From c7ccfb8fc0b7718ecde8d0b86bb91c500971d07c Mon Sep 17 00:00:00 2001
From: Anita Zhang <the.anitazha@gmail.com>
Date: Aug 09 2024 20:40:01 +0000
Subject: [main repo docs] update selinux-policy and systemd blurbs


---

diff --git a/docs/content/repositories/main.md b/docs/content/repositories/main.md
index 914edcb..b700553 100644
--- a/docs/content/repositories/main.md
+++ b/docs/content/repositories/main.md
@@ -20,10 +20,21 @@ CBS to see what packages are available. Please report any issues with these
 packages on our
 [package-bugs](https://pagure.io/centos-sig-hyperscale/package-bugs) tracker.
 
+## kpatch
+We ship an updated version of [kpatch](https://github.com/dynup/kpatch), which
+also includes the `kpatch-build` tool. This can be used to convert kernel
+patches to be then applied onto a system that supports
+[Kernel Live Patching](https://www.kernel.org/doc/html/latest/livepatch/livepatch.html).
+
+## selinux-policy
+In order to support SELinux enforcement with the latest systemd, we backport the
+[selinux-policy based on Fedora Rawhide packaging](https://src.fedoraproject.org/rpms/selinux-policy/tree/rawhide).
+It is a straight port of the Rawhide version and is only updated as needed.
 
 ## systemd
-We ship a backport of [systemd](https://systemd.io) based on the Fedora
-packaging. This includes a variety of bug fixes in existing features such as
+We ship a backport of [systemd](https://systemd.io) based on the [Fedora
+Rawhide packaging](https://src.fedoraproject.org/rpms/systemd/tree/rawhide).
+This includes a variety of bug fixes in existing features such as
 timers and cgroups, as well as new properties that take advantage of the latest
 kernel features. You can also look forward to new knobs in the various tools
 and daemons to make debugging and configuration easier.
@@ -35,20 +46,19 @@ the appropriate
 [kernel cmdline](https://www.freedesktop.org/software/systemd/man/systemd.html#systemd.unified_cgroup_hierarchy)
 knobs.
 
-This systemd backport also includes a SELinux overlay module, which allows
-running systemd on a system in enforcing mode. Nonetheless, the SELinux
-integration has only seen limited testing and should be considered experimental
-at this point.
+Multiple systemd service stacks that are not included in base CentOS Stream
+are available in the Hyperscale version:
 
-We also include systemd-oomd, which was declared stable in systemd 248 and was
-[adopted in Fedora 34](https://fedoraproject.org/wiki/Changes/EnableSystemdOomd)
-as the default userspace out-of-memory killer. It monitors memory pressure
-thresholds and kills processes at the cgroup level. The `systemd-oomd-defaults`
-package, which provides the policy used by Fedora, is also backported to our
-repository.
+- [systemd-homed](https://www.freedesktop.org/software/systemd/man/latest/systemd-homed.service.html)
+- [systemd-networkd](https://www.freedesktop.org/software/systemd/man/latest/systemd-networkd.service.html)
+- [systemd-portabled](https://www.freedesktop.org/software/systemd/man/latest/systemd-portabled.service.html)
+- [systemd-timesyncd](https://www.freedesktop.org/software/systemd/man/latest/systemd-timesyncd.service.html)
+- [systemd-userdbd](https://www.freedesktop.org/software/systemd/man/latest/systemd-userdbd.service.html)
 
-## kpatch
-We ship an updated version of [kpatch](https://github.com/dynup/kpatch), which
-also includes the `kpatch-build` tool. This can be used to convert kernel
-patches to be then applied onto a system that supports
-[Kernel Live Patching](https://www.kernel.org/doc/html/latest/livepatch/livepatch.html).
+We also build test executables and include them in the `systemd-tests` package.
+
+Systemd-oomd was declared stable in systemd 248 and was
+[adopted in Fedora 34](https://fedoraproject.org/wiki/Changes/EnableSystemdOomd)
+as the default userspace out-of-memory (OOM) killer. We backport the
+`systemd-oomd-defaults` package which provides the default policy for memory
+pressure-based OOM kills used by Fedora.