Sync from SUSE:ALP:Source:Standard:1.0 python-kiwi revision 54471258fc915750a13492fbb5dcdc6f

This commit is contained in:
2025-07-29 10:14:24 +02:00
parent 490801cca2
commit 1b2803632e
4 changed files with 742 additions and 9 deletions

View File

@@ -3,16 +3,16 @@
pkgname=('python-kiwi' 'kiwi-man-pages' 'dracut-kiwi-lib' 'dracut-kiwi-oem-repart' 'dracut-kiwi-oem-dump' 'dracut-kiwi-live' 'dracut-kiwi-overlay')
arch=(x86_64)
pkgver=10.2.22
pkgver=10.2.29
pkgrel=0
pkgdesc="KIWI - Appliance Builder Next Generation"
url="https://github.com/SUSE/kiwi/tarball/master"
license=('GPL3')
makedepends=(make gcc python-build python-docopt python-installer python-lxml python-poetry-core python-requests python-setuptools python-simplejson python-sphinx python-sphinx_rtd_theme python-wheel python-yaml shadow grep)
makedepends=(make gcc python-build python-docopt python-installer python-lxml python-poetry-core python-requests python-simplejson python-sphinx python-sphinx_rtd_theme python-wheel python-yaml shadow grep)
provides=(kiwi-ng kiwi)
source=("${pkgname}.tar.gz")
changelog="${pkgname}.changes"
md5sums=('ae11c8704e18ece163e446822d6ffb4a')
md5sums=('ffa1a64be8bcae034a315956f75a09ef')
build() {
@@ -27,7 +27,7 @@ build() {
}
package_python-kiwi(){
depends=(python-docopt python-simplejson python-lxml python-requests python-setuptools python-yaml grub qemu squashfs-tools gptfdisk pacman e2fsprogs xfsprogs btrfs-progs libisoburn lvm2 mtools parted multipath-tools rsync tar shadow screen kiwi-man-pages)
depends=(python-docopt python-simplejson python-lxml python-requests python-yaml grub qemu squashfs-tools gptfdisk pacman e2fsprogs xfsprogs btrfs-progs libisoburn lvm2 mtools parted multipath-tools rsync tar shadow screen kiwi-man-pages)
optdepends=('gnupg: keyring creation for APT package manager')
cd kiwi-${pkgver}
python3 -m installer --destdir "${pkgdir}/" dist/*.whl

View File

@@ -1,3 +1,732 @@
-------------------------------------------------------------------
Thu Jul 24 19:42:56 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 10.2.28 → 10.2.29
-------------------------------------------------------------------
Thu Jul 24 19:03:08 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix return from repart stage
If we return from the repart stage it's important to wait
for the root device to appear. This is because the device
setup from udev might still be held back due to a former
lock on the device. This means if we return fast after
locking for example when check_repart_possible() quickly
finds out that it's not possible, then udev has not yet
got the time to create the device nodes.
This Fixes #2863
-------------------------------------------------------------------
Fri Jul 18 13:59:31 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 10.2.27 → 10.2.28
-------------------------------------------------------------------
Fri Jul 18 10:35:32 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix dracut code to be POSIX compliant
The redirect type "< <(...)" is not POSIX complians and leads
to a syntax error in dracut which calls bash as "sh" leading
it to be restricted to POSIX only
-------------------------------------------------------------------
Thu Jul 17 15:24:09 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Extend test-image-lvm integration test
For testing a bit more complex resize procedure, update
the lvm integration test to run more resize actions
with required device locking
-------------------------------------------------------------------
Thu Jul 17 12:33:17 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Apply proper udev locking
Several commands during repart, resize and other actions
require a proper lock to be set for udev such that other
events knows about the locked state of a device and do
not mess with it until the command for which the lock
persists has completed. This commit applies proper udev
locks to all commands that requires it. In addition
incorrect code that was expected to prevent such race
conditions got dropped from the implementation.
This is related to bsc#1242987
-------------------------------------------------------------------
Thu Jul 17 11:28:59 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- relocate GPT at the end of disk using sfdisk
Using sfdisk for relocation and verification makes this
part more consistent. We also want to move away from gdisk.
