main
udev: drop home-grown udev-ctrl socket
man: add licenses to all files that lack one
man: change license of examples to MIT-0
man/90-rearrange-path: apply "ruff format" and "ruff check --fix"
man: add sd-dlopen(3) and SD_ELF_NOTE_DLOPEN(3) man pages
man: document /usr/local/lib in search paths
tools: add -n shortcut for --dry-run
man: expand word contractions
busctl: handle `--limit-messages` option under the `wait` verb
man: fix username prefix mentioned in manual for capsule users (#39573)
man: fix plural
man/check-os-release-simple: apply "ruff format"
man/check-os-release: apply "ruff format"
clonesetup: add support to clone devices via /etc/clonetab
Revert "shared/pager: add support for more(1) pager in secure mode"
man: coredump: MaxUse takes precedence
man: always prefix links to uapi specs with their UAPI.XY spec number
cryptsetup: measure via the pcrextend varlink service
core: add fallback-default-target build option
man/custom-html: support dark mode
license: LGPL-2.1+ -> LGPL-2.1-or-later
docs,man: more SysV compat removal notes
man: document that $XDG_CONFIG_HOME affects environment.d lookup path
sd-event: Clean up SIGCHLD conditions for sd_event_add_child()
man: replace "-" with "none" in cryptsetup commands and crypttab
man: update the sample glib/sd-event integration
tree-wide: fix some double word errors like "the the"
man: grammar fixes for introductory adverbs/phrases
creds,firstboot: add support for ? and $ via credentials
hostnamectl: document JSON status object output
man: drop inadvertently added -x, make shellcheck clean
man/examples: set _GNU_SOURCE in source, rather than by compile option
man: change lexical to lexicographic
man: document everything we just added
integritysetup: Add PHMAC algorithm to list of known algorithms
man: use same version in public and system ident.
man/examples: use strerror() instead of %m
journal-remote: several follow-ups for Compression= option handling
journal-remote: added custom headers support
journald: allow default storage mode to be configured
man: fix seven cross-references with the wrong section number
man: entry_name_format=, KERNEL_INSTALL_ENTRY_NAME
man: add thread-awareness note to sd_bus/sd_event manpages
man: match doctype and root element
man: add sd-path page
man: Clarify secure-boot-enroll defaults
man: use standard-options for --no-ask-password everywhere
man: fix links
man: encourage the creation of empty machine-id instead of deleting it
machine-tags: optionally support key/value pairs as machine tags
docs,test: --bind-volume / bind-volume / unbind-volume
meson: drop remaining target names
networkctl,networkd: add --no-reconfigure flag to networkctl reload
man: document DHCP relay configuration
man: Ensure notify example includes <string.h>
man/notify-example: apply "ruff format"
man: Update nss-myhostname.xml to reflect files
nss-resolve: add env var to specify resolved ifindex
man: fix description of .membership files
oomd: ruleset parsing
man: drop whitespace from final <programlisting> lines
homed: add concept for "adopting" an existing homedir locally
hostnamed: add AddAndRemoveTags() D-Bus method
importd: add bus/varlink api for downloading OCIs
docs: Fix some confusing wording in various D-Bus docs
man: clarify that --when= is a lower bound, not a condition
machined: add PIDFD D-Bus variants for registering/creating machines
networkd: add DHCPServer PoolSize and PoolOffset DBus properties
Fix order of class/type in resolve man page
Add ActivatingConcurrencyMax for slice startup pacing
sysupdate: Add separate polkit actions for cancellation
man: update version formatting requirements in os-release
pam_systemd: document inhibit= and inhibit-why= options
run0: drop -a short switch for --area=
man: several more assorted fixes
man/examples: fix sd- header path
portable: /run/systemd/portables => /run/portables
man/pstore.conf: pstore.conf template is not always installed in /etc
repart: document implied CopyFiles= denylists
resolvectl: render DNS errors as JSON
resolved: add configurable DNS cache size
run: make custom slice imply XDG_SESSION_CLASS=none
man/example: also build example code with C90
man/sd-bus: Add at least one reference per sd-bus function man page
sd-daemon: add sd_pidfd_get_inode_id()
docs: fix typo in man/sd-device.xml
man: fix incorrect volume numbers in internal man page references
sd-journal: drop libgcrypt dependency from libsystemd
xaccess: Rework from boolean into a list of tags
sd-varlink: mark varlink sockets and entrypoint inodes as varlink via xattrs
