releasing package livecd-rootfs version 25.10.16

* bryalex/bryalex/6.14-master:
  Add debian/changelog entry (LP: #2116199)
  feat(apparmor): Add missing components to 6.14 kernel apparmor features' preseeds

debian/.gitignore

@@ -0,0 +1 @@
+files

debian/changelog

@@ -1,3 +1,846 @@
+livecd-rootfs (25.10.16) questing; urgency=medium
+
+  * Put the uc20-style system seed for TPM backed FDE in the live layer.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 13 Aug 2025 10:34:39 +1200
+
+livecd-rootfs (25.10.15) questing; urgency=medium
+
+  * Add missing components to 6.14 kernel apparmor features' preseeds.
+    (LP: #2116199)
+
+ -- Bryan Alexander <bryan.alexander@canonical.com>  Thu, 17 Jul 2025 13:27:17 -0700
+
+livecd-rootfs (25.10.14) questing; urgency=medium
+
+  [ Didier Roche-Tolomelli ]
+  [ Tim Andersson ]
+  [ Daniel Bungert ]
+  * desktop TPMFDE: move snaps back to stable channels
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 07 Aug 2025 16:21:32 -0600
+
+livecd-rootfs (25.10.13) questing; urgency=medium
+
+  [ Olivier Gayot ]
+  * Build ubuntu-server with multipath-tools-boot installed, so that the
+    multipath stack ends up present in the initramfs.
+    The LVM stack is already present in the initramfs of the installer. And
+    since kinetic, the /dev/mapper entries for LVM devices are created during
+    the initramfs phase. This is a problem when we have LVM on top of a
+    multipath disk because LVM ends up creating /dev/mapper entries out of
+    /dev/sdX (or /dev/sdXpY) devices, not out of /dev/mapper/mpatha as it
+    should. Adding the multipath stack in the initramfs gives multipath a
+    chance to take ownership of /dev/sdX (or /dev/sdXpY) devices before LVM
+    does (LP: #2080474).
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 24 Jul 2025 17:37:33 -0600
+
+livecd-rootfs (25.10.12) questing; urgency=medium
+
+  [ Zygmunt Krynicki ]
+  * Use snap wait system seed.loaded to wait for snapd (LP: #2114923)
+
+  [ Dennis Loose ]
+  [ Didier Roche-Tolomelli ]
+  * Allow the ubuntu-desktop-installer to request snap seeding state
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Tue, 15 Jul 2025 16:30:41 +0200
+
+livecd-rootfs (25.10.11) questing; urgency=medium
+
+  * Fix installer startup to wait for snapd to be preseeded first
+    (LP: #2114923)
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Fri, 11 Jul 2025 14:57:56 +0200
+
+livecd-rootfs (25.10.10) questing; urgency=medium
+
+  * risc-v cloud images: enable cpc fixes for riscv64
+
+ -- Adriano Cordova <adriano.cordova@canonical.com>  Tue, 01 Jul 2025 09:11:16 -0400
+
+livecd-rootfs (25.10.9) questing; urgency=medium
+
+  * desktop and server: read $SUBARCH to allow the use of nvidia's kernel
+    instead of generic (LP: #2109822)
+
+ -- Antoine Lassagne <antoine.lassagne@canonical.com>  Tue, 17 Jun 2025 22:23:11 +1200
+
+livecd-rootfs (25.10.8) questing; urgency=medium
+
+  [ Didier Roche-Tolomelli ]
+  * desktop: use snapd from edge
+  * desktop: tpmfde image use desktop-security-center and firmware-updater
+    from edge
+
+  [ Dan Bungert ]
+  * lb_binary_layered: try #2 to fix mtimes in layered squashfses. (LP2107332)
+    Constrain mtime sync to the current upperdir so that files in lower layers
+    are not redundantly included.
+  * server: fix failure to process the hwe kernel layer due to multiple
+    kernels being present (LP: #2112501)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 13 Jun 2025 12:00:20 -0600
+
+livecd-rootfs (25.10.7) questing; urgency=medium
+
+  * revert 25.10.6 due to duplicated snaps
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 10 Jun 2025 07:55:40 -0600
+
+livecd-rootfs (25.10.6) questing; urgency=medium
+
+  * lb_binary_layered: fix mtimes in layered squashfses. (LP: #2107332)
+    Failing to preserve mtime causes unnecessary python pyc rebuilds due to
+    mtime mismatch, and it's generally strange that reinstalling a package
+    that is already installed changes the files on the system (minus
+    intentional differences such as what's going on in the minimized install
+    source).
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 30 May 2025 17:05:15 -0600
+
+livecd-rootfs (25.10.5) questing; urgency=medium
+
+  * desktop: TPMFDE snapd from latest/edge
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 28 May 2025 10:27:47 -0600
+
+livecd-rootfs (25.10.4) questing; urgency=medium
+
+  * desktop: TPMFDE kernel from 25.10/candidate
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Sun, 25 May 2025 23:18:59 -0600
+
+livecd-rootfs (25.10.3) questing; urgency=medium
+
+  * desktop: update TPMFDE model and don't skip 020-ubuntu-enhanced-sb.binary.
+    (LP: #2110195)  Temporarily use the model that allows overriding snap
+    channels so we can get matching snaps.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 23 May 2025 12:59:40 -0600
+
+livecd-rootfs (25.10.2) questing; urgency=medium
+
+  * desktop: skip 020-ubuntu-enhanced-sb.binary until a matching kernel is
