releasing package livecd-rootfs version 26.04.23

Determine used flavour by looking at the suffix of kernel.
hwe is currently the only one that needs to have a prefix
added so we can hardcode that.

.launchpad.yaml

@@ -0,0 +1,12 @@
+pipeline:
+  - [lint]
+
+jobs:
+  lint:
+    series: noble
+    architectures: amd64
+    packages:
+      - black
+      - mypy
+      - python3-flake8
+    run: ./check-lint

README.parameters

@@ -0,0 +1,263 @@
+Understanding the parameters used by livecd-rootfs
+==================================================
+
+livecd-rootfs is a confusing codebase. One of the confusing things is
+how information flows into and around the image build process. There
+is IMAGEFORMAT and IMAGE_TARGETS and PROJECT and many other
+variables. It is not obvious when looking at the code if a given
+variable is something passed as a parameter or something derived from
+it.
+
+All (or almost all) production use of livecd-rootfs is via
+launchpad-buildd so the set of potential parameters is limited by the
+set of environment variables launchpad-build can set in response to
+the build request.
+
+The process from build request to environment live-build is run is a
+little convoluted. The build request takes:
+
+ an archive -- where to get livecd-rootfs from
+ a distro_arch_series -- the series to get livecd-rootfs and build
+ a pocket -- pocket to get livecd-rootfs from, also influences if proposed is
+             used as a package source for the image being built
+ unique_key -- you cannot have more than one pending livefs build with the same
+               unique_key. does not affect the build at all.
+ version -- optional version string, see below. often a serial like 20250525.1
+ metadata_override -- combined with the metadata on the livefs itself to make
+                      the metadata for this build.
+
+(ref: https://launchpad.net/+apidoc/devel.html#livefs-requestBuild)
+
+These parameters are stored on the livefsbuild object (ref:
+https://git.launchpad.net/launchpad/tree/lib/lp/soyuz/model/livefsbuild.py#n372)
+and converted into a set of args passed to launchpad-build by the
+LiveFSBuildBehaviour class (ref:
+https://git.launchpad.net/launchpad/tree/lib/lp/soyuz/model/livefsbuildbehaviour.py#n99).
+
+Inside launchpad-build, these arguments are inspected by the
+LiveFilesystemBuildManager.initiate method (ref:
+https://git.launchpad.net/launchpad-buildd/tree/lpbuildd/livefs.py#n24)
+which turns them into arguments for the BuildLiveFS lpbuild
+"operation" which is what creates the environment live-build runs in
+(ref:
+https://git.launchpad.net/launchpad-buildd/tree/lpbuildd/target/build_livefs.py#n167).
+
+These variables can be set for both lb config and lb build:
+
+ PROJECT       (mandatory, comes from "project" in the metadata)
+ ARCH          (set to the abi tag of the distroarchseries being built for)
+ ARCH_VARIANT  (set to the isa tag of the distroarchseries being built for if it is
+                different from the abi tag)
+ SUBPROJECT    (optional, comes from "subproject" in the metadata)
+ SUBARCH       (optional, comes from "subarch" in the metadata)
+ CHANNEL       (optional, comes from "subarch" in the metadata)
+ IMAGE_TARGETS (optional, comes from "image_targets" in the metadata
+                "image_targets" is a list. IMAGE_TARGETS is set to " ".join(image_targets))
+ REPO_SNAPSHOT_STAMP
+               (optional, comes from "repo_snapshot_stamp" in the metadata)
+ SNAPSHOT_SERVICE_TIMESTAMP
+               (optional, comes from "snapshot_snapshot_stamp" in the metadata)
+ COHORT_KEY
+               (optional, comes from "cohort-key" in the metadata)
+
+launchpad-buildd also contains code to set http_proxy / HTTP_PROXY /
+LB_APT_HTTP_PROXY but there does not appear to be any way to trigger
+this when requesting a build.
+
+In addition the following variables can be set for lb config only (why
+are some things set for lb config only? no idea):
+
+ SUITE         (set to the name of the distroarchseries being built for)
+ NOW           (set to value of the 'version' argument to the build request,
+                defaults to strftime("%Y%m%d-%H%M%S"))
+ IMAGEFORMAT   (optional, comes from "image_format" in the metadata)
+ PROPOSED      (set to "1" if the pocket passed to the build request is proposed)
+ EXTRA_PPAS    (optional, comes from "extra_ppas" in the metadata
+                "extra_ppas" is a list. EXTRA_PPAS is set to " ".join(extra_ppas))
+ EXTRA_SNAPS   (optional, comes from "extra_snaps" in the metadata
+                "extra_snaps" is a list. EXTRA_SNAPS is set to " ".join(extra_snaps))
+ BUILD_TYPE    (optional, the "type" (i.e. Daily or Release) of ISO being built,
+                goes into .disk/info on the ISO, defaults to Daily)
+
+Here is an opinionated and slightly angry attempt to describe what
+each of these is for:
+
+PROJECT
+-------
+
+This is the big one, the main variable that defines what is being
+built. It can be ubuntu, ubuntu-server, xubuntu, ubuntu-mini-iso, that
+sort of thing. Generally PROJECT determines the set of packages
+installed but it (unfortunately?) has a bit more impact than that.
+
+It's unarguable that we need a parameter like this.
+
+ARCH
+----
+
+The architecture being built for. This is always the same as `dpkg
+--print-architecture` for us, we don't do any cross builds.
+
+It's kind of redundant but it's not really a problem that this exists.
+
+ARCH_VARIANT
+------------
+
+The "variant" being built for, i.e. the ISA tag of the
+distroarchseries. Only set if this is different from the ABI tag.
+
+This is definitely needed to be able to build images for variants.
+
+SUBPROJECT
+----------
+
+This is used for some builds to build a different sort of build of the
+project. It can be set to:
+
+ * "minimized" for ubuntu-cpc builds to make a minimal cloud image
+ * "minimal" for xubuntu builds to make a smaller ISO
+ * "desktop-preinstalled" for ubuntu builds to make a preinstalled
+   image instead of the parts for an installer.
+ * "buildd" for images to be used as build images by craft tools, and also
+   buildd chroots used on launchpad builders?
+ * "live" for ubuntu-server builds, historically to distinguish d-i
+   style installers from subiquity style installers
+ * "desktop" for ubuntu-core-installer builds, to influence which
+   model is use to build the ubuntu core system that will be
+   installed.
+
+_This_ parameter is a total mess. The desktop-preinstalled use feels
+particularly egregious.
+
+SUBARCH
+-------
+
+This identifies the target machine more specifically than ARCH,
+e.g. "tegra-jetson" or "licheerv". Used mostly but not exclusively for
+preinstalled builds.
+
+We probably do need something like this.
+
+CHANNEL
+-------
+
+Influences which channel snaps included in the build are taken from
+(via a few different mechanisms).
+
+IMAGE_TARGETS
+-------------
+
+Passed for CPC (and ubuntu-oem, for some reason) builds to
+`config/hooks.d/make-hooks` which uses it to select which binary hooks
+to run (and so determines which artifacts get produced).
+
+It is probably reasonable that this exists.
+
+REPO_SNAPSHOT_STAMP
+-------------------
+
+Currently unused.
+
+SNAPSHOT_SERVICE_TIMESTAMP
+--------------------------
+
+Also currently unused, and unclear how it differs from
+REPO_SNAPSHOT_STAMP.
+
+COHORT_KEY
+----------
+
+Used to make sure that different builds run at the same time don't get
+different versions of snaps due to phasing differences.
+
+This is a totally valid thing to need to supply.
+
+http_proxy / HTTP_PROXY / LB_APT_HTTP_PROXY
+-------------------------------------------
+
+Nothing complex here!
+
+SUITE
+-----
+
+This is the series being built (e.g. noble, questing). It is misnamed
+really -- a suite is usually a combination of a series and a pocket
+(noble-proposed, questing-security).
+
+As with ARCH this is sort of redundant as we do builds in a chroot of
+the series being built but OTOH it is definitely information the
+build needs to know!
+
+NOW
+---
+
+The serial for the build, e.g. 20250519 or 20240418.4.
+
+It is a totally reasonable parameter.
+
+IMAGEFORMAT
+-----------
+
+This is one of the more incoherently handled parameters. In rough
+outline it is the filesystem of the image we produce.
+
+Installer builds do not produce raw images, so this ends up being set
+to 'plain' (which causes live-build to just leave the rootfs as a
+directory tree) or 'none' (which causes live-build to do roughly the
+same thing but in a different way?).
+
+Image builds that use ubuntu-image set it to "ubuntu-image". These
+builds do not call 'lb build' or 'lb binary'.
+
+Other preinstalled images (mostly cpc images) set it to ext4 (but then
+use live-build/ubuntu-cpc/hooks.d/remove-implicit-artifacts to remove
+the output file that this causes live-build to produce...). Some
+projects rely on this being set via metadata when building the project
+it seems.
+
+It can be set when starting an image build, but most builds do not and
+the behavior when it is not set explicitly is pretty confusing.
+
+This place is not a place of honor.
+
+PROPOSED
+--------
+
+Should packages from proposed by included?
+
+This is not really as useful as it used to be for a bunch of reasons
+but it conceptually makes sense.
+
+EXTRA_PPAS
+----------
+
+Extra archives to get packages from.
+
+This is a space separated list by the time it gets to
+livecd-rootfs. Each element of the list is of the form USER/NAME[:PIN]
+where user is a Launchpad user/team name, NAME is the name of the ppa
+to add and the optional colon-PIN at the end is the value to pin (in
+the "man 5 apt_preferences: sense) packages from this PPA at.
+
+Production builds shouldn't really use this but it's definitely useful
+for development.
+
+EXTRA_SNAPS
+-----------
+
+Extra snaps to include (but only for ubuntu-image based builds).
+
+BUILD_TYPE
+----------
+
+Before release, the .disk/info on an ISO looks like:
+
+    Ubuntu-Server 26.04 LTS "Resolute Raccoon" - Daily amd64 (20260210)
+
+after release it looks like:
+
+    Ubuntu-Server 26.04 LTS "Resolute Raccoon" - Release amd64 (20270210)
+
+We could do a livecd-rootfs upload to change this (it only changes
+once per cycle), but it's quicker and easier to manage this from the
+code that triggers the livefs builds.

