-
systemd (255.4-1ubuntu9) noble; urgency=medium
* No-change rebuild against libmount1t64.
-- Matthias Klose <email address hidden> Fri, 19 Apr 2024 19:07:34 +0200
-
systemd (255.4-1ubuntu8.1) noble; urgency=medium
* debian/systemd-resolved.postinst: ignore cp failure (LP: #2047975)
* debian/systemd.postinst: don't restart user managers if too old (LP: #2054761)
* switch-root: use MS_MOVE for /run when switchig from initrd (LP: #2064096)
* test: check for kernel.apparmor_restrict_unprivileged_userns (LP: #2065964)
-- Nick Rosbrook <email address hidden> Fri, 17 May 2024 10:47:34 +0200
-
systemd (255.4-1ubuntu8) noble; urgency=medium
* copy: ignore -EOPNOTSUPP from copy_file_range() (LP: #2058179)
File: debian/patches/lp2058179-copy-ignore-EOPNOTSUPP-from-copy_file_range.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fc81bb680f5d5c8c5995fcf6ed7f55f739dcd6a7
-- Nick Rosbrook <email address hidden> Fri, 19 Apr 2024 10:24:36 -0400
-
systemd (255.4-1ubuntu7) noble; urgency=medium
* No-change rebuild against libssl3t64
-- Steve Langasek <email address hidden> Fri, 05 Apr 2024 05:38:07 +0000
-
systemd (255.4-1ubuntu6) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <email address hidden> Sun, 31 Mar 2024 08:26:16 +0000
-
systemd (255.4-1ubuntu5) noble; urgency=medium
* No-change rebuild against libcurl4t64
-- Steve Langasek <email address hidden> Sat, 16 Mar 2024 07:04:30 +0000
-
systemd (255.4-1ubuntu4) noble; urgency=medium
* No-change rebuild against libssl3t64
-- Steve Langasek <email address hidden> Mon, 04 Mar 2024 21:29:45 +0000
-
systemd (255.4-1ubuntu3) noble; urgency=medium
* No-change rebuild against libssl3t64
-- Steve Langasek <email address hidden> Mon, 04 Mar 2024 08:28:30 +0000
-
systemd (255.4-1ubuntu2) noble; urgency=medium
* debian/patches: modify tmpfiles.d/tmp.conf default for Ubuntu (LP: #2019026)
In addition to cleaning /tmp at boot as is done in Debian, add a 30d
cleanup age for files in /tmp.
File: debian/patches/debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1b9bc51bb1b58a6f625f67f1632296940d78e82c
-- Nick Rosbrook <email address hidden> Thu, 29 Feb 2024 12:02:44 -0500
-
systemd (255.4-1ubuntu1) noble; urgency=medium
* Merge with Debian unstable. Remaining changes:
- debian/tests/upstream{,-1,-2}: split upstream tests into two parts
- debian/tests/tests-in-lxd: run some autopkgtests in LXD too
- debian/tests/storage: skip tests if scsi_debug module is not available
- debian/tests/boot-and-services:
+ skip test_syslog on s390x
+ skip coredump tests on s390x
+ skip apparmor tests on armhf
+ consume stderr in systemctl status call in test_service
+ drop test_no_failed
- debian/systemd.postinst:
+ skip daemon-reexec and try-restarts during shutdown
+ manually call systemd-tmpfiles --create in postinst
- debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
/run/systemd/resolve/stub-resolv.conf
- debian/rules:
+ Set default user path
+ Disable LLMNR by default
+ Remove unneeded efi artifacts on i386 to avoid debugedit errors
- debian/rules,debian/control,debian/tests/control:
+ Do not build with tpm libraries on i386
+ Do not build with libqrencode on i386
- debian/gbp.conf,debian/extra/wrap_cl.py:
Use a customization script to add LP commit links to changelog
- debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
Set ManagedOOMSwap=auto, disabling swap kill by default
- debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
to the kernel (we previously only set it in modprobe.d)
- debian/control:
+ Add Recommends: networkd-dispatcher systemd-resolved to systemd package
+ Provide upgrade path (Replaces:) for Jammy's systemd-repart
+ Give systemd-resolved Priority: important
+ Add Recommends: systemd-hwe-hwdb to udev package
+ Add Breaks: systemd (<< ${binary:Version}) to udev package so that
systemd is upgraded as well when upgrading udev
+ Make systemd-sysv Depends: on matching version of systemd
+ Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
- d/p/debian/Ubuntu-UseDomains-by-default.patch:
Enable UseDomains by default on Ubuntu.
- d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
- d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
Launch QEMU with -vga none in test-functions
- d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
Default to Cache=no-negative in systemd-resolved
- d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
Revert "network: if /sys is rw, then udev should be around" upstream
commit
- d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
skip disk/by-uuid for bcache devices
- d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
Don't override Ubuntu's default sysctl values
- debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
Workaround Ubuntu core's read-only etc
- d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
- d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
Disable -Wformat-overflow on gcc with -O3
- test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
/etc/init.d, but nothing guarantees that the path is created for the
test.
- test: deny-list TEST-08-INITRD.
Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
It makes sense for us to as well, because we don't run systemd in the
initrd.
- debian/systemd.install: do not install pcrlock.d on i386.
We don't build this stuff on i386.
- debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
It is preferred that we override units with dropins like this, rather
than patching the original. This has no functional change.
- debian/tests/upstream: export QEMU_MEM="1024M" for all tests
- debian/systemd.links: mask systemd-gpt-auto-generator by default
- debian/systemd.install: exclude files that are not built for i386
- debian/systemd.manpages: do not ship sd-bsod manpages on i386
- debian/tests/control: only install systemd-boot-efi for supported arches
- test: temporarily skip credentials tests in LXC.
This was already skipped in another patch, but now that we know what's
going on with it, split it out.
- test: skip test-execute in arhmf LXC containers
- test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC
* Dropped changes, fixed upstream:
- Drop lp2046498-test-skip-test_exec_networknamespacepath-if-netns-setup-f.patch.
Applied upstream: https://github.com/systemd/systemd-stable/commit/019d5f88ec
- Drop test-skip-TEST-43-PRIVATEUSER-UNPRIV-if-unprivileged-user.patch.
Applied upstream: https://github.com/systemd/systemd-stable/commit/c07a21408b
- Drop test-skip-a-systemd-run-test-if-unprivileged-userns-is-re.patch.
Applied upstream: https://github.com/systemd/systemd-stable/commit/159b80d44f
- Drop test-execute-skip-tests-that-are-broken-without-unprivile.patch.
Applied upstream: https://github.com/systemd/systemd-stable/commit/8c4d70178a
* New changes:
- debian/tests/tests-in-lxd: update workaround patch (LP: #2055200)
The autopkgtest-build-lxd script changed in a way that this patch no
longer applies. Update the patch so it does apply.
Thanks to Florent 'Skia' Jacquet
systemd (255.4-1) sid; urgency=medium
[ Luca Boccassi ]
* Drop override for deprecated package-supports-alternative-init-but-no-
init.d-script warning
* Build-depend on pkgconf pkg-config is deprecated
* Move kernel-install initrd script to slightly later prefix
afea8e1a35e15382977d459241e8c56c180c862d moved it from 85 to 50, but
this conflicts with the upstream mkosi job, which also runs at 50 and
needs to run first. Move it back up slightly to 55 to fix the mkosi
builds, eg: https://github.com/systemd/systemd-
stable/actions/runs/7863691120/job/21454589626?pr=366
* Mark python3-pefile build dependency as native. As suggested in
#1063393
* Skip python3-pefile build dependency only if both nocheck and
noinsttests are set (Closes: #1063393)
* Build with -Dtests=false if nocheck and noinsttest profiles are set.
The required build dependencies will not be installed, so the tests
won't build.
* systemd-binfmt: use restart instead of try-restart on upgrade. It's
not a long-running service so it doesn't matter, and it fixes
installing a new binfmt provider (Closes: #1061960)
* d/e/checkout-upstream: do not rebase when building on systemd-stable
repo. We do rebase only pulls in the stable repo, and it's too much
hassle to figure out the right parent branch, given the webhook is
configured per repository rather than per branch, so just skip it
* d/e/checkout-upstream: build with default-timeout-sec=180. Helps with
slow daemon-reload on some CI runs. As requested by:
https://github.com/systemd/systemd/pull/27182
* d/e/checkout-upstream: enable log-trace by default. Its abscence
appears to cause TEST-10-ISSUE-2467 to reliably fail. Enable it while
we figure it out. Also probably it is helpful to have it always turned
on for the CI, to get more info out of test runs. See:
https://github.com/systemd/systemd/issues/19154
* d/e/checkout-upstream: do not install userdbd sshd config drop-in.
Breaks booting testbed in Jammy. Can be dropped after rebasing to
Noble.
* d/t/upstream: add dependencies on openssh, gnutls-bin, opensc and
softhsm2. Required for https://github.com/systemd/systemd/pull/28658
and https://github.com/systemd/systemd/pull/30777
* d/t/upstream: fix shellcheck warning. SC2086 (info): Double quote to
prevent globbing and word splitting.
* Add dependency on libkmod2 on udev, and suggestion on systemd dlopen()
dependency since https://github.com/systemd/systemd/pull/31131 but the
system can't boot without it, so add it as a dependency on udev which
is also needed outside of containers
* Update tzdata build dependency constraint to 2024a-1
* Drop libarchive-dev build dependency. Not useful for now, we'll re-add
it after the next release
* New upstream version 255.4
* Drop patches merged upstream
[ Daan De Meyer ]
* Fix libtss2-mu dependency. This package recently changed name so let's
update the Suggests to account for that.
* Add Suggests for libtss2-tcti-device systemd wants to use this library
when tpm2 support is enabled so let's make sure we list it in
Suggests. (https://github.com/systemd/systemd/blob/db11bab38ccf1ed257f
310d29070843d4c58ea01/meson.build#L1341)
* Make sure awk only matches PROJECT|PACKAGE_VERSION
* Use DEB_BUILD_MAINT_OPTIONS instead of meson options.
* Don't put debian revision in version tag when building for upstream.
* Allow users to configure DH_MISSING.
[ Frantisek Sumsal ]
* d/t/storage: ignore credential mounts when checking /proc/mounts.
[ Daniel P. Berrangé ]
* debian/rules: don't override default telinit-path. The 'telinit-path'
meson option is to be used to point to a non-systemd telinit binary
path. When systemctl is invoked as 'telinit', it will exec this binary
when it detects the current environment is not running under systemd.
