Compare commits

..

15 Commits

Author SHA1 Message Date
Philip Roche
56ad09bf1a fix: Update d/ch for 23.10.60 as I am uploader sponsoring Ankush Pathak changes
I do not have keys to sign changes for Ankush Pathak
2024-05-22 11:57:03 +01:00
Philip Roche
3df29d28a0 fix: Update d/ch for 23.10.60 to include space after name
format must be space between name and email address.

`-- maintainer-name <email-address> date`

No space resulted in error during build

```
W: livecd-rootfs: syntax-error-in-debian-changelog "badly formatted trailer line" [usr/share/doc/livecd-rootfs/changelog.gz:5]
W: livecd-rootfs: syntax-error-in-debian-changelog "found start of entry where expected more change data or trailer" [usr/share/doc/livecd-rootfs/changelog.gz:7]
```
2024-05-22 11:40:16 +01:00
Philip Roche
a0b332f617 Merge ankushpathak-feat/add_apparmor_unconfined_restrictions_policy_6_5_kernel_mantic into ubuntu/mantic [a=ankushpathak] [r=kajiya,philroche]
Update d/ch for 23.10.60 release

feat(apparmor): Add policy:unconfined_restrictions feature to 6.5 kernel

MP: https://code.launchpad.net/~ankushpathak/livecd-rootfs/+git/livecd-rootfs/+merge/465109
2024-05-22 10:42:53 +01:00
Ankush Pathak
8c91f61564 Update d/ch for 23.10.60 release 2024-04-26 18:33:14 -05:00
Ankush Pathak
2995899af8 feat(apparmor): Add policy:unconfined_restrictions feature to 6.5 kernel
Failing CPC tests show that the preseeded apparmor features don't
include policy:unconfined_restrictions for the 6.5 kernel. This change
adds the feature preseed.
Fixes LP: #2062929
2024-04-26 12:37:08 -05:00
Philip Roche
36bc6e3722 add missing bug reference for 23.10.58 2024-04-12 14:39:10 +01:00
Philip Roche
7bc309bb1a releasing package livecd-rootfs version 23.10.59 2024-04-12 13:52:22 +01:00
Philip Roche
f0b44d7de9 Merge bugfix/lp-2061121-snap-preseed-latest into ubuntu/mantic [a=philroche] [r=jchittum,tomparrott,utkarsh]
fix: Use Ubuntu policy default channel "latest" for preseeded snaps (LP: #2061121)

Recent Mantic cloud image builds fail after default track for LXD change to "5.21" instead of "latest"

This changes preseed from "latest/" for all snaps and no longer assume that "latest/" is the default.

MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/464199
2024-04-12 13:35:19 +01:00
Philip Roche
2a029bacf1 fix: Use Ubuntu policy default channel "latest" for preseeded snaps (LP: #2061121)
Recent Mantic cloud image builds fail after default track for LXD change to "5.21" instead of "latest"

This changes preseed from "latest/" for all snaps and no longer assume that "latest/" is the default.
2024-04-12 12:56:44 +01:00
Dimitri John Ledkov
eabde6cde5
releasing package livecd-rootfs version 23.10.58 2024-01-03 15:17:23 +00:00
Simon Poirier
0975e2a5dd
fix: add back systemd-resolved to buildd images.
systemd-resolved got moved out of the systemd package in kinetic and is
required for bootable buildd environement (as opposed to launchpad buildd)
(LP: #2007419)

(cherry picked from commit 3729e2ae948879a582f16ac5753646505ff6bc2d)
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
2024-01-03 15:16:53 +00:00
Brian Murray
b96839c857 releasing package livecd-rootfs version 23.10.57 2023-12-06 11:30:43 -08:00
Brian Murray
48b5d89e15 arm: fix console parameter for ARM cloud-images (LP: #2036730) 2023-12-06 11:30:25 -08:00
Philip Roche
558d393333 Merge bugfix/ubuntu-cpc-LP-2038957-ppc64el-vmlinux-mantic into ubuntu/mantic [a=philroche] [r=andrew-cloke,vorlon]
fix: Enable snap preseeding with ppc64el images where /boot/vmlinux is used instead of /boot/vmlinuz. (LP: #2038957)

ppc64el still uses /boot/vmlinux so we need to determine the boot file name as non ppc64el use /boot/vmlinuz. This
is then used to determine the kernel major minor version installed so that the correct apparmor features can be used
during snap preseeding. This preseeding was failing for ppc64el for the mantic 6.5 kernel as the /boot/vmlinuz
being checked did not exist.

MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/454045
2023-10-27 12:50:15 +01:00
Philip Roche
07f26cb78e fix: Enable snap preseeding with ppc64el images where /boot/vmlinux is used instead of /boot/vmlinuz. (LP: #2038957)
ppc64el still uses /boot/vmlinux so we need to determine the boot file name as non ppc64el use /boot/vmlinuz. This
is then used to determine the kernel major minor version installed so that the correct apparmor features can be used
during snap preseeding. This preseeding was failing for ppc64el for the mantic 6.5 kernel as the /boot/vmlinuz
being checked did not exist.
2023-10-11 11:45:36 +01:00
345 changed files with 2249 additions and 3247 deletions

1
debian/.gitignore vendored
View File

@ -1 +0,0 @@
files

1136
debian/changelog vendored

File diff suppressed because it is too large Load Diff

1
debian/compat vendored Normal file
View File

@ -0,0 +1 @@
7

6
debian/control vendored
View File

@ -1,12 +1,10 @@
Source: livecd-rootfs Source: livecd-rootfs
Section: devel Section: devel
Priority: optional Priority: optional
Build-Depends: debhelper-compat (= 13) Build-Depends: debhelper (>= 7)
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Standards-Version: 4.7.0 Standards-Version: 3.9.6
Vcs-Git: https://git.launchpad.net/livecd-rootfs -b ubuntu/master Vcs-Git: https://git.launchpad.net/livecd-rootfs -b ubuntu/master
Vcs-Browser: https://git.launchpad.net/livecd-rootfs
Rules-Requires-Root: no
Package: livecd-rootfs Package: livecd-rootfs
Architecture: any Architecture: any

2
debian/copyright vendored
View File

@ -11,7 +11,7 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details. General Public License for more details.
You should have received a copy of the GNU General Public License with You should have received a copy of the GNU General Public License with
your Ubuntu system, in /usr/share/common-licenses/GPL-2, or with the your Ubuntu system, in /usr/share/common-licenses/GPL, or with the
livecd-rootfs source package as the file COPYING. If not, write to livecd-rootfs source package as the file COPYING. If not, write to
the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
Boston, MA 02110-1301 USA. Boston, MA 02110-1301 USA.

3
debian/install vendored
View File

@ -2,6 +2,7 @@ auto-markable-pkgs usr/share/livecd-rootfs
live-build usr/share/livecd-rootfs live-build usr/share/livecd-rootfs
get-ppa-fingerprint usr/share/livecd-rootfs get-ppa-fingerprint usr/share/livecd-rootfs
minimize-manual usr/share/livecd-rootfs minimize-manual usr/share/livecd-rootfs
magic-proxy usr/share/livecd-rootfs
lp-in-release usr/share/livecd-rootfs
checkout-translations-branch usr/share/livecd-rootfs checkout-translations-branch usr/share/livecd-rootfs
update-source-catalog usr/share/livecd-rootfs update-source-catalog usr/share/livecd-rootfs
sync-mtime usr/share/livecd-rootfs

View File

@ -1,10 +0,0 @@
# This is expected and okay
livecd-rootfs: service-file-is-not-a-file [usr/share/livecd-rootfs/*.service]
livecd-rootfs: uses-dpkg-database-directly [usr/share/livecd-rootfs/live-build/lb_chroot_layered]
livecd-rootfs: package-contains-no-arch-dependent-files
# Developer documentation in an already-expected spot
livecd-rootfs: package-contains-documentation-outside-usr-share-doc [usr/share/livecd-rootfs/live-build/ubuntu-cpc/README.cpc.md]
# This is going to occur quite a bit; we're making a livefs
livecd-rootfs: repeated-path-segment * [*]

View File

@ -1,5 +0,0 @@
# This is expected and okay
livecd-rootfs source: absolute-symbolic-link-target-in-source * [live-build/*]
# The description indicates that it's not required in debhelper >= 13, which we have
livecd-rootfs source: override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS [debian/rules:*]

