SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
65,936 Commits 2 Branches 1 Tag
0c13daee66fa6300aef0bce18ec8a82d17b87529
Commit Graph
356 Commits
Author SHA1 Message Date
dependabot[bot] 1cdaba52a5 build(deps): bump github/codeql-action from 2.3.5 to 2.20.1 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.5 to 2.20.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/0225834cc549ee0ca93cb085b92954821a145866...f6e388ebf0efc915c6c5b165b019ee61a6746a38)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-01 14:05:22 +00:00
dependabot[bot] 6cc0fd0044 build(deps): bump actions/labeler from 4.0.4 to 4.2.0 
Bumps [actions/labeler](https://github.com/actions/labeler) from 4.0.4 to 4.2.0.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/0776a679364a9a16110aac8d0f40f5e11009e327...0967ca812e7fdc8f5f71402a1b486d5bd061fe20)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-01 10:37:11 +00:00
dependabot[bot] a2c9096790 build(deps): bump actions/checkout from 3.5.2 to 3.5.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/8e5e7e5ab8b370d6c329ec480221332ada57f0ab...c85c95e3d7251135ab7dc9ce3241c5835cc595a9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-01 10:36:23 +00:00
dependabot[bot] 479f9f3004 build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/80e868c13c90f172d68d1f4501dee99e2479f7af...08b4669551908b1024bb425080c797723083c031)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-01 10:35:10 +00:00
Daan De Meyer 12ab9ae8c6 mkosi: Update to latest 
mkosi now prebuilds the hwdb during image build which should hopefully
get rid of the CentOS 8 failures we're seeing in CI.
 2023-06-26 14:14:40 +01:00
Daan De Meyer 94c357ca23 mkosi: Update to latest 
We now run repart before starting systemd-nspawn to make sure that
the root partition is also generated when we boot the image in a
container instead of a VM.

To make sure we start from scratch for both the container boot and
the VM boot, we also enable Ephemeral to make sure all changes to
the image are ephemeral.
 2023-06-19 10:30:39 +02:00
Evgeny Vereshchagin 83dda3d28b ci: drop the "find" kludge 
meson no longer complains about install_tag
 2023-06-16 10:43:06 +09:00
Joyce Brum 2b3211c836 Squashed commit of the following: 
commit ef2fc83647f69c172c11e0dea318bf6ecf79a4aa
Author: Joyce <joycebrum@google.com>
Date:   Wed Jun 14 12:18:23 2023 -0300

    Update scorecards.yml

    Signed-off-by: Joyce <joycebrum@google.com>

commit c59c05c6ab156b20249e8056d8cbaafbe0c495f8
Merge: 7431a54568 f66d040d95
Author: Joyce <joycebrum@google.com>
Date:   Wed Jun 14 10:22:28 2023 -0300

    Merge branch 'main' into fix/disable-code-scanning-alerts

commit 7431a54568746a2fa4db1b23e1359984335df41e
Author: Joyce <joycebrum@google.com>
Date:   Tue Jun 13 18:15:21 2023 -0300

    Remove code scanning alerts scorecards.yml

    Signed-off-by: Joyce <joycebrum@google.com>

Signed-off-by: Joyce Brum <joycebrum@google.com>
 2023-06-14 20:22:50 +01:00
Joyce 3f2ff79763 Fix scorecard version comment format (#28027) 
* Update scorecards.yml version comments