+    ready for snapd 2.68.x
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 06 May 2025 08:24:10 +0200
+
+livecd-rootfs (25.10.1) questing; urgency=medium
+
+  * desktop: no longer involve cloud-init in early networking (LP: #2107225)
+  * server: provide network config direct to netplan
+  * server: update default netplan config for IPv6 autoconfiguration &
+    connectivity
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 28 Apr 2025 09:53:34 -0600
+
+livecd-rootfs (25.04.26) plucky; urgency=medium
+
+  * cpc: Restore UseDomains=true in cloud images (LP: #2106729)
+
+ -- Tomáš Virtus <tomas.virtus@canonical.com>  Thu, 10 Apr 2025 13:07:25 +0000
+
+livecd-rootfs (25.04.25) plucky; urgency=medium
+
+  * live-build/auto/build: Use --workdir in ubuntu-image to avoid filling
+    tmpfs-based /tmp (LP: #2103735)
+
+ -- Dave Jones <dave.jones@canonical.com>  Thu, 20 Mar 2025 17:22:47 +0000
+
+livecd-rootfs (25.04.24) plucky; urgency=medium
+
+  * desktop: update TPMFDE model to move pc-kernel to channel 25.04/stable.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 13 Mar 2025 17:17:30 -0600
+
+livecd-rootfs (25.04.23) plucky; urgency=medium
+
+  * Add 6.14 kernel apparmor features' preseeds. (LP: #2102120)
+
+ -- Jess Jang <jess.jang@canonical.com>  Wed, 12 Mar 2025 21:08:31 -0500
+
+livecd-rootfs (25.04.22) plucky; urgency=medium
+
+  * server: leave the initrd.img symlink, we want that later for probably
+    several reasons but at least for LP: #2101831
+  * desktop: update TPMFDE model for 25.04.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 11 Mar 2025 09:16:03 -0600
+
+livecd-rootfs (25.04.21) plucky; urgency=medium
+
+  * With subiquity builds, setup install-sources to offer bridge kernel.
+  * Add USE_BRIDGE_KERNEL to make it easier to control in the future.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 05 Mar 2025 08:18:54 -0700
+
+livecd-rootfs (25.04.20) plucky; urgency=medium
+
+  [ Adriano Cordova ]
+  * riscv: add SUBARCH 'jh7110'. (LP: #2099993)
+
+  [ Michael Hudson-Doyle ]
+  * In ubuntu-server builds, install the first kernel in the base layer, not
+    the "ga" kernel (which may not be installed at all, as is the case in e.g.
+    the arm64+largemem builds).
+  * Again in ubuntu-server builds, configure LAYERFS_PATH in the kernel layer
+    and ensure the initrd is freshly regenerated in that layer. LAYERFS_PATH
+    was being set to the layer below the kernel layer, which meant that the
+    live session did not get access to all the modules in the case that the
+    kernel had not been installed in the base layer, which in turn means that
+    installs fail. (LP: #2100148)
+  * While we're at it, delete any initrd from any other layer than a kernel
+    layer, as they just waste space on the ISO.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Thu, 27 Feb 2025 20:34:01 +1300
+
+livecd-rootfs (25.04.19) plucky; urgency=medium
+
+  * add cpc-sbom to create_manifest calls to generate sboms (LP: #2077105)
+
+ -- Thomas Bechtold <thomasbechtold@jpberlin.de>  Tue, 25 Feb 2025 13:20:49 +0100
+
+livecd-rootfs (25.04.18) plucky; urgency=medium
+
+  [ Michael Hudson-Doyle ]
+  * Pre-emptively include the override to not try to build HWE kernel layer in
+    post .2 server riscv64 ISOs.
+
+  [ Simon Quigley ]
+  * Move from http://ppa.launchpad.net to https://ppa.launchpadcontent.net
+    when specifying EXTRA_PPAS.
+  * Update debhelper compat to 13, no changes needed.
+  * Make the package completely Lintian-clean except for no-dep5-copyright.
+  * Update Standards-Version to 4.7.0, no changes needed.
+  * Add support for multiple pools (/var/lib/{livefs,preinstalled}-pool/).
+
+  [ Simon Poirier ]
+  * increase ubuntu-cpc ppc64el disk size to 2.4G
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Thu, 20 Feb 2025 10:24:04 +1300
+
+livecd-rootfs (25.04.17) plucky; urgency=medium
+
+  [ Dan Bungert ]
+  * Fix build failure when using lowlatency-hwe-24.04, as ubuntustudio does.
+    (LP: #2098105)
+
+  [ Michael Hudson-Doyle ]
+  * live-build/ubuntu-mini-iso/hooks/01-mini-iso.binary: Drop the
+    assumption that the uncompressed part of the initrd is unpacked to a
+    directory called "main".
+  * live-build/ubuntu-mini-iso/hooks/01-mini-iso.chroot_early: Fix paths that
+    should have been adjusted when code moved from binary to chroot hook.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 14 Feb 2025 17:25:29 +1300
+
+livecd-rootfs (25.04.16) plucky; urgency=medium
+
+  * buildd: add udev to buildd images to fix networking issue. (LP: #2092196)
+
+ -- Simon Poirier <simon.poirier@canonical.com>  Thu, 13 Feb 2025 13:44:02 -0500
+
+livecd-rootfs (25.04.15) plucky; urgency=medium
+
+  * Add 6.12 kernel apparmor features' preseeds.
+
+ -- Thomas Bechtold <thomas.bechtold@canonical.com>  Thu, 13 Feb 2025 12:14:33 +0100
+
+livecd-rootfs (25.04.14) plucky; urgency=medium
+
+  * Restore the default-layer.conf file in the initrd (LP: #2097838)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 11 Feb 2025 08:21:56 -0700
