{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":357928350,"defaultBranch":"main","name":"systemd-rhel9","ownerLogin":"redhat-plumbers","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2021-04-14T14:09:49.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/84723483?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1725969745.0","currentOid":""},"activityList":{"items":[{"before":null,"after":"c16e8cd675313ceaf557465334b5e6c80ac1aa48","ref":"refs/heads/rhel-9.6.0","pushedAt":"2024-09-03T10:37:27.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"ukify: Skip test on architectures without UEFI\n\n(cherry picked from commit 5121f7c45b37afca53c89f42123b1dd6a04fa80f)\n\nRelated: RHEL-56019","shortMessageHtmlLink":"ukify: Skip test on architectures without UEFI"}},{"before":"adb6c21257cf8b077e8d55c3326549a671a70481","after":"c16e8cd675313ceaf557465334b5e6c80ac1aa48","ref":"refs/heads/rhel-9.5.0","pushedAt":"2024-08-30T14:03:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"ukify: Skip test on architectures without UEFI\n\n(cherry picked from commit 5121f7c45b37afca53c89f42123b1dd6a04fa80f)\n\nRelated: RHEL-56019","shortMessageHtmlLink":"ukify: Skip test on architectures without UEFI"}},{"before":"adb6c21257cf8b077e8d55c3326549a671a70481","after":"c16e8cd675313ceaf557465334b5e6c80ac1aa48","ref":"refs/heads/main","pushedAt":"2024-08-30T14:02:11.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"ukify: Skip test on architectures without UEFI\n\n(cherry picked from commit 5121f7c45b37afca53c89f42123b1dd6a04fa80f)\n\nRelated: RHEL-56019","shortMessageHtmlLink":"ukify: Skip test on architectures without UEFI"}},{"before":"65942ca325dffbc8654f8029d83f212b0ca7b5b2","after":"adb6c21257cf8b077e8d55c3326549a671a70481","ref":"refs/heads/rhel-9.5.0","pushedAt":"2024-08-26T08:48:28.000Z","pushType":"push","commitsCount":21,"pusher":{"login":"lnykryn","name":"Lukáš Nykrýn","path":"/lnykryn","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1889412?s=80&v=4"},"commit":{"message":"Fix detection of TDX confidential VM on Azure platform\n\nThe original CVM detection logic for TDX assumes that the guest can see\nthe standard TDX CPUID leaf. This was true in Azure when this code was\noriginally written, however, current Azure now blocks that leaf in the\nparavisor. Instead it is required to use the same Azure specific CPUID\nleaf that is used for SEV-SNP detection, which reports the VM isolation\ntype.\n\nSigned-off-by: Daniel P. Berrangé <berrange@redhat.com>\n(cherry picked from commit 9d7be044cad1ae54e344daf8f2ec37da46faf0fd)\n\nRelated: RHEL-50651","shortMessageHtmlLink":"Fix detection of TDX confidential VM on Azure platform"}},{"before":"ae92c09f0ddfea2ff6042e152eec9af86013da38","after":"adb6c21257cf8b077e8d55c3326549a671a70481","ref":"refs/heads/main","pushedAt":"2024-08-22T14:48:34.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Fix detection of TDX confidential VM on Azure platform\n\nThe original CVM detection logic for TDX assumes that the guest can see\nthe standard TDX CPUID leaf. This was true in Azure when this code was\noriginally written, however, current Azure now blocks that leaf in the\nparavisor. Instead it is required to use the same Azure specific CPUID\nleaf that is used for SEV-SNP detection, which reports the VM isolation\ntype.\n\nSigned-off-by: Daniel P. Berrangé <berrange@redhat.com>\n(cherry picked from commit 9d7be044cad1ae54e344daf8f2ec37da46faf0fd)\n\nRelated: RHEL-50651","shortMessageHtmlLink":"Fix detection of TDX confidential VM on Azure platform"}},{"before":"11992ca0dbeb077dbf4c033fe8a19a1ef19d7e57","after":"ae92c09f0ddfea2ff6042e152eec9af86013da38","ref":"refs/heads/main","pushedAt":"2024-08-22T13:54:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Revert \"udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT\"\n\nThis reverts commit 7af151ca282d506a8e409a68b656f6d1cd2f13fb.