys on Medion Akoya P6669

Florian Klink (2):
      meson.build: drop unused SYSTEMD_SLEEP_BINARY_PATH
      resolved-dns-query: remove dns_query_candidate_is_routable

Florian Mayer (1):
      Explain how to determine hierarchy type from shell

Franck Bui (27):
      logind: log a more accurate error when we failed at session creation
      systemd-network-generator.service: network-pre.target is a passive target unit
      device: drop refuse_after
      fstab-util: introduce fstab_is_extrinsic()
      generator: don't generate device dependencies for extrinsic mounts
      mount: mount unit activated by automount unit should be only ordered against the automount unit
      pid1: by default make user units inherit their umask from the user manager
      mount: let pid1 alone handle the default dependencies for mount units
      automount: fix handling of default dependencies for automount units
      mount: introduce mount_add_default_ordering_dependencies()
      mount: default startup dependencies and default network ones are orthogonal
      mount: introduce mount_is_nofail() helper
      pid1: update manager settings on reload too
      pid1: fold load_configuration() into main()
      pid1: make manager_flip_auto_status() static
      pid1: make manager_vacuum_{uid,gid}_refs() static
      pid1: make manager_serialize_{uid,gid}_refs() static
      pid1: make manager_deserialize_{uid,gid}_refs() static
      pid1: make more use of show_status_on()
      pid1: rename manager_get_show_status() to manager_should_show_status()
      pid1: rework handling of m->show_status
      pid1: introduce an helper to handle the show-status marker
      pid1: add a new SetShowStatus() bus call to override/restore show status mode
      pid1: rename manager_set_{show_status,watchdog}_overridden() into manager_override_(show_status,watchdog}
      fstab-generator: extra dependencies specified in fstab should be applied to the mount unit
      fstab-generator: introduce an helper to write extra dependencies specified via the mount options
      vconsole-setup: downgrade log message when setting font fails on dummy console

Frantisek Sumsal (54):
      test: ignore IAB capabilities in `test-execute`
      format-table: allow hiding a specific column
      systemctl: hide the 'glyph' column when --no-legend is requested
      test: wait a bit after starting the test service
      test: wait a bit after stopping the test service
      coredumpctl: support --file=PATH
      test: drop Disk (Size|Free|Floor|Ceiling) fields prior comparing
      tree-wide: formatting tweaks reported by Coccinelle
      tree-wide: fix spelling errors
      test: correctly clean up test artifacts
      fuzzit: make the submit phase a bit more robust
      ci: introduce CIFuzz
      man: fix few spelling errors
      test: fix potential use-after-free
      Revert "logs-show: declare [static 2] on all highlight parameters"
      cifuzz: run only for relevant PRs
      cifuzz: fuzz the master branch on push
      hwdb: fix microphone shortcut on HP EliteBook 840 G1
      shared: fix integer overflow in calendarspec
      test: unify quotation around image names
      test: fix public/private image detection and prefer the latter one
      test: introduce TEST_PARALLELIZE to support running tests in parallel
      meson: add fuzz-tests= option
      travis: enable fuzzer regression tests under sanitizers
      meson: pass the optimization level to the fuzzer build
      tree-wide: codespell fixes
      test: make the systemd-run calls synchronous
      test: create public images by default
      meson: support building fuzzers with meson <0.48.0
      NEWS: fix several typos
      test: avoid failing due to unexpected precision
      travis: check build with various compiler options
      tree-wide: mark assert()-only variables as unused
      test: make TEST-02-CRYPTSETUP a bit more robust
      travis: replace set (+|-)e with travis_terminate
      journal: drop the assert-only variable completely
      travis: bump Ubuntu release to Bionic
      github: rename CIFuzz workflow file to cifuzz.yml
      github: move the clang/gcc build check to GH Actions
      ci: add homed/zstd dependencies
      ci: do the compiler-detection magic in the test script
      ci: move the build check script to workflows directory
      ci: tweak the compilation options
      ci: tweak the dependency installation
      travis: use a matrix for similar jobs
      travis: drop stuff moved to GH Actions
      travis: sort dependencies
      tree-wide: spellcheck fixes
      test: bump the timeout for systemd-hwdb-update.service under ASan
      test: use KILL instead of SIGKILL in TEST-52-HONORFIRSTSHUTDOWN
      travis: install missing deps for the Coverity run
      unit-name: fix a potential memory leak
      test: bump the TEST-47 sleeps once again
      travis: compile with -O1 with clang

Gaurav Singh (1):
      test-cgroup-util: Handle result=NULL as empty string

Georg Müller (2):
      journalctl: show duplicate entries if they are from the same file (#14898)
      fix journalctl regression (#15099)

Gergely Polonkai (1):
      Update the rsync command in CONVERTING_TO_HOMED

Giedrius Statkevičius (3):
      systemctl: exit with 1 if no unit files found
      resolve: reload /etc/hosts on inode change
      verify: ignore nonexistent executables if required

Gigadoc2 (1):
      hwdb: add another Logitech G502 Hero variant (#16256)

Hans de Goede (5):
      hwdb: Add accel orientation quirk for MPMAN MPWIN895CL tablet
      hwdb: Fix accel orientation quirk for Medion Akoya E2215T MD60198
      hwdb: Add accel orientation quirk for Toshiba Encore WT10A tablet
      hwdb: Add accel orientation quirk for Trekstor Surftab Twin 10.1 ST10432-8
      logind: Fix org.freedesktop.login1.set-reboot-to-boot-loader-menu saving to the wrong file in the non EFI case

Haochen Tong (3):
      analyze: fix table time output
      home: fix segfault when parsing arguments in PAM module
      zsh: fix disable/enable completion

Jakov Smolic (3):
      Add meson build option to prevent building kernel-install
      Add new meson configure option for controlling systemd-analyze support
      Include new configure options in features list

James T. Lee (1):
      boot: Ensure ARM UEFI binary does not contain FP/SIMD instructions

Jan Janssen (1):
      sd-boot: Add → as alternative to boot selected entry

Jan Klötzke (1):
      core: let user define start-/stop-timeout behaviour

Jan Palus (1):
      login: filenames in /run/systemd/users are uids

Jay Burger (3):
      fix manager_state
      fix_test_function_timeout
      feature to honor first shutdown request to completion

Jeremy Cline (2):
      Tidy up the Fedora mkosi Package list
      shared: treat generator units as vendor units

Jian-Hong Pan (1):
      hwdb: Fix kbd brightness keys on Acer Predator PH 315-52

Jiri Slaby (1):
      hwdb: Add accel orientation quirk for UMAX VisionBook 10Wi Pro

Joel Shapiro (2):
      Fix pam_systemd_home's debug parameter to match man page description
      Fix misuse of PAM_PROMPT_ECHO_OFF in systemd-homed

Joerg Behrmann (1):
      docs: Add syntax for templated units to systemd.preset man page

Jouke Witteveen (1):
      systemctl: hide first column with --plain instead of --no-legend

Jérémy Rosen (3):
      make-directive-index: allow pages to specify the path to search
      make-directive-index: allow variablelist to specify an element to index
      update-dbus-docs: automatically add variablelist for introspected items

Jörg Thalheim (1):
      systemd-resolved: use hostname for certificate validation in DoT

Kai-Heng Feng (2):
      hwdb: Mask rfkill event from intel-hid on HP platforms
      hwdb: Add EliteBook to use micmute hotkey

Kenny Levinsen (2):
      core: Add optional FDPOLL=0 argument to fdstore
      core: (De-)Serialize poll flag for fds in fdstore

Kevin Kuehler (2):
      import: Only keep RO copy if ETag header is set
      basic: Fix capability_ambient_set_apply for kernels < 4.3

Kumar Kartikeya Dwivedi (3):
      test: add a test case for #15528
      Introduce sd_notify_barrier
      man: sd_notify() race is gone with sd_notify_barrier()