+
+livecd-rootfs (25.04.13) plucky; urgency=medium
+
+  * install-sources: quote default kernel argument.
+  * ubuntu-core-installer: update install-sources.yaml with kernel.
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Wed, 05 Feb 2025 17:43:34 -0800
+
+livecd-rootfs (25.04.12) plucky; urgency=medium
+
+  * Stop producing a rootfs tarball for the ubuntu-mini-iso builds.
+  * Move configuration of casper in ubuntu-serve:live builds to a "chroot
+    early" hook for the installer layer and remove the now unnecessary
+    update-initramfs from the binary hook that breaks because mkinitramfs
+    now requires that /sys is mounted. (LP: #2097280)
+  * Similar changes for ubuntu-mini-iso build.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 05 Feb 2025 15:26:13 +1300
+
+livecd-rootfs (25.04.11) plucky; urgency=medium
+
+  [ Heinrich Schuchardt ]
+  * riscv: copy device trees dtb/ in ESP
+
+  [ Michael Hudson-Doyle ]
+  * Allow snapd to re-exec in installer environment (the issues between snapd,
+    overlayfs and apparmer that meant re-execing caused problems were fixed in
+    snapd a long time ago).
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 29 Jan 2025 08:51:49 +1300
+
+livecd-rootfs (25.04.10) plucky; urgency=medium
+
+  * riscv: copy device trees to the ESP. Fixes (LP: #2095415)
+
+ -- Adriano Cordova <adriano.cordova@canonical.com>  Tue, 21 Jan 2025 10:38:54 -0300
+
+livecd-rootfs (25.04.9) plucky; urgency=medium
+
+  * Move reference wsl-setup script to /usr/lib/wsl/
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Wed, 22 Jan 2025 10:17:56 +0100
+
+livecd-rootfs (25.04.8) plucky; urgency=medium
+
+  * risc-v: directly copy device trees to /boot/dtbs (LP: #2092205)
+
+ -- Adriano Cordova <adriano.cordova@canonical.com>  Thu, 19 Dec 2024 10:42:57 -0300
+
+livecd-rootfs (25.04.7) plucky; urgency=medium
+
+  [ Carlos Nihelton ]
+  [ Didier Roche-Tolomelli ]
+  * Adapt to new Microsoft package format: (LP: #2091293)
+    - Keep a single wsl rootfs upgrade policy
+    - Create livecd-roots tarball as a .wsl extension
+    - Create wsl-distribution.conf for WSL images
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Mon, 09 Dec 2024 14:29:37 +0100
+
+livecd-rootfs (25.04.6) plucky; urgency=medium
+
+  * Refer to LB_DISTRIBUTION, not SUITE, in the ubuntu-mini-iso binary hook.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Fri, 06 Dec 2024 18:59:35 +1300
+
+livecd-rootfs (25.04.5) plucky; urgency=medium
+
+  * Fix ubuntu-mini-iso build, by using script from debian-cd to create a
+    bootable ISO rather than the now deleted cd-boot-images-amd64 package.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 04 Dec 2024 13:33:53 +1300
+
+livecd-rootfs (25.04.4) plucky; urgency=medium
+
+  [ Rémy Martin ]
+  * Add support for arm64+tegra-jetson flavor to disambiguate from the
+    NVIDIA IGX builds.
+
+ -- Loïc Minier <loic.minier@ubuntu.com>  Tue, 26 Nov 2024 13:41:05 +0000
+
+livecd-rootfs (25.04.3) plucky; urgency=medium
+
+  * Switch Lubuntu to stacked squashfses, and split apart the common
+    functionality to avoid Subiquity-specific commands.
+  * Add optional Dracut support for installed images, enable it for Lubuntu.
+
+ -- Simon Quigley <tsimonq2@ubuntu.com>  Sat, 23 Nov 2024 13:52:09 -0600
+
+livecd-rootfs (25.04.2) plucky; urgency=medium
+
+  * Explicitly create home directory for buildd system user to avoid issues
+    with installing and running snaps. (LP: #2083240)
+
+ -- jchittum <john.chittum@canonical.com>  Wed, 06 Nov 2024 07:40:42 -0500
+
+livecd-rootfs (25.04.1) plucky; urgency=medium
+
+  * Add support for install-sources version: 2, which handles bridge kernels.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 17 Oct 2024 08:22:38 -0600
+
+livecd-rootfs (24.10.27) oracular; urgency=medium
+
+  * Set UBUNTU_STORE_COHORT_KEY="+" to prepare-image to make sure we simply
+    use the latest snap versions regardless of phasing state.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 08 Oct 2024 13:06:10 +0100
+
+livecd-rootfs (24.10.26) oracular; urgency=medium
+
+  * Use generic kernel flavor for Nezha D1 and LicheeRV Dock.
+
+ -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Fri, 04 Oct 2024 10:30:28 +0200
+
+livecd-rootfs (24.10.25) oracular; urgency=medium
+
+  * Update the model used for TPM FDE installs, yet again.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Fri, 04 Oct 2024 12:21:38 +1300
+
+livecd-rootfs (24.10.24) oracular; urgency=medium
+
+  * desktop: Remove some cruft referencing the subiquity snap, which can
+    result in 'error: snap "subiquity" is not installed' messages being
+    printed on the terminal.  (LP: #2083554)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 02 Oct 2024 10:13:41 -0600
+
+livecd-rootfs (24.10.23) oracular; urgency=medium
+
+  * Update the model used for TPM FDE installs, again, hopefully working this
