systemd 262 lands with embedded unit files, LUO integration and an AI “canary” for unreviewed code

The systemd project has released version 262, the latest feature update to Linux's init system and service manager. As is usual for systemd releases, the changelog is a long one.

Reliability and containers

The systemd manager now embeds a basic set of unit files and falls back to them when the files cannot be loaded from disk, or in container scenarios where no unit files are installed. These in-memory fallbacks cover the reboot and shutdown targets, the systemd-poweroff service, and the multi-user target.

For very small containers, systemd can now be built as a single statically linked binary combining PID 1 and the executor.

Live updates and confidential computing

Service units gain a LUOSession= option for creating Live Update Orchestrator (LUO) sessions, alongside broader integration improvements for that on-the-fly update mechanism. The NUMAPolicy= option now accepts preferred-map and weighted-interleave values.

In systemd-vmspawn, the --coco= option now supports Intel TDX in addition to the previously available AMD SEV-SNP for confidential computing. There is also new dm-clone boot integration.

Installation and encryption

systemd-firstboot now understands systemd.firstboot=headless, which suppresses all interactive prompts and performs non-interactive auto-configuration — handy for unattended installations. systemd-cryptenroll gains a first-boot enrollment wizard. New FSCRYPT-backed home directories in systemd-homed now default to FSCRYPT v2 policies, and systemd-coredump supports the kernel coredump socket protocol introduced in Linux 6.17.

An AI “canary”

The curious addition: systemd 262 carries an AI canary for detecting unreviewed AI/LLM code contributions. First seen in the 262-rc2 release candidate, it is meant to catch contributions that entered the project without proper human review.

The full list of changes is available in the release notes on GitHub.

Source: Phoronix