Adding patchinfo patchinfo.20260106110541873376.925254595339

Update incident numbers [skip actions]
update to current state
2026-01-08 15:34:49 +01:00 · 2026-01-08 07:41:16 +00:00 · 2026-01-08 08:40:54 +01:00 · 2026-01-08 08:38:38 +01:00 · 2026-01-05 11:11:16 +01:00 · 2026-01-02 17:52:45 +01:00
630 changed files with 23314 additions and 278 deletions
--- a/.gitea/workflows/patchinfo_numberator.yaml
+++ b/.gitea/workflows/patchinfo_numberator.yaml
@@ -0,0 +1,36 @@
+# Use this as .gitea/workflows/patchinfo_numberator.yaml in all products/* repos
+name: Patchinfo ID numberator
+run-name: ${{ gitea.actor }} is setting patchinfo numbers
+on: [push]
+
+jobs:
+  use-go-action:
+    runs-on: tumbleweed
+    steps:
+      # To be obsoleted by a custom runner image
+      - run: |
+          zypper ar http://download.suse.de/ibs/SUSE:/CA/openSUSE_Factory CA
+          zypper ref
+          zypper in -y ca-certificates-suse ca-certificates-suse-ucs go
+      # Generic action from GitHub to clone the product git repo
+      - name: Checkout product
+        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.suse.de/actions/github-actions-checkout@v4
+        with:
+          token: ${{ secrets.REPO_WRITE }}
+          repo-sha256: true
+      - name: Update all new _patchinfo files
+        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.suse.de/actions/patchinfo-numbering-action@v0
+      - name: Get last commit author
+        id: last-commit
+        run: |
+          echo "author=$(git log -1 --pretty='%an <%ae>')" >> $GITHUB_OUTPUT
+      - name: Commit changes back
+        uses: https://gitea-actions-autobuild:${{ secrets.REPO_READ }}@src.suse.de/actions/stefanzweifel-git-auto-commit-action@v5
+        with:
+          commit_user_name: gitea-actions-autobuild
+          commit_user_email: autobuild+gitea@suse.de
+          commit_author: ${{ steps.last-commit.outputs.author }}
+          commit_message: "Update incident numbers [skip actions]"
+          commit_options: '--no-edit'
+          skip_fetch: true
+
--- a/.gitmodules
+++ b/.gitmodules
--- a/2
+++ b/2
@@ -1 +1 @@
-_config @products/slfo-release-managers @products/autobuild
+_config @products/maintenance-release-approver @products/autobuild
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/132
+++ b/132
@@ -1,8 +1,7 @@
-
 BuildFlags: setvcs
 BuildFlags: slsaversion:v1

-Release: <CI_CNT>.<B_CNT> spec:slfo.1.<CI_CNT>.<B_CNT>
+Release: <CI_CNT>.<B_CNT> spec:slfo.1.1_<CI_CNT>.<B_CNT>

 Prefer: -yast2-schema-micro
 %define gcc_version 13
@@ -84,8 +83,26 @@ Macros:
 :Macros
 %endif

+# requested by meissner 2025-04-28
+# Use the new uefi sign cert for ppc64le and s390x
+%ifarch ppc64le s390x
+BuildFlags: signflavor:2025-01-22
+%endif
+
 # SUSE SLFO specific change
-%if "%_project" == "SUSE:SLFO:Main:Build" || "%{sub %_project 1 22}" == "SUSE:SLFO:Main:Staging"
+%if "%_project" == "SUSE:SLFO:1.1:Build" || "%{sub %_project 1 21}" == "SUSE:SLFO:1.1:Staging"
+
+# blosc2 is broken on s390x
+# disable it to meet maintenance exit criteria
+%ifarch s390x
+ BuildFlags: excludebuild:blosc2
+%endif
+
+# enable clamav scanning. meissner 20250915
+# not on i586 for now, would need bootstrapping packages
+%ifarch aarch64 ppc64le s390x x86_64
+Support: post-build-checks-malwarescan clamav-database
+%endif

