diff -pruN 259-1/debian/changelog 259-1ubuntu2/debian/changelog --- 259-1/debian/changelog 2025-12-17 23:08:45.000000000 +0000 +++ 259-1ubuntu2/debian/changelog 2026-01-06 15:28:46.000000000 +0000 @@ -1,3 +1,58 @@ +systemd (259-1ubuntu2) resolute; urgency=medium + + * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64 only + * ukify: omit .osrel section when --os-release= is empty (LP: #2133402) + * d/tests: drop tests-in-lxd + * test: skip TEST-13-NSPAWN.machined (LP: #2136413) + + -- Nick Rosbrook Tue, 06 Jan 2026 10:28:46 -0500 + +systemd (259-1ubuntu1) resolute; urgency=medium + + * Merge with Debian unstable (LP: #2130132). Remaining changes: + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + - debian/control: + + Add Recommends: systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - d/rules: disable bpf support on riscv64 for now (LP #2099864) + - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/libnss-systemd.*: + + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403) + + debian/libnss-systemd.preinst: force nsswitch.conf update + Drop systemd instances in nsswitch.conf, and force postinst to + re-generate the file (LP #2121017) + + debian/linbnss-systemd.nss: Install systemd service after files. + As suggested by upstream the systemd NSS service should come just after + files + - debian/tests: + + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614) + + d/t/upstream: use GNU cp in test setup (LP #2122363) + - debian/patches: + + switch-root: use MS_MOVE for /run when switchig from initrd + + test: skip TEST-50-DISSECT.dissect (LP #2116460) + * New changes: + - test: use journalctl -n option instead of piping to head + (LP: #2136497) + - test: cope with uutils coreutils flag parsing for date command + (LP: #2136408) + - test: workaround uutils dd broken pipe + (LP: #2136752) + + -- Nick Rosbrook Thu, 18 Dec 2025 11:13:46 -0500 + systemd (259-1) unstable; urgency=medium [ Luca Boccassi ] @@ -13,6 +68,55 @@ systemd (259-1) unstable; urgency=medium -- Luca Boccassi Wed, 17 Dec 2025 23:08:45 +0000 +systemd (259~rc3-1ubuntu1) resolute; urgency=medium + + * Merge with Debian unstable (LP: #2130132). Remaining changes: + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + - debian/control: + + Add Recommends: systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - d/rules: disable bpf support on riscv64 for now (LP #2099864) + - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/libnss-systemd.*: + + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403) + + debian/libnss-systemd.preinst: force nsswitch.conf update + Drop systemd instances in nsswitch.conf, and force postinst to + re-generate the file (LP #2121017) + + debian/linbnss-systemd.nss: Install systemd service after files. + As suggested by upstream the systemd NSS service should come just after + files + - debian/tests: + + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614) + + d/t/upstream: use GNU cp in test setup (LP #2122363) + - debian/patches: + + switch-root: use MS_MOVE for /run when switchig from initrd + + test: skip TEST-50-DISSECT.dissect (LP #2116460) + * Dropped changes, no longer needed: + - d/rules: set SYSTEMD_IN_CHROOT=1 for build tests + [ fixed by https://github.com/systemd/systemd/commit/7d23e27e4c ] + - test-network: add handling for Ubuntu FAN patches (LP #2104943) + - test: ignore coredumps for gnusleep in addition to sleep (LP #2116459) + - test: follow /usr/bin/sleep symlink when checking coredumps (LP #2116465) + - debian/control: Add Recommends: networkd-dispatcher to systemd package + (LP: #2132159) + * New upstream release: + - Fixes LP: #2133462 + + -- Nick Rosbrook Mon, 15 Dec 2025 13:53:39 -0500 + systemd (259~rc3-1) unstable; urgency=medium [ Luca Boccassi ] @@ -44,6 +148,64 @@ systemd (259~rc2-1) unstable; urgency=me -- Luca Boccassi Wed, 26 Nov 2025 12:41:32 +0000 +systemd (259~rc1-1ubuntu1) resolute; urgency=medium + + * Merge with Debian unstable (LP: #2130132). Remaining changes: + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - d/rules: disable bpf support on riscv64 for now (LP #2099864) + - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/libnss-systemd.*: + + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403) + + debian/libnss-systemd.preinst: force nsswitch.conf update + Drop systemd instances in nsswitch.conf, and force postinst to + re-generate the file (LP #2121017) + + debian/linbnss-systemd.nss: Install systemd service after files. + As suggested by upstream the systemd NSS service should come just after + files + - debian/tests: + + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614) + + d/t/upstream: use GNU cp in test setup (LP #2122363) + - debian/patches: + + switch-root: use MS_MOVE for /run when switchig from initrd + + test-network: add handling for Ubuntu FAN patches (LP #2104943) + + test: ignore coredumps for gnusleep in addition to sleep (LP #2116459) + + test: follow /usr/bin/sleep symlink when checking coredumps (LP #2116465) + + test: skip TEST-50-DISSECT.dissect (LP #2116460) + * Dropped changes, included in Debian: + - d/rules: enable 10-systemd-logind-root-ignore-inhibitors.rules.example + polkit rule by default (LP #2092438) + [ was: "d/extra/polkit-1: let root ignore inhibitors on reboot etc" ] + - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are + specific to s390x ccw devices are only prevented from being copied if + zdev_early=0 is set, but copy rules in case of zdev_early=1 or if + zdev_early is not specified at all. (LP #2102236) + - debian/tests: + + d/t/boot-and-services: tweak test_rsyslog regexes + + debian/tests/boot-and-services: skip apparmor tests on armhf + * Dropped changes, included upstream: + - basic: validate timezones in get_timezones() (LP #2125405) + * New changes: + - d/systemd{,-cryptsetup}.install: more i386 exclusion + - d/rules: set SYSTEMD_IN_CHROOT=1 for build tests + + -- Nick Rosbrook Tue, 18 Nov 2025 17:29:48 -0500 + systemd (259~rc1-1) unstable; urgency=medium [ Nick Rosbrook ] @@ -78,6 +240,73 @@ systemd (259~rc1-1) unstable; urgency=me -- Luca Boccassi Mon, 17 Nov 2025 18:55:33 +0000 +systemd (258.1-2ubuntu1) resolute; urgency=medium + + * Merge with Debian unstable (LP: #2130132). Remaining changes: + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - d/rules: disable bpf support on riscv64 for now (LP #2099864) + - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028) + - d/rules: enable 10-systemd-logind-root-ignore-inhibitors.rules.example + polkit rule by default (LP #2092438) + [ was: "d/extra/polkit-1: let root ignore inhibitors on reboot etc" ] + - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are + specific to s390x ccw devices are only prevented from being copied if + zdev_early=0 is set, but copy rules in case of zdev_early=1 or if + zdev_early is not specified at all. (LP #2102236) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/libnss-systemd.*: + + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403) + + debian/libnss-systemd.preinst: force nsswitch.conf update + Drop systemd instances in nsswitch.conf, and force postinst to + re-generate the file (LP #2121017) + + debian/linbnss-systemd.nss: Install systemd service after files. + As suggested by upstream the systemd NSS service should come just after + files + - debian/tests: + + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614) + + d/t/upstream: use GNU cp in test setup (LP #2122363) + + d/t/boot-and-services: tweak test_rsyslog regexes + + debian/tests/boot-and-services: skip apparmor tests on armhf + - debian/patches: + + switch-root: use MS_MOVE for /run when switchig from initrd + + test-network: add handling for Ubuntu FAN patches (LP #2104943) + + basic: validate timezones in get_timezones() (LP #2125405) + + test: ignore coredumps for gnusleep in addition to sleep (LP #2116459) + + test: follow /usr/bin/sleep symlink when checking coredumps (LP #2116465) + + test: skip TEST-50-DISSECT.dissect (LP #2116460) + * Dropped changes, no longer needed: + - d/control: Conflicts: and Replaces: systemd-resolved-dnssec + - meson.build: build with -Wl,-z,gcs-report=none on arm64 (LP #2119100) + * Dropped changes, included in Debian: + - Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - d/rules: drop bpf build workarounds for Ubuntu + * Dropped changes, included upstream: + - wait-online/resolve-rename-varlink_subscription-varlink_query_results.patch + - wait-online/resolved-add-link_get_default_route-helper.patch + - wait-online/resolved-add-a-helper-to-check-if-DNS-server-is-accessibl.patch + - wait-online/test-add-test-for-resolved-SubscribeDNSConfiguration-API.patch + - wait-online/networkd-test-add-basic-tests-for-systemd-networkd-wait-o.patch + - wait-online/wait-online-add-support-for-waiting-for-DNS-configuration.patch + - wait-online/resolved-add-SubscribeDNSConfiguration-to-varlink-API.patch + - wait-online/varlink-util-add-varlink_many_notify.patch + + -- Nick Rosbrook Tue, 04 Nov 2025 04:35:17 -0500 + systemd (258.1-2) unstable; urgency=medium [ Luca Boccassi ] @@ -214,6 +443,124 @@ systemd (258~rc1-1) experimental; urgenc -- Luca Boccassi Wed, 23 Jul 2025 22:23:59 +0100 +systemd (257.9-0ubuntu2) questing; urgency=medium + + * basic: validate timezones in get_timezones() (LP: #2125405) + * debian/libnss-systemd.nss: install after 'compat' too (LP: #2125403) + * d/t/boot-and-services: use coreutils tunable in apparmor test (LP: #2125614) + * d/t/upstream: use GNU cp in test setup (LP: #2122363) + + -- Nick Rosbrook Thu, 25 Sep 2025 12:45:39 -0400 + +systemd (257.9-0ubuntu1) questing; urgency=medium + + [ Nick Rosbrook ] + * New upstream stable version 257.9 + - Bug fixes only + - Update upstream source from tag 'ubuntu/upstream/257.9' + Update to upstream version '257.9' + with Debian dir 991861d2786efe36972fc9cc9d3dcb496264de5a + * Drop resolve-re-create-link-unicast-scopes-on-reload.patch + Applied upstream: https://github.com/systemd/systemd/commit/fc74fb8cb3 + + [ Marco Trevisan (Treviño) ] + * debian/libnss-systemd.preinst: force nsswitch.conf update + Drop systemd instances in nsswitch.conf, and force postinst to + re-generate the file (LP: #2121017) + * debian/linbnss-systemd.nss: Install systemd service after files. + As suggested by upstream the systemd NSS service should come just after + files + + [ Luca Boccassi ] + * systemd-boot-tools: change architecture to linux-any. + The tool can be used for cross-building, and it's available on + all architectures, not just EFI ones (LP: #2122158) + + -- Nick Rosbrook Mon, 08 Sep 2025 08:41:33 -0400 + +systemd (257.8-0ubuntu2) questing; urgency=medium + + [ Lukas Märdian ] + * d/[t/]control,d/systemd-resolved-dnssec*: Disable DNSSEC by default. + (LP: #2121483) + + [ Nick Rosbrook ] + * resolve: re-create link unicast scopes on reload + * d/control: Conflicts: and Replaces: systemd-resolved-dnssec + Ensures systemd-resolved-dnssec is removed on systems that already have + it. + + -- Nick Rosbrook Wed, 27 Aug 2025 16:09:22 -0400 + +systemd (257.8-0ubuntu1) questing; urgency=medium + + * New upstream stable version 257.8 + - Bug fixes only + - d/gbp.conf: set upstream-branch=upstream/257.x + - Update upstream source from tag 'ubuntu/upstream/257.8' + Update to upstream version '257.8' + with Debian dir 8f881d0950662d924a4334d266ef5606b560f61c + * d/rules: drop bpf build workarounds for Ubuntu + * test: skip TEST-50-DISSECT.dissect (LP: #2116460) + * d/t/boot-and-services: tweak test_rsyslog regexes + + -- Nick Rosbrook Mon, 25 Aug 2025 15:51:41 -0400 + +systemd (257.7-1ubuntu3) questing; urgency=medium + + * meson.build: build with -Wl,-z,gcs-report=none on arm64 (LP: #2119100) + + -- Nick Rosbrook Fri, 01 Aug 2025 11:55:27 -0400 + +systemd (257.7-1ubuntu2) questing; urgency=medium + + [ Lukas Märdian ] + * d/control,d/systemd-resolved-dnssec*: Add systemd-resolved-dnssec binary, + shipping a drop-in config from d/extra/resolved.conf.d/ (LP: #2117730) + * d/t/control: Add new 'dnssec' test case. + * d/control: Add Recommends to systemd-resolved-dnssec + + [ Nick Rosbrook ] + * test: ignore coredumps for gnusleep in addition to sleep (LP: #2116459) + * test: follow /usr/bin/sleep symlink when checking coredumps (LP: #2116465) + + -- Nick Rosbrook Tue, 29 Jul 2025 12:11:40 -0400 + +systemd (257.7-1ubuntu1) questing; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/boot-and-services: skip apparmor tests on armhf + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - resolve,wait-online: backport wait-online DNS patches + - test-network: add handling for Ubuntu FAN patches (LP #2104943) + - d/rules: disable bpf support on riscv64 for now (LP #2099864) + - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028) + - d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP #2092438) + - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are + specific to s390x ccw devices are only prevented from being copied if + zdev_early=0 is set, but copy rules in case of zdev_early=1 or if + zdev_early is not specified at all. (LP #2102236) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + + -- Nick Rosbrook Mon, 30 Jun 2025 15:11:21 -0400 + systemd (257.7-1) unstable; urgency=medium * udev: add 'clock' system group for PTP rules @@ -225,6 +572,43 @@ systemd (257.7-1) unstable; urgency=medi -- Luca Boccassi Wed, 25 Jun 2025 13:40:07 +0100 +systemd (257.6-1ubuntu1) questing; urgency=medium + + * Merge with Debian unstable (LP: #2112075). Remaining changes: + - debian/tests/boot-and-services: skip apparmor tests on armhf + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - resolve,wait-online: backport wait-online DNS patches + - test-network: add handling for Ubuntu FAN patches (LP #2104943) + - d/rules: disable bpf support on riscv64 for now (LP #2099864) + - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028) + - d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP #2092438) + - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are + specific to s390x ccw devices are only prevented from being copied if + zdev_early=0 is set, but copy rules in case of zdev_early=1 or if + zdev_early is not specified at all. (LP #2102236) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + * Dropped, no longer needed: + - debian/patches: drop systemd-fsckd patch (LP: #2109800, LP: #1970069) + + -- Nick Rosbrook Fri, 30 May 2025 10:56:19 -0400 + systemd (257.6-1) unstable; urgency=medium [ Luca Boccassi ] @@ -398,6 +782,61 @@ systemd (257.4-2) unstable; urgency=medi -- Luca Boccassi Tue, 11 Mar 2025 14:48:10 +0000 +systemd (257.4-1ubuntu3) plucky; urgency=medium + + * test-network: add handling for Ubuntu FAN patches (LP: #2104943) + + -- Nick Rosbrook Fri, 28 Mar 2025 11:48:04 -0400 + +systemd (257.4-1ubuntu2) plucky; urgency=medium + + [ Frank Heimes ] + * Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are + specific to s390x ccw devices are only prevented from being copied if + zdev_early=0 is set, but copy rules in case of zdev_early=1 or if + zdev_early is not specified at all. (LP: #2102236) + + [ Nick Rosbrook ] + * d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP: #2092438) + * d/control: remove Build-Depends: linux-tools-generic. + The src:linux package now ships a bpftool binary package. + + -- Nick Rosbrook Fri, 21 Mar 2025 17:48:15 -0400 + +systemd (257.4-1ubuntu1) plucky; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/boot-and-services: skip apparmor tests on armhf + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - resolve,wait-online: backport wait-online DNS patches + - d/rules: disable bpf support on riscv64 for now (LP #2099864) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + * Dropped, included in Debian: + - initramfs-tools: copy hwdb.bin to initramfs + - d/rules: fix bpftool path discovery on ubuntu + * New changes: + - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP: #2102028) + + -- Nick Rosbrook Tue, 11 Mar 2025 11:26:05 -0400 + systemd (257.4-1) unstable; urgency=medium [ Nick Rosbrook ] @@ -424,6 +863,49 @@ systemd (257.4-1) unstable; urgency=medi -- Luca Boccassi Thu, 06 Mar 2025 14:52:08 +0000 +systemd (257.3-1ubuntu3) plucky; urgency=medium + + * d/control: remove other bpf deps for riscv64 + + -- Nick Rosbrook Mon, 24 Feb 2025 10:36:52 -0500 + +systemd (257.3-1ubuntu2) plucky; urgency=medium + + * d/t/tests-in-lxd: skip test on any setup error + * d/rules: disable bpf support on riscv64 for now (LP: #2099864) + + -- Nick Rosbrook Mon, 24 Feb 2025 09:23:11 -0500 + +systemd (257.3-1ubuntu1) plucky; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/boot-and-services: skip apparmor tests on armhf + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - resolve,wait-online: backport wait-online DNS patches + - initramfs-tools: copy hwdb.bin to initramfs + - d/rules: fix bpftool path discovery on ubuntu + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + + -- Nick Rosbrook Wed, 19 Feb 2025 09:27:00 -0500 + systemd (257.3-1) unstable; urgency=medium * d/t/control: do not pull in gdm3 on loong64. Not installable, skip it @@ -445,6 +927,39 @@ systemd (257.3-1) unstable; urgency=medi -- Luca Boccassi Thu, 13 Feb 2025 19:54:00 +0000 +systemd (257.2-3ubuntu1) plucky; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/boot-and-services: skip apparmor tests on armhf + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + * New changes: + - resolve,wait-online: backport wait-online DNS patches + - initramfs-tools: copy hwdb.bin to initramfs + - d/rules: fix bpftool path discovery on ubuntu + + -- Nick Rosbrook Fri, 31 Jan 2025 11:39:18 -0500 + systemd (257.2-3) unstable; urgency=medium * signing template: add override for executable-not-elf-or-script @@ -497,6 +1012,49 @@ systemd (257.2-1) unstable; urgency=medi -- Luca Boccassi Tue, 07 Jan 2025 20:48:25 +0000 +systemd (257.1-7ubuntu1) plucky; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/boot-and-services: skip apparmor tests on armhf + - debian/systemd.postinst: + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + * Dropped changes, included in Debian: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: drop test_no_failed + - debian/systemd.postinst: skip daemon-reexec and try-restarts during shutdown + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/control: + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + * Dropped changes, no longer needed: + - debian/tests/boot-and-services: consume stderr in systemctl status call in test_service + * Dropped changes, included upstream: + - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704) + + -- Nick Rosbrook Tue, 07 Jan 2025 10:58:51 -0500 + systemd (257.1-7) unstable; urgency=medium * Add missing d/copyright file to signed template packages @@ -572,6 +1130,48 @@ systemd (257.1-1) unstable; urgency=medi -- Luca Boccassi Thu, 19 Dec 2024 21:41:25 +0000 +systemd (257-2ubuntu1) plucky; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + - d/t/control: tests-in-lxd Depends: dnsmasq-base + - d/t/tests-in-lxd: drop patching workaround + + -- Nick Rosbrook Thu, 12 Dec 2024 10:00:12 -0500 + systemd (257-2) unstable; urgency=medium [ Aurelien Jarno ] @@ -582,6 +1182,50 @@ systemd (257-2) unstable; urgency=medium -- Luca Boccassi Wed, 11 Dec 2024 18:31:08 +0000 +systemd (257-1ubuntu1) plucky; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + - d/t/control: tests-in-lxd Depends: dnsmasq-base + - d/t/tests-in-lxd: drop patching workaround + * New changes: + - test: set nsec3-salt-length=8 in knot.conf + + -- Nick Rosbrook Wed, 11 Dec 2024 11:45:03 -0500 + systemd (257-1) unstable; urgency=medium * Update to new upstream version v257. For a full list of changes: @@ -590,6 +1234,57 @@ systemd (257-1) unstable; urgency=medium -- Luca Boccassi Tue, 10 Dec 2024 19:57:21 +0000 +systemd (257~rc3-1ubuntu1) plucky; urgency=medium + + * Merge with Debian unstable (LP: #2091175). Remaining changes: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + + Do not create /etc/tmpfiles.d/tmp.conf on upgrades + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Make systemd-cryptsetup Priority: important + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + + Do not build systemd-boot-efi-{amd64,arm64}-signed-template + - switch-root: use MS_MOVE for /run when switchig from initrd + - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704) + - Delta for i386: + + debian/systemd.install: exclude files that are not built for i386 + + debian/systemd.manpages: do not ship un-built manpages on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with tpm libraries on i386 + + debian/rules,debian/control,debian/tests/control: + Do not build with libqrencode on i386 + + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors + * Dropped changes, included in Debian: + - Filter out zdev rules in the initramfs hook (LP #2044104) + - d/t/upstream: honor /etc/apt configured by autopkgtest + - debian/tests/control: only install systemd-boot-efi for supported arches + - debian/systemd.links: mask systemd-gpt-auto-generator by default + (Ubuntu only) + * Dropped changes, not needed + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + * New changes: + - d/t/control: tests-in-lxd Depends: dnsmasq-base + - d/t/tests-in-lxd: drop patching workaround + + -- Nick Rosbrook Fri, 06 Dec 2024 10:30:12 -0500 + systemd (257~rc3-1) unstable; urgency=medium [ Luca Boccassi ] @@ -736,6 +1431,76 @@ systemd (256.6-1) unstable; urgency=medi -- Luca Boccassi Tue, 10 Sep 2024 18:28:21 +0200 +systemd (256.5-2ubuntu4) plucky; urgency=medium + + * Make sure systemd-cryptsetup is pulled in by systemd on install/upgrade + (LP: #2084251) + - d/control: make systemd-cryptsetup Priority: important + - d/control: make systemd Recommends: systemd-cryptsetup again + * debian/gbp.conf: update for plucky + + -- Nick Rosbrook Wed, 16 Oct 2024 16:30:52 -0400 + +systemd (256.5-2ubuntu3) oracular; urgency=medium + + * d/control: demote systemd-cryptsetup from Recommends: to Suggests: of systemd + * test: skip TEST-69-SHUTDOWN on ubuntu too (LP: #2083704) + + -- Nick Rosbrook Fri, 04 Oct 2024 11:37:37 -0400 + +systemd (256.5-2ubuntu2) oracular; urgency=medium + + * initramfs-tools: ensure rules file exists before invoking chzdev (LP: #2079993) + + -- Nick Rosbrook Mon, 09 Sep 2024 09:42:11 -0400 + +systemd (256.5-2ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - switch-root: use MS_MOVE for /run when switchig from initrd + - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades. + We want the upgrades on Ubuntu to be aligned with what a new install + would look like. + - d/control: do not build systemd-boot-efi-{amd64,arm64}-signed-template + * New changes: + - Keep utmp support for this release, since we are passed Feature Freeze + in Ubuntu. + - Filter out zdev rules in the initramfs hook (LP: #2044104) + - d/t/upstream: honor /etc/apt configured by autopkgtest + + -- Nick Rosbrook Fri, 06 Sep 2024 09:21:01 -0400 + systemd (256.5-2) unstable; urgency=medium [ Helmut Grohne ] @@ -784,12 +1549,112 @@ systemd (256.4-3) unstable; urgency=medi -- Luca Boccassi Sun, 11 Aug 2024 11:53:32 +0100 +systemd (256.4-2ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - switch-root: use MS_MOVE for /run when switchig from initrd + - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades. + We want the upgrades on Ubuntu to be aligned with what a new install + would look like. + - d/control: do not build systemd-boot-efi-{amd64,arm64}-signed-template + + -- Nick Rosbrook Tue, 30 Jul 2024 10:44:28 -0400 + systemd (256.4-2) unstable; urgency=medium * autopkgtest: allow localectl in localed tests. -- Luca Boccassi Thu, 25 Jul 2024 13:18:09 +0100 +systemd (256.4-1ubuntu3) oracular; urgency=medium + + * d/systemd.install: remove systemd-time-wait-sync again + This was mistakenly added back when resolving a merge conflict. + This binary was moved to systemd-timesyncd in commit 9d74923dd7 + ("Move systemd-time-wait-sync to systemd-timesyncd package"). + + -- Nick Rosbrook Mon, 29 Jul 2024 10:00:05 -0400 + +systemd (256.4-1ubuntu2) oracular; urgency=medium + + * d/systemd.install: do not ship systemd-tpm2-setup on i386 + + -- Nick Rosbrook Fri, 26 Jul 2024 15:44:16 -0400 + +systemd (256.4-1ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - switch-root: use MS_MOVE for /run when switchig from initrd + - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades. + We want the upgrades on Ubuntu to be aligned with what a new install + would look like. + * New changes: + - d/control: do not build systemd-boot-efi-{amd64,arm64}-signed-template + + -- Nick Rosbrook Fri, 26 Jul 2024 13:36:33 -0400 + systemd (256.4-1) unstable; urgency=medium [ Nick Rosbrook ] @@ -815,6 +1680,60 @@ systemd (256.4-1) unstable; urgency=medi -- Luca Boccassi Wed, 24 Jul 2024 14:23:56 +0100 +systemd (256.2-1ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - switch-root: use MS_MOVE for /run when switchig from initrd + - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades. + We want the upgrades on Ubuntu to be aligned with what a new install + would look like. + * Dropped changes, no longer needed: + - Drop Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + - Drop test-skip-exec-privatenetwork-yes-privatemounts-yes.servi.patch. + With security.nesting: true, this AppArmor denial is not hit. We can + drop this now. + - debian/tests/unit-tests: don't skip test-execute on armhf anymore + * Dropped changes, not compatible with mkosi-based test suite: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + * New changes: + - debian/tests/tests-in-lxd: set security.nesting true for LXD containers + - d/t/boot-and-services: skip test_tmp_cleanup if tmp.mount is overridden + - d/t/upstream: ensure correct ubuntu codename is used + - d/t/control: add Depends: lib{systemd,udev}-dev for upstream + + -- Nick Rosbrook Fri, 19 Jul 2024 11:56:45 -0400 + systemd (256.2-1) unstable; urgency=medium * d/not-installed: fix shutdown.standalone path @@ -883,6 +1802,75 @@ systemd (256-2) experimental; urgency=me -- Luca Boccassi Wed, 12 Jun 2024 01:30:51 +0100 +systemd (256-1ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC + - debian/test/unit-tests: skip test-execute on armhf. + * Dropped changes, included in Debian: + - debian/extra: use a drop-in resolved.conf to configure Cache=no-negative + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/rules: + + Set default user path + + Disable LLMNR by default + - debian/tests/storage: skip tests if scsi_debug module is not available + * Dropped changes: + - debian/patches/tmpfiles.d-tmp.conf-make-cleanup-age-30d-on-Ubuntu.patch: + We want to stay aligned with Debian and upstream instead of keeping this + 30d cleanup. + - debian/systemd-resolved.install: drop unnecessary delta + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + We do not actually ship sysctld.d/50-default.conf in Debian or Ubuntu. + When this patch was written, we did, but that change was lost in a merge + from Debian. The preferred package to set sysctl defaults is procps + anyways, so rather than restoring sysctl.d/50-default.conf to make this + patch relevant, drop the patch. + * New changes: + - debian/extra: remove systemd-logind.service.d/nice.conf (LP: #2067927) + - switch-root: use MS_MOVE for /run when switchig from initrd (LP: #2064096) + - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades. + We want the upgrades on Ubuntu to be aligned with what a new install + would look like. + + -- Nick Rosbrook Thu, 13 Jun 2024 11:46:06 -0400 + systemd (256-1) unstable; urgency=medium [ Kevin Fleming ] @@ -946,6 +1934,80 @@ systemd (256~rc3-6) unstable; urgency=me -- Luca Boccassi Thu, 30 May 2024 18:11:19 +0100 +systemd (256~rc3-5ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC + * Dropped changes, no longer needed: + - Drop debian/UBUNTU-read-only-etc-hacks.patch + - Drop debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + - Drop debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + - Drop lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch. + As stated in the patch description, this is *not* the proper fix for the + issue. The proper fix was sent to bcache-tools upstream, but that + upstream is abandoned. However, that patch is now included in Debian + (shipped starting in 1.0.8-5). Hence, we can finally drop this patch + from systemd. + - Drop test-temporarily-skip-credentials-tests-in-LXC.patch + This is redundant with the current skip in tests-in-lxd, and skipping + on armhf all together. + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + * New changes: + - Keep 30d cleanup for /tmp in Ubuntu + - debian/extra: use a drop-in resolved.conf to configure Cache=no-negative + This allows us to drop the current patch. + - debian/test/unit-tests: skip test-execute on armhf. + The run-unit-tests.py script supports a --skip flag for wholesale + skipping like this, so use that instead of a patch. + - debian/tests/tests-in-lxd: fix apparmor profile path + + -- Nick Rosbrook Fri, 31 May 2024 15:52:20 -0400 + systemd (256~rc3-5) unstable; urgency=medium * homed: fixup pam-auth-update file via trigger pam-auth-update assumes @@ -1023,6 +2085,77 @@ systemd (256~rc3-2) unstable; urgency=me -- Luca Boccassi Thu, 23 May 2024 16:31:42 +0100 +systemd (256~rc3-1ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch: + Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file + - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch: + Launch QEMU with -vga none in test-functions + - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch: + Default to Cache=no-negative in systemd-resolved + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch: + skip disk/by-uuid for bcache devices + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch: + Workaround Ubuntu core's read-only etc + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - test: temporarily skip credentials tests in LXC. + This was already skipped in another patch, but now that we know what's + going on with it, split it out. + - test: skip test-execute in arhmf LXC containers + - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC + * Dropped changes, no longer needed: + - Provide upgrade path (Replaces:) for Jammy's systemd-repart + - test: deny-list TEST-08-INITRD. + * New changes: + - debian/tests/tests-in-lxd: skip until credentials can be used in LXD + + -- Nick Rosbrook Thu, 23 May 2024 10:45:03 -0400 + systemd (256~rc3-1) unstable; urgency=medium * Bump Breaks on dracut, on request of the maintainer (Closes: #1071278) @@ -1049,6 +2182,90 @@ systemd (256~rc2-2) unstable; urgency=me -- Luca Boccassi Thu, 16 May 2024 17:40:43 +0100 +systemd (256~rc2-1ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Provide upgrade path (Replaces:) for Jammy's systemd-repart + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + + Build-Depends: linux-tools-generic + - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch: + Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file + - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch: + Launch QEMU with -vga none in test-functions + - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch: + Default to Cache=no-negative in systemd-resolved + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch: + skip disk/by-uuid for bcache devices + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch: + Workaround Ubuntu core's read-only etc + - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch + - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch: + Disable -Wformat-overflow on gcc with -O3 + - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL. + On Ubuntu, we hit the case where SYSVINIT_PATH falls back to + /etc/init.d, but nothing guarantees that the path is created for the + test. + - test: deny-list TEST-08-INITRD. + Upstream already disables this: https://github.com/systemd/systemd/pull/28813. + It makes sense for us to as well, because we don't run systemd in the + initrd. + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + It is preferred that we override units with dropins like this, rather + than patching the original. This has no functional change. + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship un-built manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - test: temporarily skip credentials tests in LXC. + This was already skipped in another patch, but now that we know what's + going on with it, split it out. + - test: skip test-execute in arhmf LXC containers + - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC + * Dropped changes: + - Drop test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch. + - Drop test-ensure-SYSVINIT_PATH-exists-in-TEST-26-SYSTEMCTL.patch. + - Drop meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch + + -- Nick Rosbrook Sun, 19 May 2024 04:07:45 +0200 + systemd (256~rc2-1) unstable; urgency=medium [ Luca Boccassi ] @@ -1110,6 +2327,100 @@ systemd (256~rc2-1) unstable; urgency=me -- Luca Boccassi Wed, 15 May 2024 00:40:56 +0100 +systemd (256~rc1-1~exp2ubuntu1) oracular; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Provide upgrade path (Replaces:) for Jammy's systemd-repart + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch: + Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file + - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch: + Launch QEMU with -vga none in test-functions + - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch: + Default to Cache=no-negative in systemd-resolved + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch: + skip disk/by-uuid for bcache devices + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch: + Workaround Ubuntu core's read-only etc + - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch + - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch: + Disable -Wformat-overflow on gcc with -O3 + - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL. + On Ubuntu, we hit the case where SYSVINIT_PATH falls back to + /etc/init.d, but nothing guarantees that the path is created for the + test. + - test: deny-list TEST-08-INITRD. + Upstream already disables this: https://github.com/systemd/systemd/pull/28813. + It makes sense for us to as well, because we don't run systemd in the + initrd. + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + It is preferred that we override units with dropins like this, rather + than patching the original. This has no functional change. + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship sd-bsod manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - test: temporarily skip credentials tests in LXC. + This was already skipped in another patch, but now that we know what's + going on with it, split it out. + - test: skip test-execute in arhmf LXC containers + - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC + * Dropped changes, fixed upstream: + - Drop lp2058179-copy-ignore-EOPNOTSUPP-from-copy_file_range.patch. + Applied upstream: https://github.com/systemd/systemd/commit/c0bc1e8971 + * Dropped changes: + - debian/extra/start-udev: drop scsi_mod delta. + We have long held this delta in Ubuntu. Right now, this script is only + installed in udev-udeb, but we do not build udebs on Ubuntu, so it is + unnecessary to carry this delta. + - Drop debian/Ubuntu-UseDomains-by-default.patch + * New changes: + - debian/gbp.conf: update for oracular + - debian/systemd-resolved.postinst: ignore cp failure (LP: #2047975) + - debian/control: Build-Depends: linux-tools-generic + - debian/systemd.manpages: don't ship un-built manpages on i386 + - debian/tests: fix patching of autopkgtest-build-lxd + + -- Nick Rosbrook Fri, 10 May 2024 15:44:17 -0400 + systemd (256~rc1-1~exp2) experimental; urgency=medium * Backport patch to fix test-build-path on RISC-V/MIPS @@ -1187,6 +2498,153 @@ systemd (255.5-1) sid; urgency=medium -- Luca Boccassi Wed, 24 Apr 2024 16:34:40 +0100 +systemd (255.4-1ubuntu8) noble; urgency=medium + + * copy: ignore -EOPNOTSUPP from copy_file_range() (LP: #2058179) + File: debian/patches/lp2058179-copy-ignore-EOPNOTSUPP-from-copy_file_range.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fc81bb680f5d5c8c5995fcf6ed7f55f739dcd6a7 + + -- Nick Rosbrook Fri, 19 Apr 2024 10:24:36 -0400 + +systemd (255.4-1ubuntu7) noble; urgency=medium + + * No-change rebuild against libssl3t64 + + -- Steve Langasek Fri, 05 Apr 2024 05:38:07 +0000 + +systemd (255.4-1ubuntu6) noble; urgency=medium + + * No-change rebuild for CVE-2024-3094 + + -- Steve Langasek Sun, 31 Mar 2024 08:26:16 +0000 + +systemd (255.4-1ubuntu5) noble; urgency=medium + + * No-change rebuild against libcurl4t64 + + -- Steve Langasek Sat, 16 Mar 2024 07:04:30 +0000 + +systemd (255.4-1ubuntu4) noble; urgency=medium + + * No-change rebuild against libssl3t64 + + -- Steve Langasek Mon, 04 Mar 2024 21:29:45 +0000 + +systemd (255.4-1ubuntu3) noble; urgency=medium + + * No-change rebuild against libssl3t64 + + -- Steve Langasek Mon, 04 Mar 2024 08:28:30 +0000 + +systemd (255.4-1ubuntu2) noble; urgency=medium + + * debian/patches: modify tmpfiles.d/tmp.conf default for Ubuntu (LP: #2019026) + In addition to cleaning /tmp at boot as is done in Debian, add a 30d + cleanup age for files in /tmp. + File: debian/patches/debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1b9bc51bb1b58a6f625f67f1632296940d78e82c + + -- Nick Rosbrook Thu, 29 Feb 2024 12:02:44 -0500 + +systemd (255.4-1ubuntu1) noble; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin + to the kernel (we previously only set it in modprobe.d) + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Provide upgrade path (Replaces:) for Jammy's systemd-repart + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + - d/p/debian/Ubuntu-UseDomains-by-default.patch: + Enable UseDomains by default on Ubuntu. + - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch: + Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file + - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch: + Launch QEMU with -vga none in test-functions + - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch: + Default to Cache=no-negative in systemd-resolved + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch: + skip disk/by-uuid for bcache devices + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch: + Workaround Ubuntu core's read-only etc + - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch + - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch: + Disable -Wformat-overflow on gcc with -O3 + - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL. + On Ubuntu, we hit the case where SYSVINIT_PATH falls back to + /etc/init.d, but nothing guarantees that the path is created for the + test. + - test: deny-list TEST-08-INITRD. + Upstream already disables this: https://github.com/systemd/systemd/pull/28813. + It makes sense for us to as well, because we don't run systemd in the + initrd. + - debian/systemd.install: do not install pcrlock.d on i386. + We don't build this stuff on i386. + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + It is preferred that we override units with dropins like this, rather + than patching the original. This has no functional change. + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - debian/systemd.links: mask systemd-gpt-auto-generator by default + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship sd-bsod manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + - test: temporarily skip credentials tests in LXC. + This was already skipped in another patch, but now that we know what's + going on with it, split it out. + - test: skip test-execute in arhmf LXC containers + - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC + * Dropped changes, fixed upstream: + - Drop lp2046498-test-skip-test_exec_networknamespacepath-if-netns-setup-f.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/019d5f88ec + - Drop test-skip-TEST-43-PRIVATEUSER-UNPRIV-if-unprivileged-user.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/c07a21408b + - Drop test-skip-a-systemd-run-test-if-unprivileged-userns-is-re.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/159b80d44f + - Drop test-execute-skip-tests-that-are-broken-without-unprivile.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/8c4d70178a + * New changes: + - debian/tests/tests-in-lxd: update workaround patch (LP: #2055200) + The autopkgtest-build-lxd script changed in a way that this patch no + longer applies. Update the patch so it does apply. + Thanks to Florent 'Skia' Jacquet + + -- Nick Rosbrook Tue, 27 Feb 2024 17:13:21 -0500 + systemd (255.4-1) sid; urgency=medium [ Luca Boccassi ] @@ -1292,6 +2750,144 @@ systemd (255.2-4) sid; urgency=medium -- Michael Biebl Sat, 06 Jan 2024 16:21:03 +0100 +systemd (255.2-3ubuntu2) noble; urgency=medium + + * test: skip test_exec_networknamespacepath if netns setup fails (LP: #2046498) + Files: + - debian/patches/lp2046498-test-skip-test_exec_networknamespacepath-if-netns-setup-f.patch + - debian/patches/test-skip-failing-test-execute-tests-in-LXC.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=de1fcf756e47858f4a206db97434bce4a71384d0 + * test: skip TEST-43-PRIVATEUSER-UNPRIV if unprivileged userns is restricted + File: debian/patches/test-skip-TEST-43-PRIVATEUSER-UNPRIV-if-unprivileged-user.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2aba69874c83289c43d199ca360aa2fc451486a7 + * Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch. + This will be re-addressed with a different patch. + File: debian/patches/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3cd814e028364fe0c641d4bacfce22aafd1b572 + * Drop test-skip-failing-test-execute-tests-in-LXC.patch. + This will be re-addressed with different patches. + File: debian/patches/test-skip-failing-test-execute-tests-in-LXC.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ab853707f4cc3e7e2d5993ff38998c3c2c789f62 + * test: temporarily skip credentials tests in LXC. + This was already skipped in another patch, but now that we know what's + going on with it, split it out. + File: debian/patches/test-temporarily-skip-credentials-tests-in-LXC.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c71acb411d315267fe811f024cdab97e032453f3 + * test: skip test-execute in arhmf LXC containers + File: debian/patches/test-skip-test-execute-in-arhmf-LXC-containers.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1cb1e3060822bfadddead564e779942e73e02f62 + * test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC (LP: #2046495) + File: debian/patches/test-skip-exec-privatenetwork-yes-privatemounts-yes.servi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3ab76fd2db4291ee0531a07085c72cee06cb0d12 + * test: skip a systemd-run test if unprivileged userns is restricted + File: debian/patches/test-skip-a-systemd-run-test-if-unprivileged-userns-is-re.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c85f2b4e32ee8fd1c0dc58d23e7fabdb7590d3cc + * test-execute: skip tests that are broken without unprivileged userns + File: debian/patches/test-execute-skip-tests-that-are-broken-without-unprivile.