diff --git a/SOURCES/90-default.preset b/SOURCES/90-default.preset index 42117cf..46cbccc 100644 --- a/SOURCES/90-default.preset +++ b/SOURCES/90-default.preset @@ -1,27 +1,62 @@ -# Also see: -# https://fedoraproject.org/wiki/Starting_services_by_default +# See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/ +# for the Fedora policy. +# On Fedora we deviate from some upstream defaults disable systemd-timesyncd.service -disable systemd-resolved.service +disable systemd-networkd.service +disable systemd-networkd-wait-online.service +# We want to update systemd-boot from packaging scriptlets after updates. +disable systemd-boot-update.service -# systemd -enable remote-fs.target -enable getty@tty1.service +# https://fedoraproject.org/wiki/Changes/systemd-resolved +enable systemd-resolved.service + +# https://fedoraproject.org/wiki/Changes/EnableSystemdOomd +enable systemd-oomd.service + +# These presets were last validated en-masse on 2015-09-09 +# https://fedorahosted.org/fesco/ticket/1472 # System stuff +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 +enable dbus.socket +enable dbus-broker.service enable sshd.service + +# Locally-running services enable atd.* enable crond.* + +# Approved by FESCo - https://fedorahosted.org/fesco/ticket/636 enable chronyd.service -enable rpcbind.* + +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 +# https://bugzilla.redhat.com/show_bug.cgi?id=1455704 enable NetworkManager.service +enable NetworkManager-wait-online.service enable NetworkManager-dispatcher.service enable ModemManager.service + +# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1311 enable auditd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=2258520 +enable audit-rules.service + +# Locally-running service enable restorecond.service + +# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1166 enable bluetooth.* + +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 enable avahi-daemon.* -enable cups.* + +# Default configuration is locally-running only +# CUPS is now socket-activatable for local use-cases, so don't enable cups.service +# https://pagure.io/fesco/issue/1701 +enable cups.socket +enable cups.path # The various syslog implementations enable rsyslog.* @@ -29,30 +64,89 @@ enable syslog-ng.* enable sysklogd.* # Network facing +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 enable firewalld.service -enable xinetd.service -enable ladvd.service -# Virtualization driver specific daemons. Start by defalt at boot for VM +# Approved by FESCo - https://fedorahosted.org/fesco/ticket/2627 +# Virtualization driver specific daemons. Start by default at boot for VM # autostart, but shutdown after 2 mins and socket activated thereafter enable virtqemud.service +enable virtxend.service +enable virtlxcd.service +enable virtvboxd.service -# Compatibility with libvirtd sockets for old clients and expose TCP sockets +# Sockets for the services listed above, to support socket activation +# after the initial timeout +enable virtqemud.socket +enable virtqemud-ro.socket +enable virtqemud-admin.socket +enable virtxend.socket +enable virtxend-ro.socket +enable virtxend-admin.socket +enable virtlxcd.socket +enable virtlxcd-ro.socket +enable virtlxcd-admin.socket +enable virtvboxd.socket +enable virtvboxd-ro.socket +enable virtvboxd-admin.socket + +# Compatibility with libvirtd sockets for old clients (socket activated +# only when required). Note that the -tcp and -tls sockets are kept disabled +# by default, as they require additional configuration before they can work enable virtproxyd.socket +enable virtproxyd-ro.socket +enable virtproxyd-admin.socket # Secondary drivers providing supporting functionality to main virtualization -# drivers, socket activated only when required +# drivers (socket activated only when required) enable virtinterfaced.socket +enable virtinterfaced-ro.socket +enable virtinterfaced-admin.socket enable virtnetworkd.socket +enable virtnetworkd-ro.socket +enable virtnetworkd-admin.socket enable virtnodedevd.socket +enable virtnodedevd-ro.socket +enable virtnodedevd-admin.socket enable virtnwfilterd.socket +enable virtnwfilterd-ro.socket +enable virtnwfilterd-admin.socket enable virtsecretd.socket +enable virtsecretd-ro.socket +enable virtsecretd-admin.socket enable virtstoraged.socket +enable virtstoraged-ro.socket +enable virtstoraged-admin.socket + +# Non-driver support services (socket activated only when required, no +# read-only socket) +enable virtlogd.socket +enable virtlogd-admin.socket +enable virtlockd.socket +enable virtlockd-admin.socket + +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 +enable xinetd.service # Storage +# Approved by FESCo - https://fedorahosted.org/fesco/ticket/391 enable multipathd.service + +# Approved by FESCo - https://fedorahosted.org/fesco/ticket/876 enable libstoragemgmt.service -enable lvm2-lvmpolld.socket + +# Approved by FESCo - https://pagure.io/fesco/issue/2386 +enable iscsid.socket +enable iscsiuio.socket + +# Approved by FESCo - https://pagure.io/fesco/issue/2943 +enable iscsi-starter.service + +# iSCSI support for early-boot +# https://bugzilla.redhat.com/show_bug.cgi?id=1930470 +enable iscsi-onboot.service + +# Locally-running services enable lvm2-monitor.* enable lvm2-lvmetad.* enable dm-event.* @@ -62,6 +156,9 @@ enable dmraid-activation.service enable mdmonitor.service enable mdmonitor-takeover.service +# https://bugzilla.redhat.com/show_bug.cgi?id=1817491 +enable raid-check.timer + # https://bugzilla.redhat.com/show_bug.cgi?id=876237 enable spice-vdagentd.service @@ -71,157 +168,286 @@ enable qemu-guest-agent.service # https://bugzilla.redhat.com/show_bug.cgi?id=928726 enable dnf-makecache.timer +# https://bugzilla.redhat.com/show_bug.cgi?id=1995495 +enable rpm-ostree-countme.timer + # https://bugzilla.redhat.com/show_bug.cgi?id=957135 enable vmtoolsd.service +# https://bugzilla.redhat.com/show_bug.cgi?id=976315 +enable dkms.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=961878 +enable ipmi.service +enable ipmievd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1039351 +enable x509watch.timer + +# https://bugzilla.redhat.com/show_bug.cgi?id=1060754 +enable dnssec-triggerd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1095353 +enable uuidd.socket + +# Hardware +# Locally-running service +enable gpm.* + +# https://bugzilla.redhat.com/show_bug.cgi?id=1066421 +enable gpsd.socket + +# https://bugzilla.redhat.com/show_bug.cgi?id=1141607 +enable x2gocleansessions.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1215641 +enable unbound-anchor.timer + +# https://bugzilla.redhat.com/show_bug.cgi?id=1222495 +enable lvm2-lvmpolld.* + +# https://fedoraproject.org/wiki/Changes/UEFISecureBootBlacklistUpdates +enable dbxtool.service + +# Locally-running services +enable irqbalance.service +enable lm_sensors.service +enable mcelog.* +enable smartd.service +enable pcscd.socket +enable rngd.service + +# Other stuff +# Approved by FESCo - https://fedorahosted.org/fesco/ticket/937 +# Note: abrt-ccpp.service is excluded in favor of systemd-coredump. +enable abrtd.service +enable abrt-journal-core.service +enable abrt-oops.service +enable abrt-xorg.service +enable abrt-vmcore.service + +# Locally-running services +enable ksm.service +enable ksmtuned.service +enable rootfs-resize.service +enable sysstat.service +enable sysstat-collect.timer +enable sysstat-summary.timer +enable uuidd.service +enable xendomains.service +enable xenstored.service +enable xenconsoled.service + +# Desktop stuff +# Locally-running services +enable accounts-daemon.service +enable rtkit-daemon.service +enable upower.service +enable udisks2.service +enable polkit.