Commit Graph

1275 Commits

Author SHA1 Message Date
Zbigniew Jędrzejewski-Szmek
245a2587e0 Add /etc/ssh/sshd_config.d to the file list
This is a bit of a mess: sshd can only load configuration from
/etc/ssh/sshd_config.d, and that directory is declared as non-world-readable.
This is in violation of the packaging guidelines which say that packaged files
must be world-readable, and also makes very little sense, since those files
are part of the package payload.

If we create the directory with different permissions, and list it in %files,
installation will fail. If we don't list it in %files, and the user doesn't have
openssh-server installed, they will have an unowned directory. Another option
would be to depend on owner of this directory, i.e. openssh-server, but we don't
want to have that dependency. So let's copy the %files line from openssh-server
and figure out what to do if it changes in openssh-server again.
2023-12-08 18:17:39 +01:00
Zbigniew Jędrzejewski-Szmek
29eb35530b Move config files to /usr/lib/systemd
... (e.g. /etc/systemd/system.conf → /usr/lib/systemd/systemd.conf).
Both config file locations were already supported, and the files
installed in /etc/ were "empty" (i.e. they had only comments and section
headers). The move does not change the configuration, but just makes
/etc more empty by default. See
https://github.com/systemd/systemd/commit/6495361c7d for more
discussion and details.
2023-12-08 13:25:18 +01:00
Zbigniew Jędrzejewski-Szmek
40811593d0 Move systemd-bsod is to udev subpackage 2023-12-08 13:24:58 +01:00
Zbigniew Jędrzejewski-Szmek
81bbc12743 Version 255
- Just a few bugfixes since 255-rc4: seccomp filters, logging,
  documentation, systemd-repart
- Includes a hardware database update.
2023-12-06 22:19:12 +01:00
Yu Watanabe
3bab7a695c Drop deprecated split-usr option
[skip changelog]
2023-12-06 00:36:37 +09:00
Yu Watanabe
e36c897dbd Replace deprecated boolean value with enabled/disabled
[skip changelog]
2023-12-06 00:36:26 +09:00
Zbigniew Jędrzejewski-Szmek
a3dfa110ec split-files: fix check for empty package
[skip changelog]
2023-12-02 10:56:51 +01:00
Zbigniew Jędrzejewski-Szmek
f37ad39430 Upload sources
[skip changelog]
2023-12-02 10:28:45 +01:00
Zbigniew Jędrzejewski-Szmek
268ca6a059 Version 255~rc4 2023-12-02 09:56:40 +01:00
Zbigniew Jędrzejewski-Szmek
453bbcb423 split-files: also handle conditional packages
This is a bit annoying, but meh.

[skip changelog]
2023-12-02 09:50:58 +01:00
Zbigniew Jędrzejewski-Szmek
0e8fc18fbd split-files: fail early if we split-files produces an empty output
We would fail later anyway, because rpm refuses %files with an empty filelist
file. But this is much later, after %check, so let's fail already in %install.

[skip changelog]
2023-12-02 09:50:58 +01:00
Zbigniew Jędrzejewski-Szmek
0708112d48 split-files: use a dictionary instead of many little variables
Just refactoring, to make it easier to act on the list of outputs.

[skip changelog]
2023-12-02 09:50:58 +01:00
Zbigniew Jędrzejewski-Szmek
b8d3767687 split-files: move static filelist config into split-files.py
The idea was that it's nicer to keep that config in .spec where it's subject
to syntax highlighting. split-files.py was supposed to a stand-alone program.
But in practice this split is confusing, because file rules are listed in two
places and we need to modify split-files.py quite often. This will be easier if
everything is in one file.

[skip changelog]
2023-12-02 09:50:58 +01:00
Adam Williamson
f41ff634cb Backport PRs #30170 and #30266 to fix BPF denials (RHBZ #2250930) 2023-12-01 09:10:38 -08:00
Adam Williamson
8ff2a6f2d9 Backport #30197 to fix vconsole startup (RHBZ #2251394) 2023-11-29 10:42:54 -08:00
Peter Robinson
f216cc8c79 de-dupe LICENSE.LGPL2.1 in licenses
The LICENSE.LGPL2.1 file is installed into the same systemd license
directory for both the base systemd and -libs. Because the base
systemd requires the -libs sub package it's a duplicate and will
always be there, it shouldn't cause an issue but it seems in some
cases the duplication into the same directory causes issues with
ostree so remove it from the base systemd package as it will always
be there due to the hard dep on the -libs subpackage.
2023-11-23 20:19:16 +00:00
Zbigniew Jędrzejewski-Szmek
f071684b2e Version 255~rc3 2023-11-23 00:53:04 +01:00
Zbigniew Jędrzejewski-Szmek
f93a1346f0 Add systemd-networkd-defaults subpackage 2023-11-23 00:53:04 +01:00
Zbigniew Jędrzejewski-Szmek
92eed01493 Version 255~rc2
- See See https://raw.githubusercontent.com/systemd/systemd/v255-rc2/NEWS
2023-11-15 18:26:36 +01:00
Zbigniew Jędrzejewski-Szmek
82517d01b5 rpminspect: disable udev rules check
https://github.com/rpminspect/rpminspect/issues/1294#issuecomment-1808737198

[skip changelog]
2023-11-14 22:57:07 +01:00
Zbigniew Jędrzejewski-Szmek
fdfc8c33c8 Fix dracut version
[skip changelog]
2023-11-08 17:02:18 +01:00
Zbigniew Jędrzejewski-Szmek
10915ad981 Add Conflicts with older dracut which doesn't have required patches 2023-11-08 16:20:57 +01:00
Zbigniew Jędrzejewski-Szmek
1c98102f5d Also build systemd-vmspawn 2023-11-07 22:22:58 +01:00
Zbigniew Jędrzejewski-Szmek
5cae6af05f Move oomd to systemd-udev
It is really only useful on "full" machines, either VMs or bare metal,
so it should be in systemd-udev.
2023-11-07 22:22:58 +01:00
Zbigniew Jędrzejewski-Szmek
e8cc280d45 Version 255~rc1
- See https://raw.githubusercontent.com/systemd/systemd/v255-rc1/NEWS
- All the files and services related to pcrs are moved to -udev subpackage.
  This includes the new systemd-pcrlock binary.
2023-11-07 17:24:24 +01:00
Zbigniew Jędrzejewski-Szmek
a9b4725785 Pull in more patches for keyboard layout matching 2023-09-27 18:02:52 +02:00
Zbigniew Jędrzejewski-Szmek
99506ee643 Version 254.5
- Resolves rhbz#29216.
2023-09-27 17:23:35 +02:00
Zbigniew Jędrzejewski-Szmek
bb2f5f0fab Pull in patches to add PollLimit setting 2023-09-27 17:23:35 +02:00
Zbigniew Jędrzejewski-Szmek
9a522c2a5a Change versioned Conflicts to rich Requires
... (rhbz#2240828)

We currently have grubby-8.40-72.fc39 and sdubby-1.0-3.fc39.
systemd had 'Conflicts: grubby < 8.40-72', which is satisfied by grubby.
But sdubby has 'Provides: grubby' (with no version), which prevented
installation:

$ sudo rpm -i ./sdubby-1.0-3.fc39.noarch.rpm
error: Failed dependencies:
	grubby < 8.40-72 conflicts with (installed) systemd-udev-254.2-7.fc39.x86_64

The rpm docs don't actually say what the meaning of the 'if' is:
is it only satisfied by actual package names, or also by Provides. But
experiments suggest that Provides are not used. The rich dependency seems
to avoid the issue.
2023-09-27 17:22:47 +02:00
Adam Williamson
18e1ed3201 Backport PR #29215 to improve keyboard layout matching
This lays the ground for simplifying anaconda's keyboard layout
handling while improving results from where they are currently.
2023-09-19 14:57:30 -07:00
Zbigniew Jędrzejewski-Szmek
592d710bfd zuul: adjust config
Though apparently this will not work without further work in other
places, see https://pagure.io/fedora-project-config/issue/292.