 # no mono on SLFO
 BuildFlags: excludebuild:gettext-runtime:gettext-csharp
@@ -323,18 +340,18 @@ Macros:

 %if "%_project" == "SUSE:SLFO:Main:Build" || "%_project" == "SUSE:ALP:Products:Basalt:1.0"
 Substitute: kiwi-image:docker python3-kiwi kiwi-systemdeps-containers container-build-checks-vendor-SUSE container-build-checks-strict
-Substitute: system-packages:docker kmod kernel-default dummy-release docker createrepo_c container-build-checks-vendor-SUSE container-build-checks-strict skopeo umoci
+Substitute: system-packages:docker kmod docker createrepo_c container-build-checks-vendor-SUSE container-build-checks-strict skopeo umoci
 Substitute: system-packages:podman podman buildah createrepo_c release-compare container-build-checks-vendor-SUSE container-build-checks-strict skopeo umoci
 %else
 %if "%_project" == "openSUSE:Factory" || "%_project" == "openSUSE:Factory:PowerPC" || "%_project" == "openSUSE:Factory:ARM" || "%_project" == "openSUSE:Factory:Rebuild" || "%_project" == "openSUSE:Factory:Live" || "%_project" == "openSUSE:Factory:NonFree" || "%_project" == "openSUSE:Factory:LegacyX86"
 Substitute: kiwi-image:docker python3-kiwi kiwi-systemdeps-containers container-build-checks-vendor-openSUSE container-build-checks-strict
-Substitute: system-packages:docker kmod kernel-default dummy-release docker createrepo_c container-build-checks-vendor-openSUSE container-build-checks-strict skopeo umoci
+Substitute: system-packages:docker kmod docker createrepo_c container-build-checks-vendor-openSUSE container-build-checks-strict skopeo umoci
 Substitute: system-packages:podman podman buildah createrepo_c release-compare container-build-checks-vendor-openSUSE container-build-checks-strict skopeo umoci
 %else
 # That ignore seems not to make sense - we only inject -strict based on specific projects already
 Ignore: container-build-checks-strict
 Substitute: kiwi-image:docker python3-kiwi kiwi-systemdeps-containers container-build-checks-vendor-SUSE
-Substitute: system-packages:docker kmod kernel-default dummy-release docker createrepo_c container-build-checks-vendor-SUSE skopeo umoci
+Substitute: system-packages:docker kmod docker createrepo_c container-build-checks-vendor-SUSE skopeo umoci
 Substitute: system-packages:podman podman buildah createrepo_c release-compare container-build-checks-vendor-SUSE skopeo umoci
 %endif
 %endif
@@ -405,6 +422,12 @@ Macros:
 :Macros
 %endif

+# requested by Marcus Rueckert and acked by Marcus Meissner 20241017
+%define default_firewall_backend nftables
+Macros:
+%default_firewall_backend nftables
+:Macros
+
 # slsaprovenance - as described at https://slsa.dev/provenance/v0.2
 # slsaprovenance diabled on Apr 28 2022
 # 07:29 < adrianS> DimStar: the slsafiles get not correctly generated, please disable the prjconf setting for now
@@ -1201,11 +1224,25 @@ Prefer: go -go1.13
 # avoid choice go1.21 / go1.21-openssl. meissner 20240903
 Prefer: -go1.21-openssl

-# default version in SLFO is 1.22, avoid choice for >= go1.22
-Prefer: -go1.23
+# default version in SLFO is now 1.24, avoid choices for >= relations
+Prefer: go1.24
+
+# deprefer those in favor of regular GO
+Prefer: -go1.18-openssl
+Prefer: -go1.19-openssl
+Prefer: -go1.20-openssl
+Prefer: -go1.21-openssl
+Prefer: -go1.22-openssl
+Prefer: -go1.23-openssl
+

 # have choice for kernel >= 4.1.0 needed by libbcc0: kernel-debug kernel-default kernel-default-base kernel-kvmsmall kernel-vanilla
-Prefer: kernel-default-base
+%ifarch s390x
+  # kernel-default-base does not boot on s390, s390 drivers are not included
+  Prefer: kernel-default
+%else
+  Prefer: kernel-default-base
+%endif
 # have choice for (kmod(sg.ko) if kernel) needed by suse-module-tools: kernel-default kernel-vanilla
 Prefer: -kernel-vanilla

@@ -1698,6 +1735,10 @@ Prefer: -maven-surefire-plugin-bootstrap -maven-surefire-report-plugin-bootstrap
 # have choice for mingw32-unistd-pthread-devel needed by mingw32-headers: mingw32-headers-dummy-pthread mingw32-winpthreads-devel
 Prefer: -mingw64-headers-dummy-pthread -mingw32-headers-dummy-pthread

+# have choice for libglib-2.0.so.0()(64bit) needed by ...: glib2-stage1-devel libglib-2_0-0
+Ignore: glib2-stage1-devel:this-is-only-for-build-envs
+Prefer: -glib2-stage1-devel
+
 # Below list still needs to be reviewed

 Prefer: xorg-x11-Xvnc:icewm
@@ -1989,6 +2030,9 @@ Constraint: hardware:cpu:flag vxd
 # Generated by openSUSE-release-tools/cleanup_32bit.py
 %ifarch %ix86

