Merge lp:~rbalint/livecd-rootfs/minimize-fix-grub

Fix the force-partuuid handling to create the file under
/etc/default/grub.d/ with a .cfg extension as grub expects; it's unclear how this ever worked without.
2025-08-21 13:44:08 +00:00 · 2017-10-05 10:01:41 -07:00 · 2017-10-05 16:02:26 +02:00 · 2017-10-05 16:01:04 +02:00 · 2017-10-04 18:43:52 +00:00 · 2017-10-04 10:54:31 -07:00
588 changed files with 4195 additions and 13811 deletions
--- a/63
+++ b/63
@ -1,63 +0,0 @@
-#!/usr/bin/python3
-"""List the packages which could be automatically installed without becoming autoremovable
-
-Finds all manually installed meta packages, and prints their dependencies
-which could be marked as automatically installed.
-"""
-import sys
-
-import apt
-
-
-def is_root(pkg):
-    """Check if the package is a root package (manually inst. meta)"""
-    section = pkg.candidate.section if pkg.candidate else ""
-    return (pkg.is_installed and
-            not pkg.is_auto_installed and
-            (section == "metapackages" or
-             section.endswith("/metapackages")))
-
-
-def main():
-    """Main function"""
-    cache = apt.Cache(rootdir=sys.argv[1] if len(sys.argv) > 1 else None)
-    roots = set(pkg for pkg in cache if is_root(pkg))
-    workset = set(roots)
-    seen = set()
-    ubiquity_depends = set()
-
-    with cache.actiongroup():
-        while True:
-            print("Iteration", file=sys.stderr)
-            to_proc = workset - seen
-            if not to_proc:
-                break
-            for pkg in sorted(to_proc):
-                print("    Visiting", pkg, file=sys.stderr)
-
-                if pkg not in roots and pkg not in ubiquity_depends:
-                    if not pkg.is_auto_installed:
-                        print(pkg.name)
-
-                for dep in (pkg.installed.dependencies +
-                            pkg.installed.recommends):
-                    for bdep in dep.or_dependencies:
-                        for ver in bdep.target_versions:
-                            if ver.package.is_installed:
-                                if pkg.name == "ubiquity":
-                                    ubiquity_depends.add(ver.package)
-                                if pkg.name != "ubiquity":
-                                    # Reprocess this package again, as we did not mark it when we visited it from ubiquity
-                                    try:
-                                        ubiquity_depends.remove(ver.package)
-                                        # This will raise the KeyError here if ubiquity did not depend on it
-                                        seen.remove(ver.package)
-                                    except KeyError:
-                                        pass
-                                workset.add(ver.package)
-
-                seen.add(pkg)
-
-
-if __name__ == '__main__':
-    main()
--- a/23
+++ b/23
@ -1,23 +0,0 @@
-#!/bin/sh
-
-set -eux
-
-branch=$1
-dir=$2
-target="$(readlink -f "${3}")"
-
-tmpdir="$(mktemp -d)"
-cd "${tmpdir}"
-
-cleanup () {
-    rm -rf "${tmpdir}"
-}
-
-trap cleanup EXIT
-
-mkdir -p $target
-
-git clone $branch checkout
-for po in checkout/$dir/*.po; do
-    msgfmt "${po}" -o "${target}/$(basename "${po}" .po).mo"
-done
--- a/debian/.gitignore
+++ b/debian/.gitignore
@ -1 +0,0 @@
-files
--- a/debian/changelog
+++ b/debian/changelog
--- a/debian/compat
+++ b/debian/compat
@ -0,0 +1 @@
+7
--- a/debian/control
+++ b/debian/control
@ -1,54 +1,15 @@
 Source: livecd-rootfs
 Section: devel
 Priority: optional
-Build-Depends: debhelper-compat (= 13)
+Build-Depends: debhelper (>= 7)
 Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
-Standards-Version: 4.7.0
-Vcs-Git: https://git.launchpad.net/livecd-rootfs -b ubuntu/master
-Vcs-Browser: https://git.launchpad.net/livecd-rootfs
-Rules-Requires-Root: no
+Standards-Version: 3.9.6
+Vcs-Bzr: lp:~ubuntu-core-dev/livecd-rootfs/xenial-proposed/

 Package: livecd-rootfs
 Architecture: any
-Depends: ${misc:Depends},
-         apt-utils,
-         attr,
-         debootstrap,
-         devscripts,
-         distro-info,
-         dosfstools,
-         e2fsprogs,
-         gdisk,
-         genisoimage,
-         germinate (>= 1.25.1),
-         gettext,
-         git,
-         gnupg,
-         grep-dctrl,
-         kpartx,
-         live-build (>= 3.0~a57-1ubuntu31~),
-         lsb-release,
-         lzma,
-         make,
-         mount,
-         mtools [!i386],
-         parted,
-         procps,
-         python3,
-         python3-apt,
-         python3-launchpadlib [!i386],
-         python3-yaml,
-         qemu-utils [!i386],
-         rsync [!i386],
-         snapd (>= 2.39) [!i386],
-         squashfs-tools (>= 1:3.3-1),
-         sudo,
-         u-boot-tools [arm64 armhf],
-         python3-vmdkstream [amd64 i386],
-         xorriso [!i386],
-         xz-utils,
-         zerofree,
-         zstd
+Depends: ${misc:Depends}, debootstrap, rsync, python-minimal | python, procps, squashfs-tools (>= 1:3.3-1), grep-dctrl, lsb-release, lzma, e2fsprogs, germinate (>= 1.25.1), apt-utils, gnupg, live-build (>= 3.0~a57-1ubuntu25.5~), android-tools-fsutils [armhf], python3-software-properties
+Suggests: partimage
 Breaks: ubuntu-defaults-builder (<< 0.32)
 Description: construction script for the livecd rootfs
 livecd-rootfs provides the script used to create the root filesystem
--- a/debian/copyright
+++ b/debian/copyright
@ -11,7 +11,7 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 General Public License for more details.