check-lint

@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -eux
+
+export MYPYPATH=live-build
+mypy live-build/isobuilder live-build/isobuild
+mypy live-build/gen-iso-ids
+
+black --check live-build/isobuilder live-build/isobuild live-build/gen-iso-ids
+
+python3 -m flake8 --max-line-length 88 --ignore E203 live-build/isobuilder live-build/isobuild live-build/gen-iso-ids

debian/.gitignore

@@ -0,0 +1 @@
+files

debian/changelog

@@ -1,94 +1,597 @@
-livecd-rootfs (24.04.95) noble; urgency=medium
+livecd-rootfs (26.04.23) resolute; urgency=medium
 
-  * Create swap file on RISC-V LicheeRV and Nezha preinstalled images
+  [ Tobias Heider ]
-    (LP: #2141545)
+  * Fix ISO builds when KERNEL_FLAVOUR != generic.
 
- -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Mon, 16 Feb 2026 12:09:47 +0100
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Mon, 02 Mar 2026 10:51:47 +1300
 
-livecd-rootfs (24.04.94) noble; urgency=medium
+livecd-rootfs (26.04.22) resolute; urgency=medium
+
+  [ Oliver Gayot ]
+  * Pull the model from Launchpad's lp:canonical-models
+    repo, instead of having it uploaded as part of livecd-rootfs. This
+    indirection makes it possible to update the models without requiring a new
+    upload of livecd-rootfs every time.
+
+  [ Michael Hudson-Doyle ]
+  * Fix two more problems with livefs-built ISOs:
+    - Generate the for-iso squashfs in the right place for Kubuntu.
+    - Fix confusion about the kernel path on the ISO on riscv64.
+
+  [ Tobias Heider ]
+  * Fix pool generation when using extra_ppas.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Thu, 26 Feb 2026 10:56:42 +1300
+
+livecd-rootfs (26.04.21) resolute; urgency=medium
+
+  [ Dan Bungert ]
+  * Update new signed models to ship latest nvidia drivers for ubuntu hybrid.
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Wed, 25 Feb 2026 08:38:32 +0100
+
+livecd-rootfs (26.04.20) resolute; urgency=medium
+
+  [ Michael Raymond ]
+  * Bug-fix: Only use main archive keyring when building with debootstrap
+    so EOL release signatures can be verified after EOL.
+
+  [ Allen Abraham ]
+  * Make SBOM generation optional in create_manifest function.
+
+  [ Michael Hudson-Doyle ]
+  * 030-ubuntu-live-system-seed.binary: do not run if there is no layer to
+    install the system, in particular on arm64.
+  * Fix some path confusion in the new isobuilder.boot package and refactor
+    grub config generation to be more string based.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Fri, 20 Feb 2026 12:45:41 +1300
+
+livecd-rootfs (26.04.19) resolute; urgency=medium
+
+  * Translate the debian-cd tools/boot/$series/boot-$arch scripts to Python
+    and use that to make ISOs bootable rather than cloning debian-cd.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 17 Feb 2026 11:16:43 +1300
+
+livecd-rootfs (26.04.18) resolute; urgency=medium
+
+  [ Michael Hudson-Doyle ]
+  * document ARCH_VARIANT and BUILD_TYPE in README.parameters
+  * isobuilder: pass ignore_dangling_symlinks=True when copying apt config
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Mon, 16 Feb 2026 16:14:03 +0530
+
+livecd-rootfs (26.04.17) resolute; urgency=medium
+
+  * desktop: build the stable ISO using the stable model - essentially
+    reverting all the hacks.
+  * desktop: update the stable model to the latest. It has:
+    - components defined for the 6.19 kernel (nvidia 580 series)
+    - no core26: for TPM/FDE recovery testing, please install the core26 snap
+      from edge.
+
+ -- Olivier Gayot <olivier.gayot@canonical.com>  Thu, 12 Feb 2026 10:25:15 +0100
+
+livecd-rootfs (26.04.16) resolute; urgency=medium
+
+  * Rename ISO_STATUS to BUILD_TYPE for image builds.
+
+ -- Utkarsh Gupta <utkarsh@debian.org>  Thu, 12 Feb 2026 01:41:11 +0530
+
+livecd-rootfs (26.04.15) resolute; urgency=medium
+
+  [ Matthew Hagemann ]
+  * desktop: delay display manager starting until snapd seeding completes
+
+  [ Michael Hudson-Doyle ]
+  * Make an ISO in the livefs build when building an installer.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 11 Feb 2026 10:04:37 +1300
+
+livecd-rootfs (26.04.14) resolute; urgency=medium
+
+  [ Olivier Gayot ]
+  * desktop: build stable image with snapd from beta. Snapd 2.74 has just been
+    uploaded to beta. Let's stop using the version declared in the dangerous model.
+
+  [ Didier Roche-Tolomelli ]
+  * desktop: add (commented out) config to force reexecution of snapd snap version
+
+ -- Olivier Gayot <olivier.gayot@canonical.com>  Thu, 22 Jan 2026 10:13:36 +0100
+
+livecd-rootfs (26.04.13) resolute; urgency=medium
+
+  * Bootstrap and install variant packages if ARCH_VARIANT is set.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 06 Jan 2026 22:03:15 +1300
+
+livecd-rootfs (26.04.12) resolute; urgency=medium
+
+  * desktop: add variables pointing to the different models (stable & dangerous).
+  * desktop: fix snap components taken from original model when overriding a
+    snap with another model.
+    - if we decide to override the definition of a snap (i.e., by taking in
+      from a different model), we also need to override the definition of its
+      components.
+  * desktop: refactor how we filter the snaps when overriding
+  * desktop: update the dangerous model so that it includes core26 and the 6.17
+    kernel and components.
+
+ -- Olivier Gayot <olivier.gayot@canonical.com>  Tue, 16 Dec 2025 14:54:17 +0100
+
+livecd-rootfs (26.04.11) resolute; urgency=medium
+
+  [ Valentin Haudiquet ]
+  * refactor: added a function to generate grub config for netboot
+  * riscv/server: add grub efi bootloader in netboot tarballs
+
+  [ Olivier Gayot ]
+  * desktop: build with optional components included
+  * desktop: don't build the stable image with pc-kernel from 26.04/beta
+    - This was needed before because there was pc-kernel in 26.04/stable but
+      now there is one and it matches the components definition from the model.
+
+ -- Valentin Haudiquet <valentin.haudiquet@canonical.com>  Thu, 11 Dec 2025 09:28:37 +0100
+
+livecd-rootfs (26.04.10) resolute; urgency=medium
+
+  [ Olivier Gayot ]
+  * desktop: fix a comment typo
+
+  [ Michael Hudson-Doyle ]
+  * Build Ubuntu Server images with the 'restricted' component enabled.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 09 Dec 2025 21:07:54 +1300
+
+livecd-rootfs (26.04.9) resolute; urgency=medium
+
+  * desktop: Add mesa to the hybrid model required by core24 apps.
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Wed, 26 Nov 2025 08:51:24 +0100
+
+livecd-rootfs (26.04.8) resolute; urgency=medium
+
+  * desktop: update TPM/FDE ubuntu model to use a GNOME platform snap
+    compatible with core24.
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Tue, 25 Nov 2025 11:38:59 +0100
+
+livecd-rootfs (26.04.7) resolute; urgency=medium
+
+  * desktop: build both ISOs with snapd, firmware-updater and
+    desktop-security-center from edge for TPM/FDE.
+
+ -- Olivier Gayot <olivier.gayot@canonical.com>  Wed, 19 Nov 2025 10:41:17 +0100
+
+livecd-rootfs (26.04.6) resolute; urgency=medium
+
+  * desktop: build classic ISO with "grade: dangerous" and pull pc-kernel from
+    edge to workaround unavailability of pc-kernel in the stable 26.04 channel.
+  * desktop: refresh models to 26.04
+
+ -- Olivier Gayot <olivier.gayot@canonical.com>  Tue, 18 Nov 2025 17:01:47 +0100
+
+livecd-rootfs (26.04.5) resolute; urgency=medium
+
+  [ Dan Bungert ]
+  * desktop: fix build error when SUBPROJECT is unset
+
+ -- Sebastien Bacher <seb128@ubuntu.com>  Mon, 17 Nov 2025 12:05:26 +0100
+
+livecd-rootfs (26.04.4) resolute; urgency=medium
+
+  * desktop: update dangerous model for 26.04
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 31 Oct 2025 11:13:53 +0100
+
+livecd-rootfs (26.04.3) resolute; urgency=medium
+
+  * desktop: use dangerous model for TPMFDE bits until snaps are available on
+    stable channels.
+  * desktop: use snapd from edge.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 29 Oct 2025 10:58:00 +0100
+
+livecd-rootfs (26.04.2) resolute; urgency=medium
+
+  [ Gauthier Jolly ]
+  * ubuntu-cpc:
+    - Use the right specific UUID type for the root filesystem partition.
+    - Set a PARTLABEL (cloudimg-rootfs) on the root filesystem partition.
+
+ -- Gauthier Jolly <gauthier.jolly@canonical.com>  Thu, 23 Oct 2025 12:50:07 +1300
+
+livecd-rootfs (26.04.1) resolute; urgency=medium
+
+  [ Heinrich Schuchardt ]
+  * Remove unused riscv64 SUBARCHs
 