This is related to #2851
-------------------------------------------------------------------
Thu Jul 17 10:42:34 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Do not strictly require config.partids in repart
The kiwi-repart implementation requires a metadata file
named config.partids which holds information about
partition ids and more stored at the time the image was
built. Depending on the complexity of the image and the
resize request some of the information can be rebuilt
in case the metadata file is missing. This commit adds
the rebuild of the minimum required information to run
a standard resize and therefore allows the kiwi-repart
dracut module to work also without config.partids to be
present in the system
-------------------------------------------------------------------
Thu Jul 17 10:37:34 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Do not drop /config.partids
The partition id metadata file is used in the kiwi-repart
module. If a user wants to use the kiwi repart module
permanently, this metadata file needs to stay in the system.
Therefore it should not be automatically deleted by the
cleanup. A disk.sh hook script can be used to force the
deletion of the file though. This is related #2851
-------------------------------------------------------------------
Wed Jul 16 16:10:07 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix centos/test-image-live-disk-v10
There is no package named iprutils
-------------------------------------------------------------------
Wed Jul 16 16:04:15 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix centos/test-image-live-disk-v10
Update package names
-------------------------------------------------------------------
Wed Jul 16 15:59:23 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Added centos/test-image-live-disk-v10 build test
-------------------------------------------------------------------
Wed Jul 16 11:07:05 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix tumbleweed/test-image-gce integration test
Drop obsolete growpart
-------------------------------------------------------------------
Wed Jul 16 10:54:54 CEST 2025 - Robert Schneider <48757730+work-robot@users.noreply.github.com>
- Followup fix to support older apt versions for bootstrap
There are apt versions that do not create missing state files.
Make sure the intermediate bootstrap state file is created in
any case. This Fixes #2857
-------------------------------------------------------------------
Wed Jul 16 10:36:41 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed integration test builds
Next round of fixes for integration tests. Missing
or wrong service activations
-------------------------------------------------------------------
Wed Jul 16 10:22:11 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix arm/tumbleweed/test-image-rpi
Fix snapper setup for this integration test
-------------------------------------------------------------------
Tue Jul 15 16:28:45 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed test-image-live-disk
Added missing openssh-server package
-------------------------------------------------------------------
Tue Jul 15 15:54:51 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed test-image-azure
Add missing python-azure-agent-config-default package
-------------------------------------------------------------------
Tue Jul 15 15:50:10 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed debian integration test builds
secure shell service is named ssh and not sshd there
-------------------------------------------------------------------
Tue Jul 15 15:37:10 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed integration test builds
Second round of fixes for integration tests. Again errors
now became visible due to the refactoring of the script code
-------------------------------------------------------------------
Tue Jul 15 15:03:59 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed integration test builds
Errors from scripts were no longer ignored due to the last
cleanup of the integration test script code. This commit
fixes the now exposed build errors
-------------------------------------------------------------------
Tue Jul 15 11:15:25 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix check_target_dir_on_unsupported_filesystem
Find the first existing path in the target path and
check the filesystem capabilities for this path.
This Fixes #2858
-------------------------------------------------------------------
Mon Jul 14 18:24:23 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Cleanup integration tests config.sh script code
Add script code to shellcheck and fix all reported issues.
Get rid of suseXX and baseXX methods as much as possible.
Add set -ex for all script code. Do not allow any script
code to fail.
-------------------------------------------------------------------
Mon Jul 14 16:34:38 CEST 2025 - Andrea Bolognani <abologna@redhat.com>
- defaults: Add patterns for shim/grub2 on riscv64
A recent commit changed the way these are looked up and
accidentally broke image building on riscv64, with
KiwiBootLoaderGrubSecureBootError: Signed grub2 efi loader not found
now being raised for kiwi recipes that worked just fine
before that moment.