 You should have received a copy of the GNU General Public License with
-your Ubuntu system, in /usr/share/common-licenses/GPL-2, or with the
+your Ubuntu system, in /usr/share/common-licenses/GPL, or with the
 livecd-rootfs source package as the file COPYING.  If not, write to
 the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
 Boston, MA 02110-1301 USA.
--- a/debian/gbp.conf
+++ b/debian/gbp.conf
@ -1,4 +0,0 @@
-[DEFAULT]
-debian-branch=ubuntu/master
-debian-tag = %(version)s
-dch-opt = --vendor=debian
--- a/debian/install
+++ b/debian/install
@ -1,7 +1,2 @@
-auto-markable-pkgs usr/share/livecd-rootfs
 live-build usr/share/livecd-rootfs
 get-ppa-fingerprint usr/share/livecd-rootfs
-minimize-manual usr/share/livecd-rootfs
-checkout-translations-branch usr/share/livecd-rootfs
-update-source-catalog usr/share/livecd-rootfs
-sync-mtime usr/share/livecd-rootfs
--- a/debian/livecd-rootfs.lintian-overrides
+++ b/debian/livecd-rootfs.lintian-overrides
@ -1,10 +0,0 @@
-# This is expected and okay
-livecd-rootfs: service-file-is-not-a-file [usr/share/livecd-rootfs/*.service]
-livecd-rootfs: uses-dpkg-database-directly [usr/share/livecd-rootfs/live-build/lb_chroot_layered]
-livecd-rootfs: package-contains-no-arch-dependent-files
-
-# Developer documentation in an already-expected spot
-livecd-rootfs: package-contains-documentation-outside-usr-share-doc [usr/share/livecd-rootfs/live-build/ubuntu-cpc/README.cpc.md]
-
-# This is going to occur quite a bit; we're making a livefs
-livecd-rootfs: repeated-path-segment * [*]
--- a/debian/source/lintian-overrides
+++ b/debian/source/lintian-overrides
@ -1,5 +0,0 @@
-# This is expected and okay
-livecd-rootfs source: absolute-symbolic-link-target-in-source * [live-build/*]
-
-# The description indicates that it's not required in debhelper >= 13, which we have
-livecd-rootfs source: override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS [debian/rules:*]
--- a/debian/tests/control
+++ b/debian/tests/control
@ -1,7 +1,7 @@
 Tests: default-bootstraps
 Depends: @, lsb-release
-Restrictions: needs-root isolation-machine allow-stderr
+Restrictions: needs-root isolation-machine

 Tests: minimized
 Depends: @, lsb-release
-Restrictions: needs-root isolation-machine allow-stderr
+Restrictions: needs-root isolation-machine
--- a/debian/tests/default-bootstraps
+++ b/debian/tests/default-bootstraps
@ -13,41 +13,47 @@ fi
 # Listed subprojects can be combined with other projects as well,
 # but this list gives reasonable coverage.
 ALL_TRIPLETS="
+ base::
 edubuntu::
+ edubuntu-dvd::
 kubuntu::
+ kubuntu-active::
+ kubuntu-dvd::
+ kubuntu-plasma5::
 lubuntu::
- ubuntu-unity::
+ lubuntu-next::
+ mythbuntu::
 ubuntu::
 ubuntu-base::
- ubuntu-base:buildd:
 ubuntu-budgie::
 ubuntu-budgie-desktop::
 ubuntu-budgie-live::
- ubuntucinnamon::
 ubuntu-core:system-image:ubuntu-core
 ubuntu-cpc::ubuntu-cpc
 ubuntu-cpc:minimized:ubuntu-cpc
+ ubuntu-desktop-next:system-image:ubuntu-desktop-next
+ ubuntu-desktop-next::ubuntu-desktop-next
 ubuntu-dvd::
+ ubuntu-gnome::
 ubuntukylin::
 ubuntu-mate::
 ubuntu-mate-core::
 ubuntu-mate-desktop::
 ubuntu-mate-live::
- ubuntu-server:live:ubuntu-server
- xubuntu::
- xubuntu:minimal:"
-
-ARCH=$(dpkg --print-architecture)
+ ubuntu-netbook::
+ ubuntu-server::
+ ubuntu-server:ubuntu-rtm:
+ ubuntu-server:ubuntu-rtm/foo:
+ ubuntu-server:wubi:
+ ubuntu-touch-custom::ubuntu-touch-custom
+ ubuntu-touch::ubuntu-touch
+ xubuntu::"

 if [ -z "$SELECTED_TRIPLETS" ]; then
    SELECTED_TRIPLETS="
 ubuntu-base::
 ubuntu-cpc::ubuntu-cpc
 "
-    if [ "$ARCH" = amd64 ]; then
-        SELECTED_TRIPLETS="$SELECTED_TRIPLETS
-ubuntu::"
-    fi
 fi

 live_build_rootfs() {
@ -55,6 +61,7 @@ live_build_rootfs() {
    local SUBPROJECT_TMP=${1%:*}
    SUBPROJECT=${SUBPROJECT_TMP#*:}
    TEMPLATE=${1##*:}
+    ARCH=$(dpkg --print-architecture)
    echo "Building rootfs for project: '$PROJECT' subproject: '$SUBPROJECT' template: '$TEMPLATE' in $PWD"
    cp -a /usr/share/livecd-rootfs/live-build/auto .
