| Age | Commit message (Collapse) | Author |
|---|
|
Signed-off-by: nyanmisaka <nst799610810@gmail.com>
|
|
|
|
|
|
Fix systemd not breaking whitespace in env vars
Original-merge: 125ee883117af3ad5c7e2369f8be84089a782b57
Merged-by: Joshua M. Boniface <joshua@boniface.me>
Backported-by: Joshua M. Boniface <joshua@boniface.me>
|
|
--noautorunwebapp has been renamed --nowebclient.
|
|
Use separate args for dotnet publish commands
Original-merge: d260f308106db648014a0bb3fd1911c838f899ce
Merged-by: Joshua M. Boniface <joshua@boniface.me>
Backported-by: Joshua Boniface <joshua@boniface.me>
|
|
Move Fedora service hardening options to override config
Original-merge: 1d4755894eaf5293e1d67dbca5e5c90566963572
Merged-by: Joshua M. Boniface <joshua@boniface.me>
Backported-by: Joshua Boniface <joshua@boniface.me>
|
|
|
|
Remove mount and unmount permissions for jellyfin group from sudoers
Authored-by: Shadowghost <Ghost_of_Stone@web.de>
Merged-by: Claus Vium <cvium@users.noreply.github.com>
Original-merge: 9cebdfdec0ab9a7ae978b4ef1c117cb8867ab4ab
|
|
(cherry picked from commit cb6e6879e27d7fadc788295f0524d69b3a42c02c)
Signed-off-by: Joshua Boniface <joshua@boniface.me>
|
|
|
|
Fixes #3182
|
|
|
|
|
|
Add /usr/local/bin to $PATH.
Update fedora/Makefile with enhancements from jellyfin-web.
|
|
Ensures that the RPM service unit has all the tweaks from the Deb
service unit, and some in the other direction too.
|
|
|
|
Also add an "rpms" target that builds the RPMs using mock in a target
environment.
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
|
|
Move "AmbientCapabilities=CAP_NET_BIND_SERVICE" to the "[Service]"
section of the optional "lowport" unit drop-in file and package that
drop-in in a separate, optionally installable jellyfin-server-lowports
subpackage.
This isolates the CAP_NET_BIND_SERVICE capability to only installations
that desire it.
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
|
|
|
|
* Target net6.0
* Use new Enum.TryParse(ReadOnlySpan<char>) overload
* Replace RNGCryptoServiceProvider with RandomNumberGenerator
* ci - target net6.0 (#6594)
* Update deployment for dotnet6
* Use generic 6.0.x preview for CI
* Update direct dotnet download links
Co-authored-by: Bond_009 <bond.009@outlook.com>
|
|
|
|
Delay starting service until after network is online
|
|
Add "AmbientCapabilities=CAP_NET_BIND_SERVICE" to the "[Service]"
section of the unit file to allow the server to bind to ports 80 and 443.
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
|
|
|
|
|
|
Bump version to 10.8.0 for next release
|
|
|
|
|
|
Reportedly `systemd-run --scope` still got killed by the service
manager; see #4615. The suspected cause is that `scope` units are run by
the `systemd-run` process itself and inherit the caller's execution
environment (see systemd-run(1)). To fix this, we use a systemd
`service` unit instead, which is run and managed by PID 1 - hopefully
this will isolate us sufficiently so that we don't get terminated along
with `jellyfin.service`.
|
|
systemd-run(1) runs `systemctl restart` in an isolated systemd unit
that is not subject to process termination as jellyfin.service is shut
down. We adjust the sudoers configuration for this new usage, removing
the old config, since restart.sh is the only user of the sudoers
policy.
Additionally we change `systemctl start` to `systemctl restart` since
there was a race condition where jellyfin.service was not fully
stopped by the time this ran, so `systemctl start` became a noop.
`systemctl restart` on the other hand works whether jellyfin.service is
stopped or not.
The at(1) hack (and the usage of `start` instead of `restart`) is left
in for other init systems since I cannot test on those systems, and
because I don't know of any systemd-run(1) equivalent (although it may
be a non-issue since alternate init systems do not keep track of daemon
children nearly as aggressively as systemd does).
|
|
It's used in the restart.sh script.
For Debian, this is a Recommends because virtually everyone will need
this (default APT policy is to install recommended packages so this
works ok), but technically you can configure the server to run as root
and then you wouldn't need it.
For Fedora... frankly I got confused by their Weak Dependencies etc. so
I just made it a hard dependency.
|
|
Some environments, like system containers, have no reason to have
sudo(8) installed. In these environments restart.sh will silently fail
because /usr/bin/sudo does not exist to execute, so test that sudo
exists and don't try to use it otherwise.
Note also that hardcoding sudo's path is wrong: it can be installed in
other places. On FreeBSD, for example, it is /usr/local/bin/sudo when
installed from ports.
|
|
at(1) runs commandlines with /bin/sh anyway, which resolves paths. No
need to do it ourselves.
|
|
The old code was wrong because e.g. systemd can be *installed* on the
system, but not actually used as PID1. In that case we would pick
`systemctl`, but it wouldn't actually work because PID1 was some other
init system.
|
|
|
|
Run explicit service start if restart failed
|
|
|
|
|
|
|
|
Should solve the occasional bugs with the restart in the WebUI.
Sometimes the service stops and then doesn't start again; this will run
an explicit start action afterwards. If this doesn't fix it I'm certain
there would be more tweaking that can be done.
|
|
|
|
|
|
This was not set for Fedora; I do not recall if this was just an oversight or was
explicitly removed in the past; open to feedback there.
Reported in the LUP Bug-A-Thon
|
|
|
|
|
|
I don't know if this will actually work but maybe it will.
|
|
|
|
|
|
|