Fixes: 197572378cf4f25103934beac2ceca4fbbcfcbc0
Thanks: David Abdurachmanov <davidlt@rivosinc.com>
Thanks: Marcus Schäfer <marcus.schaefer@gmail.com>
Signed-off-by: Andrea Bolognani <abologna@redhat.com>
-------------------------------------------------------------------
Sat Jul 12 23:50:39 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add SLFO test-image-disk-simple integration test
Add simple disk test and allow for testing the new
transparent container idea for the aws toolchain. also
add SLFO builds to the helper script
-------------------------------------------------------------------
Wed Jul 09 15:23:41 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed check for unallocated space on disk
So far the check for unallocated space was only working for GPT
and there it was also not really stable. The check was based on
verifying if the backup GPT table is really at the end of the
disk. Depending on which tool was used to dump the image on the
target this "mistake" often got corrected by the tools that
dumped the image. In this case the check no longer worked.
This commit improves the check by another test which looks
for the real free bytes on disk compared to the current
partition geometry.
-------------------------------------------------------------------
Wed Jul 09 12:50:06 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Move to neutral directory for calling osc
When calling the helper/build_status.sh script to get an
overview about the results of the integration tests, there
is a stupid new behavior from the osc tool that it assumes
a package name according to the name of the directory you
are in probably connected to the fact that the data in this
directory is a git checkout or some other strange assumption.
This commit moves to a neutral directory where none of the
osc internal assumptions applies and it just does what it
should do... showing results of the given project.
-------------------------------------------------------------------
Wed Jul 09 11:26:31 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 10.2.26 → 10.2.27
-------------------------------------------------------------------
Tue Jul 08 16:06:26 CEST 2025 - Gavin Lambert <uecasm@users.noreply.github.com>
- Fix regression in get_partition_node_name
backwards compat for lsblk before 2.38
if START column not supported, fall back to default sort
-------------------------------------------------------------------
Tue Jul 08 09:54:11 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add global option --setenv
Allow to set environment variables in the caller environment
via the commandline, e.g --setenv SOURCE_DATE_EPOCH=42
-------------------------------------------------------------------
Tue Jul 08 09:06:22 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Seed filesystem UUIDs with SOURCE_DATE_EPOCH
For reproducible builds the calculation of the filesystem UUID
should be persistent with each rebuild of the image. To achieve
this the UUID is calculated using the SOURCE_DATE_EPOCH from
the environment plus a char-number representation of the filesystem
label name as random seed. In kiwi every filesystem is created
with a label, thus only in case there is no SOURCE_DATE_EPOCH
available we continue to create the UUID as random data.
This Fixes #2761
-------------------------------------------------------------------
Tue Jul 08 09:03:09 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add label attribute for <partition> section
Allow to specify a filesystem label as part of a <partition>
definition. So far the label was set by the name of the
partition. With the new label attribute, a filesystem label
different from the partition name can be set. This commit
also updates/fixes the documentation in this regard.
-------------------------------------------------------------------
Tue Jul 08 08:59:03 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Improve log message in SystemIdentifier
Add some scope information such that we know from where
this log information originates from.
-------------------------------------------------------------------
Mon Jul 07 16:35:27 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add rd.kiwi.install.devicepersistency
Allow to specify which type of persistent device name should
be used to build up the list of installation disk devices.
For example rd.kiwi.install.devicepersistency=by-path would
use the by-path representations for the available disk
devices. The default (by-id) stays untouched. In case an
invalid or not present device representation is selected, kiwi
falls back to the non persistent unix node names.
-------------------------------------------------------------------
Fri Jul 04 16:15:45 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update test-image-disk
Add NetworkManager for better remote debugging capabilities
-------------------------------------------------------------------
Tue Jul 01 11:36:30 CEST 2025 - Bernhard M. Wiedemann <bwiedemann@suse.de>
- Make mbr-id deterministic
Log the value of SDE so it is available to review,
even if the build system does not tell about it.
Update the tests to cover the new code-path.