Lennart Poettering (542):
      userwork: fix signal worker sends to manager requesting more workers
      user-util: switch order of checks in valid_user_group_name_or_id_full()
      units: do not pull in home.mount from systemd-homed.service
      man: mention that stdout logging works the same as stderr logging
      homed: fall back to ftruncate() if fallocate() is not supported on backing fs
      update TODO
      string-util: some minor coding style updates
      string-util: make sure we eat even half complete words in split()
      string-util: make clear that split() + FOREACH_WORD() should die
      update TODO
      Revert "units: make systemd-repart.service installable"
      units: run systemd-repart only if there's configuration for it
      capability: don't skip ambient caps setup if we actually have something to set
      preset: let's clean up preset list a bit
      units: pull in systemd-pstore.service from sysinit.target
      core: automatically add dependency on systemd-remount-fs.service if StateDirectory= is used
      units: drop dependency on systemd-remount-fs.service from systemd-pstore.service
      units: drop systemd-remount-fs.service dependency from more services
      units: make sure systemd-pstore stops at shutdown
      userdbctl: drop redundant user name validity check
      user-util: rework how we validate user names
      docs: add a longer document explaining our rules on user/group names
      docs: hook up the new USER_NAMES document everywhere
      catalog: add entry for SD_MESSAGE_UNSAFE_USER_NAME
      terminal-util: fixate underlined yellow color too
      test-terminal-util: fix typo
      man: correct the default slice for systemd-run units
      sleep: improve log msg slightly
      btrfs-util: define helper that creates a btrfs subvol if we can, and a directory as fallback
      import: use our new btrfs_subvol_make_fallback() at two places
      homed: when creating home directory as btrfs inside luks volume, place subvol inside it
      pam-systemd-home: drop redundant newline
      userdb: when doing client-side NSS look-ups optionally avoid shadow look-ups
      logind: avoid shadow lookups when doing userdb client side
      man: reference pam_systemd_home man page from systemd-homed man page
      docs: add missing dash
      docs: fix typo now → not
      bootctl: fix assert issue
      docs: add brief document how to convert home directories to homed
      man: extend documentation of the suspend= switch of pam_systemd_home
      docs: add some documentation about hooking up userdb/homed to desktop environments
      docs: introduce documentation category for user/group stuff
      fileio: fileno() can realistically return -1
      fileio: optionally allow telling read_line_full() whether we are processing a tty or not
      fileio: extend comment a bit
      hwdb: optimize isatty()-per-line away
      update TODO
      core: make sure ProtectHostname= is handled gracefully in containers lacking seccomp
      locale-util: add support for lock+key emoji
      locale-util: export emoji_enable() for other code to use
      ask-password: prefix password questions with lock and key emoji
      ask-password-api: reword some debug messages
      man: update os-release(5) to use 24bit ANSI color in example
      units: use correct path to refer to plymouth
      resolved: tone down comment in /run/systemd/{stub-,}resolve.conf
      journald: add configuration option for enabling/disabling audit during journald startup
      errno-util: let's beef up ERRNO_IS_NOT_SUPPORTED() with socket not supported errors
      man: document how to get the boot menu with zero time-out
      core: automatically add udev dependency for units using RootImage=
      log-control-api: add generic D-Bus interface for querying/setting log level/target
      resolved: replace private log level control API with generic one
      tree-wide: implement new log control API dbus interface in all our daemons
      core: use generic implementations of log level/target bus propertier getters
      core: implement generic log control API in PID1 too
      update TODO
      core: minor error code handling fixes
      resolve: move resolv.conf path definitions to shared header
      nspawn: beef up --resolve-conf= modes
      man: document the new --resolv-conf= options
      core: some minor clean-ups/modernizations
      core: make sure to restore the control command id, too
      man: document that VirtualEthernetExtra= has nothing to do with Bridge=
      core: make sure we don't get confused when setting TERM for a tty fd
      nspawn: some minor modernizations
      sd-bus: work around ubsan warning
      acpi-fpdt: mark structures as packed
      nspawn: minor simplification
      nspawn: refuse politely when we are run in the non-host netns in combination with --image=
      sd-journal: don't check namespaces if we have no namespace to go by
      socket-util: add recvmsg_safe() wrapper that handles MSG_CTRUNC
      tree-wide: use recvmsg_safe() at various places
      run: don't wait for start job to complete when running interactively anyway
      macro: add READ_NOW() macro for force reading of memory, making a copy
      journal-file: avoid risky subtraction when validity checking object
      journal: use a bitfield where appropriate
      journal: use structured initialization for Location structure
      memory-util: add missing () in macro evaulation
      journal: don't assert on mmap'ed object type
      journal: several minor coding style fixes/clean-ups
      journal: make sure to explicitly copy out values of mmap before doing arithmetics on them
      journal: no need to check offset twice, journal_file_move_to_object() does it again
      udev: prepare memory for extra NUL termination for NULSTR
      udev: use STR_IN_SET() wher eit makes sense
      sysusers: add accidentally forgotten 'return'
      sysusers,tmpfiles: always mention error when failing to replace specifiers
      stat-util: no need to open a file to check fs type
      stat-util: add simpler helper for checking if /proc/ is mounted
      tmpfiles: if we get ENOENT when opening /proc/self/fd/, check if /proc is mounted
      update TODO
      shared: add common helper for unregistering all binfmt entries
      shutdown: unregister all binfmt_misc entries before entering shutdown loop
      binfmt: modernize code a bit
      binfmt: also unregister binfmt entries from unit
      man: document binfmt's new --unregister switch
      tree-wide: use cmsg_find() helper at various places where appropriate
      socket-util: introduce type-safe, dereferencing wrapper CMSG_FIND_DATA around cmsg_find()
      networkd: don't do lldp rx nor tx on bond devices
      home: fix strv NUL termination
      nss-systemd: don't synthesize root/nobody when iterating
      dhcp-client: port to recvmsg_safe()
      icmp6-util: port to recvmsg_safe()
      dhcp-server: port to recvmsg_safe()
      tree-wide: use structured initialization at various places
      update TODO
      nspawn: be more careful with creating/chowning directories to overmount
      main: bump RLIMIT_MEMLOCK by physical RAM size
      update TODO
      tree-wide: support a bunch of additional specifiers
      man: document new specifiers
      update TODO
      tmpfiles: use log_syntax() for all parse errors
      tmpfiles: remove unnecessary assert
      json: when making a copy of a json variant, propagate the sensitive bit
      home: mark various bus messages we write user records to as sensitive
      home: make sure whenever we touch the 'secret' part of a user record, we set the the sensitive flag on it
      efi: cache test results of boolean EFI state functions
      efi: honour SYSTEMD_EFI_OPTIONS even if we wouldn't honour SystemdOptions EFI var due to SecureBoot
      notify: beef up --pid= logic
      basic: add STRCASE_IN_SET() which is to STR_IN_SET() what strcaseeq() is to streq()
      format-table: generate better JSON field names
      systemctl: optionally output tables in JSON format
      calendarspec: encode that it's OK to store µs in 'int's
      calendarspec: pack our flags a bit
      calendarspec: drop _pure_ from static function
      calendarspec: minor simplification
      calendarspec: be more graceful with two kinds of calendar expressions
      man: expand on the star…end/repetition time expressions
      journal: use set_contains() where appropriate
      journalctl: optionally, show a different field than MESSAGE in -o cat mode
      man: document the new -o cat feature
      logs-show: declare [static 2] on all highlight parameters
      shutdown: fix spacing in shutdown error message
      man: migrate more specifier explanations to standard-specifiers.xml
      sysusers: be extra careful when locking accounts
      format-table: display an empty strv cell the same way as an empty cell
      systemctl: show empty cells as '-'
      systemctl: change column name in "list-sockets" out from "units" to "unit"
      systemctl: let's tweak how we synthesize a cell for activating unit
      systemctl: ensure underline for "list-unit-files" empty cells
      format-table: support coloring the gap right of each cell individually
      systemctl: underline whole rows, gapless
      login: include pam_systemd_home.so in the default PAM snippet we ship for user@.service
      man: highlight relevant lines in pam_systemd_home.so example PAM snippet
      man: bring example PAM snippet of pam_systemd and pam_systemd_home back in sync
      homed: open up home dir Acquire operation to unpriv clients
      homectl: show disk free in percent in 'inspect'
      tree-wide: use CMSG_SPACE() (and not CMSG_LEN()) to allocate control buffers
      tree-wide: remove redundant assignments
      tree-wide: make sure our control buffers are properly aligned
      man: document homed key management
      update TODO
      homed: allow overriding homework path via env var
      user-record: add new field for requesting LUKS discard on logout
      homectl: add option for controlling new luksOfflineDiscard user record field
      homework: run fitrim or fallocate on logout based on the new user record property
      docs: document the new offline discard logic
      update TODO
      tmpfiles: optionally, read /etc/passwd + /etc/group without NSS
      sysusers/tmpfiles: use --root=/ as way to force offline operation (i.e.  without NSS)
      man: document the new tmpfiles --root= behaviour regarding users
      locale-util: add new helper locale_is_installed()
      test: add test case for locale_is_installed()
      tree-wide: port various bits over to locale_is_installed()
      meson: re-run ninja update-man-rules
      update TODO
      fs-util: add helper path_is_encrypted() that checks if a file system is encrypted
      user-record: split out code that generates automatic image path for records
      home: when adding a binding for a user record, use common code for determining automatic image path
      homed: tweak logic for picking a default storage and file system
      homed: move supported_fstype() to home-util.c
      homed: make default storage/file system type configurable in homed.conf
      man: document homed.conf
      update TODO
      homectl: color disk free output if low on free space
      update TODO
      update TODO
      fs-util: beef up path_is_encrypted() to deal with LVM block devices
      update TODO
      random-util: actually encode our expectations on RAND_MAX
      random-util: use ERRNO_IS_NOT_SUPPORTED() macro
      random-util: make use of GRND_INSECURE when it is defined
      update TODO
      man: mention the exclamation mark and minus sign literally, to make things searchable
      tmpfiles: clarify that "!" lines are filtered before collisions are checked
      seccomp-util: add new syscalls from kernel 5.6 to syscall filter table
      man: clarify that exit status name mappings are unaffected by SuccessExitStatus=
      netlink: port to recvmsg_safe()
      man: run man/update-dbus-docs again
      homed: fix parameter names on D-Bus methods
      man: document homed D-Bus API
      pam_systemd_home: use correct macro for converting ptr to fd
      pam_systemd: drop unused uid argument from export_legacy_dbus_address()
      pam_systemd: also print debug lines when ending a session
      update TODO
      pam_systemd/pam_systemd_home: rework how we cache user records
      pam_systemd_home: also store acquirement fd per user
      core: don't bind varlink socket if running in test mode
      update TODO
      systemctl: fix indentation of 'Active:' field in status output
      stat-util: add stat_inode_unmodified() helper that checks if an inode was modified
      resolved: port to stat_inode_unmodified()
      sd-bus: introduce new SD_BUS_VTABLE_ABSOLUTE_OFFSET vtable flag
      man: complete vtable flag documentation
      journald: use log_warning_errno() where appropriate
      journald: rework end of line marker handling to use a field table
      journald: use the fact that client_context_release() returns NULL
      journald: rework pid change handling
      man: document the new _LINE_BREAK= type
      sd-dhcp-server: some function prototype fix-ups
      man: document $LOG_NAMESPACE
      sysctl: check correct error code
      repart: explain when we exit early and don't do a thing
      repart: suppress complaints about lack of BLKRRPART when operating on regular file
      repart: add support for create/growing loopback files
      test: update tests to use new repart features
      man: document new --empty=create and --size= switches to repart
      update TODO
      man: drop some left-over mentions of StandardOutput=syslog
      core: automatically update StandardOuput=syslog to =journal (and similar for StandardError=)
      condition: add ConditionPathIsEncrypted=
      condition: introduce generic function type for condition_to_string()-like functions
      condition: return (Condition*) NULL from condition_free()
      limit-util: quieten a very common debug message that is misleading
      condition: add ConditionEnvironment=
      man: document the two new condition types
      update TODO
      udev: get rid of "Could not set flow control of" message on "lo" interface
      update TODO
      blockdev: propagate one more unexpected error
      makefs: log about OOM condition
      dissect: use log_debug_errno() where appropriate
      blockdev: add helper for locking whole block device
      condition: check if path is absolute first
      condition: add debug log messages on unexpected errors
      condition: downgrade a few log messages to debug
      condition: when reading /etc/ modification timestamp, let's actualy compare it as-is
      proc-cmdline: add some explanatory comments
      condition: allow overriding of ConditionNeedsUpdate= on the kernel command line
      condition: reverse if check to lower indentation level
      condition: debug log if F_OK check on /run/systemd/first-boot fails unexpectedly
      condition: introduce systemd.condition-first-boot= kernel command line switch
      main: add a kernel command line option for setting the system clock early during boot
      core: allow overriding the system hostname with systemd.hostname= on the kernel command line
      update TODO
      makefs: lock device while we operate
      makefs: normalize logging a bit
      cryptsetup-generator: use systemd-makefs for implementation of "swap" and "tmp" options
      hostnamed: don't cache uname() data
      hostnamed: don't cache system UUID
      hostnamed: call our destructor _destroy(), not _clear()
      dhcp6: slightly improve log message
      busctl: use structured initialization
      busctl: improve error messages on duplicate members/interfaces
      homed: use right config section in example config
      test-fs-util: don't fail on btrfs file systems in containers
      btrfs-util: tweak error code a bit
      repart: don't insist on coming up on partition label ourselves
      journalctl,elsewhere: make sure --file=foo fails with sane error msg if foo is not readable
      fs-util: teach unlinkat_deallocate() a simple scheme for overwriting for erasing
      cryptsetup: catch up with debian crypttab options a bit
      cryptsetup: optionally remove key file after use
      cryptsetup: split out key loading from pkcs11 code and teach search path logic
      cryptsetup: automatically load luks keys off disk
      cryptsetup: make sure to return EAGAIN on wrong tcrypt password too
      cryptsetup: also check for /dev/hwrng as random device node
      cryptsetup: fix minor memory leak
      cryptsetup: optionally, see if empty password works for unlocking the file system
      cryptsetup: fix minor indentation issue
      man: document the newly acquired cryptsetup features
      update TODO
      man_systemd_home: intrdouce SYSTEMD_HOME_SUSPEND env var
      pam_systemd: clean up success path
      udev: when random MACs are requested, generate them with genuine randomness
      man: include sd_bus_message_handler_t prototype in synopsys of all man pages that reference the type
      man: let's document explicitly that method reply handlers won't get ret_error set to method error
      proc-cmdline: fix return value clobbering in proc_cmdline_get_key()
      proc-cmdline: add checking of EFI options variable in proc_cmdline_get_key_many() too
      proc-cmdline: make checking of EFI options variable optional
      homed: fix return value mix-up
      rules: automatically pull in smartcard.target from all CCID devices
      homed: return a better error when a home has no authentication information defined
      fileio: sync directory after rename, too
      homed: when updating local copy of user record, sync to disk
      homed: automatically clean up empty user record files
      homed: make sure we log about invalid user records we load
      homed: fix typo
      homed: also fsync private/public key pair when storing it
      bus-util: actually register the object manager
      homed: include error string when in log message if quota doesn't work
      homed: don't insist on authentication against host-copy user record
      tmpfiles: downgrade log message when we can't write a file and failure is allowed
      tmpfiles: don't complain if we can't enable pstore in containers
      json: use our regular way to turn off compiler warnings
      tree-wide: use DISABLE_WARNING_FORMAT_NONLITERAL where appropriate
      macro: introduce DISABLE_WARNING_TYPE_LIMITS and make use of it everywhere
      json: turn off ubsan for json_variant_has_type()
      unit-name: tighten checks for building valid unit names
      unit-name: use TAKE_PTR() where appropriate
      core: improve log messages when we cannot process a mount point
      journal: expand variables up to PATH_MAX in size in catalog output
      update TODO
      fstab-util: prefix return parameters with ret_
      cryptsetup: support tmp= file system argument
      update TODO
      Revert "presets: "disable" all passive targets by default"
      tmpfiles: deal with kernel errno change if quota is not enabled
      units: don't set PrivateNetwork= in systemd-homed.service
      gpt: include homed GPT partition type in well-known partition table
      core: warn if KillMode=none is used
      man: document that KillMode=none is a bad idea
      units: remove KillMode=process in our regular gettys
      core: also log about left-over processes during unit stop
      core: some more structured initialization
      core: voidify one function return
      sysv: use structured initialization
      sysv: generate warning for every SysV service lacking a native systemd unit
      update TODO
      efivars: log whenever an EFI variable read access is slow
      run: when waiting for unit, also check if no job is pending anymore
      udev: when the BSD lock on a block device is taken, don't complain
      socket-util: add generic socket_pass_pktinfo() helper
      core: add new PassPacketInfo= socket unit property
      networkd: clean up NETLINK_PKTINFO vs. SO_PASSCRED confusion
      resolved: tweak cmsg calculation
      pam_systemd: be more thorough when validating runtime paths
      pam_systemd: set legacy D-Bus path only if the runtime directory is validated
      tree-wide: remove spurious whitespace
      start NEWS file for v246
      hwdb: whitespace fix
      libsystemd: properly export new sd_notify_barrier() API call
      udev: catch genuine_random_bytes() failures
      homed: enable userdb too if homed is requested
      xdg-autostart: fix two coverity found issues
      path: use ROOTPREFIX properly
      sd-path: drop "-dir" and "-path" suffixes from path enums
      update TODO
      sd-device: check netlink netns matches host netns before using monitor
      catalog: normalize how we link to documentation
      locale-util: add glyph for external links
      pretty-print: export urlify_enabled()
      journal: show documentation hyperlink if known in log output
      logs: strndupa() cannot fail
      man: briefly document the DOCUMENTATION= structure log field
      update NEWS
      efi: cache LoaderEntries EFI variable
      efi: avoid weirdly double }} by indenting differently
      efi: cache OsIndicationsSupported
      efi: as extra paranoia NUL terminate UTF-16 strings with three NUL bytes
      efi: explicitly update mtime of EFI variables when changing them
      efi: cache OsIndications too
      bootctl: show reboot-to-firmware info, too
      bootctl: add simple, low-level reboot-to-firmware verb for controlling the flag
      efi: add more logging for all EFI variable reads
      update TODO
      stat-util: trivial empty_or_null() tweaks
      sd-dhcp: clean-up of DHCP lease server code
      update TODO
      fd-util: be more careful with fclose() errnos
      fs-util: add stat_warn_permissions() that operates on struct stat instead of fd
      conf-parse: fix pretty bad typo
      conf-parser: return mtime in config_parse() and friends
      core: remove support for ".include" stanza
      seccomp: filter openat2() entirely in seccomp_restrict_sxid()
      parse-util: allow tweaking how to parse integers
      parse-util: allow '-0' as alternative to '0' and '+0'
      parse-util: make return parameter optional in safe_atou16_full()
      parse-util: rewrite parse_mode() on top of safe_atou_full()
      user-util: be stricter in parse_uid()
      parse-util: rewrite parse_uid_range() on top of parse_uid()
      parse-util: also parse integers prefixed with 0b and 0o
      tests: beef up integer parsing tests
      test: add test for parse_uid_range()
      udev: optionally mark all block devices read-only as they pop up
      units: tweak udev unit descriptions
      man: single-char parameters take no '='
      update TODO
      cryptsetup: try to load bitlocker superblock only if requested
      cryptsetup: pass selected mode to crypt_load() when doing LUKS
      udevd: use cpus_in_affinity_mask()
      udev: set fewer process properties
      mkdir: use log_full_errno() where appropriate
      login: use ERRNO_IS_PRIVILEGE() where appropriate
      inaccessible: move inaccessible file nodes to /systemd/ subdir in runtime dir always
      tree-wide: check POLLNVAL everywhere
      docs: point contributors to list of most recent systemd releases
      pager: set PR_DEATHSIG for pager to SIGINT rather than SIGTERM
      update TODO
      tree-wide: port to fd_wait_for_event()
      sleep-config: add more debug logging
      sleep-config: return correct error code
      sleep: clean up debug/error logging
      sleep-config: downgrade log level in can_s2h()
      sleep-config: modernize destructors
      sleep: pass error we see to log function
      hwdb: generate a hwdb file instead of rules for autosuspend
      update TODO
      README: add reference to systemd.io
      update TODO
      repart: add simple specifier expansion in Label=
      repart: if now minimal size is specified, default to 10M
      USER_RECORD: fix typo
      network: clean-up DHCP lease server data configuration
      selinux-util: tweak log_enforcing_errno() to return the errno passed in or 0 when in non-enforcing mode
      nspawn: mkdir selinux mount point once, but not twice
      man: s/PROGRAMM/PROGRAM/
      man: replace perl bug tracker link that went away with link to paper
      util: add dlfcn-util.h
      nss-systemd: skip /etc/gshadow look-ups when we just need the GID of a group
      userdb: replace recursion lock
      random-seed: use ERRNO_IS_NOT_SUPPORTED() where appropriate
      pid1: don't apply "systemd.clock_usec" kernel cmdline parameter outside of PID 1
      random-util: add common helper random_write_entropy() for crediting entropy to the kernel's pool
      core: add new systemd.random_seed= kernel command line option for seeding entropy pool
      man: document systemd.random-seed=
      update TODO
      tree-wide: avoid some loaded terms
      hostnamed: don't cache local hostname either
      hostnamed: minimize caching of /etc/hostname, /etc/os-release and /etc/machine-info
      macro: add CONST_MIN() similar to CONST_MAX()
      journal: fix definition of _OBJECT_COMPRESSED_MAX
      journal-file: use FLAGS_SET where appropriate
      journal: store NE hash instead of LE hash in Match object
      journal-file: simplify boot ID acquiring
      journal-file: also show field hash table size in debug output
      journal-file: rename return parameters to ret_xyz
      journal: rename hash64() to jenkins_hash64()
      journal: make signature arrays const
      journal: use a different hash function for each journal file
      journal-file: when individual hash chains grow too large, rotate
      journal: support zstd compression for large objects in journal files
      docs: import journal file format docs from fdo wiki
      docs: document the new journal file format additions
      tree-wide: add new HAVE_COMPRESSION compile time flag
      coredump: use log_error_errno() where appropriate
      compress: do something roughly reasonable when building without compressor
      update TODO
      repart: add new CopyBlocks= setting
      update TODO
      tmpfile-util: typo fixes
      efi-loader: cache LoaderConfigTimeoutOneShot too
      logind: also cache LoaderEntryOneShot EFI variable
      NEWS: add more items for 246
      JOURNAL_FILE_FORMAT: minor markdown fixes
      update TODO
      update TODO
      pid1: warn if people use User=nobody (#16293)
      shared: split out BusObjectImplementor APIs
      shared: actually move all BusLocator related calls to bus-locator.c
      shared: split out code that maps properties to local structs
      shared: split out code for printing properties
      shared: split out property get helpers
      update TODO
      locale-util: add support for touch emoji
      macro: add new FOREACH_POINTER() macro magic
      pkcs11-util: reduce scope of a variable
      homectl: add missing log messages when json_variant_format() fails
      user-record: securely erase pkcs#11 when assigned NULL too
      user-record: rename JSON field "pkcs11Pin" to "tokenPin"
      build-sys: add libfido2 as optional dependency
      user-record: add fields for FIDO2 HMAC authentication options
      homectl: add support for enrolling FIDO2 HMAC-SECRET tokens
      homed: add support for authenticating with fido2 hmac-secret tokens
      pam-systemd-home: print helpful message when token's PIN is locked
      homectl: show touch emoji when asking for PKCS#11 protected auth path
      homectl: do generic error handling/retry also when creating a home directory
      homectl: rework how we log when doing a home directory update
      homectl: split out pkcs#11 related code bits into own .c/.h file
      homectl: add acquired fido2 PIN to user record
      homectl: add --pkcs11-uri=auto and --pkcs-11-uri=list support
      docs: document new FIDO2 user record fields
      man: update homectl man page with documentation for new features
      update TODO
      namespace-util: introduce helper for combining unshare() + MS_SLAVE remount
      mount-util: add destructor helper that umounts + rmdirs a path
      mount-util: use UMOUNT_NOFOLLOW in recursive umounter
      firstboot: add --image= switch
      man: document the new --image= switch of systemd-firstboot
      firstboot: add option to turn off welcome text display
      TODO
      update TODO
      update NEWS
      NEWS: drop duplicate entry, add --image= entry
      udevadm: beef up deprecation log warning
      update TODO
      analyze: make testing ConditionPathExistsGlob= work
      update TODO
      docs: permit user/group services that do not support enumeration
      process-util: make sure procfs_file_alloca() works for non-literal field names too
      machined: refactor UID/GID machine translation
      machined: implement user/group lookup varlink API in machined too
      man: document new varlink service
      nss-mymachines: drop support for UID/GID resolving
      update TODO
      logs: when embedding catalog info in log output use a dash of color and unicode
      update TODO
      core: fix invalid assertion
      mountpoint-util: fix error handling
      load-fragment: downgrade log messages we ignore to LOG_WARNING
      execute: fix if check
      machine: fix if check
      Revert "selinux: cache enforced status and treat retrieve failure as enforced mode"
      man: don't claim environment.d/ was about sessions
      man: GNOME is usually capitalized
      man: configuration files contain assignments, no directories
      fileio: add explicit flag for generating world executable warning when reading file
      fileio: add support for read_full_file() on AF_UNIX stream sockets
      fileio: allow to read base64/hex data as strings
      tree-wide: use READ_FULL_FILE_CONNECT_SOCKET at various places
      fileio: add brief explanations for flags
      import: always prefer GNU tar, to avoid cmdline incompatibilities
      update NEWS
      time-util: rework clock conversion logic
      test: add basic test for clock mapping
      core: don't acquire dual timestamp needlessly if we don't need it in .timer handling
      user-util: indentation fix
      update TODO
      offline-passwd: use chase_symlinks()
      acl-util: fix error handling in add_acls_for_user()
      coredump: port to use common add_acls_for_user()
      execute: take ownership of more fields in ExecParameters
      update NEWS
      nspawn: fix MS_SHARED mount propagation for userns containers
      firstboot: don't create /etc/passwd with mode 000
      core: clean more env vars from env block pid1 receives
      nspawn: add missing spdx header
      nspawn: rework how /run/host/ is set up
      update TODO
      man: fix link markup
      meson: run 'ninja man/update-man-rules' again
      repart: log fixes
      path-util: make use of TAKE_PTR() where we can
      loop-device: implicitly sync device on detach

