There is no need to fork the daemon with systemd, so run in the
foreground for Type=simple. This also writes logs to stderr by
default, so this service no longer needs a special /var/log path.
The syslog.target unit does not exist either, but SSSD can
can optionally query NSCD, so order it after nscd.service.
There is a dependency loop when systemd is build with cryptsetup
like systemd -> cryptsetup -> lvm2 -> baselayout -> systemd. Since
CoreOS always installs a good baselayout, it makes sense drop the
lvm2 dependency and turn it into a conflict with bad versions. It
also has a runtime dependency loop on systemd, so make that into a
build dependency.
This also stabilizes the version that was being used by arm64,
updating amd64, to bring the architectures into alignment.
Changes include:
* Add cros_workon bits
* Define and use the symlink-usr flag
* Drop SELinux policy and udev init scripts dependencies
* Drop all patches since the source is from Git
* Switch /etc/resolv.conf to the old one
* Drop the D-Bus policy path to keep the default
* Use CoreOS NTP servers
* Install PAM files into /usr
* Set the timesyncd epoch
* Don't use default DNS servers
* Use legacy cgroups (https://github.com/docker/docker/issues/28109)
* Rewrite basically the entire install step
* Drop the systemd-bus-proxy user since the program is long gone
The actual nscd binary has been installed since sssd was added,
but none of the systemd configuration files were included. This
resulted in a binary that would not start due to a missing /run
directory.
The upstream nscd.conf is installed in /usr and linked into /etc.
CONFIG_INFINIBAND_QIB gained a CONFIG_INFINIBAND_RDMAVT dependency in
4.6. The QIB driver appears actively maintained, and we enable a number
of other Infiniband drivers.
CONFIG_I7300_IDLE enables a driver that was dropped in 4.10.
CONFIG_DEBUG_STRICT_USER_COPY_CHECKS was dropped in 4.8.
CONFIG_ZRAM_LZ4_COMPRESS was obsoleted by CryptoAPI in 4.8.
CONFIG_I40E_VXLAN is a driver option that was dropped in 4.8.
This changes the bug URL from GitHub to a subdomain under coreos.com.
This will allow us in the future to move to another bug tracker. As it
exists today, this new subdomain just redirects to GitHub so there
should be no change in behavior.
When flannel-docker-opts didn't require flanneld, flanneld could
fail and flannel-docker-opts would start immediately after. This
effectively broke the intended ordering, so now both services
require each other.
This also simplifies the ordering declarations of the two services
by making flannel-docker-opts have both After= and Requires= as is
most commonly configured.
