releasing package livecd-rootfs version 24.04.91

build: Fix lowlatency kernel flavour name
Nowadays the lowlatency kernel is just the generic kernel with some bootargs to make it lowlatency. Hence the flavour name is 'generic'.
2025-08-15 10:44:26 +00:00 · 2025-07-30 17:38:38 +02:00 · 2025-07-30 17:38:31 +02:00 · 2025-07-22 15:50:36 -06:00 · 2025-07-21 16:04:34 +02:00 · 2025-04-30 15:27:51 -06:00
181 changed files with 1012 additions and 1540 deletions
--- a/debian/.gitignore
+++ b/debian/.gitignore
@ -1 +0,0 @@
-files
--- a/debian/changelog
+++ b/debian/changelog
@ -1,308 +1,64 @@
-livecd-rootfs (25.10.16) questing; urgency=medium
+livecd-rootfs (24.04.91) noble; urgency=medium

-  * Put the uc20-style system seed for TPM backed FDE in the live layer.
+  * Fix lowlatency kernel flavour name (LP: #2119012)

- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 13 Aug 2025 10:34:39 +1200
+ -- Juerg Haefliger <juerg.haefliger@canonical.com>  Wed, 30 Jul 2025 17:36:25 +0200

-livecd-rootfs (25.10.15) questing; urgency=medium
+livecd-rootfs (24.04.90) noble; urgency=medium

-  * Add missing components to 6.14 kernel apparmor features' preseeds.
-    (LP: #2116199)
+  [ Chad Smith ]
+  * Override cloud-init.service in /etc so as to not invalidate debsums
+    (LP: #2069391)
+  * Update the overridden copy of cloud-init.service

- -- Bryan Alexander <bryan.alexander@canonical.com>  Thu, 17 Jul 2025 13:27:17 -0700
+ -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 22 Jul 2025 15:50:34 -0600

-livecd-rootfs (25.10.14) questing; urgency=medium
+livecd-rootfs (24.04.89) noble; urgency=medium

-  [ Didier Roche-Tolomelli ]
-  [ Tim Andersson ]
-  [ Daniel Bungert ]
-  * desktop TPMFDE: move snaps back to stable channels
+  * desktop: Remove some cruft referencing the subiquity snap, which can
+    result in 'error: snap "subiquity" is not installed' messages being
+    printed on the terminal.  (LP: #2083554)

- -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 07 Aug 2025 16:21:32 -0600
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 30 Apr 2025 15:27:46 -0600

-livecd-rootfs (25.10.13) questing; urgency=medium
+livecd-rootfs (24.04.88) noble; urgency=medium

-  [ Olivier Gayot ]
-  * Build ubuntu-server with multipath-tools-boot installed, so that the
-    multipath stack ends up present in the initramfs.
-    The LVM stack is already present in the initramfs of the installer. And
-    since kinetic, the /dev/mapper entries for LVM devices are created during
-    the initramfs phase. This is a problem when we have LVM on top of a
-    multipath disk because LVM ends up creating /dev/mapper entries out of
-    /dev/sdX (or /dev/sdXpY) devices, not out of /dev/mapper/mpatha as it
-    should. Adding the multipath stack in the initramfs gives multipath a
-    chance to take ownership of /dev/sdX (or /dev/sdXpY) devices before LVM
-    does (LP: #2080474).
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 24 Jul 2025 17:37:33 -0600
-
-livecd-rootfs (25.10.12) questing; urgency=medium
-
-  [ Zygmunt Krynicki ]
-  * Use snap wait system seed.loaded to wait for snapd (LP: #2114923)
-
-  [ Dennis Loose ]
-  [ Didier Roche-Tolomelli ]
-  * Allow the ubuntu-desktop-installer to request snap seeding state
-
- -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Tue, 15 Jul 2025 16:30:41 +0200
-
-livecd-rootfs (25.10.11) questing; urgency=medium
-
-  * Fix installer startup to wait for snapd to be preseeded first
-    (LP: #2114923)
-
- -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Fri, 11 Jul 2025 14:57:56 +0200
-
-livecd-rootfs (25.10.10) questing; urgency=medium
-
-  * risc-v cloud images: enable cpc fixes for riscv64
-
- -- Adriano Cordova <adriano.cordova@canonical.com>  Tue, 01 Jul 2025 09:11:16 -0400
-
-livecd-rootfs (25.10.9) questing; urgency=medium
-
-  * desktop and server: read $SUBARCH to allow the use of nvidia's kernel
-    instead of generic (LP: #2109822)
-
- -- Antoine Lassagne <antoine.lassagne@canonical.com>  Tue, 17 Jun 2025 22:23:11 +1200
-
-livecd-rootfs (25.10.8) questing; urgency=medium
-
-  [ Didier Roche-Tolomelli ]
-  * desktop: use snapd from edge
-  * desktop: tpmfde image use desktop-security-center and firmware-updater
-    from edge
-
-  [ Dan Bungert ]
-  * lb_binary_layered: try #2 to fix mtimes in layered squashfses. (LP2107332)
-    Constrain mtime sync to the current upperdir so that files in lower layers
-    are not redundantly included.
-  * server: fix failure to process the hwe kernel layer due to multiple
-    kernels being present (LP: #2112501)
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 13 Jun 2025 12:00:20 -0600
-
-livecd-rootfs (25.10.7) questing; urgency=medium
-
-  * revert 25.10.6 due to duplicated snaps
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 10 Jun 2025 07:55:40 -0600
-
-livecd-rootfs (25.10.6) questing; urgency=medium
-
-  * lb_binary_layered: fix mtimes in layered squashfses. (LP: #2107332)
-    Failing to preserve mtime causes unnecessary python pyc rebuilds due to
-    mtime mismatch, and it's generally strange that reinstalling a package
-    that is already installed changes the files on the system (minus
-    intentional differences such as what's going on in the minimized install
-    source).
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 30 May 2025 17:05:15 -0600
-
-livecd-rootfs (25.10.5) questing; urgency=medium
-
-  * desktop: TPMFDE snapd from latest/edge
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 28 May 2025 10:27:47 -0600
-
-livecd-rootfs (25.10.4) questing; urgency=medium
-
-  * desktop: TPMFDE kernel from 25.10/candidate
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Sun, 25 May 2025 23:18:59 -0600
-
-livecd-rootfs (25.10.3) questing; urgency=medium
-
-  * desktop: update TPMFDE model and don't skip 020-ubuntu-enhanced-sb.binary.
-    (LP: #2110195)  Temporarily use the model that allows overriding snap
-    channels so we can get matching snaps.
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 23 May 2025 12:59:40 -0600
-
-livecd-rootfs (25.10.2) questing; urgency=medium
-
-  * desktop: skip 020-ubuntu-enhanced-sb.binary until a matching kernel is
-    ready for snapd 2.68.x
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 06 May 2025 08:24:10 +0200
-
-livecd-rootfs (25.10.1) questing; urgency=medium
-
-  * desktop: no longer involve cloud-init in early networking (LP: #2107225)
-  * server: provide network config direct to netplan
-  * server: update default netplan config for IPv6 autoconfiguration &
-    connectivity
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Mon, 28 Apr 2025 09:53:34 -0600
-
-livecd-rootfs (25.04.26) plucky; urgency=medium
-
-  * cpc: Restore UseDomains=true in cloud images (LP: #2106729)
-
- -- Tomáš Virtus <tomas.virtus@canonical.com>  Thu, 10 Apr 2025 13:07:25 +0000
-
-livecd-rootfs (25.04.25) plucky; urgency=medium
-
-  * live-build/auto/build: Use --workdir in ubuntu-image to avoid filling
-    tmpfs-based /tmp (LP: #2103735)
-
- -- Dave Jones <dave.jones@canonical.com>  Thu, 20 Mar 2025 17:22:47 +0000
-
-livecd-rootfs (25.04.24) plucky; urgency=medium
-
-  * desktop: update TPMFDE model to move pc-kernel to channel 25.04/stable.
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 13 Mar 2025 17:17:30 -0600
-
-livecd-rootfs (25.04.23) plucky; urgency=medium
-
-  * Add 6.14 kernel apparmor features' preseeds. (LP: #2102120)
-
- -- Jess Jang <jess.jang@canonical.com>  Wed, 12 Mar 2025 21:08:31 -0500
-
-livecd-rootfs (25.04.22) plucky; urgency=medium
-
-  * server: leave the initrd.img symlink, we want that later for probably
-    several reasons but at least for LP: #2101831
-  * desktop: update TPMFDE model for 25.04.
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 11 Mar 2025 09:16:03 -0600
-
-livecd-rootfs (25.04.21) plucky; urgency=medium
-
-  * With subiquity builds, setup install-sources to offer bridge kernel.
-  * Add USE_BRIDGE_KERNEL to make it easier to control in the future.
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 05 Mar 2025 08:18:54 -0700
-
-livecd-rootfs (25.04.20) plucky; urgency=medium
-
-  [ Adriano Cordova ]
+  * risc-v: directly copy device trees to /boot/dtb. (LP: #2092205)
  * riscv: add SUBARCH 'jh7110'. (LP: #2099993)