Signed-off-by: Joyce <joycebrum@google.com>
 2023-06-13 22:36:32 +01:00
Daan De Meyer 6aca147f82 mkosi: Remove explicit /testok check 
vsock should work properly after the latest release of mkosi. But
to make sure it works, let's exit with 123 in case of success and
check for that in Github Actions.
 2023-06-13 16:04:10 +02:00
Daan De Meyer abeecde242 mkosi: Update to latest 
We update our configuration to replace the removed
RepositoryDirectories= option with the new PackageManagerTrees=
option.
 2023-06-13 16:04:08 +02:00
Daan De Meyer 9f89c2d420 mkosi: Update to latest 
mkosi's match syntax was changed so we update our config files to
use the new match syntax which mimicks the systemd condition syntax.
 2023-06-07 15:59:03 +02:00
jonathanmetzman 56595a3730 ci: Report results from CIFuzz using SARIF 
Upload results from CIFuzz using SARIF.
This will allow CIFuzz to report issues in the security tab.
This is a better UI than having to look through logs.
TODO(google/oss-fuzz#10452): Add proper descriptions of UBSAN bugs.
 2023-06-05 07:37:34 +02:00
Daan De Meyer 8f9a307fec Merge pull request #27849 from DaanDeMeyer/sign-pcr 
mkosi: Sign expected PCRs
 2023-06-02 16:16:41 +02:00
Daan De Meyer a47c48cbb2 mkosi: Only lower device timeout instead of all timeouts 
We only really care about lowering the device timeout so we get to
a shell faster when the root device doesn't appear so let's only
lower that timeout instead of lowering all default timeouts.
 2023-06-02 15:43:28 +02:00
Daan De Meyer 2af9d5dc0e mkosi: Update to latest 2023-06-02 13:32:53 +02:00
dependabot[bot] 7cd4f577e8 build(deps): bump github/codeql-action from 2.2.9 to 2.3.5 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.9 to 2.3.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/04df1262e6247151b5ac09cd2c303ac36ad3f62b...0225834cc549ee0ca93cb085b92954821a145866)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-01 21:57:36 +08:00
dependabot[bot] da92fd4612 build(deps): bump meson from 1.1.0 to 1.1.1 in /.github/workflows 
Bumps [meson](https://github.com/mesonbuild/meson) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/mesonbuild/meson/releases)
- [Commits](https://github.com/mesonbuild/meson/compare/1.1.0...1.1.1)

---
updated-dependencies:
- dependency-name: meson
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-01 21:15:21 +09:00
dependabot[bot] 9a1ac3a019 build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler 
Bumps [redhat-plumbers-in-action/advanced-issue-labeler](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler) from 2.0.4 to 2.0.6.
- [Release notes](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler/releases)
- [Commits](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler/compare/25a1e41826424cdf577c71b58c852df4347f13b8...71bcf99aef4b9ea844db9a43755e8ac02c8e661e)

---
updated-dependencies:
- dependency-name: redhat-plumbers-in-action/advanced-issue-labeler
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-01 12:22:14 +02:00
dependabot[bot] c9401e6c6d build(deps): bump actions/labeler from 4.0.3 to 4.0.4 
Bumps [actions/labeler](https://github.com/actions/labeler) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/ba790c862c380240c6d5e7427be5ace9a05c754b...0776a679364a9a16110aac8d0f40f5e11009e327)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-01 12:21:34 +02:00
dependabot[bot] 6138a85d10 build(deps): bump redhat-plumbers-in-action/differential-shellcheck 
Bumps [redhat-plumbers-in-action/differential-shellcheck](https://github.com/redhat-plumbers-in-action/differential-shellcheck) from 4.0.2 to 4.2.2.
- [Release notes](https://github.com/redhat-plumbers-in-action/differential-shellcheck/releases)
- [Changelog](https://github.com/redhat-plumbers-in-action/differential-shellcheck/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/redhat-plumbers-in-action/differential-shellcheck/compare/d24099b9f39ddee81dea31eb0e135e0a623cb2b8...ac4483d8c6713bd2011037f44fe626989468af74)

---
updated-dependencies:
- dependency-name: redhat-plumbers-in-action/differential-shellcheck
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-01 12:20:55 +02:00
Daan De Meyer edabe6fc11 Merge pull request #27806 from DaanDeMeyer/fix-mkosi-check 
mkosi: Use proper check to detect whether we're in a VM
 2023-05-31 15:26:05 +02:00
Daan De Meyer df4835c897 mkosi: Check for failures by mounting again 
We rely on vsock to communicate the exit status back to us from the
VM but vsock in Github Actions is broken so let's switch back to
mounting for now.
 2023-05-31 14:22:58 +02:00
Daan De Meyer 86605eed9a mkosi: Enforce usage of vsock with qemu in CI 2023-05-31 14:19:25 +02:00
Daan De Meyer 401027075a mkosi: Update to latest 2023-05-31 14:19:25 +02:00
Frantisek Sumsal 4189d009ae ci: add gcc-13, drop gcc-12 2023-05-30 16:23:40 +02:00
Daan De Meyer a27f253276 mkosi: Bump default timeout to 180s 
Hopefully fixes #27778 where waiting for the root device to appear
times out before systemd-repart has a chance to run and create it.
 2023-05-25 12:09:13 +02:00
Daan De Meyer 47e5e12866 mkosi: Package a erofs usr partition with signed verity 
Let's start moving towards a more involved partitioning setup to
test our stuff more when using mkosi.