+    time.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 02 Oct 2024 19:06:50 +1300
+
+livecd-rootfs (24.10.22) oracular; urgency=medium
+
+  * Revert "Update the model used for TPM FDE installs."
+    (to unblock apparmor fixes for cloud images)
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Mon, 30 Sep 2024 16:19:22 +0530
+
+livecd-rootfs (24.10.21) oracular; urgency=medium
+
+  [ Utkarsh Gupta ]
+  * Add 6.11 kernel apparmor features' preseeds.
+
+  [ Michael Hudson-Doyle ]
+  * Update the model used for TPM FDE installs.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 19 Sep 2024 19:42:24 +0530
+
+livecd-rootfs (24.10.20) oracular; urgency=medium
+
+  [ Chad Smith ]
+  * Refresh cloud-init service override for updated service file name and
+    ordering fix. (LP: #2081325)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 20 Sep 2024 12:36:12 -0600
+
+livecd-rootfs (24.10.19) oracular; urgency=medium
+
+  * live-server and desktop: disable kdump-tools only in the live layer.
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Tue, 17 Sep 2024 21:11:15 -0700
+
+livecd-rootfs (24.10.18) oracular; urgency=medium
+
+  * live-server and desktop: disable kdump-tools in the minimal layer
+    to allow the installer to decide when to enable it (LP: #2077990).
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Fri, 13 Sep 2024 09:08:33 -0700
+
+livecd-rootfs (24.10.17) oracular; urgency=medium
+
+  * desktop and subiquity-using flavors: install the kernel in the minimal
+    layer (LP 2080272)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 12 Sep 2024 15:30:34 -0600
+
+livecd-rootfs (24.10.16) oracular; urgency=medium
+
+  * live-server: fix issue where the kernel was not actually placed in the
+    minimal layer
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 11 Sep 2024 12:30:35 -0600
+
+livecd-rootfs (24.10.15) oracular; urgency=medium
+
+  * live-server: install the kernel in the minimal layer (LP: #2080272)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 10 Sep 2024 12:42:33 -0600
+
+livecd-rootfs (24.10.14) oracular; urgency=medium
+
+  [ Sergio Costas ]
+  * Switch ubuntu-core-desktop project to be a subproject of the
+    ubuntu-core-installer project.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 10 Sep 2024 16:11:32 +1200
+
+livecd-rootfs (24.10.13) oracular; urgency=medium
+
+  * Fix autopkgtest issue where /tmp mounted with nodev is used as a working
+    directory, which understandably causes problems for device node creation.
+    (LP: #2078980)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 04 Sep 2024 14:27:27 -0600
+
+livecd-rootfs (24.10.12) oracular; urgency=medium
+
+  * Update ubuntu-classic-2404-amd64 model in ubuntu hooks. (LP: #2077899)
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Mon, 26 Aug 2024 17:03:28 -0700
+
+livecd-rootfs (24.10.11) oracular; urgency=medium
+
+  [ Simon Poirier ]
+  * disk-image-uefi: Fix regression with partition sizing on arm.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 22 Aug 2024 04:58:46 +0530
+
+livecd-rootfs (24.10.10) oracular; urgency=medium
+
+  * disk-image-uefi.binary: Shift down boot partition to 13 to support systems
+    which don't handle partition numbers higher than 15. (LP: #2072929)
+
+ -- Simon Poirier <simon.poirier@canonical.com>  Tue, 20 Aug 2024 18:57:57 -0400
+
+livecd-rootfs (24.10.9) oracular; urgency=medium
+
+  [ Cody Shepherd ]
+  * fix: remove ec2-version hook for cpc images.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 14 Aug 2024 18:02:29 +0530
+
+livecd-rootfs (24.10.8) oracular; urgency=medium
+
+  [ Erich Eickmeyer ]
+  * Add minimal installation to Ubuntu Studio
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 25 Jul 2024 11:12:52 -0700
+
+livecd-rootfs (24.10.7) oracular; urgency=medium
+
+  * riscv64: preinstalled server image for Microchip PIC64GX Curiosity Kit
+    (LP: #2072956)
+
+ -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Mon, 22 Jul 2024 14:51:25 +0200
+
+livecd-rootfs (24.10.6) oracular; urgency=medium
+
+  [ Chad Smith ]
+  * Override cloud-init.service in /etc so as to not invalidate debsums
+    (LP: #2069391)
+  * Update the overridden copy of cloud-init.service
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 18 Jul 2024 15:58:53 -0600
+
+livecd-rootfs (24.10.5) oracular; urgency=medium
+
+  [ Erich Eickmeyer ]
+  * Switch Ubuntu Studio to generic kernel
+
+  [ Zhaoxuan Zhai ]
+  * support config sector size in ubuntu-image
+
+  [ Łukasz 'sil2100' Zemczak ]
+  * Build qcow2 images for ubuntu-core LXD support.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 11 Jul 2024 12:57:54 +0200
+
+livecd-rootfs (24.10.4) oracular; urgency=medium
+
+  [ Philip Roche ]
+  * Revert removal of unminimize call in server builds. (LP: #2069828)
+
+  [ Utkarsh Gupta ]
+  * Use packaged unminimize in the ubuntu-server images.
+  * Drop unminimize spit out by livecd-rootfs.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 19 Jun 2024 22:02:39 +0530
+