-  [ Michael Hudson-Doyle ]
-  * In ubuntu-server builds, install the first kernel in the base layer, not
-    the "ga" kernel (which may not be installed at all, as is the case in e.g.
-    the arm64+largemem builds).
-  * Again in ubuntu-server builds, configure LAYERFS_PATH in the kernel layer
-    and ensure the initrd is freshly regenerated in that layer. LAYERFS_PATH
-    was being set to the layer below the kernel layer, which meant that the
-    live session did not get access to all the modules in the case that the
-    kernel had not been installed in the base layer, which in turn means that
-    installs fail. (LP: #2100148)
-  * While we're at it, delete any initrd from any other layer than a kernel
-    layer, as they just waste space on the ISO.
+ -- Adriano Cordova <adriano.cordova@canonical.com>  Mon, 10 Feb 2025 10:40:23 -0300

- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Thu, 27 Feb 2025 20:34:01 +1300
+livecd-rootfs (24.04.87) noble; urgency=medium

-livecd-rootfs (25.04.19) plucky; urgency=medium
+  * Add 6.11 kernel apparmor features' preseeds. (LP: #2098306)

-  * add cpc-sbom to create_manifest calls to generate sboms (LP: #2077105)
+ -- Thomas Bechtold <thomas.bechtold@canonical.com>  Thu, 13 Feb 2025 12:22:41 +0100

- -- Thomas Bechtold <thomasbechtold@jpberlin.de>  Tue, 25 Feb 2025 13:20:49 +0100
+livecd-rootfs (24.04.86) noble; urgency=medium

-livecd-rootfs (25.04.18) plucky; urgency=medium
+  * Do not build HWE kernel layer on RISC-V as there is no HWE kernel there.
+    (LP: #2098622)

-  [ Michael Hudson-Doyle ]
-  * Pre-emptively include the override to not try to build HWE kernel layer in
-    post .2 server riscv64 ISOs.
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Mon, 17 Feb 2025 11:32:19 +1300

-  [ Simon Quigley ]
-  * Move from http://ppa.launchpad.net to https://ppa.launchpadcontent.net
-    when specifying EXTRA_PPAS.
-  * Update debhelper compat to 13, no changes needed.
-  * Make the package completely Lintian-clean except for no-dep5-copyright.
-  * Update Standards-Version to 4.7.0, no changes needed.
-  * Add support for multiple pools (/var/lib/{livefs,preinstalled}-pool/).
+livecd-rootfs (24.04.85) noble; urgency=medium

-  [ Simon Poirier ]
-  * increase ubuntu-cpc ppc64el disk size to 2.4G
-
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Thu, 20 Feb 2025 10:24:04 +1300
-
-livecd-rootfs (25.04.17) plucky; urgency=medium
-
-  [ Dan Bungert ]
  * Fix build failure when using lowlatency-hwe-24.04, as ubuntustudio does.
    (LP: #2098105)

-  [ Michael Hudson-Doyle ]
-  * live-build/ubuntu-mini-iso/hooks/01-mini-iso.binary: Drop the
-    assumption that the uncompressed part of the initrd is unpacked to a
-    directory called "main".
-  * live-build/ubuntu-mini-iso/hooks/01-mini-iso.chroot_early: Fix paths that
-    should have been adjusted when code moved from binary to chroot hook.
+ -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 12 Feb 2025 18:39:48 -0700

- -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 14 Feb 2025 17:25:29 +1300
+livecd-rootfs (24.04.84) noble; urgency=medium

-livecd-rootfs (25.04.16) plucky; urgency=medium
+  [ Florent 'Skia' Jacquet ]
+  * Enable the HWE stack for 24.04.2. (LP: #2098105)

-  * buildd: add udev to buildd images to fix networking issue. (LP: #2092196)
+  [ Utkarsh Gupta ]
+  * Bump HWE kernel track to 24.04 for ubuntu-core-desktop.

- -- Simon Poirier <simon.poirier@canonical.com>  Thu, 13 Feb 2025 13:44:02 -0500
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 13 Feb 2025 03:15:12 +0530

-livecd-rootfs (25.04.15) plucky; urgency=medium
-
-  * Add 6.12 kernel apparmor features' preseeds.
-
- -- Thomas Bechtold <thomas.bechtold@canonical.com>  Thu, 13 Feb 2025 12:14:33 +0100
-
-livecd-rootfs (25.04.14) plucky; urgency=medium
-
-  * Restore the default-layer.conf file in the initrd (LP: #2097838)
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 11 Feb 2025 08:21:56 -0700
-
-livecd-rootfs (25.04.13) plucky; urgency=medium
-
-  * install-sources: quote default kernel argument.
-  * ubuntu-core-installer: update install-sources.yaml with kernel.
-
- -- Chris Peterson <chris.peterson@canonical.com>  Wed, 05 Feb 2025 17:43:34 -0800
-
-livecd-rootfs (25.04.12) plucky; urgency=medium
-
-  * Stop producing a rootfs tarball for the ubuntu-mini-iso builds.
-  * Move configuration of casper in ubuntu-serve:live builds to a "chroot
-    early" hook for the installer layer and remove the now unnecessary
-    update-initramfs from the binary hook that breaks because mkinitramfs
-    now requires that /sys is mounted. (LP: #2097280)
-  * Similar changes for ubuntu-mini-iso build.
-
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 05 Feb 2025 15:26:13 +1300
-
-livecd-rootfs (25.04.11) plucky; urgency=medium
-
-  [ Heinrich Schuchardt ]
-  * riscv: copy device trees dtb/ in ESP
-
-  [ Michael Hudson-Doyle ]
-  * Allow snapd to re-exec in installer environment (the issues between snapd,
-    overlayfs and apparmer that meant re-execing caused problems were fixed in
-    snapd a long time ago).
-
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 29 Jan 2025 08:51:49 +1300
-
-livecd-rootfs (25.04.10) plucky; urgency=medium
-
-  * riscv: copy device trees to the ESP. Fixes (LP: #2095415)
-
- -- Adriano Cordova <adriano.cordova@canonical.com>  Tue, 21 Jan 2025 10:38:54 -0300
-
-livecd-rootfs (25.04.9) plucky; urgency=medium
-
-  * Move reference wsl-setup script to /usr/lib/wsl/
-
- -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Wed, 22 Jan 2025 10:17:56 +0100
-
-livecd-rootfs (25.04.8) plucky; urgency=medium
-
-  * risc-v: directly copy device trees to /boot/dtbs (LP: #2092205)
-
- -- Adriano Cordova <adriano.cordova@canonical.com>  Thu, 19 Dec 2024 10:42:57 -0300
-
-livecd-rootfs (25.04.7) plucky; urgency=medium
+livecd-rootfs (24.04.83) noble; urgency=medium