If 'telinit-path' points back to 'systemctl', that would result in an
infinite re-execve() loop. (Closes: #1063147)
systemd (255.3-2) sid; urgency=medium
* Backport patches to fix reproducibility issues
* Salsa: re-enable reprotest
systemd (255.3-1) sid; urgency=medium
* New upstream version 255.3
* Drop patches merged upstream
* Refresh patches
systemd (255.2-4) sid; urgency=medium
* autopkgtest: add btrfs-progs Depends to upstream suite.
Required by TEST-83-BTRFS and testcase_btrfs_basic from
TEST-64-UDEV-STORAGE.
* Revert "test: deny-list TEST-13-NSPAWN"
This reverts commit df8e5367aca20e0c75c9c91f826d22d8a0f7e36d.
* autopkgtest: add multipath-tools and kpartx Depends to upstream suite.
Required by testcase_multipath_basic_failover from TEST-64-UDEV-STORAGE.
* test: install correct kpartx udev rules on Debian
-- Nick Rosbrook <email address hidden> Tue, 27 Feb 2024 17:13:21 -0500
-
systemd (255.2-3ubuntu2) noble; urgency=medium
* test: skip test_exec_networknamespacepath if netns setup fails (LP: #2046498)
Files:
- debian/patches/lp2046498-test-skip-test_exec_networknamespacepath-if-netns-setup-f.patch
- debian/patches/test-skip-failing-test-execute-tests-in-LXC.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=de1fcf756e47858f4a206db97434bce4a71384d0
* test: skip TEST-43-PRIVATEUSER-UNPRIV if unprivileged userns is restricted
File: debian/patches/test-skip-TEST-43-PRIVATEUSER-UNPRIV-if-unprivileged-user.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2aba69874c83289c43d199ca360aa2fc451486a7
* Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch.
This will be re-addressed with a different patch.
File: debian/patches/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3cd814e028364fe0c641d4bacfce22aafd1b572
* Drop test-skip-failing-test-execute-tests-in-LXC.patch.
This will be re-addressed with different patches.
File: debian/patches/test-skip-failing-test-execute-tests-in-LXC.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ab853707f4cc3e7e2d5993ff38998c3c2c789f62
* test: temporarily skip credentials tests in LXC.
This was already skipped in another patch, but now that we know what's
going on with it, split it out.
File: debian/patches/test-temporarily-skip-credentials-tests-in-LXC.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c71acb411d315267fe811f024cdab97e032453f3
* test: skip test-execute in arhmf LXC containers
File: debian/patches/test-skip-test-execute-in-arhmf-LXC-containers.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1cb1e3060822bfadddead564e779942e73e02f62
* test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC (LP: #2046495)
File: debian/patches/test-skip-exec-privatenetwork-yes-privatemounts-yes.servi.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3ab76fd2db4291ee0531a07085c72cee06cb0d12
* test: skip a systemd-run test if unprivileged userns is restricted
File: debian/patches/test-skip-a-systemd-run-test-if-unprivileged-userns-is-re.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c85f2b4e32ee8fd1c0dc58d23e7fabdb7590d3cc
* test-execute: skip tests that are broken without unprivileged userns
File: debian/patches/test-execute-skip-tests-that-are-broken-without-unprivile.patch
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7a6573c4f5133a7fec11fb059dd215f7c8c2204e
-- Nick Rosbrook <email address hidden> Wed, 24 Jan 2024 14:53:46 -0500
-
systemd (255.2-3ubuntu1) noble; urgency=medium
* Merge with Debian unstable. Remaining changes:
- debian/tests/upstream{,-1,-2}: split upstream tests into two parts
- debian/tests/tests-in-lxd: run some autopkgtests in LXD too
- debian/tests/storage: skip tests if scsi_debug module is not available
- debian/tests/boot-and-services:
+ skip test_syslog on s390x
+ skip coredump tests on s390x
+ skip apparmor tests on armhf
+ consume stderr in systemctl status call in test_service
+ drop test_no_failed
- debian/systemd.postinst:
+ skip daemon-reexec and try-restarts during shutdown
+ manually call systemd-tmpfiles --create in postinst
- debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
/run/systemd/resolve/stub-resolv.conf
- debian/rules:
+ Set default user path
+ Disable LLMNR by default
+ Remove unneeded efi artifacts on i386 to avoid debugedit errors
- debian/rules,debian/control,debian/tests/control:
+ Do not build with tpm libraries on i386
+ Do not build with libqrencode on i386
- debian/gbp.conf,debian/extra/wrap_cl.py:
Use a customization script to add LP commit links to changelog
- debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
Set ManagedOOMSwap=auto, disabling swap kill by default
- debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
to the kernel (we previously only set it in modprobe.d)
- debian/control:
+ Add Recommends: networkd-dispatcher systemd-resolved to systemd package
+ Provide upgrade path (Replaces:) for Jammy's systemd-repart
+ Give systemd-resolved Priority: important
+ Add Recommends: systemd-hwe-hwdb to udev package
+ Add Breaks: systemd (<< ${binary:Version}) to udev package so that
systemd is upgraded as well when upgrading udev
+ Make systemd-sysv Depends: on matching version of systemd
+ Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
- d/p/debian/Ubuntu-UseDomains-by-default.patch:
Enable UseDomains by default on Ubuntu.