Lidong Zhong (1):
      udev: rename the persistent link for ATA devices

Luca BRUNO (1):
      man/systemd-service: clarify env variable expansion

Luca Boccassi (40):
      man: explicitly note that ExecSt*Post does count for After/Before ordering
      man: add missing varname around keywords in systemd.unit.xml
      core: add log_get_max_level check optimization in log_unit_full
      core: add debug log when a job in the activation queue is not runnable
      Revert "detect-virt: also detect "microsoft" as WSL"
      core: reload cache if it's dirty when starting a UNIT_NOT_FOUND unit
      test: temporarily block test 48 on Ubuntu's autopkgtest
      dissect-image: wait for udev for single filesystem images too
      dissect: support single-filesystem verity images with external verity hash
      efi: use stub for cache_efi_options_variable if !ENABLE_EFI
      core: add RootHash and RootVerity service parameters
      basic/mkdir: introduce safe recursive variants
      nspawn: use mkdir_p_safe instead of homegrown version
      Container interface: document exposing the host's os-release
      nspawn: implement container host os-release interface
      portabled: implement container host os-release interface
      make-autosuspend-rules: restore compatibility with Python3 < 3.6
      veritysetup: add support for dm-verity root hash signature
      dissect/nspawn: add support for dm-verity root hash signature
      core: add RootHashSignature service parameter
      portabled: create temp file for unit, not directory
      core: add device mapper to allow-list with DevicePolicy=closed and RootImage
      efi: define cache functions inside EFI_ENABLE ifdef
      core: store timestamps of unit load attempts
      core: refresh unit cache when building a transaction if UNIT_NOT_FOUND
      test: exercise systemd-dissect --mount in TEST-50-DISSECT
      test: exercise systemd-dissect with GPT and verity in TEST-50-DISSECT
      test: pre-assemble minimal image for TEST-50-DISSECT at build time
      test: exercise RootImage, RootHash and RootVerity in TEST-50-DISSECT
      basic/mkdir: use uid_is_valid instead of manual check
      shared/os-util: fix comment style to follow guidelines
      nspawn: use access/F_OK instead of stat to check for file existence
      nspawn: mount os-release in two steps to make it read-only
      nspawn: set container_host env vars before user arguments
      test: run systemd-dissect and systemd-run with log level debug in TEST-50-DISSECT
      dm-util: use CRYPT_DEACTIVATE_DEFERRED instead of ioctl
      verity: re-use already open devices if the hashes match
      NEWS: fix typo in path
      doc: update os-release spec with new path for container host's file
      portabled: update host's os-release path

Lucas Werkmeister (2):
      docs: fix misplaced close-paren
      docs: fix typo

Lukas Klingsbo (1):
      Add Kensington SlimBlade Trackball

Lukáš Nykrýn (1):
      docs: update information where to file bugs against RHEL/CentOS versions of systemd

Lénaïc Huard (1):
      udev: Fix SIGSEGV in AlternativeNamesPolicy handling

Maciej S. Szmigiero (1):
      hwdb: add another Logitech M705 mouse variant

MadMcCrow (1):
      Fix Chromebook Caroline board accelerometer not having correct orientation

Marc Kleine-Budde (1):
      udev: spi: include chip select number in ID_PATH

Marc-André Lureau (13):
      systemd-run: add --slice-inherit
      network: add TUN/TAP vt-* network rule for VMs
      shared: move in_addr_ifindex_name_from_string_auto() there
      network: fallback on resolved resolv.conf for DHCP server settings
      sd-dhcp-server: add sd_dhcp_server_set_callback()
      sd-dhcp-server: notify callback on lease changed
      networkd: start a DBus interface for the DHCP server
      networkd: expose DHCPServer interface on links
      sd-dhcp-client: make struct sd_dhcp_client_id reusable
      macro.h: add sizeof_field() helper
      sd-dhcp-client: add sd_dhcp_client_id_to_string()
      networkctl: factor out link_get_property()
      networkctl: print DHCP leases

Marcel Holtmann (1):
      hwdb: Update database of Bluetooth company identifiers

Martin Hundebøll (4):
      mount: add ReadWriteOnly property to fail on read-only mounts
      man: document ReadWriteOnly property for mount units
      fstab-generator: add x-systemd.rw-only option support
      man: document x-systemd.rw-only fstab option

Matt Ranostay (1):
      network: add CAN Termination tristate option

Matthew Leeds (1):
      man: Fix a typo of session

MaxVerevkin (1):
      hwdb: Pavilion 13 x360: Tablet mode and SYSRQ key

Maxim Fomin (1):
      Add 'bitlk' option to mount Bitlocker drives with cryptsetup.

Michael Biebl (1):
      man: fix conditional in homed.conf.xml

Michael Chapman (2):
      core/path: use escaped path in serialization
      core/path: recheck path specs when triggered unit changes state

Michael Gubbels (1):
      Fix typo.

Michael Marley (3):
      network: Don't send RA with zero router lifetime when restarting radv
      network: radv: Send RA on newly-added dynamic prefix
      network: Fix "Unknown section 'DHCPv6PrefixDelegation'." message

Michal Koutný (15):
      mkosi: Use distro-invariant rootprefix
      test: Simplify hostname checking
      mkosi: Unify environment for unit tests
      mkosi: Add openSUSE params file
      test: Fix build with !HAVE_LZ4 && HAVE_XZ
      mkosi: Fix openSUSE image declaration
      mkosi: Add openSUSE Tumbleweed packages
      mkosi: Add explicit --bootable=no openSUSE dependencies
      systemctl: Fix frozen state coloring
      tests: Fix description of test units
      cgroup: Make empty assignments reset to default
      cgroup: Allow empty assignments of Memory{Low,Min}=
      cgroup: Parse infinity properly for memory protections
      test: Test memory limit parsing
      missing: Add new Linux capabilities

Michal Sekletár (14):
      shared: split out NUMA code from cpu-set-util.c to numa-util.c
      core: add support for setting CPUAffinity= to special "numa" value
      sd-journal: remove the dead code and actually fix #14695
      device: make sure we emit PropertiesChanged signal once we set sysfs
      device: don't emit PropetiesChanged needlessly
      selinux: do preprocessor check only in selinux-access.c
      basic/cgroup-util: introduce cg_get_keyed_attribute_full()
      core: introduce support for cgroup freezer
      test: add test for cgroup v2 freezer support
      core/cgroup: fix return value of unit_cgorup_freezer_action()
      udev: make signal that we use to kill workers on timeout configurable
      test: add integration test for udev event timeout
      tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw
      core: fix the return value in order to make sure we don't dipatch method return too early

Michał Bartoszkiewicz (1):
      docs: use bool in varlink interface definition

Mike Gilbert (2):
      safe_fork: unblock most signals before waiting for child
      safe_fork: use a cleanup function to restore signal mask in parent

Mike Kazantsev (1):
      NEWS: fix use of tabs instead of spaces for one item

Mikhail Novosyolov (2):
      rpm: avoid odd symbols in EOF indicator
      rpm: avoid hiding errors and output in *_create_package macros

Motiejus Jakštys (1):
      nspawn: mount custom paths before writing to /etc

Niccolò Maggioni (1):
      hwdb: add HP Spectre x360's mic mute switch

Niklas Hambüchen (1):
      man: Fix typo "multiplied with" -> "multiplied by"

Norbert Lange (8):
      Improve help for clang-format
      coredump: add zstandard support for coredumps
      install libzstd-dev for CI builds
      allow removal of initrd services
      dont install systemd-initctl, runlevel, telinit if no SYSV compat
      udev: single binary replacing udevd and udevadm
      build: skip installation of 2 files if feature is disabled
      clang-format: set Break afer enum to false

Paul Cercueil (2):
      sd-boot: Work around malformed CR key code
      sd-boot: Add small comments after device-specific key macros

Peter Hutterer (1):
      hwdb: remove support for MOUSE_WHEEL_TILT_*

Piero La Terza (1):
      homectl: fix a typo

Pieter Lexis (1):
      Add `shell` to machinectl ZSH completion

Piotr Drąg (4):
      po: update Polish translation
      catalog,po: update Polish translation
      catalog: update Polish translation
      catalog: update Polish translation

Rafael Fontenelle (1):
      po: update Brazilian Portuguese translation

Richard Petri (2):
      network: can: introduce a config parser function for bitrates
      network: can: add support for CAN-FD related properties

Ronan Pigott (1):
      shell-completion/zsh: update systemd-analyze completions

Ross Lagerwall (1):
      hwdb: Add accel orientation quirk for Geoflex laptop

Rubens Figueiredo (1):
      network: allow setting VLAN protocol on bridges

Sean-StarLabs (1):
      hwdb: add Star Lite Mk II and Star LabTop Mk III (#14621)

Sebastian Jennen (1):
      Add .clang-format file

Surhud More (1):
      Add support for HP Elitebook x360 1040 G6 micmute button

Susant Sahani (118):
      network: introduce bus method forcerenew for DHCP server
      network: Add policy in polkit DHCP server forcenenew
      network: Add support in networkctl for DHCP server forcerenew
      network: Introduce method to generate EUI-64 addresses
      network: radv introduce sd_radv_prefix_get_prefix
      network: introduce IPv6 prefix assign
      network: make use of generate_ipv6_eui_64_address
      network: TC introduce PFIFO
      network: TC introduce GRED, Generic Random Early Detection
      network: TC introduce sfb - Stochastic Fair Blue
      sd-netlink: introduce sd_netlink_message_append_s8() and friends
      network: tc: introduce cake
      network: Allow DHCPv6 client to start …
tunayan pushed a commit to tunayan/poky-mirror that referenced this issue Aug 2, 2023
Drop backport of CVE-2020-13776 (merged upstream), refresh
0001-binfmt-Don-t-install-dependency-links-at-install-tim.patch. Refresh
musl patches for v246.

