update 90-preset

SOURCES/90-default.preset

@@ -1,27 +1,62 @@
-# Also see:
+# See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/
-# https://fedoraproject.org/wiki/Starting_services_by_default
+# for the Fedora policy.
 
+# On Fedora we deviate from some upstream defaults
 disable systemd-timesyncd.service
-disable systemd-resolved.service
+disable systemd-networkd.service
+disable systemd-networkd-wait-online.service
+# We want to update systemd-boot from packaging scriptlets after updates.
+disable systemd-boot-update.service
 
-# systemd
+# https://fedoraproject.org/wiki/Changes/systemd-resolved
-enable remote-fs.target
+enable systemd-resolved.service
-enable getty@tty1.service
+
+# https://fedoraproject.org/wiki/Changes/EnableSystemdOomd
+enable systemd-oomd.service
+
+# These presets were last validated en-masse on 2015-09-09
+# https://fedorahosted.org/fesco/ticket/1472
 
 # System stuff
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable dbus.socket
+enable dbus-broker.service
 enable sshd.service
+
+# Locally-running services
 enable atd.*
 enable crond.*
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/636
 enable chronyd.service
-enable rpcbind.*
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+# https://bugzilla.redhat.com/show_bug.cgi?id=1455704
 enable NetworkManager.service
+enable NetworkManager-wait-online.service
 enable NetworkManager-dispatcher.service
 enable ModemManager.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1311
 enable auditd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2258520
+enable audit-rules.service
+
+# Locally-running service
 enable restorecond.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1166
 enable bluetooth.*
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable avahi-daemon.*
-enable cups.*
+
+# Default configuration is locally-running only
+# CUPS is now socket-activatable for local use-cases, so don't enable cups.service
+# https://pagure.io/fesco/issue/1701
+enable cups.socket
+enable cups.path
 
 # The various syslog implementations
 enable rsyslog.*
@@ -29,30 +64,89 @@ enable syslog-ng.*
 enable sysklogd.*
 
 # Network facing
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable firewalld.service
-enable xinetd.service
-enable ladvd.service
 
-# Virtualization driver specific daemons. Start by defalt at boot for VM
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/2627
+# Virtualization driver specific daemons. Start by default at boot for VM
 # autostart, but shutdown after 2 mins and socket activated thereafter
 enable virtqemud.service
+enable virtxend.service
+enable virtlxcd.service
+enable virtvboxd.service
 
-# Compatibility with libvirtd sockets for old clients and expose TCP sockets
+# Sockets for the services listed above, to support socket activation
+# after the initial timeout
+enable virtqemud.socket
+enable virtqemud-ro.socket
+enable virtqemud-admin.socket
+enable virtxend.socket
+enable virtxend-ro.socket
+enable virtxend-admin.socket
+enable virtlxcd.socket
+enable virtlxcd-ro.socket
+enable virtlxcd-admin.socket
+enable virtvboxd.socket
+enable virtvboxd-ro.socket
+enable virtvboxd-admin.socket
+
+# Compatibility with libvirtd sockets for old clients (socket activated
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
 enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
 
 # Secondary drivers providing supporting functionality to main virtualization
-# drivers, socket activated only when required
+# drivers (socket activated only when required)
 enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
 enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
 enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
 enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
 enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
 enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
+
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
+enable virtlogd.socket
+enable virtlogd-admin.socket
+enable virtlockd.socket
+enable virtlockd-admin.socket
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable xinetd.service
 
 # Storage
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/391
 enable multipathd.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/876
 enable libstoragemgmt.service
-enable lvm2-lvmpolld.socket
+
+# Approved by FESCo - https://pagure.io/fesco/issue/2386
+enable iscsid.socket
+enable iscsiuio.socket
+
+# Approved by FESCo - https://pagure.io/fesco/issue/2943
+enable iscsi-starter.service
+
+# iSCSI support for early-boot
+# https://bugzilla.redhat.com/show_bug.cgi?id=1930470
+enable iscsi-onboot.service
+
+# Locally-running services
 enable lvm2-monitor.*
 enable lvm2-lvmetad.*
 enable dm-event.*
@@ -62,6 +156,9 @@ enable dmraid-activation.service
 enable mdmonitor.service
 enable mdmonitor-takeover.service
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=1817491
+enable raid-check.timer
+
 # https://bugzilla.redhat.com/show_bug.cgi?id=876237
 enable spice-vdagentd.service
 