man: fix typo
docs: add man pages for `sd_device_enumerator_add_match_*` (#37589)
man: update description for sd_device_enumerator_add_match_subsystem
docs: add man page for sd_device_enumerator_get_device_first() and friends
docs: add man pages for sd_device_enumerator_[new,ref,unref,unrefp] (#37586)
man: fix typos flagged by Lintian
sd-id128: add an app-specific flavour of the invocation ID too
sd-id128: parse UUID URNs
man: fix advice regarding thread safety of libsystemd
sd-journal: document relevant sd_journal_get_cursor() error codes
sd-journal: make sd_journal_get_data() output params optional
man: mention that sd_journal_test_cursor() needs a positioning call
sd-journal: introduce sd_journal_stream_fd_with_namespace
man: add documentation for the various sd_json_dispatch_xyz() calls
man: add documentation for new sd-json features
tree-wide: extend $LISTEN_FDS protocol with $LISTEN_PIDFDID
docs: document LUO support
sd-path: expose XDG 'projects' user dir
man/sd_pid_get_owner_uid: don't limit -EBADF to socket fds
sd-varlink: add sd_varlink_call_and_upgradeb() + sd_varlink_call_and_upgradebo()
man: add sd_varlink_connect_address() man page
sd-varlink: add sd_varlink_is_connected()
man: document sd_varlink_push_fd()
man: document sd_varlink_send()
man: document sd_varlink_server_listen_address() and friends
sd-varlink: optionally handle SIGTERM/SIGINT explicitly in simple varlink event loop
man: fix include line in sd_varlink_set_description() man page
man/varlink: fix typo
stub: make debug logging controllable via smbios11 work in the stub too, not just the boot menu
tmpfiles: add %D specifier resolution
storage: add 'storagectl' command-line tool
Add support for binding a unit to a network iface
man/sysext.conf: Fix section name to match code
man: fix indentation
dissect: support mount options when going through mountfsd
core: also enable PrivateUsers= for user services when using images via mountfsd
man: clarify enqueue-marked uses try-restart semantics
analyze: use shutdown timestamps in time verb
man: convert multiple left-over "See Also" sections to <simplelist>
man: fix typos in some binary names
man: fix systemd-boot-clear-sysfail description
boot: skip random seed handling if seed file is marked read-only
systemd-cat does not connect the standard *input* of a process to the journal
cgls: fix/update/restore the handling of --xattr and --cgroup-id
core: always enable CPU accounting
man: drop '\r' from systemd-clonesetup.xml
creds-util: implement TPM2 SRK pinning
man: clarify that --fido2-with-user-presence= may not be supported (#43266)
man: better tags, more links, minor grammar and formatting improvements
Fix typos found by Lintian
man: rewrite as <group>
confidential-virt: add detection for aarch64 CCA
parse-argument: make parse_tristate_argument() do something useful
escape: add --stdin input mode
factory-reset: revamp infrastructure
man/factory-reset: fix typo in EFI variable name
man: fix reference to systemd-quotacheck@.service
getty-generator: add support for fine-grained control of execution modes
man: update gpt-auto-generator ESP mounting behavior
man/systemd-hibernate-resume: generator now enables rather than creates the service
units: introduce systemd-hibernate-clear.service that clears stale HibernateLocation EFI variable
homed: re-establish inotify watches on SIGUSR1
man: link up D-Bus API docs from daemon man pages
systemd-imds-generator: fix import docs
imds: expose instance metadata as an io.systemd.Metrics provider
man: document unlocked as default IMDS network mode
inhibit: allow filtering --list also by what, who and why
journal-gatewayd: make num_entries in Range header optional again
vmspawn,journal-remote: add journal forwarding disk usage options
meson/man: allow man pages to use multiple conditions
journald: support reloading configuration at runtime
keyutil: Add extract-certificate
logind: add io.systemd.Shutdown varlink Shutdown interface
units: add generic service for attaching a file to a loopback device
man: update machine-id-setup(1)
units: add systemd-machine-tag@.service template
man: asorted fixes
measure: Support binding signed policies to individual phases
mount-tool: never bind to device on explicit x-systemd.device-bound=no
man: clarify that /etc/verity.d only parses certificates with the .crt extension
mute-console: add simple varlink service that can disable log/status spew to kernel console
wait-online: add support for waiting for DNS configuration
man/network: Note .link early boot caveat, and .network .netdev usage.