Commits:

  ae366f3acb NEWS: last rites
  cae1e8fb88 loop-device: implicitly sync device on detach
  3660da17b0 Merge pull request #16624 from keszybz/timesync-retry-interval
  e7e954243a udev: fix codesonar warnings
  b67ec8e5b2 pid1: stop limiting size of /dev/shm
  2f2c60d7fe path-util: make use of TAKE_PTR() where we can
  b6eb208b29 hwdb: Add EliteBook to use micmute hotkey
  c8f3d7672c repart: log fixes
  5919bd3df3 timesync: increase retry interval more slowly
  8588146f69 added alternative version of SurfTab Twin
  2ac7eec3b5 network: fix use of uninitialized value
  b209cff2ad network: Fix "Unknown section 'DHCPv6PrefixDelegation'." message
  c05b8edde0 NEWS: mention about [DHCPv6PrefixDelegation] section
  dd57cf6444 meson: run 'ninja man/update-man-rules' again
  6b222c4b02 man: fix link markup
  0cfb490fe9 Merge pull request #16585 from yuwata/network-dhcp6-fixes
  ee56c072b9 Merge pull request #16590 from keszybz/test-fs-util-relax
  f8528230b3 Merge pull request #16576 from keszybz/bump-tmp-size
  b1d666ac58 test-cgroup-util: Handle result=NULL as empty string
  f649325ba7 firstboot: Update help string with --root-shell options
  c550cb7f8c test-sleep: add more logging, show secure boot mode
  02e1eb6d02 NEWS: mention new tmpfs limits
  362a55fc14 Bump /tmp size back to 50% of RAM
  99e015e28c network: rename settings about DHCPv6 Prefix Delegation
  61c0ef4ff3 network: make RADVPrefixDelegation enum bitfield
  ea121d8f25 network: update address infomation even if link is in failed or linger state
  e55265184b network: do not assume static addresses are configured
  15797d6a2b network: check at least one dynamic address is assigned when DHCP is enabled
  1633c45731 network: dhcp6: drop addresses and delegated prefixes on client stop
  1c09d84e42 network: rename ipv4ll_address -> ipv4ll_address_configured
  b0b9776656 network: ndisc: also remove old DNSSL or RDNSS records after an SLAAC address is ready
  69203fba70 network: ndisc: remove old addresses and routes after at least one SLAAC address becomes ready
  6e537f62d7 network: dhcp4: release old lease after the new address become ready
  80b0e86084 network: make address/route_configure optionally return created Address/Route object
  8eec0b9da5 network: set key destructor in several hash_ops
  5f58af25e6 network: make link_check_ready() return earlier if the link is not in 'configuring' state
  3336e946da network: ndisc: do not set configured flags when addresses or routes are not assigned yet
  5d8c3ec1e9 network: make link enter failed state if address_update() failed
  97f000744f network: introduce callback called when an address becomes ready
  c9d223e803 test-network: add tests for prefix routes
  3606ca659e network: add debug log for configuring address
  c21ed6812e test-ndisc-rs: increase timeouts
  500727c220 test-path: increase timeout
  933ab8199d test-fs-util: do not assume /dev is always real
  31363bd564 firstboot: Check if the given shell exists
  97efde65d8 network: radv: Send RA on newly-added dynamic prefix
  c8f12abc73 Fix clang-11 issues
  116d6d2965 catalog: update Polish translation
  f527c6fa08 resolvectl: fix older resolved or networkd support to set DNS servers
  e128723dae Merge pull request #16566 from poettering/nspawn-osrelease-fixes
  a8bd4bab75 Merge pull request #16567 from keszybz/more-news
  199a892218 selinux: handle getcon_raw producing a NULL pointer, despite returning 0
  d05f7b5007 semaphoreci: update Debian release to bullseye
  38821a0e29 update TODO
  d64e32c245 nspawn: rework how /run/host/ is set up
  62b0ee9eb1 portabled: update host's os-release path
  98aac2ad5a doc: update os-release spec with new path for container host's file
  549719699c NEWS: fix typo in path
  d130181fd8 nspawn: add missing spdx header
  e9769453e3 Merge pull request #16561 from yuwata/test-ordered-set
  8047ac8fdc core: clean more env vars from env block pid1 receives
  337f0b0094 NEWS: reorder entries a bit and add a few items
  8b25484af3 NEWS: update contributors list for v246-pre
  c015d657ec hwdb: update again for v246
  b226422cd7 firstboot: don't create /etc/passwd with mode 000
  2a2e78e969 nspawn: fix MS_SHARED mount propagation for userns containers
  fe224669fb Update mkosi.ubuntu to 'focal'
  6f5d73aba6 network: compare with peer address if it is specified
  01b92946c5 Merge pull request #16532 from yuwata/network-sync-state-file
  d4fa0493a7 test-ordered-set: add a case where we get 0 for duplicate entries
  5cf821acf8 man: do not say that isolate is like switching runlevels
  402e1e699f Merge pull request #16557 from keszybz/two-ci-fixes
  2645d4bcc1 test: clarify that ordered_set_put() returns -EEXIST if entry is duplicated
  0390b094f5 meson: do not choke on time epoch when there are no git tags
  960a64691f semaphore: pull in tree explicitly
  495454f40f update NEWS
  82ff544160 Merge pull request #16496 from DaanDeMeyer/firstboot-shell
  bd190899bb Get SOURCE_EPOCH from the latest git tag instead of NEWS
  00b868e857 Merge pull request #16542 from keszybz/make-targets-fail-again
  c3f8a065e9 execute: take ownership of more fields in ExecParameters
  28900a1bfe firstboot: Add --root-shell option
  c4a53ebf7a firstboot: Tighten up passwd/shadow handling
  94d1ddbd7c pid1: target units can fail through dependencies
  74c8e3c4e0 Revert "units: drop OnFailure= from .target units"
  771b52427a core/job: adjust whitespace and comment
  7f8c1e95a5 test-network: add test for duplicated IPv6Token=
  2c62149509 network: ndisc: ignore duplicated IPv6Token=
  92ee90af47 network: ndisc: do not store duplicated data in Set
  3bb4126262 Merge pull request #16536 from poettering/time-clock-map-fixes
  3dbd8a15d5 util: use IN6_ARE_ADDR_EQUAL() macro
  f91b234077 test-network: drop unnecessary sleep() in NetworkdStateFileTests.test_state_file
  1b14222124 network: make bus methods sync link state file
  c2a6595014 network: introduce link_save_and_clean()
  f281fc1e95 tree-wide: use siphash24_compress_string() where it is applicable
  1c568d65ac util: introduce siphash24_compress_string()
  6c04fccb1d util: make siphash24_compress_boolean() inline
  e3643b00a8 test-path: decrease variable scope
  8f8c7801e9 test: increase timeout for test-path
  2859bb932b Merge pull request #16530 from yuwata/udev-fix-race-in-renaming-network-interface
  63fdaa36c5 Merge pull request #16407 from bluca/verity_reuse
  8fa2cd83c6 Revert "man: add note about systemd-vconsole-setup.service and tty as input/output"
  2aa5a13aa9 test: adapt test-functions for SUSE
  f25e9eda52 Merge pull request #16514 from keszybz/zstd-decompress-fix
  b876b07812 Merge pull request #16540 from poettering/acl-fix
  ac1f3ad05f verity: re-use already open devices if the hashes match
  536879480a dm-util: use CRYPT_DEACTIVATE_DEFERRED instead of ioctl
  d81be4e752 coredump: port to use common add_acls_for_user()
  2ea6247e01 acl-util: fix error handling in add_acls_for_user()
  002674387c offline-passwd: use chase_symlinks()
  628db21130 update TODO
  0da322d9a4 man: update docs with the new functions and other enhancements
  7cbb7d62c6 homectl: fix warning about unused function
  06847d0fba TODO: add entry for XZ
  e4a321fc08 journal/compress: remove loop in decompress_startswith_zstd()
  a24153279e journal/compress: fix zstd decompression with capped output size
  b4a11ca3f2 journal: use -EPROTONOSUPPORT for unknown compression
  76cbafcdd4 sd-journal: when enumerating, continue even after an inaccessible field
  04dffc0add user-util: indentation fix
  58afc4f8e4 core: don't acquire dual timestamp needlessly if we don't need it in .timer handling
  d3926f9a46 test: add basic test for clock mapping
  7c0eb30e32 time-util: rework clock conversion logic
  4c967576da update NEWS
  6456dafa12 Merge pull request #16504 from poettering/read-file-ipc
  c400d040ce import: always prefer GNU tar, to avoid cmdline incompatibilities
  3177b9270c fileio: add brief explanations for flags
  49f16281c9 tree-wide: use READ_FULL_FILE_CONNECT_SOCKET at various places
  c668aa8b35 fileio: allow to read base64/hex data as strings
  b93d3f6b81 fileio: add support for read_full_file() on AF_UNIX stream sockets
  f294470262 fileio: add explicit flag for generating world executable warning when reading file
  2e3e2750bb Merge pull request #16519 from yuwata/networkctl-altnames
  739b9a4354 Merge pull request #16353 from yuwata/network-dns-sni
  28266c446a udev: drop unnecessary checks
  ae353ec2f6 udev: save ID_RENAMING= property to database before renaming network interface
  1cdea1a2f7 network: update one log message
  08de6f945d test: run systemd-dissect and systemd-run with log level debug in TEST-50-DISSECT
  3a978b30cd logind: Fix org.freedesktop.login1.set-reboot-to-boot-loader-menu saving to the wrong file in the non EFI case
  ddbab78f9a bus: use bus_log_connect_error to print error message
  711dd5db9e man: update explanation about the format to specify DNS servers
  a574b7d152 resolvectl: use bus_message_read_in_addr_auto()
  7695e2cbbe network, resolve: use bus_message_read_ifindex() or friends
  3dd95ab6c5 util: introduce bus_message_read_ifindex()
  10d4620467 util: introduce bus_mesage_read_dns_servers()
  976009897b util: introduce helper functions to read in_addr from bus message
  e293e755d5 util: drop duplicated inclusion of sd-bus.h
  66479677a9 test-network: add tests for DNS= with port number and SNI
  a747e71c56 resolvectl: show DNS servers with port and SNI
  b1881e8320 resolvectl: make DNS servers can be specified with port number and SNI
  8e56ea4c88 resolve: add DBus properties which support DNS SNI and port number
  95ce1ba87b resolve: add DBus method to set DNS server with port number and SNI
  4e11ddfdd3 network: add DBus method to set DNS server with port number and SNI
  87d6489776 network: save DNS servers specified by DBus interface
  6458176514 network: do not save DNS= entries not match link ifindex
  e77bd3fdff network: support port number and SNI in [Network] DNS=
  8aa5afd20f resolve: read/save port number and SNI from/into link state file
  b6af282475 resolve: compare port and SNI in dns_server_hash_ops
  1b86009298 resolve: also compare port and SNI in dns_server_find()
  da9de7385a resolve: support port specifier in DNS= setting
  395aa34023 resolve: ignore empty server name
  408f8fbc0f util: introduce 'struct in_addr_full' and its helper functions
  a723fb85da util: introduce in_addr_port_ifindex_name_from_string_auto() and in_addr_port_ifindex_name_to_string()
  cbe194b39e resolve: propagate error in link_load_user()
  eced0d2a46 Merge pull request #16518 from yuwata/network-fix-failure-in-updating-mac-address
  2665327a41 travis: compile with -O1 with clang
  d7d717b7e2 docs: Document xdg-autostart parameter X-systemd-skip
  4c0668bc14 Merge pull request #16478 from bluca/dissect_tests
  6a097936b2 docs: Update section about XDG autostart generator
  e6791b5522 Merge pull request #16497 from DaanDeMeyer/mkosi
  7e8279c0a6 Merge pull request #16501 from yuwata/udev-fix-renaming
  807667f7ac network: stop already running engines before updating MAC address
  96fe813c42 radv: introduce sd_radv_is_running()
  48c5398951 networkctl: do not ignore -EOPNOTSUPP when reading netlink message
  ae5b779252 networkctl: sort alternative names
  0ef1adf512 vconsole-setup: downgrade log message when setting font fails on dummy console
  628f08b66d sd-netlink: make timeout message sealed
  d735e4f2d6 Merge pull request #16505 from yuwata/network-manage-foreign-routes-cleanups
  ed4512d009 nspawn: set container_host env vars before user arguments
  a9c9b18a95 networkd: Use NLM_F_ACK on the netlink message to add a neighbor.
  d3f45d130e clang-format: set Break afer enum to false
  4573592ddf Merge pull request #16512 from keszybz/offline-passwd-altfiles
  241947d1b4 shared/offline-passwd: look at /usr/lib/{passwd,group} too
  3e5d2264b5 Move offline-password.[ch] to shared and add test-offline-passwd
  55678b9eae build: skip installation of 2 files if feature is disabled
  0119ab3d6c Merge pull request #16476 from keszybz/qemu-autosuspend-rules
  a8c10331b4 network: replace NDISC -> NDisc in log messages
  5eec0a0810 network: introduce address_exists() helper function
  d15818f227 network: update debug log when foreign routes are received with ManageForeignRoutes=no
  5ff1ef31f2 network: do not enumerate routes if ManageForeignRoutes=no
  97fdae33df udev: do not try to reassign alternative names
  434a348380 netlink: do not fail when new interface name is already used as an alternative name
  1498252614 netlink: introduce rtnl_get/delete_link_alternative_names()
  77547d5313 hwdb: check that uppercase digits are used in modalias patterns
  7f16ef9fba Merge pull request #16490 from yuwata/network-radv-ndisc-cleanups
  457763aa03 hwdb: allow spaces in usb: matches and similar patterns
  dc9e9a18be Merge pull request #16491 from keszybz/udev-logging
  e5f0010659 mkosi: Update help comment in settings files
  172ad053ff mkosi: Keep mkosi.default out of the repository.
