vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit d70a84f2e9f6808ca24a52cee1ec62898de98db0
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Wed Sep 27 15:30:41 2023 +0200
Remove unneeded cached files from appstream
These files cause an untracable difference for the reproducible Bookworm
images, but because they are not needed, they can be removed.
commit 6dbb8d2598980154809345f3179a5529490d04ce
Author: Arnaud Rebillout <arnaudr@kali.org>
Date: Mon Sep 18 08:39:38 2023 +0700
efi-image: Fix <platform>/grub.cfg, variables must NOT be expanded
The test 'if [ x$grub_platform == xefi -a x$lockdown != xy ]' is meant
to be done by GRUB at runtime, so this line should appear verbatim in
the grub.cfg file.
However the variables are expanded at build-time by the script, because
the dollar symbol is not escaped.
Here's the result on a 12.1.0 live image:
$ cat <<debian-live-12.1.0>>/boot/grub/x86_64-efi/grub.cfg
if [ x == xefi -a x != xy ] ; then
insmod part_acorn
insmod part_amiga
insmod part_apple
insmod part_bsd
insmod part_dfly
insmod part_dvh
insmod part_gpt
insmod part_msdos
insmod part_plan
insmod part_sun
insmod part_sunpc
fi
source /boot/grub/grub.cfg
Note that this mistake would have been caught if only the nounset option
had been used (ie. 'set -u').
Fixes commit: 7b36f5b0ad751081f6316dcb0498df307a2ec902
commit a3f7a33f956eff839c3c13a47c903fd9daf65286
Author: Arnaud Rebillout <arnaudr@kali.org>
Date: Fri Sep 15 16:14:12 2023 +0700
efi-image: Fix missing part_* modules in boot<platform>.efi
Setting the value of PARTITIONLIST in a sub-shell is scoped to the
sub-shell, it will not change the value of the variable in the parent
shell.
In other words:
#!/bin/sh
FOOBAR=
(FOOBAR=foo)
echo FOOBAR=$FOOBAR
gives the output:
FOOBAR=
As a consequence, PARTITIONLIST being empty, there are no part_*
modules embedded in the boot<platform>.efi binary. This is clearly a
regression, introduced in 7b36f5b0ad751081f6316dcb0498df307a2ec902.
Somehow, Debian doesn't seem to be impacted. Kali Linux is impacted, but
only under very special conditions, leading to this bug report:
<https://bugs.kali.org/view.php?id=8441>
This commit fixes it, by setting the PARTITIONLIST variable first, and
then using it where needs be. As a consequence it greatly simplifies the
next part of the code, as we can just use a heredoc to create the grub
config.
commit 6f0f8952f9a2ad22e36b5af4935a28d0650c6e57
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Aug 20 13:16:40 2023 +0200
rebuild.sh: Consistent timestamp of theme.txt
As noted in https://lists.debian.org/debian-live/2023/08/msg00008.html,
the timestamp of theme.txt for bookworm images is not reproducible.
Additionally the splash image is now matching the resolution of the boot
menu, which makes it more crisp.
commit 15e620207fd962ce63e45f3ceee68e7032d368ba
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Aug 20 11:36:37 2023 +0200
binary_disk: Don't create .disk/archive_trace any more
As proposed in
https://lists.debian.org/debian-live/2023/08/msg00008.html
The information that is required for rebuilding the image is already
found in .disk/generator, .disk/info and .disk/mkisofs
commit d54ba390ddfd9895e49991273c9180cd375b9326
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Aug 20 10:57:43 2023 +0200
binary_rootfs: Fixed test for /etc/mtab (Closes: #1032408)
commit d25826212afb794a4d1ed877cee14af1acf3f68a
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Aug 20 10:53:45 2023 +0200
binary_syslinux: Ensure the availability of the font of splash.svg
If the font is not installed in the binary chroot, a substitute font
will silently be used instead
commit d6e7b80ea0f260a21434269ae63519467e4cff6b
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Aug 6 15:22:07 2023 +0200
Apply predictable timestamps in the source image
commit ff950cbeeea73a48b5f9240f8fc142b73f7877f1
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Aug 6 21:31:15 2023 +0200
Fix and correctly suppress lintian warnings
Fix: debian-news-entry-has-unknown-version UNRELEASED
Suppress: mismatched-override absolute-symbolic-link-target-in-source
commit f38a906715d68d88d14aa670231163f7923a33f1
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Fri Aug 4 17:20:43 2023 +0200
Use LC_ALL=C for sort
This ensures that irrespective of the environment of the host, the
sorting order will be consistent and reproducible
commit e663ec5b0e3876f2884e0b9bb6b98e4036bc553c
Author: jfliu <jfliu@zshield.net>
Date: Mon Jul 17 09:59:02 2023 +0800
binary_iso: fix iso-hybrid images with EFI bootloader
commit 95fc0dfdaf0b42fd89428f232af6babb757d7303
Author: Marcel Partap <mpartap@gmx.net>
Date: Tue Jul 18 13:12:29 2023 +0200
Remove ancient hook 9030-remove-apt-sources-lists that was never run
because it doesn't end on ".hook.chroot", so it wouldn't be linked from
the `lb config` stage. Probably to the better, as it does not seem very
useful to indiscriminately raze all apt sources lists.
