systemd 262 Released With AI/LLM Canary For Unreviewed Code, LUO Integration

Systemd 262 made it out today as the newest feature update to this Linux init system and service manager. As with most systemd releases, it's heavy on new features and functionality.

Some of the highlights of systemd 262 include:

- The systemd manager now embeds a basic set of unit files and will rely on them if the files cannot be loaded from the disk or in cases of container uses without installing any unit files. These are basically in-memory fall-backs for the reboot and shutdown targets, systemd-poweroff service, and multi-user target.

- Systemd can now be built as a single statically linked PID 1/executor binary for very small containers.

- Systemd's NUMAPolicy= option now accepts preferred-map and weighted-interleave values.

- Service units now have the LUOSession= option to have systemd create Live Update Orchestrator (LUO) sessions. There is also other systemd integration improvements around the Live Update Orchestrator.

- The systemd-firstboot now supports systemd.firstboot=headless for suppressing all interactive prompts with non-interactive auto-configuration for handling unattended installations.

- systemd-coredump now supports the kernel coredump socket protocol introduced in Linux 6.17.

- New FSCRYPT-backed home directories with systemd-homed now default to FSCRYPT v2 policies.

- systemd-cryptenroll gained a first-boot enrollment wizard.

- systemd-vmspawn's "--coco=" option now supports Intel TDX in addition to previously supporting AMD SEV-SNP for confidential computing options.

- New dm-clone boot integration.

- Systemd 262 is also now carrying an AI canary for detecting un-reviewed AI/LLM code contributions.

The lengthy list of systemd 262 changes in full can be found via the release text on GitHub.