[skip changelog]
2023-09-19 09:27:54 +02:00
Zbigniew Jędrzejewski-Szmek
bd2499ee33 rpminspect: add duplicate dependency to appease rpmispect
[skip changelog]
2023-09-19 09:27:54 +02:00
Zbigniew Jędrzejewski-Szmek
5dfe4c64c5 rpminspect: suppress complain about inet_aton in /usr/bin/networkctl
[skip changelog]
2023-09-19 09:27:54 +02:00
Zbigniew Jędrzejewski-Szmek
3f41433302 rpminspect: rename config file for rpminspect
According to https://fedoraproject.org/wiki/How_to_filter_libabigail_reports
and https://github.com/rpminspect/rpminspect/issues/739#issuecomment-1125258249,
the name must be just the extension.

[skip changelog]
2023-09-19 09:27:44 +02:00
Zbigniew Jędrzejewski-Szmek
360975c08b Fix creation of installkernel symlink 2023-09-18 21:52:54 +02:00
Zbigniew Jędrzejewski-Szmek
f66faf9fa1 Provide /usr/sbin/installkernel
... (rhbz#2239008).
2023-09-15 12:02:40 +02:00
Zbigniew Jędrzejewski-Szmek
32656b2b87 Move file manipulation to %build
Without this, in-place builds are broken: they don't execute %prep, so
%install fails.

[skip changelog]
2023-09-11 17:16:16 +02:00
Zbigniew Jędrzejewski-Szmek
6674346bfd Revert "Disable systemd-boot-update.service in presets"
This reverts commit 8eea43e714.

Fedora already ships 'disable systemd-boot-update.service' in
/usr/lib/systemd/system-preset/90-default.preset, so we don't need
this.

[skip changelog]
2023-09-11 17:15:44 +02:00
Zbigniew Jędrzejewski-Szmek
8365e8181d README.build-in-place: fix example command
[skip changelog]
2023-09-11 16:58:03 +02:00
Zbigniew Jędrzejewski-Szmek
14701a7bc8 Make inter-subpackage dependencies archful
Prompted by the discussion in
https://github.com/rpminspect/rpminspect/issues/1231.
2023-09-07 12:17:02 +02:00
Zbigniew Jędrzejewski-Szmek
c95e750cfb Version 254.2
- A bunch of fixes in various areas: manager, coredump, sysupdate,
  hibernation, journal.
- Should fix rhbz#2234653.
2023-09-07 09:49:11 +02:00
Zbigniew Jędrzejewski-Szmek
11c465372a Actually reload user managers and backport unit reload macros
The macro expansions would only work when compiled with a recent version of
systemd. We don't want to create a dependency loop like this, let's just expand
the string manually.

Also backport the patch adding %systemd_postun_with_reload and
%systemd_user_postun_with_reload so a FPC documentation change can be filed.
2023-09-06 13:52:04 +02:00
Daan De Meyer
c4232bef96 ukify: Drop obsolete dependency on objcopy 2023-09-02 18:12:59 +02:00
Daan De Meyer
46dc8f5060 Add missing ukify dependency on python-cryptography 2023-09-02 18:11:39 +02:00
Yu Watanabe
45fc64ccd0 spec: also explicitly enable/disable ukify support
For upstream packit builds with https://github.com/systemd/systemd/pull/24175.
2023-08-20 10:20:41 +09:00
Yu Watanabe
49575fa6ed spec: explicitly enable/disable xen support
For upstream packit builds with https://github.com/systemd/systemd/pull/24175.
2023-08-13 19:52:21 +09:00
Zbigniew Jędrzejewski-Szmek
f5162af2a6 rpminspect: adjust disablement for badfuncs
We had something, but apparently it stopped working.
Let's try with a new format:
https://github.com/rpminspect/rpminspect/issues/1229#issuecomment-1673327657

[skip changelog]
2023-08-10 16:57:19 +02:00
Zbigniew Jędrzejewski-Szmek
3c4a463e49 Upload sources
[skip changelog]
2023-08-09 17:35:10 +02:00
Zbigniew Jędrzejewski-Szmek
453f57749f Version 254.1
... (rhbz#2228089, possibly partial fix for rhbz#2229524)
2023-08-09 16:13:46 +02:00
Zbigniew Jędrzejewski-Szmek
c4c8de9e3e Do daemon-reexec of user managers after package upgrade 2023-08-09 16:06:22 +02:00