- d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
- d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
Launch QEMU with -vga none in test-functions
- d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
Default to Cache=no-negative in systemd-resolved
- d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
Revert "network: if /sys is rw, then udev should be around" upstream
commit
- d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
skip disk/by-uuid for bcache devices
- d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
Don't override Ubuntu's default sysctl values
- debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
Workaround Ubuntu core's read-only etc
- d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
- d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
Disable -Wformat-overflow on gcc with -O3
- test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
/etc/init.d, but nothing guarantees that the path is created for the
test.
- test: deny-list TEST-08-INITRD.
Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
It makes sense for us to as well, because we don't run systemd in the
initrd.
- debian/systemd.install: do not install pcrlock.d on i386.
We don't build this stuff on i386.
- debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
It is preferred that we override units with dropins like this, rather
than patching the original. This has no functional change.
- test: skip failing test-execute tests in LXC.
These are hopefully temporary workarounds so that we can figure out the
root cause in either upstream systemd or LXC.
* Dropped changes, fixed upstream:
- Drop test-install-all-necessary-units-generators-for-LVM-on-De.patch.
Applied upstream: https://github.com/systemd/systemd-stable/commit/b1dba6bcaa
- Drop firstboot-remove-etc-localtime-on-reset.patch.
Applied upstream: https://github.com/systemd/systemd-stable/commit/1d1b1fa25b
* Dropped changes, replaced with new approach:
- d/p/test-increase-QEMU_MEM-for-some-tests.patch:
Increase QEMU_MEM for some tests to improve success rate
* Dropped changes, included in Debian:
- debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE
- debian/tests/upstream: drop blacklist support.
- test-skip-tests-for-unsupported-localectl-features.patch:
skip tests for unsupported localectl features
* New changes:
- debian/tests/upstream: export QEMU_MEM="1024M" for all tests
- Revert "Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch"
- debian/systemd.links: mask systemd-gpt-auto-generator by default (LP: #2046459)
Re-ship the generator so that it can be used if needed, but mask the
generator so that it remains disabled by default.
- debian/systemd.install: exclude files that are not built for i386
- debian/systemd.manpages: do not ship sd-bsod manpages on i386
- debian/tests/control: only install systemd-boot-efi for supported arches
systemd (255.2-3) sid; urgency=medium
* Cherry-pick fixes for upstream integration tests.
Fixes TEST-07-PID1, TEST-08-INITRD (skip), TEST-26-SYSTEMCTL and
TEST-75-RESOLVED.
* Add explicit Build-Depends on debhelper (>= 13.11.6)
This ensures we have a recent enough version of dh_installsystemd that
supports service files in /usr/lib/.
* test: deny-list TEST-13-NSPAWN.
The default ram size of 1024M for qemu virt is not sufficient
to make the test pass reliably on Debian sid/trixie.
Disable the test for now until this has been addressed in debci:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059840
systemd (255.2-2) unstable; urgency=medium
* udev: mips does not install dmi_memory_id and its rules
systemd (255.2-1) unstable; urgency=medium
* New upstream version 255.2
* Drop resolved-actually-check-authenticated-flag-of-SOA-transac.patch,
merged upstream
systemd (255.1-3) unstable; urgency=medium
* Upload to unstable
* Fix installation of dmi_memory_id on i386 and x32
* Explicitly disable bootloader for stage1 build.
This ensures that the stage1 build is not broken in a tainted build
environment.
* Mark missing man pages from stage1 build
systemd (255.1-2) experimental; urgency=medium
[ Michael Biebl ]
* Upgrade the Breaks to Conflicts for the systemd-ukify package split.
This avoids potential loss of the /usr/lib/systemd/ukify compat symlink
for upgrades from bookworm-backports.
* Update package description of libnss-myhostname to use the correct IPv4
address (Closes: #1057953)
* resolved: actually check authenticated flag of SOA transaction.
Patch cherry-picked from upstream Git.
(CVE-2023-7008, Closes: #1059278)
* Explicitly disable ukify for stage1 builds
* Enable dh-exec for systemd.manpages and udev.install.
This enables files to be installed specific to certain architectures or
build profiles. Unfortunately for systemd.manpages this requires to add a
debian/tmp/ prefix to all files.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053834#46
* Restrict pcr/tpm2 related files to UEFI architectures.
Mirrors the python3-pyelftools [amd64 i386 arm64 armhf riscv64]
Build-Depends.
* Install dmi_memory_id and its udev rules file only on dmi architectures.
* Fix stage1 profile build
[ Helmut Grohne ]
* Restore diverted symlinks in systemd-sysv.postinst that may have been lost
due to /usr-merge (Closes: #1057220)
systemd (255.1-1) experimental; urgency=medium
[ Luca Boccassi ]
* Drop pkgconfig-keep-unmerged-paths-for-udevdir.patch, no longer needed
* New upstream version 255.1
* Refresh patches
[ Michael Biebl ]
* autopkgtest: install systemd-boot-efi for upstream suite.
TEST-70-TPM2 (specifically test/units/testsuite-70.pcrlock.sh) requires
the EFI stub files from /usr/lib/systemd/boot/efi/.
* test: skip tests for unsupported localectl features.
