Finit Versions Save

Fast init for Linux. Cookies included

4.7

4 months ago

Changes

  • Silence "not available" messages for run/task/service with nowarn
  • Update docs, cgroup.root workaround for SCHED_RR tasks
  • Drop runlevels 0 and 6 from keventd, not needed at reboot/poweroff
  • Mount /dev/shm with mode 1777 (sticky bit)
  • Mount /dev/mqueue if available, inspiration from Alpine Linux
  • Update Alpine Linux installer and configuration files, tested on Alpine v3.19, some assembly still required

Fixes

  • Fix confusing warning message when tmpfiles.d fails to install symlink
  • Fix tmpfiles.d legacy /run/lock/subsys, ordering
  • Add missing /var/tmp and /var/lock -> /run/lock (tmpfiles.d)
  • Fix #388: log redirection broken unless Finit runs in debug mode. Found and fixed by Ryan Rorison
  • Fix #389: must libc requires libgen.h for basename() function. Reported and worked around with new basenm() function by Stargirl
  • Fix #392: service/foo/ready condition reasserted on pidfile removal

4.6

6 months ago

Changes

  • Add support for service notify:pid and readiness none global option to change how Finit expects readiness notification, issue #386

Fixes

  • Fix #383: dbus and runparts regression in Finit v4.5. The configure script must expand FINIT_RUNPATH_ before defining it in config.h
  • Fix #384: service environment variables drop everything but the first argument, e.g., VAR="foo bar qux" drops everything but foo
  • Fix #385: internal conditions, e.g., <int/bootstrap> turn into flux when leaving bootstrap, causing depending services to stop
  • Fix #387: global environment variables declared with set VAR=NAME do not drop leading set , causing 'set VAR'='NAME' in env.
  • Sanity check environment variables, for services and globally. Ensure the variable name (key) does not contain spaces, or a leading set

4.5

6 months ago

Changes

  • Refactor runparts and /etc/rc.local to no longer block the main loop, allowing initctl calls to interact with Finit. Issue #356
  • Refactor the run stanza to no longer block the main loop, issue #362
  • Allow sulogin with a user different from root, issue #357
  • Allow disabling invocation of rescue mode from kernel command line
  • Add initctl -f to force-skip asking Finit for existing services when creating new services during bootstrap, e.g. /etc/rc.local
  • initctl runlevel now returns N S instead of N 10 in bootstrap
  • initctl runlevel N during bootstrap is now allowed. It changes the next runlevel to go to when bootstrap has completed. Effectively overriding the runlevel N statement in /etc/finit.conf
  • Improved logging on failure to execvp() a run/task/service, now with errno, e.g., "No such file or directory" when the command is missing from $PATH
  • Add Bash completion support for initctl, configurable, issue #360
  • Handle absolute path to initctl [enable|disable], not supported
  • Update finit.conf(5) man page with the recommended directory hierarchy in /etc/finit.d/
  • The runparts code has been split into /libexec/finit/runparts
  • The runparts command now takes two options: sysv and progress. The former ensures only SNNfoo and KNNfoo scripts are run.
  • Add SysV Init Compatibility section to documentation
  • Increased MAX path for commands, and arguments: 64 -> 256
  • The bundled watchdog daemon no longer tries to log at startup, because syslog is not available yet, any startup message leak to console
  • Extend if: option with runtime evaluation of conditions. E.g., start a task only if:<run/foo/failure> (here the run task 'foo' failed)
  • Document new if:, conflict:, nowarn options for run/task/service first introduced in v4.4
  • Failure to open fstab should log to console, not just log to /dev/kmsg
  • Rename /lib/finit/system/*.conf, added numbered prefix to ensure proper execution order, e.g., udevd should always run first
  • Plugins and bundled services: dbus, keventd, watchdogd, and runparts, are now loaded after all services in /lib/finit/system/. A new runtime-only path (for inspection) in /run/finit/system/ is used
  • Redirect log* output to console when finit.debug is enabled
  • Assert <int/container> condition if we detect running in container
  • Add support for mdev's netlink daemon mode, issue #367
  • Add support for mdevd in 10-hotplug.conf, preferred over plain mdev
  • Disable modprobe plugin by default, udevd and mdev/mdevd loads modules
  • Update documentation for run/task shell limitations, issue #376
  • Update documentation regarding automount of /run and /tmp
  • Update plugin documentation, add section about limited tmpfiles.d(5) support
  • Skip registering service when if:!name matches a known service. This allows conditional loading of alternative services, e.g. if udevd is already loaded we do not need mdevd
  • Drop doc/bootstrap.md, inaccurate and confusing to users

Fixes

  • Fix #227: believed to have been fixed in v4.3, the root cause was actually that Finit was waiting for a process that was no longer in the system. The fix is to ask the kernel on process-stop-timeout and replay the lost PID so that Finit can continue with reboot/shutdown

  • Fix #358: fix inotify events for /etc/finit.conf, improved log messages and error handling

  • Fix #361: cgroup move fail if run/task/services start as non-root. Regression in the v4.4 release cycle while adding support for the pre:/post:/ready: scripts. Now the latter scripts also properly run in their correct cgroup

  • Fix #366: document fsck.* kernel command line options and simplify the configure flags --enable-fsckfix and --enable-fastboot to only adjust the default values for the fsck.* options.

  • Fix #371: swap load order of /lib/finit/system/* vs /etc/finit.d/*
    We must run 10-hotplug.conf first to ensure devices and modules are up and loaded before the user's run/task/services are called. The order at bootstrap is now saved in /run/finit/conf.order for inspection, /run/finit/exec.order shows the start order of each process

  • Fix #372: lost udevadm calls due to overloading

  • Adjust final udevadm settle timeout: 5 -> 30 sec

  • Fixed dbus plugin, the function that located <pidfile> ... in the dbus/system.conf caused spurious line breaks which led to the service not being loaded properly

  • The runparts executor now skips backup files (foo~)

  • The runparts stanza now properly appends start to scripts that start with S[0-9]+. This has been broken for a very long time.

  • Fix #377: expand service env:file variables, allow constructs like:

      RUNDIR=/var/run/somesvc
      DAEMON_ARGS=--workdir $RUNDIR --other-args...
    