+livecd-rootfs (24.10.3) oracular; urgency=medium
+
+  [ Heinrich Schuchardt ]
+  * riscv64: use earlycon=sbi on command line
+
+  [ Michael Hudson-Doyle ]
+  * Add 'ubuntu-core-installer' project.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 11 Jun 2024 11:51:14 +1200
+
+livecd-rootfs (24.10.2) oracular; urgency=medium
+
+  [ Michael Hudson-Doyle ]
+  * Replace 'ubuntustudio-dvd' project with an almost identical 'ubuntustudio'
+    project.
+
+  [ Philip Roche ]
+  * No longer install LXD snap in unminimize script (LP: #2066905)
+
+ -- Philip Roche <phil.roche@canonical.com>  Thu, 23 May 2024 14:11:57 +0100
+
+livecd-rootfs (24.10.1) oracular; urgency=medium
+
+  [ Łukasz 'sil2100' Zemczak ]
+  * Add experimental support for building ubuntu-core-desktop installer images
+    (LP: #2063203)
+
+  [ Philip Roche ]
+  * Re-enable ability to build HyperV desktop images (LP: #2064280)
+
+ -- Philip Roche <phil.roche@canonical.com>  Tue, 30 Apr 2024 17:58:43 +0100
+
+livecd-rootfs (24.04.69) noble; urgency=medium
+
+  * desktop: move udisks2-inhibit to service (LP: #2063192)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 23 Apr 2024 13:37:05 -0600
+
+livecd-rootfs (24.04.68) noble; urgency=medium
+
+  * Rename the milk-v-mars SUBARCH to milkvmars.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 23 Apr 2024 15:20:56 +0100
+
+livecd-rootfs (24.04.67) noble; urgency=medium
+
+  [ Julian Andres Klode ]
+  * Update wording for universe sources
+
+  [ Łukasz 'sil2100' Zemczak ]
+  * Update the classic model assertion for TPM FDE, dropping thunderbird as
+    it is not part of the minimal install.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 22 Apr 2024 13:00:36 +0100
+
+livecd-rootfs (24.04.66) noble; urgency=medium
+
+  [ Heinrich Schuchardt ]
+  * riscv: add pre-installed image for Milk-V Mars.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 22 Apr 2024 09:11:59 +0100
+
+livecd-rootfs (24.04.65) noble; urgency=medium
+
+  [ Aaron Rainbolt ]
+  * Allows Multiverse packages to be pulled into Kubuntu. This is necessary so
+    that fonts-ibm-plex can be installed on the ISO, which is going to be used
+    by kubuntu-installer-prompt as part of Kubuntu's rebrand.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 18 Apr 2024 19:35:49 +0200
+
+livecd-rootfs (24.04.64) noble; urgency=medium
+
+  * Update the Ubuntu classic model assertion for TPM FDE to the 24.04 model.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 18 Apr 2024 18:57:28 +0200
+
+livecd-rootfs (24.04.63) noble; urgency=medium
+
+  [ Simon Poirier ]
+  * Re-enable armhf disk-image-uefi building. (LP: #2062024)
+    This reverts commit 4f51ff45 (fix: Remove UEFI booting armhf, 2024-03-12).
+
+ -- Philip Roche <phil.roche@canonical.com>  Wed, 17 Apr 2024 18:28:47 +0100
+
+livecd-rootfs (24.04.62) noble; urgency=medium
+
+  [ Steve Langasek ]
+  * Invert check for whether to include casper since the "yes" list is now
+    much shorter than the "no" list
+  * Refactor task/package handling for new installer images
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 15 Apr 2024 22:40:40 -0600
+
+livecd-rootfs (24.04.61) noble; urgency=medium
+
+  * Fix the UC24 builds: use --snap instead of --extra-snaps.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 11 Apr 2024 10:44:04 +0200
+
+livecd-rootfs (24.04.60) noble; urgency=medium
+
+  * Drop use of 'laptop' for x13s as this is now migrated to generic.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 08 Apr 2024 21:35:46 -0700
+
+livecd-rootfs (24.04.59) noble; urgency=medium
+
+  [ Catherine Redfield ]
+  * Add policy:unconfined_restrictions feature to 6.8 kernel (LP: #2060558)
+
+  [ Dan Bungert ]
+  * budgie: remove add_snap of ubuntu-budgie-installer,
+    ubuntu-desktop-bootstrap is used instead. (LP: #2060568)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 08 Apr 2024 14:09:15 -0600
+
+livecd-rootfs (24.04.58) noble; urgency=medium
+
+  * Add console-conf to UC24 extra snaps by default, as the models define
+    it as optional so we need to explicitly request it to be added.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Mon, 08 Apr 2024 16:24:38 +0200
+
+livecd-rootfs (24.04.57) noble; urgency=medium
+
+  * Ensure the proper hooks are copied for Ubuntu MATE (LP: #2058161).
+
+ -- Simon Quigley <tsimonq2@ubuntu.com>  Sun, 07 Apr 2024 17:37:21 -0500
+
+livecd-rootfs (24.04.56) noble; urgency=medium
+
+  * l/a/build: if debootstrap fails, cat deboostrap.log
+  * flavors: cloud-init needs to be present in Subiquity-based installers.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 01 Apr 2024 19:39:25 -0600
+
+livecd-rootfs (24.04.55) noble; urgency=medium
+
+  * No-change rebuild for CVE-2024-3094
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 30 Mar 2024 11:26:01 -0700
+
+livecd-rootfs (24.04.54) noble; urgency=medium
+
+  [ Steve Langasek ]
+  * Drop dkms from the riscv64 lichee images.
+
+  [ Erich Eickmeyer ]
+  * Add chroot_early symlink for Ubuntu MATE