View File

@ -18,6 +18,7 @@ ALL_TRIPLETS="
lubuntu:: lubuntu::
ubuntu-unity:: ubuntu-unity::
ubuntu:: ubuntu::
ubuntu:legacy:
ubuntu-base:: ubuntu-base::
ubuntu-base:buildd: ubuntu-base:buildd:
ubuntu-budgie:: ubuntu-budgie::
@ -28,6 +29,7 @@ ALL_TRIPLETS="
ubuntu-cpc::ubuntu-cpc ubuntu-cpc::ubuntu-cpc
ubuntu-cpc:minimized:ubuntu-cpc ubuntu-cpc:minimized:ubuntu-cpc
ubuntu-dvd:: ubuntu-dvd::
ubuntu-gnome::
ubuntukylin:: ubuntukylin::
ubuntu-mate:: ubuntu-mate::
ubuntu-mate-core:: ubuntu-mate-core::
@ -64,22 +66,19 @@ live_build_rootfs() {
SUBPROJECT=$SUBPROJECT \ SUBPROJECT=$SUBPROJECT \
SUITE=$SUITE \ SUITE=$SUITE \
ARCH=$ARCH \ ARCH=$ARCH \
NOW=$(date '+%Y%m%d') \
lb config lb config
mkdir chroot mkdir chroot
# this part needs root rights, but right now the whole script ran as root by autopkgtest # this part needs root rights, but right now the whole script ran as root by autopkgtest
env PROJECT=$PROJECT \ env PROJECT=$PROJECT \
SUBPROJECT=$SUBPROJECT \ SUBPROJECT=$SUBPROJECT \
ARCH=$ARCH \ ARCH=$ARCH \
NOW=$(date '+%Y%m%d') \
lb build lb build
echo "Build results for project: '$PROJECT' subproject: '$SUBPROJECT' template: '$TEMPLATE' in $PWD" echo "Build results for project: '$PROJECT' subproject: '$SUBPROJECT' template: '$TEMPLATE' in $PWD"
du -sh * du -sh *
echo "" echo ""
} }
[ -d /adt ] || mkdir /adt WORKDIR=$(mktemp -d)
WORKDIR=$(mktemp -d -p /adt)
trap "RET=\$?; rm -rf $WORKDIR; exit \$RET" 0 INT QUIT ABRT PIPE TERM trap "RET=\$?; rm -rf $WORKDIR; exit \$RET" 0 INT QUIT ABRT PIPE TERM
cd $WORKDIR cd $WORKDIR

View File

@ -1 +0,0 @@
0xffffff

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore

View File

@ -1 +0,0 @@
acquire send receive

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
1.2

View File

@ -1 +0,0 @@
create read write exec append mmap_exec link lock

View File

@ -1 +0,0 @@
sqpoll override_creds

View File

@ -1 +0,0 @@
create read write open delete setattr getattr

View File

@ -1 +0,0 @@
mount umount pivot_root

View File

@ -1 +0,0 @@
detached

View File

@ -1 +0,0 @@
userns_create

View File

@ -1 +0,0 @@
no

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
pciu&

View File

@ -1 +0,0 @@
unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

View File

@ -1 +0,0 @@
file

View File

@ -1 +0,0 @@
0x000001

View File

@ -1 +0,0 @@
allow deny subtree cond kill complain prompt audit quiet hide xindex tag label

View File

@ -1 +0,0 @@
0x000003

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
0x000001

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
read trace

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
allow deny audit quiet

View File

@ -1 +0,0 @@
cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime

View File

@ -1 +0,0 @@
hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost

View File

@ -1 +0,0 @@
0xffffff

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore

View File

@ -1 +0,0 @@
acquire send receive

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
1.2

View File

@ -1 +0,0 @@
create read write exec append mmap_exec link lock

View File

@ -1 +0,0 @@
sqpoll override_creds

View File

@ -1 +0,0 @@
create read write open delete setattr getattr

View File

@ -1 +0,0 @@
mount umount pivot_root

View File

@ -1 +0,0 @@
detached

View File

@ -1 +0,0 @@
userns_create

View File

@ -1 +0,0 @@
no

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
pciu&

View File

@ -1 +0,0 @@
unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp

View File

@ -1 +0,0 @@
file

View File

@ -1 +0,0 @@
0x000001

View File

@ -1 +0,0 @@
allow deny subtree cond kill complain prompt audit quiet hide xindex tag label

View File

@ -1 +0,0 @@
0x000003

View File

@ -1 +0,0 @@
yes

View File

@ -1 +0,0 @@
0x000001

Some files were not shown because too many files have changed in this diff Show More