  • Fix #378: warn on console if run/task times out during bootstrap

  • Fix #378: add run/task support for <!> to allow transition from bootstrap to multi-user runlevel even though task has not run yet.

  • Fix #382: do not clear <service/foo/STATE> conditions on reload.
    Introduced back in v4.3-rc2, 82cc10be8, the support for automatic service conditions have had a weird and unintended behavior. Any change in state (see doc/svc-machine.png) caused Finit to clear out all previously acquired service conditions.

    However, when moving between RUNNING and PAUSED states, a service should not have its conditions cleared. The PAUSED state, seen also by all conditions moving to FLUX, is only temporary while an initctl reload is processed. If a service has no changes to be applied it will move back to RUNNING.

    Also, we cannot clear the service conditions because other run/task or services may depend on it and clearing them would cause Finit to SIGTERM these processes (since they are no longer eligible to run).

4.5-rc5

7 months ago

Changes

  • Refactor runparts and /etc/rc.local to no longer block the main loop, allowing initctl calls to interact with Finit. Issue #356
  • Refactor the run stanza to no longer block the main loop, issue #362
  • Allow sulogin with a user different from root, issue #357
  • Allow disabling invocation of rescue mode from kernel command line
  • Add initctl -f to force-skip asking Finit for existing services when creating new services during bootstrap, e.g. /etc/rc.local
  • initctl runlevel now returns N S instead of N 10 in bootstrap
  • initctl runlevel N during bootstrap is now allowed. It changes the next runlevel to go to when bootstrap has completed. Effectively overriding the runlevel N statement in /etc/finit.conf
  • Improved logging on failure to execvp() a run/task/service, now with errno, e.g., "No such file or directory" when the command is missing from $PATH
  • Add support for Bash completion to initctl, issue #360
  • Handle absolute path to initctl [enable|disable], not supported
  • Update finit.conf(5) man page with the recommended directory hierarchy in /etc/finit.d/
  • The runparts code has been split into /libexec/finit/runparts
  • The runparts command now takes two options: sysv and progress. The former ensures only SNNfoo and KNNfoo scripts are run.
  • Add SysV Init Compatibility section to documentation
  • Increased MAX path for commands, and arguments: 64 -> 256
  • The bundled watchdog daemon no longer tries to log at startup, because syslog is not available yet, any startup message leak to console
  • Extend if: option with runtime evaluation of conditions. E.g., start a task only if:<run/foo/failure> (here the run task 'foo' failed)
  • Document new if:, conflict:, nowarn options for run/task/service first introduced in v4.4
  • Failure to open fstab should log to console, not just log to /dev/kmsg
  • Rename /lib/finit/system/*.conf, added numbered prefix to ensure proper execution order, e.g., udevd should always run first
  • Plugins and bundled services: dbus, keventd, watchdogd, and runparts, are now loaded after all services in /lib/finit/system/. A new runtime-only path (for inspection) in /run/finit/system/ is used

Fixes

  • Fix #227: believed to have been fixed in v4.3, the root cause was actually that Finit was waiting for a process that was no longer in the system. The fix is to ask the kernel on process-stop-timeout and replay the lost PID so that Finit can continue with reboot/shutdown
  • Fix #358: fix inotify events for /etc/finit.conf, improved log messages and error handling
  • Fix #361: cgroup move fail if run/task/services start as non-root. Regression in the v4.4 release cycle while adding support for the pre:/post:/ready: scripts. Now the latter scripts also properly run in their correct cgroup
  • Fix #366: document fsck.* kernel command line options and simplify the configure flags --enable-fsckfix and --enable-fastboot to only adjust the default values for the fsck.* options.
  • Fix #371: swap load order of /lib/finit/system/* vs /etc/finit.d/* We must run 10-hotplug.conf first to ensure devices and modules are up and loaded before the user's run/task/services are called. The order at bootstrap is now saved in /run/finit/conf.order for inspection, /run/finit/exec.order shows the start order of each process
  • Fix #372: lost udevadm calls due to overloading
  • Fixed dbus plugin, the function that located <pidfile> ... in the dbus/system.conf caused spurious line breaks which led to the service not being loaded properly
  • The runparts executor now skips backup files (foo~)
  • The runparts stanza now properly appends start to scripts that start with S[0-9]+. This has been broken for a very long time.

4.5-rc4

7 months ago

Changes

  • Refactor runparts and /etc/rc.local to no longer block the main loop, allowing initctl calls to interact with Finit. Issue #356
  • Refactor the run stanza to no longer block the main loop, issue #362
  • Allow sulogin with a user different from root, issue #357
  • Allow disabling invocation of rescue mode from kernel command line
  • Add initctl -f to force-skip asking Finit for existing services when creating new services during bootstrap, e.g. /etc/rc.local
  • initctl runlevel now returns N S instead of N 10 in bootstrap
  • initctl runlevel N during bootstrap is now allowed. It changes the next runlevel to go to when bootstrap has completed. Effectively overriding the runlevel N statement in /etc/finit.conf
  • Improved logging on failure to execvp() a run/task/service, now with errno, e.g., "No such file or directory" when the command is missing from $PATH
  • Add support for Bash completion to initctl, issue #360
  • Handle absolute path to initctl [enable|disable], not supported
  • Update finit.conf(5) man page with the recommended directory hierarchy in /etc/finit.d/
  • The runparts code has been split into /libexec/finit/runparts
  • The runparts command now takes two options: sysv and progress. The former ensures only SNNfoo and KNNfoo scripts are run.
  • Add SysV Init Compatibility section to documentation
  • Increased MAX path for commands, and arguments: 64 -> 256
  • The bundled watchdog daemon no longer tries to log at startup, because syslog is not available yet, any startup message leak to console
  • Extend if: option with runtime evaluation of conditions. E.g., start a task only if:<run/foo/failure> (here the run task 'foo' failed)
  • Document new if:, conflict:, nowarn options for run/task/service first introduced in v4.4

Fixes

  • Fix #227: believed to have been fixed in v4.3, the root cause was actually that Finit was waiting for a process that was no longer in the system. The fix is to ask the kernel on process-stop-timeout and replay the lost PID so that Finit can continue with reboot/shutdown
  • Fix #358: fix inotify events for /etc/finit.conf, improved log messages and error handling
  • Fix #361: cgroup move fail if run/task/services start as non-root. Regression in the v4.4 release cycle while adding support for the pre:/post:/ready: scripts. Now the latter scripts also properly run in their correct cgroup
  • Fix #366: document fsck.* kernel command line options and simplify the configure flags --enable-fsckfix and --enable-fastboot to only adjust the default values for the fsck.* options.
  • The runparts executor now skips backup files (foo~)
  • The runparts stanza now properly appends start to scripts that start with S[0-9]+. This has been broken for a very long time.