man/systemd-notify: add a note on return value
nspawn: support forwarding FDs from payloads to managers
nsresourced: Optionally map foreign UID range
man: clarify systemd-path variable source
pcrlock: add --strict option
tpm2: Improve how NvPCR protection works.
ptyfwd: Add --read-only option
quotacheck: add quotacheck.mode credential support
man/systemd-remount-fs: fix grammar
report: add simple metrics provider that just reads files
report: add a simple software-backed signing backend
report: add systemd-report-sign-tsm backend
report: replace boolean --sign with signing modes
resolved: add ability to define additional local RRs via drop-ins
run: reject waiting for remain-after-exit services
sleep: allow HibernateDelaySec and low-battery hibernation to work together
socket-proxy: implement PROXY protocol v1
man: add docs for ssh.ephemeral-authorized_keys-all
ssh-issue: replace verb options by normal verbs
ssh-proxy: use % as an alternative separator
stdio-bridge: Add --quiet option
storage: add systemd-storage-block@.service provider
storage: add systemd-storage-fs@.service provider
man: fix systemd-stub .hwids section to be a singleton
man: update links to "Inhibitor Locks"
sysctl: add --verify option to verify sysctl values after write
sysext: Allow to (re)start units from extension-release metadata file
sysinstall: new component
man: document union filesystem resolution for RestrictFileSystemAccess=
sysupdate: Change disabling with --component-suggested/--feature-suggested
tpm2-clear: optionally reset TPM during a factory reset
tpm2-generator: if requested run things with an swtpm
tpm2: add "systemd-tpm2-swtpm" wrapper for "swtpm"
update-done: use the new option parser
utmp: drop setting runlevel entry in utmp
man: Point to the nss-systemd manpage for more details.
man/veritysetup-generator: document veritytab kernel command line option
man: fix links to veritysetup(8)
vmspawn: apply --grow-image= to the ephemeral copy
dns-delegates: add support for setting a firewall mark
man: document that separate /usr/local/ must not be used for config
man: mention openat2 effect of RestrictSUIDSGID
Drop support for SysV rc-local script support
image-policy: add support for restricting to specific filesystems
man: reword descriptions of numerical fields
network: hook up "machine tag" concept, also with .network/.link/.netdev files
man: fix service names
man/systemd.mstack: fix typos
udev-builtin-net_id: name auxiliary sub-function (SF) host network devices
network: document that Domains= may be specified more than once (#43194)
nspawn: Add --restrict-address-families= option
man: document that .path units don't care for hidden files
Fix path in docs for local pcrlock.d directory
tree-wide: Add initrd presets
Fix an invalid section in example for NFTSet
man: fix typos in systemd.scope.xml
core/service: Prevent accidental service termination during reload
socket: parse message queue size as IEC size
fstab-generator: support swap on network block devices
units: drop runlevel[0-6].target
Correct order for implied time & date specifications.
core/timer: Introduce RandomOffsetSec= knob (#36437)
man: document arm64 CPUFeatures
credentials: add policy that can allow key=null creds from the ESP
man: document the new .component files
sysusers: document u! version support
man: add required <title>
man/timedatectl: add reference to systemd.time(7)
tmpfiles: honor age for r/R cleanup
udev_device_has_tag: fix typo
man/udev_enumerate_new: fix style
man/udev: fix typo
udevadm: improve symlink query output
man: follow our own naming rules more closely
hwids: add a new uefi firmware type of device entry
man: Use proper conjunction and remove superfluous or
updatectl: Add a --no-ask-password argument
man: capsule support was added in v256
user-runtime-dir: enforce /tmp/ and /dev/shm/ quota
man: mention userdb.transient.* credentials in userdbctl(1)
boot,vconsole: Propagate UEFI HII keyboard layout to the OS
veritysetup: optionally measure Verity once we activated it
man: add tags for the next few versions
man: create reusable snippet for 'vpick' entries
Use https for freedesktop.org