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 28 Mar 2024 11:47:02 -0600
+
+livecd-rootfs (24.04.53) noble; urgency=medium
+
+  * Add support for building Ubuntu Core 24 images.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 28 Mar 2024 12:10:15 +0100
+
+livecd-rootfs (24.04.52) noble; urgency=medium
+
+  * Move from hwe-22.04 to hwe-24.04 throughout, hwe-22.04 is obsolete and
+    to be dropped from the release pocket imminently.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Wed, 27 Mar 2024 12:03:04 -0700
+
+livecd-rootfs (24.04.51) noble; urgency=medium
+
+  * Rename the casper.gschema override to livecd-rootfs.override
+    to try to avoid conflicts with the override generated in casper
+
+ -- Sebastien Bacher <seb128@ubuntu.com>  Mon, 25 Mar 2024 11:46:35 +0100
+
+livecd-rootfs (24.04.50) noble; urgency=medium
+
+  [ Dan Bungert ]
+  * Use the same includes.chroot* overrides from desktop for the
+    subiquity-backed oem and flavor installer ISOs. (LP: #2055077)
+  * copy include.* directories for subiquity desktop install ISOs (LP: #2055077)
+
+  [ Utkarsh Gupta ]
+  * Add NOW env variable in autopkgtest.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 21 Mar 2024 01:23:00 +0530
+
+livecd-rootfs (24.04.49) noble; urgency=medium
+
+  [ Erich Eickmeyer]
+  * Move Ubuntu MATE to the new Ubuntu desktop installer snap.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 18 Mar 2024 13:18:54 -0700
+
+livecd-rootfs (24.04.48) noble; urgency=medium
+
+  * Fix bash synxtax for index parameter expansion.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 13 Mar 2024 18:43:53 +0530
+
+livecd-rootfs (24.04.47) noble; urgency=medium
+
+  [ Utkarsh Gupta ]
+  * Add build_name metadata to build.info file for OCI and Base images.
+
+  [ jchittum ]
+  * Drop support for armhf uefi booting vm images. (LP: #2057776)
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 13 Mar 2024 18:27:01 +0530
+
+livecd-rootfs (24.04.46) noble; urgency=medium
+
+  [ Dan Bungert ]
+  * mini-iso: move depends to mini-iso-tools package
+
+  [ handsome_feng ]
+  * Move Ubuntu Kylin to the new installer.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Wed, 06 Mar 2024 18:31:13 -0800
+
+livecd-rootfs (24.04.45) noble; urgency=medium
+
+  [ Jess Jang ]
+  * fix: Missing apparmor feature for 6.8 kernel (LP: #2056078)
+
+  [ Chad Smith ]
+  * Fix cloud-init clean script, by declaring the interpreter.
+
+ -- Jess Jang <jess.jang@canoical.com>  Mon, 04 Mar 2024 15:17:53 -0600
+
+livecd-rootfs (24.04.44) noble; urgency=medium
+
+  * Switch to using the candidate channel for the ubuntu-image snap. This way
+    we can more easily make use of fixes in ubuntu-image without having to
+    wait for the full validation process to finish.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Fri, 01 Mar 2024 12:08:13 +0100
+
+livecd-rootfs (24.04.43) noble; urgency=medium
+
+  * Set the required debconf settings to allow for noninteractive
+    grub updates in cloud images (LP: #2054103)
+
+ -- Philip Roche <phil.roche@canonical.com>  Fri, 23 Feb 2024 13:54:57 +0000
+
+livecd-rootfs (24.04.42) noble; urgency=medium
+
+  [ Sean Davis ]
+  * xubuntu: Fix description 2-line indentation.
+
+ -- Brian Murray <brian@ubuntu.com>  Thu, 22 Feb 2024 17:52:12 -0800
+
+livecd-rootfs (24.04.41) noble; urgency=medium
+
+  [ Simon Poirier ]
+  * live-build/buildd/includes.chroot/etc/apt:
+    unpin backports for buildd images (LP: #2009871)
+
+ -- Philip Roche <phil.roche@canonical.com>  Thu, 22 Feb 2024 17:39:57 +0000
+
+livecd-rootfs (24.04.40) noble; urgency=medium
+
+  [ Sean Davis ]
+  * Fix the KERNEL_FLAVOURS variable for Xubuntu.
+
+ -- Brian Murray <brian@ubuntu.com>  Wed, 21 Feb 2024 17:04:37 -0800
+
+livecd-rootfs (24.04.39) noble; urgency=medium
+
+  [ Steve Langasek ]
+  * Pare down 'BASE_SEED' handling to only those flavors which still use it.
+
+  [ Łukasz 'sil2100' Zemczak ]
+  * Attempt building netboot tarballs for largemem arm64 server images.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 20 Feb 2024 17:04:01 +0100
+
+livecd-rootfs (24.04.38) noble; urgency=medium
+
+  * Fix overlooked syntax error
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 18 Feb 2024 09:14:21 -0800
+
+livecd-rootfs (24.04.37) noble; urgency=medium
+
+  [ Sean Davis ]
+  * Move Xubuntu to the new installer.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 18 Feb 2024 09:08:50 -0800
+
+livecd-rootfs (24.04.36) noble; urgency=medium
+
+  * live-build/buildd/hooks/00-mirror.binary: Patch all sources files
+
+ -- Julian Andres Klode <juliank@ubuntu.com>  Fri, 16 Feb 2024 22:04:07 +0100
+
+livecd-rootfs (24.04.35) noble; urgency=medium
+
+  [ Steve Langasek ]
+  * Drop references to ubuntu-gnome which is not a current flavor.
+
+  [ Didier Roche ]
+  * Ensure ubuntu-wsl image can be published in cloud-images again.
+
+ -- Didier Roche <didrocks@ubuntu.com>  Fri, 16 Feb 2024 11:11:58 +0100
+
 livecd-rootfs (24.04.34) noble; urgency=medium
 
