1️⃣4️⃣ Here's the 14th post highlighting key new features of the upcoming v258 release of systemd. #systemd258
The concept of system credentials has existed since a while in systemd. It allows parameterizing the system (and the services running on it) in a secure and hierarchical way. You can pass them into containers and into VMs, for example via SMBIOS Type #11 vendor strings. While the transport is low-level and firmware compatible, they can reasonably only be consumed in userspace.
⌛ The CFP for All Systems Go! 2025 closes on Friday; in 2 days!
📌 Submit your proposal about foundational user-space Linux technologies now! https://cfp.all-systems-go.io/all-systems-go-2025/cfp
ℹ️ Learn more about All Systems Go!: https://all-systems-go.io/
[$] Topics from the virtual filesystem layer
In the first filesystem-track session at the 2025 Linux Storage, Filesystem, Memory Management, and BPF Summit (LSFMM+BPF), virtual filesystem (VFS) layer co-maintainer Christian B [...]
I've just released mount-insight v0.1 https://gitlab.com/zygoon/mount-insight/-/releases/v0.1
Here's an excerpt from the release notes:
This is the initial release of mount-insight, a tool created to explore and display the data provided by the statmount system call.
Some features are only going to work once Linux 6.15 is released. The code needs to see matching, up-to-date headers for userspace Linux APIs as well.
CC @brauner
1/n
Oh yeah, I already mentioned this a while ago but I also added support for pidfds in Linux coredumps.
/proc/sys/kernel/core_pattern has been extended so userspace can instruct the kernel to install a pidfd for the
crashing process into the usermode helper process, e.g., systemd-coredump.
I released a new version of the #Landlock crate: https://github.com/landlock-lsm/rust-landlock/blob/HEAD/CHANGELOG.md#v042
We can now easily restrict signal sending and connections to abstract UNIX sockets for #rustlang programs. The documentation and tests have also been improved. Last but not least, a few new features will be useful for the upcoming Landlock configuration format.