    if [ -n "$TEMPLATE" ]; then
@ -64,22 +71,19 @@ live_build_rootfs() {
         SUBPROJECT=$SUBPROJECT \
         SUITE=$SUITE \
         ARCH=$ARCH \
-         NOW=$(date '+%Y%m%d') \
         lb config
    mkdir chroot
    # this part needs root rights, but right now the whole script ran as root by autopkgtest
    env PROJECT=$PROJECT \
         SUBPROJECT=$SUBPROJECT \
         ARCH=$ARCH \
-         NOW=$(date '+%Y%m%d') \
         lb build
    echo "Build results for project: '$PROJECT' subproject: '$SUBPROJECT' template: '$TEMPLATE' in $PWD"
    du -sh *
    echo ""
 }

-[ -d /adt ] || mkdir /adt
-WORKDIR=$(mktemp -d -p /adt)
+WORKDIR=$(mktemp -d)
 trap "RET=\$?; rm -rf $WORKDIR; exit \$RET" 0 INT QUIT ABRT PIPE TERM
 cd $WORKDIR

--- a/debian/tests/minimized
+++ b/debian/tests/minimized
@ -1,3 +1,11 @@
 #!/bin/sh

-env SELECTED_TRIPLETS=ubuntu-cpc:minimized:ubuntu-cpc debian/tests/default-bootstraps
+ARCH=$(dpkg --print-architecture)
+
+failure_code=1
+if [ "$ARCH" = ppc64el ]; then
+	# not a regression; don't block while debugging
+	failure_code=0
+fi
+
+env SELECTED_TRIPLETS=ubuntu-cpc:minimized:ubuntu-cpc debian/tests/default-bootstraps || exit $failure_code
--- a/8
+++ b/8
@ -2,14 +2,16 @@

 from __future__ import print_function

-from launchpadlib.launchpad import Launchpad
 from optparse import OptionParser

+from softwareproperties import ppa
+

 parser = OptionParser(usage="%prog OWNER/NAME")
 _, args = parser.parse_args()
 if not args:
    parser.error("must provide a PPA owner/name")
 owner_name, ppa_name = args[0].split("/", 1)
-lp = Launchpad.login_anonymously('livecd-rootfs', 'production', version='devel')
-print(lp.people(owner_name).getPPAByName(name=ppa_name).signing_key_fingerprint)
+owner_name = "~%s" % owner_name
+ppa_info = ppa.get_ppa_info_from_lp(owner_name, ppa_name)
+print(ppa_info["signing_key_fingerprint"])
--- a/live-build/apparmor/6.11/capability
+++ b/live-build/apparmor/6.11/capability
@ -1 +0,0 @@
-0xffffff
--- a/live-build/apparmor/6.11/caps/extended
+++ b/live-build/apparmor/6.11/caps/extended
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/caps/mask
+++ b/live-build/apparmor/6.11/caps/mask
@ -1 +0,0 @@
-chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore
--- a/live-build/apparmor/6.11/dbus/mask
+++ b/live-build/apparmor/6.11/dbus/mask
@ -1 +0,0 @@
-acquire send receive
--- a/live-build/apparmor/6.11/domain/attach_conditions/xattr
+++ b/live-build/apparmor/6.11/domain/attach_conditions/xattr
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/change_hat
+++ b/live-build/apparmor/6.11/domain/change_hat
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/change_hatv
+++ b/live-build/apparmor/6.11/domain/change_hatv
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/change_onexec
+++ b/live-build/apparmor/6.11/domain/change_onexec
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/change_profile
+++ b/live-build/apparmor/6.11/domain/change_profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/computed_longest_left
+++ b/live-build/apparmor/6.11/domain/computed_longest_left
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/disconnected.path
+++ b/live-build/apparmor/6.11/domain/disconnected.path
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/fix_binfmt_elf_mmap
+++ b/live-build/apparmor/6.11/domain/fix_binfmt_elf_mmap
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/interruptible
+++ b/live-build/apparmor/6.11/domain/interruptible
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/kill.signal
+++ b/live-build/apparmor/6.11/domain/kill.signal
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/post_nnp_subset
+++ b/live-build/apparmor/6.11/domain/post_nnp_subset
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/stack
+++ b/live-build/apparmor/6.11/domain/stack
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/unconfined_allowed_children
+++ b/live-build/apparmor/6.11/domain/unconfined_allowed_children
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/domain/version
+++ b/live-build/apparmor/6.11/domain/version
@ -1 +0,0 @@
-1.2
--- a/live-build/apparmor/6.11/file/mask
+++ b/live-build/apparmor/6.11/file/mask
@ -1 +0,0 @@
-create read write exec append mmap_exec link lock
--- a/live-build/apparmor/6.11/io_uring/mask
+++ b/live-build/apparmor/6.11/io_uring/mask
@ -1 +0,0 @@
-sqpoll override_creds
--- a/live-build/apparmor/6.11/ipc/posix_mqueue
+++ b/live-build/apparmor/6.11/ipc/posix_mqueue
@ -1 +0,0 @@
-create read write open delete setattr getattr
--- a/live-build/apparmor/6.11/mount/mask
+++ b/live-build/apparmor/6.11/mount/mask
@ -1 +0,0 @@
-mount umount pivot_root
--- a/live-build/apparmor/6.11/mount/move_mount
+++ b/live-build/apparmor/6.11/mount/move_mount
@ -1 +0,0 @@
-detached
--- a/live-build/apparmor/6.11/namespaces/mask
+++ b/live-build/apparmor/6.11/namespaces/mask
@ -1 +0,0 @@