  [ Carlos Nihelton ]
  [ Didier Roche-Tolomelli ]
@ -311,263 +67,105 @@ livecd-rootfs (25.04.7) plucky; urgency=medium
    - Create livecd-roots tarball as a .wsl extension
    - Create wsl-distribution.conf for WSL images

- -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Mon, 09 Dec 2024 14:29:37 +0100
+ -- Didier Roche-Tolomelli <didrocks@ubuntu.com>  Thu, 23 Jan 2025 14:22:54 +0100

-livecd-rootfs (25.04.6) plucky; urgency=medium
+livecd-rootfs (24.04.82) noble; urgency=medium

-  * Refer to LB_DISTRIBUTION, not SUITE, in the ubuntu-mini-iso binary hook.
+  * Add support for arm64+tegra-jetson flavor. (LP: #2091392)

- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Fri, 06 Dec 2024 18:59:35 +1300
+ -- Remy Martin <remy.martin@canonical.com>  Fri, 13 Dec 2024 11:53:08 +0100

-livecd-rootfs (25.04.5) plucky; urgency=medium
+livecd-rootfs (24.04.81) noble; urgency=medium

-  * Fix ubuntu-mini-iso build, by using script from debian-cd to create a
-    bootable ISO rather than the now deleted cd-boot-images-amd64 package.
+  * Introduce unminimize as a package in OCI images. (LP: #2078583)

- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 04 Dec 2024 13:33:53 +1300
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 20 Nov 2024 15:43:55 +0530

-livecd-rootfs (25.04.4) plucky; urgency=medium
-
-  [ Rémy Martin ]
-  * Add support for arm64+tegra-jetson flavor to disambiguate from the
-    NVIDIA IGX builds.
-
- -- Loïc Minier <loic.minier@ubuntu.com>  Tue, 26 Nov 2024 13:41:05 +0000
-
-livecd-rootfs (25.04.3) plucky; urgency=medium
-
-  * Switch Lubuntu to stacked squashfses, and split apart the common
-    functionality to avoid Subiquity-specific commands.
-  * Add optional Dracut support for installed images, enable it for Lubuntu.
-
- -- Simon Quigley <tsimonq2@ubuntu.com>  Sat, 23 Nov 2024 13:52:09 -0600
-
-livecd-rootfs (25.04.2) plucky; urgency=medium
+livecd-rootfs (24.04.80) noble; urgency=medium

  * Explicitly create home directory for buildd system user to avoid issues
    with installing and running snaps. (LP: #2083240) 

- -- jchittum <john.chittum@canonical.com>  Wed, 06 Nov 2024 07:40:42 -0500
+ -- jchittum <john.chittum@canonical.com>  Wed, 06 Nov 2024 07:43:40 -0500

-livecd-rootfs (25.04.1) plucky; urgency=medium
+livecd-rootfs (24.04.79) noble; urgency=medium

-  * Add support for install-sources version: 2, which handles bridge kernels.
+  * Add apparmor policy permstable32 missing component (LP: #2084698)

- -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 17 Oct 2024 08:22:38 -0600
+ -- Thomas Bechtold <thomas.bechtold@canonical.com>  Fri, 18 Oct 2024 13:54:51 +0200

-livecd-rootfs (24.10.27) oracular; urgency=medium
+livecd-rootfs (24.04.78) noble; urgency=medium

-  * Set UBUNTU_STORE_COHORT_KEY="+" to prepare-image to make sure we simply
-    use the latest snap versions regardless of phasing state.
+  * add cpc-sbom to create_manifest calls to generate sboms (LP: #2077105)

- -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Tue, 08 Oct 2024 13:06:10 +0100
+ -- jchittum <john.chittum@canonical.com>  Mon, 26 Aug 2024 14:15:05 -0400

-livecd-rootfs (24.10.26) oracular; urgency=medium
-
-  * Use generic kernel flavor for Nezha D1 and LicheeRV Dock.
-
- -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Fri, 04 Oct 2024 10:30:28 +0200
-
-livecd-rootfs (24.10.25) oracular; urgency=medium
-
-  * Update the model used for TPM FDE installs, yet again.
-
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Fri, 04 Oct 2024 12:21:38 +1300
-
-livecd-rootfs (24.10.24) oracular; urgency=medium
-
-  * desktop: Remove some cruft referencing the subiquity snap, which can
-    result in 'error: snap "subiquity" is not installed' messages being
-    printed on the terminal.  (LP: #2083554)
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 02 Oct 2024 10:13:41 -0600
-
-livecd-rootfs (24.10.23) oracular; urgency=medium
-
-  * Update the model used for TPM FDE installs, again, hopefully working this
-    time.
-
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 02 Oct 2024 19:06:50 +1300
-
-livecd-rootfs (24.10.22) oracular; urgency=medium
-
-  * Revert "Update the model used for TPM FDE installs."
-    (to unblock apparmor fixes for cloud images)
-
- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Mon, 30 Sep 2024 16:19:22 +0530
-
-livecd-rootfs (24.10.21) oracular; urgency=medium
-
-  [ Utkarsh Gupta ]
-  * Add 6.11 kernel apparmor features' preseeds.
-
-  [ Michael Hudson-Doyle ]
-  * Update the model used for TPM FDE installs.
-
- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 19 Sep 2024 19:42:24 +0530
-
-livecd-rootfs (24.10.20) oracular; urgency=medium
-
-  [ Chad Smith ]
-  * Refresh cloud-init service override for updated service file name and
-    ordering fix. (LP: #2081325)
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Fri, 20 Sep 2024 12:36:12 -0600
-
-livecd-rootfs (24.10.19) oracular; urgency=medium
-
-  * live-server and desktop: disable kdump-tools only in the live layer.
-
- -- Chris Peterson <chris.peterson@canonical.com>  Tue, 17 Sep 2024 21:11:15 -0700
-
-livecd-rootfs (24.10.18) oracular; urgency=medium
-
-  * live-server and desktop: disable kdump-tools in the minimal layer
-    to allow the installer to decide when to enable it (LP: #2077990).
-
- -- Chris Peterson <chris.peterson@canonical.com>  Fri, 13 Sep 2024 09:08:33 -0700
-
-livecd-rootfs (24.10.17) oracular; urgency=medium
-
-  * desktop and subiquity-using flavors: install the kernel in the minimal
-    layer (LP 2080272)
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 12 Sep 2024 15:30:34 -0600
-
-livecd-rootfs (24.10.16) oracular; urgency=medium
-
-  * live-server: fix issue where the kernel was not actually placed in the
-    minimal layer
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 11 Sep 2024 12:30:35 -0600
-
-livecd-rootfs (24.10.15) oracular; urgency=medium
-
-  * live-server: install the kernel in the minimal layer (LP: #2080272)
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Tue, 10 Sep 2024 12:42:33 -0600
-
-livecd-rootfs (24.10.14) oracular; urgency=medium
-
-  [ Sergio Costas ]
-  * Switch ubuntu-core-desktop project to be a subproject of the
-    ubuntu-core-installer project.
-
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 10 Sep 2024 16:11:32 +1200
-
-livecd-rootfs (24.10.13) oracular; urgency=medium
-
-  * Fix autopkgtest issue where /tmp mounted with nodev is used as a working
-    directory, which understandably causes problems for device node creation.
-    (LP: #2078980)
-
- -- Dan Bungert <daniel.bungert@canonical.com>  Wed, 04 Sep 2024 14:27:27 -0600
-
-livecd-rootfs (24.10.12) oracular; urgency=medium
+livecd-rootfs (24.04.77.1) noble; urgency=medium

+  * Hotfix upload outside of git history, real change from 24.04.79.
  * Update ubuntu-classic-2404-amd64 model in ubuntu hooks. (LP: #2077899)

- -- Chris Peterson <chris.peterson@canonical.com>  Mon, 26 Aug 2024 17:03:28 -0700
+ -- Chris Peterson <chris.peterson@canonical.com>  Mon, 26 Aug 2024 16:57:12 -0700

-livecd-rootfs (24.10.11) oracular; urgency=medium
+livecd-rootfs (24.04.77) noble; urgency=medium

-  [ Simon Poirier ]
-  * disk-image-uefi: Fix regression with partition sizing on arm.
+  * Drop unminimize spit out by livecd-rootfs. (LP: #2077695)
+  * Use packaged unminimize in the ubuntu-server images.

- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Thu, 22 Aug 2024 04:58:46 +0530
+ -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 21 Aug 2024 12:08:44 +0530

-livecd-rootfs (24.10.10) oracular; urgency=medium
+livecd-rootfs (24.04.76) noble; urgency=medium

-  * disk-image-uefi.binary: Shift down boot partition to 13 to support systems
-    which don't handle partition numbers higher than 15. (LP: #2072929)
+  * Force latest/stable/ubuntu-24.10 subiquity onto the ubuntu-core-installer
+    ISO for now. (LP: #2077495)

- -- Simon Poirier <simon.poirier@canonical.com>  Tue, 20 Aug 2024 18:57:57 -0400
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Wed, 21 Aug 2024 16:13:58 +1200

-livecd-rootfs (24.10.9) oracular; urgency=medium
+livecd-rootfs (24.04.75) noble; urgency=medium

-  [ Cody Shepherd ]
-  * fix: remove ec2-version hook for cpc images.
+  * Add 'ubuntu-core-installer' project. (LP: #2076307)

- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 14 Aug 2024 18:02:29 +0530
+ -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 30 Jul 2024 16:35:31 +1200

-livecd-rootfs (24.10.8) oracular; urgency=medium
-
-  [ Erich Eickmeyer ]
-  * Add minimal installation to Ubuntu Studio
-
- -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 25 Jul 2024 11:12:52 -0700
-
-livecd-rootfs (24.10.7) oracular; urgency=medium
+livecd-rootfs (24.04.74) noble; urgency=medium

  * riscv64: preinstalled server image for Microchip PIC64GX Curiosity Kit
    (LP: #2072956)

- -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Mon, 22 Jul 2024 14:51:25 +0200
+ -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Mon, 08 Jul 2024 17:51:25 +0200

-livecd-rootfs (24.10.6) oracular; urgency=medium
+livecd-rootfs (24.04.73) noble; urgency=medium

-  [ Chad Smith ]
-  * Override cloud-init.service in /etc so as to not invalidate debsums
-    (LP: #2069391)
-  * Update the overridden copy of cloud-init.service
+  * Build qcow2 images for ubuntu-core LXD support (LP: #2072759).

- -- Dan Bungert <daniel.bungert@canonical.com>  Thu, 18 Jul 2024 15:58:53 -0600
+ -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 11 Jul 2024 13:15:43 +0200

-livecd-rootfs (24.10.5) oracular; urgency=medium
-
-  [ Erich Eickmeyer ]
-  * Switch Ubuntu Studio to generic kernel
-
-  [ Zhaoxuan Zhai ]
-  * support config sector size in ubuntu-image
-
-  [ Łukasz 'sil2100' Zemczak ]
-  * Build qcow2 images for ubuntu-core LXD support.
-
- -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Thu, 11 Jul 2024 12:57:54 +0200
-
-livecd-rootfs (24.10.4) oracular; urgency=medium
-
-  [ Philip Roche ]
-  * Revert removal of unminimize call in server builds. (LP: #2069828)
-
-  [ Utkarsh Gupta ]
-  * Use packaged unminimize in the ubuntu-server images.
-  * Drop unminimize spit out by livecd-rootfs.
-
- -- Utkarsh Gupta <utkarsh@ubuntu.com>  Wed, 19 Jun 2024 22:02:39 +0530
-
-livecd-rootfs (24.10.3) oracular; urgency=medium
+livecd-rootfs (24.04.72) noble; urgency=medium

  [ Heinrich Schuchardt ]
-  * riscv64: use earlycon=sbi on command line
-
-  [ Michael Hudson-Doyle ]
-  * Add 'ubuntu-core-installer' project.
-
- -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 11 Jun 2024 11:51:14 +1200
-
-livecd-rootfs (24.10.2) oracular; urgency=medium
-
-  [ Michael Hudson-Doyle ]
-  * Replace 'ubuntustudio-dvd' project with an almost identical 'ubuntustudio'
-    project.
+  * riscv64: use earlycon=sbi on command line (LP: #2068739)

  [ Philip Roche ]
-  * No longer install LXD snap in unminimize script (LP: #2066905)
+  * Revert removal of unminimize call in server builds (LP: #2069828)

- -- Philip Roche <phil.roche@canonical.com>  Thu, 23 May 2024 14:11:57 +0100
+ -- Philip Roche <phil.roche@canonical.com>  Mon, 24 Jun 2024 14:24:52 +0100

-livecd-rootfs (24.10.1) oracular; urgency=medium
+livecd-rootfs (24.04.71) noble; urgency=medium
+
+  * Re-enable ability to build HyperV desktop images (LP: #2064280)
+
+ -- Philip Roche <phil.roche@canonical.com>  Mon, 27 May 2024 12:05:33 +0100
+ 
+livecd-rootfs (24.04.70) noble; urgency=medium

  [ Łukasz 'sil2100' Zemczak ]
  * Add experimental support for building ubuntu-core-desktop installer images
    (LP: #2063203)

  [ Philip Roche ]
-  * Re-enable ability to build HyperV desktop images (LP: #2064280)
+  * No longer install LXD snap in unminimize script (LP: #2066905) 

- -- Philip Roche <phil.roche@canonical.com>  Tue, 30 Apr 2024 17:58:43 +0100
+ -- Philip Roche <phil.roche@canonical.com>  Fri, 24 May 2024 15:47:48 +0100

 livecd-rootfs (24.04.69) noble; urgency=medium

--- a/debian/compat
+++ b/debian/compat
@ -0,0 +1 @@
+7
--- a/debian/control
+++ b/debian/control
@ -1,12 +1,10 @@
 Source: livecd-rootfs
 Section: devel
 Priority: optional
-Build-Depends: debhelper-compat (= 13)
+Build-Depends: debhelper (>= 7)
 Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
-Standards-Version: 4.7.0
+Standards-Version: 3.9.6
 Vcs-Git: https://git.launchpad.net/livecd-rootfs -b ubuntu/master
-Vcs-Browser: https://git.launchpad.net/livecd-rootfs
-Rules-Requires-Root: no

 Package: livecd-rootfs
 Architecture: any
--- a/debian/copyright
+++ b/debian/copyright
@ -11,7 +11,7 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 General Public License for more details.

 You should have received a copy of the GNU General Public License with
-your Ubuntu system, in /usr/share/common-licenses/GPL-2, or with the
+your Ubuntu system, in /usr/share/common-licenses/GPL, or with the
 livecd-rootfs source package as the file COPYING.  If not, write to
 the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
 Boston, MA 02110-1301 USA.
--- a/debian/install
+++ b/debian/install
@ -4,4 +4,3 @@ get-ppa-fingerprint usr/share/livecd-rootfs
 minimize-manual usr/share/livecd-rootfs
 checkout-translations-branch usr/share/livecd-rootfs
 update-source-catalog usr/share/livecd-rootfs
-sync-mtime usr/share/livecd-rootfs
--- a/debian/livecd-rootfs.lintian-overrides
+++ b/debian/livecd-rootfs.lintian-overrides
@ -1,10 +0,0 @@
-# This is expected and okay
-livecd-rootfs: service-file-is-not-a-file [usr/share/livecd-rootfs/*.service]
-livecd-rootfs: uses-dpkg-database-directly [usr/share/livecd-rootfs/live-build/lb_chroot_layered]
-livecd-rootfs: package-contains-no-arch-dependent-files
-
-# Developer documentation in an already-expected spot
-livecd-rootfs: package-contains-documentation-outside-usr-share-doc [usr/share/livecd-rootfs/live-build/ubuntu-cpc/README.cpc.md]
-
-# This is going to occur quite a bit; we're making a livefs
-livecd-rootfs: repeated-path-segment * [*]
--- a/debian/source/lintian-overrides
+++ b/debian/source/lintian-overrides
@ -1,5 +0,0 @@
-# This is expected and okay
-livecd-rootfs source: absolute-symbolic-link-target-in-source * [live-build/*]
-
-# The description indicates that it's not required in debhelper >= 13, which we have
-livecd-rootfs source: override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS [debian/rules:*]
--- a/debian/tests/default-bootstraps
+++ b/debian/tests/default-bootstraps
@ -78,8 +78,7 @@ live_build_rootfs() {
    echo ""
 }