   [ Chad Smith ]
-  * Override cloud-init.service in /etc so as to not invalidate debsums
+  * Refresh cloud-init service override for updated service netcat invocation
-    (LP: #2069391)
+    to cloud-init 25.3. (LP: #2128887)
-  * Update the overridden copy of cloud-init.service
-  * These changes were introduced in 24.04.90 first, then reverted.
 
- -- Antoine Lassagne <antoine.lassagne@canonical.com>  Thu, 21 Aug 2025 14:17:08 +0200
+ -- Chad Smith <chad.smith@canonical.com>  Mon, 20 Oct 2025 16:32:36 -0600
 
-livecd-rootfs (24.04.93) noble; urgency=medium
+livecd-rootfs (25.10.24) questing; urgency=medium
-
-  * Add 6.14 kernel apparmor features' preseeds. (LP: #2116199)
-
- -- Bryan Alexander <bryan.alexander@canonical.com>  Thu, 17 Jul 2025 11:52:40 -0700
-
-livecd-rootfs (24.04.92) noble; urgency=medium
-
-  * Temporarily revert the 24.04.90 changes.  We wish to validate only
-    24.04.91 for Ubuntu 24.04.3 point release.
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 31 Jul 2025 11:27:41 -0600
-
-livecd-rootfs (24.04.91) noble; urgency=medium
-
-  * Fix lowlatency kernel flavour name (LP: #2119012)
-
- -- Juerg Haefliger <juerg.haefliger@canonical.com>  Wed, 30 Jul 2025 17:36:25 +0200
-
-livecd-rootfs (24.04.90) noble; urgency=medium
 
   [ Chad Smith ]
-  * Override cloud-init.service in /etc so as to not invalidate debsums
+  * Limit permissions for /etc/netplan/01-network-manager.yaml to
-    (LP: #2069391)
+    root read-write. (LP: #2119020)
-  * Update the overridden copy of cloud-init.service
 
- -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 22 Jul 2025 15:50:34 -0600
+  [ Chloé 'kajiya' Smith ]
+  * Increase CPC disk-image base imagesize to 2.5GB
+    * In the ubuntu-cpc disk-image binary we need to avail of the ever increasing size
+      of packages. 2.2GB is now just a bit too small leading to `No space
+      left on device` errors when the binary hits `grub-install`. This change
+      increases $imagesize to 2.5GB (in the binary as an override, initially
+      implemented in ecaaf0484 by dlalaj). Also now run `df` just after the
+      grub-pc && grub2-common installs to make for easier debugging in the future.
+      (LP: #2115811)
 
-livecd-rootfs (24.04.89) noble; urgency=medium
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 19 Sep 2025 13:47:20 -0600
 
-  * desktop: Remove some cruft referencing the subiquity snap, which can
+livecd-rootfs (25.10.23) questing; urgency=medium
-    result in 'error: snap "subiquity" is not installed' messages being
-    printed on the terminal.  (LP: #2083554)
 
- -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 30 Apr 2025 15:27:46 -0600
+  * Add 6.17 kernel apparmor features' preseeds.
 