-userns_create
--- a/live-build/apparmor/6.11/namespaces/pivot_root
+++ b/live-build/apparmor/6.11/namespaces/pivot_root
@ -1 +0,0 @@
-no
--- a/live-build/apparmor/6.11/namespaces/profile
+++ b/live-build/apparmor/6.11/namespaces/profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/namespaces/userns_create
+++ b/live-build/apparmor/6.11/namespaces/userns_create
@ -1 +0,0 @@
-pciu&
--- a/live-build/apparmor/6.11/network/af_mask
+++ b/live-build/apparmor/6.11/network/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.11/network/af_unix
+++ b/live-build/apparmor/6.11/network/af_unix
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/network_v8/af_inet
+++ b/live-build/apparmor/6.11/network_v8/af_inet
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/network_v8/af_mask
+++ b/live-build/apparmor/6.11/network_v8/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.11/policy/notify/user
+++ b/live-build/apparmor/6.11/policy/notify/user
@ -1 +0,0 @@
-file
--- a/live-build/apparmor/6.11/policy/outofband
+++ b/live-build/apparmor/6.11/policy/outofband
@ -1 +0,0 @@
-0x000001
--- a/live-build/apparmor/6.11/policy/permstable32
+++ b/live-build/apparmor/6.11/policy/permstable32
@ -1 +0,0 @@
-allow deny subtree cond kill complain prompt audit quiet hide xindex tag label
--- a/live-build/apparmor/6.11/policy/permstable32_version
+++ b/live-build/apparmor/6.11/policy/permstable32_version
@ -1 +0,0 @@
-0x000003
--- a/live-build/apparmor/6.11/policy/set_load
+++ b/live-build/apparmor/6.11/policy/set_load
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/policy/state32
+++ b/live-build/apparmor/6.11/policy/state32
@ -1 +0,0 @@
-0x000001
--- a/live-build/apparmor/6.11/policy/unconfined_restrictions/change_profile
+++ b/live-build/apparmor/6.11/policy/unconfined_restrictions/change_profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/policy/unconfined_restrictions/io_uring
+++ b/live-build/apparmor/6.11/policy/unconfined_restrictions/io_uring
@ -1 +0,0 @@
-0
--- a/live-build/apparmor/6.11/policy/unconfined_restrictions/userns
+++ b/live-build/apparmor/6.11/policy/unconfined_restrictions/userns
@ -1 +0,0 @@
-1
--- a/live-build/apparmor/6.11/policy/versions/v5
+++ b/live-build/apparmor/6.11/policy/versions/v5
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/policy/versions/v6
+++ b/live-build/apparmor/6.11/policy/versions/v6
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/policy/versions/v7
+++ b/live-build/apparmor/6.11/policy/versions/v7
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/policy/versions/v8
+++ b/live-build/apparmor/6.11/policy/versions/v8
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/policy/versions/v9
+++ b/live-build/apparmor/6.11/policy/versions/v9
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/ptrace/mask
+++ b/live-build/apparmor/6.11/ptrace/mask
@ -1 +0,0 @@
-read trace
--- a/live-build/apparmor/6.11/query/label/data
+++ b/live-build/apparmor/6.11/query/label/data
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/query/label/multi_transaction
+++ b/live-build/apparmor/6.11/query/label/multi_transaction
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.11/query/label/perms
+++ b/live-build/apparmor/6.11/query/label/perms
@ -1 +0,0 @@
-allow deny audit quiet
--- a/live-build/apparmor/6.11/rlimit/mask
+++ b/live-build/apparmor/6.11/rlimit/mask
@ -1 +0,0 @@
-cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime
--- a/live-build/apparmor/6.11/signal/mask
+++ b/live-build/apparmor/6.11/signal/mask
@ -1 +0,0 @@
-hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost
--- a/live-build/apparmor/6.12/capability
+++ b/live-build/apparmor/6.12/capability
@ -1 +0,0 @@
-0xffffff
--- a/live-build/apparmor/6.12/caps/extended
+++ b/live-build/apparmor/6.12/caps/extended
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/caps/mask
+++ b/live-build/apparmor/6.12/caps/mask
@ -1 +0,0 @@
-chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore
--- a/live-build/apparmor/6.12/dbus/mask
+++ b/live-build/apparmor/6.12/dbus/mask
@ -1 +0,0 @@
-acquire send receive
--- a/live-build/apparmor/6.12/domain/attach_conditions/xattr
+++ b/live-build/apparmor/6.12/domain/attach_conditions/xattr
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_hat
+++ b/live-build/apparmor/6.12/domain/change_hat
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_hatv
+++ b/live-build/apparmor/6.12/domain/change_hatv
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_onexec
+++ b/live-build/apparmor/6.12/domain/change_onexec
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_profile
+++ b/live-build/apparmor/6.12/domain/change_profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/computed_longest_left
+++ b/live-build/apparmor/6.12/domain/computed_longest_left
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/disconnected.path
