From b9213b167de2bc45d40932a688d10da690c275b9 Mon Sep 17 00:00:00 2001 From: Yu Watanabe Date: Tue, 29 Sep 2026 18:17:45 +0900 Subject: [PATCH] mkosi: update mkosi ref to ecf7f5702bb2052b7a69cab3fe7d37bc3b9ad77b * ecf7f5702b Release 27.1 * ca08e2ccef docs: add notes on nsresourced in execution flow * 146b5dd4de docs: add a few notes on package manager specific behaviour * 344e42ee20 Update NEWS * dde1bf020f debian: fix debian-security/debug url when using a mirror * 699aa3b565 mkosi: upgrade debug message about fallback path to info * cb6da3f3ce mkosi: move fallback environment variable check to bypass nsresourced fully * 88c716a6b9 config: add delegate_ranges * f4de9a102a mkosi: use the foreign UID range only when requested when running as root * d091fed134 mkosi: only delegate UID ranges if we're not already root * 165bc99675 sandbox: rename delegate to delegate_ranges * bba53c50d0 sandbox: use equality check instead of boolean not for delegate * a033d03f59 summary: add foreign uid range * f13e96eb95 user: drop unused variable SUBRANGE * 847d113863 mkosi-obs: Only configure MakeScriptsExecutable in the main image * 568b1bce56 dnf: Only read repositories and variables from the sandbox tree * 938d6a1c21 obs: use policy signing data when available * 19d045e5e9 Rename sysupdate configuration files to .transfer * 9539f1771a action: bump fallback apk version to 3.0.8 * 8de4d25596 sandbox: add force_fallback to acquire_privileges and wire it up via env * af97d6ffef opensuse: tolerate missing RPM keyring * 0f2b7e0656 initrd: don't fail when encountering directories among ucode files * 5240191893 Allow using SignInitrdPCRs with SplitArtifacts=pcrs * ce90009686 Bump ukify required version from 261.999 to 262~ for SignInitrdPCRs * 58bbd63aca news: fix v27 `DiskType=` setting typo * 1da3299aec tests: skip test_fork_and_wait if on rc 1 * 5658e7abc9 Bump version to 28~devel * 4736cd8361 Release 27 * 97f305bf0a action: make shell style consistent * dd7140cbae action: only use apk version from API if non-empty * 2cfe0cefb8 news: update NEWS * 7bca598fa4 action: support container-based self-hosted runners * 08c86a25e1 action: bump fallback APK version * cc0fcef38f action: reduce timeouts and number of API calls * 211993d5d2 action: download latest version of apk | * f33cc45db3 Add ToolsTreeSnapshot= for pinning the default tools tree | * ddfc5a2cb5 tests: join options and their values with f-strings | * a497ff0251 doc: add missing matchers * | 589226cfd4 apk: disable grub's update-grub trigger during package installation / | * 595451bb4b debian: add new split-out systemd packages | * 7ce1851901 Revert "mkosi-tools: Install systemd-tpm on Debian" | * 50a1137be5 ci: pin resolved release for integration tests | * e30b0a0ba4 tests: drop obsolete @ prefix | * e7f4d57fac news: update NEWS |/ * bf2addb2ec build(deps): bump aws-actions/configure-aws-credentials * a58ded6a2a build(deps): bump actions/checkout from 6.0.2 to 7.0.1 * 9b7d87a170 add support for prebuilt UKIs * 75fdb9be15 mkosi-tools: Install systemd-tpm on Debian * d5ff0d0d98 Fall back to unprivileged user namespace on polkit denial * 0e4d5546ac Bump 261~devel version checks to 261 * 180d4a5329 Use systemd nightly OBS version in signing PCR policies auto detection * f7401bdc8d Add support for signing PCR policies for the initrd * 33d17b2b92 sandbox: Don't create shared propagation peer group * a078088f8e sandbox: Declare MS_PRIVATE as well * e1e9eafc87 kmod: eliminate duplication in calls to modinfo * df68b27e8e tools: add mount to Debian tools tree * 205dcedd45 util: don't drop single-character variable names in read_env_file * 35a9d38ea0 distribution: report the actual architecture in unsupported-arch errors * d4f44d212c sandbox: handle case where dev node for tty doesn't exist better * acf08c5eca build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 * b3ec53743a tests: Pass --output-directory to vm() and boot() * 9bc430a7fa config: Isolate build history per output directory * fd3d9bfe57 tests: Add regression test for build history lookup via configured output dir | * 55ab00bb13 Fix tar exclude patterns for apivfs paths |/ * 699da862f8 sandbox: Split a chroot() context manager out of chase() * 70ce10d132 sandbox: Default FSOperation.execute oldroot/newroot to / * 610b38538f Forbid AI attribution in commit messages * b7425bbe42 ci: Sync claude-review workflow with systemd * b9d4c06239 action: Make apk installation configurable and reliable again (cherry picked from commit 280dd84243c387af7510b727d123390fa9c61dc7) --- .github/workflows/coverage.yml | 2 +- .github/workflows/linter.yml | 2 +- .github/workflows/mkosi.yml | 2 +- .github/workflows/unit-tests.yml | 2 +- mkosi/mkosi.conf | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 034c3a5977..3b966d9ae9 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -26,7 +26,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false - - uses: systemd/mkosi@f7762b71437227922a367bb89597843c77494ef9 + - uses: systemd/mkosi@ecf7f5702bb2052b7a69cab3fe7d37bc3b9ad77b # Freeing up disk space with rm -rf can take multiple minutes. Since we don't need the extra free space # immediately, we remove the files in the background. However, we first move them to a different location diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index cbce937464..cc43f0d89d 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -57,7 +57,7 @@ jobs: GITHUB_ACTIONS_CONFIG_FILE: actionlint.yml ENABLE_GITHUB_PULL_REQUEST_SUMMARY_COMMENT: false - - uses: systemd/mkosi@f7762b71437227922a367bb89597843c77494ef9 + - uses: systemd/mkosi@ecf7f5702bb2052b7a69cab3fe7d37bc3b9ad77b - name: Check that tabs are not used in Python code run: sh -c '! git grep -P "\\t" -- src/core/generate-bpf-delegate-configs.py src/boot/generate-hwids-section.py src/ukify/ukify.py test/integration-tests/integration-test-wrapper.py' diff --git a/.github/workflows/mkosi.yml b/.github/workflows/mkosi.yml index eda27599f1..679f2e1954 100644 --- a/.github/workflows/mkosi.yml +++ b/.github/workflows/mkosi.yml @@ -93,7 +93,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false - - uses: systemd/mkosi@f7762b71437227922a367bb89597843c77494ef9 + - uses: systemd/mkosi@ecf7f5702bb2052b7a69cab3fe7d37bc3b9ad77b # Freeing up disk space with rm -rf can take multiple minutes. Since we don't need the extra free space # immediately, we remove the files in the background. However, we first move them to a different location diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml index 6540cf149e..a1e9299694 100644 --- a/.github/workflows/unit-tests.yml +++ b/.github/workflows/unit-tests.yml @@ -74,7 +74,7 @@ jobs: with: persist-credentials: false - - uses: systemd/mkosi@f7762b71437227922a367bb89597843c77494ef9 + - uses: systemd/mkosi@ecf7f5702bb2052b7a69cab3fe7d37bc3b9ad77b - name: Build tools tree run: | diff --git a/mkosi/mkosi.conf b/mkosi/mkosi.conf index 505dc0bd5d..930b93fcd5 100644 --- a/mkosi/mkosi.conf +++ b/mkosi/mkosi.conf @@ -1,7 +1,7 @@ # SPDX-License-Identifier: LGPL-2.1-or-later [Config] -MinimumVersion=commit:f7762b71437227922a367bb89597843c77494ef9 +MinimumVersion=commit:ecf7f5702bb2052b7a69cab3fe7d37bc3b9ad77b Dependencies= minimal-base minimal-0