\n\nIt seems that virtio devices always have \"0\" in\nthe firmware_node/sun. And because of that, udev will\nalways name the device ens0, which leads to collisions.\nSo let's disable it for now.\n\nrhel-only: policy\n\nReverts: RHEL-50103","shortMessageHtmlLink":"Revert \"udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT\""}},{"before":"7af151ca282d506a8e409a68b656f6d1cd2f13fb","after":"11992ca0dbeb077dbf4c033fe8a19a1ef19d7e57","ref":"refs/heads/main","pushedAt":"2024-08-22T08:45:18.000Z","pushType":"pr_merge","commitsCount":12,"pusher":{"login":"lnykryn","name":"Lukáš Nykrýn","path":"/lnykryn","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1889412?s=80&v=4"},"commit":{"message":"man/systemd-detect-virt: list known CVM technologies\n\nAdd a section which lists the known confidential virtual machine\ntechnologies.\n\nSigned-off-by: Daniel P. Berrangé <berrange@redhat.com>\n(cherry picked from commit a8fb5d21fd6127a6d05757c793cc9ba47f65c893)\n\nRelated: RHEL-50651","shortMessageHtmlLink":"man/systemd-detect-virt: list known CVM technologies"}},{"before":"65942ca325dffbc8654f8029d83f212b0ca7b5b2","after":"7af151ca282d506a8e409a68b656f6d1cd2f13fb","ref":"refs/heads/main","pushedAt":"2024-08-19T14:12:16.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT\n\npci_get_hotplug_slot() has the following limitations:\n- if slots are not hotpluggable, they are not in /sys/bus/pci/slots.\n- the address at /sys/bus/pci/slots/X/addr doesn't contains the function part,\n  so on some system, 2 different slots with different _SUN end up with the same\n  hotplug_slot, leading to naming conflicts.\n- it tries all parent devices until it finds a slot number, which is incorrect,\n  and what led to NAMING_BRIDGE_MULTIFUNCTION_SLOT being disabled.\n\nThe use of PCI hotplug to find the slot (ACPI _SUN) was introduced in\nhttps://github.com/systemd/systemd/commit/0035597a30d120f70df2dd7da3d6128fb8ba6051\n\"udev: net_id - export PCI hotplug slot names\" on 2012/11/26.\nAt the same time on the kernel side we got\nhttps://github.com/torvalds/linux/commit/bb74ac23b10820d8722c3e1f4add9ef59e703f63\n\"ACPI: create _SUN sysfs file\" on 2012/11/16.\n\nUsing PCI hotplug was the only way at the time, but now 12 years later we can use\nfirmware_node/sun sysfs file.\nLooking at a small selection of server HW, for HPE (Gen10 DL325), the _SUN is attached\nto the NIC device, whereas for Dell (R640/R6515/R6615) and Cisco (UCSC-C220-M5SX),\nthe _SUN is on the first parent pcieport.\n\nWe still fallback to pci_get_hotplug_slot() to handle the s390 case and\nmaybe some other coner cases (_SUN on grand parent device that is not a\nbridge ?).\n\n(cherry picked from commit 0a4ecc54cb9f2d3418b970c51bfadb69c34ae9eb)\n\nResolves: RHEL-50103","shortMessageHtmlLink":"udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT"}},{"before":"319c5612f69314b71c15862a0e0da249e61eeb89","after":"65942ca325dffbc8654f8029d83f212b0ca7b5b2","ref":"refs/heads/rhel-9.5.0","pushedAt":"2024-08-19T13:02:00.000Z","pushType":"push","commitsCount":199,"pusher":{"login":"lnykryn","name":"Lukáš Nykrýn","path":"/lnykryn","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1889412?s=80&v=4"},"commit":{"message":"udev: add hwdb execution for hidraw subsystem devices\n\nHwdb call for hidraw subsystem is missing and AV controller devices defined in hwdb.d/70-av-production.hwdb never get the proper permissions for /dev/hidraw*. This patch implements hwdb execution also for hidraw devices.