+++ b/live-build/apparmor/6.12/domain/disconnected.path
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/fix_binfmt_elf_mmap
+++ b/live-build/apparmor/6.12/domain/fix_binfmt_elf_mmap
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/interruptible
+++ b/live-build/apparmor/6.12/domain/interruptible
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/kill.signal
+++ b/live-build/apparmor/6.12/domain/kill.signal
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/post_nnp_subset
+++ b/live-build/apparmor/6.12/domain/post_nnp_subset
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/stack
+++ b/live-build/apparmor/6.12/domain/stack
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/unconfined_allowed_children
+++ b/live-build/apparmor/6.12/domain/unconfined_allowed_children
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/version
+++ b/live-build/apparmor/6.12/domain/version
@ -1 +0,0 @@
-1.2
--- a/live-build/apparmor/6.12/file/mask
+++ b/live-build/apparmor/6.12/file/mask
@ -1 +0,0 @@
-create read write exec append mmap_exec link lock
--- a/live-build/apparmor/6.12/io_uring/mask
+++ b/live-build/apparmor/6.12/io_uring/mask
@ -1 +0,0 @@
-sqpoll override_creds
--- a/live-build/apparmor/6.12/ipc/posix_mqueue
+++ b/live-build/apparmor/6.12/ipc/posix_mqueue
@ -1 +0,0 @@
-create read write open delete setattr getattr
--- a/live-build/apparmor/6.12/mount/mask
+++ b/live-build/apparmor/6.12/mount/mask
@ -1 +0,0 @@
-mount umount pivot_root
--- a/live-build/apparmor/6.12/mount/move_mount
+++ b/live-build/apparmor/6.12/mount/move_mount
@ -1 +0,0 @@
-detached
--- a/live-build/apparmor/6.12/namespaces/mask
+++ b/live-build/apparmor/6.12/namespaces/mask
@ -1 +0,0 @@
-userns_create
--- a/live-build/apparmor/6.12/namespaces/pivot_root
+++ b/live-build/apparmor/6.12/namespaces/pivot_root
@ -1 +0,0 @@
-no
--- a/live-build/apparmor/6.12/namespaces/profile
+++ b/live-build/apparmor/6.12/namespaces/profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/namespaces/userns_create
+++ b/live-build/apparmor/6.12/namespaces/userns_create
@ -1 +0,0 @@
-pciu&
--- a/live-build/apparmor/6.12/network/af_mask
+++ b/live-build/apparmor/6.12/network/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.12/network/af_unix
+++ b/live-build/apparmor/6.12/network/af_unix
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/network_v8/af_inet
+++ b/live-build/apparmor/6.12/network_v8/af_inet
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/network_v8/af_mask
+++ b/live-build/apparmor/6.12/network_v8/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.12/policy/notify/user
+++ b/live-build/apparmor/6.12/policy/notify/user
@ -1 +0,0 @@
-file
--- a/live-build/apparmor/6.12/policy/outofband
+++ b/live-build/apparmor/6.12/policy/outofband
@ -1 +0,0 @@
-0x000001
--- a/live-build/apparmor/6.12/policy/permstable32
+++ b/live-build/apparmor/6.12/policy/permstable32
@ -1 +0,0 @@
-allow deny subtree cond kill complain prompt audit quiet hide xindex tag label
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Steve Langasek	cc3cb4e0d8	Merge lp:~rbalint/livecd-rootfs/minimize-fix-grub	2017-10-05 10:01:41 -07:00
Steve Langasek	b2fba90356	Fix the force-partuuid handling to create the file under /etc/default/grub.d/ with a .cfg extension as grub expects; it's unclear how this ever worked without.	2017-10-05 16:02:26 +02:00
Steve Langasek	b66cc28507	Factor out grub-related diversions and use them consistently, so we don't end up with wrong os-probe output in our grub.cfg.	2017-10-05 16:01:04 +02:00
Steve Langasek	2a70314f27	releasing package livecd-rootfs version 2.408.19	2017-10-04 18:43:52 +00:00
Steve Langasek	0987c6a7ea	Clean up the changelog for SRU	2017-10-04 10:54:31 -07:00
Steve Langasek	04ffcc07dc	add bug ref	2017-10-04 10:46:15 -07:00
Steve Langasek	60df0277fd	Skip installation of kernel headers for all minimal images	2017-10-04 17:41:45 +00:00
Steve Langasek	4a4bac20f6	Use kvm kernel flavor for minimized cloud image, not virtual	2017-10-04 17:41:08 +00:00
Steve Langasek	dfb4c593b1	include adjustments to the minimize/unminimize wording that were made in the merge commit on trunk	2017-10-03 22:23:04 -07:00
Steve Langasek	2e3ca4b5a9	ignore minimized autopkgtest failure on ppc64el, as in artful	2017-10-03 22:16:26 -07:00
Steve Langasek	87d69d902a	debian/tests/default-bootstraps: minor adjustments to shell syntax, syncing with artful where this originated.	2017-10-03 22:15:34 -07:00
Steve Langasek	aee9079732	Merge lp:~rbalint/livecd-rootfs/minimize-unminimize-xenial	2017-10-03 22:13:56 -07:00
Balint Reczey	53f5c1c79c	Update changelog	2017-10-03 17:38:29 +02:00
Steve Langasek	06cdc3f46d	Use /bin/sh, not /bin/bash, for autopkgtest.	2017-10-03 17:34:52 +02:00
Balint Reczey	413a53d482	When SUBPROJECT environment variable is not set assume it to be ""	2017-10-03 17:31:27 +02:00