The root partition is generated on boot with systemd-repart.

CentOS supports neither erofs nor btrfs so we use squashfs and xfs
instead.

We also enable SecureBoot= locally for additional coverage. This
and the use of verity means users need to run `mkosi genkey` once
to generate the keys necessary to do secure boot and verity.
 2023-05-13 10:49:17 +02:00
Daan De Meyer 059c961135 mkosi: Update to latest 2023-05-12 11:38:02 +02:00
Daan De Meyer 93a948865c mkosi: Run in debug mode 
Let's make sure we log more of what mkosi's doing so we can debug
issues better. Note this also makes mkosi set SYSTEMD_LOG_LEVEL=debug
when running programs so we'll get all the systemd debug logging as
well.
 2023-05-11 12:18:50 +02:00
Daan De Meyer 4bfcb6ba27 mkosi: Don't run slow tests by default 
Instead, allow enabling it via an environment variable and do so
in CI.
 2023-05-11 12:16:47 +02:00
dependabot[bot] 43a221473c build(deps): bump actions/checkout from 3.3.0 to 3.5.2 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.3.0 to 3.5.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/ac593985615ec2ede58e132d2e21d2b1cbd6127c...8e5e7e5ab8b370d6c329ec480221332ada57f0ab)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-11 09:34:08 +02:00
dependabot[bot] 93b2175a87 build(deps): bump meson from 1.0.1 to 1.1.0 in /.github/workflows 
Bumps [meson](https://github.com/mesonbuild/meson) from 1.0.1 to 1.1.0.
- [Release notes](https://github.com/mesonbuild/meson/releases)
- [Commits](https://github.com/mesonbuild/meson/compare/1.0.1...1.1.0)

---
updated-dependencies:
- dependency-name: meson
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-11 09:33:21 +02:00
dependabot[bot] c07aa178b3 build(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v3.1.1...0b7f8abb1508181956e8e162db84b466c27e18ce)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-11 09:31:55 +02:00
dependabot[bot] 6a3ba07bfb build(deps): bump github/super-linter from 4.10.1 to 5.0.0 
Bumps [github/super-linter](https://github.com/github/super-linter) from 4.10.1 to 5.0.0.
- [Release notes](https://github.com/github/super-linter/releases)
- [Changelog](https://github.com/github/super-linter/blob/main/docs/release-process.md)
- [Commits](https://github.com/github/super-linter/compare/454ba4482ce2cd0c505bc592e83c06e1e37ade61...45fc0d88288beee4701c62761281edfee85655d7)

---
updated-dependencies:
- dependency-name: github/super-linter
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-11 09:31:22 +02:00
dependabot[bot] 882235d581 build(deps): bump actions/github-script from 6.4.0 to 6.4.1 
Bumps [actions/github-script](https://github.com/actions/github-script) from 6.4.0 to 6.4.1.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/98814c53be79b1d30f795b907e553d8679345975...d7906e4ad0b1822421a7e6a35d5ca353c962f410)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-11 09:30:48 +02:00
Zbigniew Jędrzejewski-Szmek 98e2089f1b mkosi,ci: do not install perl 2023-05-09 08:11:10 +02:00
Daan De Meyer d052cc8893 mkosi: Switch to use mkosi presets with prebuilt initrds 
Instead of building the initrds for the mkosi images with dracut,
let's switch to using mkosi presets to build the initrd with mkosi
as well.