4.5-rc3

7 months ago

Changes

  • Refactor runparts and /etc/rc.local to no longer block the main loop, allowing initctl calls to interact with Finit. Issue #356
  • Refactor the run stanza to no longer block the main loop, issue #362
  • Allow sulogin with a user different from root, issue #357
  • Allow disabling invocation of rescue mode from kernel command line
  • Add initctl -f to force-skip asking Finit for existing services when creating new services during bootstrap, e.g. /etc/rc.local
  • initctl runlevel now returns N S instead of N 10 in bootstrap
  • Improved logging on failure to execvp() a run/task/service, now with errno, e.g., "No such file or directory" when the command is missing from $PATH
  • Add support for Bash completion to initctl, issue #360
  • Handle absolute path to initctl [enable|disable], not supported
  • Update finit.conf(5) man page with the recommended directory hierarchy in /etc/finit.d/
  • The runparts code has been split into /libexec/finit/runparts
  • The runparts command now takes two options: sysv and progress. The former ensures only SNNfoo and KNNfoo scripts are run.
  • Add SysV Init Compatibility section to documentation
  • Increased MAX path for commands, and arguments: 64 -> 256
  • The bundled watchdog daemon no longer tries to log at startup, because syslog is not available yet, any startup message leak to console

Fixes

  • Fix #227: believed to have been fixed in v4.3, the root cause was actually that Finit was waiting for a process that was no longer in the system. The fix is to ask the kernel on process-stop-timeout and replay the lost PID so that Finit can continue with reboot/shutdown
  • Fix #358: fix inotify events for /etc/finit.conf, improved log messages and error handling
  • Fix #361: cgroup move fail if run/task/services start as non-root. Regression in the v4.4 release cycle while adding support for the pre:/post:/ready: scripts. Now the latter scripts also properly run in their correct cgroup
  • Fix #366: document fsck.* kernel command line options and simplify the configure flags --enable-fsckfix and --enable-fastboot to only adjust the default values for the fsck.* options.
  • The runparts executor now skips backup files (foo~)
  • The runparts stanza now properly appends start to scripts that start with S[0-9]+. This has been broken for a very long time.

4.5-rc2

8 months ago

Changes

  • Refactor runparts and /etc/rc.local to no longer block the main loop, allowing these scripts to call initctl to interact with Finit. Still in a limited way due to them being used at bootstrap, issue #356
  • Refactor the run stanza to no longer block the main loop, issue #362
  • Allow sulogin with a user different from root, issue #357
  • Allow disabling invocation of rescue mode from kernel command line
  • Add initctl -f to force-skip asking Finit for existing services when creating new services during bootstrap, e.g. /etc/rc.local
  • initctl runlevel now returns N S instead of N 10 in bootstrap
  • Improved logging on failure to execvp() a run/task/service, now with errno, e.g., "No such file or directory" when the command is missing from $PATH
  • Add support for Bash completion to initctl, issue #360
  • Handle absolute path to initctl [enable|disable], not supported
  • Update finit.conf(5) man page with the recommended directory hierarchy in /etc/finit.d/
  • The runparts code has been split into /libexec/finit/runparts
  • Add SysV Init Compatibility section to documentation
  • Increased MAX path for commands, and arguments: 64 -> 256

Fixes

  • Fix #227: believed to have been fixed in v4.3, the root cause was actually that Finit was waiting for a process that was no longer in the system. The fix is to ask the kernel on process-stop-timeout and replay the lost PID so that Finit can continue with reboot/shutdown
  • Fix #358: fix inotify events for /etc/finit.conf, improved log messages and error handling
  • Fix #361: cgroup move fail if run/task/services start as non-root. Regression in the v4.4 release cycle while adding support for the pre:/post:/ready: scripts. Now the latter scripts also properly run in their correct cgroup
  • The runparts executor now skips backup files (foo~)
  • The runparts stanza now properly appends start to scripts that start with S[0-9]+. This has been broken for a very long time.

4.4

1 year ago

Note 1: this release contains changes to the .conf parser. If you have .conf file statements with comment character (#) in the command options or description, you must now escape them (\#). Issue #186

Note 2: prior to this release, runlevel S and 0 were after boot treated as the same runlevel. This caused task [06] ... to also run at bootstrap instead of just at shutdown and reboot. The changes made to Finit to separate S from 0 require you to update the allowed runlevels for services that are allowed to continue running at shutdown. I.e., change [S123456789] to [S0123456789] for, e.g., sysklogd. Issue #352

Changes

  • Add limited tmpfiles.d(5) support

    This change adds very basic tmpfiles.d/ support to Finit. Most of the basic types are supported, but not all, so for now, please check the code and examples for details on what is working.

  • If a run/task/service command does not exist, skip registering it

    This changes the semantics of Finit a bit by checking for the command to run when registering it, skipping commands that cannot be found in the absolute path provided in the command, or in $PATH

    This change includes a new nowarn flag that can be used to prevent Finit from warning for missing commands. See below for an example.

  • Add run/task/service support for conflict:foo handling

  • Add run/task/service support for if:[!]ident and if:<[!]cond>

    Conditional loading of stanza depending on ident is already loaded (or not), or condition satisfied (or not). E.g., do not run mdev if we found and registered udevd, or load service only if <boot/testing> condition is set.

    The optional leading ! negates the comparison, if NOT foo then ...

  • Add support for static services in /lib/finit/system/*.conf

    Slowly migrating away from hard-coded services in plugins. This way it's possible for the user to both inspect and override as needed.

  • Migrate hotplug plugin to a conditional /lib/finit/system/hotplug.conf

    This is the first example of the just minted advanced stanza syntax with if:-statements, conflict: handling, and nowarn flags.