Co-Authored-By: Marcus Schäfer <marcus.schaefer@gmail.com>
-------------------------------------------------------------------
Tue Jul 01 03:59:03 CEST 2025 - Bernhard M. Wiedemann <bwiedemann@suse.de>
- Ensure dracut initrd is reproducible
This helps a bit with issue #2358
Add reproducible flag for UKI too
Update tests accordingly
Co-Authored-By: Marcus Schäfer <marcus.schaefer@gmail.com>
-------------------------------------------------------------------
Fri Jun 27 11:19:27 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 10.2.25 → 10.2.26
-------------------------------------------------------------------
Fri Jun 27 11:07:30 CEST 2025 - Alejandro Perez Pestana <alejandroperezpestana99@gmail.com>
- Add kernel parameter support for dm-verity options
Implement rd.kiwi.verity_options= parameter to allow runtime customization of veritysetup options
Closes #2837
-------------------------------------------------------------------
Fri Jun 27 09:55:26 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix shim lookup for arm on SUSE
Add missing search path for shim binary on arm based SUSE
systems. Also update the tumbleweed/test-image-live-disk
integration test for arm to build with secure boot enabled
to actually test a secure boot enabled ISO build.
This Fixes #2842
-------------------------------------------------------------------
Wed Jun 25 16:02:51 CEST 2025 - Dan Čermák <dcermak@suse.com>
- Add container_import template test
-------------------------------------------------------------------
Wed Jun 25 14:21:01 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 10.2.24 → 10.2.25
-------------------------------------------------------------------
Wed Jun 25 09:36:58 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed get_partition_node_name
The function get_partition_node_name takes the disk device
and the partition index as arguments to match against the
respective device node for this partition index. The partition
index is the position of the partition in the partition table
according to their start offset. For the code to function
properly it is required that the list of partitions provided
by lsblk is ordered according to the start address of the
partitions in the table. The way lsblk was called did not
enforce this ordering. This commit enforces the order to
be done against the start offset and fixes bsc#1245190
-------------------------------------------------------------------
Tue Jun 24 23:35:52 CEST 2025 - Dan Čermák <dcermak@suse.com>
- Add support for container-snap as a container-image engine
With this commit, we can now pre-load images using container-snap directly
during the kiwi image build
-------------------------------------------------------------------
Tue Jun 24 15:43:59 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update test-image-MicroOS for local build
Fix bootstrap setup such that micro-os patterns can resolve
-------------------------------------------------------------------
Tue Jun 24 15:30:49 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix logging of stderr data in command calls
The stderr data was presented as one blob without line
breaks. Hard to read and smells like a bug. This commit
fixes the output to become readable
-------------------------------------------------------------------
Tue Jun 24 08:07:32 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update test-image-MicroOS/disk.sh
Add a findmnt for / to check if there is a proper root
device reference
-------------------------------------------------------------------
Mon Jun 23 17:53:48 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix mount system for root_is_snapper_snapshot
If root is a snapper snapshot we have to tell the
chroot a proper root mount point which can be achieved
by a bind mount pointing to itself. This Fixes
bsc#1244668
-------------------------------------------------------------------
Wed Jun 18 17:11:45 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- There is no shim for aarch64 on SUSE
Fix integration test for standard EFI (no secure boot)
setup on arm
-------------------------------------------------------------------
Mon Jun 16 12:12:06 CEST 2025 - Alejandro Perez <69607775+aale24@users.noreply.github.com>
- Add driver configuration support for dracut initrd
Add driver configuration support for dracut initrd
Add support for specifying kernel drivers to be included or omitted
in the dracut initrd configuration. This extends the existing dracut
configuration capabilities like in the following example
<initrd action="add">
<dracut driver="erofs"/>
</initrd>
-------------------------------------------------------------------
Tue Jun 10 11:36:33 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed rootfs size calculation with spare part
In case a spare_part setup is combined with the root_clone feature,
the size calculation for the rootfs did not take the cloning into
account and lead to the wrong value. In addition when requesting
the spare part to be last and no size information was given, the
partition was not created at all. This commit fixes both defects
and Fixes #2831
-------------------------------------------------------------------
Sun Jun 08 14:15:34 CEST 2025 - Neal Gompa <ngompa@velocitylimitless.com>
- Add dependency for isomd5sum for iso images and set in kiwi-settings
This ensures that isomd5sum is pulled into the environment for ISO image
builds, and the updated settings makes it so that kiwi boxes will use it.
-------------------------------------------------------------------
Tue Jun 03 12:29:40 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Allow /boot to be a btrfs subvolume
In a btrfs based design, allow to put /boot as subvolume.
This required a small fix in the mount order in a way that
boot/efi gets mounted after the subvolume mounts are done.