@@ -71,157 +168,286 @@ enable qemu-guest-agent.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=928726
 enable dnf-makecache.timer
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=1995495
+enable rpm-ostree-countme.timer
+
 # https://bugzilla.redhat.com/show_bug.cgi?id=957135
 enable vmtoolsd.service
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=976315
+enable dkms.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=961878
+enable ipmi.service
+enable ipmievd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1039351
+enable x509watch.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1060754
+enable dnssec-triggerd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1095353
+enable uuidd.socket
+
+# Hardware
+# Locally-running service
+enable gpm.*
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1066421
+enable gpsd.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1141607
+enable x2gocleansessions.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1215641
+enable unbound-anchor.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1222495
+enable lvm2-lvmpolld.*
+
+# https://fedoraproject.org/wiki/Changes/UEFISecureBootBlacklistUpdates
+enable dbxtool.service
+
+# Locally-running services
+enable irqbalance.service
+enable lm_sensors.service
+enable mcelog.*
+enable smartd.service
+enable pcscd.socket
+enable rngd.service
+
+# Other stuff
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/937
+# Note: abrt-ccpp.service is excluded in favor of systemd-coredump.
+enable abrtd.service
+enable abrt-journal-core.service
+enable abrt-oops.service
+enable abrt-xorg.service
+enable abrt-vmcore.service
+
+# Locally-running services
+enable ksm.service
+enable ksmtuned.service
+enable rootfs-resize.service
+enable sysstat.service
+enable sysstat-collect.timer
+enable sysstat-summary.timer
+enable uuidd.service
+enable xendomains.service
+enable xenstored.service
+enable xenconsoled.service
+
+# Desktop stuff
+# Locally-running services
+enable accounts-daemon.service
+enable rtkit-daemon.service
+enable upower.service
+enable udisks2.service
+enable polkit.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1187072
+enable timedatex.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1231745
+enable mlocate-updatedb.timer
+
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/204
+enable plocate-updatedb.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1218999
+enable sa-update.timer
+
+# Hyper-V guest support daemons
+# https://bugzilla.redhat.com/show_bug.cgi?id=1279322
+enable vmtoolsd.service
+
 # mcelog is a utility that collects and decodes Machine Check Exception data
 # on x86-32 and x86-64 systems.
 # https://bugzilla.redhat.com/show_bug.cgi?id=1302179
 enable mcelog.service
 
-#https://bugzilla.redhat.com/show_bug.cgi?id=995987
+# OPAL-prd is a utility specific to ppc64le systems
-enable kdump.service
+# It is the "OPAL Processor Recovery Diagnostics Daemon"
-
+# https://bugzilla.redhat.com/show_bug.cgi?id=1312018
-#https://bugzilla.redhat.com/show_bug.cgi?id=1009970
-enable tuned.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1215645
-enable unbound-anchor.timer
-
-# Enable SSSD Kerberos Credential Cache Server
-# https://bugzilla.redhat.com/show_bug.cgi?id=1558927
-enable sssd-kcm.socket
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1578833
-enable sssd.service
-
-# Hardware
-enable gpm.*
-enable gpsd.*
-enable irqbalance.service
-enable lm_sensors.service
-enable mcelog.*
-enable microcode.service
-enable smartd.service
-enable pcscd.socket
-enable rngd.service
-
-# Other stuff
-enable abrtd.service
-enable abrt-journal-core.service
-enable abrt-oops.service
-enable abrt-xorg.service
-enable abrt-vmcore.service
-enable lttng-sessiond.service
-enable ksm.service
-enable ksmtuned.service
-enable rootfs-resize.service
-enable sysstat.service
-enable uuidd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1193616
-enable hypervfcopyd.service
-enable hypervkvpd.service
-enable hypervvssd.service
-
-# Desktop stuff
-enable accounts-daemon.service
-enable rtkit-daemon.service
-enable upower.service
-enable udisks2.service
-enable packagekit-offline-update.service
-enable PackageKit.service
-# https://bugzilla.redhat.com/show_bug.cgi?id=2011240
-enable power-profiles-daemon.service
-
-# Initial Setup reconfiguration service
-enable initial-setup-reconfiguration.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1312446
 enable opal-prd.service
 