This commit splits up our single image build into three separate
mkosi presets:

1. The "base" preset. This image contains systemd and all its runtime
dependencies. The sole purpose of this image is to serve as a base image
for the initrd and the final image. It's also responsible for building
systemd from source with the build script. The results are installed into
the base image. Note that we install the systemd and udev packages into this
image as well to prevent package managers from overriding the systemd we built
from source with the distro packaged systemd if it's pulled in as a dependency
by another package from the initrd or final profiles.
2. The "initrd" preset. This image provides the initrd. It's trivial and does
nothing more than packaging the base image up as a zstd compressed initramfs and
adds /init and /etc/initrd-release symlinks to the image.
3. The "final" preset. This image builds on top of the base image and adds
a kernel and extra packages that are useful for testing and debugging.

We also split out the optional kernel build into a separate set of config files
that are only included if a kernel to build is actually provided.

Note that this commit doesn't really change anything about how mkosi is used.
The commands remain the same, except that mkosi will now build all the presets
in order. "mkosi summary" will show the summary of all the presets. "mkosi qemu,
boot, shell" will always boot the final preset. With "-f", all presets will be
built and the final one is booted. "-i" makes a cache of each preset.

The only thing to keep in mind is that specifying config via the mkosi CLI will
apply to each of the presets. e.g. any extra packages added with "-p" will be
installed in both the initrd and the final image. To apply local configuration
to a single preset, create a file 00-local.conf in
mkosi.presets/<profile>/mkosi.conf.d and put all the preset specific configuration
in there.
 2023-05-01 15:39:50 +02:00
Daan De Meyer d280bb7e43 mkosi: Update fedora to release 38 2023-04-25 11:25:36 +02:00
Daan De Meyer 13d9669980 mkosi: Update to latest 
This pulls in a fix for Debian rpmdb locations, which results in a
substantial speedup for centos/fedora builds.
 2023-04-24 20:08:51 +02:00
Daan De Meyer f997f91d7d mkosi: Update to latest 
Let's use the new support for matching against any distribution in
a list of distributions to start sharing most things between the
ubuntu/debian configs and centos/fedora configs.
 2023-04-24 10:56:55 +02:00
Daan De Meyer 6b7e774b5d mkosi: Update to latest 2023-04-19 10:13:06 +02:00
Daan De Meyer 5739271000 mkosi: Update to latest 
mkosi now installs a "ignore *" default preset on Debian. We also
switch Debian to dbus-broker now that preset doesn't disable it
anymore.
 2023-04-15 19:04:25 +08:00
Daan De Meyer fde55f3a32 mkosi: Update to latest 
The Bootable= option was removed and mkosi installs less packages
by default now, so let's adapt our configs to those changes.
 2023-04-13 13:49:30 +01:00
Jan Macku 19cdda7c3a ci: drop checkout from release workflow 
It's not required as per comment - https://github.com/systemd/systemd/pull/27110#issuecomment-1499653913
 2023-04-11 16:59:18 +02:00
Jan Macku 9718afd194 ci: don't run release wf on systemd-security 2023-04-11 16:59:18 +02:00
Дамјан Георгиевски 7b411cf842 ci: add permissions to make a release 
follow-up to https://github.com/systemd/systemd/pull/27071
in order to create Github Releases, the job needs permissions to write
contents

also:
- pinned the `softprops/action-gh-release` action to a specific commit
- made it only active on the `systemd` organization repos (so not on
  forks)
 2023-04-10 17:23:32 +08:00
Daan De Meyer 3267fc3885 mkosi: Update to latest 
This contains the recently merged fixes to config parsing ordering
and overrides.
 2023-04-07 21:56:22 +09:00
Daan De Meyer af6c5c7025 mkosi: Update to latest 
This also migrates the configuration to the new format that was
just merged in mkosi. Specifically, we make use of the new [Match]
sections to only include specific config snippets per distro.
 2023-04-07 08:13:42 +09:00
Luca Boccassi b7b48b389c ci: do one build with no tpm/p11kit/fido2 
We have some missing coverage in the CI, all builds enable these features,
but there are often changes and they cover a lot of code. Do one build
without them to ensure we don't break builds.
 2023-04-04 22:38:08 +01:00