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1187072 +enable timedatex.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1231745 +enable mlocate-updatedb.timer + +# https://src.fedoraproject.org/rpms/fedora-release/pull-request/204 +enable plocate-updatedb.timer + +# https://bugzilla.redhat.com/show_bug.cgi?id=1218999 +enable sa-update.timer + +# Hyper-V guest support daemons +# https://bugzilla.redhat.com/show_bug.cgi?id=1279322 +enable vmtoolsd.service + # mcelog is a utility that collects and decodes Machine Check Exception data # on x86-32 and x86-64 systems. # https://bugzilla.redhat.com/show_bug.cgi?id=1302179 enable mcelog.service -#https://bugzilla.redhat.com/show_bug.cgi?id=995987 -enable kdump.service - -#https://bugzilla.redhat.com/show_bug.cgi?id=1009970 -enable tuned.service - -# https://bugzilla.redhat.com/show_bug.cgi?id=1215645 -enable unbound-anchor.timer - -# Enable SSSD Kerberos Credential Cache Server -# https://bugzilla.redhat.com/show_bug.cgi?id=1558927 -enable sssd-kcm.socket - -# https://bugzilla.redhat.com/show_bug.cgi?id=1578833 -enable sssd.service - -# Hardware -enable gpm.* -enable gpsd.* -enable irqbalance.service -enable lm_sensors.service -enable mcelog.* -enable microcode.service -enable smartd.service -enable pcscd.socket -enable rngd.service - -# Other stuff -enable abrtd.service -enable abrt-journal-core.service -enable abrt-oops.service -enable abrt-xorg.service -enable abrt-vmcore.service -enable lttng-sessiond.service -enable ksm.service -enable ksmtuned.service -enable rootfs-resize.service -enable sysstat.service -enable uuidd.service - -# https://bugzilla.redhat.com/show_bug.cgi?id=1193616 -enable hypervfcopyd.service -enable hypervkvpd.service -enable hypervvssd.service - -# Desktop stuff -enable accounts-daemon.service -enable rtkit-daemon.service -enable upower.service -enable udisks2.service -enable packagekit-offline-update.service -enable PackageKit.service -# https://bugzilla.redhat.com/show_bug.cgi?id=2011240 -enable power-profiles-daemon.service - -# Initial Setup reconfiguration service -enable initial-setup-reconfiguration.service - -# https://bugzilla.redhat.com/show_bug.cgi?id=1312446 +# OPAL-prd is a utility specific to ppc64le systems +# It is the "OPAL Processor Recovery Diagnostics Daemon" +# https://bugzilla.redhat.com/show_bug.cgi?id=1312018 enable opal-prd.service -# virtlog.service is sometimes used by VMs started by libvirt.service -# Enable virtlog.socket to have it socket activated -# https://bugzilla.redhat.com/show_bug.cgi?id=1325503 -enable virtlogd.socket +# lircd is the Linux Infrared Control daemon +# Starting with version 0.9.4, it requires no manual configuration +# https://bugzilla.redhat.com/show_bug.cgi?id=1340061 +enable lircd.socket +# IPSec management +# https://bugzilla.redhat.com/show_bug.cgi?id=1276285 +enable pluto.socket -# https://bugzilla.redhat.com/show_bug.cgi?id=1271839 -enable rhsmcertd.service +# https://bugzilla.redhat.com/show_bug.cgi?id=1367932 +# Automatically refresh installed snaps +enable snapd.refresh.timer +# Socket activated daemon to manage snaps +enable snapd.socket -# https://bugzilla.redhat.com/show_bug.cgi?id=1359645 -enable brandbot.