Balint Reczey	0900d20265	Run autopkgtest for SUBPROJECT=minimized	2017-10-03 17:31:26 +02:00
Balint Reczey	88d854ffb5	Use SUBPROJECT=minimized name instead of SUBPROJECT=minimize for consistency	2017-10-03 17:31:26 +02:00
Balint Reczey	b90b04a7b7	Warn users that unminimize may fail reinstalling packages	2017-10-03 17:31:26 +02:00
Balint Reczey	d33ab3825f	Mention unminimize script in motd	2017-10-03 17:31:26 +02:00
Balint Reczey	febe06642c	Bump needed live-build version which can build images without initrd	2017-10-03 17:31:26 +02:00
Steve Langasek	4d7509f570	Fix a reference to an undefined variable in a script that's set -u.	2017-10-03 17:31:16 +02:00
Balint Reczey	3f9753b2c0	Update changelog	2017-09-28 09:41:13 -04:00
Balint Reczey	86ed851b5a	Force partuuid in /etc/default/grub.d/* instead of in /etc/default/grub This prevents ucf questions upon installation of changed /etc/default/grub	2017-09-28 09:38:23 -04:00
Steve Langasek	b32298ede1	minimization handling for UEFI disk images	2017-09-28 09:38:23 -04:00
Balint Reczey	1ca59f1c3a	Print the documentation files which could not be restored by unminimize	2017-09-28 09:38:23 -04:00
Balint Reczey	a40bd1d55b	Explain why unminimization script is a bit complicated	2017-09-28 09:38:23 -04:00
Balint Reczey	8244beb6d1	Verify only documentation that should have been restored after unminimization	2017-09-28 09:38:23 -04:00
Balint Reczey	93fc7c56f2	Use "dpkg --verify-format rpm" explicitly to be safe when the default changes	2017-09-28 09:38:23 -04:00
Balint Reczey	e5cbd2384a	Fix typo	2017-09-28 09:38:23 -04:00
Balint Reczey	98f27745b7	Drop initramfs-tools diversion Kernels which are able to boot without initramfs now dropped dependency on initramfs-tools thus initramfs-tools can be removed from the image instead of having to divert it to avoid initramfs generation.	2017-09-28 09:38:23 -04:00
Balint Reczey	e9fc1d8c9f	Install ubuntu-minimal while unminimizing the system	2017-09-28 09:38:23 -04:00
Balint Reczey	5e1d0f0ee7	Add unminimize script for reverting minimization on running system	2017-09-28 09:38:23 -04:00
Balint Reczey	9dd178a0e5	Drop man pages and most of the documentation from minimized images /usr/share/doc/*/copyright and changelog.Debian.gz files are still kept	2017-09-28 09:38:23 -04:00
Balint Reczey	c2d66c7d96	Source config/binary instead of /build/config/binary which may not exist	2017-09-28 09:38:23 -04:00
Steve Langasek	bd2a11774f	if we're using SUBPROJECT=minimize, and tzdata is not installed, remove files that have been left behind. This is a workaround for a bug that should be fixed in tzdata.	2017-09-28 09:38:23 -04:00
Steve Langasek	cd15b730f7	In a cloud environment, we can rely on the kernel being able to boot the root filesystem directly, without an initramfs; enable this when building minimized.	2017-09-28 09:38:21 -04:00
Steve Langasek	5a6f68a1a9	We probably still want sudo, even in a minimal image.	2017-09-28 09:34:31 -04:00
Steve Langasek	86108d69d9	Make the 999-cpc-fixes.chroot subproject-aware, so we don't try to locale-gen	2017-09-28 09:34:31 -04:00
Steve Langasek	95b06ff341	Export the subproject into config/chroot and config/binary, so that this information is available to per-project hooks that need to be subproject-aware (e.g., to skip steps when SUBPROJECT=minimize)	2017-09-28 09:34:31 -04:00
Steve Langasek	527a7b165e	Begin adding support for a project-independent 'minimize' subproject, which (ironically) omits ubuntu-minimal in favor of using only the minbase package set.	2017-09-28 09:34:31 -04:00
Steve Langasek	9c9e8c4e4f	Mount using --make-rslave to ensure safe unmounts for rbind mounts	2017-09-26 01:10:15 -04:00
Steve Langasek	f16611774f	* Improve teardown_mountpoint to recursively find all submounts and unmount them, instead of working from a hard-coded list. This makes the code resilient against other submounts being added later, including downstream. * Also nuke the sleep / udevadm settle calls in the process, which should never be required and slow down the builds.	2017-09-19 13:45:37 -07:00
Steve Langasek	2b208d7287	Merge lp:~vtapia/livecd-rootfs/xenial-proposed-lp1444992	2017-09-19 13:02:05 -07:00
Victor Tapia	13e9dc0089	live-build/ubuntu-cpc/hooks/061-open-iscsi.chroot: generate iSCSI Initiator Name at first iscsid run for cloud images to ensure it is unique (LP: #1444992).	2017-09-19 11:03:29 +02:00
Steve Langasek	d330c595ae	releasing package livecd-rootfs version 2.408.18	2017-09-13 22:10:29 -07:00
Steve Langasek	410703eae5	Merge lp:~rcj/livecd-rootfs/xenial-proposed	2017-09-13 22:10:07 -07:00
Robert C Jennings	a623618e2c	Install udev before calls to udevadm	2017-09-13 21:05:22 -05:00
Steve Langasek	cf1b95b854	releasing package livecd-rootfs version 2.408.17	2017-09-13 12:21:35 -07:00
Steve Langasek	6219443b4c	Merge lp:~rcj/livecd-rootfs/xenial-proposed	2017-09-13 12:21:23 -07:00