The respective integration test has been updated to test
this functionality. This Fixes #2824
-------------------------------------------------------------------
Mon Jun 02 22:59:11 CEST 2025 - Dirk Müller <dirk@dmllr.de>
- Use f-strings where feasible
This is a slightly shorter and easier to read syntax
-------------------------------------------------------------------
Mon Jun 02 22:52:11 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Allow multiple EFI arch binaries/modules
Allow to lookup and included EFI binaries/modules for
multiple architectures. For testing the integration
test in rawhide/test-image-live-disk has been adapted
accordingly to install 32bit and 64bit EFI binaries.
This Fixes #2822
-------------------------------------------------------------------
Mon Jun 02 22:23:28 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Log warning message for disabled runtime checks
Complete type hints for RuntimeConfig class and log
a warning message for each disabled runtime check
-------------------------------------------------------------------
Mon Jun 02 13:51:05 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix static type argument int vs. str
-------------------------------------------------------------------
Mon Jun 02 12:55:05 CEST 2025 - Dirk Müller <dirk@dmllr.de>
- Move it inside the context that actually uses it
also rename it to "supported" as that seems to closer match
what it resembles
-------------------------------------------------------------------
Mon Jun 02 12:53:23 CEST 2025 - Dirk Müller <dirk@dmllr.de>
- Add overlayfs as supporting xattr/ACLs as well
-------------------------------------------------------------------
Mon Jun 02 12:27:18 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix disk_type validation for zipl loader
If the targettype is set to GPT in combination with plain
zipl as loader, the code to validate the targettype against
the targetgeometry was not effective and zipl failed.
This Fixes #2821
-------------------------------------------------------------------
Wed May 28 21:11:16 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixup overlay unit enablement
-------------------------------------------------------------------
Wed May 28 18:27:22 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixup overlay mount dependencies
-------------------------------------------------------------------
Wed May 28 17:54:31 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update test-image-overlayroot integration test
Use proper systemd mount units to setup the custom overlay.
The handling of fstab entries by systemd is limited and
should be better handled by self managed mount units
-------------------------------------------------------------------
Wed May 28 17:52:21 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Use proper mount units for overlay setup
Instead of manual mounting create a proper systemd mount
unit. This allows to manage mount dependencies and the order
of nested mounts in a clean way
-------------------------------------------------------------------
Tue May 27 10:58:12 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 10.2.23 → 10.2.24
-------------------------------------------------------------------
Mon May 26 11:38:25 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Cleanup build metadata
Make sure the final image rootfs does not contain unneeded
metadata files used during build time. The respective cleanup
call is performed after the root sync and after all initrd/boot
processing has been done. This is because up to that point it's
still possible that the information is required. This means
when building images with a read-only rootfs, it might not be
possible that the metadata can be deleted due to a chicken&egg
situation. Furthermore the cleanup is applied to the disk
builder only as other builders do not really suffer from
this data and for the container builder the metadata can
also be used for the stackbuild feature when building images
derived from containers. This Fixes #2668
-------------------------------------------------------------------
Sun May 25 19:30:41 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update overlay integration test for partial write
Update the sdboot_uki_verity_erofs profile of the
test-image-overlayroot integration test with a custom
fstab example to overlay only parts of the system
for writing. This Fixes #2815
-------------------------------------------------------------------
Sun May 25 19:21:15 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- bootloader setup without overlay write partition
If overlayroot_write_partition="false" is set, no system
indicator was stored. This cause the bootloader setup to
be skipped completely which is not required for e.g.
systemd-boot.
-------------------------------------------------------------------
Sun May 25 19:18:40 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Make sure to create overlay directories
Create overlay directories even if rd.root.overlay.readonly
is set. This allows individual fstab overlays mounts to be
performed
-------------------------------------------------------------------
Fri May 23 15:55:39 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed rd.root.overlay.readonly overlay mode
When booting an overlayroot image with rd.root.overlay.readonly
set, the system will boot with only the read-only root mounted.