* +# Support for dual-GPU systems +# https://bugzilla.redhat.com/show_bug.cgi?id=1389762 +enable switcheroo-control.service -# https://bugzilla.redhat.com/show_bug.cgi?id=1572550 -enable timedatex.service +# Support for the DRBD link-cleaning service +# https://bugzilla.redhat.com/show_bug.cgi?id=1399387 +enable drbdlinksclean.service -# https://bugzilla.redhat.com/show_bug.cgi?id=1578870 -enable selinux-autorelabel-mark.service -enable rhel-configure.service -enable rhel-dmesg.service +# Enable the System Security Services Daemon +# https://bugzilla.redhat.com/show_bug.cgi?id=1427649 +enable sssd.service -# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808 -enable nis-domainname.service +# Enable ostree-remount on ostree-based systems +# (Does nothing on non-ostree systems) +# https://bugzilla.redhat.com/show_bug.cgi?id=1451458 +enable ostree-remount.service + +# Enable Performance Co-Pilot services +# https://bugzilla.redhat.com/show_bug.cgi?id=1472350 +enable pmcd.service +enable pmlogger.service +enable pmie.service + +# Enable SSSD Kerberos Credential Cache Server +# https://bugzilla.redhat.com/show_bug.cgi?id=1475999 +enable sssd-kcm.socket + +# sssd-secrets.socket was previously enabled, but as of +# SSSD 2.0 it is not longer needed +# https://bugzilla.redhat.com/show_bug.cgi?id=1615584 + +# A mechanism to transfer state between the initramfs and the real +# system. Obsolete since /run was introduced, but still used by some +# services. +# https://bugzilla.redhat.com/show_bug.cgi?id=1493479 +# https://bugzilla.redhat.com/show_bug.cgi?id=1584645 enable import-state.service -enable loadmodules.service + +# An initscripts mechanism for readonly root +# https://bugzilla.redhat.com/show_bug.cgi?id=1493479 +# https://bugzilla.redhat.com/show_bug.cgi?id=1584645 enable readonly-root.service -# https://bugzilla.redhat.com/show_bug.cgi?id=1630200 -# s390x specific services +# Ensure that any installed kmods are built for the currently-running +# kernel at boot +# https://bugzilla.redhat.com/show_bug.cgi?id=1518258 +enable akmods.service + +# virtualbox-guest-additions service, yet another virtual-machine guest +# integration agent, this is a locally-running service, Note this has a +# "ConditionVirtualization=|oracle" so it will only run under VirtualBox +# https://bugzilla.redhat.com/show_bug.cgi?id=1534595 +enable vboxservice.service + +# Mark the system for SELinux autorelabel when appropriate +# https://bugzilla.redhat.com/show_bug.cgi?id=1589720 +enable selinux-autorelabel-mark.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1623901 enable cpi.service + +# Initialize persistent devices on s390x enable device_cio_free.service # Enable the stratis daemon for managing stratis storage -# https://bugzilla.redhat.com/show_bug.cgi?id=1632510 +# https://bugzilla.redhat.com/show_bug.cgi?id=1630514 enable stratisd.service -# https://bugzilla.redhat.com/show_bug.cgi?id=1817591 -enable mlocate-updatedb.timer +# Enable a service to finalize staged OSTree changes at shutdown +# https://bugzilla.redhat.com/show_bug.cgi?id=1639372 +enable ostree-finalize-staged.path -# nvme auto connect -# https://bugzilla.redhat.com/show_bug.cgi?id=1805466 -enable nvmefc-boot-connections.service +# Enable the Docker daemon socket +# https://bugzilla.redhat.com/show_bug.cgi?id=1655602 +enable docker.socket -# OSTree based systems need to remount /sysroot and -# /var as rw via ostree-remount.service -# ignored by non-OSTree based systems -# https://bugzilla.redhat.com/show_bug.cgi?id=1848453 -enable ostree-remount.service +# Enable the service for adding Fedora OCI repos to flatpak +# https://bugzilla.redhat.com/show_bug.cgi?id=1696225 +enable flatpak-add-fedora-repos.service -# DBus needed by Anaconda -enable dbus.socket -enable dbus-broker.service +# Run fstrim weekly on filesystems