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7a6573c4f5133a7fec11fb059dd215f7c8c2204e + + -- Nick Rosbrook Wed, 24 Jan 2024 14:53:46 -0500 + +systemd (255.2-3ubuntu1) noble; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin + to the kernel (we previously only set it in modprobe.d) + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Provide upgrade path (Replaces:) for Jammy's systemd-repart + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + - d/p/debian/Ubuntu-UseDomains-by-default.patch: + Enable UseDomains by default on Ubuntu. + - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch: + Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file + - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch: + Launch QEMU with -vga none in test-functions + - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch: + Default to Cache=no-negative in systemd-resolved + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch: + skip disk/by-uuid for bcache devices + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch: + Workaround Ubuntu core's read-only etc + - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch + - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch: + Disable -Wformat-overflow on gcc with -O3 + - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL. + On Ubuntu, we hit the case where SYSVINIT_PATH falls back to + /etc/init.d, but nothing guarantees that the path is created for the + test. + - test: deny-list TEST-08-INITRD. + Upstream already disables this: https://github.com/systemd/systemd/pull/28813. + It makes sense for us to as well, because we don't run systemd in the + initrd. + - debian/systemd.install: do not install pcrlock.d on i386. + We don't build this stuff on i386. + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + It is preferred that we override units with dropins like this, rather + than patching the original. This has no functional change. + - test: skip failing test-execute tests in LXC. + These are hopefully temporary workarounds so that we can figure out the + root cause in either upstream systemd or LXC. + * Dropped changes, fixed upstream: + - Drop test-install-all-necessary-units-generators-for-LVM-on-De.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/b1dba6bcaa + - Drop firstboot-remove-etc-localtime-on-reset.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/1d1b1fa25b + * Dropped changes, replaced with new approach: + - d/p/test-increase-QEMU_MEM-for-some-tests.patch: + Increase QEMU_MEM for some tests to improve success rate + * Dropped changes, included in Debian: + - debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE + - debian/tests/upstream: drop blacklist support. + - test-skip-tests-for-unsupported-localectl-features.patch: + skip tests for unsupported localectl features + * New changes: + - debian/tests/upstream: export QEMU_MEM="1024M" for all tests + - Revert "Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch" + - debian/systemd.links: mask systemd-gpt-auto-generator by default (LP: #2046459) + Re-ship the generator so that it can be used if needed, but mask the + generator so that it remains disabled by default. + - debian/systemd.install: exclude files that are not built for i386 + - debian/systemd.manpages: do not ship sd-bsod manpages on i386 + - debian/tests/control: only install systemd-boot-efi for supported arches + + -- Nick Rosbrook Wed, 03 Jan 2024 17:34:00 -0500 + systemd (255.2-3) sid; urgency=medium * Cherry-pick fixes for upstream integration tests. @@ -1417,6 +3013,117 @@ systemd (255.1-1) experimental; urgency= -- Michael Biebl Wed, 20 Dec 2023 17:54:00 +0100 +systemd (255-1ubuntu1) noble; urgency=medium + + * Merge with Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + + drop test_no_failed + - debian/systemd.postinst: + + skip daemon-reexec and try-restarts during shutdown + + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + + Do not ship systemd-gpt-auto-generator + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin + to the kernel (we previously only set it in modprobe.d) + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Provide upgrade path (Replaces:) for Jammy's systemd-repart + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + - d/p/debian/Ubuntu-UseDomains-by-default.patch: + Enable UseDomains by default on Ubuntu. + - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch: + Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file + - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch: + Launch QEMU with -vga none in test-functions + - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch: + Default to Cache=no-negative in systemd-resolved + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch: + skip disk/by-uuid for bcache devices + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - d/p/test-increase-QEMU_MEM-for-some-tests.patch: + Increase QEMU_MEM for some tests to improve success rate + - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch: + Workaround Ubuntu core's read-only etc + - test-skip-tests-for-unsupported-localectl-features.patch: + skip tests for unsupported localectl features + - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch + - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch: + Disable -Wformat-overflow on gcc with -O3 + * Dropped changes, fixed upstream: + - Drop lp2009743/test-network-add-one-more-testcase-for-DHCPv4-classless-r.patch. + Applied upstream: https://github.com/systemd/systemd/commit/86f6760038 + - Drop lp2009743/network-dhcp4-do-not-ignore-the-gateway-even-if-the-desti.patch. + Applied upstream: https://github.com/systemd/systemd/commit/77451f654a + - Drop lp2013543-core-reorder-systemd-arguments-on-reexec.patch. + Applied upstream: https://github.com/systemd/systemd/commit/06afda6b38 + - Drop lp2033325-Revert-core-service-when-resetting-PID-also-reset-known-f.patch. + Applied upstream: https://github.com/systemd/systemd/commit/996b00ede8 + - Drop test-denylist-TEST-29-PORTABLE-again.patch. + According to upstream, this has been resolved by + https://github.com/systemd/systemd/pull/28123, and a PPA autopkgtest + confirms this. + * Dropped changes, no longer needed: + - Drop deny-list-TEST-55-OOMD-on-ppc64el.patch. + We already disable qemu tests on ppc64el, so having this too is + unnecessary. + - Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch. + These tests no longer fail when run in LXD, so drop the patch. + - Drop debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch (LP: #1959047) + * New changes: + - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL. + On Ubuntu, we hit the case where SYSVINIT_PATH falls back to + /etc/init.d, but nothing guarantees that the path is created for the + test. + - firstboot: remove /etc/localtime on --reset + - debian/tests/upstream: drop blacklist support. + - test: deny-list TEST-08-INITRD. + Upstream already disables this: https://github.com/systemd/systemd/pull/28813. + It makes sense for us to as well, because we don't run systemd in the + initrd. + - debian/tests/control: add Depends: systemd-boot-efi for upstream-2. + TEST-70-TPM2 wants the systemd-boot EFI binary for testing pcrlock, so + just install the binaries. + - debian/systemd.install: do not install pcrlock.d on i386. + We don't build this stuff on i386. + - debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE + - test: install all necessary units & generators for LVM on Debian + - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service. + It is preferred that we override units with dropins like this, rather + than patching the original. This has no functional change. + - test: skip failing test-execute tests in LXC. + These are hopefully temporary workarounds so that we can figure out the + root cause in either upstream systemd or LXC. + + -- Nick Rosbrook Thu, 14 Dec 2023 18:11:39 -0500 + systemd (255-1) unstable; urgency=medium * New upstream version 255. For a full list of changes, see: @@ -1823,6 +3530,238 @@ systemd (254~rc1-1) experimental; urgenc -- Luca Boccassi Fri, 07 Jul 2023 11:05:37 +0100 +systemd (253.5-1ubuntu7) noble; urgency=medium + + * Revert "debian/rules: set MulticastDNS=resolve by default" (LP: #2038894) + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3d753238699f54e8c2892d8107136d49f09e44b6 + * debian/gbp.conf: update for noble + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a65decb3a73592af8b952b159cfb453e9c0babd5 + + -- Nick Rosbrook Thu, 26 Oct 2023 09:51:33 -0400 + +systemd (253.5-1ubuntu6) mantic; urgency=medium + + * debian/tests: Depends: tzdata-legacy for upstream-{1,2} (LP: #2035778) + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=28d9f59c6abb6e460dd34baa4237ef04aa06aced + + -- Nick Rosbrook Tue, 19 Sep 2023 11:54:35 -0400 + +systemd (253.5-1ubuntu5) mantic; urgency=medium + + * Revert "core/service: when resetting PID also reset known flag" (LP: #2033325) + Thanks to Sergio Durigan Junior + File: debian/patches/lp2033325-Revert-core-service-when-resetting-PID-also-reset-known-f.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=021b6fafca7ae9bddaa479500614a4a4be40ce59 + * debian/rules: do not ship systemd-gpt-auto-generator. + We do not want the functionality provided by this generator, so do not + ship it. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a366279a84730e92ed734710560ea833709f359d + + -- Nick Rosbrook Thu, 07 Sep 2023 16:09:54 -0400 + +systemd (253.5-1ubuntu4) mantic; urgency=medium + + * Revert "Drop Provides: time-daemon for bin:systemd-timesyncd" + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e88d9f0241a307a3c1b4bcaf4bf29799d984aa3c + + -- Nick Rosbrook Fri, 25 Aug 2023 16:36:26 -0400 + +systemd (253.5-1ubuntu3) mantic; urgency=medium + + [ Nick Rosbrook ] + * debian/rules: build with -ffat-lto-objects (LP: #2031416) + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c78b7a6a2578d2b3f70638db918858f9b78107a4 + + [ Utkarsh Gupta ] + * Drop Provides: time-daemon for bin:systemd-timesyncd + Author: Utkarsh Gupta + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9b78ef26d64a40c21cac1e48534c6bf33661e6d7 + + -- Nick Rosbrook Fri, 25 Aug 2023 15:31:17 -0400 + +systemd (253.5-1ubuntu2) mantic; urgency=medium + + * core: reorder systemd arguments on reexec (LP: #2013543) + File: debian/patches/lp2013543-core-reorder-systemd-arguments-on-reexec.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c93e797cdd4f3678cdcc7449f8a6f6820e98b7f0 + * network/dhcp4: do not ignore the gateway even if the destination is in same network (LP: #2009743) + Files: + - debian/patches/lp2009743/network-dhcp4-do-not-ignore-the-gateway-even-if-the-desti.patch + - debian/patches/lp2009743/test-network-add-one-more-testcase-for-DHCPv4-classless-r.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c09bc22fca4259301c88195f34ae3b24956afb22 + * debian/systemd.postint: do not daemon re-exec if we could hit LP: #2013543 + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=19447af92c6d30e331ff97420e7ddcf3e5d723e1 + * meson.build: disable -Wformat-overflow on gcc with -O3 + File: debian/patches/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8c8595bf0f12e56d4b3a063c93a3ba69c798add2 + * debian: ship libsystemd.a in libsystemd-dev (LP: #2012437) + Thanks to Serge Hallyn + Files: + - debian/libsystemd-dev.install + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5997dd2a25a7c65d7c8a826346c0120532a0e083 + * autopkgtest: add build test for static libsystemd + Files: + - debian/tests/build-with-static-libsystemd + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d90da82d6b4adcf59b9a6b6188af3a49381fea8 + + -- Nick Rosbrook Mon, 14 Aug 2023 11:28:09 -0400 + +systemd (253.5-1ubuntu1) mantic; urgency=medium + + * Merge 253.5-1 from Debian unstable. Remaining changes: + - debian/tests/upstream{,-1,-2}: split upstream tests into two parts + - debian/tests/tests-in-lxd: run some autopkgtests in LXD too + - debian/tests/storage: skip tests if scsi_debug module is not available + - debian/tests/boot-and-services: + + skip test_syslog on s390x + + skip coredump tests on s390x + + skip apparmor tests on armhf + + consume stderr in systemctl status call in test_service + - debian/systemd.postinst: skip daemon-reexec and try-restarts during shutdown + - debian/systemd.postinst,debian/rules: + Disable dh_installinit generation of tmpfiles for systemd package, and + manually call systemd-tmpfiles --create in postinst + - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf + - debian/rules: + + Set default user path + + Disable LLMNR by default + + Remove unneeded efi artifacts on i386 to avoid debugedit errors + - debian/rules,debian/control,debian/tests/control: + + Do not build with tpm libraries on i386 + + Do not build with libqrencode on i386 + - debian/gbp.conf,debian/extra/wrap_cl.py: + Use a customization script to add LP commit links to changelog + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf: + Set ManagedOOMSwap=auto, disabling swap kill by default + - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin + to the kernel (we previously only set it in modprobe.d) + - debian/control: + + Add Recommends: networkd-dispatcher systemd-resolved to systemd package + + Provide upgrade path (Replaces:) for Jammy's systemd-repart + + Give systemd-resolved Priority: important + + Add Recommends: systemd-hwe-hwdb to udev package + + Add Breaks: systemd (<< ${binary:Version}) to udev package so that + systemd is upgraded as well when upgrading udev + + Make systemd-sysv Depends: on matching version of systemd + + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved + - d/p/debian/Ubuntu-UseDomains-by-default.patch: + Enable UseDomains by default on Ubuntu. + - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch: + Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file + - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch: + Launch QEMU with -vga none in test-functions + - d/p/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch: + Set Nice=-1 in journald.service to dodge watchdog on soft lockups + - d/p/debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch: + Revert "namespace: be more careful when handling namespacing failures gracefully" + upstream commit + - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch: + Default to Cache=no-negative in systemd-resolved + - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch: + Revert "network: if /sys is rw, then udev should be around" upstream + commit + - d/p/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch: + Skip some of test-execute when running in LXD + - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch: + skip disk/by-uuid for bcache devices + - d/p/deny-list-TEST-55-OOMD-on-ppc64el.patch: + Deny-list TEST-55-OOMD om ppc64el + - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch: + Don't override Ubuntu's default sysctl values + - d/p/test-increase-QEMU_MEM-for-some-tests.patch: + Increase QEMU_MEM for some tests to improve success rate + - d/p/test-denylist-TEST-29-PORTABLE-again.patch: + Deny-list TEST-29-PORTABLE + * Dropped changes, fixed upstream: + - lp1999275-binfmt-util-also-check-if-binfmt-is-mounted-in-read-write.patch: + Applied upstream: https://github.com/systemd/systemd/commit/5aaa79ce96 + - lp1999275-stat-util-introduce-fd_is_read_only_fs.patch: + Applied upstream: https://github.com/systemd/systemd/commit/dc1752ea72 + - lp1999275-binfmt-check-if-binfmt-is-mounted-before-applying-rules.patch: + Applied upstream: https://github.com/systemd/systemd/commit/94ba5b1532 + - lp2002445-sd-netlink-do-not-swap-old-name-and-alternative-name.patch: + Applied upstream: https://github.com/systemd/systemd/commit/080afbb57c + - lp2002445-udev-net-allow-new-link-name-as-an-altname-before-renamin.patch: + Applied upstream: https://github.com/systemd/systemd/commit/d0b31efc1a + - lp2004478-network-dhcp4-accept-local-subnet-routes-from-DHCP.patch: + Applied upstream: https://github.com/systemd/systemd/commit/1d84a3c779 + - lp1999275-binfmt-util-split-out-binfmt_mounted.patch: + Applied upstream: https://github.com/systemd/systemd/commit/a51a9684c9 + - lp2002445-sd-netlink-restore-altname-on-error-in-rtnl_set_link_name.patch: + Applied upstream: https://github.com/systemd/systemd/commit/4d600667f8 + - lp2002445-test-network-add-a-test-for-renaming-device-to-current-al.patch: + Applied upstream: https://github.com/systemd/systemd/commit/f68f644a16 + - lp2002445/sd-device-make-device_set_syspath-clear-sysname-and-sysnu.patch: + Applied upstream: https://github.com/systemd/systemd/commit/9a26098e90 + - lp2002445/core-device-ignore-failed-uevents.patch: + Applied upstream: https://github.com/systemd/systemd/commit/e9336d6ac3 + - lp2002445/udev-restore-syspath-and-properties-on-failure.patch: + Applied upstream: https://github.com/systemd/systemd/commit/210033847c + - lp2002445/sd-device-introduce-device_get_property_int.patch: + Applied upstream: https://github.com/systemd/systemd/commit/eedfef0f0d + - lp2002445-udev-attempt-device-rename-even-if-interface-is-up.patch: + Applied upstream: https://github.com/systemd/systemd/commit/53584e7b61 + - lp1999275-unit-check-more-specific-path-to-be-written-by-systemd-bi.patch: + Applied upstream: https://github.com/systemd/systemd/commit/f74a7cb45c + - lp2002445-sd-netlink-add-a-test-for-rtnl_set_link_name.patch: + Applied upstream: https://github.com/systemd/systemd/commit/b338a8bb40 + - test-skip-some-tests-when-machine-id-is-not-initialized.patch: + Applied upstream: https://github.com/systemd/systemd/pull/25732 + - sd-netlink-skip-test_rtnl_set_link_name-when-altnames-are.patch: + Applied upstream: https://github.com/systemd/systemd/commit/5ccbe7fb197 + - debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch (LP: #1982218): + This has been implemented upstream in a different way, but with the same + outcome: https://github.com/systemd/systemd/commit/ab3aed4a034. + - debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch: + This is obsoleted by an upstream change to fix the underlying issue: + https://github.com/systemd/systemd/commit/362235bf59. + * Dropped changes, no longer needed: + - Deny-list-TEST-74-AUX-UTILS-on-s390x.patch: + This test passes on s390x now. + - debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch: + This test passes without this patch now. + - debian/UBUNTU-Revert-cgroup-Continue-unit-reset-if-cgroup-is-busy.patch: + Testing libvirt against systemd without this patch passses now. + - debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch: + This test passes without this patch now. + - debian/UBUNTU-src-test-testmount-util.c-Skip-parts-of-test-mount-util-in-LXC.patch: + This test passes in LXD without this patch now. + - debian/systemd.prerm: remove unnecessary whitespace + - debian/systemd.maintscript: + Our delta pertains to versions older than 249, which is in Jammy and is + therefore the oldest version direct upgrades will be supported from. + - test: drop /etc/default/locale handling from TEST-74-AUX-UTILS + * New changes: + - debian/patches: consolidate Ubuntu core hacks into one patch, + debian/UBUNTU-read-only-etc-hacks.patch: + + debian/UBUNTU-Fix-timezone-setting-on-read-only-etc.patch + + debian/UBUNTU-Support-system-image-read-only-etc.patch + + debian/timedatectl-lp1650688.patch + + lp1981042-core-firstboot-workaround-timezone-issues-caused-by-Ubunt.patch + + debian/UBUNTU-read-only-etc-hacks.patch + - debian/systemd.postinst: remove duplicate if block + - debian/gbp.conf: update debian-branch to ubuntu-mantic + - debian/tests: add ability to override SELECTED_TESTS in upstream tests + - debian/systemd.postinst: fix /etc/locale.conf migration + - debian/tests/tests-in-lxd: use --reuse flag in lxc publish (LP: #2023229) + - debian/rules: set MulticastDNS=resolve by default + - test-skip-tests-for-unsupported-localectl-features.patch: + skip tests for unsupported localectl features + - debian/tests/boot-and-services: drop test_no_failed + + -- Nick Rosbrook Tue, 11 Jul 2023 14:11:33 -0400 + systemd (253.5-1) unstable; urgency=medium * New upstream version 253.5 (Closes: #1040035) @@ -1936,6 +3875,63 @@ systemd (252.6-1) unstable; urgency=medi -- Luca Boccassi Tue, 28 Feb 2023 11:15:45 +0000 +systemd (252.5-2ubuntu3) lunar; urgency=medium + + * udev: gracefully handle rename failures (LP: #2002445) + Files: + - debian/patches/lp2002445/core-device-ignore-failed-uevents.patch + - debian/patches/lp2002445/sd-device-introduce-device_get_property_int.patch + - debian/patches/lp2002445/sd-device-make-device_set_syspath-clear-sysname-and-sysnu.patch + - debian/patches/lp2002445/udev-restore-syspath-and-properties-on-failure.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=79536dbb165dbcc402629684e0911693626df5b1 + + -- Nick Rosbrook Mon, 20 Mar 2023 10:17:24 -0400 + +systemd (252.5-2ubuntu2) lunar; urgency=medium + + * network/dhcp4: accept local subnet routes from DHCP (LP: #2004478) + File: debian/patches/lp2004478-network-dhcp4-accept-local-subnet-routes-from-DHCP.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b9aaaf37b8ca7c9febe5f0ebc4b82d0f895cbbd3 + * sd-netlink: skip test_rtnl_set_link_name when altnames are not supported. + This has already been fixed upstream by a larger commit, so this patch + can be dropped when we have a new enough upstream version. + File: debian/patches/sd-netlink-skip-test_rtnl_set_link_name-when-altnames-are.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=195985ee5aa2cfdbbac178a07e5b43b83f0550d0 + + -- Nick Rosbrook Wed, 08 Mar 2023 12:51:51 -0500 + +systemd (252.5-2ubuntu1) lunar; urgency=medium + + * Merge 252.5-2 from Debian unstable + - Drop test-handle-Debian-s-etc-default-locale-in-testsuite-74.f.patch. + Applied upstream: https://github.com/systemd/systemd/commit/9b42646b22 + File: debian/patches/test-handle-Debian-s-etc-default-locale-in-testsuite-74.f.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1b0789416172ec60d8086fe2b458b5396bb7e857 + - Drop test-make-sure-mount-point-exists-in-testsuite-64.sh.patch. + Applied upstream: https://github.com/systemd/systemd/commit/07e4787106 + File: debian/patches/test-make-sure-mount-point-exists-in-testsuite-64.sh.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f97b2d5ae1a1f35668c4648f1c7fc715a588de50 + - Drop test-remove-no-longer-needed-quirk-for-set-locale-on-Debi.patch. + Fixed upstream: https://github.com/systemd/systemd-stable/commit/1c325f6d7f + File: debian/patches/test-remove-no-longer-needed-quirk-for-set-locale-on-Debi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5f85226d61393c08d7ea51c2f28db7fd4c79bcc6 + * udev: avoid NIC renaming race with kernel (LP: #2002445) + Files: + - debian/patches/lp2002445-sd-netlink-add-a-test-for-rtnl_set_link_name.patch + - debian/patches/lp2002445-sd-netlink-do-not-swap-old-name-and-alternative-name.patch + - debian/patches/lp2002445-sd-netlink-restore-altname-on-error-in-rtnl_set_link_name.patch + - debian/patches/lp2002445-test-network-add-a-test-for-renaming-device-to-current-al.patch + - debian/patches/lp2002445-udev-attempt-device-rename-even-if-interface-is-up.patch + - debian/patches/lp2002445-udev-net-allow-new-link-name-as-an-altname-before-renamin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=58d29c2b376f03c44ed5a719877c95b332018cdc + * Deny-list TEST-74-AUX-UTILS on s390x. + Since this currently is only known to fail on the autopkgtest + infrastructure, we believe this is a temporary issue. + File: debian/patches/Deny-list-TEST-74-AUX-UTILS-on-s390x.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a3a059d86e2fe3a104419ae2afcab557171f9809 + + -- Nick Rosbrook Tue, 14 Feb 2023 11:52:31 -0500 + systemd (252.5-2) unstable; urgency=medium * Fix boot-and-services autopkgtest. @@ -2009,6 +4005,53 @@ systemd (252.4-2) unstable; urgency=medi -- Michael Biebl Wed, 25 Jan 2023 09:17:24 +0100 +systemd (252.4-1ubuntu1) lunar; urgency=medium + + * Drop oomd-fix-unreachable-test-case-in-test-oomd-util.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/bcd42b3c88 + File: debian/patches/oomd-fix-unreachable-test-case-in-test-oomd-util.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=93cf2f4709a6768d6eeb04153c92bffec0726753 + * Drop oomd-always-allow-root-owned-cgroups-to-set-ManagedOOMPre.patch. + Applied upstream: https://github.com/systemd/systemd-stable/commit/2bdf5b0382 + File: debian/patches/oomd-always-allow-root-owned-cgroups-to-set-ManagedOOMPre.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=24f51625bcec9a7b4f32a0caf363b000b173748b + * debian/rules: remove explicit -fcf-protection flag. + This is included in the default gcc flags on Ubuntu[1], so we do not need + this anymore. Drop the diff to reduce our delta from Debian. + [1] https://wiki.ubuntu.com/ToolChain/CompilerFlags#A-fcf-protection + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b72bf5bb964aa89769417491fcc99926a06490ba + * Revert "Drop systemd.prerm safety check." + This reverts commit 0244c4d56556317f14eecc2f51871969ef02ba7b. + systemd does not run in a chroot, so /run/systemd/system should not + exist in chroots. Debian has kept this without issue, so revert this in + order to reduce delta with Debian. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d7df55f11603022cde6cf897aaddc02624e79336 + * Drop 0001-Revert-tests-add-test-case-for-UMask-BindPaths-combi.patch. + This patch is specific to privileged LXD containers, which we are not + testing anymore, so there is no need to carry the patch anymore. + File: debian/patches/0001-Revert-tests-add-test-case-for-UMask-BindPaths-combi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2acbc4741346c684ea3fa8aecf1d6ed88a7444cd + * binfmt: fix systemd-binfmt in LXD containers (LP: #1999275) + Files: + - debian/patches/lp1999275-binfmt-check-if-binfmt-is-mounted-before-applying-rules.patch + - debian/patches/lp1999275-binfmt-util-also-check-if-binfmt-is-mounted-in-read-write.patch + - debian/patches/lp1999275-binfmt-util-split-out-binfmt_mounted.patch + - debian/patches/lp1999275-stat-util-introduce-fd_is_read_only_fs.patch + - debian/patches/lp1999275-unit-check-more-specific-path-to-be-written-by-systemd-bi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=41fa3a0420c5633200ecd60add6cadb149c98ccd + * debian/patches: update test-skip-some-tests-when-machine-id-is-not-initialized.patch. + The latest stable tag includes some, but not all patches which [1] needs + to work correctly. For now, just simplify the `machine_id_initialized()` + helper and make a note in the patch that the changes were forwarded + upstream. + [1] https://github.com/systemd/systemd/pull/25732 + File: debian/patches/test-skip-some-tests-when-machine-id-is-not-initialized.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d17ca14b237f477899c7af793b698dc0740985d1 + + -- Nick Rosbrook Wed, 04 Jan 2023 13:56:18 -0500 + systemd (252.4-1) unstable; urgency=medium * Enable p11kit. Backport patch to dlopen-ify p11kit support and enable @@ -2063,6 +4106,102 @@ systemd (252.2-1) unstable; urgency=medi -- Luca Boccassi Mon, 28 Nov 2022 22:35:56 +0000 +systemd (252.1-1ubuntu1) lunar; urgency=medium + + [ Nick Rosbrook ] + * Merge 252.1-1 from Debian unstable + - Resolve merge conflicts: + + debian/patches: Do not take back Add-support-for-TuxOnIce-hibernation.patch. + + debian/libsystemd0.symbols: Increment sd_hwdb_new_from_path min version + to reduce delta with Debian. + + debian/control: Keep Ubuntu systemd-repart delta for now. + + debian/rules: Keep our diff for TPM2 build on i386 + + debian/systemd-resolved.postrm: Take Debian DPKG_ROOT changes, removing + the Ubuntu delta. + - Drop patches: + + Drop sd-hwdb-add-sd_hwdb_new_from_path.patch: + Applied upstream: https://github.com/systemd/systemd-stable/commit/60f0ba7556 + + Drop test-copy-libgcc_s.so.1-to-TPM2-test-image-on-Debian-like.patch: + Applied upstream: https://github.com/systemd/systemd-stable/commit/ddbc88188c + + Drop lp1991829-add-CAP_LINUX_IMMUTABLE-to-systemd-machined-so-it-ca.patch: + Applied upstream: https://github.com/systemd/systemd-stable/commit/137d162c42 + + Drop hwdb-implement-root-option-for-systemd-hwdb-query.patch: + Applied upstream: https://github.com/systemd/systemd-stable/commit/beff73f94e + + Drop lp1978079-pstore-Run-after-modules-are-loaded.patch: + Applied upstream: https://github.com/systemd/systemd-stable/commit/70e74a5997 + + Drop debian/UBUNTU-deny-list-TEST-10-ISSUE-2467.patch: + It looks like this has not been a problem upstream. Let's try it again + in autopkgtest. + + Drop debian/deny-list-upstream-test-02-ppc64el.patch: + There was never any movement on the upstream issue. Since it has been a + while, let's re-enable for now to see if it is still a problem. + + Drop debian/deny-list-upstream-test-25.patch: + It's been a while, let's see if this still presents a problem. + + Drop lp1989969-test-deny-list-TEST-36-NUMAPOLICY-on-ppc64el.patch: + This is likely due to [1], and is not specific to TEST-36-NUMAPOLICY. + [1] https://github.com/systemd/systemd/issues/25091 + + Drop lp1950794-Revert-sd-dhcp-do-not-use-detect_container-to-guess-.patch: + This patch no longer applies, see: + https://github.com/systemd/systemd/commit/14805b1468 + - Refresh patches + - debian/gbp.conf: Update debian-branch to ubuntu-lunar + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aa7b7c457ce90478b38fc73e628f8b5a4874614f + - debian/rules: do not enable libqrencode on i386 + Files: + - debian/control + - debian/rules + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3ed5e1433e2ee05e2941f0e16ebc482933a382fd + - Add handling for /etc/default/locale to firstboot. + The TEST-74-AUX-UTILS upstream test revealed that firstboot does not + currently handle Debian's /etc/default/locale. + File: debian/patches/debian/Use-Debian-specific-config-files.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9dc07337354155b100ea0423ed090f3dc6040a7a + - test: remove no-longer-needed quirk for set-locale on Debian/Ubuntu + File: debian/patches/test-remove-no-longer-needed-quirk-for-set-locale-on-Debi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e14e582fe158c7e63d6146386ec901fededa2e78 + - oomd: always allow root-owned cgroups to set ManagedOOMPreference + File: debian/patches/oomd-always-allow-root-owned-cgroups-to-set-ManagedOOMPre.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e2fc04c5a6dfbe4bada17f117b957febcc5356d7 + - oomd: fix unreachable test case in test-oomd-util + File: debian/patches/oomd-fix-unreachable-test-case-in-test-oomd-util.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a9ad5284e2730c777fbc4dd7919be1631b788c44 + - test: make sure mount point exists in testsuite-64.sh + File: debian/patches/test-make-sure-mount-point-exists-in-testsuite-64.sh.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1a6bae6133ebe11108b1b8515da7371e5567a189 + - test: handle Debian's /etc/default/locale in testsuite-74.firstboot.sh + File: debian/patches/test-handle-Debian-s-etc-default-locale-in-testsuite-74.f.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5e80690a112fb579070d99d6cbd3623f3cea790c + - test: skip some tests when machine-id is not initialized + File: debian/patches/test-skip-some-tests-when-machine-id-is-not-initialized.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=362c58ae565eefc172f085dc22f5058c5d3adb85 + - debian/tests: stop testing in privileged LXD containers + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a74c46945722f9bb8d925543a0fabe64d38f7c8f + - debian/systemd.postinst: drop our v234-specific delta. + Upgrades from systems this old are not supported to Lunar and newer. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a3f79c2d259da6d0537cb4a31e0eb7bf0c2aaeff + - debian/tests: stop skipping test_service in boot-and-services. + The linked github issue has been resolved and is included in this + release. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bdb12cb08e0f959ff875713a78cb2a3beadae87e + - debian/systemd-resolved.postinst: consolidate Ubuntu delta + File: debian/systemd-resolved.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7f6c0a62320ce5670ba9a0648ae54af24ae3dc1c + + [ Luca Boccassi ] + * Build depend on dh-package-notes, sequence was removed. + Only the makefile is in use now, no files are generated at build time + as --package-metadata from the linkers is used now + Author: Luca Boccassi + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5501f9d2629d4e22dc45e6569946aefd9c78d3c6 + + -- Nick Rosbrook Tue, 06 Dec 2022 11:00:38 -0500 + systemd (252.1-1) unstable; urgency=medium * d/watch: switch back to stable repository @@ -2251,6 +4390,166 @@ systemd (251.4-2) unstable; urgency=medi -- Luca Boccassi Fri, 26 Aug 2022 23:16:23 +0100 +systemd (251.4-1ubuntu7) kinetic; urgency=medium + + [ Nick Rosbrook ] + * autopkgtest: do not allow qemu to be used on ppc64el (LP: #1992178) + Almost every run on ppc64el takes 12 to 24 hours, so do this as a last + resort to relieve pressure on autopkgtest infrastructure. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ab2b8ad13a3d7441935d6f43bb81fbd540e2c33 + + [ Dan Streetman ] + * make machinectl read-only work (LP: #1991829) + Author: Dan Streetman + File: debian/patches/lp1991829-add-CAP_LINUX_IMMUTABLE-to-systemd-machined-so-it-ca.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a8a41b11d712c8cfbf595d34f39d95096f23e202 + + -- Nick Rosbrook Tue, 11 Oct 2022 11:51:25 -0400 + +systemd (251.4-1ubuntu6) kinetic; urgency=medium + + * test: deny-list TEST-36-NUMAPOLICY on ppc64el (LP: #1989969) + File: debian/patches/lp1989969-test-deny-list-TEST-36-NUMAPOLICY-on-ppc64el.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0f61b31fbeb57cf7e47a5f0922fd2ff47b81caa7 + * debian/control: drop systemd-resolved Recommends: (LP: #1990187) + libnss-resolve was previously explicitly excluded from ubuntu-minimal, + and this Recommends: reverses that change. While here, drop + libnss-myhostname too, because it is in universe and there is no real + need for systemd-resolved to Recommends: it. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=88c134fac13b738efdcc657e160350c061d0a018 + * debian/control: set Priority: important on systemd-resolved (LP: #1990278) + Since this package used to be a part of the systemd binary package, + systemd-resolved would be installed by debootstrap by default. Retain + this previous behavior by setting Priority: important on + systemd-resolved. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1d9ca06dfe8351ed4d03073fbafa5e2212fe4fcb + + -- Nick Rosbrook Tue, 20 Sep 2022 11:19:06 -0400 + +systemd (251.4-1ubuntu5) kinetic; urgency=medium + + * enable building systemd-boot for riscv64 (LP: #1989457) + + -- Heinrich Schuchardt Tue, 13 Sep 2022 13:43:01 +0200 + +systemd (251.4-1ubuntu4) kinetic; urgency=medium + + * debian/systemd-resolved.postinst: copy existing /etc/resolv.conf on new installs (LP: #1988772) + Commit 20bc8a37fa ("Always setup /etc/resolv.conf on new installations.") + added logic to copy any existing /etc/resolv.conf to + /run/systemd/resolve/stub-resolv.conf before creating the final symlink. + When we merged the systemd-resolved package split changes from Debian, + this logic was not replicated, which has caused regressions. + Move the necessary pieces from systemd.postint to systemd-resolved.postinst + to maintain the previous /etc/resolv.conf logic. + Files: + - debian/systemd-resolved.postinst + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a34a768a929921978a67ef2192ee787255400ee5 + + -- Nick Rosbrook Tue, 06 Sep 2022 19:39:59 -0400 + +systemd (251.4-1ubuntu3) kinetic; urgency=medium + + * Fix version of backported sd_hwdb_new_from_path symbol. + The systemd-hwdb binary calling into this library is linked statically, + but we still want to keep a future proof ABI, just in case. + Files: + - debian/libsystemd0.symbols + - debian/patches/sd-hwdb-add-sd_hwdb_new_from_path.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=dee01ca169cd41e514658f8a631847c9e852e842 + + -- Lukas Märdian Thu, 01 Sep 2022 12:42:10 +0200 + +systemd (251.4-1ubuntu2) kinetic; urgency=medium + + [ Lukas Märdian ] + * Provide upgrade path (Replaces:) for Jammy's systemd-repart (LP: 1897932) + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2281670aa8007179170d5cc485bb94e3bbc3b63c + + [ Luca Boccassi ] + * resolved: switch from .links to postinst/rm (LP: #1988300) + dpkg refuses to install the symlink in chroot/container environments + where /etc/resolv.conf is bind mounted: + | Unpacking systemd-resolved (251.4-1) ... + | dpkg: error processing archive /var/cache/apt/archives/systemd-resolved_251.4-1_amd64.deb (--unpack): + | unable to make backup link of './etc/resolv.conf' before installing new version: Invalid cross-device link + So unfortunately manual handling via maintainerscripts is necessary. + Use maintainer scripts to avoid failing the installation, and provide + feedback to the user if the symlink cannot be successfully installed. + Also on removal, either copy /run/systemd/resolve/resolv.conf or + create an empty /etc/resolv.conf. + Amend to use the correct Ubuntu version string (251.4-1ubuntu2). + Author: Luca Boccassi + Files: + - debian/systemd-resolved.links + - debian/systemd-resolved.postinst + - debian/systemd-resolved.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=faf479a6158aac977c2cdb32fd1eaecc0862a7ef + * resolv.conf: take backup as a fallback + piuparts doesn't like seeing an empty resolv.conf after removing + the package, so take a backup and use it in case resolved/resolv.conf + is not available + Author: Luca Boccassi + Files: + - debian/systemd-resolved.postinst + - debian/systemd-resolved.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c2b15f43eb7779953a3dda7f461edbb1bf038701 + + [ Nick Rosbrook ] + * debian/systemd-resolved.{postinst,postrm}: do not use DPKG_ROOT. + We cherry-picked "resolved: switch from .links to postinst/rm" and + "resolv.conf: take backup as a fallback" from debian/251.4-3 to fix a + systemd-resolved installation issue, but we are not taking the DPKG_ROOT + changes at the moment due to feature freeze. + Files: + - debian/systemd-resolved.postinst + - debian/systemd-resolved.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5664be09ce9813cb2dd2bd71c5d325036655c312 + + -- Nick Rosbrook Wed, 31 Aug 2022 09:55:31 -0400 + +systemd (251.4-1ubuntu1) kinetic; urgency=medium + + * Merge 251.4-1 from Debian + - debian/rules: Keep our diff for TPM2 build on i386 + - Drop EFI build patches. + An upstream patch that covers these changes was backported to the 251 + stable branch. + Files: + - debian/patches/lp1979215-boot-efi-missing-.note.GNU-stack-section-implies-executab.patch + - debian/patches/lp1979236-boot-efi-set-no-warn-rwx-segments-on-arm.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=983b46f110b5a6e32a28b87c4b9458442624c0cd + - Drop debian/patches/units-remove-the-restart-limit-on-the-modprobe-.service.patch. + This patch was backported to the 251 stable branch. + File: debian/patches/units-remove-the-restart-limit-on-the-modprobe-.service.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=959fe326da87466775b37088e9bfd476056373ea + - debian/rules: update i386 debugedit workaround. + This linuxia32.elf.stub is shipped with systemd-boot-efi now, so update + the workaround to include that path as well. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=354f9fccc94dcb0d555329921510d5f22e62351a + * test: denylist TEST-29-PORTABLE again + File: debian/patches/test-denylist-TEST-29-PORTABLE-again.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6036de78481f8cbf3e8f3a52dac711c732d80c59 + * debian/control: add systemd-resolved to systemd's Recommends: + In Ubuntu, systemd-resolved is used by default, so after the + systemd-resolved package split, we should have a stronger relationship + than Suggests: systemd-resolved. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=400bf9dd2cf83c91f47326769eff0259429f3e0a + * debian/control: add Recommends: systemd-hwe-hwdb to udev. + The systemd-hwe-hwdb brings in additional hwdb rules for HWE, so we want + those installed with udev by default. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=148d8d9cd4c260559ad944de3427f183e04858cc + + -- Nick Rosbrook Tue, 23 Aug 2022 17:45:48 -0400 + systemd (251.4-1) unstable; urgency=medium * New upstream version 251.4 @@ -2407,6 +4706,164 @@ systemd (251.2-3) experimental; urgency= -- Luca Boccassi Wed, 08 Jun 2022 23:56:04 +0100 +systemd (251.2-2ubuntu2) kinetic; urgency=medium + + [ Lukas Märdian ] + * Remove restart limit on the modprobe@.service (LP: #1982462) + File: debian/patches/units-remove-the-restart-limit-on-the-modprobe-.service.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=46c36d4c73df8980f6b6137142fb16ba90465a94 + + [ Nick Rosbrook ] + * core,firstboot: workaround timezone issues on Ubuntu Core (LP: #1981042) + Thanks to Robert Ancell for preparing the patch. + File: debian/patches/lp1981042-core-firstboot-workaround-timezone-issues-caused-by-Ubunt.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9a435d43e753f39531c9a5517a85e8eb259e18f1 + * pstore: do not try to load mtdpstore (LP: #1981622) + File: debian/patches/lp1978079-pstore-Run-after-modules-are-loaded.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=38d8d12be924477f0eecb64f3737e07b03d73a42 + + -- Nick Rosbrook Fri, 22 Jul 2022 15:23:45 -0400 + +systemd (251.2-2ubuntu1) kinetic; urgency=medium + + [ Nick Rosbrook ] + * Merge to Ubuntu from Debian unstable + - Dropped patches (applied upstream) + + test-explicitly-configure-oomd-stuff-via-dropins.patch + + test-enable-systemd-oomd.service.patch + + linux-5.15-compat-ioprio/shared-split-out-ioprio-related-stuff-into-ioprio-util.-c.patch + + linux-5.15-compat-ioprio/variuos-add-missing-includes.patch + + linux-5.15-compat-ioprio/man-don-t-mention-IOSchedulingClass-none-anymore-in-the-d.patch + + linux-5.15-compat-ioprio/test-add-test-for-ioprio-normalization.patch + + linux-5.15-compat-ioprio/Define-ioprio_-get-set-the-same-as-other-compat-syscalls.patch + + linux-5.15-compat-ioprio/Get-rid-of-ioprio.h-and-add-a-minimalistic-reimplementati.patch + + linux-5.15-compat-ioprio/ioprio-util-add-macro-for-default-ioprio-settings.patch + + linux-5.15-compat-ioprio/ioprio-normalize-io-priority-values-in-configuration.patch + + linux-5.15-compat-ioprio/core-normalize-ioprio-values-we-acquire-from-kernel.patch + + test-also-show-the-memory-pressure-of-testchill.service.patch + + test-make-test-55-oomd-less-flaky.patch + + lp1964494-network-do-not-enable-IPv4-ACD-for-IPv4-link-local-a.patch + + lp1966381-oomd-calculate-used-memory-with-MemAvailable-instead-of-M.patch + + lp1926860-hwdb-remove-the-tablet-pad-entry-for-the-UC-Logic-1060N.patch + + oomd-move-oomctl-to-bindir.patch + + test-enable-debug-logging-of-systemd-oomd.patch + + lp1943561/Add-additional-Dell-models-that-require-ACCEL_LOCATION-ba.patch + + lp1943561/Use-SKU-to-identify-Dell-clamshell-models-for-acceleromet.patch + + lp1929345/hwdb-Force-release-calculator-key-on-all-HP-OMEN-laptops.patch + + lp1929345/hwdb-Add-force-release-for-HP-Omen-15-calculator-key.