-# virtlog.service is sometimes used by VMs started by libvirt.service
+# lircd is the Linux Infrared Control daemon
-# Enable virtlog.socket to have it socket activated
+# Starting with version 0.9.4, it requires no manual configuration
-# https://bugzilla.redhat.com/show_bug.cgi?id=1325503
+# https://bugzilla.redhat.com/show_bug.cgi?id=1340061
-enable virtlogd.socket
+enable lircd.socket
 
+# IPSec management
+# https://bugzilla.redhat.com/show_bug.cgi?id=1276285
+enable pluto.socket
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1271839
+# https://bugzilla.redhat.com/show_bug.cgi?id=1367932
-enable rhsmcertd.service
+# Automatically refresh installed snaps
+enable snapd.refresh.timer
+# Socket activated daemon to manage snaps
+enable snapd.socket
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1359645
+# Support for dual-GPU systems
-enable brandbot.*
+# https://bugzilla.redhat.com/show_bug.cgi?id=1389762
+enable switcheroo-control.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1572550
+# Support for the DRBD link-cleaning service
-enable timedatex.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1399387
+enable drbdlinksclean.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1578870
+# Enable the System Security Services Daemon
-enable selinux-autorelabel-mark.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1427649
-enable rhel-configure.service
+enable sssd.service
-enable rhel-dmesg.service
 
-# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808
+# Enable ostree-remount on ostree-based systems
-enable nis-domainname.service
+# (Does nothing on non-ostree systems)
+# https://bugzilla.redhat.com/show_bug.cgi?id=1451458
+enable ostree-remount.service
+
+# Enable Performance Co-Pilot services
+# https://bugzilla.redhat.com/show_bug.cgi?id=1472350
+enable pmcd.service
+enable pmlogger.service
+enable pmie.service
+
+# Enable SSSD Kerberos Credential Cache Server
+# https://bugzilla.redhat.com/show_bug.cgi?id=1475999
+enable sssd-kcm.socket
+
+# sssd-secrets.socket was previously enabled, but as of
+# SSSD 2.0 it is not longer needed
+# https://bugzilla.redhat.com/show_bug.cgi?id=1615584
+
+# A mechanism to transfer state between the initramfs and the real
+# system. Obsolete since /run was introduced, but still used by some
+# services.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
+# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
 enable import-state.service
-enable loadmodules.service
+
+# An initscripts mechanism for readonly root
+# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
+# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
 enable readonly-root.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1630200
+# Ensure that any installed kmods are built for the currently-running
-# s390x specific services
+# kernel at boot
+# https://bugzilla.redhat.com/show_bug.cgi?id=1518258
+enable akmods.service
+
+# virtualbox-guest-additions service, yet another virtual-machine guest
+# integration agent, this is a locally-running service, Note this has a
+# "ConditionVirtualization=|oracle" so it will only run under VirtualBox
+# https://bugzilla.redhat.com/show_bug.cgi?id=1534595
+enable vboxservice.service
+
+# Mark the system for SELinux autorelabel when appropriate
+# https://bugzilla.redhat.com/show_bug.cgi?id=1589720
+enable selinux-autorelabel-mark.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1623901
 enable cpi.service
+
+# Initialize persistent devices on s390x
 enable device_cio_free.service
 
 # Enable the stratis daemon for managing stratis storage
-# https://bugzilla.redhat.com/show_bug.cgi?id=1632510
+# https://bugzilla.redhat.com/show_bug.cgi?id=1630514
 enable stratisd.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1817591
+# Enable a service to finalize staged OSTree changes at shutdown
-enable mlocate-updatedb.timer
+# https://bugzilla.redhat.com/show_bug.cgi?id=1639372
+enable ostree-finalize-staged.path
 
-# nvme auto connect
+# Enable the Docker daemon socket
-# https://bugzilla.redhat.com/show_bug.cgi?id=1805466
+# https://bugzilla.redhat.com/show_bug.cgi?id=1655602
-enable nvmefc-boot-connections.service
+enable docker.socket
 
-# OSTree based systems need to remount /sysroot and
+# Enable the service for adding Fedora OCI repos to flatpak
-# /var as rw via ostree-remount.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1696225
-# ignored by non-OSTree based systems
+enable flatpak-add-fedora-repos.service
-# https://bugzilla.redhat.com/show_bug.cgi?id=1848453
-enable ostree-remount.service
 
