docs-commits October 2014

docs-commits@lists.fedoraproject.org

9 participants
171 discussions

[release-notes] Adding the rest of the Installer section
by pbokoc 07 Oct '14

07 Oct '14

commit 69377f3055f0ea9f80fe46eaac335bdc42c11cfc Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Tue Oct 7 00:05:10 2014 +0200 Adding the rest of the Installer section en-US/Installation.xml | 151 +++++++++++++++++++++++++++++++++++++++++++++++- 1 files changed, 150 insertions(+), 1 deletions(-) --- diff --git a/en-US/Installation.xml b/en-US/Installation.xml index a92fa48..2a63c9a 100644 --- a/en-US/Installation.xml +++ b/en-US/Installation.xml @@ -100,4 +100,153 @@ </itemizedlist> </section> -</section> + <section id="sect-installation-kickstart"> + <title>Changes in Kickstart Syntax</title> + <para> + This section provides a list of changes to <firstterm>Kickstart</firstterm> commands and options. A list of these changes can also be viewed using the following command on a Fedora system: + </para> + <screen><prompt>$</prompt><command>ksverdiff -f F&PREVVER; -t F&PRODVER;</command></screen> + <para> + This command will only work on Fedora &PRODVER; with the <package>pykickstart</package> package installed. + </para> + + <section id="sect-installation-kickstart-new"> + <title>New Commands and Options</title> + <itemizedlist> + <listitem> + <para> + <command>fcoe --autovlan</command>: Enable automatic discovery of VLANs. + </para> + </listitem> + <listitem> + <para> + <command>bootloader --disabled</command>: Do not attempt to install a boot loader. This option overrides all other boot loader configuration; all other boot loader options will be ignored and no boot loader packages will be installed. + </para> + </listitem> + <listitem> + <para> + <command>network --interfacename=</command>: Specify a custom interface name for a VLAN device. This option should be used when the default name generated by the <option>--vlanid=</option> option is not desired, and it must always be used together with <option>--vlanid=</option>. + </para> + </listitem> + <listitem> + <para> + <command>ostreesetup</command>: New optional command. Used for OSTree installations. Available options are: + </para> + <itemizedlist> + <listitem> + <para> + <option>--osname=</option> (required): Management root for OS installation. + </para> + </listitem> + <listitem> + <para> + <option>--remote=</option> (optional): Name of the remote repository. + </para> + </listitem> + <listitem> + <para> + <option>--url=</option> (required): Repository URL. + </para> + </listitem> + <listitem> + <para> + <option>--ref=</option> (required): Name of branch inside the repository. + </para> + </listitem> + <listitem> + <para> + <option>--nogpgcheck</option> (optional): Disable GPG key verification. + </para> + </listitem> + </itemizedlist> + <para> + See <ulink url="https://wiki.gnome.org/action/show/Projects/OSTree" /> for more information about OSTree. + </para> + </listitem> + <listitem> + <para> + <command>clearpart --disklabel=</command>: Create a custom disk label when relabeling disks. + </para> + </listitem> + <listitem> + <para> + <command>autopart --fstype=</command>: Specify a file system type (such as <systemitem>ext4</systemitem> or <systemitem>xfs</systemitem>) to replace the default when doing automatic partitioning. + </para> + </listitem> + <listitem> + <para> + <command>repo --install</command>: Writes the repository information into the <filename class="directory">/etc/yum.repos.d/</filename> directory. This makes the repository configured in Kickstart available on the installed system as well. + </para> + </listitem> + <listitem> + <para> + Changes in the <command>%packages</command> section: + </para> + <itemizedlist> + <listitem> + <para> + You can now specify an <firstterm>environment</firstterm> to be installed in the <command>%packages</command> section by adding an environment name prefixed by <literal>@^</literal>. For example: + </para> + <programlisting> +%packages +@core +<emphasis>@^Infrastructure Server</emphasis> +%end + </programlisting> + </listitem> + <listitem> + <para> + The <command>%packages --nocore</command> option can now be used to disable installing of the <literal>Core</literal> package group. + </para> + </listitem> + <listitem> + <para> + You can now exclude the kernel from installing. This is done the same way as excluding any other package - by prefixing the package name with <literal>-</literal>: + </para> + <programlisting> +%packages +@core +<emphasis>-kernel</emphasis> +%end + </programlisting> + </listitem> + </itemizedlist> + </listitem> + </itemizedlist> + </section> + + <section id="sect-installation-kickstart-changed"> + <title>Changes in Existing Commands and Options</title> + <itemizedlist> + <listitem> + <para> + <command>volgroup --pesize=</command>: This option now does not have a default value in Kickstart. The default size of a new volume group's physical extents is now determined by the installer during both manual and Kickstart installation. This means that the behavior of Kickstart and manual installations is now the same. The previous default value for Kickstart installations was <literal>32768</literal>. + </para> + </listitem> + </itemizedlist> + </section> + + </section> + + <section id="sect-installation-additional-changes"> + <title>Additional Changes</title> + <itemizedlist> + <listitem> + <para> + Software RAID configuration in the graphical user interface has been tweaked. + </para> + </listitem> + <listitem> + <para> + You can now use the <keycap>+</keycap> and <keycap>-</keycap> keys as shortcuts in the manual partitioning screen in the graphical user interface. + </para> + </listitem> + <listitem> + <para> + The <command>ksverdiff</command> utility (part of the <package>pykickstart</package> package) has a new option: <option>--listversions</option>. Use this option to list all available operating system versions which can be used as arguments for the <option>--from=</option> and <option>--to=</option> options. + </para> + </listitem> + </itemizedlist> + </section> + +</section> \ No newline at end of file