  • Initial support for template services, [email protected], similar to systemd

      $ initctl show avahi-autoipd@
      service :%i avahi-autoipd --syslog %i -- ZeroConf for %i
    

    To enable ZeroConf for, e.g., eth0, use

      $ initctl enable [email protected]
    

    The enabled symlink will be set up to [email protected] and every instance of %i will in the instantiated directive be replaced with eth0. Inspect the result with:

      $ initctl status avahi-autoipd:eth0
    
  • Add devmon, a <dev/foo> condition provider, issue #185

  • Support for line continuation character \ in .conf files, issue #186

      service name:sysklogd [S123456789]   \
          env:-/etc/default/sysklogd       \
          syslogd -F $SYSLOGD_ARGS         \
          -- System log daemon
    
  • HOOK_BASEFS_UP has been moved! External plugins that need to call service_register(), please use HOOK_SVC_PLUGIN from now on.
    Apologies for any inconveniences this might cause!

  • getty: add support for /etc/os-release to replace uname output
    This change, which has a fallback to /usr/lib/os-release, overrides traditional modifiers with the os-release variant. These values were taken from uname, which on Linux systems are pretty useless since they always return the kernel name and version instead of the distro/OS values.

    E.g., \s becomes PRETTY_NAME instead of 'Linux' and \v becomes the pretty VERSION, while \r becomes VERSION_ID.

  • Support for overriding /etc/finit.conf and /etc/finit.d issue #235
    New (kernel) command line option finit.config=PATH which can be used to redirect Finit to start up with, e.g., /etc/factory.conf instead of /etc/finit.conf.

    For the complete experience a new top-level configuration file directive rcsd PATH has aslo been added. It in turn can be used by factory.conf as follows to override /etc/finit.d:

      rcsd /etc/factory.d
    
  • Support for overriding /etc/finit.d from the alternate finit.conf with a new rcsd /path/to/dot.d/ .conf file directive

  • Support for fsck_mode=[auto,skip,force] + fsck_repair=[preen,no,yes]

  • Add set keyword for environment variables set in /etc/finit.conf

  • Support finit.cond=foo cmdline <boot/foo> conditions, issue #250

  • initctl JSON output support for status and conditions, issue #273
    Example:

      root@infix:~$ initctl status -j resolvconf
      {
        "identity": "resolvconf",
        "description": "Update DNS configuration",
        "type": "task",
        "forking": false,
        "status": "done",
        "exit": { "code": 0 },
        "origin": "/etc/finit.d/enabled/sysrepo.conf",
        "command": "resolvconf -u",
        "restarts": 0,
        "pidfile": "none",
        "pid": 0,
        "user": "root",
        "group": "root",
        "uptime": 0,
        "runlevels": [ 1, 2, 3, 4, 5, 7, 8, 9 ]
      }
    

    The excellent tool jq can be used to extract parts of the output for further scripting. E.g. initctl status -j foo | jq .exit.status

  • Add JSON support to initctl ls command

    This allows for easy access to the disabled services:

      root@anarchy:~# initctl ls --json |jq '.available - .enabled'
      [
        "chronyd.conf",
        "dnsmasq.conf",
        "gdbserver.conf",
        "inadyn.conf",
        "inetd.conf",
        "isisd.conf",
        "lldpd.conf",
        "mstpd.conf",
        "ntpd.conf",
        "ospf6d.conf",
        "ospfd.conf",
        "querierd.conf",
        "ripd.conf",
        "ripng.conf",
        "sshd.conf",
        "syslogd.conf",
        "telnetd.conf",
        "uftpd.conf",
        "wpa_supplicant.conf",
        "zebra.conf"
      ]
    
  • Allow manual:yes on sysv/service/run/task stanzas, issue #274

  • Add support for oncrash:script to call the post:script action, if defined, for a crashing service. The EXIT_CODE variable sent to the script is set to crashed. Issue #282

  • Search for plugins in /usr and /usr/local as well, issue #284

  • tty: add support for passenv flag to /bin/login, issue #286

  • Add reboot/shutdown/poweroff timeout -t SEC to initctl, issue #295

  • Add support for s6 and systemd readiness notification, issue #299.
    Service readiness notification to support daemons employing systemd and s6 notification. Complementing the native Finit readiness support using PID files that exist already.

    The two have slightly different ways of implementing readiness:

    Finit now provides both a NOTIFY_SOCKET environment variable, for systemd, and a way to start s6 daemons with a descriptor argument.

    For details on the syntax, see the service documentation.

    This change also renames internal states for run/task/services to avoid any confusion with the introduction of ready:scripts:

    • WAITING -> PAUSED
    • READY -> WAITING

    A service condition that used, e.g., <service/foo/ready> should now instead use <service/foo/waiting>

  • Add ready:script for services, called when daemon is ready, issue #300

  • Add support for running scripts at shutdown at two new hook points during the shutdown process, issue #302. See doc/plugins.md for details:

    • HOOK_SVC_DN: after all services and non-reserved processes have been killed (and collected)
    • HOOK_SYS_DN: after all file systems have been unmounted, just prior to Finit calling reboot() to shut down or reboot the system
  • The modules-load plugin now default to runlevel [S], in previous releases it was [2345]. This breaking change is to align it more with what users mostly want (modules loaded before services start) and can be changed back to the old behavior with a per-file setting:

      set runlevel 2345
    
  • The modules-load plugin now adds silent tasks for modprobe. This to prevent confusing [ OK ] boot messages when in fact modprobe failed.

  • The modules-load plugin now support set modprobe /path/to/modprobe

  • The header files finit/conf.h and finit/service.h are now exported for external plugins

  • Add support for multiple args to initctl cond set/clr, issue #329

  • Silence confusing [ OK ] progress from modules-load plugin, issue #332

    This change drops the confusing status progress output, which was always OK since the actual modprobe operation runs in the background. No need to show status of the "added a task to finit, found modprobe" command.

  • dbus plugin: adapt to other operating systems

    Not all Linux systems are based on Debian, and even if they are inspired by Debian (Buildroot), they do not necessarily use the same defaults. Probes the system at runtime for:

    • dbus user and group
    • dbus PID file

    If the user/group cannot be found we fall back to root, if the PID file cannot be determined we ignore PID file readiness.