  9e79123884 tree-wide: use SYNTHETIC_ERRNO with log_device_* in more places
  46d4149d0f sd-device: use LOG_PRI() in log_device_full()
  b5ef66101a analyze: CAP_RAWIO -> CAP_SYS_RAWIO
  94ec163ad2 timedatectl: do not show (null) if the address of NTP server is not resolved
  ec8bebbcc2 Add autosuspend rules for emulated QEMU devices
  df7667323d udev: change the modalias string for usb devices to include the device name
  d6d4961b01 udev: don't complain when udev_watch_end() is called without udev_watch_init()
  6b9f5f01cb basic/string-table: reduce variable scope
  5992f362bf udevadm: use STR_IN_SET(), add comment
  fe20121a4c sd-device: use strjoin instead of asprintf
  22ba4525d3 udev: tweak debug logs for udev rules
  12254ccab0 man: add more details for IMPORT, PROGRAM and RUN keys
  ba60127df7 udev: accept OPTIONS+= without any fuss
  b6a80b83bc udev: accept IMPORT{}= without any fuss
  13e8a49a58 network: ndisc: any failures in processing event make the link in failed state
  c97785168b network: radv: clean up conf parsers
  19b4864346 hwdb/autosuspend: add missing parenthesis
  d96edb2c6e network: downgrade log level in conf parsers
  4d939d2c84 Merge pull request #16485 from bluca/nspawn_os_release_mounts
  9e54462cd5 Merge pull request #16482 from poettering/coverity-246
  14f1c47a0c nspawn: mount os-release in two steps to make it read-only
  eafc7d6056 nspawn: use access/F_OK instead of stat to check for file existence
  2094cd49c4 shared/os-util: fix comment style to follow guidelines
  cc76bf01e3 basic/mkdir: use uid_is_valid instead of manual check
  40282752a2 Merge pull request #16483 from poettering/man-env-d-no-session
  27806670ef Merge pull request #16480 from yuwata/network-fix-dhcp4-races
  3f13f9159f man: configuration files contain assignments, no directories
  d320bfa558 man: GNOME is usually capitalized
  a449b7198c man: don't claim environment.d/ was about sessions
  3cd4459003 Revert "selinux: cache enforced status and treat retrieve failure as enforced mode"
  8e32ad9557 machine: fix if check
  f63ef93703 execute: fix if check
  0ded0e40ab dhcp4: only renewing lease when the client already has a lease
  330f899079 load-fragment: downgrade log messages we ignore to LOG_WARNING
  89a5385fb7 mountpoint-util: fix error handling
  f766d9af38 network: dhcp4: add two warnings
  153cf04139 network: dhcp4: fix another race with SendDecline=yes
  75be72d139 network: dhcp4: also release old lease in dhcp_lease_lost()
  8d5bb13d78 core: fix invalid assertion
  aeba8dd523 network: fix typo
  2bc148add0 test: exercise RootImage, RootHash and RootVerity in TEST-50-DISSECT
  0f5d24a8b9 test: pre-assemble minimal image for TEST-50-DISSECT at build time
  a5f1d665d7 test: exercise systemd-dissect with GPT and verity in TEST-50-DISSECT
  6939873412 test: exercise systemd-dissect --mount in TEST-50-DISSECT
  42165319b1 update TODO
  95b29f3267 Merge pull request #16396 from yuwata/network-configured-flag
  b8ff0663e8 Merge pull request #16468 from keszybz/two-unrelated-patches
  43bf28741f network: drop doubled white space
  93b0b88c3a network: free address when it is removed
  6906794dd1 network: dhcp4: do not assign new address before old one is not removed
  5d976f5f64 network: do not call link_check_ready() in link_request_set_routing_policy_rule()
  0c816fcc7b network: make link_request_set_nexthop() called from link_request_set_routes() or route_handler()
  659ad3a0af network: do not make link in configured state when no address is assigned
  d98c546dac network: ndisc: split ndisc_configured flag into for addresses and routes
  01c344bdd4 network: ndisc: do not ignore remaining addresses
  571f953934 test-network: wait for addresses are not in tentative state
  39373cb984 network: add debugging log why link is not in configured state yet
  c5fcd8a70a test-network: check assigned address is not tentative state
  491b79aeac test-network: set IPv6AcceptRA=no if no dynamic addresses are not required
  eb01a2dfb1 network: make link_request_set_nexthop() static
  a4623f84ed network: add a debugging log
  feb596b5c3 network: include error code in the log message
  2a877f4560 network: set dhcp6_xxx_configured flag after routes/addresses are assigned
  ee5c1311ee logs: when embedding catalog info in log output use a dash of color and unicode
  a996ead6a2 Merge pull request #16398 from poettering/machined-varlink
  26698337f3 timer: Adjust calendar timers based on monotonic timer instead of realtime
  d3e0662c7d Revert "ci: turn off the "upstream-systemd-ci" ppa"
  06bb441102 test: Add "finish" rule to .PHONY
  76830e2500 Merge pull request #16462 from keszybz/rpm-macro-warnings
  b56a877ef8 test-fs-util: use log_info instead of printf
  d4ff79bbe1 ci: turn off the "upstream-systemd-ci" ppa
  6cdc429454 Merge pull request #16340 from keszybz/var-tmp-readonly
  56a13a495c pid1: create ro private tmp dirs when /tmp or /var/tmp is read-only
  a318a5659a man: document F1 in sd-boot too
  1061fc1c17 rpm: include macro name in errors for two args macros too
  281014b73e rpm: adjust various macros to print macro name in the error message
  8800df5f71 Merge pull request #16430 from mikhailnov/fix-rpm-create-package-macros
  dad2062f40 update TODO
  38ccb55731 nss-mymachines: drop support for UID/GID resolving
  4c2cf15751 man: document new varlink service
  4751364e76 machined: implement user/group lookup varlink API in machined too
  74d1b7d2ad machined: refactor UID/GID machine translation
  a07f18cd30 process-util: make sure procfs_file_alloca() works for non-literal field names too
  56870d324b docs: permit user/group services that do not support enumeration
  16a4a2f8cc update TODO
  08ef688656 analyze: make testing ConditionPathExistsGlob= work
  4519c7c706 update TODO
  77ee1783eb udevadm: beef up deprecation log warning
  a18c7865be meson: do not install testdata when -Dinstall-tests=false
  60b45a80c1 Update .clang-format
  5b72b34708 Make the instructions slightly easier to read
  8ba6c15a82 Merge pull request #16437 from systemd/coverity-gcc-10
  b7067c4d87 coverity: install systemd
  1374448add coverity: switch back to Fedora 31
  46072ae35a repart: include more relevant information in the warning message, fix test
  5553041a62 Merge pull request #16435 from gaoyi1988/master
  6b949d2605 NEWS: mention source mode for MACVLAN or MACVTAP
  ddcdcac519 Merge pull request #16432 from cgzones/selinux_err_fix
  0d3a8bc7eb test: add test case for multi matches when use "||"
  1e67a9c2cd udev: specify the end of value
  d67b1d18fc bus: use bus_log_parse_error to print message
  f2df56bfea namespace: unify logging in mount_tmpfs
  db06c162e8 shared: fix error handling in make_inaccessible_nodes
  3e6e0856cd rpm: avoid hiding errors and output in *_create_package macros
  93406fd379 rpm: avoid odd symbols in EOF indicator
  b159831b61 Merge pull request #16424 from keszybz/cap-bpf-compat
  b0ff0eaa01 Merge pull request #16426 from cgzones/run_user_label
  675fa6ea28 man: fix some manvolnum
  abad72be4d namespace: fix MAC labels of TemporaryFileSystem=
  8d9cbd809d selinux: create standard user-runtime nodes with default context
  7a3e4dc38b basic: add helper function mknod_label()
  5149990e1f NEWS: grammar improvements (#16413)
  5c53766f28 Added MSI Prestige15 A10SC specific keycodes
  d0571b758b Add support for HP Elitebook x360 1040 G6 micmute button
  ed1de7108e Explain how to determine hierarchy type from shell
  5700780389 basic/cap-list: reduce scope of variables
  864a25d99b basic/capability-util: let cap_last_cap() return unsigned integer
  417770f303 basic/cap-list: parse/print numerical capabilities
  76fb53c94a install: fix wrong data type
  a38c68a18a NEWS: drop duplicate entry, add --image= entry
  976efe1b80 NEWS: add date
  a127c6208f userdb: fix dlopen call
  5157d719f0 Merge pull request #16411 from ddstreet/bridge_without_carrier_fails
  5961d35a5b NEWS: add blurb about os-release and $container_host_*
  55aacd502b Merge pull request #15891 from bluca/host_os_release
  001c07cfff test-netowrk: in test_bridge_configure_without_carrier, avoid strange test failures
  48c190822b Merge pull request #16405 from sipraga/master
  02b0109af5 Merge pull request #15955 from anitazha/nullorempty
  4e3376d43a test-network: don't print networkctl output for passing subtests
  62320feb9f Merge pull request #16404 from keszybz/release-246-prep
  2e7090e94d test: bump the TEST-47 sleeps once again
  0d0de133f0 network: add support for MACVLAN source mode
  3994922baf meson: bump version numbers for v246
  72e5190878 NEWS: update contributors list for v246-rc
  9c70fc2164 git-contrib: simplify implementation a bit
  cbc056c819 core: wrap some long lines and other formatting changes
  24e2494407 Merge pull request #16385 from JackFangXN/master
  43b24a0716 sd-device: use log_device_debug_errno()
  4b6607d949 table use table_log_print_error() instead of table_log_show_error
  df83eb546b table add table_log_sort_error()
  d836018a73 table add table_log_show_error()
  c253a95bca Merge pull request #16379 from yuwata/network-dhcp6-delegated-prefix-address-handler
  21d19a7a13 docs: update information where to file bugs against RHEL/CentOS versions of systemd
  2e2f6a01a0 Merge pull request #16143 from fbuihuu/fstab-generator-fix
  5dc60faae5 add error message when bind mount src missing
  3650173fec network: make address_handler() static
  a211ff4b84 network: introduce own address handler for dhcp6 delegated prefix
  2b0bf3ccf8 Merge pull request #16301 from poettering/firstboot-image
  9870cfdf7f Merge pull request #16388 from keszybz/xdg-desktop-fuzz-case
  60e3a5a252 Merge pull request #16390 from keszybz/coverity-and-typos
  dea7f5cc87 xdg-autostart: ignore all empty entries in multi-string entries
  f4e1a42592 man: match parentheses
  d1ca1f7c2a xdg-autostart: avoid quadratic behaviour in strv parsing
  a53f024d71 journald: minor wording tweak in message
  cd990847b9 tree-wide: more repeated words
  0da425df65 networkd: use capitalized "IP" and "TOS" in messages
  8ab0f03266 journal/compress: drop "future" code in zstd compression
  d7b34e3841 all: fix minor typos
  5d043c9fdf update NEWS
  cbe952fe1f update TODO
  737ec51444 TODO
  a122502077 firstboot: add option to turn off welcome text display
  dcfdd62184 man: document the new --image= switch of systemd-firstboot
  3ff9fa591e firstboot: add --image= switch
  827ea52125 mount-util: use UMOUNT_NOFOLLOW in recursive umounter
  e49ee28522 mount-util: add destructor helper that umounts + rmdirs a path
  e2ec9c4d3a namespace-util: introduce helper for combining unshare() + MS_SLAVE remount
  9ecf5d9340 fuzz: add test case that should already be resolved
  cda667722c core: refresh unit cache when building a transaction if UNIT_NOT_FOUND
  3f2e15abc5 sleep: one spelling unification
  77ecc1aaa5 Merge pull request #16380 from yuwata/network-dhcp6-update-prefix-route
  9389a271b7 Merge pull request #16381 from yuwata/dhcp4-renewing
  a240147bdc Merge pull request #16383 from yuwata/network-dhcp6-radv-update-prefix
  7f6e342c93 hwdb: Add Google Pixel Slate (nocturne) (#16377)
  58e6c62191 network: fix memleak
  1d596fdec2 network: do not restart radv engine when adding prefix
  8fc2a5dff4 network: fix indentation
  290696e512 Revert "network: Don't send RA with zero router lifetime when restarting radv"
  c1495f8e9d fix typo
  d469cea3bd network: Don't send RA with zero router lifetime when restarting radv While investigating https://github.com/systemd/systemd/issues/16356, I discovered that networkd stops the radv service before adding or updating prefixes and then starts it again.  This causes networkd to send an RA with a router lifetime of zero, causing the routes to flap on systems receiving the RA for a fraction of a second before radv is started again and proper RAs are sent.  That has the potential to cause issues with latency-sensitive traffic like gaming or VoIP.  This patch adds a boolean argument to the sd_radv_stop() function to control this behavior.  The zero lifetime RA is still sent whenever radv is actually being stopped, but when it is being restarted for a prefix update (from networkd-dhcp6.c), the final RA is no longer sent to avoid the route flapping.
  921693a0f3 dhcp4: do not try to renew address when client has no lease
  ceaec54a3c dhcp4: do not renew address if client is not running yet
  f050c94df0 network: always update acquired prefix route
  1419ff0401 network: decrease indentation level
  cecd68c70f network: fix indentation
  c82012605b Merge pull request #16374 from keszybz/docs-and-networkd
  08bf20287c hwdb: update again for v246
  98ebef62c7 DHCPv4: client add support for DHCP server allow list
  b3077c47a8 Merge pull request #16344 from keszybz/update-utmp-erofs
  c5bc4f77d9 hwdb: add another Logitech M705 mouse variant
  5544cd3199 Merge pull request #16373 from JackFangXN/master
  9a61e8fca2 unit-name: fix a potential memory leak
  1f68f77292 networkd: we should not loop when extract_first_word() fails
  8dc647fd30 man: do not say that tasks are threads and processes
  24c8d4d3f4 man: one more typo