1 0

[release-notes] Fixing a bad include
by pbokoc 06 Oct '14

06 Oct '14

commit 6e9475d287dcc6033a9dfb1dde74e9a74a47bd6b Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Mon Oct 6 23:23:26 2014 +0200 Fixing a bad include en-US/Printing.xml | 2 +- en-US/Release_Notes.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) --- diff --git a/en-US/Printing.xml b/en-US/Printing.xml index 0b553d3..7c3da72 100644 --- a/en-US/Printing.xml +++ b/en-US/Printing.xml @@ -6,6 +6,6 @@ <section> <title>Printing</title> - + <para /> </section> diff --git a/en-US/Release_Notes.xml b/en-US/Release_Notes.xml index bd43e5f..a5e54d6 100644 --- a/en-US/Release_Notes.xml +++ b/en-US/Release_Notes.xml @@ -18,7 +18,7 @@ <xi:include href="Section-Sysadmin.xml" xmlns:xi="http://www.w3.org/2001/XInclude" /> - <xi:include href="Desktop.xml" + <xi:include href="Section-Desktop.xml" xmlns:xi="http://www.w3.org/2001/XInclude" /> <!--<xi:include href="Section-Developers.xml"

1 0

[release-notes] Fixing a broken build and adding a few unincluded XMLs
by pbokoc 06 Oct '14

06 Oct '14

commit ae7b85574a4de8f95c1dddd0fc1b8e75320af406 Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Mon Oct 6 23:18:28 2014 +0200 Fixing a broken build and adding a few unincluded XMLs en-US/Mail_Servers.xml | 2 +- en-US/Release_Notes.xml | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) --- diff --git a/en-US/Mail_Servers.xml b/en-US/Mail_Servers.xml index 2e36387..7c062cb 100644 --- a/en-US/Mail_Servers.xml +++ b/en-US/Mail_Servers.xml @@ -6,6 +6,6 @@ <section> <title>Mail Servers</title> - + <para /> </section> diff --git a/en-US/Release_Notes.xml b/en-US/Release_Notes.xml index 5204ef8..bd43e5f 100644 --- a/en-US/Release_Notes.xml +++ b/en-US/Release_Notes.xml @@ -15,11 +15,11 @@ <xi:include href="Section-Products.xml" xmlns:xi="http://www.w3.org/2001/XInclude" /> -  + <xi:include href="Section-Sysadmin.xml" + xmlns:xi="http://www.w3.org/2001/XInclude" /> -  + <xi:include href="Desktop.xml" + xmlns:xi="http://www.w3.org/2001/XInclude" />

1 0

[release-notes] Adding CLI options to Installer + turning simplelists to itemizedlists
by pbokoc 06 Oct '14