-205.patch + + sysusers-split-up-systemd.conf.patch + + hwdb-Add-mic-mute-key-mapping-for-HP-Elite-x360.patch + + test-check-memory-pressure-more-frequently.patch + + meson-minor-cleanup.patch + + units-don-t-install-dbus-org.freedesktop.oom1.service-ali.patch + + lp1950508-cgroup-check-if-any-controller-is-in-use-as-v1.patch + + lp1952735-keymap-Add-microphone-mute-keymap-for-Dell-Machine.patch + + test-tweak-parameters-for-TEST-55-OOMD.patch + + deny-list-TEST-29-PORTABLE-and-TEST-50-DISSECT.patch + + lp1955997-unmask-intel-hid-for-HP-machines.patch + + lp1952733-hwdb-60-keyboard-Update-Dell-Privacy-Micmute-Hotkey-Map.patch + + Merge-pull-request-20705-from-yuwata-test-oomd-util.patch + - Refreshed patches + + debian/Ubuntu-UseDomains-by-default.patch + + debian/UBUNTU-Support-system-image-read-only-etc.patch + + Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + + debian/UBUNTU-src-test-testmount-util.c-Skip-parts-of-test-mount-util-in-LXC.patch + + lp1950794-Revert-sd-dhcp-do-not-use-detect_container-to-guess-.patch + + 0001-Revert-tests-add-test-case-for-UMask-BindPaths-combi.patch + * Drop debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch. + This patch was originally proposed upstream in [1], but was later + superseded by [2] (which eventually got committed upstream as + 390902012c). Thus, we should not need to carry this patch anymore. + [1] https://github.com/systemd/systemd/pull/6503 + [2] https://github.com/systemd/systemd/pull/11397 + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f1b7fdbe2f1f9be35a1e7bec104e87643718e082 + * Drop Add-support-for-TuxOnIce-hibernation.patch. + This patch adds support for TuxOnIce hibernation, which requires an + out-of-tree kernel patch to be operable. Given that this functionality + is not appropriate for upstream systemd, the kernel never accepted + TuxOnIce, and the project appears to be largely unmaintained, it does + not seem appropriate to carry this patch in Ubuntu. + See [1] for original Debian discussion of this patch. + [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746463 + File: debian/patches/debian/Add-support-for-TuxOnIce-hibernation.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=33a592e26c50cb544713ae82ab42872775c2c583 + * Drop -Dtpm-pcrindex build option. + Support for this was dropped in faacf1807e8fcbee4bf60495e0145e4522d76393. + However, following discussion in [1], upstream changed the hardcoded PCR + index for kernel command line measurement from 8 to 12 in + 4d32507f5186a89e98093659fbbe386787a97b9f. Thus, there is no functional + change here. + [1] https://github.com/systemd/systemd/issues/22635 + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03464b170d5db5d2ebb77bea1f3706e55b645148 + * debian/gbp.conf: Update debian-branch to ubuntu-kinetic + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2bf42327dfda5e666d15d1a715c3403f5fbc74a3 + * Do not build with tpm libraries on i386 + libtss2-dev is not built for i386, so do not try to build against it in + that case. + Files: + - debian/control + - debian/rules + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3c48036b9d0e3fbd4b209c2312134d431da66b17 + * d/t/boot-and-services: Ignore failed snap mount units in test_no_failed + (LP: #1967576) + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=075d08b15ab944021f392cef32d3ee877e844c5c + * Skip exec-specifier-credentials-dir.service test in LXC. + This test fails in privileged LXC containers, and a set of tests are + already patched out for this reason. Refresh this patch to also skip the + new test. + File: debian/patches/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1f1f105b1ecc6b5e9f4fe1f851f4c7be6da4ef81 + * boot/efi: ignore 'missing .note.GNU-stack section implies executable stack' warning (LP: #1979215) + File: debian/patches/lp1979215-boot-efi-missing-.note.GNU-stack-section-implies-executab.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ce8112c93097bcfe99795580d3e61bd32d7e742 + * boot/efi: set --no-warn-rwx-segments on arm (LP: #1979236) + File: debian/patches/lp1979236-boot-efi-set-no-warn-rwx-segments-on-arm.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d0d97980410802ea4402b7826dc172e2ee79af31 + * pstore: Run after modules are loaded (LP: #1978079) + File: debian/patches/lp1978079-pstore-Run-after-modules-are-loaded.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=988e120566a1f2f57bc86143283c986a12f1a13a + * hwdb: implement --root option for systemd-hwdb query + Files: + - debian/libsystemd0.symbols + - debian/patches/hwdb-implement-root-option-for-systemd-hwdb-query.patch + - debian/patches/sd-hwdb-add-sd_hwdb_new_from_path.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=031d5b5cfc8ad64df5eca604314b8aeda5455def + * test: increase QEMU_MEM for some tests + File: debian/patches/test-increase-QEMU_MEM-for-some-tests.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=24a49e196d63015cc466d4d38f1cd523d87cb0be + * autopkgtest: skip CoredumpTest on s390x (LP: #1980003) + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8c8cf122ba7921f3d952688d32bd834c855f537f + * systemd-oomd: set ManagedOOMSwap=auto on -.slice (LP: #1972159) + This has the effect of disabling swap kill by default, so cgroups will + only be monitored for memory pressure, and not swap usage. + File: debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a03b493a8ffa9b39161347fae418f56f0d7dbdeb + * debian/control: drop unnecessary 'Section:' from systemd-oomd + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=546cfce76d2648d1fba7d65d70f21b44482288f4 + * autopkgtest: add libgcc-s1 for TEST-70-TPM2 + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7a9a7bcd39476088e878f7cbd79c9dab6019d056 + * test: copy libgcc_s.so.1 to TPM2 test image on Debian-like systems + File: debian/patches/test-copy-libgcc_s.so.1-to-TPM2-test-image-on-Debian-like.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8d1acca269463693f9485ed6904dd2604d3ca5dc + + [ Lukas Märdian ] + * Run tests-in-lxd autopkgtest via LXD snap, deb is no more (LP: #1976607) + Author: Lukas Märdian + Files: + - debian/tests/control + - debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b224dd958fe6260886265d170eb3d12467fbabaa + + -- Nick Rosbrook Wed, 29 Jun 2022 11:16:00 -0400 + systemd (251.2-2) unstable; urgency=medium * sha256: fix compilation on efi-ia32 @@ -2782,6 +5239,186 @@ systemd (250~rc3-1) experimental; urgenc -- Michael Biebl Tue, 21 Dec 2021 01:10:16 +0100 +systemd (249.11-0ubuntu4) kinetic; urgency=medium + + * d/p/lp1964494-network-do-not-enable-IPv4-ACD-for-IPv4-link-local-a.patch: + do not enable IPv4 ACD for IPv4 link-local address if ACD is + disabled explicitly (LP: #1964494) + + -- Dan Streetman Tue, 31 May 2022 08:25:36 -0400 + +systemd (249.11-0ubuntu3.1) jammy; urgency=medium + + [ Andy Chi ] + * Add mic mute key support for HP Elite x360 series (LP: #1967038) + Author: Andy Chi + File: debian/patches/hwdb-Add-mic-mute-key-mapping-for-HP-Elite-x360.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=45e809103de9c356c75b692d35089e8770602617 + + -- Lukas Märdian Thu, 21 Apr 2022 14:14:26 +0200 + +systemd (249.11-0ubuntu3) jammy; urgency=medium + + * oomd: calculate 'used' memory with MemAvailable instead of MemFree (LP: #1966381) + File: debian/patches/lp1966381-oomd-calculate-used-memory-with-MemAvailable-instead-of-M.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=15fc4c53d726e1dcae7296a9306cfd453fd1a046 + * hwdb: remove the tablet pad entry for the UC-Logic 1060N (LP: #1926860) + File: debian/patches/lp1926860-hwdb-remove-the-tablet-pad-entry-for-the-UC-Logic-1060N.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7bf31946a52e55f9f6ea4ecfa30e311685b20997 + + -- Nick Rosbrook Thu, 07 Apr 2022 15:28:15 -0400 + +systemd (249.11-0ubuntu2) jammy; urgency=medium + + * Fix calculator key on HP Omen, using upstream 6f2353a & 7092021 (LP: #1929345) + Files: + - debian/patches/lp1929345/hwdb-Add-force-release-for-HP-Omen-15-calculator-key.-205.patch + - debian/patches/lp1929345/hwdb-Force-release-calculator-key-on-all-HP-OMEN-laptops.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f834f64842191c7c7af450806964297babc764d5 + + -- Lukas Märdian Fri, 18 Mar 2022 17:12:07 +0100 + +systemd (249.11-0ubuntu1) jammy; urgency=medium + + * Merge 249.11 bugfix release from upstream systemd-stable + * Drop patches applied in upstream systemd-stable v249.11 + File: debian/patches/pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-1-env-var-for-dbus-da.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=67b0362ae91711e037e89ba72af947b788319be5 + * Refresh patches + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef686a8d28ab452ae4756ab2367a322be66d6262 + + -- Lukas Märdian Mon, 14 Mar 2022 10:57:42 +0100 + +systemd (249.10-0ubuntu2) jammy; urgency=medium + + * Fix deadlock between pid1 and dbus-daemon (LP: #1871538) + File: debian/patches/pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-1-env-var-for-dbus-da.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=100a7bfc2d0f82c3afbede04a022c655529cffac + * Don't override Ubuntu's default sysctl values (LP: #1962038) + File: debian/patches/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b10cdb7da3539b3a3c3e619b470a75c83e46ef11 + + -- Lukas Märdian Tue, 08 Mar 2022 14:58:00 +0100 + +systemd (249.10-0ubuntu1) jammy; urgency=medium + + [ Lukas Märdian ] + * Merge 249.10 from upstream + * Denylist 29-PORTABLE & 50-DISSECT + Files: + - debian/patches/deny-list-TEST-29-PORTABLE-and-TEST-50-DISSECT.patch + - debian/patches/deny-list-TEST-29-PORTABLE-on-ppc64el.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c16d9b8201f2321395f817e77ec07df5aef152a9 + + -- Lukas Märdian Wed, 16 Feb 2022 19:08:40 +0100 + +systemd (249.9-0ubuntu2) jammy; urgency=medium + + * Skip flaky 55-OOMD test on ppc64el + File: debian/patches/deny-list-TEST-55-OOMD-on-ppc64el.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=211f8962ce89d416c2866444e0e2da794ecd5dd1 + + -- Lukas Märdian Fri, 28 Jan 2022 10:46:41 +0100 + +systemd (249.9-0ubuntu1) jammy; urgency=medium + + [ Lukas Märdian ] + * Merge 249.7-1 from Debian + - d/rules: re-enable LTO + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=616eb2eb7d2b30e50acc9cccdc39a7264c5582fb + - Refresh and drop patches, applied upstream + Files: + - debian/patches/Merge-pull-request-20705-from-yuwata-test-oomd-util.patch + - debian/patches/lp1952599/0001-virt-Support-detection-for-ARM64-Hyper-V-guests.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=877259bfeb7106a923b3066ad2c10fba2405195e + * Merge 249.9 from upstream + - Refresh and drop patches, applied upstream + Files: + - debian/patches/CVE-2021-3997-1.patch + - debian/patches/CVE-2021-3997-2.patch + - debian/patches/CVE-2021-3997-3.patch + - debian/patches/linux-5.15-compat-ioprio/test-make-test-execute-pass-on-Linux-5.15.patch + - debian/patches/lp1952599/0002-virt-Fix-the-detection-for-Hyper-V-VMs.patch + - debian/patches/rm-rf-optionally-fsync-after-removing-directory-tree.patch + - debian/patches/rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch + - debian/patches/debian/udev-drop-SystemCallArchitectures-native-from-systemd-ude.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=21b655193a5b91415d75516e458dcc5bce8855c0 + - Disable new test case for UMask=+BindPaths= combination (LP: #1959013) + File: debian/patches/0001-Revert-tests-add-test-case-for-UMask-BindPaths-combi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5e9df936d2625c84856b101881e217064571e7e7 + * Fix build in local git tree + meson is checking `git ls-files` if built inside a git tree (dpkg-buildpackage, + gbp buildpackage) and complaining about the missing src/basic/ioprio.h file. + So we should keep that file around (empty) to avoid this failure. + File: debian/patches/linux-5.15-compat-ioprio/Get-rid-of-ioprio.h-and-add-a-minimalistic-reimplementati.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=94f21032cd1d6e9dfae8d8f892bc627dbf9b4414 + * Add lp1955997-unmask-intel-hid-for-HP-machines.patch (LP: #1955997) + File: debian/patches/lp1955997-unmask-intel-hid-for-HP-machines.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b90d59c81a1fd8a00e10147b1f5fd9bcf135d40e + * d/rules: Enable build of systemd-oomd + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f4e16926c4e146f0b106a277b5b499c78db82bcb + * d/control: Ship oomd in a systemd-oomd package. + Deploying the default configuration as used in Fedora. + Files: + - debian/control + - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf + - debian/extra/systemd-oomd-defaults/oomd.conf.d/10-oomd-defaults.conf + - debian/extra/systemd-oomd-defaults/user@.service.d/10-oomd-user-service-defaults.conf + - debian/systemd-oomd.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=771fee9e73316c92e065e93946ec64c578b43706 + * Start systemd-oomd.service after package installation + File: debian/systemd-oomd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d330cee174bd0e62a344d2aec4ec7435c9484fa2 + * Cherry-pick upstream fixes to make 55-OOMD test less flaky + Files: + - debian/patches/test-also-show-the-memory-pressure-of-testchill.service.patch + - debian/patches/test-check-memory-pressure-more-frequently.patch + - debian/patches/test-enable-debug-logging-of-systemd-oomd.patch + - debian/patches/test-make-test-55-oomd-less-flaky.patch + - debian/patches/test-tweak-parameters-for-TEST-55-OOMD.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7054dcaf04b028a092c58cf638847b2266377218 + + [ Michael Biebl ] + * oomd: move oomctl to bindir + Author: Michael Biebl + Files: + - debian/patches/oomd-move-oomctl-to-bindir.patch + - debian/systemd-oomd.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ce915c31c8daf3aec8b6d0e7b9712e21a87fa10 + * test: explicitly configure oomd stuff via dropins + Author: Michael Biebl + File: debian/patches/test-explicitly-configure-oomd-stuff-via-dropins.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=11d415ee259f5642165e64ddd5d65d344515da66 + * Don't install dbus-org.freedesktop.oom1.service symlink (Closes: #1003580) + Author: Michael Biebl + Files: + - debian/patches/debian/fsckd-daemon-for-inter-fsckd-communication.patch + - debian/patches/test-enable-systemd-oomd.service.patch + - debian/patches/units-don-t-install-dbus-org.freedesktop.oom1.service-ali.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b6df52f078fe61acf171300648f87116cf7dac74 + * autopkgtest: add systemd-oomd dependency to upstream test. + We want systemd-oomd to be tested via the upstream provided + TEST-55-OOMD. + Author: Michael Biebl + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd80b766c4194c88486ebc62ca7d02b9f41a6454 + + [ Luca Boccassi ] + * systemd-oomd: add dependency on adduser. + Needed by postinst script + Author: Luca Boccassi + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=146a97963a3a8551e9bda9fe7e726c6d2bd17cec + * systemd-oomd: fix description-synopsis-starts-with-article Lintian warning + Author: Luca Boccassi + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5dfe4f9c92e924fdda9e127b339cdccb7f1b2f58 + + -- Lukas Märdian Wed, 26 Jan 2022 08:42:00 +0100 + systemd (249.7-1) unstable; urgency=medium * New upstream version 249.7 @@ -2831,6 +5468,185 @@ systemd (249.6-1) unstable; urgency=medi -- Michael Biebl Thu, 11 Nov 2021 22:04:31 +0100 +systemd (249.5-2ubuntu4) jammy; urgency=medium + + * SECURITY UPDATE: systemd-tmpfiles could be made to crash. + - d/p/rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch: + Backport upstream patch from PR#20173 + - d/p/rm-rf-optionally-fsync-after-removing-directory-tree.patch: + Backport upstream patch required for CVE-2021-3997 patches + - d/p/CVE-2021-3997-1.patch: Backport upstream patch to refactor + rm_rf_children_inner() + - d/p/CVE-2021-3997-2.patch: Backport upstream patch to refactor + rm_rf() + - d/p/CVE-2021-3997-3.patch: Backport upstream patch to loop over + nested directories instead of using recursion + - CVE-2021-3997 + + -- Alex Murray Mon, 10 Jan 2022 10:56:19 +1030 + +systemd (249.5-2ubuntu3) jammy; urgency=medium + + * Fix Linux >= 5.15 compat (ioprio API/test-execute) + Files: + - debian/patches/linux-5.15-compat-ioprio/Define-ioprio_-get-set-the-same-as-other-compat-syscalls.patch + - debian/patches/linux-5.15-compat-ioprio/Get-rid-of-ioprio.h-and-add-a-minimalistic-reimplementati.patch + - debian/patches/linux-5.15-compat-ioprio/core-normalize-ioprio-values-we-acquire-from-kernel.patch + - debian/patches/linux-5.15-compat-ioprio/ioprio-normalize-io-priority-values-in-configuration.patch + - debian/patches/linux-5.15-compat-ioprio/ioprio-util-add-macro-for-default-ioprio-settings.patch + - debian/patches/linux-5.15-compat-ioprio/man-don-t-mention-IOSchedulingClass-none-anymore-in-the-d.patch + - debian/patches/linux-5.15-compat-ioprio/shared-split-out-ioprio-related-stuff-into-ioprio-util.-c.patch + - debian/patches/linux-5.15-compat-ioprio/test-add-test-for-ioprio-normalization.patch + - debian/patches/linux-5.15-compat-ioprio/test-make-test-execute-pass-on-Linux-5.15.patch + - debian/patches/linux-5.15-compat-ioprio/variuos-add-missing-includes.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a88474c8d9a8ea006434512905d84e42a774e1c6 + + -- Lukas Märdian Fri, 07 Jan 2022 12:28:29 +0100 + +systemd (249.5-2ubuntu2) jammy; urgency=medium + + * d/p/debian/timedatectl-lp1650688.patch, + d/p/debian/UBUNTU-Fix-timezone-setting-on-read-only-etc.patch: + Fix timedated unable to retrieve & properly set timezone on + read-only /etc (e.g. Ubuntu Core and system-image-based systems) + (LP: #1650688, LP: #1733881) + + -- Ratchanan Srirattanamet Wed, 08 Dec 2021 09:25:28 +0100 + +systemd (249.5-2ubuntu1) jammy; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes (applied upstream): + + UBUNTU-units-disable-journald-watchdog.patch + + test-Allow-running-only-a-subset-of-integration-tests-by-.patch + + hwdb-Add-ProBook-to-use-micmute-hotkey.patch + + d/p/lp1931578/*.patch (ActivationPolicy=) + + lp1932352-hwdb-Add-mic-mute-key-mapping-for-HP-Elite-Dragonfly.patch + + d/p/lp1858210/*.patch (tzdata.zi) + + lp1914740-network-enable-DHCP-broadcast-flag-if-required-by-in.patch + + lp1934981-correct-suspend-then-sleep-string.patch + + CVE-2020-13529.patch + + CVE-2021-33910.patch + + Merge-pull-request-20199-from-ddstreet-unit_cgroup_catchu.patch + + udev-fix-slot-based-network-names-on-s390.patch + + udev-add-missing-initialization-to-fix-freeing-invalid-ad.patch + + udev-allow-onboard-index-up-to-65535.patch + + lp1940635.patch (networkd failed to acquire a DHCP6 lease, v249.5) + * debian/gbp.conf: Update debian-branch to ubuntu-jammy + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f35b4d6c0653c3125b2e0e5d962f84543733c3c0 + * Refresh Ubuntu-UseDomains-by-default.patch + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6e3b2ffb1c2c2bf2223f91b350c1fd06b8903346 + * Refresh UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7142fb9381ab98d750a7c2473087ea7264be860d + * Refresh UBUNTU-Revert-cgroup-Continue-unit-reset-if-cgroup-is-busy.patch + File: debian/patches/debian/UBUNTU-Revert-cgroup-Continue-unit-reset-if-cgroup-is-busy.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3de0f444bfc0cf3b601c4a1ad8939d2cd69cdad6 + * Refresh UBUNTU-resolved-default-no-negative-caching.patch + File: debian/patches/debian/UBUNTU-resolved-default-no-negative-caching.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d7b25651ea7ceae2ebfeafb84d9d65fb8284367a + * Refresh Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + File: debian/patches/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=61b004d7710b305d9996b3ad9bb47dc372fcbbac + * Refresh UBUNTU-src-test-testmount-util.c-Skip-parts-of-test-mount-util-in-LXC.patch + File: debian/patches/debian/UBUNTU-src-test-testmount-util.c-Skip-parts-of-test-mount-util-in-LXC.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5fe343a0fc89771820f997c2d6621ac517d9070f + * Refresh Merge-pull-request-20705-from-yuwata-test-oomd-util.patch + File: debian/patches/Merge-pull-request-20705-from-yuwata-test-oomd-util.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e88125e4580e29ccc4417464301d68a23f313415 + * Refresh patches/offset, using gbp + Files: + - debian/patches/debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch + - debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + - debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + - debian/patches/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch + - debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + - debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + - debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + - debian/patches/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch + - debian/patches/lp1894622-Add-systemd-resolve-backwards-compatibility-section-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd33ff25c6aa25f33054053c06f2936d51e8f645 + * debian/rules: Fix FTBFS on i386 by removing unneeded linuxia32.elf.sub to avoid + debugedit errors + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=381cc855978f441f6f45f215a7c864e61d67ab0a + * debian/control: cleanup (upstart is no more) + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e93509e1970ee170e4a4ed655c55f55446e4078d + * debian/systemd.NEWS: re-add comment about cgroups v2 + File: debian/systemd.NEWS + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51a7a11dba9a6248b8575c05c00e70aa6b9141fb + * debian/rules: explicitly enable default-hierarchy=unified + to stay in line with Debian + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b6804a5aee1bcf1dfd3415c048cbf94d482652a2 + * debian/udev.postinst: Drop old 'getent group kvm' workaround + File: debian/udev.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=081fddb76415eb959fd898b503eec0354d44fb31 + * d/t/boot-and-services: skip test_service, broken on kernel > 5.10 + (systemd#20989) + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ca6fbb84ccd09c4e199dec9fd9536c0b3637bc5 + * d/t/tests-in-lxd: account for different locations of source tree + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f454c89619915566af2644b14eada41075631f6a + * d/t/control: fix upstream* test dependencies + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ca404329f73f90316241680985ee8721d27d6092 + * d/t/tests-in-lxd: work around systemd-sysusers issue on privileged containers + (LP: #1950787) + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d4e05ecbc1a32d2e6d454c05a2899058c3a04bac + * Drop units-Don-t-start-systemd-udev-trigger.service-in-a-conta.patch + we do run udevd in our containers and actually rely on udevadm trigger + happening on boot for the udev database to populate with the relevant + network devices that are present in the container + It was added when systemd upstream made udevadm trigger more picky + (would fail when it used to succeed), but they now have failures from udevadm + ignored in the upstream unit + making this patch un-necessary and actually harmful to those running Ubuntu in + system containers + File: debian/patches/units-Don-t-start-systemd-udev-trigger.service-in-a-conta.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ba89ae0b007e1fed3d9e1b2aefa86cf9c6e7a022 + * Drop lp1894622-Add-systemd-resolve-backwards-compatibility-section-.patch. + The systemd-resolve symlink for backwards compatibility is no more as of v249 + File: debian/patches/lp1894622-Add-systemd-resolve-backwards-compatibility-section-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c26f6843f498966e8506e71870255b627fcbd7c7 + * Revert: sd-dhcp: do not use detect_container() to guess udev is running or not + (LP: #1950794) + File: debian/patches/lp1950794-Revert-sd-dhcp-do-not-use-detect_container-to-guess-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=794597758ac9527b81696bb785d99cd2ddfa2707 + * Support detection for ARM64 Hyper-V guests (LP: #1952599) + Files: + - debian/patches/lp1952599/0001-virt-Support-detection-for-ARM64-Hyper-V-guests.patch + - debian/patches/lp1952599/0002-virt-Fix-the-detection-for-Hyper-V-VMs.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=57f51781646327832f15294368842da015f3c433 + + [ Yao Wei ] + * Add ACCEL_LOCATION=base property for Dell clamshell models (LP: #1943561) + Files: + - debian/patches/lp1943561/Add-additional-Dell-models-that-require-ACCEL_LOCATION-ba.patch + - debian/patches/lp1943561/Use-SKU-to-identify-Dell-clamshell-models-for-acceleromet.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9f99081482b76a7b717e39ef4380f08093e4359a + + [ Andy Chi ] + * Add privacy micmute hotkey for Dell machine. (LP: #1952733) + File: debian/patches/lp1952733-hwdb-60-keyboard-Update-Dell-Privacy-Micmute-Hotkey-Map.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e590db02f015a0e999909b67e0cefbb4295c53a5 + * Add microphone mute key for Dell machine. (LP: #1952735) + File: debian/patches/lp1952735-keymap-Add-microphone-mute-keymap-for-Dell-Machine.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03799d7649fd5e0dae226c81441932d19cb6cc36 + + [ Dan Streetman ] + * d/p/lp1950508-cgroup-check-if-any-controller-is-in-use-as-v1.patch: + Use cgroupv1 in container if host using cgroupv1 + (LP: #1950508) + + -- Lukas Märdian Thu, 02 Dec 2021 10:16:33 +0100 + systemd (249.5-2) unstable; urgency=medium [ Helmut Grohne ] @@ -2990,6 +5806,163 @@ systemd (249~rc1-1) experimental; urgenc -- Michael Biebl Thu, 17 Jun 2021 18:09:43 +0200 +systemd (248.3-1ubuntu8) impish; urgency=medium + + [ Dan Streetman ] + * d/p/dell-clamshell-accel-location-base-with-sku.patch: + Revert incorrect patch (LP: #1942899) + + [ Lukas Märdian ] + * Add d/p/Merge-pull-request-20705-from-yuwata-test-oomd-util.patch + Replace lp1942113.patch with upstream commit 54966b7 (LP: #1942113) + Files: + - debian/patches/lp1942113.patch + - debian/patches/Merge-pull-request-20705-from-yuwata-test-oomd-util.patch + * Drop snapd cgroupv2 workaround, not needed anymore as of snapd 2.53~pre1 + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f9f340f74abdc4060cfd27a7cb3001929b6f9cf4 + + -- Lukas Märdian Mon, 04 Oct 2021 11:23:28 +0200 + +systemd (248.3-1ubuntu7) impish; urgency=medium + + * d/tests/tests-in-lxd: suppress the cgroups v2 warning on stderr from + lxd/lxc even more comprehensively until the snapd change required to + do it nicely gets into a release. + + -- Michael Hudson-Doyle Wed, 01 Sep 2021 19:21:58 +1200 + +systemd (248.3-1ubuntu6) impish; urgency=medium + + * Replace my patch in previous upload with upstream's functionally similar + but much more elegant fix. + * d/patches/lp1942113.patch: Do not run a test that fails in a container + (this has only started running because 248.3-1ubuntu4 changed to default + to a unified cgroups hierarchy). (LP: #1942113) + + -- Michael Hudson-Doyle Tue, 31 Aug 2021 22:59:13 +1200 + +systemd (248.3-1ubuntu5) impish; urgency=medium + + * d/patches/lp1940635.patch: Pass a larger control message buffer to recvmsg + in icmp6_receive to have enough room for glibc 2.34's timestamp + translation games. (LP: #1940635) + + -- Michael Hudson-Doyle Sun, 29 Aug 2021 23:11:50 +1200 + +systemd (248.3-1ubuntu4) impish; urgency=medium + + [ Yao Wei ] + * d/p/dell-clamshell-accel-location-base-with-sku.patch: + Use SKU to identify Dell clamshell models for accelerometer properties + (LP: #1938259) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d02cab1a9aad017b68ca1117bf3f0bbcb1b9315c + + [ Simon Chopin ] + * d/p/lp1914740-network-enable-DHCP-broadcast-flag-if-required-by-in.patch: + - Apply upstream patch to fix Hipersocket DHCP mode (LP: #1914740) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9e20d2f9d70b25782bdd1c7dbec0d179604b88cc + + [ Dan Streetman ] + * d/p/lp1934981-correct-suspend-then-sleep-string.patch: + Fix sleep verb used by logind during suspend-then-hibernate + (LP: #1934981) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b09083d520fecd57ebe28319ad7638442db2e2bd + * d/p/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch: + Revert patch, no reason to diverge from upstream on these sysctl settings + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8959a2640c631f026988f1fef6b1a825af6c97dd + + [ Lukas Märdian ] + * Use upstream's default -Ddefault-hierarchy=unified. (LP: #1850667) + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=93ba352792db14b3d21d12909b3b6f8a1165c5de + * tests: hide snapd cgroupv2 warning. + Pending release of PR https://github.com/snapcore/snapd/pull/10589 + but it won't hurt to have it in there anyways. + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c06736c1fb90d976fe5cd520b97c0272ef8fcc64 + * Add d/p/Merge-pull-request-20199-from-ddstreet-unit_cgroup_catchu.patch + File: debian/patches/Merge-pull-request-20199-from-ddstreet-unit_cgroup_catchu.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=57ab55efaee92466bd5dbf046badc623188d254b + * Add RoCE: Predictable Interface Names (LP: #1929184) + Files: + - debian/patches/udev-add-missing-initialization-to-fix-freeing-invalid-ad.patch + - debian/patches/udev-allow-onboard-index-up-to-65535.patch + - debian/patches/udev-fix-slot-based-network-names-on-s390.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=44d2c4bef78a2cbaeaad9acd512dad89d272489c + + -- Lukas Märdian Tue, 17 Aug 2021 12:05:30 +0200 + +systemd (248.3-1ubuntu3) impish; urgency=medium + + * SECURITY UPDATE: DoS via DHCP FORCERENEW + - debian/patches/CVE-2020-13529.patch: tentatively ignore FORCERENEW + command in src/libsystemd-network/sd-dhcp-client.c. + - CVE-2020-13529 + * SECURITY UPDATE: denial of service via stack exhaustion + - debian/patches/CVE-2021-33910.patch: do not use strdupa() on a path + in src/basic/unit-name.c. + - CVE-2021-33910 + + -- Marc Deslauriers Tue, 20 Jul 2021 11:35:20 -0400 + +systemd (248.3-1ubuntu2) impish; urgency=medium + + [ Kai-Heng Feng ] + * d/p/hwdb-Add-ProBook-to-use-micmute-hotkey.patch: + - Add ProBook to use micmute hotkey (LP: #1930910) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=30b96fac92d911cb725f7220a9539085a24fe5f7 + + [ Jeremy Szu ] + * d/p/lp1932352-hwdb-Add-mic-mute-key-mapping-for-HP-Elite-Dragonfly.patch: + - Fix micmute hotkeys on HP Elite Dragonfly (LP: #1932352) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ac93cfcca200644b743deab94f655ccd74ff90a6 + + [ Dan Streetman ] + * d/p/debian/UBUNTU-resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch: + Remove no-longer-needed patch for DVE-2018-0001 (LP: #1785383) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=943b2dd5884e67c67d6336c24352b02e17809df0 + * d/p/lp1931578/0001-network-default-RequiredForOnline-false-if-Activacti.patch, + d/p/lp1931578/0002-networkctl-add-field-Required-For-Online.patch, + d/p/lp1931578/0003-test-add-test-to-verify-RequiredForOnline-setting-wi.patch: + Adjust default for RequiredForOnline when using ActivationPolicy + (LP: #1931578) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d0b8629ec14396f1a5d5f7c132c9b687065136b0 + * d/p/lp1894622-Add-systemd-resolve-backwards-compatibility-section-.patch: + Add man page symlink and deprecation notice for systemd-resolve + (LP: #1894622) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f719185253f989d6708c894150c0878cabee6589 + * d/p/lp1858210/0001-time-simplify-get_timezones.patch, + d/p/lp1858210/0002-time-split-get_timezone-into-main-function-and-zone1.patch, + d/p/lp1858210/0003-time-get-timezones-from-tzdata.zi.patch: + Parse tzdata.zi so timedatectl list-timezones also lists aliases + (LP: #1858210) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8e5b0a7c7c4e1e29b5e81511a1145633d9b75be5 + + -- Dan Streetman Tue, 06 Jul 2021 13:37:59 -0400 + +systemd (248.3-1ubuntu1) impish; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * tests: Skip test-execute in containers + * debian/tests/root-unittests: Skip newly failing test-mount-utils in LXC + * Deny-list flaky TEST-10-ISSUE-2467 on all architectures + Files: + - debian/patches/debian/UBUNTU-deny-list-TEST-10-ISSUE-2467.patch + - debian/patches/deny-list-upstream-test-10-s390x.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8490979f8f69214c0764d3ec882fe1339fb30323 + * debian/tests/unit-tests: Skip part of test-mount-util which fail in LXC. + The whole test-mount-util test used to be skipped before. (LP: 1878051) + File: debian/patches/debian/UBUNTU-src-test-testmount-util.c-Skip-parts-of-test-mount-util-in-LXC.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=dd2bee75e34c3b0ccd884b4ce594c1ef301149db + * debian/tests/unit-tests: Skip parts of test-execute in LXC to pass. + The whole test-execute test used to be skipped before. (LP: 1878051) + File: debian/patches/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=65fdc9a4bdb91bc261f112ab51abcd77781f0520 + + -- Balint Reczey Fri, 21 May 2021 18:50:58 +0200 + systemd (248.3-1) experimental; urgency=medium [ Michael Biebl ] @@ -3003,6 +5976,37 @@ systemd (248.3-1) experimental; urgency= -- Michael Biebl Wed, 19 May 2021 13:09:57 +0200 +systemd (248.2-1ubuntu1) impish; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * Many cherry-picked upstream fixes: + - debian/patches/0001-hwdb-60-keyboard-Update-Dell-Privacy-Micmute-Hotkey-.patch + - debian/patches/lp1887744-basic-unit-file-when-loading-linked-unit-files-use-l.patch + - debian/patches/lp1906331-sd-event-ref-event-loop-while-in-sd_event_prepare-ot.patch + - debian/patches/lp1907306/* + - debian/patches/lp1914062-udevadm-don-t-return-early.patch + - debian/patches/lp1917458-udev-rules-add-rule-to-create-dev-ptp_hyperv.patch + - debian/patches/lp1921696/rfkill-improve-error-logging.patch + - debian/patches/lp1921696/rfkill-use-short-writes-and-accept-long-reads.patch + * debian/tests/root-unittests: Skip newly failing test-mount-utils in LXC + File: debian/tests/root-unittests + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=02e0d518ea9e40e81c4693dd49eec1c9aab736e7 + * Merge lp1895418.patch to UBUNTU-resolved-default-no-negative-caching.patch + Files: + - debian/patches/debian/UBUNTU-resolved-default-no-negative-caching.patch + - debian/patches/test-Allow-running-only-a-subset-of-integration-tests-by-.patch + - debian/patches/lp1895418.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b285544ed5e3233abc54493defe65bd7525729e5 + * Deny-list TEST-10-ISSUE-2467 again on s390x because it is flaky + File: debian/patches/deny-list-upstream-test-10-s390x.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a85a3471d2ef6a9dbd4e2dee90abc3d52fb5c78e + * Deny-list TEST-29-PORTABLE on ppc64el + File: debian/patches/deny-list-TEST-29-PORTABLE-on-ppc64el.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=42479a9ba8c4dc7a81266b6679ac1853307bfb67 + + -- Balint Reczey Thu, 13 May 2021 18:08:29 +0200 + systemd (248.2-1) experimental; urgency=medium * New upstream version 248.2 @@ -3153,6 +6157,32 @@ systemd (247.3-6) unstable; urgency=high -- Salvatore Bonaccorso Tue, 13 Jul 2021 19:29:24 +0200 +systemd (247.3-5ubuntu1) impish; urgency=medium + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * LoadCredentials: do not assert on invalid syntax (now present in Debian) + * debian/tests: Split upstream test to two parts. + The test can take very long time and may time out as it could be + observed in Ubuntu's CI system many times. + Files: + - debian/tests/control + - debian/tests/upstream + - debian/tests/upstream-1 + - debian/tests/upstream-2 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a7f894c42d650e3ec62c88c34bdd693a9dfd8df6 + * debian/gbp.conf: Update debian-branch to ubuntu-impish + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=98449bf7530b1b834ba71c80c1a58f2e3909c668 + + [ Andy Chi ] + * Apply upstream patch to correct key and device mapping (LP: #1926547) + File: debian/patches/0001-hwdb-60-keyboard-Update-Dell-Privacy-Micmute-Hotkey-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0ad362c1975705805c94a17e1887cd3982cc192f + + -- Balint Reczey Tue, 04 May 2021 14:20:02 +0200 + systemd (247.3-5) unstable; urgency=medium * udev-udeb: setup /dev/fd, /dev/std{in,out,err} symlinks. @@ -3177,6 +6207,35 @@ systemd (247.3-4) unstable; urgency=medi -- Michael Biebl Sun, 11 Apr 2021 16:06:46 +0200 +systemd (247.3-3ubuntu3) hirsute; urgency=medium + + * Make systemd-rfkill work with latest Linux kernels (LP: #1921696) + Files: + - debian/patches/lp1921696/rfkill-improve-error-logging.patch + - debian/patches/lp1921696/rfkill-use-short-writes-and-accept-long-reads.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7fc7bece33c21b155822ef6640adffb0e703da50 + * LoadCredentials: do not assert on invalid syntax + File: debian/patches/LoadCredentials-do-not-assert-on-invalid-syntax.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5e7f913d0fd36b0800a8d99f809f61d263200343 + + -- Balint Reczey Wed, 07 Apr 2021 17:57:49 +0200 + +systemd (247.3-3ubuntu2) hirsute; urgency=medium + + [ Dan Streetman ] + * d/p/lp1887744-basic-unit-file-when-loading-linked-unit-files-use-l.patch: + Use src name, not dst name, of symlinked unit files (LP: #1887744) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=667a881ab3bace6c4a7550067d4ecf2e4b9ece82 + + -- Balint Reczey Mon, 29 Mar 2021 12:22:06 +0200 + +systemd (247.3-3ubuntu1) hirsute; urgency=medium + + * Merge to Ubuntu from Debian unstable + * Bugfix only upload + + -- Balint Reczey Wed, 17 Mar 2021 13:12:43 +0100 + systemd (247.3-3) unstable; urgency=medium * pkg-config: make prefix overridable again (Closes: #984763) @@ -3189,8 +6248,16 @@ systemd (247.3-3) unstable; urgency=medi -- Michael Biebl Thu, 11 Mar 2021 18:09:35 +0100 +systemd (247.3-2ubuntu1) hirsute; urgency=medium + + * Merge to Ubuntu from Debian unstable + * Bugfix only upload + + -- Balint Reczey Wed, 10 Mar 2021 15:09:55 +0100 + systemd (247.3-2) unstable; urgency=medium + [ Michael Biebl ] * Downgrade a couple of warnings to debug. If a package still ships only a SysV init script or if a service file or tmpfile uses /var/run, downgrade those messages to debug. We can use @@ -3209,7 +6276,92 @@ systemd (247.3-2) unstable; urgency=medi * table: drop trailing white spaces of the last cell in row (Closes: #980820) - -- Michael Biebl Sat, 06 Mar 2021 22:32:14 +0100 + -- Balint Reczey Wed, 10 Mar 2021 15:01:50 +0100 + +systemd (247.3-1ubuntu4) hirsute; urgency=medium + + [ Dimitri John Ledkov ] + * d/p/debian/UBUNTU-resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch: + Patch updated to reduce log level to debug + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=299002546ec2d62e7f0dd7d614ba958fc9df83c2 + + [ Dan Streetman ] + * d/p/lp1906331-sd-event-ref-event-loop-while-in-sd_event_prepare-ot.patch: + Take event reference while processing (LP: #1906331) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1bc38abcd3b62d317fcb62b72e26d9cb2e35ccf9 + * d/p/lp1917458-udev-rules-add-rule-to-create-dev-ptp_hyperv.patch: + Create symlink for hyperv-provided ptp device (LP: #1917458) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8f1ee790ad66395457ca64cb5f8a01fdd8aabe47 + + [ Balint Reczey ] + * Pick proposed patch for not returning early in udevadm (LP: #1914062) + File: debian/patches/lp1914062-udevadm-don-t-return-early.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d8c80751a97b0c6c4df972f6f8325293aa1607c4 + * debian/tests/control: Mark systemd-fsckd flaky again. + As promised in LP: 1915126, until further investigation. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=68fbaab272af81aab29497f7c6a3e4e6e9aa091b + + -- Balint Reczey Thu, 04 Mar 2021 12:19:05 +0100 + +systemd (247.3-1ubuntu3) hirsute; urgency=medium + + * No-change rebuild to drop the udeb package. + + -- Matthias Klose Mon, 22 Feb 2021 10:36:23 +0100 + +systemd (247.3-1ubuntu2) hirsute; urgency=medium + + [ Stéphane Graber ] + * Revert the change to udevd service and sockets. They must start in LXC. + LXD containers do have proper uevent handling and actively send + uevents for udevd to handle. + + -- Balint Reczey Thu, 11 Feb 2021 18:50:13 +0100 + +systemd (247.3-1ubuntu1) hirsute; urgency=medium + + [ Dan Streetman ] + * d/p/lp1907306/0001-sd-dhcp-client-don-t-log-timeouts-if-already-expired.patch, + d/p/lp1907306/0002-sd-dhcp-client-track-dhcp4-t1-t2-expire-times.patch, + d/p/lp1907306/0003-sd-dhcp-client-add-RFC2131-retransmission-details.patch, + d/p/lp1907306/0004-sd-dhcp-client-simplify-dhcp4-t1-t2-parsing.patch, + d/p/lp1907306/0005-sd-dhcp-client-correct-dhcpv4-renew-rebind-retransmi.patch, + d/p/lp1907306/0006-sd-dhcp-client-correct-retransmission-timeout-to-mat.patch, + d/p/lp1907306/0007-test-network-increase-wait_online-timeout-to-handle-.patch, + d/p/lp1907306/0008-sd-dhcp-client-fix-renew-rebind-timeout-calculation-.patch: + Send correct number of dhcpv4 renew and rebind requests + (LP: #1907306) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9454c4cb1b85f6f6945a29b6860e0747432318a1 + * d/t/root-unittests: + Remove any corrupt journal files (LP: #1881947) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c4f2a65d53972eec7d4cf46facb9f72e989e3af2 + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * test: use modern qemu numa arguments + * Switch default hierarchy (back) to hybrid again because snapd is not ready + yet (LP: 1850667) + Files: + - debian/rules + - debian/systemd.NEWS + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4976b9474aa3b3b2587bb805472b8c37a4574346 + * Drop reverts that used to keep netplan.io's autopkgtest happy + Files: + - debian/patches/Revert-network-fix-assertion-when-link-get-carrier.patch + - debian/patches/Revert-network-prevent-interfaces-to-be-initialized-multi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=23340d4608eb9f281ecc47f7356b40f2ac8db540 + * Fall back to device name when net_get_name(device) fails again, dropping + the patch to skip it + File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=34cfe66296463dcc8ad9ebe07add846dd955fedc + * Don't start udevd service and sockets in LXC. + LXC mounts /sys in read-write mode unlike other containers. (LP: #1914062) + File: debian/patches/debian/UBUNTU-Don-t-start-udevd-service-and-sockets-in-LXC.