commit 30c77a7332b5f44cbade27155c0b8e816a75ae7f Author: Luca Boccassi <bluca@debian.org> Date: Tue Apr 16 09:58:07 2024 +0100 Install new systemd-udev-load-credentials.service Required for https://github.com/systemd/systemd/pull/32103 Gbp-Dch: ignore commit e477254edc3254bcc8bce06479e19186e03bb8e9 Author: Michael Biebl <biebl@debian.org> Date: Mon Apr 8 14:14:37 2024 +0200 Remove myself from Uploaders commit 857ac0d294cdb65cc139fdd3dbed69706dd4eb45 Author: Luca Boccassi <bluca@debian.org> Date: Sun Apr 7 23:17:35 2024 +0100 d/rules: vmlinux.h is only available from Trixie It was introduced recently, so it's not available in Bookworm, fallback to autogenerated Gbp-Dch: ignore commit 7079f337ebde145a4cb3da2ae7e74a0ac611d608 Author: Luca Boccassi <bluca@debian.org> Date: Tue Apr 2 01:18:50 2024 +0100 Enable BPF support Use clang for now, as gcc-bpf needs some bug fixes to work. Note that Ubuntu's packaging of bpftool is difficult to use, so first of all we will always need to leave this in d/control even after moving to a release that needs it: linux-tools-generic <pkg.systemd.upstream> | bpftool <pkg.systemd.upstream>, That is because bpftool is not enough on Ubuntu, linux-tools-generic is needed, but we don't have it in Debian. But we can't remove the build profile, as on the buildd this will always fail. We need it for upstream builds. Gbp-Dch: ignore commit 61188161cc7d6e79bb03d3c32c7d4a6f7b3fa277 Author: Luca Boccassi <bluca@debian.org> Date: Mon Apr 1 15:23:44 2024 +0100 Install mountfds and nsresourced files Required for https://github.com/systemd/systemd/pull/26826 Gbp-Dch: ignore commit b77d17d36c9bfc65e077e4d8dd5ff6ef2c6cdb32 Author: Luca Boccassi <bluca@debian.org> Date: Fri Apr 5 23:42:58 2024 +0100 initramfs hooks: pull in libkmod manually udev now opens it with dlopen, so the ldd-based resolver will not see it, pull it in the initramfs manually Required for https://github.com/systemd/systemd/pull/31131 commit 65ba6124f31efbcb90212c9db5165588be4392ac Author: Luca Boccassi <bluca@debian.org> Date: Thu Apr 4 21:50:48 2024 +0100 Install new hibernate-clear unit Gbp-Dch: ignore commit 969a391cd345cc181eb6de42ca59cf24fb132c68 Author: Luca Boccassi <bluca@debian.org> Date: Thu Apr 4 20:56:58 2024 +0100 Switch build-depend form liblz4-tool to lz4 The former is deprecated and now dropped, the latter is available since buster commit c02f5350cec7258e3faf96e7da872d5c722642a9 Author: Luca Boccassi <bluca@debian.org> Date: Wed Apr 3 17:19:47 2024 +0100 Autopkgtest: add dependency on libkmod-dev to upstream suite Needed for https://github.com/systemd/systemd/pull/31131 commit e780b50e79ab60f831d7aca0f01294b67a745a6b Author: Luca Boccassi <bluca@debian.org> Date: Sat Mar 30 11:28:00 2024 +0000 autopkgtest: install libgcrypt20-dev for unit-tests and upstream suites Required to ensure libgcrypt gets pulled in the test image Gbp-Dch: ignore commit c5ec464a39555586ca4fc5ae1ed179899eb3050e Author: Luca Boccassi <bluca@debian.org> Date: Sat Mar 30 00:42:36 2024 +0000 libsystemd0: recommend libgcrypt20 It's now a dlopen soft dependency, so add a recommends. Used for the journal sealing functionality. Gbp-Dch: ignore commit 44fe1d4553f157aea4619a3dfed49f764b44f1ab Author: Luca Boccassi <bluca@debian.org> Date: Tue Mar 26 18:16:59 2024 +0000 Install ssh-access target Needed for https://github.com/systemd/systemd/pull/31739 Gbp-Dch: ignore commit b67c34f5d2be5b6909665ff3594f794aa0d29119 Author: Luca Boccassi <bluca@debian.org> Date: Tue Mar 26 18:15:53 2024 +0000 Install new capsule units/manpages Needed for https://github.com/systemd/systemd/pull/29721 Gbp-Dch: ignore commit 1932e19d92daef5928a1402073ad3b5aa6fc0767 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 24 18:46:22 2024 +0000 d/e/checkout-upstream: do not initialize submodules They are used by mkosi, not needed for CI builds commit 3b4728136724b960f453de26e59ee39061575a8f Author: Luca Boccassi <bluca@debian.org> Date: Thu Mar 7 19:10:53 2024 +0000 Add build dependency on libarchive-dev Needed for https://github.com/systemd/systemd/pull/31075 Gbp-Dch: ignore commit 86cd356ae7120193629581d38cfd57f1f269d4c9 Author: Luca Boccassi <bluca@debian.org> Date: Tue Mar 19 15:38:56 2024 +0000 Rename uid0 to run0 Needed for https://github.com/systemd/systemd/pull/31847 Gbp-Dch: ignore commit 5451923e3e7f5d6cc54f78a8b1d08317a42b4109 Author: Luca Boccassi <bluca@debian.org> Date: Wed Mar 13 11:11:03 2024 +0000 Install networkd units with wildcard Avoids needing to update when a new ancillary unit is added Requires for https://github.com/systemd/systemd/pull/30021 Gbp-Dch: ignore commit 49132a870dfe281e1973a8c44acffb87a1db5336 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 10 16:09:16 2024 +0000 Install systemd-measure.1 on all architectures It is no longer dependent on the bootloader