06 Oct '14

commit e72154207a126497ebf3bd50360d454a7829181d Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Mon Oct 6 23:10:09 2014 +0200 Adding CLI options to Installer + turning simplelists to itemizedlists en-US/Installation.xml | 61 ++++++++++++++++++++++++++++++++++++++++++++---- 1 files changed, 56 insertions(+), 5 deletions(-) --- diff --git a/en-US/Installation.xml b/en-US/Installation.xml index 5be6eb9..a92fa48 100644 --- a/en-US/Installation.xml +++ b/en-US/Installation.xml @@ -42,11 +42,62 @@ <para> A <firstterm>boot option</firstterm> is used to modify the installer's behavior using the boot command line. The following boot options have been added in Fedora 21: </para> - <simplelist> - <member><option>inst.zram=</option>: use this option to force zRAM swap on (<option>inst.zram=on</option>) or off (<option>inst.zram=off</option>)</member> - <member><option>inst.dnf</option>: use the experimental <application>DNF</application> backend for package installation instead of <application>YUM</application></member> - <member><option>inst.memcheck</option>: perform a check at the beginning of the installation to determine if there is enough available RAM. If there is not enough memory detected, the installation will stop with an error message. This option is enabled by default; use <option>inst.memcheck=0</option> to disable it</member> - </simplelist> + <itemizedlist> + <listitem> + <para> + <option>inst.zram=</option>: Use this option to force zRAM swap on (<option>inst.zram=on</option>) or off (<option>inst.zram=off</option>). + </para> + </listitem> + <listitem> + <para> + <option>inst.dnf</option>: Use the experimental <application>DNF</application> backend for package installation instead of <application>YUM</application>. + </para> + </listitem> + <listitem> + <para> + <option>inst.memcheck</option>: Perform a check at the beginning of the installation to determine if there is enough available RAM. If there is not enough memory detected, the installation will stop with an error message. This option is enabled by default; use <option>inst.memcheck=0</option> to disable it. + </para> + </listitem> + </itemizedlist> + </section> + + <section id="sect-installation-cli-options"> + <title>Changes in Anaconda Command Line Options</title> + <para> + <application>Anaconda</application> command line options are used when running the installer from a terminal within an already installed system, as for example, when installing into a disk image. + </para> + <itemizedlist> + <listitem> + <para> + The built-in help available through the <command>anaconda -h</command> command now provides descriptions for all available commands. + </para> + </listitem> + <listitem> + <para> + <option>--memcheck</option>: Check if the system has sufficient RAM to complete the installation and abort the installation if it does not. This check is approximate. Memory usage during installation depends on the package selection, user interface (graphical/text) and other parameters. + </para> + </listitem> + <listitem> + <para> + <option>--nomemcheck</option>: Do not check if the system has enough memory to complete the installation. + </para> + </listitem> + <listitem> + <para> + <option>--leavebootorder</option>: Boot drives in their existing order - used to override the default of booting into the newly installed drive on IBM Power Systems servers and EFI systems. This is useful for systems that, for example, should network boot first before falling back to a local boot. + </para> + </listitem> + <listitem> + <para> + <option>--extlinux</option>: Use <application>extlinux</application> as the boot loader. Note that there is no attempt to check whether this will work for your platform, which means your system may be unable to boot after completing the installation if you use this option. + </para> + </listitem> + <listitem> + <para> + <option>--dnf</option>: Use the experimental <application>DNF</application> package management backend to replace the default <application>YUM</application> package manager. See <ulink url="http://dnf.baseurl.org" /> for more information about the DNF project. + </para> + </listitem> + </itemizedlist> </section> </section>