commit 4146699d37924b5d71d22468fba920d0b9a12f28
Author: Marcel Partap <mpartap@gmx.net>
Date: Sun May 14 10:57:52 2023 +0200
Create binary_chroot stagefiles when skipping, too
commit 0d58c4287c186a4da15184036564069b0b73175b
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sat Jul 15 19:27:59 2023 +0200
rebuild: update --disk-info
commit 5bff71fea2dd54adcd6c428d3f1981734079a2f7
Author: David Hewitt <davidmhewitt@gmail.com>
Date: Wed Jul 12 20:29:04 2023 +0000
Follow symlinks while copying shim files
The shim EFI file on Ubuntu can be a symlink, as it may be in the alternatives system, so
previously, when calculating the size of the FAT32 partition, we would measure the size of the
symlink instead of the actual file and get "Disk full" errors when trying to copy the files into
the new FAT32 partition.
If we dereference the file on copy, we get the actual file and can calculate the size accurately.
```
lrwxrwxrwx. 1 root root 36 Jul 12 20:04 bootx64.efi -> /etc/alternatives/shimx64.efi.signed
```
commit d14306a799a05ea8ccd44fb69f9e9523e0a91e9b
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Wed Jul 12 16:07:38 2023 +0200
Set additional meta information
* The ISO volume is constructed similar to Debian 11
* The file .disk/info can be overridden
* The file .disk/info does not contain 'Official' per default
* Overrides that are required for live-setup are now explicit in
rebuild.sh
* New .disk/generator contains tracable information to the rebuild.sh
script
* The ISO volume is unique for each desktop environment
commit 8eaf20daf1cf79669975b1acfe4d6fa453eb6307
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Jul 9 11:44:28 2023 +0200
Filter the firmware list (Closes: 1035382)
The firmware packages that do not match the requested architecture(s)
are filtered out.
commit 4086f078d904091f7a2b74231da7fe953d7296b1
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sat Jul 8 08:01:19 2023 +0200
Installer: ignore the configured kernel version
When building the Debian installer from git, ignore any configured
kernel version, and use the kernel version that is present in the chroot
environment.
This fixes a build error on Trixie/testing, which occurred after a new
kernel became available when the freeze was lifted.
commit 29e26d11f89fc8afa89fe451f747d9e2d3d0cb34
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Tue Jun 20 08:17:14 2023 +0200
If there is more than one kernel for the installer, use the newest
commit ba34bfbfd0efdd6c036496f960bf4df1f42ba332
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Wed Jun 21 09:04:08 2023 +0200
non-free firmware detection: in chroot, not on host
Follow-up for 18ad612b722e672bbd1ae8323f992d27153795ca.
The availability of 'firmware-linux' must be checked inside the chroot
instead of on the host.