\n\n(cherry picked from commit 43ee987a1f24f390bdee0447022d31ec30f6e5be)\n\nRelated: RHEL-5950","shortMessageHtmlLink":"udev: add hwdb execution for hidraw subsystem devices"}},{"before":"86572fe65c896cceea54a1fb94a4089ad5ce5dfe","after":"65942ca325dffbc8654f8029d83f212b0ca7b5b2","ref":"refs/heads/main","pushedAt":"2024-08-09T08:06:07.000Z","pushType":"pr_merge","commitsCount":194,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"udev: add hwdb execution for hidraw subsystem devices\n\nHwdb call for hidraw subsystem is missing and AV controller devices defined in hwdb.d/70-av-production.hwdb never get the proper permissions for /dev/hidraw*. This patch implements hwdb execution also for hidraw devices.\n\n(cherry picked from commit 43ee987a1f24f390bdee0447022d31ec30f6e5be)\n\nRelated: RHEL-5950","shortMessageHtmlLink":"udev: add hwdb execution for hidraw subsystem devices"}},{"before":"815cb389c024eb76a12b43c545bde3b20cfae593","after":null,"ref":"refs/heads/dependabot/github_actions/systemd/mkosi-cfdcfca4a526f855d718fcf6cb1efcf863c88baf","pushedAt":"2024-08-02T06:55:59.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"815cb389c024eb76a12b43c545bde3b20cfae593","ref":"refs/heads/dependabot/github_actions/systemd/mkosi-cfdcfca4a526f855d718fcf6cb1efcf863c88baf","pushedAt":"2024-08-01T19:15:10.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps): bump systemd/mkosi\n\nBumps [systemd/mkosi](https://github.com/systemd/mkosi) from 070528fec478fc93af7ec057a5d2fd0045123c99 to cfdcfca4a526f855d718fcf6cb1efcf863c88baf.\n- [Release notes](https://github.com/systemd/mkosi/releases)\n- [Changelog](https://github.com/systemd/mkosi/blob/main/NEWS.md)\n- [Commits](https://github.com/systemd/mkosi/compare/070528fec478fc93af7ec057a5d2fd0045123c99...cfdcfca4a526f855d718fcf6cb1efcf863c88baf)\n\n---\nupdated-dependencies:\n- dependency-name: systemd/mkosi\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"build(deps): bump systemd/mkosi"}},{"before":"42330aae7a15eb353e4554b84731ee552bf2d3c2","after":"86572fe65c896cceea54a1fb94a4089ad5ce5dfe","ref":"refs/heads/main","pushedAt":"2024-08-01T16:48:29.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"kernel-install: ignore errors when reading /etc/machine-id\n\nIf /etc/machine-id doesn't end with a newline (which is wrong, but it\ncan happen), kernel-install fails. That's because `read` returns 1 if it\nreaches EOF and we're using `set -e`. Let's just ignore that error, as\nit doesn't matter: we have either read a valid machine ID, in which case\nwe continue, or we haven't, in which case we exit anyway.\n\nRHEL-only: feature\n\nResolves: RHEL-50672","shortMessageHtmlLink":"kernel-install: ignore errors when reading /etc/machine-id"}},{"before":"d13ec6508ef181bdb294a955fe0e52e8df667b91","after":"42330aae7a15eb353e4554b84731ee552bf2d3c2","ref":"refs/heads/main","pushedAt":"2024-07-23T08:48:32.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"cryptenroll: Use CTAP2.1 credProtect extension\n\nWhen enrolling a new FIDO2 token with a client PIN, this tells the authenticator to require the PIN on all uses.\n\nIt also collects a PIN before attempting to create a credential.\n\nWorks around #31443 in most (not all) scenarios.\n\n(cherry picked from commit 12cf745cceb3dfec858bab6152636e42f1c23bb9)\n\nRelated: RHEL-36276","shortMessageHtmlLink":"cryptenroll: Use CTAP2.1 credProtect extension"}},{"before":"319c5612f69314b71c15862a0e0da249e61eeb89","after":"d13ec6508ef181bdb294a955fe0e52e8df667b91","ref":"refs/heads/main","pushedAt":"2024-07-22T11:48:53.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489)\n\nPreviously only running `timedatectl` it was showing warning regarding the dangers of setting RTC to local TZ.