Update the upstream test suite to skip tests for unsupported localectl
features in Debian. Fixes TEST-73-LOCALE.
Thanks to Nick Rosbrook
* Update symbol versions for the final 255 release
* Install systemd and udev files explicitly without duplicates.
Stop making systemd and udev "catch-all" packages and removing duplicate
files in debian/rules by compiling a list of files that are installed by
other systemd binary packages. This approach no longer works reliably
if we have arch "all" binary packages and we do a partial type "any" build.
Instead, list all files that are installed in systemd and udev
explicitly in .install and .manpages.
* Mark usr/lib/sysctl.d/50-pid-max.conf as arch specific.
It's only installed by Meson if cc.sizeof('long') > 4.
See https://wiki.debian.org/ArchitectureSpecificsMemo
* Fix arch "all" builds.
Files handled by debian/rules and dh-exec are not understood by
dh_missing. So mark those as not-installed.
See man dh_missing and
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831786
* Install standalone binaries using dh-exec
* Print empty directories
dh_missing will not fail on uninstalled (empty) directories.
So show them during build as it makes it easier to spot if all of them
are handled.
* Split ukify into a separate package named systemd-ukify.
The main motivation for splitting the tool (and its kernel-install
integration) into a separate package is the dependency on python3 and
python3-pefile, which are not suitable dependencies for the main systemd
package. (Closes: #1051981)
* Make the Conflicts against bfh-container and progress-linux-container
versioned
[ Nick Rosbrook ]
* debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE.
This ensures that testcase_mdadm_lvm in TEST-64-UDEV-STORAGE will run.
* debian/tests/upstream: drop blacklist support.
Upstream has been using deny-list-ubuntu-ci, rather than
blacklist-ubuntu-ci, for a while now. In Ubuntu, we use the
deny-list-upstream-ci convention too. Hence, it seems we can drop
support for the blacklist version.
-- Nick Rosbrook <email address hidden> Wed, 03 Jan 2024 17:34:00 -0500
-
systemd (255-1ubuntu1) noble; urgency=medium
* Merge with Debian unstable. Remaining changes:
- debian/tests/upstream{,-1,-2}: split upstream tests into two parts
- debian/tests/tests-in-lxd: run some autopkgtests in LXD too
- debian/tests/storage: skip tests if scsi_debug module is not available
- debian/tests/boot-and-services:
+ skip test_syslog on s390x
+ skip coredump tests on s390x
+ skip apparmor tests on armhf
+ consume stderr in systemctl status call in test_service
+ drop test_no_failed
- debian/systemd.postinst:
+ skip daemon-reexec and try-restarts during shutdown
+ manually call systemd-tmpfiles --create in postinst
- debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
/run/systemd/resolve/stub-resolv.conf
- debian/rules:
+ Set default user path
+ Disable LLMNR by default
+ Remove unneeded efi artifacts on i386 to avoid debugedit errors
+ Do not ship systemd-gpt-auto-generator
- debian/rules,debian/control,debian/tests/control:
+ Do not build with tpm libraries on i386
+ Do not build with libqrencode on i386
- debian/gbp.conf,debian/extra/wrap_cl.py:
Use a customization script to add LP commit links to changelog
- debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
Set ManagedOOMSwap=auto, disabling swap kill by default
- debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
to the kernel (we previously only set it in modprobe.d)
- debian/control:
+ Add Recommends: networkd-dispatcher systemd-resolved to systemd package
+ Provide upgrade path (Replaces:) for Jammy's systemd-repart
+ Give systemd-resolved Priority: important
+ Add Recommends: systemd-hwe-hwdb to udev package
+ Add Breaks: systemd (<< ${binary:Version}) to udev package so that
systemd is upgraded as well when upgrading udev
+ Make systemd-sysv Depends: on matching version of systemd
+ Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
- d/p/debian/Ubuntu-UseDomains-by-default.patch:
Enable UseDomains by default on Ubuntu.
- d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
- d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
Launch QEMU with -vga none in test-functions
- d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
Default to Cache=no-negative in systemd-resolved
- d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
Revert "network: if /sys is rw, then udev should be around" upstream
commit
- d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
skip disk/by-uuid for bcache devices
- d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
Don't override Ubuntu's default sysctl values
- d/p/test-increase-QEMU_MEM-for-some-tests.patch:
Increase QEMU_MEM for some tests to improve success rate
- debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
Workaround Ubuntu core's read-only etc
- test-skip-tests-for-unsupported-localectl-features.patch:
skip tests for unsupported localectl features
- d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
- d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
Disable -Wformat-overflow on gcc with -O3
* Dropped changes, fixed upstream:
- Drop lp2009743/test-network-add-one-more-testcase-for-DHCPv4-classless-r.patch.
Applied upstream: https://github.com/systemd/systemd/commit/86f6760038
- Drop lp2009743/network-dhcp4-do-not-ignore-the-gateway-even-if-the-desti.patch.
Applied upstream: https://github.com/systemd/systemd/commit/77451f654a
- Drop lp2013543-core-reorder-systemd-arguments-on-reexec.patch.
Applied upstream: https://github.com/systemd/systemd/commit/06afda6b38
- Drop lp2033325-Revert-core-service-when-resetting-PID-also-reset-known-f.patch.
Applied upstream: https://github.com/systemd/systemd/commit/996b00ede8
- Drop test-denylist-TEST-29-PORTABLE-again.patch.
According to upstream, this has been resolved by
https://github.com/systemd/systemd/pull/28123, and a PPA autopkgtest
confirms this.
* Dropped changes, no longer needed:
- Drop deny-list-TEST-55-OOMD-on-ppc64el.patch.
We already disable qemu tests on ppc64el, so having this too is
unnecessary.
- Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch.
These tests no longer fail when run in LXD, so drop the patch.
- Drop debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch (LP: #1959047)
* New changes:
- test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
/etc/init.d, but nothing guarantees that the path is created for the
test.
- firstboot: remove /etc/localtime on --reset
- debian/tests/upstream: drop blacklist support.
- test: deny-list TEST-08-INITRD.
Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
It makes sense for us to as well, because we don't run systemd in the
initrd.
- debian/tests/control: add Depends: systemd-boot-efi for upstream-2.
TEST-70-TPM2 wants the systemd-boot EFI binary for testing pcrlock, so
just install the binaries.
- debian/systemd.install: do not install pcrlock.d on i386.
We don't build this stuff on i386.
- debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE
- test: install all necessary units & generators for LVM on Debian
- debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
It is preferred that we override units with dropins like this, rather
than patching the original. This has no functional change.
- test: skip failing test-execute tests in LXC.
These are hopefully temporary workarounds so that we can figure out the
root cause in either upstream systemd or LXC.
systemd (255-1) unstable; urgency=medium
* New upstream version 255. For a full list of changes, see:
https://github.com/systemd/systemd/releases/tag/v255
* Drop seccomp patches, merged upstream
systemd (255~rc4-2) unstable; urgency=medium
* Backport patches to fix seccomp issues on armhf/armel/ppc64el
systemd (255~rc4-1) unstable; urgency=medium
* New upstream version 255~rc4
systemd (255~rc3-3) unstable; urgency=medium
[ Oxan van Leeuwen ]
* Move kernel-install initrd script to earlier prefix. From systemd v255
onwards, the 60-ukify.install script automatically uses initrd files
that are present in the staging area. Move the initrd script to run
earlier, so that ukify can use the initrd. The only third-party
kernel-install script present in the Debian archive is
40-dkms.install, so it is not impacted by this change. Both dracut and
mkinitcpio upstream also ship their script with priority 50.
[ Luca Boccassi ]
* systemd.pc: point unit install directory to /usr/lib/systemd/system/
systemd (255~rc3-2) unstable; urgency=medium
* systemd: ignore '_systemctl kill' failures in postinst
systemd (255~rc3-1) unstable; urgency=medium
* d/systemd.install: mark pcrlock.d as !stage1. pcrlock configs are only
installed when libtss and libssl are available which is not the case
for stage1 builds, so mark accordingly
* New upstream version 255~rc3
* Drop patches merged upstream
* Refresh patches
* systemd: reexec user manager sessions on upgrade. So far we only
reexec'ed PID1, and ignored user managers, which means bug or security
fixes were not applied for running sessions till the next reboot. Fix
this using 'systemctl kill', which is asynchronous but works even if
the D-Bus user session is not active.
* autopkgtest: install dhcpcd-base for boot-and-services
systemd (255~rc2-3) unstable; urgency=medium
[ Michael Biebl ]
* Use canonical paths for scripts in debian/extra. Update scripts for
udev-udeb, initramfs-tools integration scripts and dhclient hook
script to use the new canonical paths in /usr.
[ Luca Boccassi ]
* Bump conflict with molly-guard to 0.8.2. The previous workarounds are
not enough, so a new upload will be needed. (Closes: #1056292)
* Backport patches to fix FTBFS on hppa and x32
systemd (255~rc2-2) unstable; urgency=medium
* Add versioned Breaks against dracut.
The introduction of systemd-executor in v255 breaks the initrd that is
generated by dracut. Without systemd-executor, a systemd based initrd
will fail to boot. The dracut package needs to be updated to include
this new binary. (Closes: #1056108)
systemd (255~rc2-1) unstable; urgency=medium
[ Matthias Geiger ]
* Bump version number for udev.postinst and udev.maintscript
* Fix udev.postinst to preserve the enablement of the init script. When
transferring ownership of the udev init script to sysvinit, the
service was disabled as it didn't check for enablement before calling
update-rc.d. Thanks to Mark Hindley for the original fix. (Closes:
#1053301)
[ Luca Boccassi ]
* New upstream version 255~rc2
* Drop fix-build-without-SBAT_DISTRO.patch, merged upstream
* Refresh patches
* Upload to unstable
systemd (255~rc1-4) experimental; urgency=medium
* Add version to Conflict with molly-guard
* Move systemd-hwdb-update.service to udev package. Commit a12cf5d187cb
in 249-1 removed systemd-hwdb-update.service from udev, and 254.4-1
re-added it in systemd, so move it back to udev. (Closes: #1055863)
systemd (255~rc1-3) experimental; urgency=medium
* Do not ship repart.standalone and shutdown.standalone
* /usr/lib/sysvinit/telinit was dropped long ago, use /usr/sbin/telinit
* Add Suggests: libip4tc2 as it is now dlopen'ed
* Drop rc/rcS masking, no longer necessary
* Add Conflicts to avoid issues due to DEP17P3. libpam-elogind-compat,
opensysusers, bfh-container, molly-guard, and progress-linux-container
divert files from our packages, so DEP17P3 is triggered. Add
unversioned conflicts until those diversions are updated according to
DEP17M18, and then we can make the conflicts versioned. (Closes:
#1055485)
systemd (255~rc1-2) experimental; urgency=medium
* Build-depend on python3-pefile on all architectures ukify
* meson: use enabled/disabled instead of true/false for 'feature'
options
* meson: use canonical paths for configured tools too
systemd (255~rc1-1) experimental; urgency=medium
[ Michael Biebl ]
* Update symbol versions for the final 254 release
* Remove mangling of man pages post build trying to fix up paths. With
merged-/usr being mandatory, this is no longer necessary as the paths
will now always point to the correct location.
* Use a drop-in to avoid startup failures of systemd-logind when dbus is
missing. Instead of patching the systemd-logind.service file, use a
drop-in. This way the Debian specific change becomes more visible and
easier to override.
[ Luca Boccassi ]
* New upstream version 255~rc1
* Drop test-skip-test-path-on-Salsa-CI.patch, merged upstream
* Drop Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-back-to-.patch,
no longer necessary
* Refresh patches
* Temporarily keep systemd.pc and udev.pc pointing to legacy unmerged paths.
This will be dropped in the short term, but there are still a lot of
FTBFS when changing, so keep it for now
* systemd/udev: assert that the system is merged-usr. Support for
unmerged system was dropped project-wide. Things will break subtly if
ran on such unsupported setups, so add an explicit assert at preinst.
* Drop deprecated split-usr and install files from /usr
* Install new pam_systemd_loadkey module. If configured, and systemd-
cryptsetup and logind are used, the crypsetup passphrase is passed to
the PAM stack for later authentication steps such as the GNOME
keyring.
* Install the default pcrlock config files
* Update libsystemd0.symbols
* autopkgtest: add dependencies on python3-pefile and nvme-cli for
upstream suite
* Backport patch to fix arm64 cross-build
* Update Lintian overrides
systemd (254.5-1) unstable; urgency=medium
* New upstream version 254.5
* Refresh patches for 254.5
systemd (254.4-1) unstable; urgency=medium
[ Michael Biebl ]
* Fix installation of tzdata-legacy. Apply a version constraint to the
tzdata alternative. Specifically (<< 2023c-8), which is the version
tzdata was split. Otherwise tzdata-legacy is not considered, as tzdata
is installed by default. (Closes: #1051760)
* Drop obsolete Breaks/Replaces and migration code for versions older
than oldstable
* Drop -f from update-rc.d udev remove
[ Luca Boccassi ]
* upstream-ci: run unit tests from installed location. (Closes: #1051756)
* New upstream version 254.4. Fixes minor security issue in arm64
and riscv64 systemd-boot (EFI) with device tree blobs loading:
https://github.com/systemd/systemd/security/advisories/GHSA-6m6p-rjcq-334c
* Refresh patches
* Install factory-reset related units
[ Gioele Barabucci ]
* debian/udev.debian-udev.sysusers: Add Debian-specific sysusers for
udev
* d/udev.postinst: Do not use addgroup to add udev-related groups
* d/control: Remove adduser, it is no longer needed now that all
udev-related groups are generated via `sd-sysusers`.
systemd (254.3-1) unstable; urgency=medium
[ Daniel Andersson ]
* Add systemd-sysupdate.
[ Luca Boccassi ]
* New upstream version 254.2
* Refresh patches for 254.2
* New upstream version 254.3
[ Michael Biebl ]
* Remove obsolete SysV init script. Keep the udev alias for one more
release cycle.
* Use dh_installsystemd to handle systemd-udevd.service. This allows us
to drop a lot of custom maintscript code. Fix the formatting of the
udev maintscript code while at it.
* Add Conflicts against initscripts and orphan-sysvinit-scripts. Those
packages have undesirable side effects if systemd is the active init
system so ensure they can't be installed.
systemd (254.1-3) unstable; urgency=medium
[ Nick Rosbrook ]
* debian: ship libsystemd.a in libsystemd-dev.
Thanks to Serge Hallyn
* autopkgtest: add build test for static libsystemd
* debian/rules: build with -ffat-lto-objects.
Building with -flto=auto, but without -ffat-lto-objects, causes static
archives to end up without any code sections. This is needed to ship a
usable libsystemd.a in libsystemd-dev.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977596.
[ Luca Boccassi ]
* Backport patch to fix test-path failure on Salsa CI
[ Michael Biebl ]
* Ask before attaching the udev db information to the bug report
(Closes: #1041652)
* Install D-Bus interface files in systemd-dev.
Now that we have a dedicated -dev package, use that to install
/usr/share/dbus-1/interfaces.
* Clean up a couple more __pycache__ directories
* Remove workarounds for dh_installman.
No longer needed as stable ships a fixed debhelper.
* Remove all empty directories from (/usr)/lib.
This mitigates the accidental empty directory removal by dpkg on
merged-/usr systems. (Closes: #1036920)
* Remove no longer needed maintainer scripts migration code for versions
older then oldstable
* Revert "Add workaround for Meson regression to fix FTBFS on mips64el"
This reverts commit 97ebdcea6d0ce52973dd5a9cfeede1573a628bd0.
No longer needed as a fixed meson package is available now.
systemd (254.1-2) unstable; urgency=medium
* Build-depend on tzdata-legacy | tzdata. Some timezones were split out,
but some unit tests need them, so pull in the new tzdata-legacy
package if it exists.
systemd (254.1-1) unstable; urgency=medium
[ Luca Boccassi ]
* systemd-userdbd: depend on libnss-systemd. This library provides nss
integration for userdbd/homed and is needed for homed logins
* New upstream version 254.1
* Refresh patches for v254.1
* systemd: do not ship empty .wants/ directories. These will conflict
with finalizing usrmerge as they are in /lib, so remove them for now.
systemctl enable creates them anyway when needed.
[ Helmut Grohne ]
* duplicate udev trigger interest for /usr-merge. As packages move their
files from / to /usr, dpkg will cease activating udev's trigger
interest for hwdb.d files. In DEP17, this is documented as P2. Since
there are only two packages in Debian affected by this issue, we opt
for an individual mitigation and explicitly duplicate the trigger
interest to both locations (M12). This is safe regardless of the other
chosen mitigations as trigger activations are accumulated.
systemd (254-1) unstable; urgency=medium
* New upstream version 254
* Drop patches merged upstream
* d/watch: switch back to stable repository
* Refresh patches
systemd (254~rc3-3) unstable; urgency=low
* Backport patch to fix FTBFS on armhf
* Add workaround for Meson regression to fix FTBFS on mips64el
systemd (254~rc3-2) unstable; urgency=medium
* ukify: enable only on UEFI architectures.
systemd (254~rc3-1) unstable; urgency=low
* Drop Suggests on transitional policykit-1 package
* Drop autopkgtest dependency on transitional policykit-1 package
* Ship ukify in systemd package (Closes: #1041399)
* New upstream version 254~rc3 (Closes: #1041648, #1041540)
* Drop patches merged upstream
* Refresh patches
systemd (254~rc2-3) unstable; urgency=low
* Upload to unstable
systemd (254~rc2-2) experimental; urgency=medium
* Backport two more mips64 fixes from upstream
systemd (254~rc2-1) experimental; urgency=medium
[ Luca Boccassi ]
* Bump dependency on Meson to 0.60
* upstream-ci: install libdw and libelf for boot-and-services too.
* upstream-ci: add libssl-dev to autopkgtest upstream suite.
* upstream-ci: add nftables.
* upstream-ci: add 'stress' to the upstream testsuite dependency list.
* tests/upstream: install curl.
* tests/upstream: bump timeout by 10 minutes.
* New upstream version 254~rc2
* Drop patches merged upstream
* Refresh patches for v254-rc2
[ Yu Watanabe ]
* autopkgtest: create directory to make accounts-daemon.service not
fail. The service requires /usr/share/accountsservice/interfaces, but
the directory is not packaged (at least in 22.08.8-6). This adds a
workaround for the failure.
systemd (254~rc1-4) experimental; urgency=medium
* Backport patches to fix FTBFS on mipsel, ia64, x32
* d/rules: explicitly disable EFI on x32. On x32 the cpu architecture is
just x86_64 so EFI will be enabled, and it will fail to build as
userland doesn't support building the EFI ABI. Disable it explicitly,
and leave it on 'auto' elsewhere.
systemd (254~rc1-3) experimental; urgency=medium
* Restrict pyelftools to UEFI-enabled architectures and drop explicit
meson settings.
systemd (254~rc1-2) experimental; urgency=medium
* Backport patch to fix fuzz test without cgroup access. Fix build on
buildds https://github.com/systemd/systemd/pull/28303
systemd (254~rc1-1) experimental; urgency=medium
[ Luca Boccassi ]
* d/watch: watch main repository
* New upstream version 254~rc1
* Refresh patches for v254-rc1
* Drop build dependency on gnu-efi and add python3-pyelftools. Move to
!stage1 given it's external python modules
* Install new libsystemd.3 manpage
* Install new mount.ddi alias for sd-dissect
* Update symbols file for 254
* Update Lintian overrides for systemd-tests
* autopkgtest: find test-udev in new location.
[ Zbigniew Jędrzejewski-Szmek ]
* autopkgtest: drop 'udev' test
https://github.com/systemd/systemd/pull/27534 makes it into a normal
unit test, so it will be invoked as part of 'upstream'.
-- Nick Rosbrook <email address hidden> Thu, 14 Dec 2023 18:11:39 -0500
-
systemd (253.5-1ubuntu7) noble; urgency=medium
* Revert "debian/rules: set MulticastDNS=resolve by default" (LP: #2038894)
File: debian/rules
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3d753238699f54e8c2892d8107136d49f09e44b6
* debian/gbp.conf: update for noble
File: debian/gbp.conf
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a65decb3a73592af8b952b159cfb453e9c0babd5
-- Nick Rosbrook <email address hidden> Thu, 26 Oct 2023 09:51:33 -0400
-
systemd (253.5-1ubuntu6) mantic; urgency=medium
* debian/tests: Depends: tzdata-legacy for upstream-{1,2} (LP: #2035778)
File: debian/tests/control
https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=28d9f59c6abb6e460dd34baa4237ef04aa06aced
-- Nick Rosbrook <email address hidden> Tue, 19 Sep 2023 11:54:35 -0400
