~usarinheininga/ubuntuplasma/+git/systemd:debian-T35070-255.3-2

Last commit made on 2024-03-01
Get this branch:
git clone -b debian-T35070-255.3-2 https://git.launchpad.net/~usarinheininga/ubuntuplasma/+git/systemd

Branch merges

Branch information

Name:
debian-T35070-255.3-2
Repository:
lp:~usarinheininga/ubuntuplasma/+git/systemd

Recent commits

ee50bfc... by Jian-Hong Pan <email address hidden>

debian/control: Fix the build dependecy of debhelper & tzdata

The following packages have unmet dependencies:
 builddeps:/setup : Depends: debhelper (>= 13.11.6) but 13.11.4 is to be installed
                    Depends: tzdata-legacy but it is not installable or
                             tzdata (< 2023c-8) but 2024a-0+deb12u1 is to be installed

The systemd cannot be built until the dependent version of debhelper &
tzdata are tweaked.

https://phabricator.endlessm.com/T35070

93c9d84... by Jian-Hong Pan <email address hidden>

Ensure only systemd-boot-efi or systemd-boot-efi-signed can be installed

The signed version of the package replaces files from the unsigned
version, so add a Replaces and Conflicts on the signed version.

https://phabricator.endlessm.com/T33862
https://phabricator.endlessm.com/T27442

7804cbf... by =?utf-8?q?Jo=C3=A3o_Paulo_Rechi_Vita?= <email address hidden>

Do not install sysinit.target.wants/systemd-boot-random-seed.service

This link is created by the build system upstream, instead of by the
more common way of the package build doing the equivalent of `systemctl
enable`. We have a commit in the code branch disabling its generation,
but we also need this change here to disable trying to install this
symlink.

Note: According to NEWS [1], old "systemd-boot-system-token.service" is
renamed as "systemd-boot-random-seed.service".

[1]: https://github.com/systemd/systemd-stable/blob/v254.9/NEWS#L1019-L1022

https://phabricator.endlessm.com/T29475
https://phabricator.endlessm.com/T35070

cf55d19... by =?utf-8?q?Jo=C3=A3o_Paulo_Rechi_Vita?= <email address hidden>

Add SBAT info for systemd-boot

https://phabricator.endlessm.com/T33712

d964a86... by Robert McQueen <email address hidden>

pam.d/systemd-user: add pam_keyinit to link session and user keyrings

Apply a version of the change in
https://github.com/systemd/systemd/commit/ab79099d so that the user
keyring is available in systemd-user sessions, which allows keys to be
configured for accessing encrypted filesystems. See
https://github.com/google/fscrypt/issues/100 and
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1754270 for more
details.

https://phabricator.endlessm.com/T27032

315c09f... by =?utf-8?q?Jo=C3=A3o_Paulo_Rechi_Vita?= <email address hidden>

Rebuild initrd when updating systemd or udev

Our initrd uses systemd and udev, so we need to rebuild the initrd when
updating either of these packages to make sure the initrd has the latest
code.

https://phabricator.endlessm.com/T18563

35d2cc9... by Will Thompson <email address hidden>

Unconditionally enable tmp.mount

Previously, we depended on the "one-time migration" block in postinst to
read /etc/default/tmpfs and enable tmp.mount by copying it into /etc.
This behaviour is inherited from Debian where tmpfs-on-/tmp is not the
default. /etc/default/tmpfs is provided by the initscripts package,
which is no longer a required package and so is not included in the
first phase of debootstrap where the systemd package is installed.

Since we always want /tmp to be a tmpfs in Endless OS, we can just
remove this Debian-specific logic and follow upstream, where tmp.mount
is installed to /lib/systemd/system and symlinked into
/lib/systemd/system/local-fs.target.wants/. Assuming that users have not
modified either /etc/systemd/system/tmp.mount or
the /etc/systemd/system/local-fs.target.wants/tmp.mount symlink,
on an ostree upgrade these files in /etc should be removed, and the
copies in /lib will be used instead. On converted systems, we can just
leave them harmlessly in place.

https://phabricator.endlessm.com/T17850

c6acb3c... by Daniel Drake <email address hidden>

Disable apparmor support

We don't need this in Endless, so we can drop this library.

http://phabricator.endlessm.com/T10823

ccee106... by Jian-Hong Pan <email address hidden>

Disable systemd-resolved

[João Paulo Rechi Vita]
We are not using systemd-resolved on EOS. Last time we checked it only
worked in conjuction with systemd-networkd.

Also remove the libnss-resolve package, which provides name resolution
through systemd-resolved as a NSS plugin.

[Jian-Hong Pan]
Debian split systemd-resolved into its own package since systemd
251.3-2~exp1. So, simplify the modification as dropping systemd-resolved
from systemd's dependency.

https://phabricator.endlessm.com/T4900
https://phabricator.endlessm.com/T35070

81f4f6a... by =?utf-8?q?Jo=C3=A3o_Paulo_Rechi_Vita?= <email address hidden>

Set rootprefix to /

Some Debian tools do not support a unified /usr. Setting rootprefix=/
works around this problem.

https://phabricator.endlessm.com/T21201#552900