   [ Michael Hudson-Doyle ]
@@ -62,8 +905,8 @@ livecd-rootfs (24.04.27) noble; urgency=medium
 livecd-rootfs (24.04.26) noble; urgency=medium
 
   [ Steve Langasek ]
-  * Share live-build/ubuntu/hooks/020-ubuntu-live.chroot_early across 
-    all flavors using new-style layered squashfs, removing need for 
+  * Share live-build/ubuntu/hooks/020-ubuntu-live.chroot_early across
+    all flavors using new-style layered squashfs, removing need for
     kernel commandline options in debian-cd.
 
   [ dann frazier ]
@@ -195,7 +1038,7 @@ livecd-rootfs (24.04.10) noble; urgency=medium
   * Set C.UTF-8 locale in /etc/default/locale for all images; originally
     intended to be landed in the cosmic cycle..
   * Project name for Ubuntu Studio needs to be 'ubuntustudio-dvd'
-    throughout, not 'ubuntustudio'.  
+    throughout, not 'ubuntustudio'.
 
  -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 08 Dec 2023 15:07:41 -0800
 
@@ -274,7 +1117,7 @@ livecd-rootfs (24.04.2) noble; urgency=medium
     instead of /boot/vmlinuz. (LP: #2038957)
 
  -- Philip Roche <phil.roche@canonical.com>  Thu, 26 Oct 2023 17:56:00 +0100
- 
+
 livecd-rootfs (24.04.1) noble; urgency=medium
 
   [ Steve Langasek ]

debian/compat

@@ -1 +0,0 @@
-7

debian/control

@@ -1,10 +1,12 @@
 Source: livecd-rootfs
 Section: devel
 Priority: optional
-Build-Depends: debhelper (>= 7)
+Build-Depends: debhelper-compat (= 13)
 Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
-Standards-Version: 3.9.6
+Standards-Version: 4.7.0
 Vcs-Git: https://git.launchpad.net/livecd-rootfs -b ubuntu/master
+Vcs-Browser: https://git.launchpad.net/livecd-rootfs
+Rules-Requires-Root: no
 
 Package: livecd-rootfs
 Architecture: any

debian/copyright

@@ -11,7 +11,7 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 General Public License for more details.
 
 You should have received a copy of the GNU General Public License with
-your Ubuntu system, in /usr/share/common-licenses/GPL, or with the
+your Ubuntu system, in /usr/share/common-licenses/GPL-2, or with the
 livecd-rootfs source package as the file COPYING.  If not, write to
 the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
 Boston, MA 02110-1301 USA.

debian/install

@@ -4,3 +4,4 @@ get-ppa-fingerprint usr/share/livecd-rootfs
 minimize-manual usr/share/livecd-rootfs
 checkout-translations-branch usr/share/livecd-rootfs
 update-source-catalog usr/share/livecd-rootfs
+sync-mtime usr/share/livecd-rootfs

debian/livecd-rootfs.lintian-overrides

@@ -0,0 +1,10 @@
+# This is expected and okay
+livecd-rootfs: service-file-is-not-a-file [usr/share/livecd-rootfs/*.service]
+livecd-rootfs: uses-dpkg-database-directly [usr/share/livecd-rootfs/live-build/lb_chroot_layered]
+livecd-rootfs: package-contains-no-arch-dependent-files
+
+# Developer documentation in an already-expected spot
+livecd-rootfs: package-contains-documentation-outside-usr-share-doc [usr/share/livecd-rootfs/live-build/ubuntu-cpc/README.cpc.md]
+
+# This is going to occur quite a bit; we're making a livefs
+livecd-rootfs: repeated-path-segment * [*]

debian/source/lintian-overrides

@@ -0,0 +1,5 @@
+# This is expected and okay
+livecd-rootfs source: absolute-symbolic-link-target-in-source * [live-build/*]
+
+# The description indicates that it's not required in debhelper >= 13, which we have
+livecd-rootfs source: override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS [debian/rules:*]

debian/tests/default-bootstraps

@@ -28,7 +28,6 @@ ALL_TRIPLETS="
  ubuntu-cpc::ubuntu-cpc
  ubuntu-cpc:minimized:ubuntu-cpc
  ubuntu-dvd::
- ubuntu-gnome::
  ubuntukylin::
  ubuntu-mate::
  ubuntu-mate-core::
@@ -65,19 +64,22 @@ live_build_rootfs() {
          SUBPROJECT=$SUBPROJECT \
          SUITE=$SUITE \
          ARCH=$ARCH \
+         NOW=$(date '+%Y%m%d') \
          lb config
     mkdir chroot
     # this part needs root rights, but right now the whole script ran as root by autopkgtest
     env PROJECT=$PROJECT \
          SUBPROJECT=$SUBPROJECT \
          ARCH=$ARCH \
+         NOW=$(date '+%Y%m%d') \
          lb build
     echo "Build results for project: '$PROJECT' subproject: '$SUBPROJECT' template: '$TEMPLATE' in $PWD"
     du -sh *
     echo ""
 }
 