-livecd-rootfs (24.04.88) noble; urgency=medium
+ -- Thomas Bechtold <thomasbechtold@jpberlin.de>  Thu, 18 Sep 2025 13:29:42 +0200
 
-  * risc-v: directly copy device trees to /boot/dtb. (LP: #2092205)
+livecd-rootfs (25.10.22) questing; urgency=medium
+
+  * Disable apparmor_restrict_unprivileged_userns in the live layers.
+    (LP: #2122675)
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 16 Sep 2025 08:51:02 +1200
+
+livecd-rootfs (25.10.21) questing; urgency=medium
+
+  * Fix daily-dangerous builds:
+    - Copy hooks.
+    - Mangle the channel of seeded snaps to use the edge risk of whichever
+      track they are taken from.
+    - Update the dangerous model to reference tracks that actually exist.
+    - Include providers of content plugs when seeding snaps and creating
+      TPMFDE system.
+    - Do not attempt to build an UEFI boot image or hyperv desktop image for
+      this project/subproject combination.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Mon, 15 Sep 2025 12:16:08 +1200
+
+livecd-rootfs (25.10.20) questing; urgency=medium
+
+  * edubuntu: use dracut
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 10 Sep 2025 17:15:45 -0600
+
+livecd-rootfs (25.10.19) questing; urgency=medium
+
+  * Increase default image size for buildd.
+
+ -- Denis Lalaj <denis.lalaj@canonical.com>  Tue, 09 Sep 2025 16:53:52 -0600
+
+livecd-rootfs (25.10.18) questing; urgency=medium
+
+  * desktop: use dracut
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 08 Sep 2025 17:00:46 -0600
+
+livecd-rootfs (25.10.17) questing; urgency=medium
+
+  [ Tim Andersson ]
+  * Enable ubuntu-dangerous desktop builds (desktop images
+    with all snaps on edge).
+  * Remove temporary snap overrides.
+  * Import latest 25.10 classic model (LP: #2120473)
+  * Import 25.10 dangerous model with all snap channels corrected.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 27 Aug 2025 18:57:13 +0530
+
+livecd-rootfs (25.10.16) questing; urgency=medium
+
+  * Put the uc20-style system seed for TPM backed FDE in the live layer.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 13 Aug 2025 10:34:39 +1200
+
+livecd-rootfs (25.10.15) questing; urgency=medium
+
+  * Add missing components to 6.14 kernel apparmor features' preseeds.
+    (LP: #2116199)
+
+ -- Bryan Alexander <bryan.alexander@canonical.com>  Thu, 17 Jul 2025 13:27:17 -0700
+
+livecd-rootfs (25.10.14) questing; urgency=medium
+
+  [ Didier Roche-Tolomelli ]
+  [ Tim Andersson ]
+  [ Daniel Bungert ]
+  * desktop TPMFDE: move snaps back to stable channels
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 07 Aug 2025 16:21:32 -0600
+
+livecd-rootfs (25.10.13) questing; urgency=medium
+
+  [ Olivier Gayot ]
+  * Build ubuntu-server with multipath-tools-boot installed, so that the
+    multipath stack ends up present in the initramfs.
+    The LVM stack is already present in the initramfs of the installer. And
+    since kinetic, the /dev/mapper entries for LVM devices are created during
+    the initramfs phase. This is a problem when we have LVM on top of a
+    multipath disk because LVM ends up creating /dev/mapper entries out of
+    /dev/sdX (or /dev/sdXpY) devices, not out of /dev/mapper/mpatha as it
+    should. Adding the multipath stack in the initramfs gives multipath a
+    chance to take ownership of /dev/sdX (or /dev/sdXpY) devices before LVM
+    does (LP: #2080474).
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 24 Jul 2025 17:37:33 -0600
+
+livecd-rootfs (25.10.12) questing; urgency=medium
+
+  [ Zygmunt Krynicki ]
+  * Use snap wait system seed.loaded to wait for snapd (LP: #2114923)
+
+  [ Dennis Loose ]
+  [ Didier Roche-Tolomelli ]
+  * Allow the ubuntu-desktop-installer to request snap seeding state
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Tue, 15 Jul 2025 16:30:41 +0200
+
+livecd-rootfs (25.10.11) questing; urgency=medium
+
+  * Fix installer startup to wait for snapd to be preseeded first
+    (LP: #2114923)
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Fri, 11 Jul 2025 14:57:56 +0200
+
+livecd-rootfs (25.10.10) questing; urgency=medium
+
+  * risc-v cloud images: enable cpc fixes for riscv64
+
+ -- Adriano Cordova <adriano.cordova@canonical.com>  Tue, 01 Jul 2025 09:11:16 -0400
+
+livecd-rootfs (25.10.9) questing; urgency=medium
+
+  * desktop and server: read $SUBARCH to allow the use of nvidia's kernel
+    instead of generic (LP: #2109822)
+
+ -- Antoine Lassagne <antoine.lassagne@canonical.com>  Tue, 17 Jun 2025 22:23:11 +1200
+
+livecd-rootfs (25.10.8) questing; urgency=medium
+
+  [ Didier Roche-Tolomelli ]
+  * desktop: use snapd from edge
+  * desktop: tpmfde image use desktop-security-center and firmware-updater
+    from edge
+
+  [ Dan Bungert ]
+  * lb_binary_layered: try #2 to fix mtimes in layered squashfses. (LP2107332)
+    Constrain mtime sync to the current upperdir so that files in lower layers
+    are not redundantly included.
+  * server: fix failure to process the hwe kernel layer due to multiple
+    kernels being present (LP: #2112501)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 13 Jun 2025 12:00:20 -0600
+
+livecd-rootfs (25.10.7) questing; urgency=medium
+
+  * revert 25.10.6 due to duplicated snaps
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 10 Jun 2025 07:55:40 -0600
+
+livecd-rootfs (25.10.6) questing; urgency=medium
+
+  * lb_binary_layered: fix mtimes in layered squashfses. (LP: #2107332)
+    Failing to preserve mtime causes unnecessary python pyc rebuilds due to
+    mtime mismatch, and it's generally strange that reinstalling a package
+    that is already installed changes the files on the system (minus
+    intentional differences such as what's going on in the minimized install
+    source).
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 30 May 2025 17:05:15 -0600
+
+livecd-rootfs (25.10.5) questing; urgency=medium
+
+  * desktop: TPMFDE snapd from latest/edge
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 28 May 2025 10:27:47 -0600
+
+livecd-rootfs (25.10.4) questing; urgency=medium
+
+  * desktop: TPMFDE kernel from 25.10/candidate
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Sun, 25 May 2025 23:18:59 -0600
+
+livecd-rootfs (25.10.3) questing; urgency=medium
+
+  * desktop: update TPMFDE model and don't skip 020-ubuntu-enhanced-sb.binary.
+    (LP: #2110195)  Temporarily use the model that allows overriding snap
+    channels so we can get matching snaps.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 23 May 2025 12:59:40 -0600
+
+livecd-rootfs (25.10.2) questing; urgency=medium
+
+  * desktop: skip 020-ubuntu-enhanced-sb.binary until a matching kernel is
+    ready for snapd 2.68.x
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 06 May 2025 08:24:10 +0200
+
+livecd-rootfs (25.10.1) questing; urgency=medium
+
+  * desktop: no longer involve cloud-init in early networking (LP: #2107225)
+  * server: provide network config direct to netplan
+  * server: update default netplan config for IPv6 autoconfiguration &
+    connectivity
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 28 Apr 2025 09:53:34 -0600
+
+livecd-rootfs (25.04.26) plucky; urgency=medium
+
+  * cpc: Restore UseDomains=true in cloud images (LP: #2106729)
+
+ -- Tomáš Virtus <tomas.virtus@canonical.com>  Thu, 10 Apr 2025 13:07:25 +0000
+
+livecd-rootfs (25.04.25) plucky; urgency=medium
+
+  * live-build/auto/build: Use --workdir in ubuntu-image to avoid filling
+    tmpfs-based /tmp (LP: #2103735)
+
+ -- Dave Jones <dave.jones@canonical.com>  Thu, 20 Mar 2025 17:22:47 +0000
+
+livecd-rootfs (25.04.24) plucky; urgency=medium
+
+  * desktop: update TPMFDE model to move pc-kernel to channel 25.04/stable.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 13 Mar 2025 17:17:30 -0600
+
+livecd-rootfs (25.04.23) plucky; urgency=medium
+
+  * Add 6.14 kernel apparmor features' preseeds. (LP: #2102120)
+
+ -- Jess Jang <jess.jang@canonical.com>  Wed, 12 Mar 2025 21:08:31 -0500
+
+livecd-rootfs (25.04.22) plucky; urgency=medium
+
+  * server: leave the initrd.img symlink, we want that later for probably
+    several reasons but at least for LP: #2101831
+  * desktop: update TPMFDE model for 25.04.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 11 Mar 2025 09:16:03 -0600
+
+livecd-rootfs (25.04.21) plucky; urgency=medium
+
+  * With subiquity builds, setup install-sources to offer bridge kernel.
+  * Add USE_BRIDGE_KERNEL to make it easier to control in the future.
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 05 Mar 2025 08:18:54 -0700
+
+livecd-rootfs (25.04.20) plucky; urgency=medium
+
+  [ Adriano Cordova ]
   * riscv: add SUBARCH 'jh7110'. (LP: #2099993)
 