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fa63ef6891eff6762509b322429687d4d506bdb2 + + -- Balint Reczey Wed, 10 Feb 2021 20:21:08 +0100 systemd (247.3-1) unstable; urgency=medium @@ -3297,6 +6449,38 @@ systemd (247.2-1) unstable; urgency=medi -- Michael Biebl Sun, 20 Dec 2020 20:44:31 +0100 +systemd (247.1-4ubuntu1) hirsute; urgency=medium + + [ Dan Streetman ] + * d/p/lp1905044-test-use-cap_last_cap-for-max-supported-cap-number-n.patch: + Fix test use of new cap numbers with 5.8 kernel (LP: #1905044) + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d55c6f8186cb2cb73f61d6ff5b2e0ded82ef265c + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + * Refresh patches + - Dropped changes: + * debian/patches/dhcp-Allow-setting-request-options-again.patch + (Upstream code has been changed in a similar way) + * debian/patches/Revert-network-do-not-drop-foreign-config-if-interface-is.patch + debian/patches/network-Set-link-state-to-LINK_STATE_PENDING-instead-of-t.patch + (Revert-network-prevent-interfaces-to-be-initialized-multi.patch is still kept) + * debian/patches/lp1845909/0002-network-add-link-setting_genmode-flag.patch + * d/p/lp1905044-test-use-cap_last_cap-for-max-supported-cap-number-n.patch + (Present in upstream 247.) + * debian/udev.NEWS: Mention udev rules changes in 247 + File: debian/udev.NEWS + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9f33f19683c2b864384c2ae59b312b2c844ed633 + * Don't start systemd-udev-trigger.service in containers. + It fails and is not likely to be useful. + File: debian/patches/units-Don-t-start-systemd-udev-trigger.service-in-a-conta.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7b04fe5f98a4d204f73a1ec22884b9b3053a9a82 + * test: use modern qemu numa arguments (LP: #1908259) + File: debian/patches/test-use-modern-qemu-numa-arguments.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=158106e74d452cf6cd5cd737432cbe6b7d47286c + + -- Balint Reczey Wed, 16 Dec 2020 10:27:06 +0100 + systemd (247.1-4) unstable; urgency=medium [ наб ] @@ -3393,6 +6577,16 @@ systemd (247~rc2-1) experimental; urgenc -- Michael Biebl Thu, 12 Nov 2020 21:23:22 +0100 +systemd (246.6-5ubuntu1) hirsute; urgency=medium + + * Merge from Debian unstable + * debian/control: Make udev break systemd (<< ${binary:Version}) + This ensures upgrading systemd as well when upgrading udev + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9e52d28054c2c1ba118014ad9442189d7039f871 + + -- Balint Reczey Fri, 27 Nov 2020 15:55:01 +0100 + systemd (246.6-5) unstable; urgency=medium * Drop non-functional DefaultTasksMax patch. @@ -3439,6 +6633,35 @@ systemd (246.6-3) unstable; urgency=medi -- Michael Biebl Tue, 17 Nov 2020 23:34:07 +0100 +systemd (246.6-2ubuntu1) hirsute; urgency=medium + + [ Dan Streetman ] + * d/t/boot-smoke: update test to avoid false negatives + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=205c30ca53b0e421db28bb56afaf5f88650ce592 + * d/t/boot-and-services: remove unneeded test lines + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=71853082af4e668996db574915c5a156f9897fd3 + * d/t/systemd-fsckd: rewrite test to try to fix false negatives (LP: #1892358) + Files: + - debian/tests/control + - debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ae6be039ec582410769d2d6d131e12bdcd19a68 + + [ Balint Reczey ] + * debian/gbp.conf: Update debian-branch to ubuntu-hirsute + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0b78512dbb5141458468ba5e9c2a4e966ada088 + * Merge from Debian unstable + - Move sysusers.d/sysctl.d/binfmt.d/modules-load.d back to /usr + (LP: #1897620) + * debian/tests/systemd-fsckd: Plymouth-start stays active in 20.10 and later + (LP: #1892358) + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c46eda821e97df5595a4cdc5f5c41a9b49a51745 + + -- Balint Reczey Thu, 29 Oct 2020 18:38:15 +0100 + systemd (246.6-2) unstable; urgency=medium * XDG autostart improvements @@ -3461,6 +6684,28 @@ systemd (246.6-2) unstable; urgency=medi -- Michael Biebl Thu, 15 Oct 2020 23:48:34 +0200 +systemd (246.6-1ubuntu1) groovy; urgency=medium + + [ Dan Streetman ] + * Fix resolved.conf Cache= default to match default (LP: #1895418) + Files: + - debian/patches/lp1895418.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=dd4d93d94ebe2cf416f6b5a5eb59a16432cbc47b + + [ Balint Reczey ] + * Bugfix-only upload + * Merge from Debian unstable + - core: propagate unit start limit hit state to triggering path unit (LP: #1891657) + * Skip test_rsyslog in s390x containers. + The test is failing almost all the time. (LP: #1895576) + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ff8d286de52daa8b0856213ae52e66b81474fb57 + * debian/tests/tests-in-lxd: Don't create the lxd test image twice + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e858e7c41b84bc4c34e8af79d6e4b6114fe23952 + + -- Balint Reczey Thu, 24 Sep 2020 21:27:11 +0200 + systemd (246.6-1) unstable; urgency=medium * New upstream version 246.6 @@ -3468,8 +6713,16 @@ systemd (246.6-1) unstable; urgency=medi -- Michael Biebl Mon, 21 Sep 2020 20:28:36 +0200 +systemd (246.5-1ubuntu1) groovy; urgency=medium + + * Bugfix-only upload + * Merge from Debian unstable + + -- Balint Reczey Mon, 14 Sep 2020 13:01:29 +0200 + systemd (246.5-1) unstable; urgency=medium + [ Michael Biebl ] * New upstream version 246.5 - network: fix NDisc handling for the case when multiple routers exist (Closes: #969599) @@ -3477,7 +6730,23 @@ systemd (246.5-1) unstable; urgency=medi (Closes: #970156) * Rebase patches - -- Michael Biebl Mon, 14 Sep 2020 08:04:39 +0200 + -- Balint Reczey Mon, 14 Sep 2020 13:01:26 +0200 + +systemd (246.4-1ubuntu1) groovy; urgency=medium + + * Bugfix-only upload + * Merge from Debian unstable + - Changes dropped from Ubuntu delta: + * test: accept that char device 0/0 can now be created witout privileges. + * cherry-pick from stable: network: only process non-error message + * network: wait for previous address removal before configuring static + addresses. + * network: do not fail if UseMTU=yes on DHCP lease lost + * debian/systemd.postinst: Restart systemd-networkd.socket on incompatible + change + * Add riscv64 seccomp support. + + -- Balint Reczey Wed, 02 Sep 2020 19:07:27 +0200 systemd (246.4-1) unstable; urgency=medium @@ -3513,6 +6782,42 @@ systemd (246.2-2) unstable; urgency=medi -- Michael Biebl Sat, 29 Aug 2020 16:24:49 +0200 +systemd (246.2-1ubuntu1) groovy; urgency=medium + + * Merge from Debian unstable + * Refresh patches + * test: accept that char device 0/0 can now be created witout privileges. + This fixes tests with Linux 5.8 and later (LP: #1891527) + Files: + - debian/patches/debian/Add-env-variable-for-machine-ID-path.patch + - debian/patches/test-accept-that-char-device-0-0-can-now-be-created-witou.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=57909a0fa4999ba9ff918cfe6bb3fa53c230dd36 + * debian/tests/systemd-fsckd: Fail plymouth-start with overriding ExecStart= + The 'process-killer' stopped working with plymouth 0.9.5 (LP: #1886886) + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=efcc25b6011f23b9f90841f4ca0ee29ee674157f + * cherry-pick from stable: network: only process non-error message + File: debian/patches/network-only-process-non-error-message.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=dc97e3f5330ae64909ef640ad1ac401374f18c16 + * network: wait for previous address removal before configuring static addresses. + Fixes systemd-networkd to establish connection after resume from suspend + Files: + - debian/patches/network-wait-for-previous-address-removal-before-configur.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31390403bc000892ada9cb0cbedb198dd83fe7a2 + * network: do not fail if UseMTU=yes on DHCP lease lost + File: debian/patches/network-do-not-fail-if-UseMTU-yes-on-DHCP-lease-lost.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=21c23966e8dc5fd0858664a5b89d6a9460c41f61 + * debian/systemd.postinst: Restart systemd-networkd.socket on incompatible change + (Closes: #968589) (LP: #1891716) + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e144a644488c6ff52c2bb7cee71f50aa95c4efd8 + * debian/tests/control: Mark systemd-fsckd test as flaky. + It is flaky on Ubuntu CI infrastructure (LP: #1892358) + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8c55289624c6f44beb2c5bbae78aabc074d36b1a + + -- Balint Reczey Thu, 20 Aug 2020 23:37:48 +0200 + systemd (246.2-1) unstable; urgency=medium * New upstream version 246.2 @@ -3543,6 +6848,45 @@ systemd (246.1-1) unstable; urgency=medi -- Michael Biebl Sun, 16 Aug 2020 13:14:46 +0200 +systemd (246-2ubuntu1) groovy; urgency=medium + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * core: set /run size to 10%, like initramfs-tools does. + This is now upstream's default, also setting other limits + * UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + * Lock swap blockdevice while calling mkswap + * Cherry-pick reversion of detecting WSL by the presence of "microsoft" + in osrelease + * journald: stream pid change newline fix + * network: Change IgnoreCarrierLoss default to value of + ConfigureWithoutCarrier. + * network: do not re-attach sd-event object + * network: attach sd-event in link_load() when creating link dhcp_client + or ipv4ll + * debian/rules: Configure LLMNR and MulticastDNS to be disabled by default + instead of using a carried patch, like before. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a186cce127ee1d2b0288e4db1470e45a2b1914d9 + * debian/rules: Configure LLMNR and MulticastDNS to be disabled by default + instead of using a carried patch, like before. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a186cce127ee1d2b0288e4db1470e45a2b1914d9 + + [ Dimitri John Ledkov ] + * dhclient-enter-hooks.d/resolved: drop in favor of exit hooks shipped elsewhere. + isc-dhcp / ifupdown now ship the hooks themselves to push DNS data to + resolved. Thus enter hook no longer required. (LP: #1890609) + Files: + - debian/control + - debian/rules + - debian/systemd.maintscript + - debian/extra/dhclient-enter-resolved-hook + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97b9397e0ac23c4975cbd13ec6ae8d2f9bc48c92 + + -- Balint Reczey Thu, 06 Aug 2020 17:13:31 +0200 + systemd (246-2) unstable; urgency=medium * Upload to unstable @@ -3560,6 +6904,17 @@ systemd (246-1) experimental; urgency=me -- Michael Biebl Thu, 30 Jul 2020 22:22:24 +0200 +systemd (245.7-1ubuntu1) groovy; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * basic/cap-list: Print unknown capabilities in hexadecimal + * hwdb: Mask rfkill event from intel-hid on HP platforms + * networkd: if RA was implicit, do not await ndisc_configured + (upstream's #15469 fixed the delay differently) + + -- Balint Reczey Fri, 31 Jul 2020 13:05:33 +0200 + systemd (245.7-1) unstable; urgency=medium [ Michael Biebl ] @@ -3576,6 +6931,30 @@ systemd (245.7-1) unstable; urgency=medi -- Michael Biebl Mon, 27 Jul 2020 23:24:47 +0200 +systemd (245.6-3ubuntu3) groovy; urgency=medium + + * Rebuild against libselinux 3.0 + + -- Balint Reczey Thu, 16 Jul 2020 16:54:53 +0200 + +systemd (245.6-3ubuntu2) groovy; urgency=medium + + * basic/cap-list: Print unknown capabilities in hexadecimal. + This fixes autopkgtest running on 5.8 kernels + (when systemd was built on an earlier one) (LP: #1885755) + File: debian/patches/basic-cap-list-parse-print-numerical-capabilities.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef46ec8289df815d42c9a3fdbf9fb347226d6be4 + + -- Balint Reczey Wed, 15 Jul 2020 19:21:02 +0200 + +systemd (245.6-3ubuntu1) groovy; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * Enable EFI/bootctl on armhf. + + -- Balint Reczey Wed, 15 Jul 2020 16:38:45 +0200 + systemd (245.6-3) unstable; urgency=medium [ Dan Streetman ] @@ -3599,6 +6978,49 @@ systemd (245.6-3) unstable; urgency=medi -- Michael Biebl Tue, 14 Jul 2020 18:16:57 +0200 +systemd (245.6-2ubuntu2) groovy; urgency=medium + + [ Balint Reczey ] + * debian/tests/tests-in-lxd: Work around snapd.seeded.service hanging + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=04a3342ff533b234ccb1a1020f6d854ab0acd053 + + [ Dimitri John Ledkov ] + * ubuntu: enable CET on amd64. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cc42a377e7e8c372124bcf43d9f4fb9c169f4292 + + [ Dan Streetman ] + * Lock swap blockdevice while calling mkswap (LP: #1838329) + Files: + - debian/patches/lp1838329/0001-blockdev-propagate-one-more-unexpected-error.patch + - debian/patches/lp1838329/0003-dissect-use-log_debug_errno-where-appropriate.patch + - debian/patches/lp1838329/0004-blockdev-add-helper-for-locking-whole-block-device.patch + - debian/patches/lp1838329/0005-makefs-lock-device-while-we-operate.patch + - debian/patches/lp1838329/0006-makefs-normalize-logging-a-bit.patch + - debian/patches/lp1838329/0007-cryptsetup-generator-use-systemd-makefs-for-implemen.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=652a148cf1d3ecfa93cfee288c152c90caee3ac6 + + -- Balint Reczey Tue, 14 Jul 2020 18:37:58 +0200 + +systemd (245.6-2ubuntu1) groovy; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * dhclient-exit-hooks.d/timesyncd: Act only when systemd-timesyncd is enabled + * hwdb: Mask rfkill event from intel-hid on HP platforms (LP: #1883846) + File: debian/patches/hwdb-Mask-rfkill-event-from-intel-hid-on-HP-platforms.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c705323d61b9cd4e36ceb92e236cd6e9ba4c1b1a + * debian/tests/tests-in-lxd: Show debugging info about reason of skipping test + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1c835ca2d4f6d09977525d781d224a87ba7cde24 + * debian/tests/tests-in-lxd: Drop workaround removing fstab from the container + (LP: #1886430) + File: debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f13213af98fa4c27c5f7e58c511b9691bb56065a + + -- Balint Reczey Mon, 06 Jul 2020 16:30:25 +0200 + systemd (245.6-2) unstable; urgency=medium [ Dan Streetman ] @@ -3623,6 +7045,36 @@ systemd (245.6-2) unstable; urgency=medi -- Michael Biebl Sun, 05 Jul 2020 11:44:39 +0200 +systemd (245.6-1ubuntu1) groovy; urgency=medium + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * Don't try calling NULL callback in bus_wait_for_units_clear. + * test: Skip test-boot-timestamps on permission denied. + * From journald: stream pid change newline fix + - debian/patches/lp1875708/journald-Increase-stdout-buffer-size-sooner-when-almost-f.patch + * meson: initialize time-epoch to reproducible builds compatible value + * dhclient-exit-hooks.d/timesyncd: Act only when systemd-timesyncd is enabled + (LP: #1873031) + File: debian/extra/dhclient-exit-hooks.d/timesyncd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7d5a31fb7523d1ecef0d2932df5efa3b99322919 + * debian/udev.postinst: Allow kvm to be an already present non-system group + (LP: #1880541) + File: debian/udev.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8b5c31828d4323ddb719326b1316c179b7cdbdef + * Cherry-pick reversion of detecting WSL by the presence of "microsoft" in osrelease + File: debian/patches/Revert-detect-virt-also-detect-microsoft-as-WSL.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e13f4452698b84ecb0ca6b7950b5f0c42c02c2cf + + [ Ryan Harper ] + * Skip over by-uuid/by-label symlinks for bcache backing and cache devices + (LP: #1861941) + File: debian/patches/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4b9a0e888ca40eaed561ec48aece23218fab18ff + + -- Balint Reczey Thu, 11 Jun 2020 12:54:02 +0200 + systemd (245.6-1) unstable; urgency=medium [ Michael Biebl ] @@ -3634,6 +7086,38 @@ systemd (245.6-1) unstable; urgency=medi -- Michael Biebl Mon, 08 Jun 2020 00:56:37 +0200 +systemd (245.5-3ubuntu1) groovy; urgency=medium + + [ Dan Streetman ] + * Hotadd only offline memory and CPUs (LP: #1876018) + File: debian/extra/rules-ubuntu/40-vm-hotadd.rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=dc68569fb46b04791202a40326003799becae859 + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * Cherry-pick fix from upstream master to adjust UseGateway= default + * journald: stream pid change newline fix (LP: #1875708) + Files: + - debian/patches/debian/fsckd-daemon-for-inter-fsckd-communication.patch + - debian/patches/lp1875708/journald-Increase-stdout-buffer-size-sooner-when-almost-f.patch + - debian/patches/lp1875708/journald-rework-end-of-line-marker-handling-to-use-a-fiel.patch + - debian/patches/lp1875708/journald-rework-pid-change-handling.patch + - debian/patches/lp1875708/journald-use-log_warning_errno-where-appropriate.patch + - debian/patches/lp1875708/journald-use-the-fact-that-client_context_release-returns.patch + - debian/patches/lp1875708/man-document-the-new-_LINE_BREAK-type.patch + - debian/patches/lp1875708/socket-util-introduce-type-safe-dereferencing-wrapper-CMS.patch + - debian/patches/lp1875708/test-Add-a-test-case-for-15654.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95302fbe53202bdac33f86031aa56026444a92d3 + + [ Dimitri John Ledkov ] + * meson: initialize time-epoch to reproducible builds compatible value + (LP: #1878969) + File: debian/patches/meson-initialize-time-epoch-to-reproducible-builds-compat.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6785dfd98f81dfe3e3d5273511ec33b196ddb0c3 + + -- Balint Reczey Tue, 19 May 2020 19:43:50 +0200 + systemd (245.5-3) unstable; urgency=medium [ Michael Biebl ] @@ -3666,6 +7150,56 @@ systemd (245.5-3) unstable; urgency=medi -- Michael Biebl Sun, 17 May 2020 19:28:49 +0200 +systemd (245.5-2ubuntu2) groovy; urgency=medium + + [ Dan Streetman ] + * network: Change IgnoreCarrierLoss default to value of ConfigureWithoutCarrier. + This fixes bridges with static IP configuration. (LP: #1860926) + File: debian/patches/lp1860926-network-Change-IgnoreCarrierLoss-default-to-value-of.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=59d655136ca05d830d46e5cd90e6b549406cd670 + * Cherry-pick fix from upstream master to adjust UseGateway= default + - network: change UseGateway= default to UseRoutes= setting + - network: honor SetDNSRoutes= even if UseGateway=False (LP: #1867375) + Files: + - debian/patches/network-change-UseGateway-default-to-UseRoutes-setting.patch + - debian/patches/network-honor-SetDNSRoutes-even-if-UseGateway-False.patch + - debian/patches/test-modify-add-tests-for-UseRoutes-and-UseGateway-config.patch + - debian/patches/test-verify-RoutesToDNS-is-independent-of-UseGateway.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4ddb639d6bb0ca07368348bc588c21c41f08a5e7 + * refresh quilt patches + + [ Balint Reczey ] + * Rename a few patches which are expected to stay longer in Ubuntu + Files: + - debian/patches/Revert-cgroup-Continue-unit-reset-if-cgroup-is-busy.patch + - debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + - debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + - debian/patches/debian/UBUNTU-Revert-cgroup-Continue-unit-reset-if-cgroup-is-busy.patch + - debian/patches/debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch + - debian/patches/debian/UBUNTU-resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=41e97add3900c761fafc58c7a2b024f7b618d313 + * test: Skip test-boot-timestamps on permission denied. + This fixes root-unittests in unprivileged LXD containers + File: debian/patches/test-Skip-test-boot-timestamps-on-permission-denied.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b98a63c04e9e82b0f57617e21233aa103b069785 + * tests: Skip test-execute in containers + File: debian/tests/root-unittests + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2d6f282bf20866f711c6ae509228b0c513218ca9 + * Run some tests in LXD, too + Files: + - debian/tests/control + - debian/tests/tests-in-lxd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf0bb5176284d9ec1b348b84e70f961ee12e3cac + + -- Balint Reczey Tue, 12 May 2020 16:59:54 +0200 + +systemd (245.5-2ubuntu1) groovy; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: none + + -- Balint Reczey Tue, 28 Apr 2020 13:20:31 +0200 + systemd (245.5-2) unstable; urgency=medium * Cherry-pick various fixes from upstream master @@ -3683,6 +7217,13 @@ systemd (245.5-2) unstable; urgency=medi -- Michael Biebl Mon, 27 Apr 2020 17:38:44 +0200 +systemd (245.5-1ubuntu1) groovy; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: none + + -- Balint Reczey Mon, 27 Apr 2020 13:11:34 +0200 + systemd (245.5-1) unstable; urgency=medium [ Michael Biebl ] @@ -3702,6 +7243,29 @@ systemd (245.5-1) unstable; urgency=medi -- Michael Biebl Sat, 18 Apr 2020 20:41:18 +0200 +systemd (245.4-4ubuntu3) focal; urgency=medium + + * dhcp: Allow setting request options again + link_configure() may be called multiple times on a link causing request options + set multiple times. (LP: #1870410) + File: debian/patches/dhcp-Allow-setting-request-options-again.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4c48893eb04b01a2ec62d2d2823a79a9f5cb2b80 + * Don't try calling NULL callback in bus_wait_for_units_clear. + This fixes a crash most frequently occurring in the Unity session + (LP: #1870930) + File: debian/patches/shared-Don-t-try-calling-NULL-callback-in-bus_wait_for_un.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b2ec1a3367cef401f8de745fecc9c385f020be78 + + -- Balint Reczey Wed, 22 Apr 2020 11:04:26 +0200 + +systemd (245.4-4ubuntu1) focal; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Dropped changes: + * d/rules: in dh_auto_test, include meson param --print-errorlogs. + + -- Balint Reczey Tue, 14 Apr 2020 00:05:30 +0200 + systemd (245.4-4) unstable; urgency=medium * Drop Conflicts: virtualbox-guest-utils from systemd-timesyncd. @@ -3738,6 +7302,222 @@ systemd (245.4-3) unstable; urgency=medi -- Michael Biebl Fri, 10 Apr 2020 11:55:15 +0200 +systemd (245.4-2ubuntu1) focal; urgency=medium + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + * Refresh patches + - Dropped changes: + * units: Don't mount tracefs in LXC. + - Remaining changes: + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + * Recommend networkd-dispatcher + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + * Add conflicts with upstart and systemd-shim + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + * debian/control: strengthen dependencies. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + * debian/rules: Set -Duser-path instead of patching the source for the same result + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=67d2ac5d806b55b0d178fca7e0af08cd9d12580c + * config: tpm-pcrindex=12, on Ubuntu only. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f8c22d44a619ce8fa17eb0cd7c7e2c601cdbbeb + * Ubuntu/extra: ship dhclient-enter hook. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) + Files: + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + * debian/extra/units/systemd-resolved.service.d/resolvconf.conf: + drop resolvconf.conf drop-in, resolved integration moved to resolvconf package. + * debian/extra/wrap_cl.py: add changelog formatter + Files: + - debian/extra/wrap_cl.py + - debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3 + * debian/gbp.conf: Set tag format to ubuntu/* + * debian/gbp.conf: Change debian-branch to ubuntu-focal + * libnss-resolve: do not disable and stop systemd-resolved + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + * Revert upstream adding LINK_STATE_INITIALIZED because it breaks netplan.io's + ethernets autopkgtest. + Files: + - debian/patches/Revert-network-do-not-drop-foreign-config-if-interface-is.patch + - debian/patches/Revert-network-fix-assertion-when-link-get-carrier.patch + - debian/patches/Revert-network-prevent-interfaces-to-be-initialized-multi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=22a9fa3bb03ba2a629926af39ea7df81fe33c9b8 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=70e93c2a05f0f7435614f8d52944d726601e319c + * Revert upstream commit breaking IPv4 DHCP in LXC containers in 244.1 + (LP: #1857123) + File: debian/patches/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=39c12f8e736afd1b7bdeb13ff6bccaea85020873 + * Skip falling back to device name when net_get_name(device) fails. + File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c79fe0e2dc29834e0cd236ade6e4e44a6ffb74fa + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + * Re-add support for /etc/writable for core18 + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + * core: set /run size to 10%, like initramfs-tools does. + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + * Ship systemd sysctl settings. + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + * networkd: if RA was implicit, do not await ndisc_configured. + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * systemd-resolved: Default to Cache=no-negative + File: debian/patches/debian/UBUNTU-resolved-default-no-negative-caching.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b42658843a9496d6b6bb68ac159f2a9f0a8ba9db + * Disable LLMNR and MulticastDNS by default + Files: + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + * test/test-functions: launch qemu-system with -vga none. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + * units: conditionalize more units to not start in containers. + Files: + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + * units: Disable journald Watchdog + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + * wait-online: do not wait, if no links are managed (neither configured, or failed). + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + * Set UseDomains to true, by default, on Ubuntu. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + * units: set ConditionVirtualization=!private-users on journald audit socket. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2974114ed9b89ea922a23893e8eff70d5cac77fe + * Disable dh_installinit generation of tmpfiles for the systemd package. + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + * Always setup /etc/resolv.conf on new installations. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + * Disable systemd-networkd-wait-online by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + * postinst: drop empty/stock /etc/rc.local + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + * systemd.postinst: enable persistent journal + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + * Drop systemd.prerm safety check. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + * boot-and-services: stderr is ok, for status command on the c1 container. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + * adt: boot-and-services: assert any kernel syslog messages. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + * debian/tests: Enforce udev upgrade. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + * debian/tests/systemd-fsckd: update assertions expectations for v237 + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + * debian/test/boot-and-services: Skip AppArmor tests in arm containers. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3 + * d/t/control: run udev tests only with isolation-machine. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7 + * Add riscv64 seccomp support. + * network: do not re-attach sd-event object (LP: #1870410) + File: debian/patches/network-do-not-re-attach-sd-event-object.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b10aee06d30b98395d20344195d3e671e25498ab + * Enable seccomp support on riscv64 again. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a1ffd64333784a10dd0eeb87f5198462b85c6f9a + + [ Dan Streetman ] + * network: attach sd-event in link_load() when creating link dhcp_client or ipv4ll + (LP: #1870410) + Author: Dan Streetman + Files: + - debian/patches/network-attach-sd-event-in-link_load-when-creating-link-d.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3408963020c6c0cf180130eabfd96e758d1a9c1f + * d/rules: in dh_auto_test, include meson param --print-errorlogs. + Also, don't cat testlog.txt; it's noisy and not very helpful. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ca8ed6fb7fa0f2a63557f705b1fdc97ab7ba5ace + + -- Balint Reczey Wed, 08 Apr 2020 10:21:18 +0200 + systemd (245.4-2) unstable; urgency=medium [ Balint Reczey ] @@ -3772,6 +7552,237 @@ systemd (245.4-1) unstable; urgency=medi -- Michael Biebl Thu, 02 Apr 2020 11:58:18 +0200 +systemd (245.2-1ubuntu3) focal; urgency=medium + + * Add riscv64 seccomp support. + + -- William Grant Sun, 05 Apr 2020 17:33:43 +1000 + +systemd (245.2-1ubuntu2) focal; urgency=medium + + * units: Don't mount tracefs in LXC. + This fixes autopkgtest in LXC. + File: debian/patches/units-Don-t-mount-tracefs-in-LXC.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cedcc2ceb7e788b2b0cbb97c7fbbd596d6c010a3 + + -- Balint Reczey Tue, 24 Mar 2020 13:09:27 +0100 + +systemd (245.2-1ubuntu1) focal; urgency=medium + + * Merge to Ubuntu from Debian unstable + - Notable changes in 245 missing from NEWS + * Modprobing is split out to a separate service unit, modprobe@.service + * New mount for for tracefs, under /sys/kernel/tracing + * Refresh patches + - Dropped changes: + * Keep sd_bus_enqueue_for_read() public + * Improve autopkgtest success rate, by bumping up timeouts + * d/p/lp1762391/0001-user-util-Add-helper-functions-for-gid-lists-operati.patch, + d/p/lp1762391/0002-execute-Restore-call-to-pam_setcred.patch, + d/p/lp1762391/0003-execute-Detect-groups-added-by-PAM-and-merge-them-wi.patch, + d/p/lp1762391/0004-test-Add-tests-for-gid-list-ops.patch, + d/p/lp1762391/0005-execute-add-const-to-array-parameters-where-possible.patch, + d/p/lp1762391/0006-execute-allow-pam_setcred-to-fail-ignore-errors.patch: + - Restore call to pam_setcred (LP: #1762391) + * d/p/0001-network-rename-linux_configure_after_setting_mtu-to-linux.patch, + d/p/0002-network-add-link-setting_genmode-flag.patch, + d/p/0003-network-if-ipv6ll-is-disabled-enumerate-tentative-ipv6-ad.patch, + d/p/0004-network-drop-foreign-config-after-addr_gen_mode-has-been-.patch: + - drop foreign config and raise interface after setting genmode + * pstore: Don't start systemd-pstore.service in containers. + * shutdown: do not detach autoclear loopback devices + * shutdown: cherry-pick PR#14409 to fix detach of loopback devices + for Ubuntu Core 20 + - Remaining changes: + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + * Recommend networkd-dispatcher + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + * Add conflicts with upstart and systemd-shim + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + * debian/control: strengthen dependencies. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + * debian/rules: Set -Duser-path instead of patching the source for the same result + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=67d2ac5d806b55b0d178fca7e0af08cd9d12580c + * config: tpm-pcrindex=12, on Ubuntu only. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f8c22d44a619ce8fa17eb0cd7c7e2c601cdbbeb + * Ubuntu/extra: ship dhclient-enter hook. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) + Files: + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + * debian/extra/units/systemd-resolved.service.d/resolvconf.conf: + drop resolvconf.conf drop-in, resolved integration moved to resolvconf package. + * debian/extra/wrap_cl.py: add changelog formatter + Files: + - debian/extra/wrap_cl.py + - debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3 + * debian/gbp.conf: Set tag format to ubuntu/* + * debian/gbp.conf: Change debian-branch to ubuntu-focal + * libnss-resolve: do not disable and stop systemd-resolved + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + * Revert upstream adding LINK_STATE_INITIALIZED because it breaks netplan.io's + ethernets autopkgtest. + Files: + - debian/patches/Revert-network-do-not-drop-foreign-config-if-interface-is.patch + - debian/patches/Revert-network-fix-assertion-when-link-get-carrier.patch + - debian/patches/Revert-network-prevent-interfaces-to-be-initialized-multi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=22a9fa3bb03ba2a629926af39ea7df81fe33c9b8 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=70e93c2a05f0f7435614f8d52944d726601e319c + * Revert upstream commit breaking IPv4 DHCP in LXC containers in 244.1 + (LP: #1857123) + File: debian/patches/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=39c12f8e736afd1b7bdeb13ff6bccaea85020873 + * Skip falling back to device name when net_get_name(device) fails. + File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c79fe0e2dc29834e0cd236ade6e4e44a6ffb74fa + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + * Re-add support for /etc/writable for core18 + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + * core: set /run size to 10%, like initramfs-tools does. + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + * Ship systemd sysctl settings. + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + * networkd: if RA was implicit, do not await ndisc_configured. + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * systemd-resolved: Default to Cache=no-negative + File: debian/patches/debian/UBUNTU-resolved-default-no-negative-caching.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b42658843a9496d6b6bb68ac159f2a9f0a8ba9db + * Disable LLMNR and MulticastDNS by default + Files: + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + * test/test-functions: launch qemu-system with -vga none. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + * units: conditionalize more units to not start in containers. + Files: + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + * units: Disable journald Watchdog + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + * wait-online: do not wait, if no links are managed (neither configured, or failed). + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + * Set UseDomains to true, by default, on Ubuntu. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + * units: set ConditionVirtualization=!private-users on journald audit socket. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2974114ed9b89ea922a23893e8eff70d5cac77fe + * Disable dh_installinit generation of tmpfiles for the systemd package. + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + * Always setup /etc/resolv.conf on new installations. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + * Disable systemd-networkd-wait-online by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + * postinst: drop empty/stock /etc/rc.local + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + * systemd.postinst: enable persistent journal + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + * Drop systemd.prerm safety check. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + * boot-and-services: stderr is ok, for status command on the c1 container. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + * adt: boot-and-services: assert any kernel syslog messages. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + * debian/tests: Enforce udev upgrade. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + * debian/tests/systemd-fsckd: update assertions expectations for v237 + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + * debian/test/boot-and-services: Skip AppArmor tests in arm containers. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3 + * d/t/control: run udev tests only with isolation-machine. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7 + + -- Balint Reczey Thu, 19 Mar 2020 17:36:59 +0100 + systemd (245.2-1) unstable; urgency=medium * New upstream version 245.2 @@ -3811,6 +7822,15 @@ systemd (245-1) unstable; urgency=medium -- Michael Biebl Wed, 11 Mar 2020 13:33:37 +0100 +systemd (244.3-1ubuntu1) focal; urgency=medium + + * Merge to Ubuntu from Debian unstable + * Refresh patches: + - Dropped changes: none + - Remaining changes: all + + -- Balint Reczey Mon, 24 Feb 2020 20:29:44 +0100 + systemd (244.3-1) unstable; urgency=medium * New upstream version 244.3 @@ -3820,6 +7840,227 @@ systemd (244.3-1) unstable; urgency=medi -- Michael Biebl Sat, 15 Feb 2020 15:44:45 +0100 +systemd (244.2-1ubuntu1) focal; urgency=medium + + * Merge to Ubuntu from Debian unstable + * Refresh patches: + - Dropped changes: + * SECURITY UPDATE: heap use-after-free with async polkit queries + - Remaining changes: + * Recommend networkd-dispatcher + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + * debian/control: strengthen dependencies. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + * Add conflicts with upstart and systemd-shim + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + * debian/rules: Set -Duser-path instead of patching the source for the same result + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=67d2ac5d806b55b0d178fca7e0af08cd9d12580c + * config: tpm-pcrindex=12, on Ubuntu only. + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f8c22d44a619ce8fa17eb0cd7c7e2c601cdbbeb + * Ubuntu/extra: ship dhclient-enter hook. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) + Files: + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + * debian/extra/units/systemd-resolved.service.d/resolvconf.conf: + drop resolvconf.conf drop-in, resolved integration moved to resolvconf package. + * debian/extra/wrap_cl.py: add changelog formatter + Files: + - debian/extra/wrap_cl.py + - debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3 + * debian/gbp.conf: Set tag format to ubuntu/* + * debian/gbp.conf: Change debian-branch to ubuntu-focal + * libnss-resolve: do not disable and stop systemd-resolved + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + * Revert upstream adding LINK_STATE_INITIALIZED because it breaks netplan.io's + ethernets autopkgtest. + Files: + - debian/patches/Revert-network-do-not-drop-foreign-config-if-interface-is.patch + - debian/patches/Revert-network-fix-assertion-when-link-get-carrier.patch + - debian/patches/Revert-network-prevent-interfaces-to-be-initialized-multi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=22a9fa3bb03ba2a629926af39ea7df81fe33c9b8 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=70e93c2a05f0f7435614f8d52944d726601e319c + * Revert upstream commit breaking IPv4 DHCP in LXC containers in 244.1 + (LP: #1857123) + File: debian/patches/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=39c12f8e736afd1b7bdeb13ff6bccaea85020873 + * Skip falling back to device name when net_get_name(device) fails. + File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c79fe0e2dc29834e0cd236ade6e4e44a6ffb74fa + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + * Re-add support for /etc/writable for core18 + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + * Improve autopkgtest success rate, by bumping up timeouts + File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48 + * core: set /run size to 10%, like initramfs-tools does. + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + * Ship systemd sysctl settings. + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + * networkd: if RA was implicit, do not await ndisc_configured. + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * systemd-resolved: Default to Cache=no-negative + File: debian/patches/debian/UBUNTU-resolved-default-no-negative-caching.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b42658843a9496d6b6bb68ac159f2a9f0a8ba9db + * Disable LLMNR and MulticastDNS by default + Files: + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + * test/test-functions: launch qemu-system with -vga none. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + * units: conditionalize more units to not start in containers. + Files: + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + * units: Disable journald Watchdog + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + * wait-online: do not wait, if no links are managed (neither configured, or failed). + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + * Set UseDomains to true, by default, on Ubuntu. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + * units: set ConditionVirtualization=!private-users on journald audit socket. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + * d/p/lp1762391/0001-user-util-Add-helper-functions-for-gid-lists-operati.patch, + d/p/lp1762391/0002-execute-Restore-call-to-pam_setcred.patch, + d/p/lp1762391/0003-execute-Detect-groups-added-by-PAM-and-merge-them-wi.patch, + d/p/lp1762391/0004-test-Add-tests-for-gid-list-ops.patch, + d/p/lp1762391/0005-execute-add-const-to-array-parameters-where-possible.patch, + d/p/lp1762391/0006-execute-allow-pam_setcred-to-fail-ignore-errors.patch: + - Restore call to pam_setcred (LP: #1762391) + * pstore: Don't start systemd-pstore.service in containers. + Usually it is not useful and can also fail making + boot-and-services autopkgtest fail. (LP: #1856729) + File: debian/patches/pstore-Don-t-start-systemd-pstore.service-in-containers.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=28b5a03769cbed9d3170ebac38508b867530a2d6 + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2974114ed9b89ea922a23893e8eff70d5cac77fe + * shutdown: do not detach autoclear loopback devices + File: debian/patches/shutdown-do-not-detach-autoclear-loopback-devices.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3978d34b59e98cdd01836c41a10442967636b8fc + * shutdown: cherry-pick PR#14409 to fix detach of loopback devices + for Ubuntu Core 20 + File: debian/patches/shutdown-modernizations-pr-14409.patch + https://github.com/systemd/systemd/pull/14409.diff + * Disable dh_installinit generation of tmpfiles for the systemd package. + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + * Always setup /etc/resolv.conf on new installations. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + * Disable systemd-networkd-wait-online by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + * postinst: drop empty/stock /etc/rc.local + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + * systemd.postinst: enable persistent journal + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + * Drop systemd.prerm safety check. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + * boot-and-services: stderr is ok, for status command on the c1 container. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + * adt: boot-and-services: assert any kernel syslog messages. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + * debian/tests: Enforce udev upgrade. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + * debian/tests/systemd-fsckd: update assertions expectations for v237 + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + * debian/test/boot-and-services: Skip AppArmor tests in arm containers. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3 + * d/t/control: run udev tests only with isolation-machine. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7 + * Keep sd_bus_enqueue_for_read() public + File: debian/patches/Export-sd_bus_enqueue_for_read.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1eb313b0e2d0a13bb891125b611ef2dc47e483b5 + + -- Balint Reczey Tue, 11 Feb 2020 19:21:08 +0100 + systemd (244.2-1) unstable; urgency=medium [ Michael Biebl ] @@ -3899,6 +8140,342 @@ systemd (244.1-1) unstable; urgency=medi -- Michael Biebl Sat, 25 Jan 2020 18:53:23 +0100 +systemd (244.1-0ubuntu3) focal; urgency=medium + + * SECURITY UPDATE: heap use-after-free with async polkit queries + - debian/patches/CVE-2020-1712-1.patch: on async pk requests, + re-validate action/details in src/shared/bus-util.c. + - debian/patches/CVE-2020-1712-2.patch: introduce API for re-enqueuing + incoming messages in src/libsystemd/libsystemd.sym, + src/libsystemd/sd-bus/sd-bus.c, src/systemd/sd-bus.h. + - debian/patches/CVE-2020-1712-3.patch: when authorizing via PK + re-resolve callback/userdata instead of caching it in + src/shared/bus-util.c. + - debian/patches/CVE-2020-1712-4.patch: fix typo in function name in + src/libsystemd/libsystemd.sym, src/libsystemd/sd-bus/sd-bus.c, + src/systemd/sd-bus.h, src/shared/bus-util.c. + - debian/libsystemd0.symbols: added new symbols. + - CVE-2020-1712 + + -- Marc Deslauriers Wed, 05 Feb 2020 12:56:57 -0500 + +systemd (244.1-0ubuntu2) focal; urgency=medium + + [ Dimitri John Ledkov ] + * shutdown: do not detach autoclear loopback devices + Author: Dimitri John Ledkov + File: debian/patches/shutdown-do-not-detach-autoclear-loopback-devices.