-[ -d /adt ] || mkdir /adt
-WORKDIR=$(mktemp -d -p /adt)
+WORKDIR=$(mktemp -d)
 trap "RET=\$?; rm -rf $WORKDIR; exit \$RET" 0 INT QUIT ABRT PIPE TERM
 cd $WORKDIR

--- a/live-build/apparmor/6.12/capability
+++ b/live-build/apparmor/6.12/capability
@ -1 +0,0 @@
-0xffffff
--- a/live-build/apparmor/6.12/caps/extended
+++ b/live-build/apparmor/6.12/caps/extended
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/caps/mask
+++ b/live-build/apparmor/6.12/caps/mask
@ -1 +0,0 @@
-chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore
--- a/live-build/apparmor/6.12/dbus/mask
+++ b/live-build/apparmor/6.12/dbus/mask
@ -1 +0,0 @@
-acquire send receive
--- a/live-build/apparmor/6.12/domain/attach_conditions/xattr
+++ b/live-build/apparmor/6.12/domain/attach_conditions/xattr
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_hat
+++ b/live-build/apparmor/6.12/domain/change_hat
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_hatv
+++ b/live-build/apparmor/6.12/domain/change_hatv
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_onexec
+++ b/live-build/apparmor/6.12/domain/change_onexec
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/change_profile
+++ b/live-build/apparmor/6.12/domain/change_profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/computed_longest_left
+++ b/live-build/apparmor/6.12/domain/computed_longest_left
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/disconnected.path
+++ b/live-build/apparmor/6.12/domain/disconnected.path
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/fix_binfmt_elf_mmap
+++ b/live-build/apparmor/6.12/domain/fix_binfmt_elf_mmap
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/interruptible
+++ b/live-build/apparmor/6.12/domain/interruptible
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/kill.signal
+++ b/live-build/apparmor/6.12/domain/kill.signal
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/post_nnp_subset
+++ b/live-build/apparmor/6.12/domain/post_nnp_subset
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/stack
+++ b/live-build/apparmor/6.12/domain/stack
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/unconfined_allowed_children
+++ b/live-build/apparmor/6.12/domain/unconfined_allowed_children
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/domain/version
+++ b/live-build/apparmor/6.12/domain/version
@ -1 +0,0 @@
-1.2
--- a/live-build/apparmor/6.12/file/mask
+++ b/live-build/apparmor/6.12/file/mask
@ -1 +0,0 @@
-create read write exec append mmap_exec link lock
--- a/live-build/apparmor/6.12/io_uring/mask
+++ b/live-build/apparmor/6.12/io_uring/mask
@ -1 +0,0 @@
-sqpoll override_creds
--- a/live-build/apparmor/6.12/ipc/posix_mqueue
+++ b/live-build/apparmor/6.12/ipc/posix_mqueue
@ -1 +0,0 @@
-create read write open delete setattr getattr
--- a/live-build/apparmor/6.12/mount/mask
+++ b/live-build/apparmor/6.12/mount/mask
@ -1 +0,0 @@
-mount umount pivot_root
--- a/live-build/apparmor/6.12/mount/move_mount
+++ b/live-build/apparmor/6.12/mount/move_mount
@ -1 +0,0 @@
-detached
--- a/live-build/apparmor/6.12/namespaces/mask
+++ b/live-build/apparmor/6.12/namespaces/mask
@ -1 +0,0 @@
-userns_create
--- a/live-build/apparmor/6.12/namespaces/pivot_root
+++ b/live-build/apparmor/6.12/namespaces/pivot_root
@ -1 +0,0 @@
-no
--- a/live-build/apparmor/6.12/namespaces/profile
+++ b/live-build/apparmor/6.12/namespaces/profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/namespaces/userns_create
+++ b/live-build/apparmor/6.12/namespaces/userns_create
@ -1 +0,0 @@
-pciu&
--- a/live-build/apparmor/6.12/network/af_mask
+++ b/live-build/apparmor/6.12/network/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.12/network/af_unix
+++ b/live-build/apparmor/6.12/network/af_unix
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/network_v8/af_inet
+++ b/live-build/apparmor/6.12/network_v8/af_inet
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/network_v8/af_mask
+++ b/live-build/apparmor/6.12/network_v8/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.12/policy/notify/user
+++ b/live-build/apparmor/6.12/policy/notify/user
@ -1 +0,0 @@
-file
--- a/live-build/apparmor/6.12/policy/outofband
+++ b/live-build/apparmor/6.12/policy/outofband
@ -1 +0,0 @@
-0x000001
--- a/live-build/apparmor/6.12/policy/permstable32_version
+++ b/live-build/apparmor/6.12/policy/permstable32_version
@ -1 +0,0 @@
-0x000003
--- a/live-build/apparmor/6.12/policy/set_load
+++ b/live-build/apparmor/6.12/policy/set_load
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/policy/state32
+++ b/live-build/apparmor/6.12/policy/state32
@ -1 +0,0 @@
-0x000001
--- a/live-build/apparmor/6.12/policy/unconfined_restrictions/change_profile
+++ b/live-build/apparmor/6.12/policy/unconfined_restrictions/change_profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/policy/unconfined_restrictions/io_uring
+++ b/live-build/apparmor/6.12/policy/unconfined_restrictions/io_uring
@ -1 +0,0 @@
-0
--- a/live-build/apparmor/6.12/policy/unconfined_restrictions/userns
+++ b/live-build/apparmor/6.12/policy/unconfined_restrictions/userns
@ -1 +0,0 @@
-1
--- a/live-build/apparmor/6.12/policy/versions/v5
+++ b/live-build/apparmor/6.12/policy/versions/v5
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/policy/versions/v6
+++ b/live-build/apparmor/6.12/policy/versions/v6
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/policy/versions/v7
+++ b/live-build/apparmor/6.12/policy/versions/v7
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/policy/versions/v8
+++ b/live-build/apparmor/6.12/policy/versions/v8
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/policy/versions/v9
+++ b/live-build/apparmor/6.12/policy/versions/v9
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/ptrace/mask
+++ b/live-build/apparmor/6.12/ptrace/mask
@ -1 +0,0 @@
-read trace
--- a/live-build/apparmor/6.12/query/label/data
+++ b/live-build/apparmor/6.12/query/label/data
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/query/label/multi_transaction
+++ b/live-build/apparmor/6.12/query/label/multi_transaction
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.12/query/label/perms
+++ b/live-build/apparmor/6.12/query/label/perms
@ -1 +0,0 @@
-allow deny audit quiet
--- a/live-build/apparmor/6.12/rlimit/mask
+++ b/live-build/apparmor/6.12/rlimit/mask
@ -1 +0,0 @@
-cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime
--- a/live-build/apparmor/6.12/signal/mask
+++ b/live-build/apparmor/6.12/signal/mask
@ -1 +0,0 @@
-hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost
--- a/live-build/apparmor/6.14/capability
+++ b/live-build/apparmor/6.14/capability
@ -1 +0,0 @@
-0xffffff
--- a/live-build/apparmor/6.14/caps/extended
+++ b/live-build/apparmor/6.14/caps/extended
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/caps/mask
+++ b/live-build/apparmor/6.14/caps/mask
@ -1 +0,0 @@
-chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore
--- a/live-build/apparmor/6.14/dbus/mask
+++ b/live-build/apparmor/6.14/dbus/mask
@ -1 +0,0 @@
-acquire send receive
--- a/live-build/apparmor/6.14/domain/attach_conditions/xattr
+++ b/live-build/apparmor/6.14/domain/attach_conditions/xattr
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/change_hat
+++ b/live-build/apparmor/6.14/domain/change_hat
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/change_hatv