- -- Adriano Cordova <adriano.cordova@canonical.com>  Mon, 10 Feb 2025 10:40:23 -0300
+  [ Michael Hudson-Doyle ]
+  * In ubuntu-server builds, install the first kernel in the base layer, not
+    the "ga" kernel (which may not be installed at all, as is the case in e.g.
+    the arm64+largemem builds).
+  * Again in ubuntu-server builds, configure LAYERFS_PATH in the kernel layer
+    and ensure the initrd is freshly regenerated in that layer. LAYERFS_PATH
+    was being set to the layer below the kernel layer, which meant that the
+    live session did not get access to all the modules in the case that the
+    kernel had not been installed in the base layer, which in turn means that
+    installs fail. (LP: #2100148)
+  * While we're at it, delete any initrd from any other layer than a kernel
+    layer, as they just waste space on the ISO.
 
-livecd-rootfs (24.04.87) noble; urgency=medium
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Thu, 27 Feb 2025 20:34:01 +1300
 
-  * Add 6.11 kernel apparmor features' preseeds. (LP: #2098306)
+livecd-rootfs (25.04.19) plucky; urgency=medium
 
- -- Thomas Bechtold <thomas.bechtold@canonical.com>  Thu, 13 Feb 2025 12:22:41 +0100
+  * add cpc-sbom to create_manifest calls to generate sboms (LP: #2077105)
 
-livecd-rootfs (24.04.86) noble; urgency=medium
+ -- Thomas Bechtold <thomasbechtold@jpberlin.de>  Tue, 25 Feb 2025 13:20:49 +0100
 
-  * Do not build HWE kernel layer on RISC-V as there is no HWE kernel there.
+livecd-rootfs (25.04.18) plucky; urgency=medium
-    (LP: #2098622)
 
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Mon, 17 Feb 2025 11:32:19 +1300
+  [ Michael Hudson-Doyle ]
+  * Pre-emptively include the override to not try to build HWE kernel layer in
+    post .2 server riscv64 ISOs.
 
-livecd-rootfs (24.04.85) noble; urgency=medium
+  [ Simon Quigley ]
+  * Move from http://ppa.launchpad.net to https://ppa.launchpadcontent.net
+    when specifying EXTRA_PPAS.
+  * Update debhelper compat to 13, no changes needed.
+  * Make the package completely Lintian-clean except for no-dep5-copyright.
+  * Update Standards-Version to 4.7.0, no changes needed.
+  * Add support for multiple pools (/var/lib/{livefs,preinstalled}-pool/).
 
+  [ Simon Poirier ]
+  * increase ubuntu-cpc ppc64el disk size to 2.4G
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Thu, 20 Feb 2025 10:24:04 +1300
+
+livecd-rootfs (25.04.17) plucky; urgency=medium
+
+  [ Dan Bungert ]
   * Fix build failure when using lowlatency-hwe-24.04, as ubuntustudio does.
     (LP: #2098105)
 
- -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 12 Feb 2025 18:39:48 -0700
+  [ Michael Hudson-Doyle ]
+  * live-build/ubuntu-mini-iso/hooks/01-mini-iso.binary: Drop the
+    assumption that the uncompressed part of the initrd is unpacked to a
+    directory called "main".
+  * live-build/ubuntu-mini-iso/hooks/01-mini-iso.chroot_early: Fix paths that
+    should have been adjusted when code moved from binary to chroot hook.
 
-livecd-rootfs (24.04.84) noble; urgency=medium
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 14 Feb 2025 17:25:29 +1300
 
-  [ Florent 'Skia' Jacquet ]
+livecd-rootfs (25.04.16) plucky; urgency=medium
-  * Enable the HWE stack for 24.04.2. (LP: #2098105)
 
-  [ Utkarsh Gupta ]
+  * buildd: add udev to buildd images to fix networking issue. (LP: #2092196)
-  * Bump HWE kernel track to 24.04 for ubuntu-core-desktop.
 
- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 13 Feb 2025 03:15:12 +0530
+ -- Simon Poirier <simon.poirier@canonical.com>  Thu, 13 Feb 2025 13:44:02 -0500
 
-livecd-rootfs (24.04.83) noble; urgency=medium
+livecd-rootfs (25.04.15) plucky; urgency=medium
+
+  * Add 6.12 kernel apparmor features' preseeds.
+
+ -- Thomas Bechtold <thomas.bechtold@canonical.com>  Thu, 13 Feb 2025 12:14:33 +0100
+
+livecd-rootfs (25.04.14) plucky; urgency=medium
+
+  * Restore the default-layer.conf file in the initrd (LP: #2097838)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 11 Feb 2025 08:21:56 -0700
+
+livecd-rootfs (25.04.13) plucky; urgency=medium
+
+  * install-sources: quote default kernel argument.
+  * ubuntu-core-installer: update install-sources.yaml with kernel.
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Wed, 05 Feb 2025 17:43:34 -0800
+
+livecd-rootfs (25.04.12) plucky; urgency=medium
+
+  * Stop producing a rootfs tarball for the ubuntu-mini-iso builds.
+  * Move configuration of casper in ubuntu-serve:live builds to a "chroot
+    early" hook for the installer layer and remove the now unnecessary
+    update-initramfs from the binary hook that breaks because mkinitramfs
+    now requires that /sys is mounted. (LP: #2097280)
+  * Similar changes for ubuntu-mini-iso build.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 05 Feb 2025 15:26:13 +1300
+
+livecd-rootfs (25.04.11) plucky; urgency=medium
+
+  [ Heinrich Schuchardt ]
+  * riscv: copy device trees dtb/ in ESP
+
+  [ Michael Hudson-Doyle ]
+  * Allow snapd to re-exec in installer environment (the issues between snapd,
+    overlayfs and apparmer that meant re-execing caused problems were fixed in
+    snapd a long time ago).
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 29 Jan 2025 08:51:49 +1300
+
+livecd-rootfs (25.04.10) plucky; urgency=medium
+
+  * riscv: copy device trees to the ESP. Fixes (LP: #2095415)
+
+ -- Adriano Cordova <adriano.cordova@canonical.com>  Tue, 21 Jan 2025 10:38:54 -0300
+
+livecd-rootfs (25.04.9) plucky; urgency=medium
+
+  * Move reference wsl-setup script to /usr/lib/wsl/
+
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Wed, 22 Jan 2025 10:17:56 +0100
+
+livecd-rootfs (25.04.8) plucky; urgency=medium
+
+  * risc-v: directly copy device trees to /boot/dtbs (LP: #2092205)
+
+ -- Adriano Cordova <adriano.cordova@canonical.com>  Thu, 19 Dec 2024 10:42:57 -0300
+
+livecd-rootfs (25.04.7) plucky; urgency=medium
 
   [ Carlos Nihelton ]
   [ Didier Roche-Tolomelli ]
@@ -97,105 +600,263 @@ livecd-rootfs (24.04.83) noble; urgency=medium
     - Create livecd-roots tarball as a .wsl extension
     - Create wsl-distribution.conf for WSL images
 
- -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Thu, 23 Jan 2025 14:22:54 +0100
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Mon, 09 Dec 2024 14:29:37 +0100
 
-livecd-rootfs (24.04.82) noble; urgency=medium
+livecd-rootfs (25.04.6) plucky; urgency=medium
 
-  * Add support for arm64+tegra-jetson flavor. (LP: #2091392)
+  * Refer to LB_DISTRIBUTION, not SUITE, in the ubuntu-mini-iso binary hook.
 