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3978d34b59e98cdd01836c41a10442967636b8fc + + [ Balint Reczey ] + * Revert upstream commit breaking IPv4 DHCP in LXC containers in 244.1 + (LP: #1857123) + File: debian/patches/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=39c12f8e736afd1b7bdeb13ff6bccaea85020873 + + -- Balint Reczey Wed, 22 Jan 2020 16:27:49 +0100 + +systemd (244.1-0ubuntu1) focal; urgency=medium + + * New upstream version 244.1 + - network: set ipv6 mtu after link-up or device mtu change (LP: #1671951) + - & other changes + * Refresh patches. + - Dropped changes: + * d/p/lp-1853852-*: fix issues with muliplexed shmat calls (LP: #1853852) + Files: + - debian/patches/lp-1853852-seccomp-fix-multiplexed-system-calls.patch + - debian/patches/lp-1853852-seccomp-mmap-test-results-depend-on-kernel-libseccom.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=382271662c60c339b0a404c7a1772fe5670516ef + * d/p/lp1671951-network-set-ipv6-mtu-after-link-up-or-device-mtu-cha.patch: + set ipv6 mtu at correct time + * pstore: Don't start systemd-pstore.service in containers. + Usually it is not useful and can also fail making + boot-and-services autopkgtest fail. (LP: #1856729) + File: debian/patches/pstore-Don-t-start-systemd-pstore.service-in-containers.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=28b5a03769cbed9d3170ebac38508b867530a2d6 + * Revert: network: do not drop foreign config if interface is in initialized state. + This fixes FTBFS with the other network-related reverts. + File: debian/patches/Revert-network-do-not-drop-foreign-config-if-interface-is.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=22a9fa3bb03ba2a629926af39ea7df81fe33c9b8 + + -- Balint Reczey Wed, 18 Dec 2019 21:40:27 +0100 + +systemd (244-3ubuntu5) focal; urgency=medium + + [ Dariusz Gadomski ] + * d/p/lp1762391/0001-user-util-Add-helper-functions-for-gid-lists-operati.patch, + d/p/lp1762391/0002-execute-Restore-call-to-pam_setcred.patch, + d/p/lp1762391/0003-execute-Detect-groups-added-by-PAM-and-merge-them-wi.patch, + d/p/lp1762391/0004-test-Add-tests-for-gid-list-ops.patch, + d/p/lp1762391/0005-execute-add-const-to-array-parameters-where-possible.patch, + d/p/lp1762391/0006-execute-allow-pam_setcred-to-fail-ignore-errors.patch: + - Restore call to pam_setcred (LP: #1762391) + + [ Dan Streetman ] + * d/t/storage: without scsi_debug, skip test (LP: #1847816) + + -- Dan Streetman Sun, 19 Jan 2020 09:59:58 -0500 + +systemd (244-3ubuntu4) focal; urgency=medium + + * d/p/lp1671951-network-set-ipv6-mtu-after-link-up-or-device-mtu-cha.patch: + set ipv6 mtu at correct time (LP: #1671951) + * d/p/0001-network-rename-linux_configure_after_setting_mtu-to-linux.patch, + d/p/0002-network-add-link-setting_genmode-flag.patch, + d/p/0003-network-if-ipv6ll-is-disabled-enumerate-tentative-ipv6-ad.patch, + d/p/0004-network-drop-foreign-config-after-addr_gen_mode-has-been-.patch: + - drop foreign config and raise interface after setting genmode + (LP: #1845909) + + -- Dan Streetman Tue, 14 Jan 2020 14:01:15 -0500 + +systemd (244-3ubuntu3) focal; urgency=medium + + * shutdown: cherry-pick PR#14409 to fix detach of loopback devices + for Ubuntu Core 20 + File: debian/patches/shutdown-modernizations-pr-14409.patch + https://github.com/systemd/systemd/pull/14409.diff + + -- Michael Vogt Fri, 10 Jan 2020 10:08:42 +0100 + +systemd (244-3ubuntu2) focal; urgency=medium + + * d/p/debian/UBUNTU-Support-system-image-read-only-etc.patch: + - re-add missing bits for timedated.c (LP: #1778936) + + -- Michael Vogt Wed, 08 Jan 2020 16:15:05 +0100 + +systemd (244-3ubuntu1) focal; urgency=medium + + [ Balint Reczey ] + * Merge to Ubuntu from Debian unstable + * Refresh patches: + - Dropped changes: + * d/t/control: mark udev test skippable. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3419bd2a30a78d05cca9c38e50c9726de7e7632 + * test-execute: Filter /dev/.lxc in exec-dynamicuser-statedir.service. + File: debian/patches/test-execute-Filter-dev-.lxc-in-exec-dynamicuser-statedir.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=75af888d5552f706b86182a56f12ccc8e83ca04e + * Pass personality test even when i386 userland runs on amd64 kernel + File: debian/patches/debian/UBUNTU-test-Pass-personality-test-even-when-i386-userland-runs-o.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=42e0bfc426f19430f6768ef4922a9531a345765f + * Fix resolved fallback to TCP (LP: #1849658) + Author: Dan Streetman + File: debian/patches/resolved-set-stream-type-during-DnsStream-creation.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f1ee30b13c9d2d34968b09ce620f3bc24a1a78c7 + - Remaining changes: + * Recommend networkd-dispatcher + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + * debian/control: strengthen dependencies. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + * Add conflicts with upstart and systemd-shim + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + * Ubuntu/extra: ship dhclient-enter hook. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) + Files: + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + * debian/extra/units/systemd-resolved.service.d/resolvconf.conf: + drop resolvconf.conf drop-in, resolved integration moved to resolvconf package. + * debian/extra/wrap_cl.py: add changelog formatter + Files: + - debian/extra/wrap_cl.py + - debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3 + * debian/gbp.conf: Set tag format to ubuntu/* + * debian/gbp.conf: Change debian-branch to ubuntu-eoan + * libnss-resolve: do not disable and stop systemd-resolved + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + * Re-add support for /etc/writable for core18 + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + * Improve autopkgtest success rate, by bumping up timeouts + File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48 + * core: set /run size to 10%, like initramfs-tools does. + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + * Ship systemd sysctl settings. + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + * networkd: if RA was implicit, do not await ndisc_configured. + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * Disable LLMNR and MulticastDNS by default + Files: + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + * test/test-functions: launch qemu-system with -vga none. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + * units: conditionalize more units to not start in containers. + Files: + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + * units: Disable journald Watchdog + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + * wait-online: do not wait, if no links are managed (neither configured, or failed). + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + * Set UseDomains to true, by default, on Ubuntu. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + * units: set ConditionVirtualization=!private-users on journald audit socket. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2974114ed9b89ea922a23893e8eff70d5cac77fe + * Disable dh_installinit generation of tmpfiles for the systemd package. + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + * Always setup /etc/resolv.conf on new installations. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + * Disable systemd-networkd-wait-online by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + * postinst: drop empty/stock /etc/rc.local + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + * systemd.postinst: enable persistent journal + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + * Drop systemd.prerm safety check. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + * boot-and-services: stderr is ok, for status command on the c1 container. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + * adt: boot-and-services: assert any kernel syslog messages. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + * debian/tests: Enforce udev upgrade. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + * debian/tests/systemd-fsckd: update assertions expectations for v237 + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + * Skip falling back to device name when net_get_name(device) fails. + File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c79fe0e2dc29834e0cd236ade6e4e44a6ffb74fa + * debian/test/boot-and-services: Skip AppArmor tests in arm containers. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3 + * d/t/control: run udev tests only with isolation-machine. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7 + * UBUNTU: drop setting fs.protected_regular and fs.protected_fifos + File: debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6e583847b04c3f83a50f3bd6947dcae6a73d8388 + * debian/rules: Set -Duser-path instead of patching the source for the same result + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=67d2ac5d806b55b0d178fca7e0af08cd9d12580c + * systemd-resolved: Default to Cache=no-negative + File: debian/patches/debian/UBUNTU-resolved-default-no-negative-caching.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b42658843a9496d6b6bb68ac159f2a9f0a8ba9db + + [ Dan Streetman ] + * Remove tempfile used by dhclient-enter-resolved-hook + File: debian/extra/dhclient-enter-resolved-hook + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=00a0d3997f7f9664df5cc2d7f96622e8c641f3e5 + + [ Christian Ehrhardt ] + * drop d/p/test-expect-mmap-to-fail-in-seccomp-test-on-s390-and-s390.patch. + File: debian/patches/test-expect-mmap-to-fail-in-seccomp-test-on-s390-and-s390.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2edd57973b9342d46d5d4095d80dfe0969cd08e4 + * d/p/lp-1853852-*: fix issues with muliplexed shmat calls (LP: #1853852) + Author: Christian Ehrhardt + Files: + - debian/patches/lp-1853852-seccomp-fix-multiplexed-system-calls.patch + - debian/patches/lp-1853852-seccomp-mmap-test-results-depend-on-kernel-libseccom.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=382271662c60c339b0a404c7a1772fe5670516ef + * changelog: fix issues with muliplexed shmat calls (LP: #1853852) + File: debian/changelog + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7048d92d071e70e5b17989ae2e03c996c843df78 + + [ Dimitri John Ledkov ] + * config: tpm-pcrindex=12, on Ubuntu only. + In Ubuntu, we are trying to integrate measured boot with either bootctl or + grub, or sometimes both using chainloading. In those cases we may want to seal + against grub's PCRs, bootctl stub PCRs, or both at the same time. To achieve + that, we wouldn't like to decouple grub's & bootctl's PCR and make the latter + one use PCR #12. + Author: Dimitri John Ledkov + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f8c22d44a619ce8fa17eb0cd7c7e2c601cdbbeb + + -- Balint Reczey Fri, 13 Dec 2019 19:05:14 +0100 + systemd (244-3) unstable; urgency=medium * Update udev-udeb to use 73-usb-net-by-mac.link @@ -3998,12 +8575,306 @@ systemd (243-4) experimental; urgency=me -- Michael Biebl Sat, 09 Nov 2019 01:15:08 +0100 +systemd (243-3ubuntu1) focal; urgency=medium + + [ Dan Streetman ] + * Fix resolved fallback to TCP (LP: #1849658) + Author: Dan Streetman + File: debian/patches/resolved-set-stream-type-during-DnsStream-creation.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f1ee30b13c9d2d34968b09ce620f3bc24a1a78c7 + * Separate stderr and stdout of /etc/dhcp/dhclient-enter-hooks.d/resolved + (LP: #1849608) + Author: Dan Streetman + File: debian/extra/dhclient-enter-resolved-hook + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fec4d6d026488a1d32ad9dceef18d9ea9c8acbda + + [ Balint Reczey ] + * Merge to Ubuntu from Debian experimental + * Refresh patches: + - Dropped changes: + * udevadm trigger: do not propagate EACCES and ENODEV. + File: debian/patches/udevadm-trigger-do-not-propagate-EACCES-and-ENODEV.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=334e3fdc904de05105c78763c88220c1976d1946 + * Pass personality test even when i386 userland runs on amd64 kernel + File: debian/patches/debian/UBUNTU-test-Pass-personality-test-even-when-i386-userland-runs-o.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=42e0bfc426f19430f6768ef4922a9531a345765f + + -- Balint Reczey Wed, 30 Oct 2019 15:19:33 +0100 + systemd (243-3) experimental; urgency=medium * Import patches from v243-stable branch (up to ef677436aa) -- Michael Biebl Mon, 14 Oct 2019 15:26:01 +0200 +systemd (243-2ubuntu1) focal; urgency=medium + + [ Balint Reczey ] + * Merge to Ubuntu from experimental + * Refresh patches: + - Dropped changes: + * Cherrypick ask-password: prevent buffer overrow when reading from keyring. + File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8 + * random-util: eat up bad RDRAND values seen on AMD CPUs. + File: debian/patches/+rdrand-workaround-on-amd.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0 + - Remaining changes: + * Recommend networkd-dispatcher + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + * debian/control: strengthen dependencies. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + * Add conflicts with upstart and systemd-shim + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + * Ubuntu/extra: ship dhclient-enter hook. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) + Files: + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + * debian/extra/units/systemd-resolved.service.d/resolvconf.conf: + drop resolvconf.conf drop-in, resolved integration moved to resolvconf package. + * debian/extra/wrap_cl.py: add changelog formatter + Files: + - debian/extra/wrap_cl.py + - debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3 + * debian/gbp.conf: Set tag format to ubuntu/* + * debian/gbp.conf: Change debian-branch to ubuntu-eoan + * libnss-resolve: do not disable and stop systemd-resolved + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + * Re-add support for /etc/writable for core18 + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + * Improve autopkgtest success rate, by bumping up timeouts + File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48 + * core: set /run size to 10%, like initramfs-tools does. + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + * Ship systemd sysctl settings. + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + * networkd: if RA was implicit, do not await ndisc_configured. + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * Disable LLMNR and MulticastDNS by default + Files: + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + * test/test-functions: launch qemu-system with -vga none. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + * units: conditionalize more units to not start in containers. + Files: + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + * units: Disable journald Watchdog + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + * wait-online: do not wait, if no links are managed (neither configured, or failed). + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + * Set UseDomains to true, by default, on Ubuntu. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + * units: set ConditionVirtualization=!private-users on journald audit socket. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2974114ed9b89ea922a23893e8eff70d5cac77fe + * Disable dh_installinit generation of tmpfiles for the systemd package. + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + * Always setup /etc/resolv.conf on new installations. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + * Disable systemd-networkd-wait-online by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + * postinst: drop empty/stock /etc/rc.local + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + * systemd.postinst: enable persistent journal + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + * Drop systemd.prerm safety check. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + * boot-and-services: stderr is ok, for status command on the c1 container. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + * adt: boot-and-services: assert any kernel syslog messages. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + * tests/boot-smoke: ignore udevd connection timeouts resolving colord group. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b + * Fix false negative checking for running jobs after boot. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + * debian/tests: Enforce udev upgrade. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + * debian/tests/systemd-fsckd: update assertions expectations for v237 + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + * Skip falling back to device name when net_get_name(device) fails. + File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c79fe0e2dc29834e0cd236ade6e4e44a6ffb74fa + * d/t/control: mark udev test skippable. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3419bd2a30a78d05cca9c38e50c9726de7e7632 + * debian/extra/wrap_cl.py: add changelog formatter + Files: + - debian/extra/wrap_cl.py + - debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3 + * debian/test/boot-and-services: Skip AppArmor tests in arm containers. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3 + * d/t/control: run udev tests only with isolation-machine. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7 + * UBUNTU: drop setting fs.protected_regular and fs.protected_fifos + File: debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6e583847b04c3f83a50f3bd6947dcae6a73d8388 + * test-execute: Filter /dev/.lxc in exec-dynamicuser-statedir.service. + File: debian/patches/test-execute-Filter-dev-.lxc-in-exec-dynamicuser-statedir.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=75af888d5552f706b86182a56f12ccc8e83ca04e + * Pass personality test even when i386 userland runs on amd64 kernel + File: debian/patches/debian/UBUNTU-test-Pass-personality-test-even-when-i386-userland-runs-o.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=42e0bfc426f19430f6768ef4922a9531a345765f + * Revert manager putting bin before sbin in user instances + File: debian/patches/Revert-manager-put-bin-before-sbin-for-user-instances.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a01b494922bf76c4c3659b43df4f45a554f3276a + * Set the previous default, -Ddefault-hierarchy=hybrid at build-time. + This prevents breaking container managers + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ad8bc71956b7bcc97563383345024c93a0572cc7 + * Revert "cgroup: Continue unit reset if cgroup is busy" + The change broke libvirt autopkgtest in Ubuntu. (LP: #1844879) + File: debian/patches/Revert-cgroup-Continue-unit-reset-if-cgroup-is-busy.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9bed00d9ea138f08d79c83c40ed3933eb04a5624 + * debian/tests/boot-smoke: Drop part of the delta to gain better debug info + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=06715f3af3099cae57768de99d1b84fecca5a15d + * Revert upstream adding LINK_STATE_INITIALIZED because it breaks netplan.io's + ethernets autopkgtest. + Files: + - debian/patches/Revert-network-fix-assertion-when-link-get-carrier.patch + - debian/patches/Revert-network-prevent-interfaces-to-be-initialized-multi.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=70e93c2a05f0f7435614f8d52944d726601e319c + * d/e/checkout-upstream: UPSTREAM_REPO can override default systemd repo + File: debian/extra/checkout-upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a658380b58e5082e79476096fe7ee85358546f64 + * debian/extra/checkout-upstream: rebase only PRs on upstream master. + This fixes testing arbitrary upstream commits with UPSTREAM_HEAD=. + File: debian/extra/checkout-upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7b8d2ae3cc68e7c388ce9ef7189c0451745ad6c2 + * d/e/checkout-upstream: Add KEEP_DEBIAN_PATCHES option to keep patches. + The Debian patches that apply cleanly are kept when KEEP_DEBIAN_PATCHES + is set to give a better picture of how the tested upstream version + would work packaged. + File: debian/extra/checkout-upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a69135efeb8ee0bb92ff56523c117db2585922c4 + * d/e/checkout-upstream: Keep all autopkgtests when KEEP_DEBIAN_TESTS is set + File: debian/extra/checkout-upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=50ae2b41d87a7791d609d66e3d27a3a50d814edc + * debian/extra/checkout-upstream: Use dots when deriving version from upstream + to sort higher than potential versions in Debian and also to conform native + package versioning practice. + File: debian/extra/checkout-upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=11c23cb721fa402160ea81b10cf3022a3f4cba8c + * Use package's version as systemd's reported version (LP: #1849158) + File: debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5245cbb5d168b56adc8106ccdb9b224830d55a45 + * Fix test: expect mmap to fail in seccomp test on s390 and s390x + File: debian/patches/test-expect-mmap-to-fail-in-seccomp-test-on-s390-and-s390.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=04b28d6b177c2cf84c4bd262183098f47c356885 + * udevadm trigger: do not propagate EACCES and ENODEV. + Propagating the errors broke udisks2 install scripts among others. + (LP: #1845314) + File: debian/patches/udevadm-trigger-do-not-propagate-EACCES-and-ENODEV.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=334e3fdc904de05105c78763c88220c1976d1946 + * debian/gbp.conf: Set debian-branch to ubuntu-focal + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fae20a0dd7c2b24f6f6b49edf6e8f70adf57dc44 + + [ Dan Streetman ] + * d/extra/rules/73-special-net-names.rules: use $$ instead of $ in PROGRAM= value. + Author: Dan Streetman + File: debian/extra/rules/73-special-net-names.rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c5a86d7e286d14f2bc78473c3a1cc6ddc0df9158 + + -- Balint Reczey Tue, 22 Oct 2019 19:17:05 +0200 + systemd (243-2) experimental; urgency=medium * Import patches from v243-stable branch (up to fab6f010ac) @@ -4055,6 +8926,45 @@ systemd (242-8) unstable; urgency=medium -- Michael Biebl Fri, 08 Nov 2019 23:18:00 +0100 +systemd (242-7ubuntu2) eoan; urgency=medium + + [ Bryan Quigley ] + * Update patch for resolved: Mitigate DVE-2018-0001, by retrying NXDOMAIN + without EDNS0. This disables the workaround if DNSSEC=yes. + Falls back directly to simple UDP instead of trying an intermediate. + (LP: #1796501) + Author: Bryan Quigley + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2974114ed9b89ea922a23893e8eff70d5cac77fe + + [ Balint Reczey ] + * Pass personality test even when i386 userland runs on amd64 kernel + File: debian/patches/debian/UBUNTU-test-Pass-personality-test-even-when-i386-userland-runs-o.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=42e0bfc426f19430f6768ef4922a9531a345765f + * Refresh patches + Files: + - debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + - debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + - debian/patches/test-execute-Filter-dev-.lxc-in-exec-dynamicuser-statedir.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ff8387be07322230e9afe87f1c767ee241e9a0e1 + + -- Balint Reczey Tue, 08 Oct 2019 22:31:17 +0200 + +systemd (242-7ubuntu1) eoan; urgency=medium + + * Merge from unstable + * UBUNTU: drop setting fs.protected_regular and fs.protected_fifos from + sysctl defaults shipped by systemd (LP: #1845637) + File: debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6e583847b04c3f83a50f3bd6947dcae6a73d8388 + * test-execute: Filter /dev/.lxc in exec-dynamicuser-statedir.service. + It appears in nested LXC containers and broke the armhf autopkgtest. + (LP: #1845337) + File: debian/patches/test-execute-Filter-dev-.lxc-in-exec-dynamicuser-statedir.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=75af888d5552f706b86182a56f12ccc8e83ca04e + + -- Balint Reczey Wed, 02 Oct 2019 14:13:28 +0200 + systemd (242-7) unstable; urgency=medium * sleep: properly pass verb to sleep script @@ -4069,6 +8979,243 @@ systemd (242-7) unstable; urgency=medium -- Michael Biebl Wed, 04 Sep 2019 19:34:17 +0200 +systemd (242-6ubuntu1) eoan; urgency=medium + + [ Dan Streetman ] + * d/t/control: mark udev test skippable. + The udev test will return 77 (from udev-test.pl) if it can't + setup the test environment; mark it skipped in that case. + Author: Dan Streetman + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3419bd2a30a78d05cca9c38e50c9726de7e7632 + + [ Dimitri John Ledkov ] + * debian/extra/wrap_cl.py: add changelog formatter + Author: Dimitri John Ledkov + Files: + - debian/extra/wrap_cl.py + - debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3 + + [ Balint Reczey ] + * debian/test/boot-and-services: Skip AppArmor tests in arm containers. + The test is failing on armhf testbeds using containers + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3 + * d/t/control: run udev tests only with isolation-machine. + It fails in Ubuntu CI armhf containers and may fail elsewhere, too. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7 + * Merge to Ubuntu from unstable + - Dropped changes: + * Skip starting systemd-remount-fs.service in containers + even when /etc/fstab is present. + File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch + * resolved: add support for pipelined requests + Files: + - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch + - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch + - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch + - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch + - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch + - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch + - debian/patches/stream-track-type-of-DnsStream-object.patch + - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f + * pam-systemd: use secure_getenv() rather than getenv() + File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c + * support PPC64LE qemu based testing. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e + * tests/storage: make the test more resilient. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4 + * Wait for cryptsetup unit to start, before stopping. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd + * Fix typpo in storage test. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8 + - Remaining changes: + * Set UseDomains to true, by default, on Ubuntu. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + * libnss-resolve: do not disable and stop systemd-resolved + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + * units: set ConditionVirtualization=!private-users on journald audit socket. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + * debian/tests: Enforce udev upgrade. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Always setup /etc/resolv.conf on new installations. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + * Ubuntu/extra: ship dhclient-enter hook. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + * Disable systemd-networkd-wait-online by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + * postinst: drop empty/stock /etc/rc.local + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + * Ship systemd sysctl settings. + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + * systemd.postinst: enable persistent journal + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + * Disable LLMNR and MulticastDNS by default + Files: + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + * debian/tests/systemd-fsckd: update assertions expectations for v237 + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + * test/test-functions: launch qemu-system with -vga none. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + * tests/boot-smoke: ignore udevd connection timeouts resolving colord group. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b + * Drop systemd.prerm safety check. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + * wait-online: do not wait, if no links are managed (neither configured, or failed). + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + * Recommend networkd-dispatcher + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + * networkd: if RA was implicit, do not await ndisc_configured. + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + * Disable dh_installinit generation of tmpfiles for the systemd package. + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + * boot-and-services: stderr is ok, for status command on the c1 container. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + * adt: boot-and-services: assert any kernel syslog messages. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) + Files: + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + * units: conditionalize more units to not start in containers. + Files: + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + * Re-add support for /etc/writable for core18 + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + * debian/control: strengthen dependencies. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + * Improve autopkgtest success rate, by bumping up timeouts + File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48 + * units: Disable journald Watchdog + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + * Add conflicts with upstart and systemd-shim + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + * Switch gbp.conf to disco. + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87 + * core: set /run size to 10%, like initramfs-tools does. + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository + * debian/gbp.conf: Set tag format to ubuntu/* + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + * Fix false negative checking for running jobs after boot. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f + * Cherrypick ask-password: prevent buffer overrow when reading from keyring. + File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8 + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + * random-util: eat up bad RDRAND values seen on AMD CPUs. + File: debian/patches/+rdrand-workaround-on-amd.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0 + * Refresh patches + * debian/tests/boot-smoke: Restore exit handling Ubuntu delta lost in 241 merge + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3bad1cf23cc91299471542e83c589f2b6237a162 + * Skip falling back to device name when net_get_name(device) fails. + This fixes network-manager and netplan.io autopkgtests + File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c79fe0e2dc29834e0cd236ade6e4e44a6ffb74fa + + -- Balint Reczey Thu, 12 Sep 2019 10:28:46 +0200 + systemd (242-6) unstable; urgency=medium [ Dan Streetman ] @@ -4214,6 +9361,313 @@ systemd (242-1) experimental; urgency=me -- Michael Biebl Wed, 08 May 2019 01:33:56 +0200 +systemd (241-7ubuntu1) eoan; urgency=medium + + * Merge from unstable + - Dropped changes: + * debian/tests: Switch to gdm + Files: + - debian/tests/boot-and-services + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Cherrypick proposed patch to fix LinkLocalAddressing post-unify-MTU settings. + File: debian/patches/networkd-honour-LinkLocalAddressing.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cd9ba0d0f47634c9e5d862b8208cdc3178f25496 + * Import patches to support PPC64LE qemu based testing. + Files: + - debian/tests/control + - debian/patches/test-test-functions-on-PP64-use-vmlinux.patch + - debian/patches/test-test-functions-on-PPC64-use-hvc0-console.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/Install-routes-after-addresses-are-ready.patch + - debian/patches/Move-link_check_ready-to-later-in-the-file.patch + - debian/patches/tests-Add-test-for-IPv6-source-routing.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * udevadm: Fix segfault with subsystem-match containing '/' (Closes: #919206) + File: debian/patches/udevadm-fix-segfault.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=736973d38676301f276716f22a746aed2489baac + * Blacklist TEST-10-ISSUE-2467 #11706 + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578 + * Fix comment about why we disable hwclock.service. + File: debian/systemd.links + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8473f88fffdb9db1f5ba547bb692a911997f2569 + * debian/tests/storage: fix for LUKS2 and avoid interactive password prompts. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594ebf325816e76a8c58043c56fc94f2d52b2a6 + * d/p/network-remove-routing-policy-rule-from-foreign-rule.patch + * d/p/network-do-not-remove-rule-when-it-is-requested-by-e.patch + - Fix RoutingPolicyRule does not apply correctly + * core: queue jobs on uninstall to generate PropertiesChanged signal. + File: debian/patches/core-when-we-uninstall-a-job-add-unit-to-dbus-queue.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=241deca98fb9a0f1ba9a6ba781f738fb31a3bd80 + * systemd-stable: cherrypick many bugfixes from the v240-stable branch. + Files: + - debian/patches/Add-missing-dash-to-all-option-in-the-timedatectl-man-pag.patch + - debian/patches/Add-note-about-transactions-being-genereated-independentl.patch + - debian/patches/Change-job-mode-of-manager-triggered-restarts-to-JOB_REPL.patch + - debian/patches/Fix-omission-in-docs.patch + - debian/patches/Log-the-job-being-merged.patch + - debian/patches/NEWS-document-deprecation-of-PermissionsStartOnly-in-v240.patch + - debian/patches/NEWS-retroactively-describe-.include-deprecation.patch + - debian/patches/Update-systemd-system.conf.xml.patch + - debian/patches/basic-prioq-add-prioq_peek_item.patch + - debian/patches/core-Fix-EOPNOTSUPP-emergency-action-error-string.patch + - debian/patches/core-Fix-return-argument-check-for-parse_emergency_action.patch + - debian/patches/core-mount-do-not-add-Before-local-fs.target-or-remote-fs.patch + - debian/patches/core-mount-move-static-function-earlier-in-file.patch + - debian/patches/curl-util-fix-use-after-free.patch + - debian/patches/ethtool-Make-sure-advertise-is-actually-set-when-autonego.patch + - debian/patches/journal-avoid-buffer-overread-when-locale-name-is-too-lon.patch + - debian/patches/journal-limit-the-number-of-entries-in-the-cache-based-on.patch + - debian/patches/journald-periodically-drop-cache-for-all-dead-PIDs.patch + - debian/patches/machinectl-fix-argument-index-in-error-log.patch + - debian/patches/man-Fix-a-typo-in-systemd.exec.xml.patch + - debian/patches/man-fix-reference.patch + - debian/patches/man-fix-volume-num-of-journalctl.patch + - debian/patches/man-update-DefaultDependency-in-systemd.mount-5.patch + - debian/patches/netlink-set-maximum-size-of-WGDEVICE_A_IFNAME.patch + - debian/patches/network-make-Link-and-NetDev-always-have-the-valid-poiter.patch + - debian/patches/network-unset-Network-manager-when-loading-.network-file-.patch + - debian/patches/network-wireguard-rename-and-split-set_wireguard_interfac.patch + - debian/patches/networkd-wait-for-kernel-to-reply-ipv6-peer-address.patch + - debian/patches/nspawn-ignore-SIGPIPE-for-nspawn-itself.patch + - debian/patches/pager-improve-english-a-bit.patch + - debian/patches/pid1-fix-cleanup-of-stale-implicit-deps-based-on-proc-sel.patch + - debian/patches/procfs-util-expose-functionality-to-query-total-memory.patch + - debian/patches/pull-fix-invalid-error-check.patch + - debian/patches/shared-Revert-commit-49fe5c099-in-parts-for-function-pars.patch + - debian/patches/shared-dissect-image-make-sure-that-we-don-t-truncate-dev.patch + - debian/patches/test-execute-unset-HOME-before-testing.patch + - debian/patches/udev-do-logging-before-setting-variables-to-NULL.patch + - debian/patches/udev-val-may-be-NULL-use-strempty.patch + - debian/patches/udevadm-info-a-should-enumerate-sysfs-attributes-not-envs.patch + - debian/patches/udevd-use-worker_free-on-failure-in-worker_new.patch + - debian/patches/units-make-sure-initrd-cleanup.service-terminates-before-.patch + - debian/patches/wait-online-do-not-fail-if-we-receive-invalid-messages.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2b3db732ba7e5418d45ca42884e8d075189f2724 + * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints. + Files: + - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch + - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch + - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch + - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11 + * Cherry-pick patches to fix FTBFS with GCC 9: + - d/p/strv-rework-FOREACH_STRING-macro.patch + - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch + - Remaining changes: + * Skip starting systemd-remount-fs.service in containers + even when /etc/fstab is present. + File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch + * resolved: add support for pipelined requests + Files: + - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch + - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch + - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch + - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch + - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch + - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch + - debian/patches/stream-track-type-of-DnsStream-object.patch + - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * virt: detect WSL environment as a container + Files: + - debian/patches/virt-detect-WSL-environment-as-a-container-id-wsl.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20b10ce955ad6ddb85c185a13e05a72c3e717f20 + * pam-systemd: use secure_getenv() rather than getenv() + File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c + * Set UseDomains to true, by default, on Ubuntu. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + * libnss-resolve: do not disable and stop systemd-resolved + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + * units: set ConditionVirtualization=!private-users on journald audit socket. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + * debian/tests: Enforce udev upgrade. + Files: + - debian/tests/boot-and-services + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + * Always setup /etc/resolv.conf on new installations. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + * Ubuntu/extra: ship dhclient-enter hook. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + * Disable systemd-networkd-wait-online by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + * postinst: drop empty/stock /etc/rc.local + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + * Ship systemd sysctl settings. + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + * systemd.postinst: enable persistent journal + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + * Disable LLMNR and MulticastDNS by default + Files: + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + * debian/tests/systemd-fsckd: update assertions expectations for v237 + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + * test/test-functions: launch qemu-system with -vga none. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + * tests/boot-smoke: ignore udevd connection timeouts resolving colord group. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b + * Drop systemd.prerm safety check. + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + * wait-online: do not wait, if no links are managed (neither configured, or failed). + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + * Recommend networkd-dispatcher + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + * networkd: if RA was implicit, do not await ndisc_configured. + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + * Disable dh_installinit generation of tmpfiles for the systemd package. + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + * boot-and-services: stderr is ok, for status command on the c1 container. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + * adt: boot-and-services: assert any kernel syslog messages. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) + Files: + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + * units: conditionalize more units to not start in containers. + Files: + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + * Re-add support for /etc/writable for core18 + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + * debian/control: strengthen dependencies. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + * Improve autopkgtest success rate, by bumping up timeouts + File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48 + * units: Disable journald Watchdog + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + * Add conflicts with upstart and systemd-shim + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + * Switch gbp.conf to disco. + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87 + * core: set /run size to 10%, like initramfs-tools does. + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + * support PPC64LE qemu based testing. + Files: + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + * networkd: [Route] PreferredSource not working in *.network files. + Files: + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository + * debian/gbp.conf: Set tag format to ubuntu/* + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + * tests/storage: make the test more resilient. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4 + * Fix false negative checking for running jobs after boot. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f + * Cherrypick ask-password: prevent buffer overrow when reading from keyring. + File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8 + * Wait for cryptsetup unit to start, before stopping. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + * Fix typpo in storage test. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8 + * random-util: eat up bad RDRAND values seen on AMD CPUs. + File: debian/patches/+rdrand-workaround-on-amd.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0 + * Refresh patches + + -- Balint Reczey Wed, 28 Aug 2019 17:19:28 +0200 + systemd (241-7) unstable; urgency=medium [ Michael Biebl ] @@ -4389,6 +9843,247 @@ systemd (241-1) unstable; urgency=medium -- Felipe Sateler Thu, 21 Feb 2019 20:10:15 -0300 +systemd (240-6ubuntu13) eoan; urgency=medium + + * Drop s390x seccomp fix causing regression on s390x + Files: + - debian/patches/src-shared-seccomp-util.c-Add-mmap-definitions-for-s390.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da95e1d022e94a4d3ce0b69bd6eb398c95d09f24 + + -- Balint Reczey Mon, 26 Aug 2019 17:02:54 +0200 + +systemd (240-6ubuntu12) eoan; urgency=medium + + * Depends on g++-8 as well + Files: + - debian/control + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594b4f2ba2a4f68911ecebb5fab4f3cf99a5f30 + + -- Dimitri John Ledkov Thu, 22 Aug 2019 16:41:11 +0100 + +systemd (240-6ubuntu11) eoan; urgency=medium + + [ Dan Streetman ] + * d/p/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch: + - Set src address for dhcp 'classless' routes (LP: #1835581) + + [ Jorge Niedbalski ] + * d/p/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch: + Allows cache=no-negative option to be set, ignoring negative + answers to be cached (LP: #1668771). + + [ Jeremy Soller ] + * random-util: eat up bad RDRAND values seen on AMD CPUs. + This fixes AMD Ryzen 3000 series failing to boot (LP: #1835809) + + [ You-Sheng Yang ] + * d/p/d/Revert-udev-network-device-renaming-immediately-give.patch: + - udev: drop Revert-udev-network-device-renaming-immediately-give.patch. + The removing patch was for the already deprecated + "75-persistent-net-generator.rules" based interface renaming mechanism, + and it's causing unnecessary problem when a system happends to NICs with + same MAC address, e.g. Dell's MAC address pass-thru. (LP: #1837700) + + [ Dimitri John Ledkov ] + * Cherrypick seccomp fixes for new kernel and glibc. + Files: + - debian/patches/seccomp-add-new-5.1-syscall-pidfd_send_signal-to-filter-s.patch + - debian/patches/seccomp-add-rseq-to-default-list-of-syscalls-to-whitelist.patch + - debian/patches/seccomp-allow-shmat-to-be-a-separate-syscall-on-architect.patch + - debian/patches/seccomp-drop-mincore-from-system-service-syscall-filter-g.patch + - debian/patches/seccomp-shm-get-at-dt-now-have-their-own-numbers-everywhe.patch + - debian/patches/shared-seccomp-add-sync_file_range2.patch + - debian/patches/src-shared-seccomp-util.c-Add-mmap-definitions-for-s390.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=627919b0cbcc7e094995f167f8c5eb899f801fd3 + + * Build with gcc-8, otherwise tests segfault. + Files: + - debian/control + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1ca0100244e46b00a97dfa10a5d980de7bdc6735 + + -- Dimitri John Ledkov Thu, 22 Aug 2019 15:03:45 +0100 + +systemd (240-6ubuntu9) eoan; urgency=medium + + * Fix typpo in storage test. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8 + + * Fix bashism + File: debian/extra/dhclient-enter-resolved-hook + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be + + -- Dimitri John Ledkov Thu, 30 May 2019 21:45:50 +0100 + +systemd (240-6ubuntu8) eoan; urgency=medium + + * Only restart resolved on changes in dhclient enter hook. + This prevents spurious restarts of resolved on rebounds when + the addresses did not change. (LP: #1805183) + Author: Julian Andres Klode + File: debian/extra/dhclient-enter-resolved-hook + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a + + * Wait for cryptsetup unit to start, before stopping. + Patch from cascardo. Plus small refactor for readability. (LP: #1814373) + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd + + * Wait for systemctl is-system-running state. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838 + + -- Dimitri John Ledkov Thu, 30 May 2019 14:59:04 +0100 + +systemd (240-6ubuntu7) eoan; urgency=medium + + * Revert "Add check to switch VTs only between K_XLATE or K_UNICODE" + This reverts commit 60407728a1a453104e3975ecfdf25a254dd7cc44. + Files: + - debian/patches/Add-check-to-switch-VTs-only-between-K_XLATE-or-K_UNICODE.patch + - debian/patches/Move-verify_vc_kbmode-to-terminal-util.c-as-vt_verify_kbm.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=18029ab5ff436bfb3b401f24cd1e3a4cf2a1579c + + * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints. + Signed-off-by: Dimitri John Ledkov (LP: #1825378) + Author: Dan Streetman + Files: + - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch + - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch + - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch + - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11 + + * Remove expected failure from passing test. + Signed-off-by: Dimitri John Ledkov (LP: #1829450) + Author: Dan Streetman + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c43b12037d08555dc1d26593307726d7c7992df0 + + * Fix false negative checking for running jobs after boot. + Signed-off-by: Dimitri John Ledkov (LP: #1825997) + Author: Dan Streetman + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f + + * Cherrypick ask-password: prevent buffer overrow when reading from keyring. + Signed-off-by: Dimitri John Ledkov (LP: #1814373) + Author: Dan Streetman + File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8 + + -- Dimitri John Ledkov Wed, 29 May 2019 19:54:37 +0100 + +systemd (240-6ubuntu6) eoan; urgency=medium + + * Add check to switch VTs only between K_XLATE or K_UNICODE. + Switching to K_UNICODE from other than L_XLATE can make the keyboard + unusable and possibly leak keypresses from X. (LP: #1803993) + + -- Balint Reczey Thu, 16 May 2019 23:22:15 +0200 + +systemd (240-6ubuntu5) disco; urgency=medium + + * systemd-stable: cherrypick many bugfixes from the v240-stable branch. + Includes many documentation fixes, memory safety (use after free, read + overruns, etc), networkd wireguard fixes, POSIX ACL fix which is preventing adm + group from reading journals (LP: #1824342), journal dropping caches + improvement, fixes regressions in udevadm / machinectl command line parsing. + Files: + - debian/patches/Add-missing-dash-to-all-option-in-the-timedatectl-man-pag.patch + - debian/patches/Add-note-about-transactions-being-genereated-independentl.patch + - debian/patches/Change-job-mode-of-manager-triggered-restarts-to-JOB_REPL.patch + - debian/patches/Fix-omission-in-docs.patch + - debian/patches/Log-the-job-being-merged.patch + - debian/patches/NEWS-document-deprecation-of-PermissionsStartOnly-in-v240.patch + - debian/patches/NEWS-retroactively-describe-.include-deprecation.patch + - debian/patches/Update-systemd-system.conf.xml.patch + - debian/patches/basic-prioq-add-prioq_peek_item.patch + - debian/patches/core-Fix-EOPNOTSUPP-emergency-action-error-string.patch + - debian/patches/core-Fix-return-argument-check-for-parse_emergency_action.patch + - debian/patches/core-mount-do-not-add-Before-local-fs.target-or-remote-fs.patch + - debian/patches/core-mount-move-static-function-earlier-in-file.patch + - debian/patches/curl-util-fix-use-after-free.patch + - debian/patches/ethtool-Make-sure-advertise-is-actually-set-when-autonego.patch + - debian/patches/journal-avoid-buffer-overread-when-locale-name-is-too-lon.patch + - debian/patches/journal-limit-the-number-of-entries-in-the-cache-based-on.patch + - debian/patches/journald-periodically-drop-cache-for-all-dead-PIDs.patch + - debian/patches/machinectl-fix-argument-index-in-error-log.patch + - debian/patches/man-Fix-a-typo-in-systemd.exec.xml.patch + - debian/patches/man-fix-reference.patch + - debian/patches/man-fix-volume-num-of-journalctl.patch + - debian/patches/man-update-DefaultDependency-in-systemd.mount-5.patch + - debian/patches/netlink-set-maximum-size-of-WGDEVICE_A_IFNAME.patch + - debian/patches/network-make-Link-and-NetDev-always-have-the-valid-poiter.patch + - debian/patches/network-unset-Network-manager-when-loading-.network-file-.patch + - debian/patches/network-wireguard-rename-and-split-set_wireguard_interfac.patch + - debian/patches/networkd-wait-for-kernel-to-reply-ipv6-peer-address.patch + - debian/patches/nspawn-ignore-SIGPIPE-for-nspawn-itself.patch + - debian/patches/pager-improve-english-a-bit.patch + - debian/patches/pid1-fix-cleanup-of-stale-implicit-deps-based-on-proc-sel.patch + - debian/patches/procfs-util-expose-functionality-to-query-total-memory.patch + - debian/patches/pull-fix-invalid-error-check.patch + - debian/patches/shared-Revert-commit-49fe5c099-in-parts-for-function-pars.patch + - debian/patches/shared-dissect-image-make-sure-that-we-don-t-truncate-dev.patch + - debian/patches/test-execute-unset-HOME-before-testing.patch + - debian/patches/udev-do-logging-before-setting-variables-to-NULL.patch + - debian/patches/udev-val-may-be-NULL-use-strempty.patch + - debian/patches/udevadm-info-a-should-enumerate-sysfs-attributes-not-envs.patch + - debian/patches/udevd-use-worker_free-on-failure-in-worker_new.patch + - debian/patches/units-make-sure-initrd-cleanup.service-terminates-before-.patch + - debian/patches/wait-online-do-not-fail-if-we-receive-invalid-messages.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2b3db732ba7e5418d45ca42884e8d075189f2724 + + * Only test that gdm3 comes up on amd64. Stalls on other arches. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079 + + * tests/storage: make the test more resilient. + Skip if the scsi_debug module is not available (like on custom kernels). Do not + fail the tests if removing the module fail, at the end of the test run. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4 + + -- Dimitri John Ledkov Thu, 11 Apr 2019 14:44:08 +0100 + +systemd (240-6ubuntu4) disco; urgency=medium + + * pam-systemd: use secure_getenv() rather than getenv() + CVE-2019-3842 + File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c + + * core: queue jobs on uninstall to generate PropertiesChanged signal. + (LP: #1816812) + File: debian/patches/core-when-we-uninstall-a-job-add-unit-to-dbus-queue.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=241deca98fb9a0f1ba9a6ba781f738fb31a3bd80 + + -- Dimitri John Ledkov Wed, 10 Apr 2019 01:06:03 +0100 + +systemd (240-6ubuntu3) disco; urgency=medium + + * virt: detect WSL environment as a container (LP: #1816753) + * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository + * debian/gbp.conf: Set tag format to ubuntu/* + + -- Balint Reczey Fri, 22 Mar 2019 18:39:48 +0100 + +systemd (240-6ubuntu2) disco; urgency=medium + + * d/p/network-remove-routing-policy-rule-from-foreign-rule.patch + * d/p/network-do-not-remove-rule-when-it-is-requested-by-e.patch + - Fix RoutingPolicyRule does not apply correctly (LP: #1818282) + + -- Ioanna Alifieraki Mon, 04 Mar 2019 10:32:19 +0000 + +systemd (240-6ubuntu1) disco; urgency=medium + + * Release to ubuntu. + + -- Dimitri John Ledkov Wed, 20 Feb 2019 21:41:03 +0100 + systemd (240-6) unstable; urgency=high * High urgency as this fixes a vulnerability. @@ -4436,6 +10131,113 @@ systemd (240-6) unstable; urgency=high -- Martin Pitt Mon, 18 Feb 2019 13:54:04 +0000 +systemd (240-5ubuntu4) disco; urgency=medium + + * debian/tests/control: add socat to upstream tests for pull #11591 + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7dff5196e23f50d15c0e0c4cb6742a1cc1cc704a + + * udevadm: Fix segfault with subsystem-match containing '/' (Closes: #919206) + Author: Martin Pitt + File: debian/patches/udevadm-fix-segfault.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=736973d38676301f276716f22a746aed2489baac + + * Blacklist TEST-10-ISSUE-2467 #11706 + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578 + + * Fix comment about why we disable hwclock.service. + Systemd nowadays doesn't do it itself because the kernel does it on its own when necessary, + and when not, it is not safe to save the hwclock (eg, there is no certainty the system clock + is correct) + Author: Felipe Sateler + File: debian/systemd.links + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8473f88fffdb9db1f5ba547bb692a911997f2569 + + * udev: Backport upstream preventing mass killings when not running under systemd + (Closes: #918764) + Author: Felipe Sateler + File: debian/patches/udev-check-whether-systemd-is-running-and-do-not-use-cg_k.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=617ee70c31c45ea5d5c6c7b30766d47f0b89446c + + * debian/tests/storage: fix for LUKS2 and avoid interactive password prompts. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594ebf325816e76a8c58043c56fc94f2d52b2a6 + + -- Dimitri John Ledkov Thu, 14 Feb 2019 14:51:37 +0000 + +systemd (240-5ubuntu3) disco; urgency=medium + + * debian/tests: blacklist upstream test-24-unit-tests on ppc64le. + Fails, not a regression as it's a new test case, which was never before + executed on ppc64le. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715 + + -- Dimitri John Ledkov Sat, 02 Feb 2019 11:05:12 +0100 + +systemd (240-5ubuntu2) disco; urgency=medium + + * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts. + (LP: #1813622) + File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770 + + * resolved: add support for pipelined requests. (LP: #1811471) + Files: + - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch + - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch + - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch + - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch + - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch + - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch + - debian/patches/stream-track-type-of-DnsStream-object.patch + - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f + + * networkd: [Route] PreferredSource not working in *.network files. + (LP: #1812760) + Files: + - debian/patches/Install-routes-after-addresses-are-ready.patch + - debian/patches/Move-link_check_ready-to-later-in-the-file.patch + - debian/patches/tests-Add-test-for-IPv6-source-routing.patch + - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518 + + -- Dimitri John Ledkov Wed, 30 Jan 2019 11:46:53 +0000 + +systemd (240-5ubuntu1) disco; urgency=medium + + * Reenable pristine-tar in gbp.conf. + The pristine-tar bug has been fixed, so we can use it again. + This reverts commit 9fcfbbf6fea15eacfa3fad74240431c5f2c3300e. + Author: Felipe Sateler + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=045998b2a974f9322535fef6018b3c5fff6da342 + + * debian/tests/storage: improve cleanups. + On fast ppc64el machines, cryptsetup start job may not complete by the time + tearDown is executed. In that case stop, causes to simply cancel the start job + without actually cleaning up the dmsetup node. This leads to failing subsequent + test as it no longer starts with a clean device. Thus ensure the + systemd-cryptsetup unit is started, before stopping it. + Also rmmod scsi_debug module at the end, to allow re-running the test in a + loop. + File: debian/tests/storage + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bfafb0924a59f2a93bcde00fc9eeea5c4d058977 + + * d/watch: add version mangle to transform -rc to ~rc. + Upstream has started releasing rcs, so let's account for that + Author: Felipe Sateler + File: debian/watch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=db2dbed693ac75c88ea6ed923537d18d30fc1cdf + + * debian/tests/upstream: Mark TEST-13-NSPAWN-SMOKE as flakey. + File: debian/tests/upstream + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a106d9c60b7b9fc3e16e423ca6a4d376560927cc + + -- Dimitri John Ledkov Mon, 28 Jan 2019 13:52:58 +0000 + systemd (240-5) unstable; urgency=medium [ Felipe Sateler ] @@ -4446,6 +10248,337 @@ systemd (240-5) unstable; urgency=medium -- Martin Pitt Sun, 27 Jan 2019 21:33:07 +0000 +systemd (240-4ubuntu2) disco; urgency=medium + + * Import patches to support PPC64LE qemu based testing. + Files: + - debian/tests/control + - debian/patches/test-test-functions-on-PP64-use-vmlinux.patch + - debian/patches/test-test-functions-on-PPC64-use-hvc0-console.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e + + -- Dimitri John Ledkov Thu, 24 Jan 2019 16:55:01 +0000 + +systemd (240-4ubuntu1) disco; urgency=medium + + * Skip starting systemd-remount-fs.service in containers + even when /etc/fstab is present. + This allows entering fully running state even when /etc/fstab + lists / to be mounted from a device which is not present in the + container. (LP: #1576341) + Author: Balint Reczey + File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3bde262e129a9d2c60eeff37e63d3da7d58ce5dd + + * Set UseDomains to true, by default, on Ubuntu. + On Ubuntu, fallback DNS servers are disabled, therefore we do not leak queries + to a preset 3rd party by default. In resolved, dnssec is also disabled by + default, as too much of the internet is broken and using Ubuntu users to debug + the internet is not very productive - most of the time the end-user cannot fix + or know how to notify the site owners about the dnssec mistakes. Inherintally + the DHCP acquired DNS servers are therefore trusted, and are free to spoof + records. Not trusting DNS search domains, in such scenario, provides limited + security or privacy benefits. From user point of view, this also appears to be + a regression from previous Ubuntu releases which do trust DHCP acquired search + domains by default. + Therefore we are enabling UseDomains by default on Ubuntu. + Users may override this setting in the .network files by specifying + [DHCP|IPv6AcceptRA] UseDomains=no|route options. + File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1e5b00cdfd6b9317704e1383d26365a68c041c56 + + * Enable systemd-resolved by default + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313 + + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + The stub resolver file is dynamically managed by systemd-resolved. It points at + the stub resolver as the nameserver, however it also dynamically updates the + search stanza, thus non-nss dns tools work correctly with unqualified names and + correctly use the DHCP acquired search domains. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d + + * libnss-resolve: do not disable and stop systemd-resolved + resolved is always used by default on ubuntu via stub resolver, therefore it + should continue to operate without libnss-resolve module installed. + File: debian/libnss-resolve.postrm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0 + + * Ignore failures to set Nice priority on services in containers. + File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29 + + * units: set ConditionVirtualization=!private-users on journald audit socket. + It fails to start in unprivileged containers. + File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6 + + * debian/tests: Switch to gdm, enforce udev upgrade. + Files: + - debian/tests/boot-and-services + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff + + * Always setup /etc/resolv.conf on new installations. + On new installations, /etc/resolv.conf will always exist. Move it to /run + and replace it with the desired final symlink. (LP: #1712283) + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861 + + * Enable systemd-networkd by default. + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e5ff45174306b17077b907bc25cfd763ac6934f1 + + * boot-and-services: skip gdm3 tests when absent, as it is on s390x. + Files: + - debian/tests/boot-and-services + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cf05ba013979f53ad69fd2c548ec01c7a5339f64 + + * initramfs-tools: trigger udevadm add actions with subsystems first. + This updates the initramfs-tools init-top udev script to trigger udevadm + actions with type specified. This mimicks the + systemd-udev-trigger.service. Without type specified only devices are + triggered, but triggering subsystems may also be required and should happen + before triggering the devices. This is the case for example on s390x with zdev + generated udev rules. (LP: #1713536) + File: debian/extra/initramfs-tools/scripts/init-top/udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4016ca5629b6c56b41a4f654e7a808c82e290cac + + * Ubuntu/extra: ship dhclient-enter hook. + This allows isc-dhcp dhclient to set search domains and nameservers via + resolved. + Files: + - debian/extra/dhclient-enter-resolved-hook + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764 + + * Disable systemd-networkd-wait-online by default. + Currently it is not fit for purpose, as it leads to long boot times when + networking is unplugged or not yet configured on boot. (LP: #1714301) + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785 + + * postinst: drop empty/stock /etc/rc.local (LP: #1716979) + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe + + * Improve resolvconf integration. + Make the .path|.service unit that feed resolved data into resolvconf not + generate failures if resolvconf is not installed. + Add a check to make sure that resolved does not read /etc/resolv.conf when that + is symlinked to stub-resolv.conf. (LP: #1717995) + File: debian/patches/debian/Ubuntu-resolved-resolvconf-integration.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d9f0f89985a141c1588d67e4868ad68cff6956fb + + * Ship systemd sysctl settings. + Patch systemd's default sysctl settings to drop things that are set elsewhere + already. + The promote secondary IP addresses is required for networkd to successfully + renew DHCP leases with a change of an IP address. + Set default package scheduler to Fair Queue CoDel. (LP: #1721223) + Files: + - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch + - debian/rules + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb + + * resolved.service: set DefaultDependencies=no (LP: #1734167) + File: debian/patches/resolved.service-set-DefaultDependencies-no.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a6ced6331ff7f99704213547a0b94dc06935d508 + + * systemd.postinst: enable persistent journal. (LP: #1618188) + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5 + + * Disable LLMNR and MulticastDNS by default LP: #1739672 + Files: + - debian/changelog + - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629 + + * Enable qemu tests on all architectures LP: #1749540 + Files: + - debian/changelog + - debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b416d1bdfb4f5e33565178e01ba4c4e3939b6176 + + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + (LP: #1749000) + Author: Michael Vogt + File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c + + * debian/tests/systemd-fsckd: update assertions expectations for v237 + fsck got rewritten to use "safe_fork" and whilst previously it would ignore the + error, when fsck is terminated by signal PIPE, it no longer does so. Thus one + should expect systemd-fsck-root.service to have failed in certain test cases. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6 + + * test/test-functions: launch qemu-system with -vga none. + Should resolve booting qemu-system-ppc64 without seabios. + File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394 + + * tests/boot-smoke: ignore udevd connection timeouts resolving colord group. + File: debian/tests/boot-smoke + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b + + * tests/systemd-fsckd: ignore systemd_fsck_with_plymouth_failure. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c392e1ca3da67dbf8a7dfe0dcad470f7636f7405 + + * tests/control: ensure boot-smoke uses latest systemd & udev. + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b7b66380641755bc21fd7dcbc307760b1d18b8af + + * Drop systemd.prerm safety check. + On Ubuntu, systemd is the only choice, and is essential, via init -> + systemd-sysv -> systemd dependency chain, thus removing systemd is already + quite hard, and appropriate warnings are emitted by dpkg. (LP: #1758438) + File: debian/systemd.prerm + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b + + * wait-online: do not wait, if no links are managed (neither configured, or failed). + (LP: #1728181) + File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8 + + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + (LP: #1696970) + File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926 + + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + (LP: #1727237) + File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b + + * Recommend networkd-dispatcher (LP: #1762386) + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc + + * networkd: if RA was implicit, do not await ndisc_configured. + If RA was iplicit, meaning not otherwise requested, and a kernel default was in + use. Do not prevent link entering configured state, whilst ndisc configuration + is pending. Implicit kernel RA, is expected to be asynchronous and + non-blocking. (LP: #1765173) + File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629 + + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + This ensures that all scans are completed, before installer reaches + partitioning stage. (LP: #1751813) + Files: + - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf + - debian/udev-udeb.install + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7 + + * Disable dh_installinit generation of tmpfiles for the systemd package. + Replace with a manual safe call to systemd-tmpfiles which will process any + updates to the tmpfiles shipped by systemd package, taking into account any + overrides shipped by other packages, sysadmin, or specified in the runtime + directories. (LP: #1748147) + Files: + - debian/rules + - debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b + + * Enable EFI/bootctl on armhf. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1 + + * boot-and-services: stderr is ok, for status command on the c1 container. + systemctl may print warnings on the stderr when checking the status of + completed units. This should not, overall fail the autopkgtest run. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9 + + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + File: debian/tests/systemd-fsckd + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e + + * adt: boot-and-services: assert any kernel syslog messages. + It appears that on arm64 the syslog is truncated and is missing early kernel + messages. Print full one, and check for any kernel messages instead. + File: debian/tests/boot-and-services + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16 + + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d) LP: #1779815 + Files: + - debian/changelog + - debian/extra/start-udev + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14 + + * units: conditionalize more units to not start in containers. + Files: + - debian/changelog + - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55 + + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + On v4.4 kernels, on top of btrfs ephemeral lxd v3.0 containers generate this + other error code, instead of not supported. Skip the test for both error codes. + File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7 + + * Re-add support for /etc/writable for core18. (LP: #1778936) + Author: Michael Vogt + File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7 + + * debian/control: strengthen dependencies. + Make systemd-sysv depend on matching version of systemd. Autopkgtests at times + upgrade systemd-sysv without upgrading systemd. However, upgrading systemd-sysv + alone makes little sense. + Make systemd conflict, rather than just break, systemd-shim. As there are + upgrade failures cause by systemd-shim presence whilst upgrading to new + systemd. + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe + + * Improve autopkgtest success rate, by bumping up timeouts. (LP: #1789841) + Author: Christian Ehrhardt + File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48 + + * units: Disable journald Watchdog (LP: #1773148) + File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5 + + * Add conflicts with upstart and systemd-shim. (LP: #1793092) + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176 + + * Specify Ubuntu's Vcs-Git + File: debian/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232 + + * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown + (LP: #1803391) + Author: Balint Reczey + File: debian/systemd.postinst + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1 + + * Switch gbp.conf to disco. + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87 + + * core: set /run size to 10%, like initramfs-tools does. + Currently there is a difference between initrd and initrd-less boots, + w.r.t. size= mount option of /run. This yields different runtime journald caps + (1% vs 10%), and on dense deployments of containers may result in OOM kills. + (LP: #1799251) + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + + * Cherrypick proposed patch to fix LinkLocalAddressing post-unify-MTU settings. + File: debian/patches/networkd-honour-LinkLocalAddressing.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cd9ba0d0f47634c9e5d862b8208cdc3178f25496 + + -- Dimitri John Ledkov Mon, 21 Jan 2019 16:09:03 +0000 + systemd (240-4) unstable; urgency=medium [ Benjamin Drung ] @@ -4737,6 +10870,280 @@ systemd (239-8) unstable; urgency=medium -- Michael Biebl Fri, 07 Sep 2018 08:41:12 +0200 +systemd (239-7ubuntu15) disco; urgency=medium + + * core: set /run size to 10%, like initramfs-tools does. + Currently there is a difference between initrd and initrd-less boots, + w.r.t. size= mount option of /run. This yields different runtime journald caps + (1% vs 10%), and on dense deployments of containers may result in OOM kills. + (LP: #1799251) + File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d + + * resolved: Increase size of TCP stub replies. + DNS_PACKET_PAYLOAD_SIZE_MAX is limiting the size of the stub replies to + 512 with EDNS off or 4096 with EDNS on, without checking the protocol + used. This makes TCP replies for clients without EDNS support to be + limited to 512, making the truncate flag useless if the query result is + bigger than 512 bytes. + This commit increases the size of TCP replies to DNS_PACKET_SIZE_MAX + Fixes: #10816 + (cherry picked from commit e6eed9445956cfa496e1db933bfd3530db23bfce) + (LP: #1804487) + Author: Victor Tapia + File: debian/patches/resolved-Increase-size-of-TCP-stub-replies.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=702a4566174c4d2bd84b70805107cfc1a7c128cc + + -- Dimitri John Ledkov Mon, 03 Dec 2018 13:49:24 +0000 + +systemd (239-7ubuntu14) disco; urgency=medium + + * Fix compat with new meson. + File: debian/patches/meson-rename-Ddebug-to-Ddebug-extra.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3b764ec1b76768a8c40635019fa5a8acb81b223e + + -- Dimitri John Ledkov Thu, 29 Nov 2018 16:53:00 +0000 + +systemd (239-7ubuntu13) disco; urgency=medium + + * Stop testing that gdm3 is up. + Ubuntu Desktop is only supported on amd64, and on real hardware. Testing that + gdm3 fails to start (yet continues to be running, with a half broken logind + session) is not useful on dummy xorg video cards in nested VMs. + (LP: #1805358) + File: debian/tests/control + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3006fedda1d1ca3f04c5f593e8018bb6d1196025 + + -- Dimitri John Ledkov Wed, 28 Nov 2018 16:02:25 +0000 + +systemd (239-7ubuntu12) disco; urgency=medium + + * hwdb: Revert wlan keycode changes, rely on xkeyboard-config fixes instead. + (LP: #1799364) + Author: seb128 + File: debian/patches/hwdb-revert-airplane-mode-keys-handling-on-Dell.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cabc076fdd67ced21fc789e44e0366a2f561a5bc + + * test: Set executable bits on TEST-22-TMPFILES shell scripts. (LP: #1804864) + File: debian/patches/test-Set-executable-bits-on-TEST-22-TMPFILES-shell-script.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0e5b6e44a962f299565949e1006a4ba86d171dc3 + + * Switch gbp.conf to disco. + File: debian/gbp.conf + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87 + + -- Dimitri John Ledkov Fri, 23 Nov 2018 18:38:43 +0000 + +systemd (239-7ubuntu11) disco; urgency=medium + + * hwdb: Fix wlan keycode for all Dell Latitude and Precision systems + (LP: #1799364) + Author: Shih-Yuan Lee (FourDollars) + File: debian/patches/hwdb-Fix-wlan-keycode-for-all-Dell-Latitude-and-Precision.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d8ac9a5640be39ede9cebcd8c4cc44e8811e0e49 + + * hwdb: Update PNP IDs of Goldstar (now: LG Electronics) (LP: #1804584) + File: debian/patches/hwdb-Update-PNP-IDs-of-Goldstar-now-LG-Electronics-.-1005.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=10204fb5761c759be6ddf27dc43c851ef24c96cb + + * btrfs-util: unbreak tmpfiles' subvol creation + File: debian/patches/btrfs-util-unbreak-tmpfiles-subvol-creation.patch + https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4ab5b8275a0487e301553fb6de6a905abb7ea833 + + -- Dimitri John Ledkov Thu, 22 Nov 2018 16:30:28 +0000 + +systemd (239-7ubuntu10.4) cosmic-security; urgency=medium + + [ Chris Coulson ] + * SECURITY UPDATE: symlink mishandling in systemd-tmpfiles + - debian/patches/CVE-2018-6954_2.patch: backport the remaining patches to + resolve this completely + - CVE-2018-6954 + + [ Balint Reczey ] + * Fix LP: #1803391 - Skip daemon-reexec and try-restarts during shutdown + - update debian/systemd.postinst + + -- Chris Coulson Thu, 15 Nov 2018 20:42:32 +0000 + +systemd (239-7ubuntu10.3) cosmic-security; urgency=medium + + * SECURITY UPDATE: reexec state injection + - debian/patches/CVE-2018-15686.patch: when deserializing state always use + read_line(…, LONG_LINE_MAX, …) rather than fgets() + - CVE-2018-15686 + * SECURITY UPDATE: chown_one() can dereference symlinks + - debian/patches/CVE-2018-15687.patch: rework recursive logic to use O_PATH + - CVE-2018-15687 + + -- Chris Coulson Tue, 06 Nov 2018 20:52:41 +0000 + +systemd (239-7ubuntu10.1) cosmic-security; urgency=medium + + * SECURITY UPDATE: buffer overflow in dhcp6 client + - debian/patches/CVE-2018-15688.patch: make sure we have enough space + for the DHCP6 option header in src/libsystemd-network/dhcp6-option.c. + - CVE-2018-15688 + + -- Marc Deslauriers Wed, 31 Oct 2018 11:36:32 -0400 + +systemd (239-7ubuntu10) cosmic; urgency=medium + + * units: Disable journald Watchdog (LP: #1773148) + * Add conflicts with upstart and systemd-shim. (LP: #1773859) + + -- Dimitri John Ledkov Thu, 04 Oct 2018 15:58:51 +0100 + +systemd (239-7ubuntu9) cosmic; urgency=medium + + * core: export environment when running generators. + Ensure that manager's environment (including e.g. PATH) is exported when + running generators. Otherwise, one is at a mercy of running without PATH which + can lead to buggy generator behaviour. (LP: #1771858) + + -- Dimitri John Ledkov Wed, 26 Sep 2018 11:01:58 +0100 + +systemd (239-7ubuntu8) cosmic; urgency=medium + + [ Dimitri John Ledkov ] + * Cherrypick many bugfixes from master. + * systemctl: correctly proceed to immediate shutdown if scheduling fails + (LP: #1670291) + + [ Julian Andres Klode ] + * Improve networkd states documentation. + + -- Dimitri John Ledkov Wed, 12 Sep 2018 16:03:08 +0100 + +systemd (239-7ubuntu7) cosmic; urgency=medium + + * boot-and-services: skip gdm test, when gdm-x-session fails. + Across all architectures, gdm fails to come up reliably since cosmic. + (LP: #1790478) + + -- Dimitri John Ledkov Mon, 03 Sep 2018 16:33:00 +0100 + +systemd (239-7ubuntu6) cosmic; urgency=medium + + [ Dimitri John Ledkov ] + * debian/control: strengthen dependencies. + Make systemd-sysv depend on matching version of systemd. Autopkgtests at times + upgrade systemd-sysv without upgrading systemd. However, upgrading systemd-sysv + alone makes little sense. + Make systemd conflict, rather than just break, systemd-shim. As there are + upgrade failures cause by systemd-shim presence whilst upgrading to new + systemd. + * Correct gdm3 exclution on arm64, in boot-and-services test. + + [ Christian Ehrhardt ] + * Improve autopkgtest success rate, by bumping up timeouts. (LP: #1789841) + + -- Dimitri John Ledkov Fri, 31 Aug 2018 14:17:54 +0100 + +systemd (239-7ubuntu5) cosmic; urgency=medium + + [ Michael Biebl ] + * Clean up dbus-org.freedesktop.timesync1.service Alias on purge + (Closes: #904290) + + [ Martin Pitt ] + * timedated: Fix wrong PropertyChanged values and refcounting + + [ Dimitri John Ledkov ] + * autopkgtest: drop gdm3 on arm64 as well. + The cloud instances are configured without a graphics card, and thus X fails to + start, hence the gdm test fails. + * Revert "Workaround broken meson copying symlinked data files, as dangling symlinks." + This reverts commit 059bfb5349123fabc8c92324e0473193f01fc87c. + * Cherrypick v239-stable patches. + * cryptsetup: add support for sector-size= option (LP: #1776626) + * Cherrypick upstrem patches to fix ftbfs with new glibc. + + [ Michael Vogt ] + * Re-add support for /etc/writable for core18. (LP: #1778936) + + -- Dimitri John Ledkov Tue, 28 Aug 2018 17:35:51 +0100 + +systemd (239-7ubuntu4) cosmic; urgency=medium + + * Workaround broken meson copying symlinked data files, as dangling symlinks. + + -- Dimitri John Ledkov Wed, 22 Aug 2018 14:11:35 +0100 + +systemd (239-7ubuntu3) cosmic; urgency=medium + + * Revert "networkd: Unify set MTU" + This reverts commit 44b598a1c9d11c23420a5ef45ff11bcb0ed195eb due to regression + of ignoring LinkLocalAddressing=no. + Bug-Upstream: https://github.com/systemd/systemd/issues/9890 + + -- Dimitri John Ledkov Tue, 21 Aug 2018 21:51:31 +0100 + +systemd (239-7ubuntu2) cosmic; urgency=medium + + * test-sleep: skip test_fiemap upon inapproriate ioctl for device. + On v4.4 kernels, on top of btrfs ephemeral lxd v3.0 containers generate this + other error code, instead of not supported. Skip the test for both error codes. + + -- Dimitri John Ledkov Fri, 03 Aug 2018 16:49:10 +0100 + +systemd (239-7ubuntu1) cosmic; urgency=medium + + Merged from Debian Unstable, remaining changes are: + + * Set UseDomains to true, by default, on Ubuntu. + * Enable systemd-resolved by default. + * postinst: Create /etc/resolv.conf at postinst, pointing at the stub + resolver. + * postinst: drop empty/stock /etc/rc.local. + * postinst: enable persistent journal. + * Drop systemd.prerm safety check. + * Ship systemd sysctl settings. + * libnss-resolve: do not disable and stop systemd-resolved. + * boot-smoke: refactor ADT test. + * Fix test-functions failing with Ubuntu units. + * units: set ConditionVirtualization=!private-users on journald audit socket. + * units: drop resolvconf.conf drop-in, resolved integration moved to + resolvconf package. + * debian/tests: Switch to gdm3, enforce udev upgrade. + * Ubuntu/extra: ship dhclient-enter hook. + * Ignore failures to set Nice priority on services in containers. + * systemd-fsckd: Fix ADT tests to work on s390x too. + * Disable LLMNR and MulticastDNS by default. + * Enable qemu tests on most architectures. + * debian/tests/systemd-fsckd: update assertions expectations for v237. + * test/test-fs-util: detect container, in addition to root. + * test/test-functions: launch qemu-system with -vga none. + * Blacklist TEST-16-EXTEND-TIMEOUT. + * tests/boot-smoke: ignore udevd connection timeouts resolving colord group. + * tests/systemd-fsckd: ignore systemd_fsck_with_plymouth_failure. + * tests/control: ensure boot-smoke uses latest systemd & udev. + * wait-online: do not wait, if no links are managed (neither configured, or + failed). + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + * Workaround captive portals not responding to EDNS0 queries. + * resolved: Listen on both TCP and UDP by default. + * Recommend networkd-dispatcher + * networkd: if RA was implicit, do not await ndisc_configured. + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + * Skip starting systemd-remount-fs.service in containers. + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file. + * Disable dh_installinit generation of tmpfiles for the systemd package. + Replace with a manual safe call to systemd-tmpfiles which will process any + updates to the tmpfiles shipped by systemd package, taking into account any + overrides shipped by other packages, sysadmin, or specified in the runtime + directories. (LP: #1748147) + * Enable EFI/bootctl on armhf. + * boot-and-services: stderr is ok, for status command on the c1 container. + * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown. + * adt: boot-and-services: assert any kernel syslog messages. + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the + kernel (we previously only set it in modprobe.d) LP: #1779815 + * units: conditionalize more units to not start in containers. + * tests: conditionalize more unit tests to pass in LXD container. + + -- Dimitri John Ledkov Thu, 26 Jul 2018 16:26:22 +0100 + systemd (239-7) unstable; urgency=medium * autopkgtest: Add iputils-ping dependency to root-unittests. @@ -4895,6 +11302,83 @@ systemd (239-1) unstable; urgency=medium -- Michael Biebl Sat, 23 Jun 2018 00:18:08 +0200 +systemd (238-5ubuntu3) cosmic; urgency=medium + + * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin + to the kernel (we previously only set it in modprobe.d) LP: #1779815 + + -- Adam Conrad Fri, 20 Jul 2018 11:13:58 -0600 + +systemd (238-5ubuntu2) cosmic; urgency=medium + + * Disable dh_installinit generation of tmpfiles for the systemd package. + Replace with a manual safe call to systemd-tmpfiles which will process any + updates to the tmpfiles shipped by systemd package, taking into account any + overrides shipped by other packages, sysadmin, or specified in the runtime + directories. (LP: #1748147) + * Re-cherrypick keyring setreuid/setregid tricks, as that was merged post-v238. + * Enable EFI/bootctl on armhf. + * boot-and-services: stderr is ok, for status command on the c1 container. + systemctl may print warnings on the stderr when checking the status of + completed units. This should not, overall fail the autopkgtest run. + + -- Dimitri John Ledkov 🌈 Tue, 26 Jun 2018 10:55:51 +0100 + +systemd (238-5ubuntu1) cosmic; urgency=medium + + Merged from Debian Unstable, remaining changes are: + + * Set UseDomains to true, by default, on Ubuntu. + * Enable systemd-resolved by default. + * postinst: Create /etc/resolv.conf at postinst, pointing at the stub + resolver. + * postinst: drop empty/stock /etc/rc.local. + * postinst: enable persistent journal. + * Drop systemd.prerm safety check. + * Ship systemd sysctl settings. + * libnss-resolve: do not disable and stop systemd-resolved. + * boot-smoke: refactor ADT test. + * Fix test-functions failing with Ubuntu units. + * units: set ConditionVirtualization=!private-users on journald audit socket. + * units: drop resolvconf.conf drop-in, resolved integration moved to + resolvconf package. + * debian/tests: Switch to gdm3, enforce udev upgrade. + * Ubuntu/extra: ship dhclient-enter hook. + * Ignore failures to set Nice priority on services in containers. + * tests: Do not use nested kvm during ADT tests. + * systemd-fsckd: Fix ADT tests to work on s390x too. + * Disable LLMNR and MulticastDNS by default. + * Enable qemu tests on most architectures. + * debian/tests/systemd-fsckd: update assertions expectations for v237. + * test/test-fs-util: detect container, in addition to root. + * test/test-functions: launch qemu-system with -vga none. + * Blacklist TEST-16-EXTEND-TIMEOUT. + * tests/boot-smoke: ignore udevd connection timeouts resolving colord group. + * tests/systemd-fsckd: ignore systemd_fsck_with_plymouth_failure. + * tests/control: ensure boot-smoke uses latest systemd & udev. + * wait-online: do not wait, if no links are managed (neither configured, or + failed). + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + * Workaround captive portals not responding to EDNS0 queries. + * resolved: Listen on both TCP and UDP by default. + * Recommend networkd-dispatcher + * networkd: if RA was implicit, do not await ndisc_configured. + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + * Skip starting systemd-remount-fs.service