blob: 7fd5c0e5bf4176bb7e1df92a665c742cdb62b6aa [file] [log] [blame]
Lennart Poetteringd657c512012-01-25 02:20:38 +01001systemd System and Service Manager
Lennart Poettering31cee6f2010-05-13 03:30:21 +02002
3DETAILS:
4 http://0pointer.de/blog/projects/systemd.html
5
6WEB SITE:
7 http://www.freedesktop.org/wiki/Software/systemd
8
9GIT:
Kay Sievers9fa2f412012-01-22 18:40:13 +010010 git://anongit.freedesktop.org/systemd/systemd
11 ssh://git.freedesktop.org/git/systemd/systemd
Lennart Poettering31cee6f2010-05-13 03:30:21 +020012
13GITWEB:
Kay Sievers9fa2f412012-01-22 18:40:13 +010014 http://cgit.freedesktop.org/systemd/systemd
Lennart Poettering31cee6f2010-05-13 03:30:21 +020015
16MAILING LIST:
17 http://lists.freedesktop.org/mailman/listinfo/systemd-devel
18 http://lists.freedesktop.org/mailman/listinfo/systemd-commits
19
20IRC:
21 #systemd on irc.freenode.org
22
23BUG REPORTS:
24 https://bugs.freedesktop.org/enter_bug.cgi?product=systemd
25
26AUTHOR:
Lennart Poettering5430f7f2012-04-12 00:20:58 +020027 Lennart Poettering
28 Kay Sievers
29 ...and many others
Lennart Poettering31cee6f2010-05-13 03:30:21 +020030
Lennart Poettering673eab92011-07-14 23:53:53 +020031LICENSE:
Lennart Poettering5430f7f2012-04-12 00:20:58 +020032 LGPLv2.1+ for all code
Kay Sievers952d1532014-02-19 18:21:19 +010033 - except sd-readahead.[ch] which is MIT
Lennart Poetteringb67f5412013-12-22 23:26:07 +010034 - except src/shared/MurmurHash2.c which is Public Domain
35 - except src/shared/siphash24.c which is CC0 Public Domain
Kay Sievers85424722013-08-14 22:58:21 +020036 - except src/journal/lookup3.c which is Public Domain
37 - except src/udev/* which is (currently still) GPLv2, GPLv2+
Lennart Poettering673eab92011-07-14 23:53:53 +020038
Lennart Poettering31cee6f2010-05-13 03:30:21 +020039REQUIREMENTS:
Jesper Larsene9469482013-07-23 15:50:09 +020040 Linux kernel >= 3.0
Kay Sievers23aedd02014-03-22 18:27:35 +010041 Linux kernel >= 3.3 for loop device partition support features with nspawn
42 Linux kernel >= 3.8 for Smack support
43
44 Kernel Config Options:
Kay Sievers713bc0c2013-03-06 19:36:39 +010045 CONFIG_DEVTMPFS
46 CONFIG_CGROUPS (it's OK to disable all controllers)
47 CONFIG_INOTIFY_USER
48 CONFIG_SIGNALFD
49 CONFIG_TIMERFD
50 CONFIG_EPOLL
Kay Sievers41938692013-03-06 19:51:52 +010051 CONFIG_NET
Kay Sievers713bc0c2013-03-06 19:36:39 +010052 CONFIG_SYSFS
Shawn Landden06d461e2013-12-09 07:04:06 -080053 CONFIG_PROC_FS
Kay Sievers5d319742014-02-15 17:21:49 +010054 CONFIG_FHANDLE (libudev, mount and bind mount handling)
Kay Sievers713bc0c2013-03-06 19:36:39 +010055
56 Udev will fail to work with the legacy layout:
Kay Sieversf28cbd02013-03-06 20:01:45 +010057 CONFIG_SYSFS_DEPRECATED=n
Kay Sievers713bc0c2013-03-06 19:36:39 +010058
59 Legacy hotplug slows down the system and confuses udev:
60 CONFIG_UEVENT_HELPER_PATH=""
61
62 Userspace firmware loading is deprecated, will go away, and
63 sometimes causes problems:
64 CONFIG_FW_LOADER_USER_HELPER=n
65
66 Some udev rules and virtualization detection relies on it:
67 CONFIG_DMIID
68
Kay Sieversa5c724b2013-09-15 07:29:25 +020069 Support for some SCSI devices serial number retrieval, to
70 create additional symlinks in /dev/disk/ and /dev/tape:
71 CONFIG_BLK_DEV_BSG
72
Kay Sievers713bc0c2013-03-06 19:36:39 +010073 Optional but strongly recommended:
74 CONFIG_IPV6
75 CONFIG_AUTOFS4_FS
76 CONFIG_TMPFS_POSIX_ACL
77 CONFIG_TMPFS_XATTR
Kay Sieversf28cbd02013-03-06 20:01:45 +010078 CONFIG_SECCOMP
Kay Sievers713bc0c2013-03-06 19:36:39 +010079
Shawn Landden06d461e2013-12-09 07:04:06 -080080 For systemd-bootchart, several proc debug interfaces are required:
Kay Sievers713bc0c2013-03-06 19:36:39 +010081 CONFIG_SCHEDSTATS
82 CONFIG_SCHED_DEBUG
83
Kay Sieversf28cbd02013-03-06 20:01:45 +010084 For UEFI systems:
Thomas Bächlerf33016f2014-03-22 01:41:12 +010085 CONFIG_EFIVAR_FS
Kay Sieversf28cbd02013-03-06 20:01:45 +010086 CONFIG_EFI_PARTITION
87
Lennart Poettering77b6e192013-05-10 00:14:12 +020088 Note that kernel auditing is broken when used with systemd's
89 container code. When using systemd in conjunction with