- -- Remy Martin <remy.martin@canonical.com>  Fri, 13 Dec 2024 11:53:08 +0100
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Fri, 06 Dec 2024 18:59:35 +1300
 
-livecd-rootfs (24.04.81) noble; urgency=medium
+livecd-rootfs (25.04.5) plucky; urgency=medium
 
-  * Introduce unminimize as a package in OCI images. (LP: #2078583)
+  * Fix ubuntu-mini-iso build, by using script from debian-cd to create a
+    bootable ISO rather than the now deleted cd-boot-images-amd64 package.
 
- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 20 Nov 2024 15:43:55 +0530
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 04 Dec 2024 13:33:53 +1300
 
-livecd-rootfs (24.04.80) noble; urgency=medium
+livecd-rootfs (25.04.4) plucky; urgency=medium
+
+  [ Rémy Martin ]
+  * Add support for arm64+tegra-jetson flavor to disambiguate from the
+    NVIDIA IGX builds.
+
+ -- Loïc Minier <loic.minier@ubuntu.com>  Tue, 26 Nov 2024 13:41:05 +0000
+
+livecd-rootfs (25.04.3) plucky; urgency=medium
+
+  * Switch Lubuntu to stacked squashfses, and split apart the common
+    functionality to avoid Subiquity-specific commands.
+  * Add optional Dracut support for installed images, enable it for Lubuntu.
+
+ -- Simon Quigley <tsimonq2@ubuntu.com>  Sat, 23 Nov 2024 13:52:09 -0600
+
+livecd-rootfs (25.04.2) plucky; urgency=medium
 
   * Explicitly create home directory for buildd system user to avoid issues
-    with installing and running snaps. (LP: #2083240) 
+    with installing and running snaps. (LP: #2083240)
 
- -- jchittum <john.chittum@canonical.com>  Wed, 06 Nov 2024 07:43:40 -0500
+ -- jchittum <john.chittum@canonical.com>  Wed, 06 Nov 2024 07:40:42 -0500
 
-livecd-rootfs (24.04.79) noble; urgency=medium
+livecd-rootfs (25.04.1) plucky; urgency=medium
 
-  * Add apparmor policy permstable32 missing component (LP: #2084698)
+  * Add support for install-sources version: 2, which handles bridge kernels.
 
- -- Thomas Bechtold <thomas.bechtold@canonical.com>  Fri, 18 Oct 2024 13:54:51 +0200
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 17 Oct 2024 08:22:38 -0600
 
-livecd-rootfs (24.04.78) noble; urgency=medium
+livecd-rootfs (24.10.27) oracular; urgency=medium
 
-  * add cpc-sbom to create_manifest calls to generate sboms (LP: #2077105)
+  * Set UBUNTU_STORE_COHORT_KEY="+" to prepare-image to make sure we simply
+    use the latest snap versions regardless of phasing state.
 
- -- jchittum <john.chittum@canonical.com>  Mon, 26 Aug 2024 14:15:05 -0400
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 08 Oct 2024 13:06:10 +0100
 
-livecd-rootfs (24.04.77.1) noble; urgency=medium
+livecd-rootfs (24.10.26) oracular; urgency=medium
+
+  * Use generic kernel flavor for Nezha D1 and LicheeRV Dock.
+
+ -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Fri, 04 Oct 2024 10:30:28 +0200
+
+livecd-rootfs (24.10.25) oracular; urgency=medium
+
+  * Update the model used for TPM FDE installs, yet again.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Fri, 04 Oct 2024 12:21:38 +1300
+
+livecd-rootfs (24.10.24) oracular; urgency=medium
+
+  * desktop: Remove some cruft referencing the subiquity snap, which can
+    result in 'error: snap "subiquity" is not installed' messages being
+    printed on the terminal.  (LP: #2083554)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 02 Oct 2024 10:13:41 -0600
+
+livecd-rootfs (24.10.23) oracular; urgency=medium
+
+  * Update the model used for TPM FDE installs, again, hopefully working this
+    time.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 02 Oct 2024 19:06:50 +1300
+
+livecd-rootfs (24.10.22) oracular; urgency=medium
+
+  * Revert "Update the model used for TPM FDE installs."
+    (to unblock apparmor fixes for cloud images)
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Mon, 30 Sep 2024 16:19:22 +0530
+
+livecd-rootfs (24.10.21) oracular; urgency=medium
+
+  [ Utkarsh Gupta ]
+  * Add 6.11 kernel apparmor features' preseeds.
+
+  [ Michael Hudson-Doyle ]
+  * Update the model used for TPM FDE installs.
+
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 19 Sep 2024 19:42:24 +0530
+
+livecd-rootfs (24.10.20) oracular; urgency=medium
+
+  [ Chad Smith ]
+  * Refresh cloud-init service override for updated service file name and
+    ordering fix. (LP: #2081325)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 20 Sep 2024 12:36:12 -0600
+
+livecd-rootfs (24.10.19) oracular; urgency=medium
+
+  * live-server and desktop: disable kdump-tools only in the live layer.
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Tue, 17 Sep 2024 21:11:15 -0700
+
+livecd-rootfs (24.10.18) oracular; urgency=medium
+
+  * live-server and desktop: disable kdump-tools in the minimal layer
+    to allow the installer to decide when to enable it (LP: #2077990).
+
+ -- Chris Peterson <chris.peterson@canonical.com>  Fri, 13 Sep 2024 09:08:33 -0700
+
+livecd-rootfs (24.10.17) oracular; urgency=medium
+
+  * desktop and subiquity-using flavors: install the kernel in the minimal
+    layer (LP 2080272)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 12 Sep 2024 15:30:34 -0600
+
+livecd-rootfs (24.10.16) oracular; urgency=medium
+
+  * live-server: fix issue where the kernel was not actually placed in the
+    minimal layer
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 11 Sep 2024 12:30:35 -0600
+
+livecd-rootfs (24.10.15) oracular; urgency=medium
+
+  * live-server: install the kernel in the minimal layer (LP: #2080272)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 10 Sep 2024 12:42:33 -0600
+
+livecd-rootfs (24.10.14) oracular; urgency=medium
+
+  [ Sergio Costas ]
+  * Switch ubuntu-core-desktop project to be a subproject of the
+    ubuntu-core-installer project.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 10 Sep 2024 16:11:32 +1200
+
+livecd-rootfs (24.10.13) oracular; urgency=medium
+
+  * Fix autopkgtest issue where /tmp mounted with nodev is used as a working
+    directory, which understandably causes problems for device node creation.
+    (LP: #2078980)
+
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 04 Sep 2024 14:27:27 -0600
+
+livecd-rootfs (24.10.12) oracular; urgency=medium
 
-  * Hotfix upload outside of git history, real change from 24.04.79.
   * Update ubuntu-classic-2404-amd64 model in ubuntu hooks. (LP: #2077899)
 
- -- Chris Peterson <chris.peterson@canonical.com>  Mon, 26 Aug 2024 16:57:12 -0700
+ -- Chris Peterson <chris.peterson@canonical.com>  Mon, 26 Aug 2024 17:03:28 -0700
 
-livecd-rootfs (24.04.77) noble; urgency=medium
+livecd-rootfs (24.10.11) oracular; urgency=medium
 
-  * Drop unminimize spit out by livecd-rootfs. (LP: #2077695)
+  [ Simon Poirier ]
-  * Use packaged unminimize in the ubuntu-server images.
+  * disk-image-uefi: Fix regression with partition sizing on arm.
 
- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 21 Aug 2024 12:08:44 +0530
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 22 Aug 2024 04:58:46 +0530
 
-livecd-rootfs (24.04.76) noble; urgency=medium
+livecd-rootfs (24.10.10) oracular; urgency=medium
 
-  * Force latest/stable/ubuntu-24.10 subiquity onto the ubuntu-core-installer
+  * disk-image-uefi.binary: Shift down boot partition to 13 to support systems
-    ISO for now. (LP: #2077495)
+    which don't handle partition numbers higher than 15. (LP: #2072929)
 
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 21 Aug 2024 16:13:58 +1200
+ -- Simon Poirier <simon.poirier@canonical.com>  Tue, 20 Aug 2024 18:57:57 -0400
 
-livecd-rootfs (24.04.75) noble; urgency=medium
+livecd-rootfs (24.10.9) oracular; urgency=medium
 
-  * Add 'ubuntu-core-installer' project. (LP: #2076307)
+  [ Cody Shepherd ]
+  * fix: remove ec2-version hook for cpc images.
 
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 30 Jul 2024 16:35:31 +1200
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 14 Aug 2024 18:02:29 +0530
 
-livecd-rootfs (24.04.74) noble; urgency=medium
+livecd-rootfs (24.10.8) oracular; urgency=medium
+
+  [ Erich Eickmeyer ]
+  * Add minimal installation to Ubuntu Studio
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 25 Jul 2024 11:12:52 -0700
+
+livecd-rootfs (24.10.7) oracular; urgency=medium
 
   * riscv64: preinstalled server image for Microchip PIC64GX Curiosity Kit
     (LP: #2072956)
 
- -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Mon, 08 Jul 2024 17:51:25 +0200
+ -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Mon, 22 Jul 2024 14:51:25 +0200
 
-livecd-rootfs (24.04.73) noble; urgency=medium
+livecd-rootfs (24.10.6) oracular; urgency=medium
 
-  * Build qcow2 images for ubuntu-core LXD support (LP: #2072759).
+  [ Chad Smith ]
+  * Override cloud-init.service in /etc so as to not invalidate debsums
+    (LP: #2069391)
+  * Update the overridden copy of cloud-init.service
 
- -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 11 Jul 2024 13:15:43 +0200
+ -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 18 Jul 2024 15:58:53 -0600
 
-livecd-rootfs (24.04.72) noble; urgency=medium
+livecd-rootfs (24.10.5) oracular; urgency=medium
 
-  [ Heinrich Schuchardt ]
+  [ Erich Eickmeyer ]
-  * riscv64: use earlycon=sbi on command line (LP: #2068739)
+  * Switch Ubuntu Studio to generic kernel
+
+  [ Zhaoxuan Zhai ]
+  * support config sector size in ubuntu-image
+
+  [ Łukasz 'sil2100' Zemczak ]
+  * Build qcow2 images for ubuntu-core LXD support.
+
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 11 Jul 2024 12:57:54 +0200
+
+livecd-rootfs (24.10.4) oracular; urgency=medium
 
   [ Philip Roche ]
-  * Revert removal of unminimize call in server builds (LP: #2069828)
+  * Revert removal of unminimize call in server builds. (LP: #2069828)
 
- -- Philip Roche <phil.roche@canonical.com>  Mon, 24 Jun 2024 14:24:52 +0100
+  [ Utkarsh Gupta ]
+  * Use packaged unminimize in the ubuntu-server images.
+  * Drop unminimize spit out by livecd-rootfs.
 
-livecd-rootfs (24.04.71) noble; urgency=medium
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 19 Jun 2024 22:02:39 +0530
 
-  * Re-enable ability to build HyperV desktop images (LP: #2064280)
+livecd-rootfs (24.10.3) oracular; urgency=medium
 
- -- Philip Roche <phil.roche@canonical.com>  Mon, 27 May 2024 12:05:33 +0100
+  [ Heinrich Schuchardt ]
- 
+  * riscv64: use earlycon=sbi on command line
-livecd-rootfs (24.04.70) noble; urgency=medium
+
+  [ Michael Hudson-Doyle ]
+  * Add 'ubuntu-core-installer' project.
+
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 11 Jun 2024 11:51:14 +1200
+
+livecd-rootfs (24.10.2) oracular; urgency=medium
+
+  [ Michael Hudson-Doyle ]
+  * Replace 'ubuntustudio-dvd' project with an almost identical 'ubuntustudio'
+    project.
+
+  [ Philip Roche ]
+  * No longer install LXD snap in unminimize script (LP: #2066905)
+
+ -- Philip Roche <phil.roche@canonical.com>  Thu, 23 May 2024 14:11:57 +0100
+
+livecd-rootfs (24.10.1) oracular; urgency=medium
 
   [ Łukasz 'sil2100' Zemczak ]
   * Add experimental support for building ubuntu-core-desktop installer images
     (LP: #2063203)
 
   [ Philip Roche ]
-  * No longer install LXD snap in unminimize script (LP: #2066905) 
+  * Re-enable ability to build HyperV desktop images (LP: #2064280)
 
- -- Philip Roche <phil.roche@canonical.com>  Fri, 24 May 2024 15:47:48 +0100
+ -- Philip Roche <phil.roche@canonical.com>  Tue, 30 Apr 2024 17:58:43 +0100
 
 livecd-rootfs (24.04.69) noble; urgency=medium
 
@@ -407,7 +1068,7 @@ livecd-rootfs (24.04.43) noble; urgency=medium
     grub updates in cloud images (LP: #2054103)
 
  -- Philip Roche <phil.roche@canonical.com>  Fri, 23 Feb 2024 13:54:57 +0000
- 
+
 livecd-rootfs (24.04.42) noble; urgency=medium
 
   [ Sean Davis ]
@@ -533,8 +1194,8 @@ livecd-rootfs (24.04.27) noble; urgency=medium
 livecd-rootfs (24.04.26) noble; urgency=medium
 
   [ Steve Langasek ]
-  * Share live-build/ubuntu/hooks/020-ubuntu-live.chroot_early across 
+  * Share live-build/ubuntu/hooks/020-ubuntu-live.chroot_early across
-    all flavors using new-style layered squashfs, removing need for 
+    all flavors using new-style layered squashfs, removing need for
     kernel commandline options in debian-cd.
 
   [ dann frazier ]
@@ -666,7 +1327,7 @@ livecd-rootfs (24.04.10) noble; urgency=medium
   * Set C.UTF-8 locale in /etc/default/locale for all images; originally
     intended to be landed in the cosmic cycle..
   * Project name for Ubuntu Studio needs to be 'ubuntustudio-dvd'
-    throughout, not 'ubuntustudio'.  
+    throughout, not 'ubuntustudio'.
 
  -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 08 Dec 2023 15:07:41 -0800
 
@@ -745,7 +1406,7 @@ livecd-rootfs (24.04.2) noble; urgency=medium
     instead of /boot/vmlinuz. (LP: #2038957)
 
  -- Philip Roche <phil.roche@canonical.com>  Thu, 26 Oct 2023 17:56:00 +0100
- 
+
 livecd-rootfs (24.04.1) noble; urgency=medium
 
   [ Steve Langasek ]

debian/compat

@@ -1 +0,0 @@
-7

debian/control

@@ -1,10 +1,12 @@
 Source: livecd-rootfs
 Section: devel
 Priority: optional
-Build-Depends: debhelper (>= 7)
+Build-Depends: debhelper-compat (= 13)
 Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
-Standards-Version: 3.9.6
+Standards-Version: 4.7.0
 Vcs-Git: https://git.launchpad.net/livecd-rootfs -b ubuntu/master
+Vcs-Browser: https://git.launchpad.net/livecd-rootfs
+Rules-Requires-Root: no
 
 Package: livecd-rootfs
 Architecture: any
@@ -23,6 +25,7 @@ Depends: ${misc:Depends},
          git,
          gnupg,
          grep-dctrl,
+         jq,
          kpartx,
          live-build (>= 3.0~a57-1ubuntu31~),
          lsb-release,
@@ -34,6 +37,7 @@ Depends: ${misc:Depends},
          procps,
          python3,
          python3-apt,
+         python3-click,
          python3-launchpadlib [!i386],
          python3-yaml,
          qemu-utils [!i386],

debian/copyright

@@ -11,7 +11,7 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 General Public License for more details.
 