1 0

[release-notes] Adding first 3 sections to Installation
by pbokoc 06 Oct '14

06 Oct '14

commit c34ba3d2d2665586b250ab79df2aa95ffbcffee6 Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Mon Oct 6 22:19:19 2014 +0200 Adding first 3 sections to Installation en-US/Installation.xml | 45 +++++++++++++++++++++++++++++++++++++++++++-- 1 files changed, 43 insertions(+), 2 deletions(-) --- diff --git a/en-US/Installation.xml b/en-US/Installation.xml index b7f16d0..5be6eb9 100644 --- a/en-US/Installation.xml +++ b/en-US/Installation.xml @@ -4,8 +4,49 @@ %BOOK_ENTITIES; ]> -<section id="installation"> +<section id="sect-installation"> <title>Installation</title> <para /> - + + <section id="sect-installation-zram-swap"> + <title>zRAM Swap Support</title> + <para> + The <application>Anaconda</application> installer now supports <systemitem>swap</systemitem> on zRAM during the installation. + </para> + <para> + zRAM is a standard block device with compressed contents. Placing <systemitem>swap</systemitem> into such a device during the installation allows the installer to store more data in RAM instead of in the hard drive. This is especially helpful on low-memory systems; on these systems, the installation can be performed much faster with this feature enabled. + </para> + <para> + This feature is automatically enabled if <application>Anaconda</application> detects 2 GB or less memory, and disabled on systems with more memory. To force zRAM swap on or off, use the <option>inst.zram=on</option> or <option>inst.zram=off</option> boot option within the boot menu. + </para> + <para> + Specific limits, numbers and way of implementation may be changed in the future. + </para> + </section> + + <section id="sect-installation-help"> + <title>Built-in Help in the Graphical Interface</title> + <para> + The installer's graphical user interface now supports built-in help. Every screen in the installer, as well as the <application>Initial Setup</application> utility which runs the first time you reboot your system after the installation, now contains a <guilabel>Help</guilabel> button. This button opens a section of the <citetitle>Fedora Installation Guide</citetitle> relevant to the current screen in the <application>Yelp</application> help browser. + </para> + <para> + At the same time, the <citetitle>Installation Guide</citetitle> is being rewritten to better match the installer's structure. + </para> + <para> + Help for text mode installations is not available. + </para> + </section> + + <section id="sect-installation-boot-options"> + <title>Changes in Boot Options</title> + <para> + A <firstterm>boot option</firstterm> is used to modify the installer's behavior using the boot command line. The following boot options have been added in Fedora 21: + </para> + <simplelist> + <member><option>inst.zram=</option>: use this option to force zRAM swap on (<option>inst.zram=on</option>) or off (<option>inst.zram=off</option>)</member> + <member><option>inst.dnf</option>: use the experimental <application>DNF</application> backend for package installation instead of <application>YUM</application></member> + <member><option>inst.memcheck</option>: perform a check at the beginning of the installation to determine if there is enough available RAM. If there is not enough memory detected, the installation will stop with an error message. This option is enabled by default; use <option>inst.memcheck=0</option> to disable it</member> + </simplelist> + </section> + </section>

1 0

[release-notes] Fixing bad elements
by pbokoc 06 Oct '14

06 Oct '14

commit facc6e0f4e8585c2f7f759b4ef5da7021de20639 Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Mon Oct 6 22:18:45 2014 +0200 Fixing bad elements en-US/Development_Tools.xml | 2 +- en-US/Products-Workstation.xml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) --- diff --git a/en-US/Development_Tools.xml b/en-US/Development_Tools.xml index 8de5658..543bfb5 100644 --- a/en-US/Development_Tools.xml +++ b/en-US/Development_Tools.xml @@ -37,7 +37,7 @@ </para> </section> - <section id="devtools-reviewboard" + <section id="devtools-reviewboard"> <title>Review Board 2.0</title> <para> Fedora now provides Review Board 2.0, a powerful, web-based patch review and management tool. diff --git a/en-US/Products-Workstation.xml b/en-US/Products-Workstation.xml index a186892..24c40ac 100644 --- a/en-US/Products-Workstation.xml +++ b/en-US/Products-Workstation.xml @@ -27,10 +27,10 @@ <section> <title>Developer oriented firewall</title> <para> - Developers often run test servers that run on high numbered ports, and interconnectivity with many modern consumer devices also requires these ports. The firewall in Fedora Workstation, <systemitem class-"daemon">firewalld</systemitem>, is configured to allow these things. + Developers often run test servers that run on high numbered ports, and interconnectivity with many modern consumer devices also requires these ports. The firewall in Fedora Workstation, <systemitem class="daemon">firewalld</systemitem>, is configured to allow these things. </para> <para> - Ports numbered under 1024, with the exceptions of <systemitem class="daemon" >sshd</systemitem> and clients for <application>samba</application> and <application>DHCPv6</application>, are blocked to prevent access to system services. Ports above 1024, used for user-initiated applications, are open by default. + Ports numbered under 1024, with the exceptions of <systemitem class="daemon">sshd</systemitem> and clients for <application>samba</application> and <application>DHCPv6</application>, are blocked to prevent access to system services. Ports above 1024, used for user-initiated applications, are open by default. </para> <para> Refer to <ulink url="https://fedoraproject.org/wiki/FirewallD" /> for details on customizing the firewall configuration, or install the <package>firewall-config</package> package for a graphical tool.