+# Listing all patchinfos where we need 32bit binaries kept
+BuildFlags: onlybuild:patchinfo.ga
+
 # manually added, not seen by cleanup-32bit: needed to have rpmlint in ring0
 BuildFlags: onlybuild:rpmlint-mini-AGGR

@@ -3924,13 +3968,6 @@ Macros:
 %usrmerged 1
 :Macros

-# 2024-08-08: Prefer gcc-build variants for building.
-# See SR#340895
-%if "%_repository" == "standard"
-Prefer: gcc-build-fortran
-Substitute: gcc-d gcc-build-d
-%endif
-
 # temporary to workaround boot strap problem:
 # should probably work by now
 # Support: !rpmlint-Factory
@@ -3991,27 +4028,60 @@ Prefer: -go1.18-openssl

 # Split between customer facing and internal compiler see gcc SR#322365
 Prefer: cpp-build
-Prefer: gcc-build-c++ gcc-build
+Prefer: gcc-build-ada
+Prefer: gcc-build-go
+Prefer: gcc-build
+Prefer: gcc-build-info
+Prefer: gcc-build-c++
+Prefer: gcc-build-fortran
+Prefer: gcc-build-d
+Prefer: gcc-build-32bit
+Prefer: gcc-build-devel
+Prefer: gcc-build-locale
+Prefer: gcc-build-c++-32bit
+Prefer: gcc-build-fortran-32bit
+Prefer: gcc-build-objc
+Prefer: gcc-build-objc-32bit
+Prefer: gcc-build-obj-c++
+Prefer: gcc-build-PIE
+Prefer: gcc-build-ada-32bit
+Prefer: gcc-build-go-32bit
+Prefer: gcc-build-d-32bit
+Prefer: gccjit-build-devel
 Prefer: libstdc++-build-devel
-Substitute: gcc gcc-build
-Substitute: gcc-32bit gcc-build-32bit
-Substitute: gcc-ada gcc-build-ada
-Substitute: gcc-ada-32bit gcc-build-ada-32bit
-Substitute: gcc-c++ gcc-build-c++
-Substitute: gcc-c++-32bit gcc-build-c++-32bit
-Substitute: gcc-go gcc-build-go
-Substitute: gcc-fortran gcc-build-fortran
-Substitute: gcc-objc gcc-build-objc
-Substitute: gcc-PIE gcc-build-PIE
-Substitute: cpp cpp-build
-Substitute: libstdc++-devel libstdc++-build-devel
-Substitute: libstdc++-devel-32bit libstdc++-build-devel-32bit
-Substitute: libgccjit-devel libgccjit-build-devel
+Prefer: libgccjit-build-devel
+
+Conflict: cpp
+Conflict: gcc-ada
+Conflict: gcc-go
+Conflict: gcc
+Conflict: gcc-info
+Conflict: gcc-c++
+Conflict: gcc-fortran
+Conflict: gcc-d
+Conflict: gcc-32bit
+Conflict: gcc-devel
+Conflict: gcc-locale
+Conflict: gcc-c++-32bit
+Conflict: gcc-fortran-32bit
+Conflict: gcc-objc
+Conflict: gcc-objc-32bit
+Conflict: gcc-obj-c++
+Conflict: gcc-PIE
+Conflict: gcc-ada-32bit
+Conflict: gcc-go-32bit
+Conflict: gcc-d-32bit
+Conflict: gccjit-devel
+Conflict: libgccjit-devel
+Conflict: libstdc++-devel

 Prefer: libyaml-devel
 Prefer: libwebkitgtk-6_0-4
 Prefer: sisu-plexus

+# Fix for have choice for (dhcpcd or dhcp-client) needed by cloud-init: dhcp-client dhcpcd 
+Prefer: dhcp-client
+
 # aggregate packages on i586 and standard from Workbench
 BuildFlags: excludebuild:rpmlint-mini-AGGR
 %if "%_repository" == "standard"
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/go1.21
+++ b/go1.21
--- a/go1.21-openssl
+++ b/go1.21-openssl
--- a/go1.22
+++ b/go1.22
--- a/go1.22-openssl
+++ b/go1.22-openssl
--- a/go1.23
+++ b/go1.23
--- a/go1.23-openssl
+++ b/go1.23-openssl
--- a/go1.24
+++ b/go1.24
--- a/go1.24-openssl
+++ b/go1.24-openssl
--- a/go1.25
+++ b/go1.25
--- a/go1.25-openssl
+++ b/go1.25-openssl
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/1
+++ b/1
--- a/1
+++ b/1
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/2
+++ b/2
--- a/Show More
+++ b/Show More