  • Improve documentation for runparts and hook scripts. Issue #315, #320

  • Add HOOK_NETWORK_DN, called after change to runlevel 6 or 0, issue #319

  • Use sysklogd logger tool instead of legacy logit tool, issue #344

    For log redirection Finit has the legacy logit tool. This change allows Finit to use the sysklogd project's extended logger tool instead, when available. Allowing logging with the process' PID.

  • Add initctl aliases: cat -> show, kill -> signal

  • Add initctl -n,--noerr to return OK(0) if services do not exist, for integration with openresolv and scripts with similar requirements

  • Add initctl plugins, list installed plugins

  • Add timestamp to log messages in fallback and logging to stderr.
    When there is no log daemon, and we are running in a container, or we cannot log to the kernel ring buffer, then we log to stderr. This change improves log output by prefixing each message with a timestamp.

Fixes

  • Fix #254: document limitations in rc.local and runparts scripts

  • Fix #269: add compulsory kernel symlinks in /dev

  • Fix #275: initctl status foo should list all instances, regression introduced in v4.3

  • Fix #278: enforce conditions also for running pre: scripts

  • Fix #279: allow restart:always, of crashing services. Similar to respawn but honors restart_sec

  • Fix #280: allow calling initctl restart foo from within foo

  • Fix #283: too quick timeout at bootstrap of lingering tasks

  • Fix #285: initctl restart should start crashed service

  • Fix #288: enable built-in sulogin in Alpine and Void Linux builds

  • Fix #293: modprobe plugin: support for coldplugging more devices. It turns out, not all buses in Linux add modalias attributes to their devices in sysfs. One notable exception are MDIO buses. The plugin's scan routine would thus not pick them up.

  • Fix #294: shutdown --help mistakenly shuts down system

  • Fix #310: Always use configured restart delay for crashing services. If no delay is configured, default to an initial 2000 msec for forking daemons and start-stop scripts, and 1 msec for non-forking daemons

  • Fix #311: document how to combine device tree with conditions

  • Fix #312: restart services with respawn set, e.g. ttys, immediately

  • Fix #313: Cancel pending restart timer on stop/start/restart/reload

  • Fix #314: skip run/task/service restart if conditions are lost

  • Fix #315: add environment variables to hook scripts

    All hook scripts are called with at least one environment variable set, FINIT_HOOK_NAME, useful when reusing the same hook script for multiple hook points. It is set to the string name, also used by the path, e.g., hook/net/up

    For all hook points from hook/sys/shutdown and later, FINIT_SHUTDOWN is also set, to one of: halt, poweroff, reboot

  • Fix #317: make sure hook scripts don't run twice, also fixes #316

  • Fix #318: only show [ OK ] Calling foo progress for runparts ...

  • Fix #320: the API/IPC socket is closed immediately at shutdown/reboot to protect hook scripts or services calling initctl. There is no way to service these requests safely at that time

  • Fix #333: consider a service dirty if command line args have changed

    This fixes initctl reload correctly restarting all daemons that have new command line arguments.

    Previously command line arguments changes were only acted upon if the service was explicitly reloaded initctl reload myservice.

    Found and fixed by Jack Newman

  • Fix #338: ensure shutdown hooks are called properly; hook/sys/down and hook/svc/down hook scripts, found and fixed by Jack Newman

  • Fix #339: use absolute path in /etc/finit.d/enabled/ symlinks, for use-cases when /etc is read-only and /etc/finit.d/enabled -> /mnt/finit.d/enabled, reported by Jack Newman

  • Fix #340: Finit ignores deleted/moved .conf file sin /etc/finit.d

  • Fix #342: in runlevel S (bootstrap), not all initctl commands can be supported, block the following: runlevel, reload, start/stop, restart, reload, halt, poweroff, suspend. Also, prevent SIGHUP and SIGUSR1 signals when in shutdown or reboot

  • Fix #352: separate runlevel S from runlevel 0

  • Fix #355: regression in v3.2 stopping a process and its group

    In Finit v3.2 a regression was introduced that affects the way Finit stops a supervised process and its process group.

    Instead of sending SIGTERM to the process, and thus delegating the responsibility to that process to inform any children it may have, as of commit 91a9c83 Finit sends SIGTERM to the entire process group. For SIGKILL this is fine, SIGKILL only runs as cleanup and as a last ditch effort if the process doesn't respond to SIGTERM.

    This regression, introduced in v3.2, directly affects services like avahi-autoipd that have forked off children that it needs to tell to exit cleanly before it returns. With the patch in question these children are never allowed to complete, which in turn causes lingering 169.254 link-local addresses on interfaces.

  • Fix bootmisc plugin: octal permission on /run/lock and /var/lock

  • Ensure initctl cond get support the flux state (exit code 255)

  • Fix potential socket leak at bootstrap and shutdown

  • Fix potential NULL pointer deref in kernel command line parser

  • Fix lingering condition in service after reload of service with new config that has no condition

  • Fix wrong path to command in service after reload, may have changed

  • logit: fall back to package name if $LOGNAME and $USER are unset. Note: you should probably not use logit in your own scripts, it is only meant for internal use by Finit. We recommend using logger from the bsdutils or sysklogd packages instead

  • Fix issue where env:/pre:/post:/etc. is removed from a service

    The trick is when reloading a service like this:

      service env:/etc/env    serv -np -e foo:bar
    

    into this:

      service pre:/bin/pre.sh serv -np
    

    In the second the env: has been removed and pre: added. Prior to this patch, env: was kept leading to unintended behavior.

  • Fix parse/diff of command line args, e.g., nginx -g 'daemon off;'

    Starting a service like this works fine:

      service [2345789] env:-/etc/default/nginx nginx -g 'daemon off;'
    

    However, on initctl reload (and no change to .conf files) the arg list was lost while parsing the .conf files. Leading to a false positive 'diff' in args causing nginx to be unnecessarily restarted.

  • Fix issue with disabled "linewrap" on the console TTY after login. The root cause is qemu-system-x86_64 -nographics disabling it when starting up. The correct \e[?7h escape code is now used.

