Apertis CI robot authored 1 year ago and Dylan Aïssi committed 1 year ago

Signed-off-by: Apertis CI robot <noreply+not_a_robot@apertis.org>

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Older versions of systemd did not provide post install and post remove
scripts to update the boot configuration. The latest version of systemd
does, so we no longer need to patch in our own symlinks to achieve this.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Ritesh Raj Sarraf authored 1 year ago and Dylan Aïssi committed 1 year ago

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

Ritesh Raj Sarraf authored 1 year ago and Dylan Aïssi committed 1 year ago

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.co.uk>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Drop Apertis delda for systemd-boot, most of these files are in systemd or systemd-boot-edi in Debian

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Ritesh Raj Sarraf authored 1 year ago and Walter Lozano committed 1 year ago

Now with this rebase, re-enable build with elfutils

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

Ritesh Raj Sarraf authored 1 year ago and Walter Lozano committed 1 year ago

Most are now integrated in this upstream release

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

Ritesh Raj Sarraf authored 1 year ago and Walter Lozano committed 1 year ago

Merge remote-tracking branch 'origin/apertis/v2024dev2' into proposed-updates/debian/bookworm/9af2cfc5

* origin/apertis/v2024dev2: (57 commits)
  Release systemd version 247.3-7+apertis2
  Enable tests on MR
  Refresh the automatically detected licensing information
  Release systemd version 247.3-7+apertis1
  Move debian/patches/meson*.patch to debian/patches/apertis/
  Release systemd version 247.3-6+apertis4
  meson: do not fail if rsync is not installed with meson 0.57.2
  meson.build: change operator combining bools from + to and
  Fix issue with journald and /var at shutdown
  Remove '-execdir +' usage for compatibility with rust-findutils
  Fix compilation on kernel 5.14+
  Refresh the automatically detected licensing information
  Release systemd version 247.3-6+apertis1
  Release systemd version 247.3-1apertis5
  Fix access to run/systemd/notify for systemd-logind in apparmor rule
  Release systemd version 247.3-1apertis4
  Fix the path to bootable binaries in efi entry
  Refresh patch for UEFI entries generator
  85-initrd: fix the args number
  Fix kernel-install call from update-initramfs
  ...

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

In order to test newer version before they land in the main branches
enable running tests on MR.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

These patches are specific to Apertis because a new version of meson
has been backported to Apertis.

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

Fixes: https://github.com/mesonbuild/meson/issues/8641

Backport fix from,
https://github.com/systemd/systemd/commit/7c5fd25119a495009ea62f79e5daec34cc464628



Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

upstream meson stopped allowing combining boolean with the plus
operator, and now requires using the logical and operator

reference:
https://github.com/mesonbuild/meson/commit/43302d3296baff6aeaf8e03f5d701b0402e37a6c

Fixes: https://github.com/systemd/systemd/issues/20632

Backport fix from,
https://github.com/systemd/systemd/commit/c29537f39e4f413a6cbfe9669fa121bdd6d8b36f



Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

https://phabricator.apertis.org/T7904



Signed-off-by: Detlev Casanova <detlev.casanova@collabora.com>

https://phabricator.apertis.org/T8219



Signed-off-by: Ryan Gonzalez <ryan.gonzalez@collabora.com>

https://phabricator.apertis.org/T8162



Signed-off-by: Ryan Gonzalez <ryan.gonzalez@collabora.com>

Signed-off-by: Ariel D'Alessandro <ariel.dalessandro@collabora.com>

Signed-off-by: Ariel D'Alessandro <ariel.dalessandro@collabora.com>

Merge remote-tracking branch 'origin/apertis/v2022dev3' into proposed-updates/debian/bullseye/8d2817af

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

Systemd-logind fails to start in SDK, preventing other subsystem like
PipeWire or WirePlumber to start, with error:
- kernel: audit: type=1400 audit(1623416689.776:50): apparmor="DENIED"
  operation="sendmsg" info="Failed name lookup - disconnected path"
  error=-13 profile="/lib/systemd/systemd-logind" name="run/systemd/notify"
  pid=393 comm="systemd-logind" requested_mask="w" denied_mask="w" fsuid=0
  ouid=0

From https://lists.ubuntu.com/archives/apparmor/2018-July/011718.html about
`attach_disconnected` flag, this error occurs for:
> a fd that was opened outside of the namespace and "passed in".
> The "passed in" could be via some fd passing scheme, process inheritance
> - file open at exec, process inheritance - file open at clone newns,
> unshare, setns, or file open at pivot_root/chroot with the fd outside of
> the new root.

AppArmor's default behavior is to reject new accesses to disconnected paths
reporting back the pathname without a leading `/`. Unfortunately this can
break some applications, if a profile must allow for mediation of
disconnected paths then the profile flag `attach_disconnected` can be used.
This prepend a leading `/` to the reported name, however this may not
result in the original name of the file as AppArmor can only attach the
file to root, not to its original location.

See https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.5#path-name-lookup-and-mediation-of



Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>