  b37e4d9c87 Merge pull request #16370 from keszybz/tree-wide-spelling
  e26538dd04 network: tc: fix n_prio bounds check
  f987a261b4 userdbctl homectl use table_log_add_error()
  f04a98e13f Fix two typos found by codespell
  bdac560801 tree-wide: drop quotes from around [section]
  e9dd698407 tree-wide: fixes for assorted grammar and spelling issues
  a64911f9b7 travis: install missing deps for the Coverity run
  c5fbdebec6 Merge pull request #16287 from yuwata/udevadm-info-attribute-walk
  4276749dd3 shared/install: do not require /dev/null to be present in chroots
  3da49ad55a catalog: update Polish translation
  ca1d199b48 update-utmp: do not fail on EROFS
  c2a9909377 Define _cleanup_ helper for setutxent()+endutxent()
  bf795c47bc test: use KILL instead of SIGKILL in TEST-52-HONORFIRSTSHUTDOWN
  21c7fe6d12 sd-device: be more defensive in FOREACH_DEVICE_SYSATTR
  2fadbb4535 core: set private section name for automount units
  c2056dd6f9 hwdb: Pavilion 13 x360: Tablet mode and SYSRQ key
  071be2fa9f Merge pull request #15442 from poettering/fido2
  21df146501 udevadm: sort entries in `udevadm info -a` by attribute name
  fadcc12229 sd-device: make FOREACH_DEVICE_SYSATTR() list attributes in subdirectories
  33d943d168 initialize arg_clock_usec
  9e99bfbd5a Merge pull request #16348 from yuwata/news-sriov
  640f3b143d core: check null_or_empty for masked units instead of /dev/null
  71af436c63 NEWS: mention .network [SR-IOV] section
  554a97ba23 NEWS: WithoutRA= is not a boolean option anymore
  a68da22257 NEWS: tweak WithoutRA= description a bit more
  272ac70a21 various daemons: emit Stopping... notification before destructing the manager object
  cc090ca7fe initctl: use _cleanup_ and run()
  e9d9d50cef initctl,update-utmp: define iterator variable in loop
  bc9d1dbfc8 update-utmp,initctl: drop ppid check
  c03ef420fa network: tc: rename several settings which take size in bytes
  25b67032a8 Merge pull request #16343 from jirislaby/master
  cc832f9772 Merge pull request #16338 from keszybz/spelling2
  63b7e7b4ba Merge pull request #16336 from yuwata/ifindex-cleanups
  cbdf02952e NEWS: update document about WithoutRA=
  1447dc625a Merge pull request #16219 from ssahani/network-sr-iov
  74986a0f88 hwdb: Add accel orientation quirk for UMAX VisionBook 10Wi Pro
  52e085af82 tree-wide: "unparseable" → "unparsable"
  13adf35343 resolve: use appropriate type
  5e958e1d6c util: use setsockopt_int() at one more place
  1a6c913676 libsystemd-network: rename index -> ifindex
  7fa69c0a6f dhcp6, radv: only accept valid ifindex
  15e6a6e87b tree-wide: spell "lifecycle" without hyphen everywhere
  37b22b3b47 tree: wide "the the" and other trivial grammar fixes
  838d39af93 network: Allow DHCPv6 client  to start solicit mode
  51115fdc42 l10n: update Czech Translation
  6371e69b49 fstab-generator: introduce an helper to write extra dependencies specified via the mount options
  045c5faf5a fstab-generator: extra dependencies specified in fstab should be applied to the mount unit
  c8fe23d45c update TODO
  4442c26942 man: update homectl man page with documentation for new features
  fe2520fbb5 docs: document new FIDO2 user record fields
  0eb3be4644 homectl: add --pkcs11-uri=auto and --pkcs-11-uri=list support
  2af3966af3 homectl: add acquired fido2 PIN to user record
  93295a2501 homectl: split out pkcs#11 related code bits into own .c/.h file
  c98811d837 homectl: rework how we log when doing a home directory update
  8e62dfb12a homectl: do generic error handling/retry also when creating a home directory
  f737186ab1 homectl: show touch emoji when asking for PKCS#11 protected auth path
  85b1294488 pam-systemd-home: print helpful message when token's PIN is locked
  7b78db28e5 homed: add support for authenticating with fido2 hmac-secret tokens
  1c0c4a43c6 homectl: add support for enrolling FIDO2 HMAC-SECRET tokens
  5e4fa456fa user-record: add fields for FIDO2 HMAC authentication options
  af4fbd463f build-sys: add libfido2 as optional dependency
  c0bde0d240 user-record: rename JSON field "pkcs11Pin" to "tokenPin"
  d00f318323 user-record: securely erase pkcs#11 when assigned NULL too
  7b8d55b72c homectl: add missing log messages when json_variant_format() fails
  c63ec11bf5 pkcs11-util: reduce scope of a variable
  1146b664e6 macro: add new FOREACH_POINTER() macro magic
  428d32afea locale-util: add support for touch emoji
  830ffbce1b doc: add recentry introduced transient settings
  9457b6bb21 Merge pull request #16303 from poettering/dbus-util-split
  3d2c26925f test-network: add tests for SR-IOV
  c3a5025dc6 network: add MACAddress= setting in [SR-IOV] section
  e64b31c848 network: add VLANProtocol= setting in [SR-IOV] section
  518cd6b527 network: Introduce SR-IOV
  5908ddd763 sd-netlink: Add SR-IOV netlink properties
  b46d8c1c70 udev: spi: include chip select number in ID_PATH
  d17eabb105 Fix build with µhttpd 0.9.71
  116739cfb6 Merge pull request #16316 from yuwata/backlight-use-actual-brightness
  5c236388c3 update TODO
  6c3a19d5b3 Merge pull request #16313 from yuwata/network-move-ipv6ll-gen-mode
  7233e91af0 core: store timestamps of unit load attempts
  f93dd4b940 Merge pull request #16282 from poettering/repart-copy-blocks
  437b9a7f75 backlight: read current backlight brightness from 'actual_brightness' attribute
  daa227a320 backlight: call log_setup_service() before logging
  74f1bb5c9f backlight: use SYNTHETIC_ERRNO() macro
  40af3d020f shared: split out property get helpers
  9176326ba2 shared: split out code for printing properties
  807542bece shared: split out code that maps properties to local structs
  9b71e4ab90 shared: actually move all BusLocator related calls to bus-locator.c
  c664cf5607 shared: split out BusObjectImplementor APIs
  7aee1e7304 hwdb: adjust touchpad edge detection for X1Tab3 (#16310)
  aa0b850bca NEWS: minor fixes
  6f6296b93f network: move IPv6LinkLocalAddressGenerationMode= to [Network] section
  3ea58e010d NEWS: add several entries about networkd
  26b0fda9b7 test-repart: allow the test to pass on non-amd64 architectures
  e4f8d5e01f shell-completion: add missing verbs for networkctl
  8f843190ff test: bump the timeout for systemd-hwdb-update.service under ASan
  0e31a6c2ad Merge pull request #16142 from poettering/random-seed-cmdline
  bed0b7dfc0 pid1: warn if people use User=nobody (#16293)
  7143b95552 efi: define cache functions inside EFI_ENABLE ifdef
  cb713f1696 tree-wide: spellcheck fixes
  7f56c26d10 NEWS: reorder entries with some minor additions
  0cffae953a core: add device mapper to allow-list with DevicePolicy=closed and RootImage
  b47261e5cb update TODO
  e78228b1b0 update TODO
  10f9436c2d Merge pull request #16281 from poettering/logind-cache-more-efi
  0090b551e6 Add quotes for -n
  22aa58adc9 JOURNAL_FILE_FORMAT: minor markdown fixes
  1f19ae0ffb NEWS: add more items for 246
  af2697e83d logind: also cache LoaderEntryOneShot EFI variable
  e8df4eee65 efi-loader: cache LoaderConfigTimeoutOneShot too
  6eea6e30ab tmpfile-util: typo fixes
  95fc17bf46 util: add missing header guard
  12d14b7373 Merge pull request #16096 from poettering/journal-hash-fix
  a79be2f807 hwdb: update for v246
  7caaf44777 update TODO
  757bc2e4c1 repart: add new CopyBlocks= setting
  3f11426f52 Merge pull request #16275 from yuwata/network-deprecate-netdevsim
  fdf3e48c44 udev: split attribute assignment for MMC cards
  6d88513e6b portabled: create temp file for unit, not directory
  823e917f13 selinux: check mac_selinux_init() in tests
  0986bb9b95 Merge pull request #16278 from keszybz/fix-man-links
  66ed28d332 Merge pull request #15624 from poettering/hostnamed-instant
  98506a41fe Merge pull request #15697 from OhNoMoreGit/fix-path-units
  5c0102f83f update TODO
  c85cf04fa3 compress: do something roughly reasonable when building without compressor
  3afe5c00a5 coredump: use log_error_errno() where appropriate
  d80b051cea tree-wide: add new HAVE_COMPRESSION compile time flag
  70cd1e561c docs: document the new journal file format additions
  bbcd38e41e docs: import journal file format docs from fdo wiki
  8653185a9e journal: support zstd compression for large objects in journal files
  0dbe57ee86 journal-file: when individual hash chains grow too large, rotate
  4ce534f4cd journal: use a different hash function for each journal file
  7851ec6634 journal: make signature arrays const
  20b0acfacd journal: rename hash64() to jenkins_hash64()
  f4474e004d journal-file: rename return parameters to ret_xyz
  5030c85a3e journal-file: also show field hash table size in debug output
  e958c05703 journal-file: simplify boot ID acquiring
  cde8c5f722 journal: store NE hash instead of LE hash in Match object
  a76560915f journal-file: use FLAGS_SET where appropriate
  e9ece6a0e3 journal: fix definition of _OBJECT_COMPRESSED_MAX
  d1d8f0f369 macro: add CONST_MIN() similar to CONST_MAX()
  4a5a01ccdd man: reword awkward sentence
  55cf7779f2 man: fix various internal references
  b7a4734551 man: fix links to various external man pages
  f49bead3b0 Merge pull request #16257 from keszybz/two-fuzzer-issues
  b7d81d19cc Merge pull request #16249 from bluca/root_verity_sig
  d7f4ad203a hostnamed: minimize caching of /etc/hostname, /etc/os-release and /etc/machine-info
  aa994368c9 hostnamed: don't cache local hostname either
  a055076988 ci: free up some resources on Pipelines
  efa5bef285 ci: switch to Ubuntu Bionic on Semaphore
  440988666c test-network: remove unused config
  59a9ef1022 network: deprecate netdevsim support in .netdev config
  d4d55b0d13 core: add RootHashSignature service parameter
  c2923fdcd7 dissect/nspawn: add support for dm-verity root hash signature
  035e8e50d7 veritysetup: add support for dm-verity root hash signature
  e60d3b13df Merge pull request #16265 from Werkov/fix-16248
  fd7c7fc8ee Merge pull request #16271 from yuwata/network-cleanups-around-link-get
  e41de5e491 missing: Add new Linux capabilities
  6b000af4f2 tree-wide: avoid some loaded terms
  f23810da20 fuzz-udev-rules: -ENOBUFS should be accepted too
  85fbebe61a journal: fix buffer overrun when urlifying
  f50f597217 network: fix typo in comment
  7936917e3e network: do not update operstate when netdev is not ready
  e856ed00f9 network: fix assertion in link_get()
  25b831bac8 network: check that received ifindex is valid
  d184fb39b6 test: Test memory limit parsing
  67e2baff6b cgroup: Parse infinity properly for memory protections
  b18573e16f ci: bring back Coverity part 2
  595cb4211a ci: bring back Coverity
  c4e90266db Merge pull request #16093 from yuwata/network-htb-add-settings-15213
  f9044b74c5 Merge pull request #16106 from yuwata/network-tc-ets
  f83803a649 Merge pull request #16238 from keszybz/set-handling-more
  41d1f469cf log: introduce log_parse_environment_cli() and log_setup_cli()
  3f8ed9fd96 update TODO
  18d9cee002 man: document systemd.random-seed=
  d247f232a8 core: add new systemd.random_seed= kernel command line option for seeding entropy pool
  4dd055f907 random-util: add common helper random_write_entropy() for crediting entropy to the kernel's pool
  45250e66cc pid1: don't apply "systemd.clock_usec" kernel cmdline parameter outside of PID 1
  97f1c6af8c random-seed: use ERRNO_IS_NOT_SUPPORTED() where appropriate
  e198eba7c2 sysv-generator: reduce scope of variables
  80ce54adaf socket-proxy: use structured initialization in one place
  add74e8929 basic/hashmap,set: propagate allocation location info in _copy()
  35e601d4f9 tree-wide: use set_ensure_consume() in various places
  39dbd0c74c networkd: take ref immediately after storing item in set
  d02fd8b1c6 core/bpf-firewall: use the correct cleanup function
  648c339c49 logind: fix possible memleak of message if the message was already in the set
  d378ef708b portable: rework set handling in portable_detach()
  ab9dd0b997 resolved: fix memleak on duplicate host lines in /etc/hosts
  ceb17827fa resolved: simplify allocation failure handling in dns_stub_process_query()
  b8b46b1ce5 basic/set,hashmap: pass through allocation info in more cases
  fcc1d0315d basic/set: add set_ensure_consume()
  a1ba8c5b71 feature to honor first shutdown request to completion
  7bf6babfa2 Merge pull request #16112 from poettering/nss-systemd-block-fix
  bc8d57f290 Merge pull request #16223 from cgzones/user_selinux
  3d9fbea43e selinux: update mac_selinux_free()
  1cdc42f283 hwdb: add another Logitech G502 Hero variant (#16256)
  0d0248c665 Merge pull request #16246 from benzea/benzea/xdg-autostart
  21856e3462 Merge pull request #16213 from yuwata/network-cleanup-link-state-file
  87d25bdead make-autosuspend-rules: restore compatibility with Python3 < 3.6
  db3b8d5d41 fuzz-udev-rules: rewrite to not require root privileges
  a9ba0e328f Make failures of mac_selinux_init() fatal
  a11bfc17dc Initialize SELinux in user instances
  c238a1f5f1 udev: split rules object creation and loading
  037b0a47b0 userdb: replace recursion lock
  6e78726e20 nss-systemd: skip /etc/gshadow look-ups when we just need the GID of a group
  88d775b734 util: add dlfcn-util.h
  21385e639a man: replace perl bug tracker link that went away with link to paper
  92d64d1444 man: s/PROGRAMM/PROGRAM/
  311a0e2ee6 Revert "cgroup: Allow empty assignments of Memory{Low,Min}="
  73083ca238 portabled: implement container host os-release interface
  e1bb4b0d1d nspawn: implement container host os-release interface
  34e0d56ce2 Container interface: document exposing the host's os-release
  b3b1a08a56 nspawn: use mkdir_p_safe instead of homegrown version
  17b99e377b basic/mkdir: introduce safe recursive variants
  3d0c8750c5 networkctl: display DHCPv4 server address
  fd1f3b3eed dhcp: fix entry name in parsing lease file
  46986251d6 network: drop duplicated information from link state file
  5202be27ee sd-network: drop unused functions
  862e710820 networkctl: use lease file to get DHCPv4 client ID
  d41fa6ee91 networkctl: use lease file to get DHCPv4 address
  35cab5f99d networkctl: load DHCPv4 lease file and use timezone data from the lease file
  ef0daa1129 libsystemd-network: move prototypes of dhcp_lese_save/load() to network-internal.h
  cc479760b4 Revert "job: Don't mark as redundant if deps are relevant"
  9d9a9500cd xdg-autostart: Ignore all files with GNOME autostart phase
  566cb7e23b xdg-autostart: Fix info message if Type= is not Application
  0389f4fa81 core: add RootHash and RootVerity service parameters
  6fe01ced0e nspawn: mkdir selinux mount point once, but not twice
  75ae672bb2 Merge pull request #16196 from mrc0mmand/travis-simplification
  5c9918aca0 Merge pull request #16216 from nabijaczleweli/make-a-fuss
  65804d6aff selinux-util: tweak log_enforcing_errno() to return the errno passed in or 0 when in non-enforcing mode
  9e1732924d test-functions: read /usr/etc/nsswitch.conf if /etc/nsswitch.conf does not exist (#16195)
  affa893da0 man/sd-makefs: link to btrfs.wiki.kernel.org for btrfs-man5, since the man-pages link is dead
  2edc494216 Merge pull request #16237 from keszybz/revert-message-type-check
  c2c193f79a Merge pull request #16179 from keszybz/auto-suspend-hwdb
  b98f393d88 bus-message: add macro for calculation of offset from the page
  b17af3e503 bus-message: avoid dereferencing a NULL pointer
  a9c9f79ece Revert "bus-message: immediately reject messages with invalid type"
  6cd55d6f74 shared/bus-util: fix misleading error handling
  e2ab8e09c8 udevadm-monitor: simplify creation of arg_tag_filter set
  804a436582 fuzz-netdev-parser: add test case for earlier version of preceding patches
  44e9342078 netdev/wireguard: do not invalidate peer on invalid syntax
  de7fef4b6e tree-wide: use set_ensure_put()
  0f9ccd9552 basic/set: add set_ensure_put()
  aaffd34933 sd-device: use set_put_strdup() in one more place
  29bd6012f1 resolved: introduce dns_transaction_gcp()
  7b33ff7388 make-autosuspend-rules: remove one instance of "whitelist"
  88936ed6f9 rules: remove 61-autosuspend-manual.rules
  39d5b72e32 hwdb: enable autosuspend for Wacom Pen and EMV Smartcard Reader
  aa549ff397 test: also verify the generated autosuspend hwdb file
  79dc5d35dd tools: rewrite make-autosuspend-rules.py and add udev rules
  5fde0607a8 Merge pull request #16235 from yuwata/network-fix-warning-16224
  bc694c06e6 log: Prefer logging to CLI unless JOURNAL_STREAM is set
  7830b5c103 Merge pull request #16059 from keszybz/resolve-single-label-names
  b7e8286b4a Merge pull request #15926 from fbuihuu/rework-show-status
  8db8f99eb9 man: add note regarding editing user groups
  c4e585a36b network: add missing break
  1e42c269cb Merge pull request #16239 from keszybz/cleanups
  e6175fbe45 ci: pass -Werror using CFLAGS
  8d9982e30d network: drop unnecessary "&"
  a51a3247e5 man: Fix a typo of session
  c2ad8c0978 man/sd-makefs: also mention /sbin/mkswap
  2bd5e1b272 man: document the new option
  3b5bd7d6b8 resolved: optionally allow single-label A/AAAA queries
  c2f1e83e27 resolved: drop bit-field annotations for fields in Manager
  7877e5ca7c resolved: add dns_query_candidate_freep()
  801d25ef0f man: rework description of Domains=
  876c75fe87 udev: do not execute hwdb builtin import twice or thrice
  b753e8358c test-network: add tests for ETS
  d474aa51bf network: tc: introduce Enhanced Transmission Selection (ETS)
  4dec921889 sd-netlink: add netlink properties of Enhanced Transmission Selection (ETS)
  3a712fda86 sd-boot: Add small comments after device-specific key macros
  034d0eb962 Merge pull request #16191 from poettering/repart-spec
  bc3b868b42 Merge pull request #16208 from yuwata/udev-fix-16207
  cc17c4c9a1 network: do not fail to configure non-nl80211 wifi interfaces
  845d784e54 network: drop casting in memcpy()ing IPv6 address
  5eb6ef8b45 udev: udev_event_apply_format() always make buf NUL terminated
  bc568a7a35 udev: fix error handling of sd_device_get_parent()
  2a71d57f4e network: clean-up DHCP lease server data configuration
  d5da3ada8e Merge pull request #16061 from filbranden/standalone1
  2ee7e54b9e test-network: add tests for HTB settings
  d9eacc1cdd network: tc: add more settings for HTB
  120b5c0bbe network: DHCPv6 - Add support to set token on the LAN interface
  8d2d64166e efi: use stub for cache_efi_options_variable if !ENABLE_EFI
  ffc8eeae62 USER_RECORD: fix typo
  0116d27a30 travis: sort dependencies
  305efcaf3c travis: drop stuff moved to GH Actions
  eeb8c7accf travis: use a matrix for similar jobs
  fb08381c14 repart: if now minimal size is specified, default to 10M
  e031166e15 repart: add simple specifier expansion in Label=
  cdfd853744 update TODO
  d9b6decd88 README: add reference to systemd.io
  77169ed09b update TODO
  d8a9dd0dc1 hwdb: Mask rfkill event from intel-hid on HP platforms
  c73624a553 man: do not say that systemd-modules-load.service only uses static config
  6fe95d3020 sd-boot: Work around malformed CR key code
  7daaf56761 hwdb: Add accel orientation quirk for Odys Fusion Win 12 2in1
  cb24fad361 Merge pull request #16170 from keszybz/man-user@
  387536b3a9 man: mention systemd-user-runtime-dir in user@.service too
  7283fbfd0c efi: Skip parsing SystemdOptions if there's an error getting it.
  25c86e4c39 networkd: Add missing match_wlan_iftype check to network_verify
  f1a20afacd man: Document the crypttab keyfile syntax specifying a device
  550c14fedd Merge pull request #16163 from DaanDeMeyer/resolved-edns-info
  6df8a6c753 Improve message for scheduled shutdown or reboot
  b4564641be hwdb: generate a hwdb file instead of rules for autosuspend
  4677c3da97 man: really fix conditional in homed.conf
  4f0ef40deb man: drop obsolete HAVE_PYTHON conditional
  a2095c0698 update-man-rules: properly filter out directives index again
  4f571b4061 resolved: Log the feature level we're downgrading from as well
  209b2592ed efi: Cache contents of EFI variable SystemdOptions
  6d0f38017c test: in test_bridge_configure_without_carrier, ignore setup_state
  e034886b80 resolved: Don't complain too much when downgrading from EDNS
  ac4e03d45b login: filenames in /run/systemd/users are uids
  a2c7035976 cifuzz: build fuzz target with UBsan and MSan as well
  135a1add7b turn off fuzzit part 2
  60950f3c25 Merge pull request #16144 from mrc0mmand/gh-actions-followup
  86a23f38ab ci: tweak the dependency installation
  3d0a45d5da ci: tweak the compilation options
  4e1a13db89 ci: move the build check script to workflows directory
  0664249ffc ci: do the compiler-detection magic in the test script
  ed6727d40a Merge pull request #16137 from poettering/sleep-fixlets
  119111645b Merge pull request #16136 from mrc0mmand/travis-cleanup
  35cd3db4e5 ci: add homed/zstd dependencies
  aab86b12dd github: move the clang/gcc build check to GH Actions
  241616d57d Merge pull request #16124 from ssahani/dhcpv6-duid
  43bba15ac8 pid1: rename manager_set_{show_status,watchdog}_overridden() into manager_override_(show_status,watchdog}
  0bb007f7a2 pid1: add a new SetShowStatus() bus call to override/restore show status mode
  3ceb347130 pid1: introduce an helper to handle the show-status marker
  2c4702057b sleep: pass error we see to log function
  1326de0158 sleep-config: modernize destructors
  c732e87979 sleep-config: downgrade log level in can_s2h()
  c02540dc9e sleep: clean up debug/error logging
  6f9120ad61 sleep-config: return correct error code
  c0d8fbfa34 sleep-config: add more debug logging
  48c6399ad8 github: rename CIFuzz workflow file to cifuzz.yml
  b31fba440c travis: bump Ubuntu release to Bionic
  2b918da5a1 journal: drop the assert-only variable completely
  5a573f2b91 travis: replace set (+|-)e with travis_terminate
  0f2d351f79 tree-wide: port to fd_wait_for_event()
  db64ba81c6 meson: build standalone version of systemd-tmpfiles
  8ef8f3d5a7 meson: add a new -Dstandalone-binaries=true option
  639118854f networkctl: Display DHCP6 DUID
  a9deab2eec sd-network: Introduce APIs to get DHCP6 DUID
  7e738e7b70 network: DHCP6 - save DUID to state file
  6b7d5b6eaf network: DHCP6 - introduce DHCP6 DUID to string
  24bd74ae03 Merge pull request #15940 from keszybz/names-set-optimization
  4c150809eb update TODO
  e47add9edc test: make TEST-02-CRYPTSETUP a bit more robust
  bb9244781c core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts
  6a881daf85 docs: Change suffix for desktop applications to support non-transient services
  d5da196319 journal: simplify vsnprintf() ret value check
  97033ba455 pager: set PR_DEATHSIG for pager to SIGINT rather than SIGTERM
  c85b6ff1b2 docs: point contributors to list of most recent systemd releases
  51b367b86d Merge pull request #16111 from poettering/bitlck-fix
  9664be199a Merge pull request #16118 from poettering/inaccessible-fixlets
  2befe404d4 Merge pull request #16120 from poettering/udevd-fixlets
  e2ea005681 core: do not touch instance from unit_choose_id()
  934ef6a522 core: create socket service instances with the correct name from the start
  ada4b34ec7 core: rework error messages in unit_add_name()
  d383acad25 core: when adding names to unit, require matching instance strings
  4562c35527 core: store unit aliases in a separate set
  02939ee001 Merge pull request #16087 from mrc0mmand/travis-build-check
  dad28bffd6 tree-wide: check POLLNVAL everywhere
  dfa64b64a7 tree-wide: mark assert()-only variables as unused
  b36746c90e travis: check build with various compiler options
  45204921be Merge pull request #16104 from ssahani/dhcpv6-iaid
  2ffadd3cee AppArmor: Support for loading a set of pre-compiled profiles at startup time
  d689f0f20a Merge pull request #16058 from Werkov/fix-memory-protection-default
  4f4f37b20d Merge pull request #16046 from bluca/dissect_squashfs_verity
  2233c2703c man: udevadm: mention non-zero exit code on settle
  60b316b1e9 test-network: wait 2min for the bridge being in configured state
  69876f94ab doc: Try to clarify automount dependency confusion
  fa0e23c900 docs: use bool in varlink interface definition
  48b747fa03 inaccessible: move inaccessible file nodes to /systemd/ subdir in runtime dir always
  b8c9074534 login: use ERRNO_IS_PRIVILEGE() where appropriate
  d582afe144 mkdir: use log_full_errno() where appropriate
  6b2229c6c6 udev: set fewer process properties
  fe56acd8e0 udevd: use cpus_in_affinity_mask()
  57b611a5bf Merge pull request #16074 from msekletar/freezer-test-flakes
  6930d069a3 cryptsetup: pass selected mode to crypt_load() when doing LUKS
  5af39ac850 cryptsetup: try to load bitlocker superblock only if requested
  8b8ae7959d hwbd entry for  Dell Inspiron Chromebook 14 2-in-1 sensor (#16109)
  f01994380e login: allow individual USB ports to be assigned to seats
  e7cbe5cb9e dissect: support single-filesystem verity images with external verity hash
  331ee15f18 networkctl: DHCPv6 - display IAID
  01dd138031 sd-network: Introduce API to get DHCPv6 IAID
  18d8a2cf30 network: DHCPv6 - export IAID to state file
  d69d4038ec dhcp6: Provide method to access IAID
  ed66590d15 Merge pull request #16080 from YmrDtnJu/9p
  bf76080180 core: let user define start-/stop-timeout behaviour
  8b5616fa91 Merge pull request #16073 from keszybz/shell-completion
  d3d0b763b4 Merge pull request #15953 from keszybz/gdb-script
  44a419540e pid1: rework handling of m->show_status
  0d6d3cf055 pid1: rename manager_get_show_status() to manager_should_show_status()
  b309078ab9 pid1: make more use of show_status_on()
  5a36324962 Merge pull request #16047 from poettering/udev-ro-block
  707dc7949c update TODO
  a4d1bef73f Merge pull request #16085 from ssahani/network-client-id
  6cc27c29ad Add 'bitlk' option to mount Bitlocker drives with cryptsetup.
  c15ab81ed9 mount-tool: Replace fstype_is_{network,api_vfs} with fstype_is_blockdev_backed
  ac2474e4ff basic: New function fstype_is_blockdev_backed for fstypes that need a blockdev
  b11e98037c hwdb: add HP Spectre x360's mic mute switch
  b1481b2092 Merge pull request #16092 from yuwata/network-accept-local-16090
  a34a2933e9 man: single-char parameters take no '='
  048b4dc2e1 units: tweak udev unit descriptions
  95ac523030 udev: optionally mark all block devices read-only as they pop up
  b1806441bb dissect-image: wait for udev for single filesystem images too