Jan Engelhardt19aadac2013-10-22 01:50:48 +020090 containers, please make sure to either turn off auditing at
Lennart Poettering77b6e192013-05-10 00:14:12 +020091 runtime using the kernel command line option "audit=0", or
92 turn it off at kernel compile time using:
93 CONFIG_AUDIT=n
Lennart Poetteringa7b1c392014-03-11 05:40:36 +010094 If systemd is compiled with libseccomp support on
95 architectures which do not use socketcall() and where seccomp
96 is supported (this effectively means x86-64 and ARM, but
97 excludes 32bit x86!), then nspawn will now install a
98 work-around seccomp filter that makes containers boot even
99 with audit being enabled. This works correctly only on kernels
100 3.14 and newer though. TL;DR: turn audit off, still.
Lennart Poettering77b6e192013-05-10 00:14:12 +0200101
Kay Sieversff70c612013-11-27 13:15:10 +0100102 glibc >= 2.14
Lennart Poettering3ede8352011-02-16 19:09:11 +0100103 libcap
Ronny Chevalierc0467cf2014-02-12 01:29:54 +0100104 libseccomp >= 1.0.0 (optional)
Tom Gundersene3043162012-11-20 01:24:32 +0100105 libblkid >= 2.20 (from util-linux) (optional)
Tom Gundersena18535d2013-10-17 19:49:19 +0200106 libkmod >= 15 (optional)
Lennart Poettering3ede8352011-02-16 19:09:11 +0100107 PAM >= 1.1.2 (optional)
108 libcryptsetup (optional)
109 libaudit (optional)
Zbigniew Jędrzejewski-Szmek19d5d4c2011-07-12 13:57:48 +0200110 libacl (optional)
Lennart Poetteringfb0951b2012-10-16 22:58:07 +0200111 libattr (optional)
Lennart Poettering3ede8352011-02-16 19:09:11 +0100112 libselinux (optional)
Zbigniew Jędrzejewski-Szmek19d5d4c2011-07-12 13:57:48 +0200113 liblzma (optional)
Lennart Poettering3ede8352011-02-16 19:09:11 +0100114 tcpwrappers (optional)
Lennart Poettering7b17a7d2012-09-28 00:46:32 +0200115 libgcrypt (optional)
116 libqrencode (optional)
117 libmicrohttpd (optional)
Zbigniew Jędrzejewski-Szmek2cc86f02012-11-22 15:30:50 +0100118 libpython (optional)
119 make, gcc, and similar tools
Lennart Poettering3ede8352011-02-16 19:09:11 +0100120
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200121 During runtime, you need the following additional
122 dependencies:
Zbigniew Jędrzejewski-Szmek2cc86f02012-11-22 15:30:50 +0100123
Zbigniew Jędrzejewski-Szmek8be12842013-12-10 20:27:14 -0500124 util-linux >= v2.19 (requires fsck -l, agetty -s),
125 v2.21 required for tests in test/
Tom Gundersendf417762013-11-27 16:50:53 +0100126 dbus >= 1.4.0 (strictly speaking optional, but recommended)
Zbigniew Jędrzejewski-Szmek8be12842013-12-10 20:27:14 -0500127 sulogin (from util-linux >= 2.22 or sysvinit-tools, optional but recommended,
128 required for tests in test/)
Zbigniew Jędrzejewski-Szmek2cc86f02012-11-22 15:30:50 +0100129 dracut (optional)
Lennart Poettering46ba8aa2013-02-13 22:56:43 +0100130 PolicyKit (optional)
Zbigniew Jędrzejewski-Szmek2cc86f02012-11-22 15:30:50 +0100131
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200132 When building from git, you need the following additional
133 dependencies:
Lennart Poettering3ede8352011-02-16 19:09:11 +0100134
Lennart Poettering3ede8352011-02-16 19:09:11 +0100135 docbook-xsl
136 xsltproc
137 automake
138 autoconf
139 libtool
Zbigniew Jędrzejewski-Szmek19d5d4c2011-07-12 13:57:48 +0200140 intltool
Michael Bieblb62cfce2011-08-03 17:09:55 +0200141 gperf
Zbigniew Jędrzejewski-Szmek19d5d4c2011-07-12 13:57:48 +0200142 gtkdocize (optional)
143 python (optional)
Zbigniew Jędrzejewski-Szmek32dcef32014-02-12 02:58:41 -0500144 python-lxml (optional, but required to build the indices)
Zbigniew Jędrzejewski-Szmek9015fa62013-02-09 15:37:35 -0500145 sphinx (optional)
Lennart Poettering21bc9232011-02-23 01:12:07 +0100146
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200147 When systemd-hostnamed is used, it is strongly recommended to
148 install nss-myhostname to ensure that, in a world of
149 dynamically changing hostnames, the hostname stays resolvable
Lennart Poetteringfff2e5b2011-05-17 19:35:56 +0200150 under all circumstances. In fact, systemd-hostnamed will warn
Kay Sieversbf9e4772013-01-24 10:31:34 +0100151 if nss-myhostname is not installed.
Lennart Poetteringfff2e5b2011-05-17 19:35:56 +0200152
Zbigniew Jędrzejewski-Szmek9015fa62013-02-09 15:37:35 -0500153 To build HTML documentation for python-systemd using sphinx,
154 please first install systemd (using 'make install'), and then
155 invoke sphinx-build with 'make sphinx-<target>', with <target>
156 being 'html' or 'latexpdf'. If using DESTDIR for installation,
157 pass the same DESTDIR to 'make sphinx-html' invocation.
158
Lennart Poetteringa24c64f2013-03-05 18:53:21 +0100159USERS AND GROUPS:
Lennart Poettering37495ee2013-03-05 19:15:31 +0100160 Default udev rules use the following standard system group
161 names, which need to be resolvable by getgrnam() at any time,
162 even in the very early boot stages, where no other databases
163 and network are available:
164
165 tty, dialout, kmem, video, audio, lp, floppy, cdrom, tape, disk
Kay Sievers37c0e8f2013-03-05 19:04:48 +0100166
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200167 During runtime, the journal daemon requires the
Michael Biebl1a9ce3f2013-03-05 19:19:26 +0100168 "systemd-journal" system group to exist. New journal files will
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200169 be readable by this group (but not writable), which may be used
Lennart Poetteringa24c64f2013-03-05 18:53:21 +0100170 to grant specific users read access.
171
172 It is also recommended to grant read access to all journal
173 files to the system groups "wheel" and "adm" with a command
174 like the following in the post installation script of the
175 package:
176
177 # setfacl -nm g:wheel:rx,d:g:wheel:rx,g:adm:rx,d:g:adm:rx /var/log/journal/
178
Lennart Poettering37495ee2013-03-05 19:15:31 +0100179 The journal gateway daemon requires the
Michael Biebl1a9ce3f2013-03-05 19:19:26 +0100180 "systemd-journal-gateway" system user and group to
Lennart Poettering37495ee2013-03-05 19:15:31 +0100181 exist. During execution this network facing service will drop
182 privileges and assume this uid/gid for security reasons.
183
Lennart Poettering21bc9232011-02-23 01:12:07 +0100184WARNINGS:
185 systemd will warn you during boot if /etc/mtab is not a
186 symlink to /proc/mounts. Please ensure that /etc/mtab is a
187 proper symlink.
188
189 systemd will warn you during boot if /usr is on a different
190 file system than /. While in systemd itself very little will
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200191 break if /usr is on a separate partition, many of its
Lennart Poettering21bc9232011-02-23 01:12:07 +0100192 dependencies very likely will break sooner or later in one
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200193 form or another. For example, udev rules tend to refer to
Lennart Poettering21bc9232011-02-23 01:12:07 +0100194 binaries in /usr, binaries that link to libraries in /usr or
195 binaries that refer to data files in /usr. Since these
Jan Engelhardt19aadac2013-10-22 01:50:48 +0200196 breakages are not always directly visible, systemd will warn
Lennart Poettering21bc9232011-02-23 01:12:07 +0100197 about this, since this kind of file system setup is not really
198 supported anymore by the basic set of Linux OS components.
Lennart Poetteringfc7a7442011-03-01 23:44:26 +0100199
Lennart Poettering47bc23c2014-02-26 02:54:37 +0100200 systemd requires that the /run mount point exists. systemd also
201 requires that /var/run is a a symlink → /run.
202
Lennart Poetteringaa167132011-03-04 05:07:01 +0100203 For more information on this issue consult
204 http://freedesktop.org/wiki/Software/systemd/separate-usr-is-broken
205
Zbigniew Jędrzejewski-Szmek1b4bb4f2012-10-12 12:56:19 +0000206 To run systemd under valgrind, compile with VALGRIND defined
207 (e.g. ./configure CPPFLAGS='... -DVALGRIND=1'). Otherwise,
208 false positives will be triggered by code which violates
209 some rules but is actually safe.