feature, but only on libtss/libblkd/libssl Gbp-Dch: ignore commit 707bd35f9c785ee8c2db708aac18b4fbeccc5480 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 10 12:48:58 2024 +0000 Enable libpwquality support Suggest it from systemd (used by firstboot and cryptenroll) and depend on it from homed (user creation is a core part of it). It's a dlopen() dependency. Closes: #1063391 commit 64e18e9f0209ed872340b2e368487afcb7d845c4 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 10 12:40:15 2024 +0000 Use wildcard for quotacheck/quotaon units It's simpler, shorter and independent of build profiles Follow-up for bb0beef24e4be6d55204a64d19dbf956833acb43 Gbp-Dch: ignore commit ee57d181fdb72b0bf532cde3ac75ea1f8e1cb798 Author: Luca Boccassi <bluca@debian.org> Date: Sat Mar 9 12:36:55 2024 +0000 Install new templated/root quotacheck/quotaon units Required for https://github.com/systemd/systemd/pull/24824 Gbp-Dch: ignore commit 7f692a8cb0c45728acfd9bb1af2e9ebe29de5135 Author: Daan De Meyer <daan.j.demeyer@gmail.com> Date: Wed Mar 6 16:07:40 2024 +0100 Build in developer mode when building for upstream Developer mode enables some helpful debugging options and enables various experimental components such as systemd-vmspawn which we want to be enabled when testing upstream. commit d3000afd6d72f4565b7cbaa827d5840f05330310 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 3 23:21:23 2024 +0000 d/rules: fix check for upstream profile for pkla installation Follow-up for bef099319fc74f06f102334b9395eb82ca124914 Gbp-Dch: ignore commit bef099319fc74f06f102334b9395eb82ca124914 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 3 14:21:20 2024 +0000 d/rules: install pkla files when building for old upstream CI jobs Can be dropped once jammy support is removed from the upstream CI Gbp-Dch: ignore commit 8eff0a223e3b19bf24fc8071b2954ca3bdc9a555 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 3 14:00:09 2024 +0000 Install new importctl binary Gbp-Dch: ignore commit 0c9b81a998aaf38bcbb9d3ee63d5981b54a6e675 Author: Luca Boccassi <bluca@debian.org> Date: Sun Mar 3 13:02:18 2024 +0000 autopkgtest: restrict systemd-boot-efi to architectures where it's built commit 0992a823a45d5971deedd5c78f7d8e43b22556f6 Author: Luca Boccassi <bluca@debian.org> Date: Wed Feb 28 19:29:04 2024 +0000 autopkgtest: add breaks-testbed to more tests Given resolved is installed, the testbed needs to be reset to switch back to the default network stack, otherwise installing packages in the salsa-ci autopkgtest job fails commit 4adf90fce12115a7fb40ec5bab4f0dbbf7edc5ed Author: Luca Boccassi <bluca@debian.org> Date: Wed Feb 28 01:38:51 2024 +0000 autopkgtest: install systemd-resolved for all suites Necessary to avoid breaking the network on Ubuntu, in the upstream jammy-based CI jobs. Can be dropped once jammy is no longer tested. commit 1309e1659b44d6c0df07bd43529a8641b45169f9 Author: Michael Biebl <biebl@debian.org> Date: Fri Mar 1 23:19:27 2024 +0100 Replace Skip-flaky-test_resolved_domain_restricted_dns-in-network.patch with a proper upstream fix. commit c0175684afd4a7c532a18629b98587e22f11b813 Author: Luca Boccassi <bluca@debian.org> Date: Fri Mar 1 10:06:32 2024 +0000 d/e/checkout-upstream: stop overriding sshconfdir It actually works after some upstream test fixes, and it is necessary for TEST-46-HOMED to work commit 6d97604440fc20e6afc86a89302ae77deec902ca Author: Luca Boccassi <bluca@debian.org> Date: Fri Mar 1 10:05:44 2024 +0000 userdbd: install ssh integration config snippets Gbp-Dch: ignore commit a5a210e9bc969df7a5d4c6a6c157254056ebd262 Author: Luca Boccassi <bluca@debian.org> Date: Wed Feb 28 19:28:11 2024 +0000 autopkgtest: add dhcpcd5 as alternative dependency to dhcpcd-base dhcpcd-base is not available in Jammy commit 8592d6f5c43b541756bf38af38a622688141807e Author: Michael Biebl <biebl@debian.org> Date: Wed Feb 28 13:07:58 2024 +0100 Stop setting default-hierarchy to unified explicitly It is already the default and the meson option has been deprecated and is expected to be removed in a future release. See https://github.com/systemd/systemd/commit/31323f21bb0ae7c712f43500c42997c91a6d20bf commit c3a35f01fb6804025db1c58dc9a4cb87a9c0fa3d Author: Michael Biebl <biebl@debian.org> Date: Wed Feb 28 12:45:56 2024 +0100 upstream-ci: move bootctl related units to systemd-boot Follow-up fix for f58225e59a7444944bc5b25c5e7e603755928823. Gbp-Dch: Ignore commit a8eb541c1f2887fd2c01a0f72db2ca44e5f22ed4 Author: Michael Biebl <biebl@debian.org> Date: Wed Feb 28 03:24:48 2024 +0100 autopkgtest: depend on pkgconf rather than pkg-config
There are 3 open security issues in bullseye.
You can find information about how to handle these issues in the security team's documentation.
Among the 9 debian patches available in version 255.4-1 of the package, we noticed the following issues: