Change log for systemd package in Debian

systemd (256.1-2) unstable; urgency=medium

  * Bump breaks/replaces to conflicts for DEP17. Breaks/replaces are not
    enough when moving files between packages and between locations as per
    DEP17, so bump to Conflicts. (Closes: #1073922)
  * autopkgtest: add dependency on libcryptsetup-dev in unit-tests suite

 -- Luca Boccassi <email address hidden>  Sun, 23 Jun 2024 13:33:33 +0100

systemd (256.1-1) unstable; urgency=medium

  * Bump versioned breaks against dracut to 102-2 (Closes: #1073290)
  * autopkgtest: switch upstream suite to mkosi-based builds
  * Add conflict against sysv-rc, insserv and startpar in systemd-sysv.
    They are not needed, and having them installed causes problems.
    (Closes: #1072562)
  * New upstream version 256.1
  * Drop section from binary packages where it matches the source package
  * Override Lintian false positives about spare manpages
  * Deduplicate template packages descriptions
  * Add Lintian override for template package false positives
  * Rename EFI architecture variable to avoid dpkg clash. Fixes Lintian
    warning: debian-rules-sets-dpkg-architecture-variable
  * Upload to unstable.

 -- Luca Boccassi <email address hidden>  Tue, 18 Jun 2024 23:19:16 +0100

systemd (256-2) experimental; urgency=medium

  * Add templated packages for UEFI Secure Boot signing of systemd-boot.
  * Add systemd-standalone-shutdown package for exitrds. Allows building
    minimal exitrd images, used to gracefully cleanup complex root
    filesystems storage. Not intended for normal systems.
  * Add systemd-repart package to reduce dependencies sd-repart pulls in
    several libraries that binaries in the main systemd package do not
    need, so split it out to reduce the dependencies of the main package
  * Add systemd-cryptsetup package to reduce dependencies sd-
    cryptsetup/integritysetup/veritysetup pull in several libraries that
    other files in the main systemd package do not need, so split them out
    to reduce the dependencies of the main package
  * Move sd-sysupdate to systemd-container
  * Move importd manpages to systemd-container, where the binaries are.
    Left behind when importd was moved
  * Move systemd-boot/stub manpages to systemd-boot. The EFI packages
    should just have the EFI binaries, no point in duplicating the docs.
    And the stub manpage should also be in the boot package, not the main
    package.

 -- Luca Boccassi <email address hidden>  Wed, 12 Jun 2024 01:30:51 +0100

systemd (256-1) unstable; urgency=medium

  [ Kevin Fleming ]
  * Additional workaround for links to legacy /usr/share/systemd/tmp.mount
    placeholder

  [ Yu Watanabe ]
  * debian/extra/network: use NamePolicy=mac only when ID_NET_NAME_MAC is
    set.

  [ Luca Boccassi ]
  * New upstream version 256. For a full list of changes, see:
    https://github.com/systemd/systemd/releases/tag/v256

 -- Luca Boccassi <email address hidden>  Tue, 11 Jun 2024 22:59:12 +0100

systemd (256~rc4-1) unstable; urgency=high

  [ Luca Boccassi ]
  * Restart managers on libc-upgrade dpkg trigger (Closes: #1072373)
  * LimitCORE: restore default hard limit to infinity. The intention was
    to change the soft limit, but by default it applies to both unless
    specified, so fix it.
  * New upstream version 256~rc4
  * Drop patches merged upstream

  [ Nick Rosbrook ]
  * debian/extra: set ManagedOOMSwap=auto on -.slice. This has the effect
    of disabling swap kill by default, so cgroups will only be monitored
    for memory pressure, and not swap usage.
  * debian/extra: use a drop-in resolved.conf to configure Cache=no-
    negative. Only ship this on Ubuntu.
  * debian/extra: use a dropin to configure Nice=-1 on systemd-
    journald.service. Only ship this on Ubuntu.

  [ Dan Streetman ]
  * debian/tests/storage: without scsi_debug, skip test

 -- Luca Boccassi <email address hidden>  Thu, 06 Jun 2024 20:49:17 +0100

systemd (256~rc3-7) unstable; urgency=medium

  * NEWS: note that any leftover file in /tmp/ will be invisible due to
    the tmpfs and other clarifications (Closes: #1072249)
  * Add pkg.systemd.noukify profile. Will be useful for i386 reduced
    builds
  * d/rules: be more robust against non-existing dirs when deleting files
  * Allow setting GENSYMBOLS_LEVEL from the environment. Needed when
    building with llvm to work around #986746

 -- Luca Boccassi <email address hidden>  Sat, 01 Jun 2024 12:30:39 +0100

systemd (256~rc3-6) unstable; urgency=medium

  * NEWS: clarify tmpfiles.d entry (Closes: #1072155)
  * Override false positive Lintian warning
  * Add workaround for links to legacy /usr/share/systemd/tmp.mount
    placeholder. Some users apparently link to the placeholder in
    /usr/share/ so delete any such links, given we don't ship it anymore
    (Closes: #1072187)

 -- Luca Boccassi <email address hidden>  Thu, 30 May 2024 18:11:19 +0100

systemd (256~rc3-5) unstable; urgency=medium

  * homed: fixup pam-auth-update file via trigger pam-auth-update assumes
    nothing comes after a password module, but this is not true for
    pam_systemd_home, which is a no-op for users not managed by homed.
    Fixup common-password accordingly, using a trigger watching for pam-
    auth-update files being installed.

 -- Luca Boccassi <email address hidden>  Wed, 29 May 2024 01:04:53 +0100

systemd (256~rc3-4) unstable; urgency=medium

  * autopkgtest: take into account compat tmp.conf in tmpfiles.d test.
  * Backport patch to fix TEST-64-UDEV-STORAGE autopkgtest.