\rNow similar warning is also flashed when `set-local-rtc 1`.\n\n(cherry picked from commit db708fc9ba551325e000cc12bd3490a5de0715ba)\n\nResolves: RHEL-45020","shortMessageHtmlLink":"timedatectl: setting set_local_rtc to 1 will throw Warning as well, u…"}},{"before":"ebb3f05ef5d2bf3543e61047a658103baa293ca0","after":"657e89e5893fac4711fc9984bdb4861a66f84c5d","ref":"refs/heads/rhel-9.4.0","pushedAt":"2024-07-18T10:40:02.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"generator: \"uninline\" generator_open_unit_file and generator_add_symlink\n\nInlining of these functions changed ABI of libsystemd-shared which\ncauses issue on update when generators packaged in systemd-udev\nsubpackage fail to execute because of ABI change. systemd and the\nlibrary are already updated while systemd-udev subpackage is not and\nhence old generators can't be started when systemd is reexecuting\ndue to internal library incompatibility.\n\nrhel-only: bugfix\n\nResolves: RHEL-49495","shortMessageHtmlLink":"generator: \"uninline\" generator_open_unit_file and generator_add_symlink"}},{"before":"70de0ee05d6680e81b6e1b163902c45a2ff7aa63","after":"319c5612f69314b71c15862a0e0da249e61eeb89","ref":"refs/heads/rhel-9.5.0","pushedAt":"2024-07-17T10:35:59.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"ci: add support for rhel-only parameters\n\nrhel-only: ci\n\nRelated: RHEL-30372","shortMessageHtmlLink":"ci: add support for rhel-only parameters"}},{"before":"52aaecf1e0eab132be1fd5f9267f8697e3d2bd42","after":"319c5612f69314b71c15862a0e0da249e61eeb89","ref":"refs/heads/main","pushedAt":"2024-07-17T09:13:02.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"ci: add support for rhel-only parameters\n\nrhel-only: ci\n\nRelated: RHEL-30372","shortMessageHtmlLink":"ci: add support for rhel-only parameters"}},{"before":"d7dcbf9726607734dffdf01f853b423400f4849d","after":"52aaecf1e0eab132be1fd5f9267f8697e3d2bd42","ref":"refs/heads/main","pushedAt":"2024-07-17T08:13:41.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"generator: \"uninline\" generator_open_unit_file and generator_add_symlink\n\nInlining of these functions changed ABI of libsystemd-shared which\ncauses issue on update when generators packaged in systemd-udev\nsubpackage fail to execute because of ABI change. systemd and the\nlibrary are already updated while systemd-udev subpackage is not and\nhence old generators can't be started when systemd is reexecuting\ndue to internal library incompatibility.\n\nrhel-only: bugfix\n\nResolves: RHEL-33436","shortMessageHtmlLink":"generator: \"uninline\" generator_open_unit_file and generator_add_symlink"}},{"before":"753e1b1c9b255d528eb8b2a2af072a83eb85d784","after":"d7dcbf9726607734dffdf01f853b423400f4849d","ref":"refs/heads/main","pushedAt":"2024-07-03T16:13:11.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"netif-naming-scheme: make actually possible to use rhel-9.5 scheme\n\nIn 753e1b1c9b255d528eb8b2a2af072a83eb85d784 we forgot to update the\nnetif-naming-scheme.c file to allow people to actually use the new\nrhel-9.5 scheme.\n\nRHEL-only\n\nResolves: RHEL-44630","shortMessageHtmlLink":"netif-naming-scheme: make actually possible to use rhel-9.5 scheme"}},{"before":"70de0ee05d6680e81b6e1b163902c45a2ff7aa63","after":"753e1b1c9b255d528eb8b2a2af072a83eb85d784","ref":"refs/heads/main","pushedAt":"2024-07-03T08:13:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT\n\nThis effectively reverts 66425daf2c68793adf24a48a26d58add8662e83f.\n\nThe commit assumes that if the network interface has multifunctions,\nthen the function fields of the pci devices under the same PCI bridge\ndevice are unique.\nBut it seems not, at least on some setups. See issue #28929.\nLet's revert the change, and always refuse to set slot base naming if\na PCI bridge is detected.\n\nFixes #28929.\n\n(cherry picked from commit af7417ac7b07bc01232982bf46e9d72e69e7f820)\n\nResolves: RHEL-44630","shortMessageHtmlLink":"netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT"}},{"before":"2400e5c6395459fa3629747168c36df8ef543811","after":"70de0ee05d6680e81b6e1b163902c45a2ff7aa63","ref":"refs/heads/rhel-9.5.0","pushedAt":"2024-06-19T10:58:19.000Z","pushType":"push","commitsCount":5,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"meson: use ternary op for brevity\n\n(cherry picked from commit 3e0cf732435faba34aa16f315d8a47e924734589)\n\nRelated: RHEL-30372","shortMessageHtmlLink":"meson: use ternary op for brevity"}},{"before":"2400e5c6395459fa3629747168c36df8ef543811","after":"70de0ee05d6680e81b6e1b163902c45a2ff7aa63","ref":"refs/heads/main","pushedAt":"2024-06-19T10:12:08.000Z","pushType":"pr_merge","commitsCount":5,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"meson: use ternary op for brevity\n\n(cherry picked from commit 3e0cf732435faba34aa16f315d8a47e924734589)\n\nRelated: RHEL-30372","shortMessageHtmlLink":"meson: use ternary op for brevity"}},{"before":"3e5091146213b8b4abf0c5f5577a98b9da9c9f2c","after":"2400e5c6395459fa3629747168c36df8ef543811","ref":"refs/heads/rhel-9.5.0","pushedAt":"2024-06-13T14:14:58.000Z","pushType":"push","commitsCount":8,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"rpm: add `systemd_user_daemon_reexec`\n\nThis macros wraps the call to daemon-reexec in all user managers. It would be\ncalled for example from systemd %post right after the call to systemctl\ndaemon-reexec.\n\nThis will be used in the Fedora systemd package to fix a long-standing FIXME.\n\nTested via building and reinstalling the systemd package with the patches.\n\n(cherry picked from commit 9ff28e312bffe7567aa5d3f2c41303dd456f1691)\n\nResolves: RHEL-40878","shortMessageHtmlLink":"rpm: add <code>systemd_user_daemon_reexec</code>"}},{"before":"f6fdbbe989e54480882b9eeda452d168eea804a2","after":"2400e5c6395459fa3629747168c36df8ef543811","ref":"refs/heads/main","pushedAt":"2024-06-13T14:07:18.000Z","pushType":"pr_merge","commitsCount":7,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"rpm: add `systemd_user_daemon_reexec`\n\nThis macros wraps the call to daemon-reexec in all user managers. It would be\ncalled for example from systemd %post right after the call to systemctl\ndaemon-reexec.\n\nThis will be used in the Fedora systemd package to fix a long-standing FIXME.\n\nTested via building and reinstalling the systemd package with the patches.\n\n(cherry picked from commit 9ff28e312bffe7567aa5d3f2c41303dd456f1691)\n\nResolves: RHEL-40878","shortMessageHtmlLink":"rpm: add <code>systemd_user_daemon_reexec</code>"}},{"before":"3e5091146213b8b4abf0c5f5577a98b9da9c9f2c","after":"f6fdbbe989e54480882b9eeda452d168eea804a2","ref":"refs/heads/main","pushedAt":"2024-06-13T13:50:26.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Drop /dev test in test-mountpoint-util\n\nEven /dev isn't always guaranteed to be a mount point, so let's drop\nthis part of the test.