+++ b/live-build/apparmor/6.14/domain/change_hatv
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/change_onexec
+++ b/live-build/apparmor/6.14/domain/change_onexec
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/change_profile
+++ b/live-build/apparmor/6.14/domain/change_profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/computed_longest_left
+++ b/live-build/apparmor/6.14/domain/computed_longest_left
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/disconnected.ipc
+++ b/live-build/apparmor/6.14/domain/disconnected.ipc
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/disconnected.path
+++ b/live-build/apparmor/6.14/domain/disconnected.path
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/fix_binfmt_elf_mmap
+++ b/live-build/apparmor/6.14/domain/fix_binfmt_elf_mmap
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/interruptible
+++ b/live-build/apparmor/6.14/domain/interruptible
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/kill.signal
+++ b/live-build/apparmor/6.14/domain/kill.signal
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/post_nnp_subset
+++ b/live-build/apparmor/6.14/domain/post_nnp_subset
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/stack
+++ b/live-build/apparmor/6.14/domain/stack
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/unconfined_allowed_children
+++ b/live-build/apparmor/6.14/domain/unconfined_allowed_children
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/domain/version
+++ b/live-build/apparmor/6.14/domain/version
@ -1 +0,0 @@
-1.2
--- a/live-build/apparmor/6.14/file/mask
+++ b/live-build/apparmor/6.14/file/mask
@ -1 +0,0 @@
-create read write exec append mmap_exec link lock
--- a/live-build/apparmor/6.14/io_uring/mask
+++ b/live-build/apparmor/6.14/io_uring/mask
@ -1 +0,0 @@
-sqpoll override_creds
--- a/live-build/apparmor/6.14/ipc/posix_mqueue
+++ b/live-build/apparmor/6.14/ipc/posix_mqueue
@ -1 +0,0 @@
-create read write open delete setattr getattr
--- a/live-build/apparmor/6.14/mount/mask
+++ b/live-build/apparmor/6.14/mount/mask
@ -1 +0,0 @@
-mount umount pivot_root
--- a/live-build/apparmor/6.14/mount/move_mount
+++ b/live-build/apparmor/6.14/mount/move_mount
@ -1 +0,0 @@
-detached
--- a/live-build/apparmor/6.14/namespaces/mask
+++ b/live-build/apparmor/6.14/namespaces/mask
@ -1 +0,0 @@
-userns_create
--- a/live-build/apparmor/6.14/namespaces/pivot_root
+++ b/live-build/apparmor/6.14/namespaces/pivot_root
@ -1 +0,0 @@
-no
--- a/live-build/apparmor/6.14/namespaces/profile
+++ b/live-build/apparmor/6.14/namespaces/profile
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/namespaces/userns_create
+++ b/live-build/apparmor/6.14/namespaces/userns_create
@ -1 +0,0 @@
-pciu&
--- a/live-build/apparmor/6.14/network/af_mask
+++ b/live-build/apparmor/6.14/network/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.14/network/af_unix
+++ b/live-build/apparmor/6.14/network/af_unix
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/network_v8/af_inet
+++ b/live-build/apparmor/6.14/network_v8/af_inet
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/network_v8/af_mask
+++ b/live-build/apparmor/6.14/network_v8/af_mask
@ -1 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
--- a/live-build/apparmor/6.14/network_v9/af_mask
+++ b/live-build/apparmor/6.14/network_v9/af_mask
@ -1,2 +0,0 @@
-unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp
-
--- a/live-build/apparmor/6.14/network_v9/af_unix
+++ b/live-build/apparmor/6.14/network_v9/af_unix
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/policy/notify/user
+++ b/live-build/apparmor/6.14/policy/notify/user
@ -1 +0,0 @@
-file
--- a/live-build/apparmor/6.14/policy/outofband
+++ b/live-build/apparmor/6.14/policy/outofband
@ -1 +0,0 @@
-0x000001
--- a/live-build/apparmor/6.14/policy/permstable32
+++ b/live-build/apparmor/6.14/policy/permstable32
@ -1 +0,0 @@
-allow deny subtree cond kill complain prompt audit quiet hide xindex tag label
--- a/live-build/apparmor/6.14/policy/permstable32_version
+++ b/live-build/apparmor/6.14/policy/permstable32_version
@ -1 +0,0 @@
-0x000003
--- a/live-build/apparmor/6.14/policy/set_load
+++ b/live-build/apparmor/6.14/policy/set_load
@ -1 +0,0 @@
-yes
--- a/live-build/apparmor/6.14/policy/state32
+++ b/live-build/apparmor/6.14/policy/state32
@ -1 +0,0 @@
-0x000001
--- a/live-build/apparmor/6.14/policy/unconfined_restrictions/change_profile
+++ b/live-build/apparmor/6.14/policy/unconfined_restrictions/change_profile
@ -1 +0,0 @@
-yes
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Juerg Haefliger	b05cffdb55	releasing package livecd-rootfs version 24.04.91	2025-07-30 17:38:38 +02:00
Juerg Haefliger	182b6a5f5b	build: Fix lowlatency kernel flavour name Nowadays the lowlatency kernel is just the generic kernel with some bootargs to make it lowlatency. Hence the flavour name is 'generic'.	2025-07-30 17:38:31 +02:00
Dan Bungert	069bcfedd2	releasing package livecd-rootfs version 24.04.90	2025-07-22 15:50:36 -06:00
Chad Smith	736099c6b6	functions: proper cloud-init.service full unit override in etc System override drop-ins cannot redact dependencies (Before or After) and thus require a full unit override. Avoid writing the unit file delivered by cloud-init deb package in /lib/systemd/system/cloud-init.service because it will generate warnings fron debsums -c about modified files. The correct place to provide a full unit override is in /etc/systemd/system/cloud-init.service in order to drop Before=sysinit.target from the packaged cloud-init.service file. Note vigilance will be needed across cloud-init SRU boundaries to ensure we sync any cloud-init.service unit changes that are introduced to stable releases because livecd-rootfs is overriding the whole file. LP: #2069391 (cherry picked from commit 97dd81183b3222b05cc53c3637e934fc2c61a5f0)	2025-07-21 16:04:34 +02:00
Dan Bungert	84e51f8d9f	releasing package livecd-rootfs version 24.04.89	2025-04-30 15:27:51 -06:00
Dan Bungert	7d2975740d	desktop: remove references to subiquity snap No subiquity snap is present on Desktop isos, these are cruft. (cherry picked from commit 5e990020e5280152ce7387b707ad5c6dba623ae4)	2025-04-16 09:44:20 -06:00
Adriano Cordova	cddd73d626	Fix changelog typo from 25.04.88 to 24.04.88 Signed-off-by: Adriano Cordova <adriano.cordova@canonical.com>	2025-04-02 16:06:32 -03:00
Michael Hudson-Doyle	fa4167f97e	combine changelog entries as this will be a single upload	2025-03-07 09:05:06 +13:00
Adriano Cordova	0b21f55ba4	riscv: add SUBARCH 'jh7110' Add SUBARCH 'jh7110' for jh7110-based boards	2025-02-25 15:32:46 -03:00
Adriano Cordova	eb650f1d34	riscv: directly copy device trees to the ESP instead of relying on flash-kernel	2025-02-24 23:35:42 -03:00
Utkarsh Gupta	419e83058d	Update d/ch for 24.04.87 release	2025-02-21 14:38:02 +05:30
Utkarsh Gupta	547ee62e66	Merge remote-tracking branch 'toabctl/noble-apparmor-feature-6.11-lp2098306' into ubuntu/noble * toabctl/noble-apparmor-feature-6.11-lp2098306: Add debian/changelog entry Add 6.11 kernel apparmor features' preseeds	2025-02-21 14:37:33 +05:30
Michael Hudson-Doyle	a3363733ff	releasing package livecd-rootfs version 24.04.86	2025-02-17 11:32:33 +13:00
Michael Hudson-Doyle	46fae973d7	Do not build HWE kernel layer on RISC-V as there is no HWE kernel there.	2025-02-17 11:31:54 +13:00