-WORKDIR=$(mktemp -d)
+[ -d /adt ] || mkdir /adt
+WORKDIR=$(mktemp -d -p /adt)
 trap "RET=\$?; rm -rf $WORKDIR; exit \$RET" 0 INT QUIT ABRT PIPE TERM
 cd $WORKDIR
 

live-build/apparmor/6.11/capability

@@ -0,0 +1 @@
+0xffffff

live-build/apparmor/6.11/caps/extended

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/caps/mask

@@ -0,0 +1 @@
+chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore

live-build/apparmor/6.11/dbus/mask

@@ -0,0 +1 @@
+acquire send receive

live-build/apparmor/6.11/domain/attach_conditions/xattr

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/change_hat

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/change_hatv

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/change_onexec

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/computed_longest_left

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/disconnected.path

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/fix_binfmt_elf_mmap

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/interruptible

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/kill.signal

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/post_nnp_subset

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/stack

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/unconfined_allowed_children

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/domain/version

@@ -0,0 +1 @@
+1.2

live-build/apparmor/6.11/file/mask

@@ -0,0 +1 @@
+create read write exec append mmap_exec link lock

live-build/apparmor/6.11/io_uring/mask

@@ -0,0 +1 @@
+sqpoll override_creds

live-build/apparmor/6.11/ipc/posix_mqueue

@@ -0,0 +1 @@
+create read write open delete setattr getattr

live-build/apparmor/6.11/mount/mask

@@ -0,0 +1 @@
+mount umount pivot_root

live-build/apparmor/6.11/mount/move_mount

@@ -0,0 +1 @@
+detached

live-build/apparmor/6.11/namespaces/mask

@@ -0,0 +1 @@
+userns_create

live-build/apparmor/6.11/namespaces/pivot_root

@@ -0,0 +1 @@
+no

live-build/apparmor/6.11/namespaces/profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/namespaces/userns_create

@@ -0,0 +1 @@
+pciu&

live-build/apparmor/6.11/network/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.11/network/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/network_v8/af_inet

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/network_v8/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.11/policy/notify/user

@@ -0,0 +1 @@
+file

live-build/apparmor/6.11/policy/outofband

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.11/policy/permstable32

@@ -0,0 +1 @@
+allow deny subtree cond kill complain prompt audit quiet hide xindex tag label

live-build/apparmor/6.11/policy/permstable32_version

@@ -0,0 +1 @@
+0x000003

live-build/apparmor/6.11/policy/set_load

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/policy/state32

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.11/policy/unconfined_restrictions/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/policy/unconfined_restrictions/io_uring

@@ -0,0 +1 @@
+0

live-build/apparmor/6.11/policy/unconfined_restrictions/userns

@@ -0,0 +1 @@
+1

live-build/apparmor/6.11/policy/versions/v5

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/policy/versions/v6

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/policy/versions/v7

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/policy/versions/v8

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/policy/versions/v9

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/ptrace/mask

@@ -0,0 +1 @@
+read trace

live-build/apparmor/6.11/query/label/data

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/query/label/multi_transaction

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.11/query/label/perms

@@ -0,0 +1 @@
+allow deny audit quiet

live-build/apparmor/6.11/rlimit/mask

@@ -0,0 +1 @@
+cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime

live-build/apparmor/6.11/signal/mask

@@ -0,0 +1 @@
+hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost

live-build/apparmor/6.12/capability

@@ -0,0 +1 @@
+0xffffff

live-build/apparmor/6.12/caps/extended

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/caps/mask

@@ -0,0 +1 @@
+chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore

live-build/apparmor/6.12/dbus/mask

@@ -0,0 +1 @@
+acquire send receive

live-build/apparmor/6.12/domain/attach_conditions/xattr

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_hat

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_hatv

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_onexec

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/computed_longest_left

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/disconnected.path

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/fix_binfmt_elf_mmap

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/interruptible

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/kill.signal

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/post_nnp_subset

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/stack

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/unconfined_allowed_children

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/version

@@ -0,0 +1 @@
+1.2

live-build/apparmor/6.12/file/mask

@@ -0,0 +1 @@
+create read write exec append mmap_exec link lock

live-build/apparmor/6.12/io_uring/mask

@@ -0,0 +1 @@
+sqpoll override_creds

live-build/apparmor/6.12/ipc/posix_mqueue

@@ -0,0 +1 @@
+create read write open delete setattr getattr

live-build/apparmor/6.12/mount/mask

@@ -0,0 +1 @@
+mount umount pivot_root

live-build/apparmor/6.12/mount/move_mount

@@ -0,0 +1 @@
+detached

live-build/apparmor/6.12/namespaces/mask

@@ -0,0 +1 @@
+userns_create

live-build/apparmor/6.12/namespaces/pivot_root

@@ -0,0 +1 @@
+no

live-build/apparmor/6.12/namespaces/profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/namespaces/userns_create

@@ -0,0 +1 @@
+pciu&

live-build/apparmor/6.12/network/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.12/network/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/network_v8/af_inet

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/network_v8/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.12/policy/notify/user

@@ -0,0 +1 @@
+file

live-build/apparmor/6.12/policy/outofband

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.12/policy/permstable32

@@ -0,0 +1 @@
+allow deny subtree cond kill complain prompt audit quiet hide xindex tag label

live-build/apparmor/6.12/policy/permstable32_version

@@ -0,0 +1 @@
+0x000003

live-build/apparmor/6.12/policy/set_load

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/state32

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.12/policy/unconfined_restrictions/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/unconfined_restrictions/io_uring

@@ -0,0 +1 @@
+0

live-build/apparmor/6.12/policy/unconfined_restrictions/userns

@@ -0,0 +1 @@
+1