in containers. + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file. + + * Apply systemd-stable/v238-stable patches. + + * Cherrypick feature to hibernate with disk offsets. + + * Remove dropped patches + * Drop merged keyring patch + * Drop write_persistent_net_s390x_virtio, as an LTS release was made. + * Revert debian/tests/upstream to be more like Debian's. + * Do not skip test-execute anymore, should be fixed on armhf now. + + -- Dimitri John Ledkov Wed, 30 May 2018 14:30:45 +0100 + systemd (238-5) unstable; urgency=medium [ Evgeny Vereshchagin ] @@ -5020,6 +11504,138 @@ systemd (237-4) unstable; urgency=medium -- Michael Biebl Wed, 28 Feb 2018 19:18:34 +0100 +systemd (237-3ubuntu11) cosmic; urgency=medium + + [ Dimitri John Ledkov ] + * hwdb: Fix wlan/rfkill keycode on Dell systems. (LP: #1762385) + * Cherrypick upstream fix for corrected detection of Virtualbox & Xen. + (LP: #1768104) + * Further improve captive portal workarounds. + Retry any NXDOMAIN results with lower feature levels, instead of just those + with 'secure' in the domain name. (LP: #1766969) + * Bump gbp.conf to cosmic + + [ Michael Biebl ] + * Add dependencies of libsystemd-shared to Pre-Depends. + This is necessary so systemctl is functional at all times during a + dist-upgrade. (Closes: #897986) (LP: #1771791) + * basic/macros: Rename noreturn into _noreturn_ + "noreturn" is reserved and can be used in other header files we include. + (Closes: #893426) + + [ Mario Limonciello ] + * Fix hibernate disk offsets. + Configure resume offset via sysfs, to enable resume from a swapfile. + (LP: #1760106) + + [ Felipe Sateler ] + * Don't include libmount.h in a header file. + Kernel and glibc headers both use MS_* constants, but are not in sync, so + only one of them can be used at a time. Thus, only import them where needed + Works around #898743 + + -- Dimitri John Ledkov Sat, 19 May 2018 00:35:30 +0100 + +systemd (237-3ubuntu10) bionic; urgency=medium + + * Create tmpfiles for persistent journal in postinst only when running + systemd (LP: #1748659) + + -- Balint Reczey Fri, 20 Apr 2018 18:55:56 +0200 + +systemd (237-3ubuntu9) bionic; urgency=medium + + * networkd: if RA was implicit, do not await ndisc_configured. + If RA was iplicit, meaning not otherwise requested, and a kernel default was in + use. Do not prevent link entering configured state, whilst ndisc configuration + is pending. Implicit kernel RA, is expected to be asynchronous and + non-blocking. (LP: #1765173) + * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i. + This ensures that all scans are completed, before installer reaches + partitioning stage. (LP: #1751813) + + -- Dimitri John Ledkov Fri, 20 Apr 2018 04:35:33 +0100 + +systemd (237-3ubuntu8) bionic; urgency=medium + + * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001). + (LP: #1727237) + * resolved: Listen on both TCP and UDP by default. (LP: #1731522) + * Recommend networkd-dispatcher (LP: #1762386) + * Refresh patches + + -- Dimitri John Ledkov Thu, 12 Apr 2018 12:12:24 +0100 + +systemd (237-3ubuntu7) bionic; urgency=medium + + * Introduce suspend then hibernate (LP: #1756006) + + -- Mario Limonciello Mon, 02 Apr 2018 14:25:04 -0500 + +systemd (237-3ubuntu6) bionic; urgency=medium + + * Adjust the new dropin test, for v237 systemd. + * Refresh the keyring patch, to the one merged. + + -- Dimitri John Ledkov Tue, 27 Mar 2018 13:40:09 +0100 + +systemd (237-3ubuntu5) bionic; urgency=medium + + * Drop old keyring/invocation_id patch, which made keyring setup be skipped in containers. + * Use new patch, which sets up session keyring without relying on chown operation. + * Drop systemd.prerm safety check. + On Ubuntu, systemd is the only choice, and is essential, via init -> + systemd-sysv -> systemd dependency chain, thus removing systemd is already + quite hard, and appropriate warnings are emitted by dpkg. (LP: #1758438) + * Detect Masked unit with drop-ins. (LP: #1752722) + * wait-online: do not wait, if no links are managed (neither configured, or failed). + (LP: #1728181) + * journald.service: set Nice=-1 to dodge watchdog on soft lockups. + (LP: #1696970) + * Refresh all patches. + + -- Dimitri John Ledkov Mon, 26 Mar 2018 15:55:25 +0100 + +systemd (237-3ubuntu4) bionic; urgency=medium + + * systemd-sysv-install: fix name initialisation. + Only initialise NAME, after --root optional argument has been parsed, otherwise + NAME is initialized to e.g. `enable', instead of to the `unit-name`, resulting + in failures. (LP: #1752882) + + -- Dimitri John Ledkov Mon, 05 Mar 2018 09:57:58 +0100 + +systemd (237-3ubuntu3) bionic; urgency=medium + + * tests/control: drop qemu-system-ppc. + Whilst some tests pass, many regress / fail to boot. This is not a regression, + as qemu-based tests were not run previously. + + -- Dimitri John Ledkov Tue, 20 Feb 2018 17:40:02 +0000 + +systemd (237-3ubuntu2) bionic; urgency=medium + + * tests/boot-smoke: ignore udevd connection timeouts resolving colord group. + * tests/systemd-fsckd: ignore systemd_fsck_with_plymouth_failure. + * tests/control: ensure boot-smoke uses latest systemd & udev. + * test/test-functions: on PPC64 use hvc0 console. + + -- Dimitri John Ledkov Tue, 20 Feb 2018 12:03:14 +0000 + +systemd (237-3ubuntu1) bionic; urgency=medium + + [ Gunnar Hjalmarsson ] + * Fix PO template creation. + Cherry-pick upstream patches to build a correct systemd.pot including + the polkit policy files even without policykit-1 being installed. + (LP: #1707898) + + [ Dimitri John Ledkov ] + * Blacklist TEST-16-EXTEND-TIMEOUT + * test/test-functions: use vmlinux for ppc64 tests. + + -- Dimitri John Ledkov Mon, 19 Feb 2018 21:15:23 +0000 + systemd (237-3) unstable; urgency=medium [ Martin Pitt ] @@ -5042,6 +11658,52 @@ systemd (237-3) unstable; urgency=medium -- Michael Biebl Wed, 14 Feb 2018 23:07:17 +0100 +systemd (237-2ubuntu3) bionic; urgency=medium + + * test/test-fs-util: detect container, in addition to root. + On armhf, during autopkgtests, whilst root is avilable, full capabilities in + parent namespace are not, since the tests are run in an LXD container. + This should resolve armhf autopkgtest failure. + * test/test-functions: launch qemu-system with -vga none. + Should resolve booting qemu-system-ppc64 without seabios. + * tests/upstream: skip parts of extend time out tests, regressed. + (LP: #1750364) + + -- Dimitri John Ledkov Mon, 19 Feb 2018 13:32:07 +0000 + +systemd (237-2ubuntu2) bionic; urgency=medium + + * Fix cryptsetup tests by shipping 95-dm-notify udev rule. (LP: #1749432) + * debian/tests/systemd-fsckd: update assertions expectations for v237 + fsck got rewritten to use "safe_fork" and whilst previously it would ignore the + error, when fsck is terminated by signal PIPE, it no longer does so. Thus one + should expect systemd-fsck-root.service to have failed in certain test cases. + + -- Dimitri John Ledkov Thu, 15 Feb 2018 00:32:54 +0000 + +systemd (237-2ubuntu1) bionic; urgency=medium + + [ Michael Vogt ] + * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file + (LP: #1749000) + + [ Martin Pitt ] + * debian/tests/boot-smoke: More robust journal checking. + Also fail the test if calling journalctl fails, and avoid calling it + twice. See https://github.com/systemd/systemd/pull/8032 + + [ Gunnar Hjalmarsson ] + * Fix creation of translation template + - State the gettext package domain "systemd" explicitly, as with the + move to meson it ended up as "untitled.pot" + - Call xgettext to extract strings from polkit *.policy.in files, which + intltool-update ignores. (LP: #1707898) + + [ Dimitri John Ledkov ] + * Enable qemu tests on all architectures LP: #1749540 + + -- Dimitri John Ledkov Wed, 14 Feb 2018 16:43:12 +0000 + systemd (237-2) unstable; urgency=medium * Drop debian/extra/rules/70-debian-uaccess.rules. @@ -5054,6 +11716,47 @@ systemd (237-2) unstable; urgency=medium -- Michael Biebl Fri, 09 Feb 2018 23:35:31 +0100 +systemd (237-1ubuntu3) bionic; urgency=medium + + * Re-enable gnu-efi on arm64, binutils is fixed + * Cherrpick PR8133 to resolve too strict PidFile handling, which breaks + services starting with potentially insecure pidfiles e.g. munin + * Disable LLMNR and MulticastDNS by default LP: #1739672 + + -- Dimitri John Ledkov Fri, 09 Feb 2018 15:49:01 +0000 + +systemd (237-1ubuntu2) bionic; urgency=medium + + * Disable gnu-efi on arm64, due to FTBFS. LP: #1746765 + + -- Dimitri John Ledkov Fri, 02 Feb 2018 23:30:05 +0000 + +systemd (237-1ubuntu1) bionic; urgency=medium + + * Remaining delta from Debian: + - ship dhclient enter hook for dhclient integration with resolved + - Use stub-resolv.conf as the default provider of /etc/resolv.conf + - ship s390x virtio interface names migration + - do not disable systemd-resolved upon libnss-resolve removal + - do not remount fs in containers, for non-degrated boot + - Unlink invocation id key, upon chown failure in containers + - Change default to UseDomains by default + - Do not treat failure to set Nice= setting as error in containers + - Add a condition to systemd-journald-audit.socet to not start in + containers (fails) + - Build without any built-in/fallback DNS server setting + - Enable resolved by default + - Update autopkgtests for reliability/raciness, and testing for typical + defaults + - Always upgrade udev, when running adt tests + - Skip test-execute on armhf + - Cherry-pick a few testsuite fixes + - Do not use nested kvm during ADT tests + - Fix ADT systemd-fsckd tests to work on s390x too + - Enable persistent journal by default + + -- Dimitri John Ledkov Tue, 30 Jan 2018 13:52:27 +0000 + systemd (237-1) unstable; urgency=medium * New upstream version 237 @@ -5162,6 +11865,51 @@ systemd (236-1) unstable; urgency=medium -- Michael Biebl Sun, 17 Dec 2017 21:45:51 +0100 +systemd (235-3ubuntu3) bionic; urgency=medium + + * netwokrd: add support for RequiredForOnline stanza. (LP: #1737570) + * resolved.service: set DefaultDependencies=no (LP: #1734167) + * systemd.postinst: enable persistent journal. (LP: #1618188) + * core: add support for non-writable unified cgroup hierarchy for container support. + (LP: #1734410) + + -- Dimitri John Ledkov Tue, 12 Dec 2017 13:25:32 +0000 + +systemd (235-3ubuntu2) bionic; urgency=medium + + * systemd-fsckd: Fix ADT tests to work on s390x too. + + -- Dimitri John Ledkov Tue, 21 Nov 2017 16:41:15 +0000 + +systemd (235-3ubuntu1) bionic; urgency=medium + + * Merge 235-3 from debian: + - Drop UBUNTU-CVE-2017-15908 included in Debian. + + * Remaining delta from Debian: + - ship dhclient enter hook for dhclient integration with resolved + - ship resolvconf integration via stub-resolv.conf + - ship s390x virtio interface names migration + - do not disable systemd-resolved upon libnss-resolve removal + - do not remote fs in containers, for non-degrated boot + - CVE-2017-15908 in resolved fix loop on packets with pseudo dns types + - Unlink invocation id key, upon chown failure in containers + - Change default to UseDomains by default + - Do not treat failure to set Nice= setting as error in containers + - Add a condition to systemd-journald-audit.socet to not start in + containers (fails) + - Build without any built-in/fallback DNS server setting + - Enable resolved by default + - Update autopkgtests for reliability/raciness, and testing for typical + defaults + - Always upgrade udev, when running adt tests + - Skip test-execute on armhf + - Cherry-pick a few testsuite fixes + + * UBUNTU Do not use nested kvm during ADT tests. + + -- Dimitri John Ledkov Tue, 21 Nov 2017 09:34:14 +0000 + systemd (235-3) unstable; urgency=medium [ Michael Biebl ] @@ -5202,6 +11950,63 @@ systemd (235-3) unstable; urgency=medium -- Martin Pitt Wed, 15 Nov 2017 09:34:00 +0100 +systemd (235-2ubuntu3) bionic; urgency=medium + + * Revert "Skip test-bpf in autopkgtest, currently is failing." + This reverts commit 75cf986e450e062a3d5780d1976e9efef41e6c4c. + * Fix test-bpf test case on ubuntu. + * Skip rename tests in containers, crude fix for now. + + -- Dimitri John Ledkov Mon, 13 Nov 2017 00:06:42 +0000 + +systemd (235-2ubuntu2) bionic; urgency=medium + + * Fix test-functions failing with Ubuntu units. + * tests: switch to using ext4 by default, instead of ext3. + * Skip test-bpf in autopkgtest, currently is failing. + + -- Dimitri John Ledkov Mon, 06 Nov 2017 18:33:39 +0000 + +systemd (235-2ubuntu1) bionic; urgency=medium + + [ Dimitri John Ledkov ] + * Merge 235-2 from debian: + - Drop all upstream cherry-picks + - Drop test-copy dh_strip size override, fixed upstream + + * Remaining delta from Debian: + - ship dhclient enter hook for dhclient integration with resolved + - ship resolvconf integration via stub-resolv.conf + - ship s390x virtio interface names migration + - do not disable systemd-resolved upon libnss-resolve removal + - do not remote fs in containers, for non-degrated boot + - CVE-2017-15908 in resolved fix loop on packets with pseudo dns types + - Unlink invocation id key, upon chown failure in containers + - Change default to UseDomains by default + - Do not treat failure to set Nice= setting as error in containers + - Add a condition to systemd-journald-audit.socet to not start in + containers (fails) + - Build without any built-in/fallback DNS server setting + - Enable resolved by default + - Update autopkgtests for reliability/raciness, and testing for typical + defaults + - Always upgrade udev, when running adt tests + - Skip test-execute on armhf + + * Fix up write_persistent_net_s390x for nullglob + + * Ship systemd sysctl settings. + Patch systemd's default sysctl settings to drop things that are set + elsewhere already. The promote secondary IP addresses is required for + networkd to successfully renew DHCP leases with a change of an IP address. + Set default package scheduler to Fair Queue CoDel. (LP: #1721223) + + [ Michael Biebl ] + * Install modprobe configuration file to /lib/modprobe.d. + Otherwise it is not read by kmod. (Closes: #879191) + + -- Dimitri John Ledkov Mon, 30 Oct 2017 17:20:54 +0000 + systemd (235-2) unstable; urgency=medium * Revert "tests: when running a manager object in a test, migrate to private @@ -5311,6 +12116,187 @@ systemd (234-2.1) unstable; urgency=high -- Cyril Brulebois Wed, 23 Aug 2017 20:41:33 +0200 +systemd (234-2ubuntu12.1) artful-security; urgency=medium + + * SECURITY UPDATE: remote DoS in resolve (LP: #1725351) + - debian/patches/CVE-2017-15908.patch: fix loop on packets with pseudo + dns types in src/resolve/resolved-dns-packet.c. + - CVE-2017-15908 + + -- Marc Deslauriers Thu, 26 Oct 2017 07:56:42 -0400 + +systemd (234-2ubuntu12) artful; urgency=medium + + [ Dimitri John Ledkov ] + * debian/rules: do not strip test-copy. + This insures test-copy is large enough for test-copy tests to pass. + (LP: #1721203) + + [ Michael Biebl ] + * Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf. + All major NTP implementations ship a native service file nowadays with a + Conflicts=systemd-timesyncd.service so this drop-in is no longer + necessary. (Closes: #873185) (LP: #1721204) + + -- Dimitri John Ledkov Wed, 04 Oct 2017 13:28:34 +0100 + +systemd (234-2ubuntu11) artful; urgency=medium + + * Ubuntu/extra: ship dhclient-enter hook. + This allows isc-dhcp dhclient to set search domains and nameservers via + resolved. + * Disable systemd-networkd-wait-online by default. + Currently it is not fit for purpose, as it leads to long boot times when + networking is unplugged or not yet configured on boot. (LP: #1714301) + * networkd: change UseMTU default to true. + Cherry-pick upstream change. (LP: #1717471) + * postinst: drop empty/stock /etc/rc.local (LP: #1716979) + * Imporve resolvconf integration. + Make the .path|.service unit that feed resolved data into resolvconf not + generate failures if resolvconf is not installed. + Add a check to make sure that resolved does not read /etc/resolv.conf when that + is symlinked to stub-resolv.conf. (LP: #1717995) + * core: gracefully bail out keyring operations when chown fails (LP: #1691096) + + -- Dimitri John Ledkov Tue, 26 Sep 2017 11:38:02 -0400 + +systemd (234-2ubuntu10) artful; urgency=medium + + * Do not fail debootstrap if /etc/resolv.conf is immutable. (LP: #1713212) + * Revert "Create /etc/resolv.conf on resolved start, if it is an empty file." + As it is ineffective, and correct creation of /etc/resolv.conf has been fixed. + This reverts commit ccba42504f216f6ffbc54eb2c9af347355f8d86b. + * initramfs-tools: trigger udevadm add actions with subsystems first. + This updates the initramfs-tools init-top udev script to trigger udevadm + actions with type specified. This mimicks the + systemd-udev-trigger.service. Without type specified only devices are + triggered, but triggering subsystems may also be required and should happen + before triggering the devices. This is the case for example on s390x with zdev + generated udev rules. (LP: #1713536) + + -- Dimitri John Ledkov Wed, 30 Aug 2017 11:22:41 +0100 + +systemd (234-2ubuntu9) artful; urgency=medium + + * boot-and-services: skip gdm3 tests when absent, as it is on s390x. + + -- Dimitri John Ledkov Wed, 23 Aug 2017 11:58:57 +0100 + +systemd (234-2ubuntu8) artful; urgency=medium + + * Enable systemd-networkd by default. + + -- Dimitri John Ledkov Tue, 22 Aug 2017 17:50:59 +0100 + +systemd (234-2ubuntu7) artful; urgency=medium + + * Always setup /etc/resolv.conf on new installations. + On new installations, /etc/resolv.conf will always exist. Move it to /run + and replace it with the desired final symlink. (LP: #1712283) + * Create /etc/resolv.conf on resolved start, if it is an empty file. + + -- Dimitri John Ledkov Tue, 22 Aug 2017 16:13:35 +0100 + +systemd (234-2ubuntu6) artful; urgency=medium + + * Disable KillUserProcesses, yet again, with meson this time. + * Re-enable reboot tests. + + -- Dimitri John Ledkov Thu, 17 Aug 2017 15:22:35 +0100 + +systemd (234-2ubuntu5) artful; urgency=medium + + * debian/tests: disable i386 & amd64 systemd-fsck test, and add environment + overrides to allow force execution of those tests locally. LP: #1708051. + + -- Dimitri John Ledkov Wed, 16 Aug 2017 13:04:48 +0100 + +systemd (234-2ubuntu4) artful; urgency=medium + + * debian/tests: disable i386 & amd64 boot-smoke, passes locally. LP: + #1708051. + + -- Dimitri John Ledkov Tue, 15 Aug 2017 14:20:12 +0100 + +systemd (234-2ubuntu3) artful; urgency=medium + + * debian/tests: Switch to gdm, enforce udev upgrade. + + -- Dimitri John Ledkov Mon, 14 Aug 2017 12:02:37 +0100 + +systemd (234-2ubuntu2) artful; urgency=medium + + * Ignore failures to set Nice priority on services in containers. + * Disable execute test on armhf. + * units: set ConditionVirtualization=!private-users on journald audit socket. + It fails to start in unprivileged containers. + * boot-smoke: refactor ADT test. + Wait for system to settle down and get to either running or degraded state, + then collect all metrics, and exit with an error if any of the tests failed. + + -- Dimitri John Ledkov Wed, 02 Aug 2017 03:02:03 +0100 + +systemd (234-2ubuntu1) artful; urgency=medium + + [ Dimitri John Ledkov ] + * ubuntu: udev.postinst preserve virtio interfaces names on upgrades, on s390x. + New udev generates stable interface names on s390x kvm instances, however, upon + upgrades existing ethX names should be preserved to prevent breaking networking + and software configurations. + This patch only affects Ubuntu systems. (Closes: #860246) (LP: #1682437) + * Set UseDomains to true, by default, on Ubuntu. + On Ubuntu, fallback DNS servers are disabled, therefore we do not leak queries + to a preset 3rd party by default. In resolved, dnssec is also disabled by + default, as too much of the internet is broken and using Ubuntu users to debug + the internet is not very productive - most of the time the end-user cannot fix + or know how to notify the site owners about the dnssec mistakes. Inherintally + the DHCP acquired DNS servers are therefore trusted, and are free to spoof + records. Not trusting DNS search domains, in such scenario, provides limited + security or privacy benefits. From user point of view, this also appears to be + a regression from previous Ubuntu releases which do trust DHCP acquired search + domains by default. + Therefore we are enabling UseDomains by default on Ubuntu. + Users may override this setting in the .network files by specifying + [DHCP|IPv6AcceptRA] UseDomains=no|route options. + * resolved: create private stub resolve file for integration with resolvconf. + The stub-resolve.conf file points at resolved stub resolver, but also lists the + available search domains. This is required to correctly resolve domains without + using resolve nss module. + * Enable systemd-resolved by default + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + The stub resolver file is dynamically managed by systemd-resolved. It points at + the stub resolver as the nameserver, however it also dynamically updates the + search stanza, thus non-nss dns tools work correctly with unqualified names and + correctly use the DHCP acquired search domains. + * libnss-resolve: do not disable and stop systemd-resolved + resolved is always used by default on ubuntu via stub resolver, therefore it + should continue to operate without libnss-resolve module installed. + * modprobe.d: set max_bonds=0 for bonding module to prevent bond0 creation. + This prevents confusing networkd, and allows networkd to manage bond0. + * Cherrypick upstream networkd-test.py assertion/check fixes. + This resolves ADT test suite failures, when running tests under lxc/lxd + providers. + * Cherrypick arm* seccomp fixes. + This should resolve ADT test failures, on arm64, when running as root. + * Re-enable seccomp and execute tests on arm. + + [ Balint Reczey ] + * Skip starting systemd-remount-fs.service in containers + even when /etc/fstab is present. + This allows entering fully running state even when /etc/fstab + lists / to be mounted from a device which is not present in the + container. (LP: #1576341) + + [ Michael Biebl ] + * selinux: Enable labeling and access checks for unprivileged users. + Revert commit that inadvertently broke a lot of SELinux related + functionality for both unprivileged users and systemd instances running + as MANAGER_USER and instead deal with the auditd issue by checking for + the CAP_AUDIT_WRITE capability before opening an audit netlink socket. + (Closes: #863800) + + -- Dimitri John Ledkov Tue, 25 Jul 2017 13:30:58 +0100 + systemd (234-2) unstable; urgency=medium [ Martin Pitt ] @@ -5331,6 +12317,64 @@ systemd (234-2) unstable; urgency=medium -- Michael Biebl Thu, 20 Jul 2017 15:13:42 +0200 +systemd (234-1ubuntu2) artful; urgency=medium + + * Set UseDomains to true, by default, on Ubuntu. + On Ubuntu, fallback DNS servers are disabled, therefore we do not leak queries + to a preset 3rd party by default. In resolved, dnssec is also disabled by + default, as too much of the internet is broken and using Ubuntu users to debug + the internet is not very productive - most of the time the end-user cannot fix + or know how to notify the site owners about the dnssec mistakes. Inherintally + the DHCP acquired DNS servers are therefore trusted, and are free to spoof + records. Not trusting DNS search domains, in such scenario, provides limited + security or privacy benefits. From user point of view, this also appears to be + a regression from previous Ubuntu releases which do trust DHCP acquired search + domains by default. + Therefore we are enabling UseDomains by default on Ubuntu. + Users may override this setting in the .network files by specifying + [DHCP|IPv6AcceptRA] UseDomains=no|route options. + * resolved: create private stub resolve file for integration with resolvconf. + The stub-resolve.conf file points at resolved stub resolver, but also lists the + available search domains. This is required to correctly resolve domains without + using resolve nss module. + * Enable systemd-resolved by default + * Create /etc/resolv.conf at postinst, pointing at the stub resolver. + The stub resolver file is dynamically managed by systemd-resolved. It points at + the stub resolver as the nameserver, however it also dynamically updates the + search stanza, thus non-nss dns tools work correctly with unqualified names and + correctly use the DHCP acquired search domains. + * libnss-resolve: do not disable and stop systemd-resolved + resolved is always used by default on ubuntu via stub resolver, therefore it + should continue to operate without libnss-resolve module installed. + + -- Dimitri John Ledkov Fri, 21 Jul 2017 17:07:17 +0100 + +systemd (234-1ubuntu1) artful; urgency=medium + + [ Dimitri John Ledkov ] + * Merge with debian, outstanding delta below. + * ubuntu: udev.postinst preserve virtio interfaces names on upgrades, on s390x. + New udev generates stable interface names on s390x kvm instances, however, upon + upgrades existing ethX names should be preserved to prevent breaking networking + and software configurations. + This patch only affects Ubuntu systems. (Closes: #860246) (LP: #1682437) + * debian/tests/root-unittests: disable execute and seccomp tests on arm + test-seccomp and test-execute fail on arm64 kernels. Marking both tests as + expected failures. An upstream bug report is filed to resolve these. + (LP: #1672499) + * Disable fallback DNS servers. + This causes resolved to call-home to google, attempt to access network when + none is available, and spams logs. (LP: #1449001, #1698734) + + [ Balint Reczey ] + * Skip starting systemd-remount-fs.service in containers + even when /etc/fstab is present. + This allows entering fully running state even when /etc/fstab + lists / to be mounted from a device which is not present in the + container. (LP: #1576341) + + -- Dimitri John Ledkov Mon, 17 Jul 2017 10:59:34 +0100 + systemd (234-1) unstable; urgency=medium [ Michael Biebl ] @@ -5412,6 +12456,52 @@ systemd (233-9) unstable; urgency=medium -- Michael Biebl Mon, 19 Jun 2017 15:10:14 +0200 +systemd (233-8ubuntu2) artful; urgency=medium + + * Disable fallback DNS servers. + This causes resolved to call-home to google, attempt to access network when + none is available, and spams logs. (LP: #1449001, #1698734) + * SECURITY UPDATE: Out-of-bounds write in systemd-resolved. + CVE-2017-9445 (LP: #1695546) + + -- Dimitri John Ledkov Wed, 28 Jun 2017 13:27:28 +0100 + +systemd (233-8ubuntu1) artful; urgency=medium + + Merge from experimental. Existing Ubuntu cherry-picks: + * TEST-12: cherry-pick upstream fix for compat with new netcat-openbsd. + * networkd: cherry-pick support for setting bridge port's priority. + This is a useful feature/bugfix to improve feature parity of networkd with + ifupdown. This matches netplan's expectations to be able to set bridge port's + priorities via networked. This featue is to be used by netplan/MAAS/OpenStack. + * Cherrypick upstream commit to enable system use kernel maximum limit for RLIMIT_NOFILE isntead of hard-coded (low) limit of 65536. + * debian/tests/root-unittests: disable execute and seccomp tests on arm + test-seccomp and test-execute fail on arm64 kernels. Marking both tests as + expected failures. An upstream bug report is filed to resolve these. + * Cherrypick upstream patch for vio predictable interface names. + * Cherrypick upstream patch for platform predictable interface names. + + Ubuntu cherry-picks, now also applied in Debian: + * resolved: fix null pointer dereference crash + + Remaining Ubuntu delta: + * ubuntu: udev.postinst preserve virtio interfaces names on upgrades, on s390x. + New udev generates stable interface names on s390x kvm instances, however, upon + upgrades existing ethX names should be preserved to prevent breaking networking + and software configurations. + This patch only affects Ubuntu systems. + * Skip starting systemd-remount-fs.service in containers + even when /etc/fstab is present. + This allows entering fully running state even when /etc/fstab + lists / to be mounted from a device which is not present in the + container. + + New Ubuntu cherry-picks: + * loginctl: Chrerry-pick upstream fix to not ignore multiple session ids. + (LP: #1682154) + + -- Dimitri John Ledkov Mon, 19 Jun 2017 15:24:30 +0100 + systemd (233-8) experimental; urgency=medium * Bump debhelper compatibility level to 10 @@ -5450,6 +12540,57 @@ systemd (233-7) experimental; urgency=me -- Michael Biebl Wed, 24 May 2017 12:26:18 +0200 +systemd (233-6ubuntu3) artful; urgency=medium + + * resolved: fix null pointer dereference crash (LP: #1621396) + + -- Dimitri John Ledkov Mon, 22 May 2017 09:29:22 +0100 + +systemd (233-6ubuntu2) artful; urgency=medium + + [ Michael Biebl ] + * basic/journal-importer: Fix unaligned access in get_data_size() + (Closes: #862062) + + [ Dimitri John Ledkov ] + * ubuntu: disable dnssec on any ubuntu releases (LP: #1690605) + * Cherrypick upstream patch for vio predictable interface names. + * Cherrypick upstream patch for platform predictable interface names. + (LP: #1686784) + + [ Balint Reczey ] + * Skip starting systemd-remount-fs.service in containers + even when /etc/fstab is present. + This allows entering fully running state even when /etc/fstab + lists / to be mounted from a device which is not present in the + container. (LP: #1576341) + + -- Dimitri John Ledkov Wed, 17 May 2017 19:24:03 +0100 + +systemd (233-6ubuntu1) artful; urgency=medium + + Merge from Debian, existing changes: + * ubuntu: udev.postinst preserve virtio interfaces names on upgrades, on s390x. + New udev generates stable interface names on s390x kvm instances, however, upon + upgrades existing ethX names should be preserved to prevent breaking networking + and software configurations. + This patch only affects Ubuntu systems. (Closes: #860246) (LP: #1682437) + * TEST-12: cherry-pick upstream fix for compat with new netcat-openbsd. + * networkd: cherry-pick support for setting bridge port's priority. + This is a useful feature/bugfix to improve feature parity of networkd with + ifupdown. This matches netplan's expectations to be able to set bridge port's + priorities via networked. This featue is to be used by netplan/MAAS/OpenStack. + + New changes: + * Cherrypick upstream commit to enable system use kernel maximum limit for + RLIMIT_NOFILE isntead of hard-coded (low) limit of 65536. (LP: #1686361) + * debian/tests/root-unittests: disable execute and seccomp tests on arm + test-seccomp and test-execute fail on arm64 kernels. Marking both tests as + expected failures. An upstream bug report is filed to resolve these. + (LP: #1672499) + + -- Dimitri John Ledkov Tue, 02 May 2017 11:23:19 +0100 + systemd (233-6) experimental; urgency=medium [ Felipe Sateler ] @@ -5490,6 +12631,52 @@ systemd (233-6) experimental; urgency=me -- Michael Biebl Fri, 28 Apr 2017 21:47:14 +0200 +systemd (233-5ubuntu1) artful; urgency=medium + + [ Felipe Sateler ] + * Backport upstream PR #5531. + This delays opening the mdns and llmnr sockets until a network has enabled them. + This silences annoying messages when networkd receives such packets without + expecting them: + Got mDNS UDP packet on unknown scope. + + [ Martin Pitt ] + * resolved: Disable DNSSEC by default on stretch and zesty. + Both Debian stretch and Ubuntu zesty are close to releasing, switch to + DNSSEC=off by default for those. Users can still turn it back on with + DNSSEC=allow-downgrade (or even "yes"). + + [ Michael Biebl ] + * Add Conflicts against hal. + Since v183, udev no longer supports RUN+="socket:". This feature is + still used by hal, but now generates vast amounts of errors in the + journal. Thus force the removal of hal by adding a Conflicts to the udev + package. This is safe, as hal is long dead and no longer useful. + * Drop systemd-ui Suggests + systemd-ui is unmaintained upstream and not particularly useful anymore. + * journal: fix up syslog facility when forwarding native messages. + Native journal messages (_TRANSPORT=journal) typically don't have a + syslog facility attached to it. As a result when forwarding the + messages to syslog they ended up with facility 0 (LOG_KERN). + Apply syslog_fixup_facility() so we use LOG_USER instead. (Closes: #837893) + * Split upstream tests into systemd-tests binary package (Closes: #859152) + * Get PACKAGE_VERSION from config.h. + This also works with meson and is not autotools specific. + + [ Dimitri John Ledkov ] + * ubuntu: udev.postinst preserve virtio interfaces names on upgrades, on s390x. + New udev generates stable interface names on s390x kvm instances, however, upon + upgrades existing ethX names should be preserved to prevent breaking networking + and software configurations. + This patch only affects Ubuntu systems. (Closes: #860246) (LP: #1682437) + * TEST-12: cherry-pick upstream fix for compat with new netcat-openbsd. + * networkd: cherry-pick support for setting bridge port's priority. + This is a useful feature/bugfix to improve feature parity of networkd with + ifupdown. This matches netplan's expectations to be able to set bridge port's + priorities via networked. This featue is to be used by netplan/MAAS/OpenStack. + + -- Dimitri John Ledkov Fri, 21 Apr 2017 14:36:34 +0100 + systemd (233-5) experimental; urgency=medium * Do not throw a warning in emergency and rescue mode if plymouth is not diff -pruN 259-1/debian/control 259-1ubuntu2/debian/control --- 259-1/debian/control 2025-12-14 00:30:42.000000000 +0000 +++ 259-1ubuntu2/debian/control 2026-01-06 15:01:12.000000000 +0000 @@ -1,7 +1,8 @@ Source: systemd Section: admin Priority: optional -Maintainer: Debian systemd Maintainers +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Debian systemd Maintainers Uploaders: Marco d'Itri , Sjoerd Simons , Martin Pitt , @@ -10,8 +11,8 @@ Uploaders: Marco d'Itri , Nick Rosbrook , Standards-Version: 4.7.2 Rules-Requires-Root: no -Vcs-Git: https://salsa.debian.org/systemd-team/systemd.git -Vcs-Browser: https://salsa.debian.org/systemd-team/systemd +Vcs-Git: https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd +Vcs-Browser: https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd Homepage: https://systemd.io Build-Depends: debhelper-compat (= 13), debhelper (>= 13.11.6), @@ -26,10 +27,10 @@ Build-Depends: debhelper-compat (= 13), docbook-xml , meson (>= 0.60.0), rsync | meson (>= 1.3.0~), - clang:native [amd64 arm64 ppc64el riscv64 s390x] , - linux-bpf-dev [amd64 arm64 ppc64el riscv64 s390x] , - libbpf-dev [amd64 arm64 ppc64el riscv64 s390x] , - bpftool:native [amd64 arm64 ppc64el riscv64 s390x] , + clang:native [amd64 arm64 ppc64el s390x] , + linux-bpf-dev [amd64 arm64 ppc64el s390x] , + libbpf-dev [amd64 arm64 ppc64el s390x] , + bpftool:native [amd64 arm64 ppc64el s390x] , linux-tools-generic | bpftool , gettext, gperf, @@ -61,11 +62,11 @@ Build-Depends: debhelper-compat (= 13), libdw-dev (>= 0.158) , libpolkit-gobject-1-dev , libzstd-dev (>= 1.4.0), - libtss2-dev , + libtss2-dev [!i386] , libfido2-dev , libp11-kit-dev , libssl-dev , - libqrencode-dev , + libqrencode-dev [!i386] , libxen-dev [amd64 arm64] , libpwquality-dev , libarchive-dev , @@ -94,13 +95,13 @@ Recommends: default-dbus-system-bus | db linux-sysctl-defaults, login, systemd-timesyncd | time-daemon, + systemd-resolved, systemd-cryptsetup, ${dlopen:Recommends}, Suggests: systemd-container, systemd-homed, systemd-userdbd, systemd-boot, - systemd-resolved, systemd-repart, libtss2-tcti-device0, polkitd, @@ -391,6 +392,7 @@ Depends: ${shlibs:Depends}, libudev1 (= ${binary:Version}), s390-tools [s390], Recommends: ${dlopen:Recommends}, + systemd-hwe-hwdb, Suggests: ${dlopen:Suggests}, # DEP17 M7: moving files between / and /usr, and between packages, so use Conflicts: Conflicts: systemd (<< 255~rc1-4~), @@ -520,7 +522,7 @@ Build-Profiles: Architecture: amd64 i386 arm64 armhf loong64 riscv64 Depends: ${shlibs:Depends}, ${misc:Depends}, - efibootmgr, + efibootmgr [amd64 arm64], systemd (= ${binary:Version}), systemd-boot-tools (= ${binary:Version}), systemd-boot-efi (= ${binary:Version}) [!amd64 !arm64], @@ -574,22 +576,6 @@ Description: simple UEFI boot manager - . This package contains the EFI binaries. -Package: systemd-boot-efi-amd64-signed-template -Architecture: amd64 -Depends: ${shlibs:Depends}, ${misc:Depends}, -Build-Profiles: -Description: Template for signed systemd-boot-efi package (amd64) - This package is used to control code signing by the Debian signing - service (amd64 variant). - -Package: systemd-boot-efi-arm64-signed-template -Architecture: arm64 -Depends: ${shlibs:Depends}, ${misc:Depends}, -Build-Profiles: -Description: Template for signed systemd-boot-efi package (arm64) - This package is used to control code signing by the Debian signing - service (arm64 variant). - Package: systemd-ukify Build-Profiles: Architecture: all @@ -613,16 +599,15 @@ Description: tool to build Unified Kerne Package: systemd-resolved Multi-Arch: foreign +Priority: important Architecture: linux-any Pre-Depends: ${misc:Pre-Depends} Depends: ${shlibs:Depends}, ${misc:Depends}, systemd (= ${binary:Version}), default-dbus-system-bus | dbus-system-bus -Recommends: libnss-myhostname, - libnss-resolve, +Recommends: ${dlopen:Recommends}, libidn2-0, - ${dlopen:Recommends}, Suggests: polkitd, ${dlopen:Suggests}, Provides: resolvconf @@ -671,6 +656,7 @@ Description: Provides the systemd-repart systemd-keyutil is a tool to manipulate X.509 certificates. Package: systemd-cryptsetup +Priority: important Build-Profiles: Architecture: linux-any Depends: ${shlibs:Depends}, diff -pruN 259-1/debian/extra/dbus-1/system.d/org.freedesktop.locale1.read-only.conf 259-1ubuntu2/debian/extra/dbus-1/system.d/org.freedesktop.locale1.read-only.conf --- 259-1/debian/extra/dbus-1/system.d/org.freedesktop.locale1.read-only.conf 2025-12-04 21:35:22.000000000 +0000 +++ 259-1ubuntu2/debian/extra/dbus-1/system.d/org.freedesktop.locale1.read-only.conf 2026-01-05 15:34:11.000000000 +0000 @@ -11,12 +11,10 @@ use it to modify the settings. - - diff -pruN 259-1/debian/extra/wrap_cl.py 259-1ubuntu2/debian/extra/wrap_cl.py --- 259-1/debian/extra/wrap_cl.py 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/extra/wrap_cl.py 2026-01-05 15:34:11.000000000 +0000 @@ -0,0 +1,26 @@ +# Simple changelog entry formatter +# +# It simply uses the built in formatter and linewraps the text +# +# Use git-dch --customizations=/usr/share/doc/git-buildpackage/examples/wrap_cl.py +# or set it via gbp.conf + +import gbp.dch +import os +from itertools import chain + +def format_changelog_entry(commit_info, options, last_commit=False): + entry = gbp.dch.format_changelog_entry(commit_info, options, last_commit) + if not entry: + return + if commit_info['author'].name != os.environ['DEBFULLNAME']: + entry.append(f"Author: {commit_info['author'].name}") + + cfs = [i.decode() for i in chain.from_iterable(commit_info['files'].values()) if i != b'debian/patches/series'] + if len(cfs) == 1: + entry.append(f"File: {cfs[0]}") + else: + entry.append("Files:") + [entry.append(f"- {i}") for i in cfs] + entry.append(f"https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id={commit_info['id']}") + return entry diff -pruN 259-1/debian/gbp.conf 259-1ubuntu2/debian/gbp.conf --- 259-1/debian/gbp.conf 2025-11-26 12:36:15.000000000 +0000 +++ 259-1ubuntu2/debian/gbp.conf 2026-01-05 15:34:11.000000000 +0000 @@ -2,7 +2,8 @@ pristine-tar = True patch-numbers = False sign-tags = True -debian-branch = debian/master +debian-branch = ubuntu-resolute +debian-tag = ubuntu/%(version)s upstream-branch = upstream/latest [import-orig] diff -pruN 259-1/debian/libnss-systemd.nss 259-1ubuntu2/debian/libnss-systemd.nss --- 259-1/debian/libnss-systemd.nss 2025-11-26 12:36:15.000000000 +0000 +++ 259-1ubuntu2/debian/libnss-systemd.nss 2026-01-05 15:34:11.000000000 +0000 @@ -1,4 +1,4 @@ -passwd last systemd -group last systemd -shadow last systemd -gshadow last systemd +passwd after=files,compat systemd +group after=files,compat systemd +shadow after=files,compat systemd +gshadow after=files,compat systemd diff -pruN 259-1/debian/libnss-systemd.preinst 259-1ubuntu2/debian/libnss-systemd.preinst --- 259-1/debian/libnss-systemd.preinst 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/libnss-systemd.preinst 2026-01-05 15:34:11.000000000 +0000 @@ -0,0 +1,42 @@ +#!/bin/sh +set -e + +#DEBHELPER# + +if { [ "$1" = install ] || [ "$1" = upgrade ]; } && + dpkg --compare-versions "$2" lt-nl "257.9-0ubuntu2~"; then + + # First drop all the systemd instances from nsswitch, to ensure that we're adding them back and in order. + # The code is the same that is generated for postrm, but we cannot call postrm + # directly here, since it relies on refcounting. + if [ -e "${DPKG_ROOT}/etc/nsswitch.conf" ]; then + sed -E -i "${DPKG_ROOT}/etc/nsswitch.conf" \ + -e ':a /^shadow:\s.*#/ s/(^[^#]+)\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|#)/\1\3/g ; t a' \ + -e ':b /^shadow:\s.*#/ s/(^[^#]+)\s(systemd)(\s|#)/\1\3/g ; t b' \ + -e ':c /^shadow:\s[^#]*$/ s/\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|$)/\2/g ; t c' \ + -e ':d /^shadow:\s[^#]*$/ s/\s(systemd)(\s|$)/\2/g ; t d' + + sed -E -i "${DPKG_ROOT}/etc/nsswitch.conf" \ + -e ':a /^passwd:\s.*#/ s/(^[^#]+)\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|#)/\1\3/g ; t a' \ + -e ':b /^passwd:\s.*#/ s/(^[^#]+)\s(systemd)(\s|#)/\1\3/g ; t b' \ + -e ':c /^passwd:\s[^#]*$/ s/\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|$)/\2/g ; t c' \ + -e ':d /^passwd:\s[^#]*$/ s/\s(systemd)(\s|$)/\2/g ; t d' + + sed -E -i "${DPKG_ROOT}/etc/nsswitch.conf" \ + -e ':a /^gshadow:\s.*#/ s/(^[^#]+)\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|#)/\1\3/g ; t a' \ + -e ':b /^gshadow:\s.*#/ s/(^[^#]+)\s(systemd)(\s|#)/\1\3/g ; t b' \ + -e ':c /^gshadow:\s[^#]*$/ s/\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|$)/\2/g ; t c' \ + -e ':d /^gshadow:\s[^#]*$/ s/\s(systemd)(\s|$)/\2/g ; t d' + + sed -E -i "${DPKG_ROOT}/etc/nsswitch.conf" \ + -e ':a /^group:\s.*#/ s/(^[^#]+)\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|#)/\1\3/g ; t a' \ + -e ':b /^group:\s.*#/ s/(^[^#]+)\s(systemd)(\s|#)/\1\3/g ; t b' \ + -e ':c /^group:\s[^#]*$/ s/\s(systemd)\s+\[!?[A-Za-z]+=[A-Za-z]+\](\s|$)/\2/g ; t c' \ + -e ':d /^group:\s[^#]*$/ s/\s(systemd)(\s|$)/\2/g ; t d' + fi + + # Signal to postinst that the NSS services should be installed on + # recent upgraders, since the module is available starting from 232-7 + # but users may not have a fully configured NSS switch (LP: #2121017). + touch "${DPKG_ROOT}/etc/nsswitch.conf.nss.${DPKG_MAINTSCRIPT_PACKAGE}-will-install" +fi diff -pruN 259-1/debian/patches/lp2064096-switch-root-use-MS_MOVE-for-run-when-switchig-from-initrd.patch 259-1ubuntu2/debian/patches/lp2064096-switch-root-use-MS_MOVE-for-run-when-switchig-from-initrd.patch --- 259-1/debian/patches/lp2064096-switch-root-use-MS_MOVE-for-run-when-switchig-from-initrd.patch 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/lp2064096-switch-root-use-MS_MOVE-for-run-when-switchig-from-initrd.patch 2026-01-06 15:21:11.000000000 +0000 @@ -0,0 +1,48 @@ +From: Nick Rosbrook +Date: Fri, 17 May 2024 10:17:08 +0200 +Subject: switch-root: use MS_MOVE for /run when switchig from initrd + +Bug-Ubuntu: https://launchpad.net/bugs/2064096 +Forwarded: https://github.com/systemd/systemd/pull/32645 + +Before commit 7c764d4599 ("switch-root: always use MS_BIND to move api vfs over"), +when switching root from an initrd, the old procfs, sysfs, /dev/ and +/run would be moved using MS_MOVE. According to that commit, this change +was mostly a simplification because systemd already cleans up the old +mount hierarchy before the switch root, and no longer needed to rely on +the clean up side-effect of MS_MOVE. + +However, this change broke some systemd services that also have an +associated AppArmor profile. For example, in Ubuntu, rsyslog has an +AppArmor profile configured, and when it tries to access +/run/systemd/notify during start up (after the switch root has +occurred), we see the denial: + + audit: type=1400 audit(1714740096.740:159): apparmor="DENIED" operation="sendmsg" class="file" info="Failed name lookup - disconnected path" error=-13 profile="rsyslogd" name="systemd/notify" [...] + +The difference in MS_BIND vs MS_MOVE affects the view that AppArmor has +of the mount tree. With MS_BIND, AppArmor will not know that e.g. +/run/systemd/notify is in the current mount tree after the pivot_root, +because it is tracking this path from the old root. But with MS_MOVE, +the original mount is preserved and does not affect AppArmor's view. + +Ultimately, this is most likely something that should be addressed in +AppArmor, but that is not going to happen in the short term. For now, +just go back to MS_MOVE when switching from the initrd. +--- + src/shared/switch-root.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/shared/switch-root.c b/src/shared/switch-root.c +index d5f34c5..1b6c7fe 100644 +--- a/src/shared/switch-root.c ++++ b/src/shared/switch-root.c +@@ -34,7 +34,7 @@ int switch_root(const char *new_root, + { "/dev", MS_BIND|MS_REC, MS_BIND|MS_REC }, /* Recursive, because we want to save the original /dev/shm/ + /dev/pts/ and similar */ + { "/sys", MS_BIND|MS_REC, MS_BIND|MS_REC }, /* Similar, we want to retain various API VFS, or the cgroupv1 /sys/fs/cgroup/ tree */ + { "/proc", MS_BIND|MS_REC, MS_BIND|MS_REC }, /* Similar */ +- { "/run", MS_BIND, MS_BIND|MS_REC }, /* Recursive except on soft reboot, see above */ ++ { "/run", MS_BIND, MS_MOVE }, /* Recursive except on soft reboot, see above */ + { "/run/credentials", MS_BIND|MS_REC, 0 /* skip! */ }, /* Credential mounts should survive */ + { "/run/host", MS_BIND|MS_REC, 0 /* skip! */ }, /* Host supplied hierarchy should also survive */ + }; diff -pruN 259-1/debian/patches/lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch 259-1ubuntu2/debian/patches/lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch --- 259-1/debian/patches/lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch 2026-01-06 15:21:11.000000000 +0000 @@ -0,0 +1,111 @@ +From: Nick Rosbrook +Date: Fri, 19 Dec 2025 11:01:49 -0500 +Subject: ukify: omit .osrel section when --os-release= is empty + +Origin: upstream, https://github.com/systemd/systemd/commit/75890d949f92c412c0936b8536b2e0dc8f7dfb40 +Bug-Ubuntu: https://launchpad.net/bugs/2133402 + +The primary motivation for this is to allow users of ukify to build +UKI-like objects, without having them later be detected as a UKI by +tools like kernel-install and bootctl. + +The common code used by these tools to determine if a PE binary is a UKI +checks that both .osrel and .linux sections are present. Hence, adding +a mechansim to skip .osrel provides a way to avoid being labeled a UKI. +--- + man/ukify.xml | 5 ++++- + src/ukify/test/test_ukify.py | 15 +++++++++++---- + src/ukify/ukify.py | 10 +++++++++- + 3 files changed, 24 insertions(+), 6 deletions(-) + +diff --git a/man/ukify.xml b/man/ukify.xml +index 8297616..7462c5c 100644 +--- a/man/ukify.xml ++++ b/man/ukify.xml +@@ -365,7 +365,10 @@ + The os-release description (the .osrel section). The argument + may be a literal string, or @ followed by a path name. If not specified, the + os-release5 file +- will be picked up from the host system. ++ will be picked up from the host system. If explicitly set to an empty string, the ".osrel" section ++ is omitted from the UKI (this is not recommended in most cases, and causes the resulting artifact ++ to not be recognized as a UKI by other tools like kernel-install ++ and bootctl). + + + +diff --git a/src/ukify/test/test_ukify.py b/src/ukify/test/test_ukify.py +index f75ef0c..224a385 100755 +--- a/src/ukify/test/test_ukify.py ++++ b/src/ukify/test/test_ukify.py +@@ -641,7 +641,7 @@ def test_efi_signing_pesign(kernel_initrd, tmp_path): + + shutil.rmtree(tmp_path) + +-def test_inspect(kernel_initrd, tmp_path, capsys): ++def test_inspect(kernel_initrd, tmp_path, capsys, osrel=True): + if kernel_initrd is None: + pytest.skip('linux+initrd not found') + if not shutil.which('sbsign'): +@@ -653,7 +653,7 @@ def test_inspect(kernel_initrd, tmp_path, capsys): + + output = f'{tmp_path}/signed2.efi' + uname_arg='1.2.3' +- osrel_arg='Linux' ++ osrel_arg='Linux' if osrel else '' + cmdline_arg='ARG1 ARG2 ARG3' + + args = [ +@@ -680,8 +680,12 @@ def test_inspect(kernel_initrd, tmp_path, capsys): + + text = capsys.readouterr().out + +- expected_osrel = f'.osrel:\n size: {len(osrel_arg)}' +- assert expected_osrel in text ++ if osrel: ++ expected_osrel = f'.osrel:\n size: {len(osrel_arg)}' ++ assert expected_osrel in text ++ else: ++ assert '.osrel:' not in text ++ + expected_cmdline = f'.cmdline:\n size: {len(cmdline_arg)}' + assert expected_cmdline in text + expected_uname = f'.uname:\n size: {len(uname_arg)}' +@@ -694,6 +698,9 @@ def test_inspect(kernel_initrd, tmp_path, capsys): + + shutil.rmtree(tmp_path) + ++def test_inspect_no_osrel(kernel_initrd, tmp_path, capsys): ++ test_inspect(kernel_initrd, tmp_path, capsys, osrel=False) ++ + @pytest.mark.skipif(not slow_tests, reason='slow') + def test_pcr_signing(kernel_initrd, tmp_path): + if kernel_initrd is None: +diff --git a/src/ukify/ukify.py b/src/ukify/ukify.py +index ad65605..1e6e50c 100755 +--- a/src/ukify/ukify.py ++++ b/src/ukify/ukify.py +@@ -1477,6 +1477,9 @@ def make_uki(opts: UkifyConfig) -> None: + '.profile', + } + ++ if not opts.os_release: ++ to_import.remove('.osrel') ++ + for profile in opts.join_profiles: + pe = pefile.PE(profile, fast_load=True) + prev_len = len(uki.sections) +@@ -2412,7 +2415,12 @@ def finalize_options(opts: argparse.Namespace) -> None: + + opts.os_release = resolve_at_path(opts.os_release) + +- if not opts.os_release and opts.linux: ++ if opts.os_release == '': ++ # If --os-release= with an empty string was passed, treat that as ++ # explicitly disabling the .osrel section, and do not fallback to the ++ # system's os-release files. ++ pass ++ elif opts.os_release is None and opts.linux: + p = Path('/etc/os-release') + if not p.exists(): + p = Path('/usr/lib/os-release') diff -pruN 259-1/debian/patches/lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch 259-1ubuntu2/debian/patches/lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch --- 259-1/debian/patches/lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch 2026-01-06 15:21:11.000000000 +0000 @@ -0,0 +1,66 @@ +From: Nick Rosbrook +Date: Tue, 16 Dec 2025 10:24:14 -0500 +Subject: test: cope with uutils coreutils flag parsing for date command + +Bug-Ubuntu: https://launchpad.net/bugs/2136408 + +With GNU coreutils, one can pass an argument to the "set" flag like: + + date -s "-3 days" + +With uutils coreutils, that gives an error: + + error: unexpected argument '-3' found + tip: to pass '-3' as a value, use '-- -3' + +That's a bug (https://github.com/uutils/coreutils/issues/9679), but both +implementations accept --set="-3 days" just fine, so use that instead. +--- + test/units/TEST-53-TIMER.RandomizedDelaySec-reload.sh | 2 +- + test/units/TEST-53-TIMER.issue-16347.sh | 4 ++-- + test/units/TEST-53-TIMER.restart-trigger.sh | 4 ++-- + 3 files changed, 5 insertions(+), 5 deletions(-) + +diff --git a/test/units/TEST-53-TIMER.RandomizedDelaySec-reload.sh b/test/units/TEST-53-TIMER.RandomizedDelaySec-reload.sh +index e9b9d4f..2baa47c 100755 +--- a/test/units/TEST-53-TIMER.RandomizedDelaySec-reload.sh ++++ b/test/units/TEST-53-TIMER.RandomizedDelaySec-reload.sh +@@ -84,7 +84,7 @@ check_elapse_timestamp + # elapse timestamp (this goes through a slightly different codepath that actually contained the original + # issue). + : "Next elapse timestamp after time jump" +-date -s "tomorrow 00:10" ++date --set="tomorrow 00:10" + check_elapse_timestamp + + : "Next elapse timestamp after daemon-reload" +diff --git a/test/units/TEST-53-TIMER.issue-16347.sh b/test/units/TEST-53-TIMER.issue-16347.sh +index 8b26614..b486787 100755 +--- a/test/units/TEST-53-TIMER.issue-16347.sh ++++ b/test/units/TEST-53-TIMER.issue-16347.sh +@@ -4,8 +4,8 @@ set -eux + set -o pipefail + + # Reset host date to current time, 3 days in the past. +-date -s "-3 days" +-trap 'date -s "+3 days"' EXIT ++date --set="-3 days" ++trap 'date --set="+3 days"' EXIT + + # Run a timer for every 15 minutes. + systemd-run --unit test-timer --on-calendar "*:0/15:0" true +diff --git a/test/units/TEST-53-TIMER.restart-trigger.sh b/test/units/TEST-53-TIMER.restart-trigger.sh +index e5cd575..71de99c 100755 +--- a/test/units/TEST-53-TIMER.restart-trigger.sh ++++ b/test/units/TEST-53-TIMER.restart-trigger.sh +@@ -37,8 +37,8 @@ JOURNAL_TS="$(date "+%s")" + systemctl restart "$UNIT_NAME.timer" + systemctl status "$UNIT_NAME.timer" + +-date -s '+2 hours' +-trap 'date -s "-2 hours"' EXIT ++date --set='+2 hours' ++trap 'date --set="-2 hours"' EXIT + sleep 1 + systemctl status "$UNIT_NAME.timer" + assert_eq "$(journalctl -q -p info --since="@$JOURNAL_TS" --unit="$UNIT_NAME" --grep="$TEST_MESSAGE" | wc -l)" "1" diff -pruN 259-1/debian/patches/lp2136413-test-skip-TEST-13-NSPAWN.machined.patch 259-1ubuntu2/debian/patches/lp2136413-test-skip-TEST-13-NSPAWN.machined.patch --- 259-1/debian/patches/lp2136413-test-skip-TEST-13-NSPAWN.machined.patch 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/lp2136413-test-skip-TEST-13-NSPAWN.machined.patch 2026-01-06 15:23:08.000000000 +0000 @@ -0,0 +1,23 @@ +From: Nick Rosbrook +Date: Tue, 6 Jan 2026 10:04:37 -0500 +Subject: test: skip TEST-13-NSPAWN.machined + +Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2136413 +--- + test/units/TEST-13-NSPAWN.sh | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/test/units/TEST-13-NSPAWN.sh b/test/units/TEST-13-NSPAWN.sh +index 311b64a..f7b1f79 100755 +--- a/test/units/TEST-13-NSPAWN.sh ++++ b/test/units/TEST-13-NSPAWN.sh +@@ -3,6 +3,9 @@ + set -eux + set -o pipefail + ++# LP: #2136413 ++export TEST_SKIP_SUBTESTS="machined" ++ + FSTYPE="$(stat --file-system --format "%T" /)" + + if [[ "$FSTYPE" == "fuseblk" ]]; then diff -pruN 259-1/debian/patches/lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch 259-1ubuntu2/debian/patches/lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch --- 259-1/debian/patches/lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch 2026-01-06 15:21:11.000000000 +0000 @@ -0,0 +1,37 @@ +From: Nick Rosbrook +Date: Tue, 16 Dec 2025 11:56:27 -0500 +Subject: test: use journalctl -n option instead of piping to head + +Bug-Ubuntu: https://launchpad.net/bugs/2136497 + +On Ubuntu's test infrastructure for the development series, this test +often fails when piping the journal output to head. The cause is +unclear, but possibly related to Ubuntu's use of uutils coreutils. + +Workaround this by just using journalctl's -n flag, which removes the +need for piping output to head. +--- + test/units/TEST-04-JOURNAL.journal.sh | 8 ++++---- + 1 file changed, 4 insertions(+), 4 deletions(-) + +diff --git a/test/units/TEST-04-JOURNAL.journal.sh b/test/units/TEST-04-JOURNAL.journal.sh +index de3b45e..03613b5 100755 +--- a/test/units/TEST-04-JOURNAL.journal.sh ++++ b/test/units/TEST-04-JOURNAL.journal.sh +@@ -69,12 +69,12 @@ journalctl -b -t "$ID" --truncate-newline | grep -v TAIL >/dev/null + journalctl -b -1 -b all -m >/dev/null + + # -b always behaves like -b0 +-journalctl -q -b-1 -b0 | head -1 >/tmp/expected +-journalctl -q -b-1 -b | head -1 >/tmp/output ++journalctl -q -b-1 -b0 -n+1 >/tmp/expected ++journalctl -q -b-1 -b -n+1 >/tmp/output + diff /tmp/expected /tmp/output + # ... even when another option follows (both of these should fail due to -m) +-{ journalctl -ball -b0 -m 2>&1 || :; } | head -1 >/tmp/expected +-{ journalctl -ball -b -m 2>&1 || :; } | head -1 >/tmp/output ++{ journalctl -ball -b0 -n+1 -m 2>&1 || :; } >/tmp/expected ++{ journalctl -ball -b -n+1 -m 2>&1 || :; } >/tmp/output + diff /tmp/expected /tmp/output + + # https://github.com/systemd/systemd/issues/13708 diff -pruN 259-1/debian/patches/lp2136752-test-workaround-uutils-dd-broken-pipe.patch 259-1ubuntu2/debian/patches/lp2136752-test-workaround-uutils-dd-broken-pipe.patch --- 259-1/debian/patches/lp2136752-test-workaround-uutils-dd-broken-pipe.patch 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/lp2136752-test-workaround-uutils-dd-broken-pipe.patch 2026-01-06 15:24:21.000000000 +0000 @@ -0,0 +1,28 @@ +From: Nick Rosbrook +Date: Thu, 11 Sep 2025 14:55:19 -0400 +Subject: test: workaround uutils dd broken pipe + +Bug-Ubuntu: https://launchpad.net/bugs/2136752 +Forwarded: no + +--- + test/units/TEST-72-SYSUPDATE.sh | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/test/units/TEST-72-SYSUPDATE.sh b/test/units/TEST-72-SYSUPDATE.sh +index d74e382..85f7078 100755 +--- a/test/units/TEST-72-SYSUPDATE.sh ++++ b/test/units/TEST-72-SYSUPDATE.sh +@@ -21,6 +21,12 @@ if [[ ! -x "$SYSUPDATE" ]]; then + exit 77 + fi + ++# Work around broken pipe error in rust-coreutils ++if [[ "$(readlink -f /usr/bin/dd)" == "/usr/lib/cargo/bin/coreutils/dd" ]]; then ++ rm /usr/bin/dd ++ ln -s /usr/bin/gnudd /usr/bin/dd ++fi ++ + # Loopback devices may not be supported. They are used because sfdisk cannot + # change the sector size of a file, and we want to test both 512 and 4096 byte + # sectors. If loopback devices are not supported, we can only test one sector diff -pruN 259-1/debian/patches/series 259-1ubuntu2/debian/patches/series --- 259-1/debian/patches/series 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/series 2026-01-06 15:22:13.000000000 +0000 @@ -0,0 +1,7 @@ +lp2064096-switch-root-use-MS_MOVE-for-run-when-switchig-from-initrd.patch +test-skip-TEST-50-DISSECT.dissect.patch +lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch +lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch +lp2136752-test-workaround-uutils-dd-broken-pipe.patch +lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch +lp2136413-test-skip-TEST-13-NSPAWN.machined.patch diff -pruN 259-1/debian/patches/test-skip-TEST-50-DISSECT.dissect.patch 259-1ubuntu2/debian/patches/test-skip-TEST-50-DISSECT.dissect.patch --- 259-1/debian/patches/test-skip-TEST-50-DISSECT.dissect.patch 1970-01-01 00:00:00.000000000 +0000 +++ 259-1ubuntu2/debian/patches/test-skip-TEST-50-DISSECT.dissect.patch 2026-01-06 15:21:11.000000000 +0000 @@ -0,0 +1,28 @@ +From: Nick Rosbrook +Date: Mon, 25 Aug 2025 10:02:04 -0400 +Subject: test: skip TEST-50-DISSECT.dissect + +Low priority bug, not fixed before 25.10 freeze. +Skip to allow resetting autopkgtest baseline to PASS. + +Bug-Ubuntu: https://bugs.launchpad.net/bugs/2116460 +Forwarded: no +--- + test/units/TEST-50-DISSECT.sh | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/test/units/TEST-50-DISSECT.sh b/test/units/TEST-50-DISSECT.sh +index b42aa6e..42e3df2 100755 +--- a/test/units/TEST-50-DISSECT.sh ++++ b/test/units/TEST-50-DISSECT.sh +@@ -3,6 +3,10 @@ + set -eux + set -o pipefail + ++# LP: 2116460 - Low priority bug, not fixed before 25.10 freeze. ++# Skip to allow resetting autopkgtest baseline to PASS. ++export TEST_SKIP_SUBTESTS="dissect" ++ + # shellcheck source=test/units/test-control.sh + . "$(dirname "$0")"/test-control.sh + diff -pruN 259-1/debian/rules 259-1ubuntu2/debian/rules --- 259-1/debian/rules 2025-12-17 23:08:45.000000000 +0000 +++ 259-1ubuntu2/debian/rules 2026-01-05 15:34:11.000000000 +0000 @@ -138,9 +138,9 @@ CONFFLAGS += \ -Dcryptolib=openssl \ -Ddns-over-tls=openssl \ -Dlibfido2=enabled \ - -Dtpm2=enabled \ + -Dtpm2=$(if $(filter i386,$(DEB_HOST_ARCH)),disabled,enabled) \ -Dp11kit=enabled \ - -Dqrencode=enabled \ + -Dqrencode=$(if $(filter i386,$(DEB_HOST_ARCH)),disabled,enabled) \ -Dpwquality=enabled \ -Dhomed=enabled \ -Duserdb=true \ @@ -178,7 +178,7 @@ endif # BPF/BTF are only enabled and usable on a few architectures ifeq (, $(filter $(DEB_BUILD_PROFILES), stage1 pkg.systemd.nobpf)) -ifneq (,$(filter $(DEB_TARGET_ARCH), amd64 arm64 ppc64el riscv64 s390x)) +ifneq (,$(filter $(DEB_TARGET_ARCH), amd64 arm64 ppc64el s390x)) CONFFLAGS += \ -Dvmlinux-h=provided \ -Dvmlinux-h-path=/usr/include/$(DEB_HOST_MULTIARCH)/linux/bpf/vmlinux.h \ @@ -266,6 +266,12 @@ ifeq ($(DEB_VENDOR),Ubuntu) cp -a debian/extra/units-ubuntu/* debian/systemd/usr/lib/systemd/system/ endif + # Remove unneeded file that produces errors in debugedit (LP: #1950445) +ifeq ($(DEB_HOST_ARCH),i386) + rm -f debian/systemd/usr/lib/systemd/boot/efi/linuxia32.elf.stub + rm -f debian/systemd-boot-efi/usr/lib/systemd/boot/efi/linuxia32.elf.stub +endif + ifeq (,$(filter stage1, $(DEB_BUILD_PROFILES))) ifeq ($(DEB_VENDOR),Debian) ifneq ($(TEMPLATE_EFI_ARCH),) diff -pruN 259-1/debian/systemd-cryptsetup.install 259-1ubuntu2/debian/systemd-cryptsetup.install --- 259-1/debian/systemd-cryptsetup.install 2025-11-26 12:36:15.000000000 +0000 +++ 259-1ubuntu2/debian/systemd-cryptsetup.install 2026-01-05 15:34:11.000000000 +0000 @@ -1,7 +1,7 @@ #!/usr/bin/dh-exec usr/bin/systemd-cryptenroll usr/bin/systemd-cryptsetup -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/nvpcr/cryptsetup.nvpcr +[amd64 arm64 armhf riscv64 loong64] usr/lib/nvpcr/cryptsetup.nvpcr usr/lib/systemd/system/cryptsetup-pre.target usr/lib/systemd/system/cryptsetup.target usr/lib/systemd/system/integritysetup-pre.target diff -pruN 259-1/debian/systemd.install 259-1ubuntu2/debian/systemd.install --- 259-1/debian/systemd.install 2025-12-17 23:08:45.000000000 +0000 +++ 259-1ubuntu2/debian/systemd.install 2026-01-05 15:34:11.000000000 +0000 @@ -64,8 +64,8 @@ usr/lib/kernel/install.d/50-depmod.insta usr/lib/kernel/install.d/90-loaderentry.install usr/lib/kernel/install.d/90-uki-copy.install usr/lib/modprobe.d/systemd.conf -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/nvpcr/hardware.nvpcr - usr/lib/pcrlock.d/ +[amd64 arm64 armhf riscv64 loong64] usr/lib/nvpcr/hardware.nvpcr +[!i386] usr/lib/pcrlock.d/ [!abin32-any-any-any !ilp32-any-any-any !x32-any-any-any !any-arc !any-arm !any-armeb !any-csky !any-hppa !any-i386 !any-m68k !any-mips !any-mipsel !any-mipsr6 !any-mipsr6el !any-nios2 !any-or1k !any-powerpc !any-powerpcel !any-s390 !any-sh3 !any-sh3eb !any-sh4 !any-sh4eb !any-sparc] usr/lib/sysctl.d/50-pid-max.conf usr/lib/systemd/catalog/ usr/lib/systemd/network/80-6rd-tunnel.link @@ -102,7 +102,7 @@ usr/lib/systemd/systemd-backlight usr/lib/systemd/systemd-battery-check usr/lib/systemd/systemd-binfmt usr/lib/systemd/systemd-boot-check-no-failures - usr/lib/systemd/systemd-bsod +[!i386] usr/lib/systemd/systemd-bsod usr/lib/systemd/system/dbus-org.freedesktop.hostname1.service usr/lib/systemd/system/dbus-org.freedesktop.locale1.service usr/lib/systemd/system/dbus-org.freedesktop.login1.service @@ -121,13 +121,13 @@ usr/lib/systemd/systemd-journald usr/lib/systemd/systemd-localed usr/lib/systemd/systemd-logind usr/lib/systemd/systemd-makefs - usr/lib/systemd/systemd-measure +[!i386] usr/lib/systemd/systemd-measure usr/lib/systemd/systemd-modules-load usr/lib/systemd/systemd-networkd usr/lib/systemd/systemd-networkd-wait-online usr/lib/systemd/systemd-network-generator -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/systemd-pcrextend - usr/lib/systemd/systemd-pcrlock +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/systemd-pcrextend +[!i386] usr/lib/systemd/systemd-pcrlock usr/lib/systemd/systemd-pstore usr/lib/systemd/systemd-quotacheck usr/lib/systemd/systemd-random-seed @@ -144,8 +144,8 @@ usr/lib/systemd/systemd-sulogin-shell usr/lib/systemd/systemd-sysctl usr/lib/systemd/systemd-sysroot-fstab-check usr/lib/systemd/systemd-timedated -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/systemd-tpm2-clear -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/systemd-tpm2-setup +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/systemd-tpm2-clear +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/systemd-tpm2-setup usr/lib/systemd/systemd-update-done usr/lib/systemd/systemd-user-runtime-dir usr/lib/systemd/systemd-user-sessions @@ -156,7 +156,7 @@ usr/lib/systemd/system/emergency.service usr/lib/systemd/system/emergency.target usr/lib/systemd/system/exit.target usr/lib/systemd/system/factory-reset.target -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/factory-reset.target.wants/systemd-pcrphase-factory-reset.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/factory-reset.target.wants/systemd-pcrphase-factory-reset.service usr/lib/systemd/system/final.target usr/lib/systemd/system/first-boot-complete.target usr/lib/systemd/system-generators/systemd-debug-generator @@ -170,7 +170,7 @@ usr/lib/systemd/system-generators/system usr/lib/systemd/system-generators/systemd-ssh-generator usr/lib/systemd/system-generators/systemd-system-update-generator usr/lib/systemd/system-generators/systemd-sysv-generator -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system-generators/systemd-tpm2-generator +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system-generators/systemd-tpm2-generator usr/lib/systemd/system/breakpoint-pre-basic.service usr/lib/systemd/system/breakpoint-pre-mount.service usr/lib/systemd/system/breakpoint-pre-switch-root.service @@ -195,9 +195,9 @@ usr/lib/systemd/system/initrd-switch-roo usr/lib/systemd/system/initrd-switch-root.target usr/lib/systemd/system/initrd.target usr/lib/systemd/system/initrd.target.wants/systemd-battery-check.service - usr/lib/systemd/system/initrd.target.wants/systemd-bsod.service +[!i386] usr/lib/systemd/system/initrd.target.wants/systemd-bsod.service usr/lib/systemd/system/initrd.target.wants/systemd-confext-initrd.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/initrd.target.wants/systemd-pcrphase-initrd.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/initrd.target.wants/systemd-pcrphase-initrd.service usr/lib/systemd/system/initrd.target.wants/systemd-sysext-initrd.service usr/lib/systemd/system/initrd-udevadm-cleanup-db.service usr/lib/systemd/system/initrd-usr-fs.target @@ -250,22 +250,22 @@ usr/lib/systemd/system/sockets.target.wa usr/lib/systemd/system/sockets.target.wants/systemd-journald.socket usr/lib/systemd/system/sockets.target.wants/systemd-logind-varlink.socket usr/lib/systemd/system/sockets.target.wants/systemd-mute-console.socket -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sockets.target.wants/systemd-pcrextend.socket -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sockets.target.wants/systemd-pcrlock.socket +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sockets.target.wants/systemd-pcrextend.socket +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sockets.target.wants/systemd-pcrlock.socket usr/lib/systemd/system/sockets.target.wants/systemd-sysext.socket usr/lib/systemd/system/soft-reboot.target usr/lib/systemd/system/sound.target usr/lib/systemd/system/ssh-access.target usr/lib/systemd/system/storage-target-mode.target -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/storage-target-mode.target.wants/systemd-pcrphase-storage-target-mode.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/storage-target-mode.target.wants/systemd-pcrphase-storage-target-mode.service usr/lib/systemd/system/suspend.target usr/lib/systemd/system/suspend-then-hibernate.target usr/lib/systemd/system/swap.target usr/lib/systemd/system/sys-fs-fuse-connections.mount usr/lib/systemd/system/sysinit.target usr/lib/systemd/system/sysinit.target.wants/systemd-hibernate-clear.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrnvdone.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrproduct.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrnvdone.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrproduct.service usr/lib/systemd/system/sysinit.target.wants/dev-hugepages.mount usr/lib/systemd/system/sysinit.target.wants/dev-mqueue.mount usr/lib/systemd/system/sysinit.target.wants/kmod-static-nodes.service @@ -283,17 +283,17 @@ usr/lib/systemd/system/sysinit.target.wa usr/lib/systemd/system/sysinit.target.wants/systemd-journal-flush.service usr/lib/systemd/system/sysinit.target.wants/systemd-machine-id-commit.service usr/lib/systemd/system/sysinit.target.wants/systemd-modules-load.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrmachine.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrphase.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrphase-sysinit.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrmachine.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrphase.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-pcrphase-sysinit.service usr/lib/systemd/system/sysinit.target.wants/systemd-random-seed.service usr/lib/systemd/system/sysinit.target.wants/systemd-sysctl.service usr/lib/systemd/system/sysinit.target.wants/systemd-sysusers.service usr/lib/systemd/system/sysinit.target.wants/systemd-tmpfiles-setup-dev-early.service usr/lib/systemd/system/sysinit.target.wants/systemd-tmpfiles-setup-dev.service usr/lib/systemd/system/sysinit.target.wants/systemd-tmpfiles-setup.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-tpm2-setup-early.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-tpm2-setup.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-tpm2-setup-early.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/sysinit.target.wants/systemd-tpm2-setup.service usr/lib/systemd/system/sysinit.target.wants/systemd-update-done.service usr/lib/systemd/system/sysinit.target.wants/imports.target usr/lib/systemd/system/sys-kernel-config.mount @@ -310,7 +310,7 @@ usr/lib/systemd/system/systemd-backlight usr/lib/systemd/system/systemd-battery-check.service usr/lib/systemd/system/systemd-binfmt.service usr/lib/systemd/system/systemd-boot-check-no-failures.service - usr/lib/systemd/system/systemd-bsod.service +[!i386] usr/lib/systemd/system/systemd-bsod.service usr/lib/systemd/system/systemd-confext.service usr/lib/systemd/system/systemd-confext-initrd.service usr/lib/systemd/system/systemd-creds.socket @@ -355,27 +355,27 @@ usr/lib/systemd/system/systemd-mute-cons usr/lib/systemd/system/systemd-networkd*.service usr/lib/systemd/system/systemd-networkd*.socket usr/lib/systemd/system/systemd-network-generator.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrextend@.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrextend.socket -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrfs-root.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrfs@.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock.socket -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock@.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-file-system.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-firmware-code.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-firmware-config.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-machine-id.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-make-policy.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-secureboot-authority.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-secureboot-policy.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrmachine.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-factory-reset.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-initrd.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-storage-target-mode.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-sysinit.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrnvdone.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrproduct.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrextend@.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrextend.socket +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrfs-root.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrfs@.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock.socket +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock@.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-file-system.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-firmware-code.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-firmware-config.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-machine-id.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-make-policy.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-secureboot-authority.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrlock-secureboot-policy.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrmachine.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-factory-reset.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-initrd.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-storage-target-mode.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrphase-sysinit.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrnvdone.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-pcrproduct.service usr/lib/systemd/system/systemd-poweroff.service usr/lib/systemd/system/systemd-pstore.service usr/lib/systemd/system/systemd-quotacheck*.service @@ -400,9 +400,9 @@ usr/lib/systemd/system/systemd-tmpfiles- usr/lib/systemd/system/systemd-tmpfiles-setup-dev-early.service usr/lib/systemd/system/systemd-tmpfiles-setup-dev.service usr/lib/systemd/system/systemd-tmpfiles-setup.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-tpm2-clear.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-tpm2-setup-early.service -[amd64 i386 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-tpm2-setup.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-tpm2-clear.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-tpm2-setup-early.service +[amd64 arm64 armhf riscv64 loong64] usr/lib/systemd/system/systemd-tpm2-setup.service usr/lib/systemd/system/systemd-update-done.service usr/lib/systemd/system/systemd-user-sessions.service usr/lib/systemd/system/systemd-validatefs@.service diff -pruN 259-1/debian/systemd.manpages 259-1ubuntu2/debian/systemd.manpages --- 259-1/debian/systemd.manpages 2025-11-26 12:36:15.000000000 +0000 +++ 259-1ubuntu2/debian/systemd.manpages 2026-01-05 15:34:11.000000000 +0000 @@ -23,7 +23,7 @@ debian/tmp/usr/share/man/man1/systemd-fi debian/tmp/usr/share/man/man1/systemd-id128.1 debian/tmp/usr/share/man/man1/systemd-inhibit.1 debian/tmp/usr/share/man/man1/systemd-machine-id-setup.1 - debian/tmp/usr/share/man/man1/systemd-measure.1 +[!i386] debian/tmp/usr/share/man/man1/systemd-measure.1 debian/tmp/usr/share/man/man1/systemd-mount.1 debian/tmp/usr/share/man/man1/systemd-mute-console.1 debian/tmp/usr/share/man/man1/systemd-mute-console.socket.1 @@ -143,8 +143,8 @@ debian/tmp/usr/share/man/man8/systemd-bi debian/tmp/usr/share/man/man8/systemd-binfmt.service.8 debian/tmp/usr/share/man/man8/systemd-boot-check-no-failures.8 debian/tmp/usr/share/man/man8/systemd-boot-check-no-failures.service.8 - debian/tmp/usr/share/man/man8/systemd-bsod.8 - debian/tmp/usr/share/man/man8/systemd-bsod.service.8 +[!i386] debian/tmp/usr/share/man/man8/systemd-bsod.8 +[!i386] debian/tmp/usr/share/man/man8/systemd-bsod.service.8 debian/tmp/usr/share/man/man8/systemd-confext.8 debian/tmp/usr/share/man/man8/systemd-confext.service.8 debian/tmp/usr/share/man/man8/systemd-confext-initrd.service.8 @@ -202,23 +202,23 @@ debian/tmp/usr/share/man/man8/systemd-ne debian/tmp/usr/share/man/man8/systemd-networkd-wait-online@.service.8 debian/tmp/usr/share/man/man8/systemd-network-generator.8 debian/tmp/usr/share/man/man8/systemd-network-generator.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrextend.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrfs-root.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrfs@.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-file-system.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-firmware-code.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-firmware-config.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-machine-id.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-make-policy.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-secureboot-authority.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-secureboot-policy.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrmachine.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrnvdone.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrphase-initrd.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrphase.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrphase-sysinit.service.8 -[amd64 i386 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrproduct.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrextend.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrfs-root.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrfs@.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-file-system.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-firmware-code.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-firmware-config.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-machine-id.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-make-policy.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-secureboot-authority.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrlock-secureboot-policy.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrmachine.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrnvdone.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrphase-initrd.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrphase.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrphase-sysinit.service.8 +[amd64 arm64 armhf riscv64 loong64] debian/tmp/usr/share/man/man8/systemd-pcrproduct.service.8 debian/tmp/usr/share/man/man8/systemd-poweroff.service.8 debian/tmp/usr/share/man/man8/systemd-pstore.8 debian/tmp/usr/share/man/man8/systemd-pstore.service.8 diff -pruN 259-1/debian/systemd.postinst 259-1ubuntu2/debian/systemd.postinst --- 259-1/debian/systemd.postinst 2025-11-26 12:36:15.000000000 +0000 +++ 259-1ubuntu2/debian/systemd.postinst 2026-01-05 15:34:11.000000000 +0000 @@ -76,6 +76,12 @@ fi # Initial update of the Message Catalogs database _update_catalog +# Process all tmpfiles that we ship, including any overrides in +# runtime-dir/sysadmin-dir/other packages (e.g. rsyslog) +# +# Ignore if this fails, because e.g. %b will fail on WSL +systemd-tmpfiles --create || : + #DEBHELPER# # skip daemon-reexec and try-restarts during shutdown to avoid hitting LP: #1803391 diff -pruN 259-1/debian/tests/boot-and-services 259-1ubuntu2/debian/tests/boot-and-services --- 259-1/debian/tests/boot-and-services 2025-11-27 18:55:03.000000000 +0000 +++ 259-1ubuntu2/debian/tests/boot-and-services 2026-01-05 15:34:11.000000000 +0000 @@ -251,6 +251,7 @@ profile "violator-test" { #include /{usr/,}bin/** rix, + file @{coreutil_dirs}* ix, /etc/machine-id r, } ''') diff -pruN 259-1/debian/tests/control 259-1ubuntu2/debian/tests/control --- 259-1/debian/tests/control 2025-11-27 18:55:03.000000000 +0000 +++ 259-1ubuntu2/debian/tests/control 2026-01-06 15:01:26.000000000 +0000 @@ -10,6 +10,7 @@ Restrictions: needs-root, allow-stderr, Tests: unit-config Depends: systemd, + udev, systemd-dev, libpam-systemd, libnss-systemd, @@ -22,6 +23,7 @@ Restrictions: needs-root, allow-stderr Tests: storage Depends: systemd, + udev, systemd-cryptsetup, libpam-systemd, libnss-systemd, @@ -36,6 +38,7 @@ Restrictions: needs-root, isolation-mach Tests: networkd-test.py Tests-Directory: test Depends: systemd, + udev, systemd-resolved, systemd-cryptsetup, libpam-systemd, @@ -54,6 +57,7 @@ Restrictions: needs-root, isolation-cont Tests: build-login Depends: systemd, + udev, systemd-cryptsetup, libpam-systemd, libnss-systemd, @@ -72,6 +76,8 @@ Restrictions: isolation-container Tests: boot-and-services Depends: systemd-sysv, + systemd, + udev, systemd-container, systemd-coredump, systemd-dev, @@ -98,7 +104,7 @@ Depends: systemd-sysv, libp11-kit-dev, xserver-xorg-video-dummy, xserver-xorg, - gdm3 [!s390x !riscv64 !armel !loong64], + gdm3 [amd64], cron, network-manager, busybox-static, @@ -132,11 +138,11 @@ Depends: systemd-tests, iputils-ping, dbus-user-session, zstd, + libtss2-dev [!i386], libelf-dev, - libtss2-dev, libfido2-dev, libdw-dev, - libqrencode-dev, + libqrencode-dev [!i386], libpwquality-dev, libarchive-dev, libgcrypt20-dev, @@ -172,16 +178,6 @@ Depends: systemd, libsystemd-dev, libcap-dev, -Tests: tests-in-lxd -Depends: systemd-tests, - udev, - libpam-systemd, - autopkgtest, - lsb-release, - snapd, - dnsmasq-base, -Restrictions: needs-root, allow-stderr, isolation-machine, breaks-testbed, skip-not-installable, skippable - # Dummy test so that changes to key packages trigger our autopkgtests on ci.debian.net Features: test-name=hint-testsuite-triggers Test-Command: /bin/true diff -pruN 259-1/debian/tests/tests-in-lxd 259-1ubuntu2/debian/tests/tests-in-lxd --- 259-1/debian/tests/tests-in-lxd 2025-12-06 01:08:02.000000000 +0000 +++ 259-1ubuntu2/debian/tests/tests-in-lxd 1970-01-01 00:00:00.000000000 +0000 @@ -1,129 +0,0 @@ -#!/bin/sh - -# run some autopkgtest tests in lxd -set -eux - -# Until setup is complete, treat all errors as skippable. -trap 'exit 77' EXIT - -RELEASE=$( - . /etc/os-release; - if [ "$ID" = "ubuntu" ]; then - echo "$VERSION_CODENAME" - elif [ "$ID" = "debian" ]; then - if [ -n "${VERSION_ID:-}" ] && [ -n "${VERSION_CODENAME:-}" ]; then - echo "$VERSION_CODENAME" - else - debian_version="$(cat /etc/debian_version)" - if [ "${debian_version#*/}" = sid ]; then - if [ ! -f /etc/apt/preferences.d/autopkgtest-unstable.pref ] && ( [ "$VERSION_CODENAME" = sid ] || grep -q -r sid /etc/apt/sources.list* || grep -q -r unstable /etc/apt/sources.list* ); then - echo "sid" - else - echo "$VERSION_CODENAME" - fi - fi - fi - fi -) - -DISTRO=$( - . /etc/os-release; - echo "$ID" -) - -snap install lxd -lxd init --auto - -# Do this until it is the LXD upstream default. -# https://github.com/canonical/lxd/issues/13631 -lxc profile set default security.nesting true - -IMAGE="autopkgtest/${DISTRO}/${RELEASE}/$(dpkg --print-architecture)" - -if [ "$DISTRO" = "ubuntu" ]; then - IMAGE_SERVER="ubuntu-daily" - IMAGE_ID="${RELEASE}" -else - IMAGE_SERVER="images" - IMAGE_ID="${DISTRO}/${RELEASE}" -fi - -# work around LP: #1878225 as fallback -autopkgtest-build-lxd "${IMAGE_SERVER}:${IMAGE_ID}" - -# help debugging if building lxd image still fails -lxc image list | grep -q autopkgtest/ || autopkgtest-build-lxd "${IMAGE_SERVER}:${IMAGE_ID}" || \ - (lxc launch "${IMAGE_SERVER}:${IMAGE_ID}" systemd-lxc - sleep 60 - lxc exec systemd-lxc systemctl is-system-running || (lxc exec systemd-lxc -- systemctl list-units --failed ; lxc exec systemd-lxc systemctl list-jobs ; lxc exec systemd-lxc -- journalctl -a) - exit 1) - -# push local apt configuration to match pinning -lxc launch "$IMAGE" systemd-lxc - -lxc file push -r /etc/apt systemd-lxc/etc/ - -# When --pin-packages is passed to autopkgtest, and --disable-apt-fallback is NOT passed (default), -# fallback logic will be invoked if an upgrade calculation cannot be calculated during testbed setup. -# This can happen e.g. testing with a package trigger from experimental. -# -# Unfortunately, even though we copy in the exact /etc/apt configs, the fallback logic is not triggered -# because we didn't use --pin-packages. Below is hack to re-construct the arguments from the -# /etc/apt/preferences.d/autopkgtest-*.pref configs. -autopkgtest_pin_args="" -for f in $(find /etc/apt/preferences.d/ -name autopkgtest-*.pref); do - temp="${f#/etc/apt/preferences.d/autopkgtest-}" - release="${temp%.pref}" - - packages= - for p in $(awk '/^Package: [[:alnum:]]/{gsub(":any", ""); print $2}' $f); do - packages="${packages:+$packages,}$p" - done - autopkgtest_pin_args="${autopkgtest_pin_args:+$autopkgtest_pin_args }--pin-packages=$release=$packages" - - lxc exec systemd-lxc -- rm $f -done - -if [ -f /etc/apt/sources.list.d/autopkgtest.list ]; then - lxc exec systemd-lxc -- sed -i 's|/tmp/autopkgtest.[^/]*/|/root/|' /etc/apt/sources.list.d/autopkgtest.list || true -fi -# auto-apt-proxy cannot be installed until after apt-get update, but apt-get update -# cannot be ran successfully until auto-apt-proxy is installed -lxc exec systemd-lxc -- rm -f /etc/apt/apt.conf.d/auto-apt-proxy.conf - -if [ -d "${AUTOPKGTEST_TMP:-}/../tree" ]; then - cd "${AUTOPKGTEST_TMP:-}/../tree" -elif [ -d /tmp/autopkgtest.*/build.*/src ]; then - cd /tmp/autopkgtest.*/build.*/src -elif [ -d /tmp/autopkgtest.*/build.*/systemd ]; then - cd /tmp/autopkgtest.*/build.*/systemd -else - cd /tmp/autopkgtest.*/build.*/real-tree -fi - -# push potential locally built packages -if [ -d ../../binaries ]; then - lxc file push -r ../../binaries systemd-lxc/root/ -fi - -lxc stop systemd-lxc -lxc publish systemd-lxc --reuse --alias "$IMAGE" - -# Clear the previous exit code trap. -trap - EXIT - -# Only test unprivileged LXD containers, since privileged LXD containers cause LoadCredential= (LP: #1950787), -# and other things to break. According to upstream LXD, we should not worry to much about privileged LXD -# containers anyways (see https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1950787/comments/4). -# -# We would like to have a simple boot smoke test for privileged LXD containers still, but cannot do -# so until LP: #1998943 is fixed in autopkgtest. -# -# Ensure that skipped nested tests do not fail the outer test invocation. -set +e -autopkgtest -U -B ${autopkgtest_pin_args} . --test-name=unit-tests --test-name=boot-and-services -- lxd "$IMAGE" -r=$? -if [ $r -eq 2 ]; then - exit 0 -fi -exit $r diff -pruN 259-1/debian/tests/upstream 259-1ubuntu2/debian/tests/upstream --- 259-1/debian/tests/upstream 2025-12-06 16:42:35.000000000 +0000 +++ 259-1ubuntu2/debian/tests/upstream 2026-01-06 15:26:10.000000000 +0000 @@ -43,6 +43,12 @@ cleanup () { fi } +# Force use of gnucp (LP: #2122363) +if [ "$(readlink -f /usr/bin/cp)" = "/usr/lib/cargo/bin/coreutils/cp" ]; then + rm /usr/bin/cp + ln -s /usr/bin/gnucp /usr/bin/cp +fi + # apparmor is not compatible with swtpm aa-teardown >/dev/null 2>&1 || true # we need user namespaces for some tests running in nspawn @@ -173,6 +179,10 @@ export SYSTEMD_INTEGRATION_TESTS=1 export NO_BUILD=1 export NO_SYNC=1 +if dpkg-vendor --is Ubuntu; then + export TEST_SKIP="TEST-08-INITRD" # LP: #2136419 +fi + mkosi --debug genkey mkosi summary meson setup "${workdir}/btrfs/build" -Dintegration-tests=true -Dtests=true