Commit Graph

854 Commits

Author SHA1 Message Date
Grimmauld
19879ac4c1 systemd: check udev rules outputs in installCheckPhase
`udevCheckHook` relies on `udevadm` from systemd to
check udev rules outputs of packages at build time.
Previously, we had no tests in systemd itself which
assured `udevadm` runs correctly. Neither did we
check udev rules output of the systemd package.
We can not use `udevCheckHook` to check systemd, as
that would introduce infinite recursion. So, instead,
we simply check the installed rule output explicitly
in systemd's `installCheckPhase`. Be aware `doInstallCheck`
will be disabled if the buildPlatform can not execute
the hostPlatform, so while `udevCheckHook` can check
udev rules on Linux -> Linux cross compilation,
systemd itself will have its udev rules checked for
native builds only.
2025-06-01 10:11:10 +02:00
Vladimír Čunát
0002d4fba6 systemd: 257.5 -> 257.6 (#412147) 2025-05-30 19:21:28 +02:00
Grimmauld
a68c049d03 systemd: 257.5 -> 257.6
Diff: https://github.com/systemd/systemd/compare/v257.5...v257.6

Contains fixes for CVE-2025-4598 [1]:
aea6a631bc
c58a8a6ec9
101058955e
4c424072b3
61556694af
0023dba63e
ca4736ca8d
45ca3f2d7c

[1] not officially published yet. Article on https://blog.qualys.com/vulnerabilities-threat-research/2025/05/29/qualys-tru-discovers-two-local-information-disclosure-vulnerabilities-in-apport-and-systemd-coredump-cve-2025-5054-and-cve-2025-4598
2025-05-29 20:34:20 +02:00
nixpkgs-ci[bot]
860a3a971e Merge staging-next into staging 2025-05-18 00:19:07 +00:00
Will Fancher
7d255b3d6b maintainers: Align systemd team and package maintenance with GitHub team membership 2025-05-16 23:03:09 -04:00
Alexander Bantyev
35333462db systemd: enable tests
It seems that the doCheck = false in the systemd derivation is outdated,
as the tests now pass (at least on x86_64-linux).
2025-05-07 22:11:12 +04:00
Arian van Putten
d7e5a04f08 systemd: disable pacret hardening flag if withLibBPF (#396368) 2025-04-15 11:37:34 +02:00
K900
5bebb23ff6 Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-08 10:32:34 +03:00
K900
f42e00d66e Merge remote-tracking branch 'origin/master' into staging-next 2025-04-08 10:29:26 +03:00
Winter
a19cd4ffb1 Revert "treewide: replace rev with tag"
This reverts commit 65a333600d.

This wasn't tested for correctness with something like fodwatch [0],
and should not have been (self-)merged so quickly, especially without
further review.

It also resulted in the breakage of at least one package [1] (and that's
the one we know of and was caught).

A few packages that were updated in between this commit and this revert
were not reverted back to using `rev`, but other than that, this is a
1:1 revert.

[0]: https://codeberg.org/raphaelr/fodwatch
[1]: https://github.com/NixOS/nixpkgs/pull/396904 / 758551e458
2025-04-08 02:57:25 -04:00
K900
94780899d9 systemd: fix mismerge
wtf vscode
2025-04-08 09:33:30 +03:00
K900
431a47ab29 Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-08 09:30:30 +03:00
K900
b3146d4446 Merge remote-tracking branch 'origin/master' into staging-next 2025-04-07 21:21:10 +03:00
Pol Dellaiera
65a333600d treewide: replace rev with tag 2025-04-07 16:57:22 +02:00
Will Fancher
bcf07bec86 systemd: 257.3 -> 257.5 (#388131) 2025-04-07 00:19:10 -04:00
misilelab
6418dec0b6 systemd: 257.3 -> 257.5
https://github.com/systemd/systemd/releases/tag/v257.4
https://github.com/systemd/systemd/releases/tag/v257.5

Signed-off-by: misilelab <misileminecord@gmail.com>
2025-04-05 13:40:19 +09:00
Robert Scott
5894407401 systemd: disable pacret hardening flag if withLibBPF
for same reason as other flags mentioned here - really we should
not be using a wrapped clang for bpf compilation
2025-04-04 13:21:46 +01:00
nixpkgs-ci[bot]
56654a8868 Merge staging-next into staging 2025-03-22 06:05:08 +00:00
nixpkgs-ci[bot]
ba561f878e Merge master into staging-next 2025-03-22 06:04:41 +00:00
Jared Baur
ded63f105c systemd: expose withNetworkd in passthru 2025-03-21 01:12:11 -07:00
nixpkgs-ci[bot]
47fbdfd4fc Merge staging-next into staging 2025-03-20 00:16:05 +00:00
nixpkgs-ci[bot]
4733649a15 Merge master into staging-next 2025-03-20 00:15:20 +00:00
Jared Baur
561f1f7a6e systemd: expose withTpm2Units
Exposes if a special trio of options are enabled in the systemd build,
for convenience when accessing in NixOS modules.
2025-03-19 08:13:43 -07:00
Philip Taron
f4dd3ba6e0 systemd: make systemd-ssh-generator work (#372979) 2025-03-15 21:59:59 -07:00
K900
7d36ee97e6 Merge remote-tracking branch 'origin/master' into staging-next 2025-03-14 09:56:27 +03:00
Philip Taron
9ad3c3cefb systemd: Include all NixOS systemd tests in the package's test output (#375480) 2025-03-13 16:10:47 -07:00
Florian Klink
cb362e60f6 systemd: Enable systemd-firstboot (#387265) 2025-03-08 18:24:06 +07:00
Will Fancher
8c94abc70b systemd: Include all NixOS systemd tests in the package's test output
This makes it much easier to run tests for systemd updates.

The only test from `nixosTests.systemd-*` that's omitted is
`nixosTests.systemd-initrd-bridge` as it fails to evaluate.

As of this revision, the following tests fail:

- `nixosTests.systemd-initrd-vconsole`. Fails because it is looking
  for the machine to spit back `arstneio` but instead it responds with
  `rstneio` (no `a`). Hangs until it times out.
- `nixosTests.systemd-journal-gateway`. Fails because
  `Option --trust= is not available.` in `systemd-journal-gatewayd`.
- `nixosTests.systemd-journal`. Fails because the test auditd enabled
   errors: grep 'unit=systemd-journald' /var/log/audit/audit.log failed
- `nixosTests.installer-systemd-stage-1.clevisZfsParentDatasetFallback`.
   Hangs waiting for a password prompt.
- `nixosTests.installer-systemd-stage-1.bcachefsSimple` and
  `nixosTests.installer-systemd-stage-1.bcachefsEncrypted`. Fails to boot.
   I suspect this is a real issue, but I haven't dug in further.

Co-authored-by: Philip Taron <philip.taron@gmail.com>
2025-03-07 09:05:52 -08:00
Frédéric Christ
7f3f0fafcd systemd: Enable systemd-firstboot
Enable building the systemd-firstboot executable.

Regarding the previous comment:

> conflicts with the NixOS /etc management

For conflicts to occur with /etc management, systemd-firstboot would
have to be used. However activating the build flag only makes the
executable available but it isn't used anywhere yet.
2025-03-05 13:24:15 +01:00
nixpkgs-ci[bot]
c0351176c4 Merge staging-next into staging 2025-02-21 00:14:59 +00:00
Artturin
cc6ec5701c systemd: Fix error: attribute 'version' missing on arm-embedded
`pkgsCross.arm-embedded.systemd`
2025-02-14 20:21:53 +02:00
misilelab
1488f3a320 systemd: 257.2 -> 257.3 2025-02-14 18:07:50 +09:00
Marie Ramlow
c581c71cb8 systemd: enable ssh option
We need to patch systemd to make systemd-ssh-generator(8) work:

- systemd doesn't follow symlinks when checking for a packaged
  sshd@.service unit
- systemd tries to link the ssh config dropins by default with tmpfiles
  to /usr, that is not possible, so we include the snippet manually.
2025-02-13 14:10:12 +01:00
FliegendeWurst
eb3431789c systemd: add missing patch for Musl
For context, see https://github.com/systemd/systemd/issues/35755.
Musl defines fork and setsid only if unistd.h is included.
2025-02-03 20:38:38 +01:00
misilelab
53b97e5be7 systemd: 257.1 -> 257.2 (#372292)
Signed-off-by: misilelab <misileminecord@gmail.com>
2025-01-16 09:20:56 +01:00
K900
9e51fd8b02 Merge remote-tracking branch 'origin/master' into staging-next 2025-01-06 21:13:31 +03:00
Will Fancher
fd8696a178 nixos/systemd-stage-1: Fix FIDO2 udev rules
Fixes #368856
2025-01-06 11:41:39 -05:00
Will Fancher
130c348f26 systemd: add openssl as explicit buildInput (#370076) 2025-01-05 02:45:51 -05:00
Shawn8901
52017a4252 systemd: add openssl as explicit buildInput 2025-01-05 03:11:13 +01:00
Alyssa Ross
0352bab0f4 systemd: update musl patches
The previous URL is no longer accessible, presumably because the
branch was rebased.  Happily, they're now in master.  I've added a
note to make sure we don't accidentally use unstable URLs again in
future.
2025-01-03 12:32:08 +01:00
Jared Baur
9f2a4d0f8e systemd: 256.9 -> 257.1 2024-12-19 19:58:20 -08:00
Jared Baur
b1c5cd3e79 systemd: nixfmt 2024-12-19 19:58:19 -08:00
Josh Hoffer
f1518d3675 systemd: 256.8 -> 256.9 2024-12-09 12:46:57 -08:00
Emily
72deeb8efb Revert "systemd: revert boot-breaking systemd-boot change"
This was incorporated upstream in v256.8 as
<a9d9db7f4e>.

This reverts commit 63ce4665b2.

Fixes: 6fc6e7bce8
(cherry picked from commit 19853b7953)
(cherry picked from commit 9f685aba06)
2024-11-30 15:11:10 +01:00
Josh Hoffer
17738b2648 systemd: 256.7 -> 256.8
(cherry picked from commit 6fc6e7bce8)
(cherry picked from commit 30bda35f7a)
2024-11-30 15:11:09 +01:00
Alyssa Ross
df7b79ae5a systemd: revert boot-breaking systemd-boot change
Fixes boot for me.

Closes: https://github.com/NixOS/nixpkgs/pull/355284
(cherry picked from commit 63ce4665b2)
(cherry picked from commit 91ea63fc21)
2024-11-30 15:11:08 +01:00
Emily
19853b7953 Revert "systemd: revert boot-breaking systemd-boot change"
This was incorporated upstream in v256.8 as
<a9d9db7f4e>.

This reverts commit 63ce4665b2.

Fixes: 6fc6e7bce8
2024-11-17 10:36:44 +00:00
Will Fancher
dc2fbd51fd systemd: 256.7 -> 256.8 (#356365) 2024-11-16 12:34:31 -08:00
Josh Hoffer
6fc6e7bce8 systemd: 256.7 -> 256.8 2024-11-15 21:12:08 -08:00
Alyssa Ross
63ce4665b2 systemd: revert boot-breaking systemd-boot change
Fixes boot for me.

Closes: https://github.com/NixOS/nixpkgs/pull/355284
2024-11-11 23:21:57 +01:00