1 0

[install-guide/F21-rewrite] Updating network --nameserver in Kickstart Syntax Reference
by pbokoc 06 Oct '14

06 Oct '14

commit cce402e007a0aab92915584884497f29e9d94d50 Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Fri Oct 3 18:23:13 2014 +0200 Updating network --nameserver in Kickstart Syntax Reference en-US/Kickstart_Syntax_Reference.xml | 9 ++++++--- 1 files changed, 6 insertions(+), 3 deletions(-) --- diff --git a/en-US/Kickstart_Syntax_Reference.xml b/en-US/Kickstart_Syntax_Reference.xml index 529031e..a457e33 100644 --- a/en-US/Kickstart_Syntax_Reference.xml +++ b/en-US/Kickstart_Syntax_Reference.xml @@ -2057,10 +2057,10 @@ <command>network --bootproto=static --ip=10.0.2.15 --netmask=255.255.255.0 --gateway=10.0.2.254 --nameserver=10.0.2.1</command> </programlisting> <para> - You can also configure multiple nameservers at the same time. To do so, specify them as a comma-delimited list in the command line. + You can also configure multiple nameservers at the same time. To do so, use the <option>--nameserver=</option> options once for each name server you want to configure: </para> <programlisting> -<command>network --bootproto=static --ip=10.0.2.15 --netmask=255.255.255.0 --gateway=10.0.2.254 --nameserver=192.168.2.1,192.168.3.1</command> +<command>network --bootproto=static --ip=10.0.2.15 --netmask=255.255.255.0 --gateway=10.0.2.254 --nameserver=192.168.2.1 --nameserver=192.168.3.1</command> </programlisting> </listitem> </varlistentry> @@ -2153,8 +2153,11 @@ <term><option>--nameserver=</option></term> <listitem> <para> - Primary nameserver, as an IP address. Multiple nameservers must each be separated by a comma. + DNS name server, as an IP address. To specify more than one name server, use this parameter multiple times. For example: </para> + <screen> +<command>network --bootproto=static --ip=10.0.2.15 --netmask=255.255.255.0 --gateway=10.0.2.254 --nameserver=192.168.2.1 --nameserver=192.168.3.1</command> + </screen> </listitem> </varlistentry> <varlistentry>

1 0

[securityguide] Fixed misspelled word
by Eric Christensen 06 Oct '14

06 Oct '14

commit f1a3bd9a96dc9e8dfa7f9ee6cf38b0a84920e098 Author: Eric H Christensen <sparks(a)redhat.com> Date: Mon Oct 6 10:35:11 2014 -0400 Fixed misspelled word en-US/Yubikey.xml | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) --- diff --git a/en-US/Yubikey.xml b/en-US/Yubikey.xml index 3262a56..57efe60 100644 --- a/en-US/Yubikey.xml +++ b/en-US/Yubikey.xml @@ -40,7 +40,7 @@ </step> <step> <para> - To simple use the yubikey token without your password remove the first line from the step above and replace it with the second. It's not recommanded to use the yubikey without a password. + To simple use the yubikey token without your password remove the first line from the step above and replace it with the second. It's not recommended to use the yubikey without a password. </para> </step> <step>

1 0

[release-notes] some systemd stateless system enhancements, and more notes in comments (TODO)
by Pete Travis 06 Oct '14