 -- Luca Boccassi <email address hidden>  Tue, 28 May 2024 12:11:36 +0100

systemd (256~rc3-3) unstable; urgency=medium

  [ Zbigniew Jędrzejewski-Szmek ]
  * tests/boot-and-services: don't wait for systemd-tmpfiles-clean.service
    to finish. It's a oneshot service, so the 'start' call above is
    effectively synchronous.
  * test/boot-and-services: use pidof instead of ps -C

  [ Chris Hofstaedtler ]
  * autopkgtest: install open-iscsi and tgt for upstream suite

  [ Gioele Barabucci ]
  * d/libnss-mymachines.nss: Install before `resolve` and `dns`. Installing
    `mymachines` before `dns` and `resolve` (whatever comes first) is
    suggested in the manpage. It also avoids leaking information about
    local machines to the DNS resolver. (Closes: #825438, #851314)
  * d/libnss-myhostname.nss: Install after `files`

  [ Luca Boccassi ]
  * Drop /bin/systemd legacy symlink. The systemd binary should not be in
    the default PATH. This symlink was created due to some old
    documentation (long since corrected) suggesting to use
    init=/bin/systemd to test switching to systemd. (Closes: #913061)
  * initramfs: call udevadm settle before control --exit to ensure workers
    have stopped. Otherwise there might be lock files left under /run/
    which will break 'nuke' and cause the boot to fail. (Closes: #1056564)
  * Restore open files limit bump on boot. Broken packages ought to have
    been fixed by now. (Closes: #1029152)
  * Set default core limit to 0 via PAM for users. Otherwise it only
    applies to services.
  * Cleanup /var/tmp/ and /tmp/ on a timer by default. Remove the
    downstream patch and restore the upstream behaviour set by the
    tmpfiles.d which is to cleanup /var/tmp/ once a month and /tmp/ once
    every 10 days. Can be overridden via: touch /etc/tmpfiles.d/tmp.conf
    (Closes: #966621)
  * Make /tmp/ a tmpfs by default. Restore the upstream default and make
    /tmp/ a tmpfs. Can be overridden with: touch
    /etc/systemd/system/tmp.mount or: systemctl mask tmp.mount
  * Drop out-of-tree /run/lock patch and use a mount unit and tmpfiles.d
    instead. Only lvm2 and open-iscsi have mentions of /run/lock and an
    early-boot unit, so it's trivial to add ordering in those units
    instead of maintaining an out-of-tree patch.
  * homed: use standalone pam config file instead of pam-auth-config
    pam_unix.so assumes that if anything comes before it then the password
    has already been queried for sure. This doesn't work for homed, so
    passwd breaks. pam-auth-config has this hard-coded assumption and it
    cannot be disabled. Use an upstream standard pam config file instead.
    (Closes: #1056166)
  * NEWS: note recent changes

 -- Luca Boccassi <email address hidden>  Tue, 28 May 2024 00:07:57 +0100

systemd (256~rc3-2) unstable; urgency=medium

  * autopkgtest: do not install gdm3 on riscv64 tests. gnome-shell hasn't
    built since last year for riscv64 due to #1058687 so the test fails as
    it cannot be installed, skip it like on s390x.

 -- Luca Boccassi <email address hidden>  Thu, 23 May 2024 16:31:42 +0100

systemd (256~rc3-1) unstable; urgency=medium

  * Bump Breaks on dracut, on request of the maintainer (Closes: #1071278)
  * autopkgtest: reboot before logind test
  * Disable D-Bus introspection XML generation with nodoc profile
  * autopkgtest: install systemd-dev for upstream suite too
  * New upstream version 256~rc3
  * Drop patches merged upstream

 -- Luca Boccassi <email address hidden>  Wed, 22 May 2024 23:24:02 +0100

systemd (256~rc2-3) unstable; urgency=medium

  * Explicitly enable systemd-boot only on supported architectures

 -- Luca Boccassi <email address hidden>  Thu, 16 May 2024 22:51:08 +0100

systemd (256~rc2-2) unstable; urgency=medium

  * Build depend on dh-dlopenlibdeps and dynamically generate dlopen
    dependencies
  * Backport patches to fix journald asserts Compress=yes (Closes:
    #1071201)

 -- Luca Boccassi <email address hidden>  Thu, 16 May 2024 17:40:43 +0100

systemd (256~rc2-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * report-bug: add presubj template to recommend opening functionality
    bugs upstream first
  * report-bug: include runtime taints
  * Recommend libzstd1 and suggest liblz4-1, liblzma5, libgcrypt20
  * autopkgtest: install polkitd in upstream suite
  * Build depend on rsync or meson >= 1.3.0 for follow-symlink workaround.
  * Change links from freedesktop.org to systemd.io (Closes: #1070499)
  * Add dependency on python3-psutil to systemd-tests, needed by networkd
    test suite
  * d/t/boot-and-services: drop tmp check. LXC now sets up a tmpfs on /tmp
    as per upstream recommendation, so we cannot detect it via fstab
    anymore. Just drop this test, as we are about to make /tmp a tmpfs
    ourselves anyway.
  * Set SBAT distro URL to tracker.d.o as suggested by EFI team
  * Drop out-of-tree coredump patch and use config drop-ins instead. As
    per: https://github.com/systemd/systemd/pull/27066 instead of carrying
    an out-of-tree patch, use drop-ins to set the default pattern to
    'core' and the default core limit to '0' in the systemd package, and a
    higher priority drop-in to set the default core limit to 'infinity' in
    the systemd-coredump package (it already ships a sysctl to set the
    pattern). The end result is the same, but with config drop-ins instead
    of patches.
  * Drop out-of-tree fsckd daemon patch. This was dropped upstream long
    ago, and Plymouth on Debian doesn't actually use this. A different
    upstream change provides the required functionality.
  * Drop out-of-tree systemctl scheduled shutdown fallback. This patch was
    rejected upstream and there's no path to have it merged, so drop it
    and restore the default behaviour in case of error.
  * Drop out-of-tree fsck skip patch and use drop-in instead. Non-root
    filesystems are only checked when mounted, so the other change is not
    needed. The root one can be fixed with a drop-in instead of a patch.
  * d/t/control: explicitly depend on systemd-dev for tests that run pkg-
    config
  * systemd.postinst: use DPKG_ROOT in one more place.
  * NEWS: note scheduled shutdown failure case changes
  * New upstream version 256~rc2
  * Drop patches merged upstream
  * Refresh patches for v256~rc2
  * Install new files from v256~rc2
  * Drop Lintian overrides for false positives that have been fixed
  * Upload to unstable

  [ Michael Marley ]
  * Use absolute path when including libkmod in initramfs. The relative
    path works fine when the hook is executed during a normal APT
    install/update, but if the user runs "update-initramfs -u" from any
    directory other than /, the relative path doesn't match anything,
    libkmod is not included, and the system fails to boot due to not
    loading the storage driver(s).

  [ Michael Biebl ]
  * Stop setting the build system explicitly. No longer necessary since
    https://github.com/systemd/systemd/pull/31530
  * Remove systemd-dev dependency from systemd and udev. This was a
    temporary measure to ease the migration.

 -- Luca Boccassi <email address hidden>  Wed, 15 May 2024 00:40:56 +0100

systemd (256~rc1-1~exp2) experimental; urgency=medium

  * Backport patch to fix test-build-path on RISC-V/MIPS
  * Backport patch to fix build reproducibility
  * Backport patch to fix BPF build on s390x

 -- Luca Boccassi <email address hidden>  Sat, 27 Apr 2024 18:14:25 +0100

systemd (256~rc1-1~exp) experimental; urgency=medium

  * d/watch: switch to main repository
  * New upstream version 256~rc1
  * Drop Downgrade-a-couple-of-warnings-to-debug.patch. It is time to
    start noticeably warning about these legacy setups
  * Refresh patches for v256
  * Build depend on libarchive-dev
  * Install new tools, units and manpages
  * Enable bpf and new nsresourced/mountfsd services. Requires vmlinux.h
    from linux-headers-$ARCH, disable if not found
  * Backport patch to fix unit test failure in build environment
  * Update libsystemd symbols file
  * Update Lintian overrides

 -- Luca Boccassi <email address hidden>  Fri, 26 Apr 2024 12:22:04 +0100

systemd (255.5-1) sid; urgency=medium

  [ Michael Biebl ]
  * autopkgtest: depend on pkgconf rather than pkg-config
  * Stop setting default-hierarchy to unified explicitly. It is already
    the default and the meson option has been deprecated and is expected
    to be removed in a future release. See https://github.com/systemd/syst
    emd/commit/31323f21bb0ae7c712f43500c42997c91a6d20bf
  * Replace Skip-flaky-test_resolved_domain_restricted_dns-in-
    network.patch with a proper upstream fix.
  * Remove myself from Uploaders

  [ Luca Boccassi ]
  * autopkgtest: add dhcpcd5 as alternative dependency to dhcpcd-base
    dhcpcd-base is not available in Jammy
  * d/e/checkout-upstream: stop overriding sshconfdir. It actually works
    after some upstream test fixes, and it is necessary for TEST-46-HOMED
    to work
  * autopkgtest: install systemd-resolved for all suites. Necessary to
    avoid breaking the network on Ubuntu, in the upstream jammy-based CI
    jobs. Can be dropped once jammy is no longer tested.
  * autopkgtest: add breaks-testbed to more tests. Given resolved is
    installed, the testbed needs to be reset to switch back to the default
    network stack, otherwise installing packages in the salsa-ci
    autopkgtest job fails
  * autopkgtest: restrict systemd-boot-efi to architectures where it's
    built
  * Enable libpwquality support. Suggest it from systemd (used by
    firstboot and cryptenroll) and depend on it from homed (user creation
    is a core part of it). It's a dlopen() dependency. (Closes: #1063391)
  * d/e/checkout-upstream: do not initialize submodules. They are used by
    mkosi, not needed for CI builds
  * Autopkgtest: add dependency on libkmod-dev to upstream suite.
  * Switch build-depend form liblz4-tool to lz4. The former is deprecated
    and now dropped, the latter is available since buster. (Closes: #1068730)
  * initramfs hooks: pull in libkmod manually udev now opens it with
    dlopen, so the ldd-based resolver will not see it, pull it in the
    initramfs manually
  * New upstream version 255.5
  * Drop resolve-skip-IP_UNICAST_IF-for-local-sockets.patch, merged
    upstream
  * Refresh patches for v255.5
  * Bump Standards-Version to 4.7.0, no changes

  [ Daan De Meyer ]
  * Build in developer mode when building for upstream. Developer mode
    enables some helpful debugging options and enables various
    experimental components such as systemd-vmspawn which we want to be
    enabled when testing upstream.

 -- Luca Boccassi <email address hidden>  Wed, 24 Apr 2024 16:34:40 +0100

systemd (255.4-1) sid; urgency=medium

  [ Luca Boccassi ]
  * Drop override for deprecated package-supports-alternative-init-but-no-
    init.d-script warning
  * Build-depend on pkgconf pkg-config is deprecated
  * Move kernel-install initrd script to slightly later prefix
    afea8e1a35e15382977d459241e8c56c180c862d moved it from 85 to 50, but
    this conflicts with the upstream mkosi job, which also runs at 50 and
    needs to run first. Move it back up slightly to 55 to fix the mkosi
    builds, eg: https://github.com/systemd/systemd-
    stable/actions/runs/7863691120/job/21454589626?pr=366
  * Mark python3-pefile build dependency as native. As suggested in
    #1063393
  * Skip python3-pefile build dependency only if both nocheck and
    noinsttests are set (Closes: #1063393)
  * Build with -Dtests=false if nocheck and noinsttest profiles are set.
    The required build dependencies will not be installed, so the tests
    won't build.
  * systemd-binfmt: use restart instead of try-restart on upgrade. It's
    not a long-running service so it doesn't matter, and it fixes
    installing a new binfmt provider (Closes: #1061960)
  * d/e/checkout-upstream: do not rebase when building on systemd-stable
    repo. We do rebase only pulls in the stable repo, and it's too much
    hassle to figure out the right parent branch, given the webhook is
    configured per repository rather than per branch, so just skip it
  * d/e/checkout-upstream: build with default-timeout-sec=180. Helps with
    slow daemon-reload on some CI runs. As requested by:
    https://github.com/systemd/systemd/pull/27182
  * d/e/checkout-upstream: enable log-trace by default. Its abscence
    appears to cause TEST-10-ISSUE-2467 to reliably fail. Enable it while
    we figure it out. Also probably it is helpful to have it always turned
    on for the CI, to get more info out of test runs. See:
    https://github.com/systemd/systemd/issues/19154
  * d/e/checkout-upstream: do not install userdbd sshd config drop-in.
    Breaks booting testbed in Jammy. Can be dropped after rebasing to
    Noble.
  * d/t/upstream: add dependencies on openssh, gnutls-bin, opensc and
    softhsm2. Required for https://github.com/systemd/systemd/pull/28658
    and https://github.com/systemd/systemd/pull/30777
  * d/t/upstream: fix shellcheck warning. SC2086 (info): Double quote to
    prevent globbing and word splitting.
  * Add dependency on libkmod2 on udev, and suggestion on systemd dlopen()
    dependency since https://github.com/systemd/systemd/pull/31131 but the
    system can't boot without it, so add it as a dependency on udev which
    is also needed outside of containers
  * Update tzdata build dependency constraint to 2024a-1
  * Drop libarchive-dev build dependency. Not useful for now, we'll re-add
    it after the next release
  * New upstream version 255.4
  * Drop patches merged upstream

  [ Daan De Meyer ]
  * Fix libtss2-mu dependency. This package recently changed name so let's
    update the Suggests to account for that.
  * Add Suggests for libtss2-tcti-device systemd wants to use this library
    when tpm2 support is enabled so let's make sure we list it in
    Suggests. (https://github.com/systemd/systemd/blob/db11bab38ccf1ed257f
    310d29070843d4c58ea01/meson.build#L1341)
  * Make sure awk only matches PROJECT|PACKAGE_VERSION
  * Use DEB_BUILD_MAINT_OPTIONS instead of meson options.
  * Don't put debian revision in version tag when building for upstream.
  * Allow users to configure DH_MISSING.

  [ Frantisek Sumsal ]
  * d/t/storage: ignore credential mounts when checking /proc/mounts.

  [ Daniel P. Berrangé ]
  * debian/rules: don't override default telinit-path. The 'telinit-path'
    meson option is to be used to point to a non-systemd telinit binary
    path. When systemctl is invoked as 'telinit', it will exec this binary
    when it detects the current environment is not running under systemd.
    If 'telinit-path' points back to 'systemctl', that would result in an
    infinite re-execve() loop. (Closes: #1063147)

 -- Luca Boccassi <email address hidden>  Tue, 27 Feb 2024 17:43:55 +0000

systemd (252.22-1~deb12u1) bookworm; urgency=medium

  * d/t/control: add dependency on stress for upstream suite. Needed by
    TEST-55-OOMD
  * New upstream version 252.22
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Fri, 26 Jan 2024 21:48:36 +0000

systemd (255.3-2) sid; urgency=medium

  * Backport patches to fix reproducibility issues
  * Salsa: re-enable reprotest

 -- Luca Boccassi <email address hidden>  Mon, 29 Jan 2024 10:46:19 +0000

systemd (255.3-1) sid; urgency=medium

  * New upstream version 255.3
  * Drop patches merged upstream
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Wed, 24 Jan 2024 20:03:15 +0000

systemd (255.2-4) sid; urgency=medium

  * autopkgtest: add btrfs-progs Depends to upstream suite.
    Required by TEST-83-BTRFS and testcase_btrfs_basic from
    TEST-64-UDEV-STORAGE.
  * Revert "test: deny-list TEST-13-NSPAWN"
    This reverts commit df8e5367aca20e0c75c9c91f826d22d8a0f7e36d.
  * autopkgtest: add multipath-tools and kpartx Depends to upstream suite.
    Required by testcase_multipath_basic_failover from TEST-64-UDEV-STORAGE.
  * test: install correct kpartx udev rules on Debian

 -- Michael Biebl <email address hidden>  Sat, 06 Jan 2024 16:21:03 +0100

systemd (255.2-3) sid; urgency=medium

  * Cherry-pick fixes for upstream integration tests.
    Fixes TEST-07-PID1, TEST-08-INITRD (skip), TEST-26-SYSTEMCTL and
    TEST-75-RESOLVED.
  * Add explicit Build-Depends on debhelper (>= 13.11.6)
    This ensures we have a recent enough version of dh_installsystemd that
    supports service files in /usr/lib/.
  * test: deny-list TEST-13-NSPAWN.
    The default ram size of 1024M for qemu virt is not sufficient
    to make the test pass reliably on Debian sid/trixie.
    Disable the test for now until this has been addressed in debci:
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059840

 -- Michael Biebl <email address hidden>  Tue, 02 Jan 2024 11:44:49 +0100

systemd (255.2-2) unstable; urgency=medium

  * udev: mips does not install dmi_memory_id and its rules

 -- Luca Boccassi <email address hidden>  Sun, 24 Dec 2023 14:25:27 +0100

systemd (255.2-1) unstable; urgency=medium

  * New upstream version 255.2
  * Drop resolved-actually-check-authenticated-flag-of-SOA-transac.patch,
    merged upstream

 -- Luca Boccassi <email address hidden>  Sun, 24 Dec 2023 11:26:42 +0100

systemd (255.1-2) experimental; urgency=medium

  [ Michael Biebl ]
  * Upgrade the Breaks to Conflicts for the systemd-ukify package split.
    This avoids potential loss of the /usr/lib/systemd/ukify compat symlink
    for upgrades from bookworm-backports.
  * Update package description of libnss-myhostname to use the correct IPv4
    address (Closes: #1057953)
  * resolved: actually check authenticated flag of SOA transaction.
    Patch cherry-picked from upstream Git.
    CVE-2023-7008 (Closes: #1059278)
  * Explicitly disable ukify for stage1 builds
  * Enable dh-exec for systemd.manpages and udev.install.
    This enables files to be installed specific to certain architectures or
    build profiles. Unfortunately for systemd.manpages this requires to add a
    debian/tmp/ prefix to all files.
    See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053834#46
  * Restrict pcr/tpm2 related files to UEFI architectures.
    Mirrors the python3-pyelftools [amd64 i386 arm64 armhf riscv64]
    Build-Depends.
  * Install dmi_memory_id and its udev rules file only on dmi architectures.
  * Fix stage1 profile build

  [ Helmut Grohne ]
  * Restore diverted symlinks in systemd-sysv.postinst that may have been lost
    due to /usr-merge (Closes: #1057220)

 -- Michael Biebl <email address hidden>  Sun, 24 Dec 2023 00:52:15 +0100

systemd (255.1-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * Drop pkgconfig-keep-unmerged-paths-for-udevdir.patch, no longer needed
  * New upstream version 255.1
  * Refresh patches

  [ Michael Biebl ]
  * autopkgtest: install systemd-boot-efi for upstream suite.
    TEST-70-TPM2 (specifically test/units/testsuite-70.pcrlock.sh) requires
    the EFI stub files from /usr/lib/systemd/boot/efi/.
  * test: skip tests for unsupported localectl features.
    Update the upstream test suite to skip tests for unsupported localectl
    features in Debian. Fixes TEST-73-LOCALE.
    Thanks to Nick Rosbrook
  * Update symbol versions for the final 255 release
  * Install systemd and udev files explicitly without duplicates.
    Stop making systemd and udev "catch-all" packages and removing duplicate
    files in debian/rules by compiling a list of files that are installed by
    other systemd binary packages. This approach no longer works reliably
    if we have arch "all" binary packages and we do a partial type "any" build.
    Instead, list all files that are installed in systemd and udev
    explicitly in .install and .manpages.
  * Mark usr/lib/sysctl.d/50-pid-max.conf as arch specific.
    It's only installed by Meson if cc.sizeof('long') > 4.
    See https://wiki.debian.org/ArchitectureSpecificsMemo
  * Fix arch "all" builds.
    Files handled by debian/rules and dh-exec are not understood by
    dh_missing. So mark those as not-installed.
    See man dh_missing and
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831786
  * Install standalone binaries using dh-exec
  * Print empty directories
    dh_missing will not fail on uninstalled (empty) directories.
    So show them during build as it makes it easier to spot if all of them
    are handled.
  * Split ukify into a separate package named systemd-ukify.
    The main motivation for splitting the tool (and its kernel-install
    integration) into a separate package is the dependency on python3 and
    python3-pefile, which are not suitable dependencies for the main systemd
    package. (Closes: #1051981)
  * Make the Conflicts against bfh-container and progress-linux-container
    versioned

  [ Nick Rosbrook ]
  * debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE.
    This ensures that testcase_mdadm_lvm in TEST-64-UDEV-STORAGE will run.
  * debian/tests/upstream: drop blacklist support.
    Upstream has been using deny-list-ubuntu-ci, rather than
    blacklist-ubuntu-ci, for a while now. In Ubuntu, we use the
    deny-list-upstream-ci convention too. Hence, it seems we can drop
    support for the blacklist version.

 -- Michael Biebl <email address hidden>  Wed, 20 Dec 2023 17:54:00 +0100

systemd (255-1) unstable; urgency=medium

  * New upstream version 255. For a full list of changes, see:
    https://github.com/systemd/systemd/releases/tag/v255
  * Drop seccomp patches, merged upstream

 -- Luca Boccassi <email address hidden>  Wed, 06 Dec 2023 21:24:09 +0000

systemd (252.19-1~deb12u1) bookworm; urgency=medium

  * New upstream version 252.19
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Fri, 10 Nov 2023 00:25:41 +0000

systemd (255~rc4-2) unstable; urgency=medium

  * Backport patches to fix seccomp issues on armhf/armel/ppc64el

 -- Luca Boccassi <email address hidden>  Mon, 04 Dec 2023 16:56:42 +0000

systemd (255~rc4-1) unstable; urgency=medium

  * New upstream version 255~rc4

 -- Luca Boccassi <email address hidden>  Sat, 02 Dec 2023 02:16:07 +0000

systemd (255~rc3-3) unstable; urgency=medium

  [ Oxan van Leeuwen ]
  * Move kernel-install initrd script to earlier prefix. From systemd v255
    onwards, the 60-ukify.install script automatically uses initrd files
    that are present in the staging area. Move the initrd script to run
    earlier, so that ukify can use the initrd. The only third-party
    kernel-install script present in the Debian archive is
    40-dkms.install, so it is not impacted by this change. Both dracut and
    mkinitcpio upstream also ship their script with priority 50.

  [ Luca Boccassi ]
  * systemd.pc: point unit install directory to /usr/lib/systemd/system/

 -- Luca Boccassi <email address hidden>  Thu, 30 Nov 2023 21:09:08 +0000

systemd (255~rc3-2) unstable; urgency=medium

  * systemd: ignore '_systemctl kill' failures in postinst

 -- Luca Boccassi <email address hidden>  Wed, 22 Nov 2023 22:23:49 +0000

systemd (255~rc2-3) unstable; urgency=medium

  [ Michael Biebl ]
  * Use canonical paths for scripts in debian/extra. Update scripts for
    udev-udeb, initramfs-tools integration scripts and dhclient hook
    script to use the new canonical paths in /usr.

  [ Luca Boccassi ]
  * Bump conflict with molly-guard to 0.8.2. The previous workarounds are
    not enough, so a new upload will be needed. (Closes: #1056292)
  * Backport patches to fix FTBFS on hppa and x32

 -- Luca Boccassi <email address hidden>  Mon, 20 Nov 2023 20:58:27 +0000

systemd (255~rc2-2) unstable; urgency=medium

  * Add versioned Breaks against dracut.
    The introduction of systemd-executor in v255 breaks the initrd that is
    generated by dracut. Without systemd-executor, a systemd based initrd
    will fail to boot. The dracut package needs to be updated to include
    this new binary. (Closes: #1056108)

 -- Michael Biebl <email address hidden>  Sat, 18 Nov 2023 22:02:39 +0100

systemd (255~rc2-1) unstable; urgency=medium

  [ Matthias Geiger ]
  * Bump version number for udev.postinst and udev.maintscript
  * Fix udev.postinst to preserve the enablement of the init script. When
    transferring ownership of the udev init script to sysvinit, the
    service was disabled as it didn't check for enablement before calling
    update-rc.d. Thanks to Mark Hindley for the original fix. (Closes:
    #1053301)

  [ Luca Boccassi ]
  * New upstream version 255~rc2
  * Drop fix-build-without-SBAT_DISTRO.patch, merged upstream
  * Refresh patches
  * Upload to unstable

 -- Luca Boccassi <email address hidden>  Wed, 15 Nov 2023 17:10:26 +0000

systemd (255~rc1-4) experimental; urgency=medium

  * Add version to Conflict with molly-guard
  * Move systemd-hwdb-update.service to udev package. Commit a12cf5d187cb
    in 249-1 removed systemd-hwdb-update.service from udev, and 254.4-1
    re-added it in systemd, so move it back to udev. (Closes: #1055863)

 -- Luca Boccassi <email address hidden>  Mon, 13 Nov 2023 13:51:12 +0000

systemd (255~rc1-3) experimental; urgency=medium

  * Do not ship repart.standalone and shutdown.standalone
  * /usr/lib/sysvinit/telinit was dropped long ago, use /usr/sbin/telinit
  * Add Suggests: libip4tc2 as it is now dlopen'ed
  * Drop rc/rcS masking, no longer necessary
  * Add Conflicts to avoid issues due to DEP17P3. libpam-elogind-compat,
    opensysusers, bfh-container, molly-guard, and progress-linux-container
    divert files from our packages, so DEP17P3 is triggered. Add
    unversioned conflicts until those diversions are updated according to
    DEP17M18, and then we can make the conflicts versioned. (Closes:
    #1055485)

 -- Luca Boccassi <email address hidden>  Tue, 07 Nov 2023 15:17:12 +0000

systemd (255~rc1-2) experimental; urgency=medium

  * Build-depend on python3-pefile on all architectures ukify
  * meson: use enabled/disabled instead of true/false for 'feature'
    options
  * meson: use canonical paths for configured tools too

 -- Luca Boccassi <email address hidden>  Mon, 06 Nov 2023 22:36:23 +0000

systemd (247.3-7+deb11u4) bullseye; urgency=medium

  * backport patches to fix a calendar spec calculation hang on DST change
    if TZ=Europe/Dublin (Closes: #1033540)

 -- Luca Boccassi <email address hidden>  Sun, 18 Jun 2023 15:55:54 +0100

systemd (252.17-1~deb12u1) bookworm; urgency=medium

  * New upstream version 252.17. Fixes minor security issue in arm64
    and riscv64 systemd-boot (EFI) with device tree blobs loading:
    https://github.com/systemd/systemd/security/advisories/GHSA-6m6p-rjcq-334c

 -- Luca Boccassi <email address hidden>  Wed, 20 Sep 2023 13:15:14 +0100

systemd (254.5-1) unstable; urgency=medium

  * New upstream version 254.5
  * Refresh patches for 254.5

 -- Luca Boccassi <email address hidden>  Sat, 30 Sep 2023 11:34:39 +0100

systemd (254.4-1) unstable; urgency=medium

  [ Michael Biebl ]
  * Fix installation of tzdata-legacy. Apply a version constraint to the
    tzdata alternative. Specifically (<< 2023c-8), which is the version
    tzdata was split. Otherwise tzdata-legacy is not considered, as tzdata
    is installed by default. (Closes: #1051760)
  * Drop obsolete Breaks/Replaces and migration code for versions older
    than oldstable
  * Drop -f from update-rc.d udev remove

  [ Luca Boccassi ]
  * upstream-ci: run unit tests from installed location. (Closes: #1051756)
  * New upstream version 254.4. Fixes minor security issue in arm64
    and riscv64 systemd-boot (EFI) with device tree blobs loading:
    https://github.com/systemd/systemd/security/advisories/GHSA-6m6p-rjcq-334c
  * Refresh patches
  * Install factory-reset related units

  [ Gioele Barabucci ]
  * debian/udev.debian-udev.sysusers: Add Debian-specific sysusers for
    udev
  * d/udev.postinst: Do not use addgroup to add udev-related groups
  * d/control: Remove adduser, it is no longer needed now that all
    udev-related groups are generated via `sd-sysusers`.

 -- Luca Boccassi <email address hidden>  Thu, 21 Sep 2023 11:13:06 +0100

systemd (254.3-1) unstable; urgency=medium

  [ Daniel Andersson ]
  * Add systemd-sysupdate.

  [ Luca Boccassi ]
  * New upstream version 254.2
  * Refresh patches for 254.2
  * New upstream version 254.3

  [ Michael Biebl ]
  * Remove obsolete SysV init script. Keep the udev alias for one more
    release cycle.
  * Use dh_installsystemd to handle systemd-udevd.service. This allows us
    to drop a lot of custom maintscript code. Fix the formatting of the
    udev maintscript code while at it.
  * Add Conflicts against initscripts and orphan-sysvinit-scripts. Those
    packages have undesirable side effects if systemd is the active init
    system so ensure they can't be installed.

 -- Luca Boccassi <email address hidden>  Mon, 11 Sep 2023 09:11:51 +0100

systemd (254.1-3) unstable; urgency=medium

  [ Nick Rosbrook ]
  * debian: ship libsystemd.a in libsystemd-dev.
    Thanks to Serge Hallyn
  * autopkgtest: add build test for static libsystemd
  * debian/rules: build with -ffat-lto-objects.
    Building with -flto=auto, but without -ffat-lto-objects, causes static
    archives to end up without any code sections. This is needed to ship a
    usable libsystemd.a in libsystemd-dev.
    See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977596.

  [ Luca Boccassi ]
  * Backport patch to fix test-path failure on Salsa CI

  [ Michael Biebl ]
  * Ask before attaching the udev db information to the bug report
    (Closes: #1041652)
  * Install D-Bus interface files in systemd-dev.
    Now that we have a dedicated -dev package, use that to install
    /usr/share/dbus-1/interfaces.
  * Clean up a couple more __pycache__ directories
  * Remove workarounds for dh_installman.
    No longer needed as stable ships a fixed debhelper.
  * Remove all empty directories from (/usr)/lib.
    This mitigates the accidental empty directory removal by dpkg on
    merged-/usr systems. (Closes: #1036920)
  * Remove no longer needed maintainer scripts migration code for versions
    older then oldstable
  * Revert "Add workaround for Meson regression to fix FTBFS on mips64el"
    This reverts commit 97ebdcea6d0ce52973dd5a9cfeede1573a628bd0.
    No longer needed as a fixed meson package is available now.

 -- Michael Biebl <email address hidden>  Fri, 25 Aug 2023 12:04:10 +0200

systemd (254.1-2) unstable; urgency=medium

  * Build-depend on tzdata-legacy | tzdata. Some timezones were split out,
    but some unit tests need them, so pull in the new tzdata-legacy
    package if it exists.

 -- Luca Boccassi <email address hidden>  Thu, 10 Aug 2023 23:31:48 +0100

systemd (254-1) unstable; urgency=medium

  * New upstream version 254
  * Drop patches merged upstream
  * d/watch: switch back to stable repository
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Fri, 28 Jul 2023 10:01:15 +0100

systemd (254~rc3-3) unstable; urgency=low

  * Backport patch to fix FTBFS on armhf
  * Add workaround for Meson regression to fix FTBFS on mips64el

 -- Luca Boccassi <email address hidden>  Mon, 24 Jul 2023 20:50:48 +0100

systemd (254~rc3-2) unstable; urgency=medium

  * ukify: enable only on UEFI architectures.

 -- Luca Boccassi <email address hidden>  Mon, 24 Jul 2023 16:55:57 +0100

systemd (254~rc3-1) unstable; urgency=low

  * Drop Suggests on transitional policykit-1 package
  * Drop autopkgtest dependency on transitional policykit-1 package
  * Ship ukify in systemd package (Closes: #1041399)
  * New upstream version 254~rc3 (Closes: #1041648, #1041540)
  * Drop patches merged upstream
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Mon, 24 Jul 2023 12:59:37 +0100

systemd (252.12-1~deb12u1) bookworm; urgency=medium

  * New upstream version 252.12
  * Refresh patches for v252.12

 -- Luca Boccassi <email address hidden>  Mon, 10 Jul 2023 22:44:35 +0100

systemd (254~rc2-3) unstable; urgency=low

  * Upload to unstable

 -- Luca Boccassi <email address hidden>  Sun, 16 Jul 2023 11:37:22 +0100

systemd (254~rc2-2) experimental; urgency=medium

  * Backport two more mips64 fixes from upstream

 -- Luca Boccassi <email address hidden>  Sat, 15 Jul 2023 15:07:20 +0100

systemd (254~rc2-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * Bump dependency on Meson to 0.60
  * upstream-ci: install libdw and libelf for boot-and-services too.
  * upstream-ci: add libssl-dev to autopkgtest upstream suite.
  * upstream-ci: add nftables.
  * upstream-ci: add 'stress' to the upstream testsuite dependency list.
  * tests/upstream: install curl.
  * tests/upstream: bump timeout by 10 minutes.
  * New upstream version 254~rc2
  * Drop patches merged upstream
  * Refresh patches for v254-rc2

  [ Yu Watanabe ]
  * autopkgtest: create directory to make accounts-daemon.service not
    fail. The service requires /usr/share/accountsservice/interfaces, but
    the directory is not packaged (at least in 22.08.8-6). This adds a
    workaround for the failure.

 -- Luca Boccassi <email address hidden>  Sat, 15 Jul 2023 01:29:39 +0100

systemd (254~rc1-4) experimental; urgency=medium

  * Backport patches to fix FTBFS on mipsel, ia64, x32
  * d/rules: explicitly disable EFI on x32. On x32 the cpu architecture is
    just x86_64 so EFI will be enabled, and it will fail to build as
    userland doesn't support building the EFI ABI. Disable it explicitly,
    and leave it on 'auto' elsewhere.

 -- Luca Boccassi <email address hidden>  Sun, 09 Jul 2023 15:13:53 +0100

systemd (254~rc1-3) experimental; urgency=medium

  * Restrict pyelftools to UEFI-enabled architectures and drop explicit
    meson settings.

 -- Luca Boccassi <email address hidden>  Sat, 08 Jul 2023 00:40:33 +0100

systemd (254~rc1-2) experimental; urgency=medium

  * Backport patch to fix fuzz test without cgroup access. Fix build on
    buildds https://github.com/systemd/systemd/pull/28303

 -- Luca Boccassi <email address hidden>  Fri, 07 Jul 2023 22:55:16 +0100

systemd (254~rc1-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * d/watch: watch main repository
  * New upstream version 254~rc1
  * Refresh patches for v254-rc1
  * Drop build dependency on gnu-efi and add python3-pyelftools. Move to
    !stage1 given it's external python modules
  * Install new libsystemd.3 manpage
  * Install new mount.ddi alias for sd-dissect
  * Update symbols file for 254
  * Update Lintian overrides for systemd-tests
  * autopkgtest: find test-udev in new location.

  [ Zbigniew Jędrzejewski-Szmek ]
  * autopkgtest: drop 'udev' test
    https://github.com/systemd/systemd/pull/27534 makes it into a normal
    unit test, so it will be invoked as part of 'upstream'.

 -- Luca Boccassi <email address hidden>  Fri, 07 Jul 2023 11:05:37 +0100

systemd (253.5-1) unstable; urgency=medium

  * New upstream version 253.5 (Closes: #1040035)
  * Refresh patches for 253.5

 -- Luca Boccassi <email address hidden>  Sat, 01 Jul 2023 11:57:46 +0100

systemd (253-4) unstable; urgency=medium

  * Stop localed from writing to /etc/default/keyboard and symlink it to
    /etc/vconsole.conf. Integration is not set up for now, but GDM needs
    to query the configured values. Allow reading, but disallow setting
    keymaps. (Closes: #1038762)

 -- Luca Boccassi <email address hidden>  Sat, 24 Jun 2023 20:21:24 +0100

systemd (253-3) unstable; urgency=medium

  * systemd-dev: add missing breaks/replaces with udev. (Closes: #1037924)
  * Run the systemd-binfmt trigger unconditionally.
  * Upload to unstable.

 -- Luca Boccassi <email address hidden>  Tue, 20 Jun 2023 11:45:22 +0100

systemd (253-2) experimental; urgency=medium

  * Add systemd-dev package for pkg-config files. Move systemd.pc and
    udev.pc to systemd-dev, so that packages can build-depend on a small
    package instead of the whole set of binaries. (Closes: #945922,
    #917549)

 -- Luca Boccassi <email address hidden>  Mon, 12 Jun 2023 00:22:52 +0100

systemd (252.11-1) unstable; urgency=medium

  * New upstream version 252.11
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Sun, 11 Jun 2023 23:05:40 +0100

systemd (247.3-7+deb11u2) bullseye; urgency=medium

  [ Michael Biebl ]
  * ata_id: fix getting Response Code from SCSI Sense Data.
    (Closes: #1021579)
  * logind: fix getting property OnExternalPower via D-Bus (Closes:
    #1021644)

  [ Luca Boccassi ]
  * Backport patch to fix CVE-2022-4415 (Closes: #1026831)
  * Backport patch to fix CVE-2022-3821
  * Backport patch to fix crash in systemd-machined (Closes: #1023567)

 -- Luca Boccassi <email address hidden>  Thu, 22 Dec 2022 12:55:42 +0100

systemd (252.6-1) unstable; urgency=medium

  * Update timedated autopkgtest. We no longer support /etc/timezone, as
    /etc/localtime is always available (cherry picked from commit
    6ef7bb0ce0f89e732a8b95624af059e52c3712b5)
  * Stop supporting /etc/timezone and just rely on /etc/localtime
  * systemd-boot: update on package upgrade, if installed
  * Override Lintian warning in systemd-coredump
  * d/watch: restrict to v252.x for bookworm
  * New upstream version 252.6
  * Refresh patches
  * systemd-boot: enable on install (Closes: #1031118)

 -- Luca Boccassi <email address hidden>  Tue, 28 Feb 2023 11:15:45 +0000

systemd (253-1) experimental; urgency=medium

  * New upstream version 253. For a full list of changes, see:
    https://github.com/systemd/systemd/releases/tag/v253
  * d/watch: switch back to stable repository.
  * Update symbols file

 -- Luca Boccassi <email address hidden>  Wed, 15 Feb 2023 20:36:32 +0000

systemd (253~rc3-1) experimental; urgency=medium

  * New upstream version 253~rc3
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Fri, 10 Feb 2023 18:23:21 +0000

systemd (253~rc2-1) experimental; urgency=medium

  * New upstream version 253~rc2
  * systemd: make /etc/default/locale a symlink to /etc/locale.conf. Let's
    match upstream's filename and keep a backward-compatibility symlink
    for older tools. The content of the files match anyway.
  * Update timedated autopkgtest. We no longer support /etc/timezone, as
    /etc/localtime is always available
  * Drop patches merged upstream
  * Drop Don-t-enable-audit-by-default.patch. We can disable the socket
    now
  * Drop Use-Debian-specific-config-files.patch, no longer needed
  * systemd-boot-system-token was renamed to systemd-boot-random-seed
  * Add new libsystemd symbols
  * Update Lintian override for new so bump
  * Remove systemd-localed drop-in, no longer needed. The change was
    merged upstream
  * Drop udev-drop-SystemCallArchitectures-native-from-systemd-ude.patch
    and use a drop-in
  * Drop Re-enable-journal-forwarding-to-syslog.patch and use a drop-in
  * Drop TuxOnIce out-of-tree patch. The
    SYSTEMD_BYPASS_HIBERNATION_MEMORY_CHECK environment variable can be
    used to skip the check, so it is no longer necessary to maintain a
    patch.
  * Drop autopkgtest denylist patches. No longer needed, the tests are
    working now
  * Drop Revert-core-set-RLIMIT_CORE-to-unlimited-by-default.patch, we now
    use the unified hierarchy
  * Drop Let-graphical-session-pre.target-be-manually-started.patch, not
    used anymore
  * Refresh patches
  * Do not install repart/shutdown standalone binaries
  * Build with libxen-dev. Buildtime-only dependency, enables support for
    kexec on Xen (via ioctl, so no new runtime dependency).
  * Do not install ukify script for now
  * Update NEWS file
  * locale: disable keymap support
  * d/watch: use main repository
  * Refresh patches

 -- Luca Boccassi <email address hidden>  Wed, 08 Feb 2023 20:36:58 +0000

systemd (252.5-2) unstable; urgency=medium

  * Fix boot-and-services autopkgtest.

 -- Luca Boccassi <email address hidden>  Mon, 30 Jan 2023 01:03:48 +0000

systemd (252.5-1) unstable; urgency=medium

  [ Nick Rosbrook ]
  * debian/tests: remove systemd-fsckd autopkgtest. This test never runs
    in Debian autopkgtest because of missing machine isolation
    requirements, and it nevers runs in Ubuntu because:  SKIP: root file
    system is being checked by initramfs already Since the test is not
    providing any good feedback, and generally has not been maintained,
    let's just remove it.

  [ Luca Boccassi ]
  * New upstream version 252.5
  * Drop patches merged in v252.5
  * Refresh patches
  * Set default status format to 'combined': show both unit name and
    description in logs/boot messages

 -- Luca Boccassi <email address hidden>  Sun, 29 Jan 2023 19:39:28 +0000

systemd (252.4-2) unstable; urgency=medium

  [ Michael Biebl ]
  * Refresh patches
  * Tweak description of systemd and systemd-sysv package.
    Remove redundancy and de-emphasize sysvinit.
  * autopkgtest: add psmsic to upstream suite.
    Needed for the killall binary.
    See https://github.com/systemd/systemd/pull/24569
  * autopkgtest: add xkb-data, locales and locales-all to upstream suite.
    Use locales-all so all necessary locales can be installed into the test
    image without having to generate them on-the-fly.
    See https://github.com/systemd/systemd/pull/23709
  * autopkgtest: prefer knot-dnssecutils over knot-dnsutils for upstream
    suite.
    The kzonecheck utility required by TEST-75-RESOLVED was split out from
    knot-dnsutils into knot-dnssecutils so update the test dependencies
    accordingly. Keep knot-dnsutils as alternative dependency to make
    backports easier.
  * Cherry-pick upstream fixes for TEST-74-AUX-UTILS
  * Cherry-pick upstream fix for TEST-73-LOCALE
  * Skip firstboot --prompt-keymap check in TEST-74-AUX-UTILS.
    This test requires compatible keymaps from kbd which are not available
    in Debian.

  [ Luca Boccassi ]
  * autopkgtest: add netlabel-tools to networkd-test.py suite.
    The netlabelctl tool is needed to test the NetLabel integration.
    See https://github.com/systemd/systemd/pull/23888
  * autopkgtest: add bsdutils to upstream suite.
    The logger utility is now used in TEST-04-JOURNAL.
    See https://github.com/systemd/systemd/pull/23086
  * autopkgtest: add knot, knot-dnsutils, bind9-dnsutils, bind9-host to
    upstream suite.
    Needed by TEST-75-RESOLVED.
    See https://github.com/systemd/systemd/pull/23104
  * autopkgtest: add jq to upstream suite.
    Needed by TEST-58-REPART.
    See https://github.com/systemd/systemd/pull/24572
  * autopkgtest: add mtools to upstream suite.
    Needed by TEST-58-REPART.
    See https://github.com/systemd/systemd/pull/24944
  * autopkgtest: add erofs-utils to upstream suite.
    Needed by TEST-58-REPART.
    See https://github.com/systemd/systemd/pull/25686

 -- Michael Biebl <email address hidden>  Wed, 25 Jan 2023 09:17:24 +0100

systemd (252.4-1) unstable; urgency=medium

  * Enable p11kit. Backport patch to dlopen-ify p11kit support and enable
    it. (Closes: #1023635)
  * New upstream version 252.4. (Closes: #1026831 and fixes CVE-2022-4415)
  * Refresh patches
  * Bump Standards-Version to 4.6.2, no changes

 -- Luca Boccassi <email address hidden>  Thu, 22 Dec 2022 12:26:41 +0100

systemd (252.3-2) unstable; urgency=medium

  * Skip flaky test_resolved_domain_restricted_dns in networkd-test.py.
    This test is part of DnsmasqClientTest and does not work reliably under
    LXC/debci, so skip it for the time being. (Closes: #1025908)

 -- Michael Biebl <email address hidden>  Tue, 13 Dec 2022 01:03:58 +0100

systemd (252.3-1) unstable; urgency=medium

  * New upstream version 252.3
  * Rebase patches

 -- Michael Biebl <email address hidden>  Sat, 10 Dec 2022 20:14:11 +0100