Dan Bungert	5e36233d82	releasing package livecd-rootfs version 24.04.85	2025-02-13 07:48:03 -07:00
Thomas Bechtold	519832022e	Add debian/changelog entry	2025-02-13 12:56:37 +01:00
Utkarsh Gupta	61042515b3	Add 6.11 kernel apparmor features' preseeds	2025-02-13 12:22:16 +01:00
Dan Bungert	2a9992ad7d	build: fix FLAVOUR set for lowlatency	2025-02-12 20:00:08 -07:00
Utkarsh Gupta	de15c55ef0	Update d/ch for 24.04.84 release	2025-02-13 03:16:44 +05:30
Utkarsh Gupta	d02ab9bc0e	Bump HWE kernel track to 24.04 for ubuntu-core-desktop	2025-02-13 03:16:44 +05:30
Florent 'Skia' Jacquet	ddfb468b42	Enable the HWE stack for 24.04.2 This change was overlooked, thanks to a combination of Jira checklist items + inexperienced team members + quite late landing of the HWE stack. LP: #2098105	2025-02-13 03:16:14 +05:30
Florent 'Skia' Jacquet	2af06de671	kylin: indentation fix	2025-02-12 15:17:28 +01:00
Didier Roche	5545bf057e	releasing package livecd-rootfs version 24.04.83	2025-01-23 15:37:42 +01:00
Didier Roche	4e52b33e45	Update reference to wsl-setup now in /usr/lib/wsl/ Microsoft expects this binary to be under that path.	2025-01-23 14:22:43 +01:00
Didier Roche	48338fc76a	Create wsl-distribution.conf for WSL images This file is required in the new Microsoft WSL package format. Co-authored-by: Carlos Nihelton <carlos.santanadeoliveira@canonical.com>	2025-01-23 14:13:36 +01:00
Didier Roche	c1e2deee9f	Create livecd-roots tarball as a .wsl extension Co-authored-by: Carlos Nihelton <carlos.santanadeoliveira@canonical.com>	2025-01-23 14:13:36 +01:00
Didier Roche	c954240293	Keep a single wsl rootfs upgrade policy We are removing our different variants of wsl rootfs with the new Microsoft format. We only keep one following the distribution policy: - lts to lts - intermediate release to next one Co-authored-by: Carlos Nihelton <carlos.santanadeoliveira@canonical.com>	2025-01-23 14:13:31 +01:00
Loïc Minier	a81a1c20c7	Add support for arm64+tegra-jetson flavor. (LP: #2091392 )	2024-12-13 17:54:01 +00:00
Utkarsh Gupta	a2058724c4	Update d/ch for 24.04.81 release	2024-11-20 15:44:45 +05:30
Utkarsh Gupta	6047e22319	Introduce unminimize as a package in OCI images (LP: #2078583 ) With having unminimize split out from livecd-rootfs, we should re-introduce it as a package for, at least, Noble so that it's not seen as a regression. From 24.10 and onward, we're going to drop it altogether.	2024-11-20 15:43:41 +05:30
John Chittum	9a970b2ca2	changelog	2024-11-07 08:12:50 -05:00
John Chittum	b7c2cf45b1	fix(buildd): create buildd homedir LP:2083240 starting in noble, adduser no longer creates a homedir for system users. The buildd user then does not have a home directory, causing snaps to be unable to run, as well as possibly other issues from a missing assumed homedir. Explicitly create /home/buildd	2024-11-06 07:33:51 -05:00
Thomas Bechtold	70d7c43d6a	Add debian/changelog entry	2024-10-18 13:55:39 +02:00
Thomas Bechtold	d1ca48bdc4	feat(apparmor): Add policy:permstable32 feature to 6.8 kernel (LP: #2084698 ) Failing CPC tests show that the preseeded apparmor features don't include policy:permstable32 for the 6.8 kernel. This change adds the feature preseed with values based on a successfully booted instance.	2024-10-18 13:53:20 +02:00
John Chittum	0b2af5aa60	add changelog entry	2024-09-26 17:04:57 +12:00
John Chittum	377617b946	feat(ubuntu-cpc): sbom generation everywhere patch create_manifest to produce an sbom when called by an ubuntu-cpc project. Patch all the ubuntu-cpc hooks and series files to include the newly generated manifests, filelists, and sboms. Generates a number of new artifacts in the builds. the snap utilized, cpc-sbom, is an open source repo and a provided via a hidden snap. there is no intention of publisizing the snap or how we generate sboms, however partners require the ability to audit if required. defensively checks if the snap is already installed, in the case of multiple hooks being called in a single build (thus sharing a build host), and only if called in an ubuntu-cpc project. (cherry picked from commit 7c7b7df89dc96169db1f255d6bba901ebb63a43c)	2024-09-26 17:04:35 +12:00
Michael Hudson-Doyle	d3ef751279	commit hotfix upload	2024-09-26 17:04:12 +12:00
Utkarsh Gupta	9ffb24c8f7	Add SRU bug in d/ch entry	2024-08-23 11:03:33 +05:30
Utkarsh Gupta	aa3481c960	Update d/ch for 24.04.77 release	2024-08-21 12:09:45 +05:30
Utkarsh Gupta	c8ee3dddba	Use packaged unminimize in the ubuntu-server images unminimize is currently present at /usr/local/sbin/unminimize, which is spit out by livecd-rootfs currently. We'd like to switch that to use the packaged unminimize, which will be at /usr/bin/unminimize instead. (cherry picked from commit 7535bf7bc729b52d28a0a5a44b3aa8362ca9397d)	2024-08-21 12:06:39 +05:30
Utkarsh Gupta	0f837b9431	Drop unminimize spit out by livecd-rootfs And prefer the one that is packaged separately as src:unminimize, which installs the package in /usr/bin/unminimize (cherry picked from commit 34482819f0d0078f834b052c308b371bedd621d0)	2024-08-21 12:06:20 +05:30
Michael Hudson-Doyle	47c1a539d6	releasing package livecd-rootfs version 24.04.76	2024-08-21 16:14:10 +12:00
Michael Hudson-Doyle	9441bbdfb5	Force latest/stable/ubuntu-24.10 subiquity onto the ubuntu-core-installer ISO for now.	2024-08-21 15:58:08 +12:00
Michael Hudson-Doyle	5a4991ade3	add reference to SRU bug to changelog	2024-08-08 16:50:13 +12:00
Michael Hudson-Doyle	a99b788ebc	releasing package livecd-rootfs version 24.04.75	2024-07-30 16:35:50 +12:00
Michael Hudson-Doyle	0df4234c28	Add 'ubuntu-core-installer' project. The ubuntu-core-installer image is an installer that installs ubuntu core. The environment the installer runs in is similar to the server installer but it has a source catalog entry that points to the model created in ubuntu-core-installer/hooks/05-prepare-image.binary, which subiquity knows how to install.	2024-07-25 17:26:22 +12:00
Łukasz 'sil2100' Zemczak	2215660a7d	releasing package livecd-rootfs version 24.04.74	2024-07-24 16:17:29 +01:00
Heinrich Schuchardt	1da6867784	riscv64: preinstalled server image for Microchip PIC64GX Curiosity Kit Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>	2024-07-24 11:26:05 +02:00
Łukasz 'sil2100' Zemczak	69b47ce2fe	releasing package livecd-rootfs version 24.04.73	2024-07-11 13:17:09 +02:00
Łukasz 'sil2100' Zemczak	bb44f093c9	Backport the qcow2 ubuntu-core image generation for LXD support.	2024-07-11 13:16:40 +02:00
Philip Roche	a0dea8f6e2	d/ch change to upload 24.04.72 noble	2024-06-25 12:23:43 +01:00
Philip Roche	d9e444988d	Merge bugfix/LP-2069828-restore-unminimize-during-server-build-noble into ubuntu/noble [a=philroche] [r=gjolly,utkarsh] fix: Revert removal of unminimize call in server builds (LP: #2069828) There was a change made by me in https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466388 as part of LP: #2066905 to remove references to LXD in the unminimize scripts but I also removed the calls to `unminimize` in error. This still needs to run but without any references to LXD which no longer needs to be `unminimized` via snap installation. (cherry picked from commit f574fc8200d8a4c7837288c5d2aa1e515137bb55) MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/468088	2024-06-25 12:19:00 +01:00