06 Oct '14

commit af78e648b418d0d10a374d9bc2661b9a829eacd1 Author: Pete Travis <immanetize(a)fedoraproject.org> Date: Sun Oct 5 23:45:09 2014 -0600 some systemd stateless system enhancements, and more notes in comments (TODO) en-US/System_Daemons.xml | 78 ++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 78 insertions(+), 0 deletions(-) --- diff --git a/en-US/System_Daemons.xml b/en-US/System_Daemons.xml index a64cd82..82038f7 100644 --- a/en-US/System_Daemons.xml +++ b/en-US/System_Daemons.xml @@ -35,6 +35,84 @@ For detailed information, refer to <ulink url="https://fedoraproject.org/wiki/Changes/PrivateDevicesAndPrivateNetwork" /> </para> </section> + <section id="systemd-stateless"> + <title>Stateless Systems</title> + <para> + The <ulink url="https://fedoraproject.org/wiki/Features/UsrMove">usrmove</ulink> Feature in Fedora 17 began a convention of distribution provided configurations residing in <filename>/usr</filename>, with overriding administrator provided configurations in <filename>/etc</filename>. The systemd project's stateless systems effort goes a step further, to ensure that a system can boot <emphasis>without</emphasis> the configuration files in <filename>/etc</filename>. + </para> + <para> + This capabiity allows systems to be reset to a factory state, or various installation types to share a predictable base system. Read <ulink url="http://0pointer.de/blog/projects/stateless.html" /> to learn about the potential of stateless systems. + </para> + <para> + Changes to <systemitem class="daemon">systemd</systemitem> that enable stateless systems include: + </para> + <itemizedlist> + <listitem> + <para> + <emphasis>systemd-sysusers</emphasis> + </para> + <para> + The <systemitem>systemd-sysitems</systemitem> utlity creates system users in <filename>/etc/passwd</filename> and system groups in <filename>/etc/groups</filename> based on declared entries in <filename>/usr/lib/sysusers.d/</filename>. This ensures that crucial accounts are available in early boot. + </para> + </listitem> + <listitem> + <para> + <emphasis>tmpfiles snippet for <filename>/etc/filename</filename></emphasis> + </para> + <para> + <filename>/usr/lib/tmpfiles.d/etc.conf</filename> rebuilds essential files in <filename>/etc</filename>, should they be missing. Notably, a symlink is created linking <filename>/etc/os-release</filename> to <filename>/usr/lib/os-release</filename>. + </para> + </listitem> + <listitem> + <para> + <emphasis>ConditionNeedsUpdate directive</emphasis> + </para> + <para> + Service units can conditionally run only when related files in <filename>/etc</filename> or <filename>/var</filename> are older than the correlating files in <filename>/usr</filename> + </para> + </listitem> + <listitem> + <para> + <emphasis>systemd presets</emphasis> + </para> + <para> + The new command <command>systemctl preset-all</command> applices service preset settings to all unit files. The equivalent operation if the system is booted with an empty <filename class="directory" >/etc</filename>. Preset files for crucial services are provided with systemd in <filename class="directory" >/usr/lib/systemd/system-preset/</filename> + </para> + </listitem> + </itemizedlist> + </section> +  + + </section>

1 0

[release-notes] Systemd - remote journal, private services.
by Pete Travis 06 Oct '14

06 Oct '14

commit c52c71bf6703268a5a6d2bf02a6c639fb67e42e5 Author: Pete Travis <immanetize(a)fedoraproject.org> Date: Sun Oct 5 21:55:50 2014 -0600 Systemd - remote journal, private services. en-US/System_Daemons.xml | 32 ++++++++++++++++++++++++++++++-- 1 files changed, 30 insertions(+), 2 deletions(-) --- diff --git a/en-US/System_Daemons.xml b/en-US/System_Daemons.xml index eca68b3..a64cd82 100644 --- a/en-US/System_Daemons.xml +++ b/en-US/System_Daemons.xml @@ -4,9 +4,37 @@ %BOOK_ENTITIES; ]> -<section> - <title>System Daemons</title> +<section id="systemd"> + <title>Systemd</title> <para /> + <section id="systemd-journald"> + <title>Journald</title> + <itemizedlist> + <listitem> + <para> + <emphasis>Journal Logging</emphasis> + </para> + <para> + Journal messages can be forwarded to remote systems, without using a syslog daemon. The <package>systemd-journal-remote</package> and <package>systemd-journal-upload</package> packages provide receiver and sender daemons. Communication is done over HTTPS. + </para> + </listitem> + </itemizedlist> + </section> + <section id="systemd-private"> + <title>Isolating Services</title> + <para> + Two new security-related options are now available to limit long-running services that do not require access to physical devices or the network. + </para> + <para> + The <literal>PrivateDevices</literal> setting, when set to <literal>yes</literal>, provides the service with a private, minimal <filename class="devicefile">/dev</filename> that does not include physical devices. This allows long-running services to have limited access, increasing security. + </para> + <para> + The <literal>PrivateNetwork</literal> setting, when set to <literal>yes</literal>, provides the service with a network isolated to only a loopback interface. This ensures that long-running services that do not require network access are cut off from the network. + </para> + <para> + For detailed information, refer to <ulink url="https://fedoraproject.org/wiki/Changes/PrivateDevicesAndPrivateNetwork" /> + </para> + </section> </section>

1 0

← Newer
1
...
11
12
13
14
15
16
17
18
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

docs-commits October 2014