🥇systemd 255 | ProHoster

A new version of the free system manager systemd has been released.

Mounting a separate partition /usr/ is now only supported during the initramfs stage.
Support for System V init scripts and cgroups v1 will be removed in one of the upcoming releases.
Options SuspendMode=, HibernateState= and HybridSleepState= from the section [Sleep] in systemd-sleep.conf has been deprecated and does not affect system behavior.

Now, daemon initialization is performed using posix_spawn() instead of a combination of fork() and exec(); pull request #27890.
systemd now uses PIDFD file descriptors to monitor child processes; this simplifies supervisor logic; pull request #29142, #29594, #29455.
The new option SurviveFinalKillSignal= allows a daemon to avoid stopping when using the soft-reboot mechanism; pull request #28545.
Units now support the options MemoryPeak=, MemorySwapPeak=, MemorySwapCurrent= and MemoryZSwapCurrent=; these options correspond to the parameters memory.peak, memory.swap.peak, memory.swap.current and memory.zswap.current properties from cgroups v2.
The new option ConditionSecurity= allows you to indicate to systemd that a service should only be started if the system was booted with a verified UKI image.

Now systemd-cryptenroll allows specifying a specific PCR slot and hash.
systemd-cryptenroll allows specifying a key index; pull request #29427.
It is now possible to bind a LUKS volume to a specific TPM2 chip without access to it, if the public key is known.
The systemd-cryptsetup binary has been moved to /usr/bin/ and can be used outside of systemd.
The internal component systemd-pcrphase has been renamed to systemd-pcrextend.
A new component, systemd-pcrlock, allows predicting PCR writes based on existing system information; pull request #28891.

bootctl now allows you to determine whether the system was booted with uki.
systemd-boot supports hotkeys for shutting down and rebooting the system.
systemd-boot no longer loads unverified Devicetree blobs if SecureBoot is enabled.
systemd-boot and systemd-stub now have different identifiers in the .sbat section, and UEFI can invoke them independently; pull request #29196.
The ukify component is no longer experimental; the executable is now located in /usr/bin/.

Support for Rapid Commit technology has been added.
The dbus interface of systemd-networkd now allows retrieving information about the DHCP client state; commit #28896.
Option NFTSet= allows binding the network interface configuration to a set of rules nftables.
Section [IPv6AcceptRA] supports new options: UsePREF64=, UseHopLimit=, UseICMP6RateLimit= and NFTSet=.
Section [IPv6SendRA] now supports options RetransmitSec=, HopLimit=, HomeAgent=, HomeAgentLifetimeSec= and HomeAgentPreference=.
Configuration files generated based on kernel command line parameters now have a prefix 70-; the priority of these files is now higher than that of the default configuration files.