Philip Roche	62a80ac00a	fix: Revert removal of unminimize call in server builds (LP: #2069828 ) There was a change made by me in https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466388 as part of LP: #2066905 to remove references to LXD in the unminimize scripts but I also removed the calls to `unminimize` in error. This still needs to run but without any references to LXD which no longer needs to be `unminimized` via snap installation. (cherry picked from commit f574fc8200d8a4c7837288c5d2aa1e515137bb55)	2024-06-24 17:26:07 +01:00
Heinrich Schuchardt	05933ff83f	riscv64: use earlycon=sbi on command line With current kernel we need to specify the SBI driver for the early console to work. Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>	2024-06-07 16:21:32 +02:00
Philip Roche	10d4a04d14	Merge bugfix/noble-remove-files-added-during-incorect-merge-conflict-resolution into ubuntu/noble [a=philroche] [r=brian-murray] fix: Remove .patch files and livecd-rootfs symlink committed in error as part of merge commit. Apologies. Trying to do too many things at once This reverts changes added in error in commit 639f04b7 MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466885	2024-06-04 18:42:12 +01:00
Philip Roche	d72ae0de70	fix: Remove .patch files and livecd-rootfs symlink committed in error as part of merge commit. Apologies. Trying to do too many things at once This reverts changes added in error in commit 639f04b7	2024-06-04 18:33:45 +01:00
Philip Roche	bfb829c64d	fix: Remove .idea pycharm directories and files committed in error as part of merge commit. Apologies. Trying to do too many things at once	2024-05-27 12:40:56 +01:00
Philip Roche	13ec478feb	d/ch change to upload 24.04.71 noble	2024-05-27 12:06:44 +01:00
Philip Roche	639f04b7b9	Merge feature/re-enable-noble-hyperv-desktop-builds-noble into ubuntu/noble [a=philroche] [r=mwhudson,utkarsh] feat: Re-enable ability to build HyperV desktop images (LP: #2064280) We have not built Hyperv desktop images since Jammy and with the re-introduction of HyperV for Noble we have encountered build issues caused by refactoring and removals of code assumed to be redundant but the HyperV desktop images were actually using these code paths. This is a backport/SRU from oracular. MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466385 # Conflicts: # debian/changelog	2024-05-27 12:06:31 +01:00
Philip Roche	073d7e0404	d/ch change to upload 24.04.70 noble	2024-05-27 11:11:12 +01:00
Philip Roche	1f40b60606	Merge bugfix/lxd-no-longer-seeded-unminimize-noble into ubuntu/noble [a=philroche] [r=sdeziel,utkarsh,vorlon] fix: No longer install LXD snap in unminimize script (LP: #2066905) The LXD snap is no longer seeded in any images since Noble+ so the LXD related unminimize logic in ./live-build/auto/build?h=ubuntu/noble and ./live-build/ubuntu-server/hooks/01-unminimize.chroot_early is no longer required. lxd-installer can remain installed. This is a backport/SRU from oracular (cherry picked from commit 46c19dfa913c133042d62e0caa2d2d526cd9bb7f) MP: https://code.launchpad.net/~philroche/livecd-rootfs/+git/livecd-rootfs/+merge/466388	2024-05-27 11:10:05 +01:00
Philip Roche	5507ca8d83	fix: No longer install LXD snap in unminimize script (LP: #2066905 ) The LXD snap is no longer seeded in any images since Noble+ so the LXD related unminimize logic in ./live-build/auto/build?h=ubuntu/noble and ./live-build/ubuntu-server/hooks/01-unminimize.chroot_early is no longer required. lxd-installer can remain installed. (cherry picked from commit 46c19dfa913c133042d62e0caa2d2d526cd9bb7f)	2024-05-24 15:48:21 +01:00
Philip Roche	49a14274d1	d/ch update for 24.04.70 to re-enable ability to build HyperV desktop images (LP: #2064280 )	2024-05-24 15:34:40 +01:00
Philip Roche	5f59eec085	fix(Hyperv Desktop): remove redundant case statement match `ubuntu` `ubuntu` will never match `${PROJECT:-}:${SUBPROJECT:-}` cases statement and can be safely removed. (cherry picked from commit 0945c40fb2bb067d86d496b7b40bdae89123124c)	2024-05-24 15:31:21 +01:00
Philip Roche	8cc079fe50	fix(Hyperv Desktop): as we are using oem-config we do not need ubiquity-slideshow-ubuntu As we are only using oem-config, oem-config-slideshow-ubuntu will suffice (cherry picked from commit 8fe26586cc1b65621e74121b03c912dcee0e6cf8)	2024-05-24 15:31:16 +01:00
Philip Roche	34edbb9a1c	fix(Hyperv Desktop): ubiquity-frontend-gtk is a dependency of the oem-config-gtk package so does not need to be added explicitly (cherry picked from commit dc2d1318d2d2183f6d80673a1daf5dc8794cd3ed)	2024-05-24 15:31:11 +01:00
Philip Roche	40c7eac14d	feat(Hyperv Desktop): Disable cloud-init for Hyperv Desktop images (LP: #2064280 ) For Ubuntu 24.04 and later cloud-init is included in desktop images. This is not applicable for Hyperv images so we can disable cloud-init. This leaves the cloud-init package installed but disabled so users can still use it if they want. This is a documented way to disable cloud-init. See https://cloudinit.readthedocs.io/en/latest/howto/disable_cloud_init.html (cherry picked from commit ff47664d8c646ebae72c40145ee1fd8098185de6)	2024-05-24 15:30:50 +01:00
Phil Roche	b12e271417	fix(HyperV desktop): Ensure removed hyperv dependencies are present in HyperV builds (LP: #2064280 ) A change in 8fb21808 also removed many of the dependencies that the hyperv images require. This removal has been restored in this commit by adding them expliciltly in the hyperv hook. (cherry picked from commit c459e5e5af0371c0228bd4e5ddec57b8954d39df)	2024-05-24 15:30:45 +01:00
Phil Roche	fa351ac77b	fix(HyperV desktop): Re-enable ability to build HyperV desktop images (LP: #2064280 ) We have not built Hyperv desktop images since Jammy and with the re-introduction of HyperV for Noble we have encountered build issues caused by refactoring and removals of code assumed to be redundant but the HyperV desktop images were actually using these code paths. In bbedffe6 we split the building of cloud images and non cloud to using an ddisk-image-uefi.binary and disk-image-uefi-non-cloud.binary respectively. In e38264ca there was a change which meant that any attempt to build hyperv images would result in incorrect disk size and incorrect disk label. This has been fixed by ensuring that the ubuntu:desktop-preinstalled $PROJECT:$SUBPROJECT matches and sets the correct disk size and correct disk label. A change in 76d79466 changed the logic of how the image size for amd64 images were being set. This overrode the sizes set for the desktop images incorrectly. This commit ensures that any desktop image being created uses the correct image size. (cherry picked from commit 48aed401949637ac314e59de996ccab19d5eefcd)	2024-05-24 15:30:38 +01:00
				`@ -1 +0,0 @@`
				`chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore`
				`@ -1 +0,0 @@`
				`create read write exec append mmap_exec link lock`
				`@ -1 +0,0 @@`
				`create read write open delete setattr getattr`
				`@ -1 +0,0 @@`
				`unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp`
				`@ -1 +0,0 @@`
				`cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime`
				`@ -1 +0,0 @@`
				`hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost`
				`@ -1,2 +0,0 @@`
				`unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp mctp`
				`@ -1 +0,0 @@`
				`allow deny subtree cond kill complain prompt audit quiet hide xindex tag label`