Re: [LFS Trac] #5959: systemd-261.1

#5959: systemd-261.1
-------------------------+-----------------------
 Reporter:  Bruce Dubbs  |       Owner:  lfs-book
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  13.1
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-----------------------
Comment (by Bruce Dubbs):

 Systemd 261.1 introduces massive infrastructure and security updates. The
 release adds a textual OS installer (systemd-sysinstall), a cloud metadata
 daemon (systemd-imdsd), a software TPM fallback, and support for Kernel
 Live
 Update Orchestration (KHO).

 Core Additions & Services

     systemd-sysinstall: A new textual OS installer utility leveraging
     systemd-repart and bootctl designed to copy operating systems from
     temporary media (like USB drives) directly to the target system.

     systemd-imdsd: A new daemon and Varlink API that fetches and provides
 local
     access to cloud instance metadata (e.g., from AWS or Azure) for your
     programs.  storagectl: A native command-line tool standardizing
 storage
     management across systemd distributions to reduce reliance on third-
 party
     scripts.  systemd-tpm2-swtpm: Runs IBM's software TPM to provide TPM
     functionality for systems that lack physical hardware.

 Kernel & Orchestration

     Kexec & Live Updates: PID1 natively supports the kernel's Kernel
 Handover
     (KHO) and Live Update Orchestration (LUO) capabilities. File
 descriptor
     stores can now survive kexec reboots.

     RestrictFileSystemAccess=: A new setting for service files that uses
 BPF
     LSM programs to restrict file system execution only to binaries on
 signed,
     verified, DM-VERITY protected drives.  CPUSetPartition=: A new unit
 setting
     to configure CPU set cgroup partition types (such as root, isolated,
 or
     member).

 Architecture & Packaging

     Dependency Discoverability: Individual binaries now embed dlopen ELF
     metadata notes, allowing packaging tools (like those in Arch Linux) to
 more
     reliably discover optional dependencies.

     dlopen() Standardization: Most external library linking now occurs
     dynamically via dlopen() instead of static compilation, reducing
 direct
     linkage outside of libc.

 System Management Enhancements

     systemd-sysupdate: This tool has moved out of experimental status and
 is
     now placed natively in /usr/bin/.

     DefaultMemoryZSwapWriteback=: A new manager-level setting for the
     system-wide default Zswap writeback, rather than forcing
 administrators to
     rely on per-unit settings.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5959#comment:5>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page