Accepted cockpit 318-4~bpo12+1 (source) into stable-backports

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Jun 2024 23:28:34 +0200
Source: cockpit
Architecture: source
Version: 318-4~bpo12+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Closes: 1072517
Changes:
 cockpit (318-4~bpo12+1) bookworm-backports; urgency=medium
 .
   * No-change backport to Debian Bookworm
 .
 cockpit (318-4) unstable; urgency=medium
 .
   * autopkgtest: Fix DynamicUser= workaround.
     Add forgotten sudo for adduser. Restrict the hack to running inside of a
     container, as it works fine on the host. Add bug reference.
 .
 cockpit (318-3) unstable; urgency=medium
 .
   * autopgktest: Adjust debian stable kernel+LXC hack.
     When disabling that option in the workaround, manually create the system
     user. The package postinst does not do that for us any more.
 .
 cockpit (318-2) unstable; urgency=medium
 .
   * Enable DynamicUser for cockpit-ws.  Depend on libnss-systemd to ensure
     that the "cockpit-ws" dynamic user can be resolved. With that we don't
     need to create a static system user any more.
 .
 cockpit (318-1) unstable; urgency=medium
 .
   * New upstream release:
     - Storage: Extra confirmation before deleting non-empty partitions in
       Anaconda's Web UI
     - cockpit.js: Get user primary group ID
 .
 cockpit (317-5) unstable; urgency=medium
 .
   * autopkgtest: Add workaround for stable kernel+LXC breaking DynamicUser=.
     Our autopkgtest fails in ci.debian.net with "
     Failed to update dynamic user credentials: Permission denied".
     This is a bug with the Debian 12 kernel and LXC, and doesn't reproduce
     when running on the host with the old kernel, or running LXC+kernel on
     testing. We don't even *actually* use a DynamicUser= there, it's statically
     allocated.
 .
 cockpit (317-4) unstable; urgency=medium
 .
   * autopkgtest: Add logs for debugging failure. If the test fails, show the
     status of cockpit units, dynamic user, and the journal. That should help
     with debugging the locally unreproducible autopkgtest failure.
   * cockpit-ws.postinst: Allow apparmor_parser to fail again.
     This command breaks in Ubuntu's lxd runners: "Unable to replace
     "cockpit-desktop".  apparmor_parser: Access denied".
 .
 cockpit (317-3) unstable; urgency=medium
 .
   * Bring back static cockpit-ws system user creation.
     Debian's /etc/nsswitch.conf doesn't include "passwd: systemd" by
     default, which breaks services with `DynamicUser=yes`. So we can't use
     that in Debian unconditionally yet. Go back to the static `adduser` call
     from before 317-1 in that case.
 .
 cockpit (317-2) unstable; urgency=medium
 .
   * Conditionally install AppArmor profile in Debian/Ubuntu.
     Cherry-picked from upstream commit 9aacc517492f. (Closes: #1072517)
 .
 cockpit (317-1) unstable; urgency=medium
 .
   * New upstream release:
     - webserver: System user changes
     - metrics: Prefer valkey over redis on Fedora
   * Temporarily drop cockpit-pcp. pcp dropped out of testing, and had been
     uninstallable there for quite some time.
 .
 cockpit (316-1) unstable; urgency=medium
 .
   * New upstream release:
     - systemd: Check proper ssh service unit on Debian/Ubuntu
     - cockpit.js API: Fix format_bytes() units
 .
 cockpit (314-1) unstable; urgency=medium
 .
   * New upstream security fix release:
     - Diagnostic reports: Fix command injection vulnerability with crafted
       report names [CVE-2024-2947]
     - Storage: Improvements to read-only encrypted filesystems
 .
 cockpit (313-1) unstable; urgency=medium
 .
   * New upstream bug fix release.
 .
 cockpit (312-1) unstable; urgency=medium
 .
   * New upstream bug fix release.
Checksums-Sha1:
 27e2ec25eb766ad89f82041189979aff2dad85d0 3121 cockpit_318-4~bpo12+1.dsc
 d02734c588659e7397f0088e006263e73bb5d643 22184 cockpit_318-4~bpo12+1.debian.tar.xz
 f3782f36de61455699caae1c16ae5ba7cfd9b0a2 6349 cockpit_318-4~bpo12+1_source.buildinfo
Checksums-Sha256:
 927569ae69a9da0472c6b03d7cdc61bafe97efc6336f7a04f5993cd47dc15fbb 3121 cockpit_318-4~bpo12+1.dsc
 ab8024979a33f7bc310eb7abf190fe9c97d6a7cb08ba5f9b6ab4507845bf0345 22184 cockpit_318-4~bpo12+1.debian.tar.xz
 a4e4849fdebda1a8c22f52af80c9c004b187aec3154aac41cf50d5d3ae1711a7 6349 cockpit_318-4~bpo12+1_source.buildinfo
Files:
 b05ce0ec5695c2489ff7ce3eef80011e 3121 admin optional cockpit_318-4~bpo12+1.dsc
 366129416ecc186a4287428cd1d826fd 22184 admin optional cockpit_318-4~bpo12+1.debian.tar.xz
 ddfb8e5b75e2ed9ea5cec2fb74798f8f 6349 admin optional cockpit_318-4~bpo12+1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=izGS
-----END PGP SIGNATURE-----