4.4-rc2

1 year ago

Note 1: this release contains changes to the .conf parser. If you have .conf file statements with comment character (#) in the command options or description, you must now escape them (\#). Issue #186

Note 2: prior to this release, runlevel S and 0 were after boot treated as the same runlevel. This caused task [06] ... to also run at bootstrap instead of just at shutdown and reboot. The changes made to Finit to separate S from 0 require you to update the allowed runlevels for services that are allowed to continue running at shutdown. I.e., change [S123456789] to [S0123456789] for, e.g., sysklogd. Issue #352

Changes

  • Add limited tmpfiles.d(5) support

    This change adds very basic tmpfiles.d/ support to Finit. Most of the basic types are supported, but not all, so for now, please check the code and examples for details on what is working.

  • If a run/task/service command does not exist, skip registering it

    This changes the semantics of Finit a bit by checking for the command to run when registering it, skipping commands that cannot be found in the absolute path provided in the command, or in $PATH

    This change includes a new nowarn flag that can be used to prevent Finit from warning for missing commands. See below for an example.

  • Add run/task/service support for conflict:foo handling

  • Add run/task/service support for if:[!]ident and if:<[!]cond>

    Conditional loading of stanza depending on ident is already loaded (or not), or condition satisfied (or not). E.g., do not run mdev if we found and registered udevd, or load service only if <boot/testing> condition is set.

    The optional leading ! negates the comparison, if NOT foo then ...

  • Add support for static services in /lib/finit/system/*.conf

    Slowly migrating away from hard-coded services in plugins. This way it's possible for the user to both inspect and override as needed.

  • Migrate hotplug plugin to a conditional /lib/finit/system/hotplug.conf

    This is the first example of the just minted advanced stanza syntax with if:-statements, conflict: handling, and nowarn flags.

  • Initial support for template services, [email protected], similar to systemd

      $ initctl show avahi-autoipd@
      service :%i avahi-autoipd --syslog %i -- ZeroConf for %i
    

    To enable ZeroConf for, e.g., eth0, use

      $ initctl enable [email protected]
    

    The enabled symlink will be set up to [email protected] and every instance of %i will in the instantiated directive be replaced with eth0. Inspect the result with:

      $ initctl status avahi-autoipd:eth0
    
  • Add devmon, a <dev/foo> condition provider, issue #185

  • Support for line continuation character \ in .conf files, issue #186

      service name:sysklogd [S123456789]   \
          env:-/etc/default/sysklogd       \
          syslogd -F $SYSLOGD_ARGS         \
          -- System log daemon
    
  • HOOK_BASEFS_UP has been moved! External plugins that need to call service_register(), please use HOOK_SVC_PLUGIN from now on.
    Apologies for any inconveniences this might cause!

  • getty: add support for /etc/os-release to replace uname output
    This change, which has a fallback to /usr/lib/os-release, overrides traditional modifiers with the os-release variant. These values were taken from uname, which on Linux systems are pretty useless since they always return the kernel name and version instead of the distro/OS values.

    E.g., \s becomes PRETTY_NAME instead of 'Linux' and \v becomes the pretty VERSION, while \r becomes VERSION_ID.

  • Support for overriding /etc/finit.conf and /etc/finit.d issue #235
    New (kernel) command line option finit.config=PATH which can be used to redirect Finit to start up with, e.g., /etc/factory.conf instead of /etc/finit.conf.

    For the complete experience a new top-level configuration file directive rcsd PATH has aslo been added. It in turn can be used by factory.conf as follows to override /etc/finit.d:

      rcsd /etc/factory.d
    
  • Support for overriding /etc/finit.d from the alternate finit.conf with a new rcsd /path/to/dot.d/ .conf file directive

  • Support for fsck_mode=[auto,skip,force] + fsck_repair=[preen,no,yes]

  • Add set keyword for environment variables set in /etc/finit.conf

  • Support finit.cond=foo cmdline <boot/foo> conditions, issue #250

  • initctl JSON output support for status and conditions, issue #273
    Example:

      root@infix:~$ initctl status -j resolvconf
      {
        "identity": "resolvconf",
        "description": "Update DNS configuration",
        "type": "task",
        "forking": false,
        "status": "done",
        "exit": { "code": 0 },
        "origin": "/etc/finit.d/enabled/sysrepo.conf",
        "command": "resolvconf -u",
        "restarts": 0,
        "pidfile": "none",
        "pid": 0,
        "user": "root",
        "group": "root",
        "uptime": 0,
        "runlevels": [ 1, 2, 3, 4, 5, 7, 8, 9 ]
      }
    

    The excellent tool jq can be used to extract parts of the output for further scripting. E.g. initctl status -j foo | jq .exit.status

  • Add JSON support to initctl ls command

    This allows for easy access to the disabled services:

      root@anarchy:~# initctl ls --json |jq '.available - .enabled'
      [
        "chronyd.conf",
        "dnsmasq.conf",
        "gdbserver.conf",
        "inadyn.conf",
        "inetd.conf",
        "isisd.conf",
        "lldpd.conf",
        "mstpd.conf",
        "ntpd.conf",
        "ospf6d.conf",
        "ospfd.conf",
        "querierd.conf",
        "ripd.conf",
        "ripng.conf",
        "sshd.conf",
        "syslogd.conf",
        "telnetd.conf",
        "uftpd.conf",
        "wpa_supplicant.conf",
        "zebra.conf"
      ]
    
  • Allow manual:yes on sysv/service/run/task stanzas, issue #274

  • Add support for oncrash:script to call the post:script action, if defined, for a crashing service. The EXIT_CODE variable sent to the script is set to crashed. Issue #282

  • Search for plugins in /usr and /usr/local as well, issue #284

  • tty: add support for passenv flag to /bin/login, issue #286

  • Add reboot/shutdown/poweroff timeout -t SEC to initctl, issue #295

  • Add support for s6 and systemd readiness notification, issue #299.
    Service readiness notification to support daemons employing systemd and s6 notification. Complementing the native Finit readiness support using PID files that exist already.

    The two have slightly different ways of implementing readiness:

    Finit now provides both a NOTIFY_SOCKET environment variable, for systemd, and a way to start s6 daemons with a descriptor argument.

    For details on the syntax, see the service documentation.

    This change also renames internal states for run/task/services to avoid any confusion with the introduction of ready:scripts:

    • WAITING -> PAUSED
    • READY -> WAITING

    A service condition that used, e.g., <service/foo/ready> should now instead use <service/foo/waiting>

  • Add ready:script for services, called when daemon is ready, issue #300

  • Add support for running scripts at shutdown at two new hook points during the shutdown process, issue #302. See doc/plugins.md for details:

    • HOOK_SVC_DN: after all services and non-reserved processes have been killed (and collected)
    • HOOK_SYS_DN: after all file systems have been unmounted, just prior to Finit calling reboot() to shut down or reboot the system
  • The modules-load plugin now default to runlevel [S], in previous releases it was [2345]. This breaking change is to align it more with what users mostly want (modules loaded before services start) and can be changed back to the old behavior with a per-file setting:

      set runlevel 2345
    
  • The modules-load plugin now adds silent tasks for modprobe. This to prevent confusing [ OK ] boot messages when in fact modprobe failed.

  • The modules-load plugin now support set modprobe /path/to/modprobe

  • The header files finit/conf.h and finit/service.h are now exported for external plugins

  • Add support for multiple args to initctl cond set/clr, issue #329

  • Silence confusing [ OK ] progress from modules-load plugin, issue #332

    This change drops the confusing status progress output, which was always OK since the actual modprobe operation runs in the background. No need to show status of the "added a task to finit, found modprobe" command.

  • dbus plugin: adapt to other operating systems

    Not all Linux systems are based on Debian, and even if they are inspired by Debian (Buildroot), they do not necessarily use the same defaults. Probes the system at runtime for:

    • dbus user and group
    • dbus PID file

    If the user/group cannot be found we fall back to root, if the PID file cannot be determined we ignore PID file readiness.

  • Improve documentation for runparts and hook scripts. Issue #315, #320

  • Add HOOK_NETWORK_DN, called after change to runlevel 6 or 0, issue #319

  • Use sysklogd logger tool instead of legacy logit tool, issue #344

    For log redirection Finit has the legacy logit tool. This change allows Finit to use the sysklogd project's extended logger tool instead, when available. Allowing logging with the process' PID.

  • Add initctl aliases: cat -> show, kill -> signal

  • Add initctl -n,--noerr to return OK(0) if services do not exist, for integration with openresolv and scripts with similar requirements

  • Add initctl plugins, list installed plugins

  • Add timestamp to log messages in fallback and logging to stderr.
    When there is no log daemon, and we are running in a container, or we cannot log to the kernel ring buffer, then we log to stderr. This change improves log output by prefixing each message with a timestamp.

Fixes

  • Fix #254: document limitations in rc.local and runparts scripts

  • Fix #269: add compulsory kernel symlinks in /dev

  • Fix #275: initctl status foo should list all instances, regression introduced in v4.3

  • Fix #278: enforce conditions also for running pre: scripts

  • Fix #279: allow restart:always, of crashing services. Similar to respawn but honors restart_sec

  • Fix #280: allow calling initctl restart foo from within foo

  • Fix #283: too quick timeout at bootstrap of lingering tasks

  • Fix #285: initctl restart should start crashed service

  • Fix #288: enable built-in sulogin in Alpine and Void Linux builds

  • Fix #293: modprobe plugin: support for coldplugging more devices. It turns out, not all buses in Linux add modalias attributes to their devices in sysfs. One notable exception are MDIO buses. The plugin's scan routine would thus not pick them up.

  • Fix #294: shutdown --help mistakenly shuts down system

  • Fix #310: Always use configured restart delay for crashing services. If no delay is configured, default to an initial 2000 msec for forking daemons and start-stop scripts, and 1 msec for non-forking daemons

  • Fix #311: document how to combine device tree with conditions

  • Fix #312: restart services with respawn set, e.g. ttys, immediately

  • Fix #313: Cancel pending restart timer on stop/start/restart/reload

  • Fix #314: skip run/task/service restart if conditions are lost

  • Fix #315: add environment variables to hook scripts

    All hook scripts are called with at least one environment variable set, FINIT_HOOK_NAME, useful when reusing the same hook script for multiple hook points. It is set to the string name, also used by the path, e.g., hook/net/up

    For all hook points from hook/sys/shutdown and later, FINIT_SHUTDOWN is also set, to one of: halt, poweroff, reboot

  • Fix #317: make sure hook scripts don't run twice, also fixes #316

  • Fix #318: only show [ OK ] Calling foo progress for runparts ...

  • Fix #320: the API/IPC socket is closed immediately at shutdown/reboot to protect hook scripts or services calling initctl. There is no way to service these requests safely at that time

  • Fix #333: consider a service dirty if command line args have changed

    This fixes initctl reload correctly restarting all daemons that have new command line arguments.

    Previously command line arguments changes were only acted upon if the service was explicitly reloaded initctl reload myservice.

    Found and fixed by Jack Newman

  • Fix #338: ensure shutdown hooks are called properly; hook/sys/down and hook/svc/down hook scripts, found and fixed by Jack Newman

  • Fix #339: use absolute path in /etc/finit.d/enabled/ symlinks, for use-cases when /etc is read-only and /etc/finit.d/enabled -> /mnt/finit.d/enabled, reported by Jack Newman

  • Fix #340: Finit ignores deleted/moved .conf file sin /etc/finit.d

  • Fix #342: in runlevel S (bootstrap), not all initctl commands can be supported, block the following: runlevel, reload, start/stop, restart, reload, halt, poweroff, suspend. Also, prevent SIGHUP and SIGUSR1 signals when in shutdown or reboot

  • Fix #352: separate runlevel S from runlevel 0

  • Fix bootmisc plugin: octal permission on /run/lock and /var/lock

  • Ensure initctl cond get support the flux state (exit code 255)

  • Fix potential socket leak at bootstrap and shutdown

  • Fix potential NULL pointer deref in kernel command line parser

  • Fix lingering condition in service after reload of service with new config that has no condition

  • Fix wrong path to command in service after reload, may have changed

  • logit: fall back to package name if $LOGNAME and $USER are unset. Note: you should probably not use logit in your own scripts, it is only meant for internal use by Finit. We recommend using logger from the bsdutils or sysklogd packages instead

  • Fix issue where env:/pre:/post:/etc. is removed from a service

    The trick is when reloading a service like this:

      service env:/etc/env    serv -np -e foo:bar
    

    into this:

      service pre:/bin/pre.sh serv -np
    

    In the second the env: has been removed and pre: added. Prior to this patch, env: was kept leading to unintended behavior.

  • Fix parse/diff of command line args, e.g., nginx -g 'daemon off;'

    Starting a service like this works fine:

      service [2345789] env:-/etc/default/nginx nginx -g 'daemon off;'
    

    However, on initctl reload (and no change to .conf files) the arg list was lost while parsing the .conf files. Leading to a false positive 'diff' in args causing nginx to be unnecessarily restarted.

4.3

2 years ago

Critical bug fix release. If you run a 32-bit target with GLIBC 2.34 you need to upgrade!

Note: system verbosity on console at start and shutdown has been increased. Now the output of all commands is logged to the system logger, for early services /dev/kmsg is used.

Also: please notice the updated support for enabling and disabling kernel and Finit debug messages on the system console. Very useful when debugging either of them, e.g., a kernel module. For details, see cmdline.md.

Changes

  • Support for overriding default runlevel from kernel command line. Any runlevel [1-9] may be selected, except 6 (reboot). Issue #261
  • New command line option: finit.fstab=/etc/fstab.custom, with full support for mounting, mount helpers, fsck, and swapon/off, issue #224
  • Support for special device /dev/root, which may not exist in /dev. Finit now looks up the matching block device for / in /sys/block/
  • Loading modules no longer shows arguments in progress output
  • Warning messages in progress output now in yellow, not red, issue #214
  • initctl, new command line option -V,--version for ease of use
  • New condition done for run task, issue #207 by Ming Liu, Atlas Copco
  • Refactor parts of shutdown and reboot sequence for PREEMPT-RT kernels, by Robert Andersson, Mathias Thore, and Ming Liu, Atlas Copco
  • Conditions for run/task/sysv status, e.g. run/foo/success and task/bar/failure. Issue #232, by Ming Liu, Atlas Copco
  • Conditions for services, can be used to synchronize other stanzas:
    • service/foo/running
    • service/foo/halted
    • service/foo/missing
    • service/foo/crashed
    • service/foo/stopped
    • service/foo/busy
    • service/foo/restart
  • initctl signal support, by Jörgen Sigvardsson, issue #225
  • initctl cond get support to match cond [set | clear], issue #255
  • [WARN] messages on console now printed in yellow, issue #214
  • Network services now also stopped when going to runlevel 6 (reboot), not just runlevel 0 (shutdown) or 1 (single-user)
  • When ifup is missing on the system, bring at least lo up at boot
  • Log output from ifup -a (and ifdown -a), to syslog
  • Avoid blocking PID 1 when starting SysV init scripts
  • Allow custom pid: for SysV init scripts
  • Document supported types of forking/non-forking services
  • Auto-detect running in some common forms of containers
  • Simplify shutdown/reboot when running in a container
  • Log to stderr when running in a container w/o syslog daemon
  • Add support for type:forking to services, already supported but with a very difficult pid: syntax, issue #223. Docs updated
  • Support for setting global environment variables in finit.conf, please note: this also affects Finit itself, be careful!
  • Extended environment variables for pre/post scripts, issue #189
  • Document secret service option respawn, which bypasses the crash semantics, allowing endless restarts
  • Document secret HOOK_BANNER, the first hook point before the banner
  • Document slightly confusing initctl reload foo command. It does not reload the service's .conf file! Issue #263
  • Log changes; all instances where previously the basename cmd of a service was used to identify the service, now the proper name:id is used instead. Meaning, a service without a custom :ID or name: will display the same as before, but with any of those customization the name and name:id will now be shown. Note: this may affect any log scrapers out there!
  • New plugin: hook-scripts, allows run-parts(8) style scripts to run on any hook point. Contributed by Tobias Waldekranz
  • initctl (reboot) falls back to -f when it detects it is in sulogin recovery mode, issue #247
  • The bundled sulogin is no longer enabled by default, in favor of distribution versions. Enable with ./configure --with-sulogin
  • Support args to sysv-like scripts, e.g. bridge-stp br0 start
  • The modules-load plugin now skips all lines starting with # and ;. Furthermore, files in /etc/modules-load.d/*.conf are now read in lexicographic order and UNIX backup files (foo.conf~) are skipped
  • The name:id tuple is now more consistently used in all log and debug messages instead of the basename of the command
  • Simplify error output of initctl start/stop/restart/signal, no more extra usage help, just a plain error message
  • Exit codes of initctl have changed to use LSB script standard and BSD sysexits.h exit codes. As before, a non-zero exit is error or missing
  • Add support for initctl -q to more commands: stop, start, restart, reload, signal, etc.

Fixes

  • Fix nasty 32/64-bit alignment issue between finit and its plugins, applicable to 32-bit targets with GLIBC 2.34 and later. External plugins must make sure to use, at least: -D_TIME_BITS=64
  • Fix #215: disable cgroup support at runtime if kernel lacks support or does not have the required controllers (cpu)
  • Fix #217: iwatcher initialization issue, by Ming Liu, Atlas Copco
  • Fix #218: initctl matches too many services, by Ming Liu, Atlas Copco
  • Fix #219: not all filesystems unmounted at shutdown, by Ming Liu, Mathias Thore, and Robert Andersson, Atlas Copco
  • Fix #226: initctl shows wrong PID for crashing services
  • Fix #227: reboot stalls if process stopped with [WARN]
  • Fix #233: initctl shows wrong status for run/task, by Sergio Morlans and Ming Liu, Atlas Copco
  • Fix #248: source env:file also in pre: and post scripts
  • Fix #260: drop limit on device name in Checking filesystem... output
  • Fix start/stop and monitoring (restart) of SysV init scripts and forking services, see the updated documentation for details
  • Fix call to swapoff at shutdown, does not support -e flag
  • Fix suspend to RAM issue. Previously reboot(RB_SW_SUSPEND) was used, now the modern /sys/power/state API is used instead.
  • Fix nasty run/task/service matcher bug, triggered by stanzas using the same basename of a command but different :ID. Caused Finit to match with already registered but different run/task/service