Commit Graph

110 Commits

Author SHA1 Message Date
Zbigniew Jędrzejewski-Szmek
1a82a5d221 Supress errors from useradd/groupadd
rhel-only

Resolves: #2217149
2023-06-29 15:24:19 +02:00
Zbigniew Jędrzejewski-Szmek
eac5440e8e Shellcheckify sysusers.generate-pre.sh
There should be almost no functional change, but shellcheck complains
less. User/group descriptions with escaped characters are handled
properly.

rhel-only

Resolves: #2217149
2023-06-29 15:24:11 +02:00
Zbigniew Jędrzejewski-Szmek
42b42fd61e sysusers.generate-pre: indentation
rhel-only

Resolves: #2217149
2023-06-29 15:24:04 +02:00
Jacek Migacz
36f2f948cd spec: Append 'systemd' to nsswitch.conf only during install
Without that patch, on every package upgrade, a 'systemd' is forcibly appended
to passwd and group in nsswitch.conf which is not desirable for some customers.

It is required until authselect change introduction in RHEL.

RHEL-only

Resolves: #2176337
2023-05-29 11:31:10 +00:00
Jan Macku
96f92a96d3 systemd-252-15
Resolves: #2100440,#2143107,#2183546,#2203133
2023-05-18 13:38:48 +02:00
Jan Macku
2a07d74ee6 systemd-252-14
Resolves: #2176918,#2180120
2023-03-21 14:10:11 +01:00
Zbigniew Jędrzejewski-Szmek
6cce65c41b Move /usr/lib/systemd/boot/ to systemd-boot-unsigned subpackage
(cherry picked from commit 1a6178ce6e)

Resolves: #2176772
2023-03-09 10:30:51 +01:00
Zbigniew Jędrzejewski-Szmek
0802b86b22 Move man pages for sd-boot into systemd-boot-unsigned
(cherry picked from commit 7a81930dd2)

Resolves: #2176772
2023-03-09 10:30:35 +01:00
Jan Macku
54fa34c9c2 systemd-252-8
Resolves: #2173682
2023-02-27 17:36:21 +01:00
Jan Macku
a8492f86d1 spec: Correctly obsolete boot-unsigned and systemd-udev
Related: #2157663
2023-02-27 17:11:54 +01:00
Zbigniew Jędrzejewski-Szmek
6d0071c1b2 Do not create boot subpackage on non-efi arches
This fixes build.
[skip changelog]

(cherry picked from commit 778f8ef8a5)

Related: #2157663
2023-02-27 17:11:54 +01:00
Zbigniew Jędrzejewski-Szmek
133bef1c24 Add a new provides with just the version
[skip changelog]

(cherry picked from commit 189f5d16f4)

Related: #2157663
2023-02-27 17:11:54 +01:00
Jan Macku
4befd8c339 boot: add Provides:systemd-boot(isa)
As requested in https://github.com/rhinstaller/anaconda/pull/4368#discussion_r1043839809,
so that it's easier to depend on the appropriate package. Once we have the
signed version built, this provides might be dropped. But let's add it at least
for now so that there's a stable name to depend on.

Based on fedora patch - 732bdcb223

Related: #2157663
2023-02-27 17:11:54 +01:00
Zbigniew Jędrzejewski-Szmek
f2837adf41 Split out systemd-boot-unsigned package
(cherry picked from commit 54a3b6f942)

Resolves: #2157663
2023-02-27 17:11:54 +01:00
Jan Macku
5637d04f70 systemd-252-7
Resolves: #1985288,#2172401
2023-02-27 15:01:29 +01:00
Lukas Nykryn
d005486d57 systemd-252-6
Resolves: #2122500,#2138081,#2140646
2023-02-22 13:23:31 +01:00
Jan Macku
942940330e systemd-252-5
Resolves: #1952378,#2151612,#2167468,#2170500
2023-02-17 09:20:01 +01:00
Jan Macku
2d7302fd0b systemd-252-4
Resolves: #2138081,#2159448
2023-02-06 12:28:47 +01:00
Jan Synacek
b81de9fb53 spec: fix rpm verification (#1702300)
(cherry picked from commit 15d8f0c95a3fff7d78a8c22cb0aae45ae471add1)

Related: #2165316
2023-01-30 16:02:01 +01:00
Zbigniew Jędrzejewski-Szmek
82fe48cc58 Fix permissions on %ghost files (rhbz#2122889)
(cherry picked from commit 58777c7cac)

Related: #2165316
2023-01-30 15:56:55 +01:00
Zbigniew Jędrzejewski-Szmek
3b40355969 Correct file modes for %ghosted files
/var/log/btmp was changed in https://github.com/systemd/systemd/commit/f6e64b78cc,
but never adjusted here.

(cherry picked from commit db26d980dd)

Related: #2165316
2023-01-30 15:56:00 +01:00
Jan Macku
eceb26ad96 systemd-252-3
Resolves: #2138081,#2141979,#2151993,#2155517,#2160477
2023-01-16 09:56:47 +01:00
Jan Macku
79350f79d8 systemd-252-2
Resolves: #2137584,#2138081,#2141979
2022-12-09 09:36:14 +01:00
Jan Macku
d3400e6e35 Use split-files.py from Fedora
Related: #2138081
2022-12-05 12:22:58 +01:00
Jan Macku
12166e1929 Rebase to systemd v252 + systemd-stable v252.2
Resolves: #2138081
2022-12-05 12:22:58 +01:00
Jan Macku
dd626b6e53 Remove patches - rebase preparation
Related: #2138081
2022-12-05 12:22:58 +01:00
Jan Macku
454e3e2598 spec: Explicitly set default net naming scheme to rhel-9
Resolves: #2138883
2022-12-02 15:33:45 +01:00
Jan Macku
888bfe290c spec: Release bump
Related: #2140646
2022-12-02 14:44:17 +01:00
Jan Macku
9875c7e5b4 spec: Build systemd-boot EFI tools
Resolves: #2140646
2022-12-02 13:19:39 +01:00
Jan Macku
56f1ee916b systemd-250-11
Resolves: #2120604,#2121144
2022-08-25 10:24:32 +02:00
Jan Macku
2891ff393e systemd-250-10
Resolves: #2120222
2022-08-22 14:51:33 +02:00
Jan Macku
50665f7e22 systemd-250-9
Resolves: #2087778,#2116681,#2118297,#2118668
2022-08-18 13:35:33 +02:00
Jan Macku
0daf48d9aa systemd-250-8
Resolves: #2047682,#2068043,#2068131,#2073003,#2073994,#2082131,#2083493,#2087652,#2100340
2022-07-20 08:37:23 +02:00
Jan Macku
c895351950 systemd-250-7
Resolves: #2017035
2022-04-20 08:57:39 +00:00
David Tardon
4ab2887d57 pam: do not require a non-expired password for user@.service
Without this parameter, we would allow user@ to start if the user
has no password (i.e. the password is "locked"). But when the user does have a password,
and it is marked as expired, we would refuse to start the service.
There are other authentication mechanisms and we should not tie this service to
the password state.

The documented way to disable an *account* is to call 'chage -E0'. With a disabled
account, user@.service will still refuse to start:

systemd[16598]: PAM failed: User account has expired
systemd[16598]: PAM failed: User account has expired
systemd[16598]: user@1005.service: Failed to set up PAM session: Operation not permitted
systemd[16598]: user@1005.service: Failed at step PAM spawning /usr/lib/systemd/systemd: Operation n  ot permitted
systemd[1]: user@1005.service: Main process exited, code=exited, status=224/PAM
systemd[1]: user@1005.service: Failed with result 'exit-code'.
systemd[1]: Failed to start user@1005.service.
systemd[1]: Stopping user-runtime-dir@1005.service...

RHEL-only

Resolves: #2059553
2022-04-20 10:19:51 +02:00
Jan Macku
a7a177e071 systemd-250-4
Resolves: #1982596,#2009237,#2013213,#2052106
2022-02-23 11:09:19 +01:00
Jan Macku
b650a930d3 systemd-250-3
Resolves: #2047768,#2017035
2022-02-08 16:11:14 +01:00
David Tardon
f53bd80383 Switch from gcrypt to openssl
Resolves: #1642072
2022-02-07 15:04:02 +00:00
Michal Sekletar
07a470e853 spec: make sure version string starts with version number
This is SAP requirement, but at the same time we make it compatible with
RHEL-8.

Related: #2049054
2022-02-07 12:53:07 +00:00
David Tardon
12239cde92 Add runtime Requires on cryptsetup-libs too
Related: #2017541
2022-02-07 11:01:01 +00:00
David Tardon
0ccc6aac5f Add runtime Requires on tpm2-tss
Related: #2017541
2022-02-07 11:01:01 +00:00
Zbigniew Jędrzejewski-Szmek
f809abde93 Pull in tpm2-tss dependency
(cherry picked from commit 141af483cc)

Resolves: #2017541
2022-02-07 11:01:01 +00:00
David Tardon
2e35c6bb3d Move systemd-cryptenroll to systemd-udev
Related: #2017541
2022-02-07 11:01:01 +00:00
David Tardon
6fe2e60681 Move resolvconf to systemd-resolved
Resolves: #2029853
2022-02-04 10:13:25 +00:00
Jan Macku
9efbb443aa Rebase to v250
* Apply RHEL-only patches

Resolves: #2047768
2022-01-31 13:24:15 +01:00
Jan Macku
0224c0ebb1 Rebase to v250 - drop all patches
Related: #2047768
2022-01-31 13:22:31 +01:00
Jan Macku
5b2321d1b0 spec: Take ownership of /var/log/lastlog
Based on Fedora commits:
* f97cf5817a
* 238e8e0e64

Resolves: #2044984
2022-01-25 14:03:56 +01:00
Jan Macku
d4f3415740 systemd-249-9
Resolves: #2016042,#2017035,#2019468
2021-11-18 14:14:01 +01:00
Jan Macku
5d32e92a42 spec: Return back %check section
It's required by Packit.

Revert of: 6545fb6a

Related: #2017035
2021-11-08 10:40:33 +01:00
Jan Macku
09bc8d360a systemd-249-8
Resolves: #1973856,#1998509,#2000927,#2003002,#2003031,#2003130,#2005024,#2009237
2021-10-14 07:05:34 +00:00