This fixes building Bullseye without 'non-free' available (as discovered
by autopkgtest)
commit dd916ac5be9428ff79a28fb6343f5d244acca438
Author: Thore Sommer <debian@thson.de>
Date: Tue Jun 6 18:31:51 2023 +0300
ISO generation: add support for hybrid ISOs with grub-pc
commit b064f27dcb0c14c458f752f9ca3ce654ed60eefc
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Jun 4 12:25:50 2023 +0200
Revert previous commit to test/rebuild.sh
Bug #1023472 got fixed by tasksel 3.73
commit e38192fa70cc1e350df2eed0405160e73a357b0f
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sat May 13 10:14:32 2023 +0200
Workaround for #1023472
This avoids having more desktop managers, only xfwm4 will be installed
in the live image.
commit d5b3a2103164cd4881e5fecfa3d0349fb9bedb6c
Author: Jonathan Carter <jcc@debian.org>
Date: Tue May 2 14:33:08 2023 +0200
Add cryptsetup-initramfs to package pool
commit 7b36f5b0ad751081f6316dcb0498df307a2ec902
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Apr 30 12:55:19 2023 +0200
UEFI-secure: Don't attempt to load unsigned modules
The part_*.mod modules are not inside the signed .efi-file, so they must
not be 'insmod'ed in secure boot mode.
commit 2944c4652ab8f3c5d07816f38b46edf1e5cd7c57
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Apr 30 12:53:32 2023 +0200
UEFI-secure: Use the signed font
In secure boot mode, only the unifont.pf2 is inside the signed
.efi-file. To make secure and non-secure boot identical, use only the
unifont.
commit 809346bc1e0b12f69f9d2c610b1957945c325013
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Apr 30 10:02:19 2023 +0200
Update splash image
The font size was reduced to fully capture the long live-build version.
Exported without Inkscape information.
Manually adjusted the coordinates to use integers instead of fractional
coordinates (for sharper conversion to png).
commit 7690fb206f1b6d76243020eff671757d8095a29b
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Apr 30 09:15:44 2023 +0200
Share the splash screen from isolinux in grub
This adds the version information on the grub splash screen and offers
the image at 800x600 instead of 640x480, which looks less unsharp.
commit 87dd4404e7beb926614fd06af102c75f2bdffd65
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sat Mar 25 14:39:47 2023 +0100
Rebuild: use the same splash screen as d-i in the boot menus
commit 3044245e6533e3b73e3e9f71f7a5e3e29d1d0b1d
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Mar 19 08:40:46 2023 +0100
Fix detection of fonts in initrd
When (intel|amd64)-microcode is present, the structure of the ramdisk is
more complex. `lsinitramfs` can see all files.
commit 8473e8a792db2dce58fd6c8f8a4a03947e1e6b41
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Mar 19 08:27:19 2023 +0100
Renumber reproducible hooks
commit 69252aef8f588d4e8409abbce854e92728ec6dcf
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Tue Mar 14 20:28:32 2023 +0100
Bulleye needs contrib too for the non-free packages
commit 18ad612b722e672bbd1ae8323f992d27153795ca
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Tue Mar 14 20:28:00 2023 +0100
Detect firmware-linux, without references for Debian versions
commit 50c7e1a8b7b5a966cce0bd432f0c5f02793330a9
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Mar 12 00:16:04 2023 +0100
Add support for non-free-firmware
commit efa9ed8b599ae36189f73a8ce732cb875a66f8c5
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sun Mar 5 09:49:31 2023 +0100
Update for Lintian warnings
commit 045de9bf6456d549317d4b90a369b760351446c7
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sat Apr 16 10:09:48 2022 +0200
Renumber hooks and update where needed
See https://lists.debian.org/debian-live/2022/04/msg00014.html
commit 27f50aef9acdd0ec6a06eff8c48cf96c2ca840fc
Author: Roland Clobus <rclobus@rclobus.nl>
Date: Sat Mar 4 10:26:02 2023 +0100
Use either ${LIVE_BUILD}/share/hooks or /usr/share/live/build/hooks, not both
commit 2bd841f8354636336c6903e2524ad6aca56ff259
Author: Patrice Duroux <patrice.duroux@gmail.com>
Date: Wed Mar 1 17:19:44 2023 +0000
replace 2&>1 by 2>&1
commit 7b5fce3fa6b04f50b76d1b71d78ddec17e0854d6
Author: Raphaël Hertzog <raphael@offensive-security.com>
Date: Wed Feb 22 08:32:47 2023 +0100
Fix binary_memtest for x32 -> ia32 renaming made in memtest86+ >= 6.10-3
memtest86+ switched to /boot/memtest86+ia32.{bin,efi} for 32bits to be
coherent with the usual EFI naming.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/l/live-build.png){kind=link}