Robert C Jennings	0acda846dd	live-build/ubuntu-cpc/functions: Add teardown_mountpoint to reverse setup_mountpoint * live-build/ubuntu-cpc/functions: Add a function, teardown_mountpoint, to reverse the work done in setup_mountpoint. Lack of this function has forced users of setup_mountpoint to implement this separately and the implementations have diverged. (LP: #1716992) * live-build/ubuntu-cpc/functions: Remove umount_settle function. The was only used where teardown_mountpoint was lacking.	2017-09-13 13:18:03 -05:00
Steve Langasek	f6897fae71	live-build/ubuntu-cpc/hooks/030-root-tarball.binary: correct a missing unmount of /var/{lib,cache}/apt on cleanup, detected via autopkgtests.	2017-09-12 14:23:00 -07:00
Steve Langasek	a99dd8bf9f	changelog verbosity++	2017-09-12 14:00:20 -07:00
Steve Langasek	2c98112f93	releasing package livecd-rootfs version 2.408.16	2017-09-12 13:26:12 -07:00
Steve Langasek	11a92795fe	live-build/ubuntu-cpc/functions: call apt-get update in the chroot after mounting a blank /var/lib/apt, so that further operations work as expected.	2017-09-12 13:25:55 -07:00
Steve Langasek	b81173b1b5	releasing package livecd-rootfs version 2.408.15	2017-09-11 14:41:53 -07:00
Steve Langasek	3fdf3933ed	Fix suppression of kpartx error. LP: #1684090 .	2017-09-11 14:34:09 -07:00
Steve Langasek	314a6b95a3	Mount and unmount /dev recursively, to cope with setups where there are interesting bind-mounts under /dev (e.g. loop devices bind-mounted by LXD). LP: #1716465.	2017-09-11 14:33:23 -07:00
Steve Langasek	880d4f8b89	live-build/ubuntu-cpc/hooks/033-disk-image-uefi.binary: call apt-get update before installing packages, not after.	2017-08-25 15:30:48 -07:00
Steve Langasek	95aabdf668	live-build/ubuntu-cpc/functions: mount tmpfs on /var/cache/apt and /var/lib/apt, so we don't have to leave empty space in our derivative images for packages that have been downloaded/installed/removed. This normally isn't relevant for the installed system, since the root filesystem will auto-expand in place on the target disk, but lets us ship smaller images.	2017-08-25 15:30:05 -07:00
Steve Langasek	a4988ccf13	Merge lp:~cyphermox/livecd-rootfs/xenial-proposed	2017-08-23 17:38:27 -07:00
Mathieu Trudel-Lapierre	a75544e0c3	Only set a default GRUB_PRELOAD_MODULES if not already defined; otherwise used the existing values.	2017-08-23 19:20:35 -04:00
Mathieu Trudel-Lapierre	f48670cec5	Clean up GRUB_MODULES_PRELOAD / grub_modules. Remove the modules already loaded in stock signed grub EFI binaries.	2017-08-18 19:37:34 -04:00
Adam Conrad	e3b44822d7	live-build/auto/config: Filter libgles1-mesa out of tasks, as it is not a dependency of anything in updates anymore, fixing mate/myth (LP: #1704013)	2017-07-12 16:34:36 -06:00
Steve Langasek	0cabfc3781	releasing package livecd-rootfs version 2.408.13	2017-06-06 21:52:51 -07:00
Steve Langasek	02223103c1	Merge lp:~rbalint/livecd-rootfs/livecd-rootfs-autopkgtest-fix-for-xenial	2017-06-06 21:38:29 -07:00
Balint Reczey	8d72b588a1	Update changelog	2017-05-12 21:21:05 +02:00
Balint Reczey	2569995de8	Work around kpartx's nonzero exit due to "Device or resource busy" errors which still permit kpartx to finally remove loop device (LP: #1684090). Also sync before calling kpartx to let writing to loop devices finish.	2017-05-12 21:20:22 +02:00
Steve Langasek	0fcff1923c	Mark autopkgtests isolation-machine since debootstrap won't work in a container.	2017-05-12 21:20:22 +02:00
Balint Reczey	2685b836bd	Add basic autopkgtest	2017-05-12 21:20:22 +02:00
Balint Reczey	95c239f301	Use all config hooks from the proper place, not from /build/	2017-05-12 21:20:22 +02:00
Balint Reczey	e25936cc61	Source ubuntu-cpc functions from the right place	2017-05-12 21:20:22 +02:00
Robert C Jennings	2048477b0d	live-build/ubuntu-cpc/hooks/999-extras.binary: Exit on first failure. (LP: #1687752)	2017-05-12 11:47:09 -07:00
Mathieu Trudel-Lapierre	b5bb3c3a6e	releasing package livecd-rootfs version 2.408.11	2017-04-07 16:18:45 -04:00
Mathieu Trudel-Lapierre	5081c333bb	Add `apt-get update` to ubuntu-cpc ppc64el builds so they use the new sources.	2017-04-07 16:12:48 -04:00
Adam Conrad	2c9f9dd323	Fix security mirror sources.list entries for non-x86 architectures. (LP: #1679252)	2017-04-04 09:28:52 -06:00
Mathieu Trudel-Lapierre	a0983db864	releasing package livecd-rootfs version 2.408.9	2017-03-23 14:41:36 -04:00
Mathieu Trudel-Lapierre	d50b3ba529	ubuntu-cpc: Remove redundant copy of grub files. (LP: #1637290 )	2017-03-23 14:40:47 -04:00
Steve Langasek	e6793cfa3a	Merge lp:~rcj/livecd-rootfs/xenial-proposed/	2017-03-21 08:40:59 -07:00
Daniel Watkins	28e14a0b77	* Don't overwrite the default sources.list in cloud images. * Replace sources.list generated using COMPONENTS with the sources.list from an Ubuntu Server installation (i.e. with all components enabled, and all deb-src lines commented). LP: #1513529.	2017-03-21 08:36:01 -07:00