\n\n(cherry picked from commit bacad14f94a4e98c3e81d821c56dbe7e2e4726ff)\n\nRelated: RHEL-30372","shortMessageHtmlLink":"Drop /dev test in test-mountpoint-util"}},{"before":"16eace42619860cbcfedca8c93e4ea20bfb0f98b","after":"3e5091146213b8b4abf0c5f5577a98b9da9c9f2c","ref":"refs/heads/rhel-9.5.0","pushedAt":"2024-06-13T11:55:46.000Z","pushType":"push","commitsCount":63,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"ci: define `runas` function inline\n\nWe don't have `test/units/util.sh`, which provides the definition of `runas` function in the RHEL9 codebase\n\nAlso partially backport https://github.com/systemd/systemd/commit/c7bf1959d7580e1b7e918b75f852b3bf3fb6eb3c\n\nrhel-only\n\nRelated: RHEL-35703","shortMessageHtmlLink":"ci: define <code>runas</code> function inline"}},{"before":"5a310f31d5d42bb7a556c274c3839c34c600e9f5","after":"3e5091146213b8b4abf0c5f5577a98b9da9c9f2c","ref":"refs/heads/main","pushedAt":"2024-06-12T13:48:41.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"ci: define `runas` function inline\n\nWe don't have `test/units/util.sh`, which provides the definition of `runas` function in the RHEL9 codebase\n\nAlso partially backport https://github.com/systemd/systemd/commit/c7bf1959d7580e1b7e918b75f852b3bf3fb6eb3c\n\nrhel-only\n\nRelated: RHEL-35703","shortMessageHtmlLink":"ci: define <code>runas</code> function inline"}},{"before":"ee2dd3cada129b39a2da5287f31e6d9e18a82764","after":"5a310f31d5d42bb7a556c274c3839c34c600e9f5","ref":"refs/heads/main","pushedAt":"2024-06-12T13:14:25.000Z","pushType":"pr_merge","commitsCount":44,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"ci: explicitly change oom-{score}-adj before running tests\n\nFor some reason root in GH actions is able to _decrease_ its oom score\neven after dropping all capabilities (including CAP_SYS_RESOURCE), until\nthe oom score is changed explicitly after sudo:\n\n$ systemd-detect-virt\nmicrosoft\n$ sudo su -\n~# capsh --drop=all -- -c 'capsh --print; grep -H . /proc/self/oom*; choom -p $$ -n -101'\nCurrent: =\nBounding set =\nAmbient set =\nCurrent IAB: !cap_chown,!cap_dac_override,!cap_dac_read_search,...,!cap_sys_resource,...,!cap_checkpoint_restore\nSecurebits: 00/0x0/1'b0\n secure-noroot: no (unlocked)\n secure-no-suid-fixup: no (unlocked)\n secure-keep-caps: no (unlocked)\n secure-no-ambient-raise: no (unlocked)\nuid=0(root) euid=0(root)\ngid=0(root)\ngroups=0(root)\nGuessed mode: UNCERTAIN (0)\n/proc/self/oom_adj:8\n/proc/self/oom_score:1000\n/proc/self/oom_score_adj:500\npid 22180's OOM score adjust value changed from 500 to -101\n~# choom -p $$ -n 500\npid 22027's OOM score adjust value changed from 500 to 500\n~# capsh --drop=all -- -c 'capsh --print; grep -H . /proc/self/oom*; choom -p $$ -n -101'\nCurrent: =\nBounding set =\nAmbient set =\n...\nuid=0(root) euid=0(root)\ngid=0(root)\ngroups=0(root)\nGuessed mode: UNCERTAIN (0)\n/proc/self/oom_adj:8\n/proc/self/oom_score:1000\n/proc/self/oom_score_adj:500\nchoom: failed to set score adjust value: Permission denied\n\nI have no idea what's going on, but it breaks\nexec-oomscoreadjust-negative.service from test-execute when running\nunprivileged.\n\n(cherry picked from commit 7161af9612d2d4f79cfbe8ed34ea7614d08901f7)\n\nRelated: RHEL-27512","shortMessageHtmlLink":"ci: explicitly change oom-{score}-adj before running tests"}},{"before":"ba83f030dc2721a317f31f5b7a5884431349074f","after":"ebb3f05ef5d2bf3543e61047a658103baa293ca0","ref":"refs/heads/rhel-9.4.0","pushedAt":"2024-06-12T12:47:12.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"jamacku","name":"Jan Macku","path":"/jamacku","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2879818?s=80&v=4"},"commit":{"message":"bootspec: fix null-dereference-read\n\nFixes [oss-fuzz#53578](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53578).\nFixes #25450.\n\n(cherry picked from commit 46dc071985ff487f5ccf20808531168a6add73d3)\n\nRelated: RHEL-40119","shortMessageHtmlLink":"bootspec: fix null-dereference-read"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEq3E7NgA","startCursor":null,"endCursor":null}},"title":"Activity · redhat-plumbers/systemd-rhel9"}