There was a bug in the dracut code which prevented this mount
from succeeding when the read-only rootfs is different from
squashfs. This commit changes the mount to be a simple bind
mount, independent of the origin filesystem. This works because
the read-only mount is performed in the dracut overlay code
anyway. This is related to Issue #2815
-------------------------------------------------------------------
Wed May 21 11:36:42 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- The way we build debs requires setuptools
debbuild doesn't work when setuptools is not there
-------------------------------------------------------------------
Wed May 21 10:09:10 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Drop use of setuptools
Since we moved to poetry and no code using setuptools anymore,
this requirement can be dropped. The commit also updates the
plugin documentation which was still based on setup.py
-------------------------------------------------------------------
Tue May 20 20:57:27 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update live boot remote boot features
Like the upstream module also support the root=live:http://...
remote boot options. The kiwi-live dracut module is scheduled
to become obsolete, but it's still in use and should support
remote boot not only for AoE. As we got more issue reports than
working AoE remote boot success, this commit also updates the
documentation and switches to the capabilities of this PR.
-------------------------------------------------------------------
Mon May 19 15:54:48 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add UKI support for the grub bootloader
In addition to systemd_boot also add support for UKI creation
when grub is used. This includes the creation of a UKI image
via dracut in the same way as it's done for systemd_boot.
In addition an earlyboot grub script chainloads the UKI and
bypasses any written grub configuration. In Theory this should
also allow to use the shim loader for chainloading an UKI.
However I haven't done testing in this direction and I also
expect security issues with this approach because loading
any non signed data by shim is not expected to work. A new
profile named grub_uki_verity_erofs has been added to the
integration test that experiments with UKIs
-------------------------------------------------------------------
Mon May 19 13:06:52 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 10.2.22 → 10.2.23
-------------------------------------------------------------------
Fri May 16 16:08:47 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add support for <initrd> section as part of <type>
Extend scope and content of the <initrd> section to be allowed
as part of the <type> section. This allows to specify custom
call options and modules for the dracut tool. In particular
this commit implementes support for passing the uefi option
to dracut to enable building an UKI EFI binary as follows:
<initrd action="setup">
<dracut uefi="true"/>
</initrd>
This Fixes #2809 and Fixes #2408
-------------------------------------------------------------------
Fri May 16 09:04:53 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fix systemd-boot loader setup
To make sure only loader entries from /boot/efi/loader/entries
kiwi deleted eventually existing entry files from /boot/loader.
However that is a problem for read-only systems and should actually
also not performed by kiwi. This Fixes #2805
-------------------------------------------------------------------
Thu May 15 14:37:57 CEST 2025 - Marcus Schäfer <marcus.schaefer@gmail.com>

View File

@@ -56,7 +56,7 @@
%endif
Name: python-kiwi
Version: 10.2.22
Version: 10.2.29
Provides: kiwi-schema = 8.1
Release: 0
Url: https://github.com/OSInside/kiwi
@@ -96,9 +96,12 @@ BuildRequires: python%{python3_pkgversion}-docopt >= 0.6.2
%else
BuildRequires: python%{python3_pkgversion}-docopt-ng
%endif
%if 0%{?debian} || 0%{?ubuntu}
# only because of debbuild
BuildRequires: python%{python3_pkgversion}-setuptools
%endif
BuildRequires: python%{python3_pkgversion}-lxml
BuildRequires: python%{python3_pkgversion}-requests
BuildRequires: python%{python3_pkgversion}-setuptools
BuildRequires: python%{python3_pkgversion}-simplejson
%if 0%{?suse_version}
BuildRequires: python%{python3_pkgversion}-Sphinx
@@ -230,6 +233,8 @@ Provides: kiwi-image:iso
%endif
%if 0%{?suse_version}
Requires: checkmedia
%else
Requires: isomd5sum
%endif
Requires: xorriso
Requires: kiwi-systemdeps-core = %{version}-%{release}
@@ -445,7 +450,6 @@ Requires: python%{python3_pkgversion}-docopt-ng
%endif
Requires: python%{python3_pkgversion}-lxml
Requires: python%{python3_pkgversion}-requests
Requires: python%{python3_pkgversion}-setuptools
Requires: python%{python3_pkgversion}-xmltodict
%if ! (0%{?rhel} && 0%{?rhel} < 8)
Recommends: kiwi-man-pages

Binary file not shown.