listed in fstab +enable fstrim.timer -# Enable iscsi service files -# https://bugzilla.redhat.com/show_bug.cgi?id=1930458 -enable iscsi.service -enable iscsid.socket -enable iscsiuio.socket -enable iscsi-onboot.service +# oneshot to generate kata VM appliance at host bootup +# for the booted kernel +enable kata-osbuilder-generate.service -# Enable logrotate.timer -# https://bugzilla.redhat.com/show_bug.cgi?id=1977865 +# Enable rotation of system log files +# https://bugzilla.redhat.com/show_bug.cgi?id=1655153#c4 enable logrotate.timer -# Enable greenboot -# https://bugzilla.redhat.com/show_bug.cgi?id=2005552 -enable greenboot-grub2-set-counter.service -enable greenboot-grub2-set-success.service -enable greenboot-healthcheck.service -enable greenboot-rpm-ostree-grub2-check-fallback.service -enable greenboot-status.service -enable greenboot-task-runner.service -enable redboot-auto-reboot.service -enable redboot-task-runner.service -# https://bugzilla.redhat.com/show_bug.cgi?id=2108625 -enable greenboot-service-monitor.service +# Enable regular update of SpamAssassin data files +# https://bugzilla.redhat.com/show_bug.cgi?id=1651002 +enable sa-update.timer -# https://bugzilla.redhat.com/show_bug.cgi?id=2013299 -enable low-memory-monitor.service +# Enable service to automatically rebuild the RPM database +# on startup when /var/lib/rpm/.rebuilddb exists +# https://bugzilla.redhat.com/show_bug.cgi?id=1826658 +enable rpmdb-rebuild.service -# https://bugzilla.redhat.com/show_bug.cgi?id=2049627 -enable switcheroo-control.service +# Enable service to automatically migrate the RPM database to /usr +# on startup when /var/lib/rpm/.migratedb exists +# https://bugzilla.redhat.com/show_bug.cgi?id=2044061 +enable rpmdb-migrate.service + +# Support services for Google Cloud +# Approved by FESCo: https://pagure.io/fesco/issue/2578 +enable google-guest-agent.service +enable google-startup-scripts.service +enable google-shutdown-scripts.service + +# Certbot (Let's Encrypt) +# https://bugzilla.redhat.com/show_bug.cgi?id=1940211 +enable certbot-renew.timer + +# enable thermald by default for desktops +# https://pagure.io/fedora-workstation/issue/71 +enable thermald.service + +# enable uresourced by default for desktops +# https://pagure.io/fesco/issue/2457 +enable uresourced.service + +# enable power-profiles-daemon +# https://pagure.io/fedora-workstation/issue/191 +enable power-profiles-daemon.service # Enable clevis-luks-askpass.path -# https://bugzilla.redhat.com/show_bug.cgi?id=2106811 +# https://bugzilla.redhat.com/show_bug.cgi?id=2101719 enable clevis-luks-askpass.path + +# Enable livesys services for live media +# https://bugzilla.redhat.com/show_bug.cgi?id=2148790 +enable livesys.service +enable livesys-late.service + +# Enable Waydroid +# https://bugzilla.redhat.com/show_bug.cgi?id=2157810 +enable waydroid-container.service + +# Enable nmstate to apply network configuration from /etc/nmstate/*.yml +# https://github.com/coreos/fedora-coreos-tracker/issues/1175 +# https://github.com/coreos/fedora-coreos-config/pull/2269 +enable nmstate.service + +# Enable nfs-client.target +# https://bugzilla.redhat.com/show_bug.cgi?id=2218006 +enable nfs-client.target + +# Enable cloud-init services +# https://bugzilla.redhat.com/show_bug.cgi?id=2233948 +enable cloud-config.service +enable cloud-final.service +enable cloud-init.service +enable cloud-init-local.service + +# Enable kernel-bootcfg-boot-successful.service +# https://bugzilla.redhat.com/show_bug.cgi?id=2239607 +enable kernel-bootcfg-boot-successful.service + +# Enable pd-mapper service for Thinkpad X13s +# https://bugzilla.redhat.com/show_bug.cgi?id=2255318 +enable pd-mapper.service +