-# DBus needed by Anaconda
+# Run fstrim weekly on filesystems listed in fstab
-enable dbus.socket
+enable fstrim.timer
-enable dbus-broker.service
 
-# Enable iscsi service files
+# oneshot to generate kata VM appliance at host bootup
-# https://bugzilla.redhat.com/show_bug.cgi?id=1930458
+# for the booted kernel
-enable iscsi.service
+enable kata-osbuilder-generate.service
-enable iscsid.socket
-enable iscsiuio.socket
-enable iscsi-onboot.service
 
-# Enable logrotate.timer
+# Enable rotation of system log files
-# https://bugzilla.redhat.com/show_bug.cgi?id=1977865
+# https://bugzilla.redhat.com/show_bug.cgi?id=1655153#c4
 enable logrotate.timer
 
-# Enable greenboot
+# Enable regular update of SpamAssassin data files
-# https://bugzilla.redhat.com/show_bug.cgi?id=2005552
+# https://bugzilla.redhat.com/show_bug.cgi?id=1651002
-enable greenboot-grub2-set-counter.service
+enable sa-update.timer
-enable greenboot-grub2-set-success.service
-enable greenboot-healthcheck.service
-enable greenboot-rpm-ostree-grub2-check-fallback.service
-enable greenboot-status.service
-enable greenboot-task-runner.service
-enable redboot-auto-reboot.service
-enable redboot-task-runner.service
-# https://bugzilla.redhat.com/show_bug.cgi?id=2108625
-enable greenboot-service-monitor.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=2013299
+# Enable service to automatically rebuild the RPM database
-enable low-memory-monitor.service
+# on startup when /var/lib/rpm/.rebuilddb exists
+# https://bugzilla.redhat.com/show_bug.cgi?id=1826658
+enable rpmdb-rebuild.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=2049627
+# Enable service to automatically migrate the RPM database to /usr
-enable switcheroo-control.service
+# on startup when /var/lib/rpm/.migratedb exists
+# https://bugzilla.redhat.com/show_bug.cgi?id=2044061
+enable rpmdb-migrate.service
+
+# Support services for Google Cloud
+# Approved by FESCo: https://pagure.io/fesco/issue/2578
+enable google-guest-agent.service
+enable google-startup-scripts.service
+enable google-shutdown-scripts.service
+
+# Certbot (Let's Encrypt)
+# https://bugzilla.redhat.com/show_bug.cgi?id=1940211
+enable certbot-renew.timer
+
+# enable thermald by default for desktops
+# https://pagure.io/fedora-workstation/issue/71
+enable thermald.service
+
+# enable uresourced by default for desktops
+# https://pagure.io/fesco/issue/2457
+enable uresourced.service
+
+# enable power-profiles-daemon
+# https://pagure.io/fedora-workstation/issue/191
+enable power-profiles-daemon.service
 
 # Enable clevis-luks-askpass.path
-# https://bugzilla.redhat.com/show_bug.cgi?id=2106811
+# https://bugzilla.redhat.com/show_bug.cgi?id=2101719
 enable clevis-luks-askpass.path
+
+# Enable livesys services for live media
+# https://bugzilla.redhat.com/show_bug.cgi?id=2148790
+enable livesys.service
+enable livesys-late.service
+
+# Enable Waydroid
+# https://bugzilla.redhat.com/show_bug.cgi?id=2157810
+enable waydroid-container.service
+
+# Enable nmstate to apply network configuration from /etc/nmstate/*.yml
+# https://github.com/coreos/fedora-coreos-tracker/issues/1175
+# https://github.com/coreos/fedora-coreos-config/pull/2269
+enable nmstate.service
+
+# Enable nfs-client.target
+# https://bugzilla.redhat.com/show_bug.cgi?id=2218006
+enable nfs-client.target
+
+# Enable cloud-init services
+# https://bugzilla.redhat.com/show_bug.cgi?id=2233948
+enable cloud-config.service
+enable cloud-final.service
+enable cloud-init.service
+enable cloud-init-local.service
+
+# Enable  kernel-bootcfg-boot-successful.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2239607
+enable kernel-bootcfg-boot-successful.service
+
+# Enable pd-mapper service for Thinkpad X13s
+# https://bugzilla.redhat.com/show_bug.cgi?id=2255318
+enable pd-mapper.service
+