lp:~ddstreet/systemd/+git/systemd

Author: Dan Streetman
Author Date: 2023-10-13 20:07:37 UTC

tpm: update comment on transient handle GetCapability bug in kernel tpm resource manager

Add clarification and link to kernel bug.

Author: Mike Yuan
Author Date: 2023-10-03 12:20:55 UTC

core/varlink: make sure we setup non-serialized varlink sockets

Before this PR, if m->varlink_server is not yet set up during
deserialization, we call manager_setup_varlink_server rather than
manager_varlink_init, the former of which doesn't setup varlink
addresses, but only binds to methods. This results in that
newly-added varlink addresses not getting created if deserialization
takes place.

Therefore, let's switch to manager_varlink_init, and add some
sanity checks to it in order to prevent listening on the same
address twice.

Fixes #29373

Replaces #29421

Author: Dan Streetman
Author Date: 2023-07-25 00:04:28 UTC

test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment

Update test to check systemd-cryptenroll --tpm2-device-key= enrollment.

Author: Dan Streetman
Author Date: 2023-10-03 23:48:14 UTC

tpm2: add TPM2B_PUBLIC_MAKE()

Add macro to make a TPM2B_PUBLIC object from TPMT_PUBLIC object and size.

Author: Dan Streetman
Author Date: 2023-10-02 20:25:10 UTC

tpm2: edit tpm2_get_or_create_srk() comment

Adjust the comment to correct the return value, i.e. 1 for SRK created, 0 for
SRK already exists, <0 on error.

Author: Dan Streetman
Author Date: 2023-07-05 17:23:33 UTC

tpm2: update tpm2_digest_many() to use openssl_digest_many()

Update the function to use openssl_digest_many() so more hash functions besides
SHA256 can be used.

If built without openssl, this falls back to the internal sha256 hashing.

Also add GREEDY_REALLOC_PREPREND() helper function.

Author: Dan Streetman
Author Date: 2023-02-25 00:24:59 UTC

tpm2: add tests for tpm2 marshal/unmarshal macros

Author: Dan Streetman
Author Date: 2023-08-04 22:51:55 UTC

openssl: add log_openssl_errors()

Add a macro to log all errors in the openssl 'thread error queue'.

This consolidates all the openssl-generated errors to return -EIO and log at
debug level.

Also add a 'invalid' test in test-openssl, to allow manual verification that
the openssl error(s) are logged.

Author: Dan Streetman
Author Date: 2023-01-02 01:19:12 UTC

tpm2: add functions to get fixed and variable TPM property capabilities

This allows querying the capabilities for TPM properties, and also caches the
fixed TPM properties.

Author: Dan Streetman
Author Date: 2023-06-30 16:29:35 UTC

debug stufffff

Author: Dan Streetman
Author Date: 2023-02-17 13:36:19 UTC

tmp - working on key selection in seal/unseal

Author: Dan Streetman
Author Date: 2022-12-28 21:54:20 UTC

cryptenroll: add --tpm2-external-key

Author: Dan Streetman
Author Date: 2023-06-05 21:59:40 UTC

tpm2: Add use of swtpm in test-tpm2

This attempts to use local 'swtpm' program to start a software TPM, and use
that for testing. This requires the executables 'swtpm', 'swtpm_setup', and
'swtpm_ioctl'. If the swtpm cannot be setup, this attempts fallback to a real
TPM, if any.

Author: Dan Streetman
Author Date: 2023-02-25 00:24:59 UTC

tpm2: add tests for tpm2 marshal/unmarshal macros

Author: Dan Streetman
Author Date: 2023-03-10 22:55:09 UTC

test/test-variadic: add unit tests for variadic helper macros

Author: Dan Streetman
Author Date: 2023-02-25 00:24:59 UTC

tpm2: add tests for tpm2 marshal/unmarshal macros

Author: Dan Streetman
Author Date: 2023-03-10 22:55:09 UTC

test/test-variadic: add unit tests for variadic helper macros

Author: Dan Streetman
Author Date: 2023-01-20 17:42:52 UTC

tpm2: fix build failure without openssl

Author: Dan Streetman
Author Date: 2023-01-20 17:42:52 UTC

tpm2: fix build failure without openssl

Author: Dan Streetman
Author Date: 2022-12-06 18:46:18 UTC

tmp commit

Author: Dan Streetman
Author Date: 2022-12-02 21:32:30 UTC

tmp commit, in progress

Author: Dan Streetman
Author Date: 2021-11-10 17:38:18 UTC

checkout-upstream: replace with upstream code at version 249.1987.g4b499063ac

Author: Dan Streetman
Author Date: 2021-09-21 21:47:55 UTC

userdb: fix if-else to allow NameServiceSwitch lookups

Fixes: #20809. Bug introduced in 8fbb1941f1a8c3d9eda920891b2b51a67f2a2375

Author: Michael Biebl
Author Date: 2021-07-01 20:07:16 UTC

pristine-tar data for systemd_249~rc3.orig.tar.gz

Author: Dan Streetman
Author Date: 2021-05-17 20:58:55 UTC

tmp commit...

Author: Dan Streetman
Author Date: 2020-11-15 22:35:35 UTC

test/test-functions: do not use qemu if it has no default machine type

Most qemu archs include a default machine type, so users don't have to
know which machine type to pick for each arch. If the qemu we're
about to test with doesn't have a default machine type, and it's
not one that we specifically know about and have hardcoded a machine
type for, then don't use qemu as calling it would fail anyway.

As we know qemu on arm doesn't provide a default machine type, this also
sets it if needed.

Author: Zbigniew Jędrzejewski-Szmek
Author Date: 2021-04-14 14:25:35 UTC

Merge pull request #19302 from bluca/uninit

tree-wide: avoid uninitialized warning on _cleanup_ variables

Author: Dan Streetman
Author Date: 2021-01-21 21:09:53 UTC

test: use -snapshot for qemu tests

The qemu tests currently cache the test image, as well as using cache=unsafe,
and so it's possible for image corruption to happen across tests. Using
the -snapshot qemu option causes qemu to run each test using the base
image file without needing to re-create it, but each test's modifications
are discarded between tests, which should avoid image corruption or
test-to-test failure propagation.

Author: Dan Streetman
Author Date: 2020-04-27 19:47:28 UTC

test: add bridge configure-without-carrier test

Verify configure-without-carrier works, and retains configuration
across carrier losses/gains.

Author: Dan Streetman
Author Date: 2020-04-27 19:47:28 UTC

test: add bridge configure-without-carrier test

Verify configure-without-carrier works, and retains configuration
across carrier losses/gains.

Author: Dan Streetman
Author Date: 2020-04-25 13:38:14 UTC

udevd: add short-duration inotify watch during udev block device event processing

While external programs that take an exclusive flock on block devices while
modifying them (e.g. partitioning or mkfs) will safely work with udevd so
that the block device modifications don't race with udevd processing of the
device (e.g. creating symlinks for the newly-created partitions), any
external program that doesn't take an exclusive flock will race with udevd,
and the changes made to the block device may be missed by udevd, leading to
failures, e.g. udevd might not create the symlinks for new partitions, or
might not create the /dev/disk/by-* for new filesystems.

This updates the flock function to also take a short-duration inotify
watch, so that after processing the device, udevd can synthesize a new
uevent if it detected any IN_CLOSE_WRITE while the device was being
processed, before the real watch was added.

One example is the mkswap that we ourselves actually run, from the service
created by cryptsetup-generator; we have it running mkswap:

if (swap)
  fprintf(f,
    "ExecStartPost=/sbin/mkswap '/dev/mapper/%s'\n",
    name_escaped);

However, this is racy, because it doesn't take an exclusive flock. This
(and probably other places in our own code) should have done "flock ..."
instead. If it's hard for us to get this right, it seems too much to
expect all other non-systemd programs to also be aware they need to flock
the block device.

Fixes: #10179

Author: Dan Streetman
Author Date: 2019-07-15 13:56:24 UTC

log: add support for prefixing console log messages with current timestamp