 You should have received a copy of the GNU General Public License with
-your Ubuntu system, in /usr/share/common-licenses/GPL, or with the
+your Ubuntu system, in /usr/share/common-licenses/GPL-2, or with the
 livecd-rootfs source package as the file COPYING.  If not, write to
 the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
 Boston, MA 02110-1301 USA.

debian/install

@@ -4,3 +4,4 @@ get-ppa-fingerprint usr/share/livecd-rootfs
 minimize-manual usr/share/livecd-rootfs
 checkout-translations-branch usr/share/livecd-rootfs
 update-source-catalog usr/share/livecd-rootfs
+sync-mtime usr/share/livecd-rootfs

debian/livecd-rootfs.lintian-overrides

@@ -0,0 +1,10 @@
+# This is expected and okay
+livecd-rootfs: service-file-is-not-a-file [usr/share/livecd-rootfs/*.service]
+livecd-rootfs: uses-dpkg-database-directly [usr/share/livecd-rootfs/live-build/lb_chroot_layered]
+livecd-rootfs: package-contains-no-arch-dependent-files
+
+# Developer documentation in an already-expected spot
+livecd-rootfs: package-contains-documentation-outside-usr-share-doc [usr/share/livecd-rootfs/live-build/ubuntu-cpc/README.cpc.md]
+
+# This is going to occur quite a bit; we're making a livefs
+livecd-rootfs: repeated-path-segment * [*]

debian/source/lintian-overrides

@@ -0,0 +1,5 @@
+# This is expected and okay
+livecd-rootfs source: absolute-symbolic-link-target-in-source * [live-build/*]
+
+# The description indicates that it's not required in debhelper >= 13, which we have
+livecd-rootfs source: override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS [debian/rules:*]

debian/tests/default-bootstraps

@@ -78,7 +78,8 @@ live_build_rootfs() {
     echo ""
 }
 
-WORKDIR=$(mktemp -d)
+[ -d /adt ] || mkdir /adt
+WORKDIR=$(mktemp -d -p /adt)
 trap "RET=\$?; rm -rf $WORKDIR; exit \$RET" 0 INT QUIT ABRT PIPE TERM
 cd $WORKDIR
 

live-build/apparmor/6.12/capability

@@ -0,0 +1 @@
+0xffffff

live-build/apparmor/6.12/caps/extended

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/caps/mask

@@ -0,0 +1 @@
+chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore

live-build/apparmor/6.12/dbus/mask

@@ -0,0 +1 @@
+acquire send receive

live-build/apparmor/6.12/domain/attach_conditions/xattr

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_hat

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_hatv

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_onexec

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/computed_longest_left

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/disconnected.path

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/fix_binfmt_elf_mmap

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/interruptible

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/kill.signal

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/post_nnp_subset

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/stack

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/unconfined_allowed_children

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/domain/version

@@ -0,0 +1 @@
+1.2

live-build/apparmor/6.12/file/mask

@@ -0,0 +1 @@
+create read write exec append mmap_exec link lock

live-build/apparmor/6.12/io_uring/mask

@@ -0,0 +1 @@
+sqpoll override_creds

live-build/apparmor/6.12/ipc/posix_mqueue

@@ -0,0 +1 @@
+create read write open delete setattr getattr

live-build/apparmor/6.12/mount/mask

@@ -0,0 +1 @@
+mount umount pivot_root

live-build/apparmor/6.12/mount/move_mount

@@ -0,0 +1 @@
+detached

live-build/apparmor/6.12/namespaces/mask

@@ -0,0 +1 @@
+userns_create

live-build/apparmor/6.12/namespaces/pivot_root

@@ -0,0 +1 @@
+no

live-build/apparmor/6.12/namespaces/profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/namespaces/userns_create

@@ -0,0 +1 @@
+pciu&

live-build/apparmor/6.12/network/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.12/network/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/network_v8/af_inet

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/network_v8/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.12/policy/notify/user

@@ -0,0 +1 @@
+file

live-build/apparmor/6.12/policy/outofband

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.12/policy/permstable32_version

@@ -0,0 +1 @@
+0x000003

live-build/apparmor/6.12/policy/set_load

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/state32

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.12/policy/unconfined_restrictions/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/unconfined_restrictions/io_uring

@@ -0,0 +1 @@
+0

live-build/apparmor/6.12/policy/unconfined_restrictions/userns

@@ -0,0 +1 @@
+1

live-build/apparmor/6.12/policy/versions/v5

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/versions/v6

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/versions/v7

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/versions/v8

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/policy/versions/v9

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/ptrace/mask

@@ -0,0 +1 @@
+read trace

live-build/apparmor/6.12/query/label/data

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/query/label/multi_transaction

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.12/query/label/perms

@@ -0,0 +1 @@
+allow deny audit quiet

live-build/apparmor/6.12/rlimit/mask

@@ -0,0 +1 @@
+cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime

live-build/apparmor/6.12/signal/mask

@@ -0,0 +1 @@
+hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost

live-build/apparmor/6.17/capability

@@ -0,0 +1 @@
+0xffffff

live-build/apparmor/6.17/caps/extended

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/caps/mask

@@ -0,0 +1 @@
+chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore

live-build/apparmor/6.17/dbus/mask

@@ -0,0 +1 @@
+acquire send receive

live-build/apparmor/6.17/domain/attach_conditions/xattr

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/change_hat

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/change_hatv

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/change_onexec

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/change_profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/computed_longest_left

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/disconnected.ipc

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/disconnected.path

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/fix_binfmt_elf_mmap

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/interruptible

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/kill.signal

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/post_nnp_subset

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/stack

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/unconfined_allowed_children

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/domain/version

@@ -0,0 +1 @@
+1.2

live-build/apparmor/6.17/file/mask

@@ -0,0 +1 @@
+create read write exec append mmap_exec link lock

live-build/apparmor/6.17/io_uring/mask

@@ -0,0 +1 @@
+sqpoll override_creds

live-build/apparmor/6.17/ipc/posix_mqueue

@@ -0,0 +1 @@
+create read write open delete setattr getattr label

live-build/apparmor/6.17/mount/mask

@@ -0,0 +1 @@
+mount umount pivot_root

live-build/apparmor/6.17/mount/move_mount

@@ -0,0 +1 @@
+detached

live-build/apparmor/6.17/namespaces/mask

@@ -0,0 +1 @@
+userns_create

live-build/apparmor/6.17/namespaces/pivot_root

@@ -0,0 +1 @@
+no

live-build/apparmor/6.17/namespaces/profile

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/namespaces/userns_create

@@ -0,0 +1 @@
+pciu&

live-build/apparmor/6.17/network/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.17/network/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/network_v8/af_inet

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/network_v8/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.17/network_v9/af_mask

@@ -0,0 +1 @@
+unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

live-build/apparmor/6.17/network_v9/af_unix

@@ -0,0 +1 @@
+yes

live-build/apparmor/6.17/policy/metadata_tagging_version

@@ -0,0 +1 @@
+0x000001

live-build/apparmor/6.17/policy/notify/user

@@ -0,0 +1 @@
+file tags

live-build/apparmor/6.17/policy/notify_versions/v3

@@ -0,0 +1 @@
+yes