  2153bbc81a networkctl: Display DHCP4 client ID
  daec96821d sd-network: Introduce API to access DHCP4 client ID
  5dfaf89b5b network: DHCP4 client ID save in state file
  29f69c5741 test-network: add test for IPv4AcceptLocal=
  94d76d071e network: introduce IPv4AcceptLocal= setting
  a07e962549 homed help --uid short option
  7887e58051 test: avoid failing due to unexpected precision
  6495ceddf3 Merge pull request #16033 from poettering/parse-int-fixlets
  a742f9828e resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver
  9141594cae lldp: fix assertion checking argument for sd_lldp_set_neighbors_max()
  7487b48688 man: fix typo Takse -> Takes
  3a9692dd05 shell-completion: add homectl for bash
  3ac33bc966 kernel-install: extend --help
  ea9f36ac83 Merge pull request #15378 from msekletar/udev-kill-signal
  2884836e3c core: fix the return value in order to make sure we don't dipatch method return too early
  a0d79df8e5 tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw
  42e57a4eb2 test: add test for parse_uid_range()
  53c6db99fa tests: beef up integer parsing tests
  fc80cabcf5 parse-util: also parse integers prefixed with 0b and 0o
  60eb1f0728 parse-util: rewrite parse_uid_range() on top of parse_uid()
  f5979b63cc user-util: be stricter in parse_uid()
  c44702a8bd parse-util: rewrite parse_mode() on top of safe_atou_full()
  aa85e4d3ce parse-util: make return parameter optional in safe_atou16_full()
  c78eefc135 parse-util: allow '-0' as alternative to '0' and '+0'
  707e93aff8 parse-util: allow tweaking how to parse integers
  3611ed7378 test: add integration test for udev event timeout
  e209926778 udev: make signal that we use to kill workers on timeout configurable
  0ce8092109 Merge pull request #15466 from elmarco/dhcp-leases
  b3753406c0 turn off fuzzit
  d9ce1c2493 networkctl: print DHCP leases
  090c923b4d networkctl: factor out link_get_property()
  7be3261222 sd-dhcp-client: add sd_dhcp_client_id_to_string()
  aaec2d7b9b macro.h: add sizeof_field() helper
  00ebe01156 sd-dhcp-client: make struct sd_dhcp_client_id reusable
  cf72a78660 networkd: expose DHCPServer interface on links
  38ee31a6e4 networkd: start a DBus interface for the DHCP server
  36d35f2259 sd-dhcp-server: notify callback on lease changed
  5b03043a75 sd-dhcp-server: add sd_dhcp_server_set_callback()
  3cd5924c85 network: make link become configured state when at least one dynamic protocol provide an address
  168561f2eb change fs/file-max to LONG_MAX instead of ULONG_MAX
  161bc1b627 Merge pull request #16057 from keszybz/resolvectl-sorted-no-nta
  bb9a9e33c9 Merge pull request #15171 from ssahani/tc-qfq
  0d63e7dd0b Merge pull request #16056 from keszybz/minor-doc-updates
  ecc04067f9 seccomp: filter openat2() entirely in seccomp_restrict_sxid()
  7ade8982ca core: remove support for ".include" stanza
  c643bda5ec network: read driver name from ethtool
  33bece166c basic/sort-util: adorn qsort_safe with a prefix underscore
  bacafb0990 pstore: use typesafe_qsort
  eb10767565 resolvect: sort status output by link number
  c9d243cdef resolvectl,systemctl: reduce scope of variables
  6cf3011c6c Introduce strcasecmp_ptr() and use it in a few places
  6773049a4c resolvectl: do not show NTA lists in status
  891ff9633f test-network: add tests for QFQ
  4d7ddaf97b network: tc: introduce [QuickFairQueueingClass] section
  b12aaee5ab network: tc: introduce Quick Fair Queueing (QFQ)
  c33f1e5a3f sd-netlink: add netlink properties of Quick Fair Queueing (QFQ)
  6161b35d5e Merge pull request #16048 from poettering/conf-parser-mtime
  c9e0695675 core: set source_mtime after load dropins
  4f9ff96a55 conf-parser: return mtime in config_parse() and friends
  5aca2e6733 conf-parse: fix pretty bad typo
  22ed4a6d9a fs-util: add stat_warn_permissions() that operates on struct stat instead of fd
  7183b22f12 Merge pull request #15996 from yuwata/network-dhcp6-route-metric-15295
  53aa85af24 cgroup: Allow empty assignments of Memory{Low,Min}=
  db2b8d2e28 cgroup: Make empty assignments reset to default
  21c8397694 tests: Fix description of test units
  eee9b30af4 basic/efivars: try re-reading efivars without delay first
  75f6d5d87e fd-util: be more careful with fclose() errnos
  112bed84bf update TODO
  927b9b8f63 man: add note that emergency.target inherits mount state
  41a7c3bf5d units: uppercase the description
  b68edd3006 man,mkosi: bump Fedora version
  68f6c58354 test: temporarily block test 48 on Ubuntu's autopkgtest
  8dd91cb55b network: drop an unused function
  c24dd73952 network: move DHCPv6 related conf parsers to networkd-dhcp6.c
  bdad94d0d6 network: set both dhcp_route_metric and dhcp6_route_metric by DHCP.RouteMetric= for backward compatibility
  1bf1bfd958 network: add DHCPv6.RouteMetric=
  132be2b868 network: use uint32_t instead of unsigned for route priority
  d06661ab66 Merge pull request #16030 from yuwata/network-read-mtime-of-dropin-configs-15521
  397288e3eb Merge pull request #15991 from keszybz/uids-gids-only-decimal
  9f83091e3c network: also read mtime of drop-in configs
  c4473dec34 network: do not propagte error on stat()
  63e2d1714e udev: single binary replacing udevd and udevadm
  0e77fc66bc network: fix double free in macsec_receive_channel_free()
  b9d19abd38 Merge pull request #16029 from yuwata/network-wireguard-without-peers-15786
  6597cb324a Merge pull request #15990 from jwrdegoede/hwdb-accel-quirks
  da3509f0f5 test-network: add test for wireguard without peers
  50254f5500 network: wireguard: set ListenPort= when no peers are configured
  dc851c00c3 Merge pull request #15982 from keszybz/shell-completion-and-help
  f3e4b1e07c Merge pull request #15884 from ssahani/dhcpv6-vendor
  a8b46548e6 Merge pull request #15993 from mrc0mmand/news-update
  fdd156dd99 tests: add a testcase triggering https://github.com/systemd/systemd/issues/15968
  1d16f661eb NEWS: fix several typos
  156a5fd297 basic/user-util: always use base 10 for user/group numbers
  f7091f458e loginctl: define loop iterators in the loop header
  a7a8dcffc2 hwdb: Add accel orientation quirk for Trekstor Surftab Twin 10.1 ST10432-8
  b5f829a2da hwdb: Add accel orientation quirk for Toshiba Encore WT10A tablet
  aa0cb635f1 network: L2TP fix crash
  9774347b57 Fix typo.
  2cac801f0f stat-util: trivial empty_or_null() tweaks
  b054e69bf9 Check ambient set against bounding set prior to applying ambient set
  bed695375a udev: when the BSD lock on a block device is taken, don't complain
  66fcfdfde7 core: add forgotten return in error path
  05dd19fad3 shared/efi-loader: remove check that uses absolute tick value
  753a71ad1d gpt: include homed GPT partition type in well-known partition table
  3668722049 units: don't set PrivateNetwork= in systemd-homed.service
  2bca2d77d3 resolved-dns-query: remove dns_query_candidate_is_routable
  a3f6020432 sd-network: fix inverted error message
  a7a9fe3c93 network: allow empty assignment to PreferredLifetime=
  8df6fc1241 Update resolvectl zsh completion
  c1a83277d0 shared: treat generator units as vendor units
  1f382d818d tree-wide: fix bad errno checks
  667c207683 bus-message: immediately reject messages with invalid type
  116a8eadb6 bus-message: fix negative offset with ~empty message
  4d5779d886 load-fragment: fix a typo
  c8b6de003a NEWS: retroactively document Family=
  cf6b8e6ec5 man: fix dir name in sysctl.d(5)
  6d009b7a25 journalctl,elsewhere: make sure --file=foo fails with sane error msg if foo is not readable
  cf786ef164 makefs: log about OOM condition
  0b1839822f blockdev: propagate one more unexpected error
  d78ce949d0 repart: don't insist on coming up on partition label ourselves
  9e1363fcc6 journal: fix dropping first record during upload to remote journal
  50cb4e418d meson: initialize time-epoch to reproducible builds compatible value
  76abe079b7 limit-util: quieten a very common debug message that is misleading
  b3e484a3b1 shared: fix integer overflow in calendarspec
  0c29eea969 repart: suppress complaints about lack of BLKRRPART when operating on regular file
  3db52f5ed8 repart: explain when we exit early and don't do a thing
  d99cba3aaa mount: introduce mount_is_nofail() helper
  7bc4bcea15 mount: default startup dependencies and default network ones are orthogonal
  7fe617fa53 mount: introduce mount_add_default_ordering_dependencies()
  e1c091b6d4 automount: fix handling of default dependencies for automount units
  ae05a137c9 mount: let pid1 alone handle the default dependencies for mount units
  f1fb197176 mount: mount unit activated by automount unit should be only ordered against the automount unit
  c9bcc69703 generator: don't generate device dependencies for extrinsic mounts
  ebac09ea0a fstab-util: introduce fstab_is_extrinsic()
  a20e4ea0ed device: drop refuse_after
  2799fffac1 man: drop some left-over mentions of StandardOutput=syslog
  144aff9c3b sd-netlink: remove unused RTNL_WQUEUE_MAX define
  34ca8df8e1 test: Add return 0 to main() function (even it is not strictly necessary)
  6e03f328a9 network: 'cur' variable cannot be null, so simplify code
  8d0c97f6ca tree-wide: Initialize _cleanup_ variables if needed
  4f174e49ae netlink: Fix assert condition on n_containers
  3905ce532c journald: Increase stdout buffer size sooner, when almost full
  5a37eb7c61 core: don't bind varlink socket if running in test mode
  33fff72ce6 pam_systemd: also print debug lines when ending a session
  ba9af79ccb pam_systemd_home: use correct macro for converting ptr to fd
  6199235489 Fix misuse of PAM_PROMPT_ECHO_OFF in systemd-homed
  c180a2c452 shared/ethtool-util: hush gcc warnings about array bounds
  1addba4aac core: fix compilation with gcc -O3
  9c46b97161 random-util: use ERRNO_IS_NOT_SUPPORTED() macro
  d85f9093d2 tmpfiles: clarify that "!" lines are filtered before collisions are checked
  2fac966a5c man: mention the exclamation mark and minus sign literally, to make things searchable
  4f61be3373 man: clarify that exit status name mappings are unaffected by SuccessExitStatus=
  b747d74a41 seccomp-util: add new syscalls from kernel 5.6 to syscall filter table
  c30d8caf8b tree-wide: Replace assert() by assert_se() when there is side effect
  b6e8e3be7e networkctl: use uint64_t for link speed throughout
  be66ce6089 tree-wide: use CMSG_SPACE() (and not CMSG_LEN()) to allocate control buffers
  1cb197798a man: suffix pam options with "=" where arg is required too
  a5fe01d3da test: Use assert_se() where variables are only checked by assert
  6960efd198 tree-wide: Fix, replace assert() by assert_se() when there is side effect
  93c1b03074 tree-wide: Mark as _unused_ variables that are only used in assert()
  c7679d7a9f tree-wide: Workaround -Wnonnull GCC bug
  073b257fd7 man: bring example PAM snippet of pam_systemd and pam_systemd_home back in sync
  855291a81c man: highlight relevant lines in pam_systemd_home.so example PAM snippet
  f89ad7c0fd login: include pam_systemd_home.so in the default PAM snippet we ship for user@.service
  9357f9466f test: Skip test-boot-timestamps on permission denied
  cad4ebe14e sysusers: be extra careful when locking accounts
  551e6f233a shared/install: print name of offending file in error
  c6a2e51232 systemctl: fix --root support in querying presets
  6f1eedbfdd systemctl: fix hint when 'systemctl help' is given
  925521df7c shared/unit-file: fix resolution of absoulute symlinks with --root
  756ba362e8 man: mention that ProtectSystem= also takes care of /efi
  4f77cf43b5 man: systemd.service: systemd-analyze exit-codes -> exit-status
  7c6ea7a053 man: expand on the star…end/repetition time expressions
  e06b940792 calendarspec: be more graceful with two kinds of calendar expressions
  f3dd0b476d calendarspec: minor simplification
  3581c16d56 shutdown: fix spacing in shutdown error message
  9556255349 nspawn: mount custom paths before writing to /etc
  37447b7e78 repart: fix partition maximum size segfault
  7f231ba503 link: Add units and fix typo in (Rx|Tx)BufferSize= manpage. Clean up the implementation slightly
  e75d2cdb0b main: bump RLIMIT_MEMLOCK by physical RAM size
  e16b9a1e31 nspawn: be more careful with creating/chowning directories to overmount
  765d184a69 homectl: say "home area" in more places
  c11bff4fa7 userdbctl: make --help fit in 80 columns
  0e56c2ef3f shell-completion/zsh: update systemd-analyze completions
  2bb580f994 zsh: fix disable/enable completion
  607a19a309 cgroup-util: check for SYSFS_MAGIC when detecting cgroup format
  ddb3c38efc stat-util: no need to open a file to check fs type
  bd8842304c sysusers,tmpfiles: always mention error when failing to replace specifiers
  bdea9b65d2 sysusers: add accidentally forgotten 'return'
  17b059774d man: document binfmt's new --unregister switch
  560380d8ec binfmt: also unregister binfmt entries from unit
  80835d9c51 binfmt: modernize code a bit
  a1745741b8 shutdown: unregister al…
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug 🐛 Programming errors, that need preferential fixing network
Development

Successfully merging a pull request may close this issue.

3 participants