Robert C Jennings	dacc1ea41e	Fix OVA generation and add grub label helper for ubuntu-cpc [ Chris Glass ] * Fix the manifest generation in OVA files so that ovf files don't have double extensions. (LP: #1627931) * Fix the OVF's metadata to include Ubuntu specific identifiers and descriptions instead of the generic Linux ones. (LP: #1656293) [ Daniel Watkins ] * Add replace_grub_root_with_label function thereby consolidating multiple uses of the same calls to sed.	2017-03-17 13:39:21 -05:00
Daniel Watkins	ececc9789d	Add replace_grub_root_with_label function When update-grub is run, it will detect the disks in the build system. Currently, we sed the grub configuration in places where this happens; replace_grub_root_with_label moves that seddery in to a single callable location to avoid ending up with multiple versions of it. (It's worth noting that we also do this in 999-cpc-fixes.chroot, but as our functions file isn't available within the chroot we don't use it there.)	2017-03-17 13:35:37 -05:00
Christopher Glass	92a10c0df0	Fix the OVF's metadata to include Ubuntu specific identifiers and descriptions instead of the generic Linux ones. (LP: #1656293)	2017-03-17 13:34:22 -05:00
Christopher Glass	4bc9def5d6	This branch fixes the manifest generation in OVA files (LP:1627931) The .ova file extension was passed twice, resulting in file not found errors in both the general case and the vagrant-specific file creation.	2017-03-17 13:32:55 -05:00
Adam Conrad	188d485441	Set device_tree_address for the new kernel in the RPi bootloader config.txt	2017-02-16 10:32:15 -07:00
Adam Conrad	f2f8665598	* Forward-port hardware enablement delta from trusty to xenial, with changes: - Implement hwe stack swapping as task filters instead of install hints - Revert ubuntu-desktop and ubuntu-gnome to use tasks again for the above	2017-02-16 10:18:54 -07:00
Steve Langasek	40a4d16f3e	Document the Vcs-Bzr branch for SRUs.	2017-02-08 22:57:39 -08:00
Łukasz 'sil2100' Zemczak	66aaa4ab40	Remove the systemd-sysv- line from ubuntu-touch config routines.	2016-10-06 14:41:45 +02:00
Łukasz 'sil2100' Zemczak	58dd50b464	Add changelog entry for previous commit.	2016-10-03 14:15:34 +02:00
Łukasz 'sil2100' Zemczak	f10c47f913	Add additional hints to ubuntu-touch* i386/amd64 image builds to pull in the gles version of the UITK.	2016-10-03 14:14:22 +02:00
Łukasz 'sil2100' Zemczak	a4f597c84b	Fix small but terrible typo in the ubuntu-touch-custom handling that was breaking touch builds. Please note: I corrected the 2.408.5 version in the upload queue so this is also part of that release.	2016-09-29 10:18:40 +02:00
Łukasz 'sil2100' Zemczak	24c2b2773f	releasing package livecd-rootfs version 2.408.5	2016-09-27 17:43:02 +02:00
Łukasz 'sil2100' Zemczak	8f735f316b	Sync with what's currently released to xenial-proposed: remove ubuntu-pd, add ubuntu-touch-custom, remove the kernel.yaml addition for snappy as it's not meant to be in xenial and no longer needed.	2016-09-27 17:41:54 +02:00
Steve Langasek	5efb2007af	add meta/kernel.yaml to the kernel snaps	2016-09-14 19:02:41 +00:00
Steve Langasek	8bcc5ca1c2	Add the new dhcpd user introduced by latest archive changes.	2016-09-14 19:02:28 +00:00
Steve Langasek	455d0a6af4	Temporarily change the 60-install-click.chroot script to pull in clicks for arm64 builds from a different location for ubuntu-touch.	2016-09-14 19:00:14 +00:00
Steve Langasek	6b04c07371	releasing package livecd-rootfs version 2.408.4	2016-09-09 17:04:58 -07:00
Steve Langasek	4079a1acce	live-build/ubuntu-cpc/hooks/042-vagrant.binary: fix unmount handling so that the teardown is done properly /before/ we try to make an image from our filesystem, since otherwise /etc/resolv.conf is broken. LP: #1621393.	2016-09-09 17:04:54 -07:00
Brian Murray	d51fef0426	* Fixes for vagrant box builder in ubuntu-cpc LP: #1565985 - Install virtualbox-guest-utils - Don't disable default synced folder - Don't set vm name - Add cloud-init config to manage /etc/hosts LP: #1561250	2016-09-09 17:00:35 -07:00
Adam Conrad	b0e649a83c	Switch ubuntu-gnome from using tasks to metapackages (LP: #1602035 )	2016-07-21 02:31:01 -06:00
Steve Langasek	caedaee057	Rename old ubuntu-core tarballs to ubuntu-base, for consistency with the changes already made to yakkety and the ubuntu-cdimage project. LP: #1579950.	2016-05-09 17:07:33 -07:00
				`@ -1 +0,0 @@`
				`chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore`
				`@ -1 +0,0 @@`
				`create read write exec append mmap_exec link lock`
				`@ -1 +0,0 @@`
				`create read write open delete setattr getattr`
				`@ -1 +0,0 @@`
				`unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp`
				`@ -1 +0,0 @@`
				`allow deny subtree cond kill complain prompt audit quiet hide xindex tag label`
				`@ -1 +0,0 @@`
				`cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime`
				`@ -1 +0,0 @@`
				`hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost`