systemd 255-1ubuntu1 source package in Ubuntu

Changelog

systemd (255-1ubuntu1) noble; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
      + Do not ship systemd-gpt-auto-generator
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
      to the kernel (we previously only set it in modprobe.d)
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Provide upgrade path (Replaces:) for Jammy's systemd-repart
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
    - d/p/debian/Ubuntu-UseDomains-by-default.patch:
      Enable UseDomains by default on Ubuntu.
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - d/p/test-increase-QEMU_MEM-for-some-tests.patch:
      Increase QEMU_MEM for some tests to improve success rate
    - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
      Workaround Ubuntu core's read-only etc
    - test-skip-tests-for-unsupported-localectl-features.patch:
      skip tests for unsupported localectl features
    - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
    - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
      Disable -Wformat-overflow on gcc with -O3
  * Dropped changes, fixed upstream:
    - Drop lp2009743/test-network-add-one-more-testcase-for-DHCPv4-classless-r.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/86f6760038
    - Drop lp2009743/network-dhcp4-do-not-ignore-the-gateway-even-if-the-desti.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/77451f654a
    - Drop lp2013543-core-reorder-systemd-arguments-on-reexec.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/06afda6b38
    - Drop lp2033325-Revert-core-service-when-resetting-PID-also-reset-known-f.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/996b00ede8
    - Drop test-denylist-TEST-29-PORTABLE-again.patch.
      According to upstream, this has been resolved by
      https://github.com/systemd/systemd/pull/28123, and a PPA autopkgtest
      confirms this.
  * Dropped changes, no longer needed:
    - Drop deny-list-TEST-55-OOMD-on-ppc64el.patch.
      We already disable qemu tests on ppc64el, so having this too is
      unnecessary.
    - Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch.
      These tests no longer fail when run in LXD, so drop the patch.
    - Drop debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch (LP: #1959047)
  * New changes:
    - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
      On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
      /etc/init.d, but nothing guarantees that the path is created for the
      test.
    - firstboot: remove /etc/localtime on --reset
    - debian/tests/upstream: drop blacklist support.
    - test: deny-list TEST-08-INITRD.
      Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
      It makes sense for us to as well, because we don't run systemd in the
      initrd.
    - debian/tests/control: add Depends: systemd-boot-efi for upstream-2.
      TEST-70-TPM2 wants the systemd-boot EFI binary for testing pcrlock, so
      just install the binaries.
    - debian/systemd.install: do not install pcrlock.d on i386.
      We don't build this stuff on i386.
    - debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE
    - test: install all necessary units & generators for LVM on Debian
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
      It is preferred that we override units with dropins like this, rather
      than patching the original. This has no functional change.
    - test: skip failing test-execute tests in LXC.
      These are hopefully temporary workarounds so that we can figure out the
      root cause in either upstream systemd or LXC.

systemd (255-1) unstable; urgency=medium

  * New upstream version 255. For a full list of changes, see:
    https://github.com/systemd/systemd/releases/tag/v255
  * Drop seccomp patches, merged upstream

systemd (255~rc4-2) unstable; urgency=medium

  * Backport patches to fix seccomp issues on armhf/armel/ppc64el

systemd (255~rc4-1) unstable; urgency=medium

  * New upstream version 255~rc4

systemd (255~rc3-3) unstable; urgency=medium

  [ Oxan van Leeuwen ]
  * Move kernel-install initrd script to earlier prefix. From systemd v255
    onwards, the 60-ukify.install script automatically uses initrd files
    that are present in the staging area. Move the initrd script to run
    earlier, so that ukify can use the initrd. The only third-party
    kernel-install script present in the Debian archive is
    40-dkms.install, so it is not impacted by this change. Both dracut and
    mkinitcpio upstream also ship their script with priority 50.

  [ Luca Boccassi ]
  * systemd.pc: point unit install directory to /usr/lib/systemd/system/

systemd (255~rc3-2) unstable; urgency=medium

  * systemd: ignore '_systemctl kill' failures in postinst

systemd (255~rc3-1) unstable; urgency=medium

  * d/systemd.install: mark pcrlock.d as !stage1. pcrlock configs are only
    installed when libtss and libssl are available which is not the case
    for stage1 builds, so mark accordingly
  * New upstream version 255~rc3
  * Drop patches merged upstream
  * Refresh patches
  * systemd: reexec user manager sessions on upgrade. So far we only
    reexec'ed PID1, and ignored user managers, which means bug or security
    fixes were not applied for running sessions till the next reboot. Fix
    this using 'systemctl kill', which is asynchronous but works even if
    the D-Bus user session is not active.
  * autopkgtest: install dhcpcd-base for boot-and-services

systemd (255~rc2-3) unstable; urgency=medium

  [ Michael Biebl ]
  * Use canonical paths for scripts in debian/extra. Update scripts for
    udev-udeb, initramfs-tools integration scripts and dhclient hook
    script to use the new canonical paths in /usr.

  [ Luca Boccassi ]
  * Bump conflict with molly-guard to 0.8.2. The previous workarounds are
    not enough, so a new upload will be needed. (Closes: #1056292)
  * Backport patches to fix FTBFS on hppa and x32

systemd (255~rc2-2) unstable; urgency=medium

  * Add versioned Breaks against dracut.
    The introduction of systemd-executor in v255 breaks the initrd that is
    generated by dracut. Without systemd-executor, a systemd based initrd
    will fail to boot. The dracut package needs to be updated to include
    this new binary. (Closes: #1056108)

systemd (255~rc2-1) unstable; urgency=medium

  [ Matthias Geiger ]
  * Bump version number for udev.postinst and udev.maintscript
  * Fix udev.postinst to preserve the enablement of the init script. When
    transferring ownership of the udev init script to sysvinit, the
    service was disabled as it didn't check for enablement before calling
    update-rc.d. Thanks to Mark Hindley for the original fix. (Closes:
    #1053301)

  [ Luca Boccassi ]
  * New upstream version 255~rc2
  * Drop fix-build-without-SBAT_DISTRO.patch, merged upstream
  * Refresh patches
  * Upload to unstable

systemd (255~rc1-4) experimental; urgency=medium

  * Add version to Conflict with molly-guard
  * Move systemd-hwdb-update.service to udev package. Commit a12cf5d187cb
    in 249-1 removed systemd-hwdb-update.service from udev, and 254.4-1
    re-added it in systemd, so move it back to udev. (Closes: #1055863)

systemd (255~rc1-3) experimental; urgency=medium

  * Do not ship repart.standalone and shutdown.standalone
  * /usr/lib/sysvinit/telinit was dropped long ago, use /usr/sbin/telinit
  * Add Suggests: libip4tc2 as it is now dlopen'ed
  * Drop rc/rcS masking, no longer necessary
  * Add Conflicts to avoid issues due to DEP17P3. libpam-elogind-compat,
    opensysusers, bfh-container, molly-guard, and progress-linux-container
    divert files from our packages, so DEP17P3 is triggered. Add
    unversioned conflicts until those diversions are updated according to
    DEP17M18, and then we can make the conflicts versioned. (Closes:
    #1055485)

systemd (255~rc1-2) experimental; urgency=medium

  * Build-depend on python3-pefile on all architectures ukify
  * meson: use enabled/disabled instead of true/false for 'feature'
    options
  * meson: use canonical paths for configured tools too

systemd (255~rc1-1) experimental; urgency=medium

  [ Michael Biebl ]
  * Update symbol versions for the final 254 release
  * Remove mangling of man pages post build trying to fix up paths. With
    merged-/usr being mandatory, this is no longer necessary as the paths
    will now always point to the correct location.
  * Use a drop-in to avoid startup failures of systemd-logind when dbus is
    missing. Instead of patching the systemd-logind.service file, use a
    drop-in. This way the Debian specific change becomes more visible and
    easier to override.

  [ Luca Boccassi ]
  * New upstream version 255~rc1
  * Drop test-skip-test-path-on-Salsa-CI.patch, merged upstream
  * Drop Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-back-to-.patch,
    no longer necessary
  * Refresh patches
  * Temporarily keep systemd.pc and udev.pc pointing to legacy unmerged paths.
    This will be dropped in the short term, but there are still a lot of
    FTBFS when changing, so keep it for now
  * systemd/udev: assert that the system is merged-usr. Support for
    unmerged system was dropped project-wide. Things will break subtly if
    ran on such unsupported setups, so add an explicit assert at preinst.
  * Drop deprecated split-usr and install files from /usr
  * Install new pam_systemd_loadkey module. If configured, and systemd-
    cryptsetup and logind are used, the crypsetup passphrase is passed to
    the PAM stack for later authentication steps such as the GNOME
    keyring.
  * Install the default pcrlock config files
  * Update libsystemd0.symbols
  * autopkgtest: add dependencies on python3-pefile and nvme-cli for
    upstream suite
  * Backport patch to fix arm64 cross-build
  * Update Lintian overrides

systemd (254.5-1) unstable; urgency=medium

  * New upstream version 254.5
  * Refresh patches for 254.5

systemd (254.4-1) unstable; urgency=medium

  [ Michael Biebl ]
  * Fix installation of tzdata-legacy. Apply a version constraint to the
    tzdata alternative. Specifically (<< 2023c-8), which is the version
    tzdata was split. Otherwise tzdata-legacy is not considered, as tzdata
    is installed by default. (Closes: #1051760)
  * Drop obsolete Breaks/Replaces and migration code for versions older
    than oldstable
  * Drop -f from update-rc.d udev remove

  [ Luca Boccassi ]
  * upstream-ci: run unit tests from installed location. (Closes: #1051756)
  * New upstream version 254.4. Fixes minor security issue in arm64
    and riscv64 systemd-boot (EFI) with device tree blobs loading:
    https://github.com/systemd/systemd/security/advisories/GHSA-6m6p-rjcq-334c
  * Refresh patches
  * Install factory-reset related units

  [ Gioele Barabucci ]
  * debian/udev.debian-udev.sysusers: Add Debian-specific sysusers for
    udev
  * d/udev.postinst: Do not use addgroup to add udev-related groups
  * d/control: Remove adduser, it is no longer needed now that all
    udev-related groups are generated via `sd-sysusers`.

systemd (254.3-1) unstable; urgency=medium

  [ Daniel Andersson ]
  * Add systemd-sysupdate.

  [ Luca Boccassi ]
  * New upstream version 254.2
  * Refresh patches for 254.2
  * New upstream version 254.3

  [ Michael Biebl ]
  * Remove obsolete SysV init script. Keep the udev alias for one more
    release cycle.
  * Use dh_installsystemd to handle systemd-udevd.service. This allows us
    to drop a lot of custom maintscript code. Fix the formatting of the
    udev maintscript code while at it.
  * Add Conflicts against initscripts and orphan-sysvinit-scripts. Those
    packages have undesirable side effects if systemd is the active init
    system so ensure they can't be installed.

systemd (254.1-3) unstable; urgency=medium

  [ Nick Rosbrook ]
  * debian: ship libsystemd.a in libsystemd-dev.
    Thanks to Serge Hallyn
  * autopkgtest: add build test for static libsystemd
  * debian/rules: build with -ffat-lto-objects.
    Building with -flto=auto, but without -ffat-lto-objects, causes static
    archives to end up without any code sections. This is needed to ship a
    usable libsystemd.a in libsystemd-dev.
    See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977596.

  [ Luca Boccassi ]
  * Backport patch to fix test-path failure on Salsa CI

  [ Michael Biebl ]
  * Ask before attaching the udev db information to the bug report
    (Closes: #1041652)
  * Install D-Bus interface files in systemd-dev.
    Now that we have a dedicated -dev package, use that to install
    /usr/share/dbus-1/interfaces.
  * Clean up a couple more __pycache__ directories
  * Remove workarounds for dh_installman.
    No longer needed as stable ships a fixed debhelper.
  * Remove all empty directories from (/usr)/lib.
    This mitigates the accidental empty directory removal by dpkg on
    merged-/usr systems. (Closes: #1036920)
  * Remove no longer needed maintainer scripts migration code for versions
    older then oldstable
  * Revert "Add workaround for Meson regression to fix FTBFS on mips64el"
    This reverts commit 97ebdcea6d0ce52973dd5a9cfeede1573a628bd0.
    No longer needed as a fixed meson package is available now.

systemd (254.1-2) unstable; urgency=medium

  * Build-depend on tzdata-legacy | tzdata. Some timezones were split out,
    but some unit tests need them, so pull in the new tzdata-legacy
    package if it exists.

systemd (254.1-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * systemd-userdbd: depend on libnss-systemd. This library provides nss
    integration for userdbd/homed and is needed for homed logins
  * New upstream version 254.1
  * Refresh patches for v254.1
  * systemd: do not ship empty .wants/ directories. These will conflict
    with finalizing usrmerge as they are in /lib, so remove them for now.
    systemctl enable creates them anyway when needed.

  [ Helmut Grohne ]
  * duplicate udev trigger interest for /usr-merge. As packages move their
    files from / to /usr, dpkg will cease activating udev's trigger
    interest for hwdb.d files. In DEP17, this is documented as P2. Since
    there are only two packages in Debian affected by this issue, we opt
    for an individual mitigation and explicitly duplicate the trigger
    interest to both locations (M12). This is safe regardless of the other
    chosen mitigations as trigger activations are accumulated.

systemd (254-1) unstable; urgency=medium

  * New upstream version 254
  * Drop patches merged upstream
  * d/watch: switch back to stable repository
  * Refresh patches

systemd (254~rc3-3) unstable; urgency=low

  * Backport patch to fix FTBFS on armhf
  * Add workaround for Meson regression to fix FTBFS on mips64el

systemd (254~rc3-2) unstable; urgency=medium

  * ukify: enable only on UEFI architectures.

systemd (254~rc3-1) unstable; urgency=low

  * Drop Suggests on transitional policykit-1 package
  * Drop autopkgtest dependency on transitional policykit-1 package
  * Ship ukify in systemd package (Closes: #1041399)
  * New upstream version 254~rc3 (Closes: #1041648, #1041540)
  * Drop patches merged upstream
  * Refresh patches

systemd (254~rc2-3) unstable; urgency=low

  * Upload to unstable

systemd (254~rc2-2) experimental; urgency=medium

  * Backport two more mips64 fixes from upstream

systemd (254~rc2-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * Bump dependency on Meson to 0.60
  * upstream-ci: install libdw and libelf for boot-and-services too.
  * upstream-ci: add libssl-dev to autopkgtest upstream suite.
  * upstream-ci: add nftables.
  * upstream-ci: add 'stress' to the upstream testsuite dependency list.
  * tests/upstream: install curl.
  * tests/upstream: bump timeout by 10 minutes.
  * New upstream version 254~rc2
  * Drop patches merged upstream
  * Refresh patches for v254-rc2

  [ Yu Watanabe ]
  * autopkgtest: create directory to make accounts-daemon.service not
    fail. The service requires /usr/share/accountsservice/interfaces, but
    the directory is not packaged (at least in 22.08.8-6). This adds a
    workaround for the failure.

systemd (254~rc1-4) experimental; urgency=medium

  * Backport patches to fix FTBFS on mipsel, ia64, x32
  * d/rules: explicitly disable EFI on x32. On x32 the cpu architecture is
    just x86_64 so EFI will be enabled, and it will fail to build as
    userland doesn't support building the EFI ABI. Disable it explicitly,
    and leave it on 'auto' elsewhere.

systemd (254~rc1-3) experimental; urgency=medium

  * Restrict pyelftools to UEFI-enabled architectures and drop explicit
    meson settings.

systemd (254~rc1-2) experimental; urgency=medium

  * Backport patch to fix fuzz test without cgroup access. Fix build on
    buildds https://github.com/systemd/systemd/pull/28303

systemd (254~rc1-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * d/watch: watch main repository
  * New upstream version 254~rc1
  * Refresh patches for v254-rc1
  * Drop build dependency on gnu-efi and add python3-pyelftools. Move to
    !stage1 given it's external python modules
  * Install new libsystemd.3 manpage
  * Install new mount.ddi alias for sd-dissect
  * Update symbols file for 254
  * Update Lintian overrides for systemd-tests
  * autopkgtest: find test-udev in new location.

  [ Zbigniew Jędrzejewski-Szmek ]
  * autopkgtest: drop 'udev' test
    https://github.com/systemd/systemd/pull/27534 makes it into a normal
    unit test, so it will be invoked as part of 'upstream'.

 -- Nick Rosbrook <email address hidden>  Thu, 14 Dec 2023 18:11:39 -0500