[ubuntu/questing-proposed] systemd 257.6-1ubuntu1 (Accepted)

Fri May 30 18:52:21 UTC 2025

systemd (257.6-1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2112075). Remaining changes:
    - debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - resolve,wait-online: backport wait-online DNS patches
    - test-network: add handling for Ubuntu FAN patches (LP #2104943)
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP #2092438)
    - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are
      specific to s390x ccw devices are only prevented from being copied if
      zdev_early=0 is set, but copy rules in case of zdev_early=1 or if
      zdev_early is not specified at all. (LP #2102236)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
  * Dropped, no longer needed:
    - debian/patches: drop systemd-fsckd patch (LP: #2109800, LP: #1970069)

systemd (257.6-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * d/copyright: use GPL URL instead of old FSF postal address.
  * d/signing-template/copyright: use GPL URL instead of old FSF postal
    address.
  * d/control: bump Standards-Version to 4.7.2, no changes
  * Add version to systemd-boot-efi-signed virtual package. Otherwise
    dependency on systemd-boot-efi-signed (>= 257.5-2) is not satisfiable
    (Closes: #1104663)
  * systemd-homed: add dependency on polkitd (Closes: #1105743)
  * systemd-boot: fix BOOT.CSV usage (Closes: #1106024)
  * Update upstream source from tag 'upstream/257.6' Update to upstream
    version '257.6' with Debian dir
    907f7fd2ae07adbab0ffd7b9235fc25435f12bab
    (Fixes CVE-2025-4598)
  * Drop patches, merged upstream

  [ Tim Small ]
  * document requirement to sync *.link files with initrd (Closes:
    #1005282)

  [ Kirill Rekhov ]
  * Set upstream metadata fields: Security-Contact

systemd (257.5-2) unstable; urgency=medium

  * Backport new patch to workaround /lib64 symlink incompatibility
    (Closes: #1079329)

systemd (257.5-1) unstable; urgency=medium

  * Add NEWS entry to warn about network connectivity loss due to mDNS,
    and workaround
  * Use Conflicts instead of Breaks/Replaces for file move (Closes:
    #1101965)
  * Update upstream source from tag 'upstream/257.5' Update to upstream
    version '257.5' with Debian dir
    2218d137fd911b8d5c2849535b066d27f01406b2
  * Drop backports, included in 257.5
  * Remove conflicts with dracut:arm64 and build nspawn:arm64 again. A
    mutually satisfactory solution for #1079329 has been agreed and is
    being worked on, so temporarily reintroduce #1079329 until it's ready
    in a few days as per agreement with ctte.

systemd (257.4-9) unstable; urgency=medium

  * resolved: break mDNS, remove conflict with avahi. Feedback from users
    is to prefer breaking mDNS rather than avoiding avahi. Ship a drop-in
    to disable mDNS by default, so that users relying on mDNS for
    reachability can hopefully notice it and mask it before upgrading
    (Closes: #1098914)

systemd (257.4-8) unstable; urgency=medium

  [ Luca Boccassi ]
  * systemd.preinst: do not use systemctl libsystemd-shared might not be
    unpacked yet, so check things manually (Closes: #1101698)
  * systemd.preinst: fix shellcheck warnings
  * d/t/boot-and-services: skip gdm3 test in nested LXD run. It is flaky
    and fails half the times, not much value in checking a desktop session
    inside a nested container
  * reintroduce systemd-resolved, with conflict on avahi-daemon. It turns
    out the cloud images have a hard dependency on resolved. In order to
    avoid having to change them, reintroduce the package, with a hard
    conflict on avahi-daemon to avoid reintroducing #1098914 (Closes:
    #1101532)

  [ Yu Watanabe ]
  * d/rules: drop nscd meson option. The meson option was deprecated by
    28f1f1a5e652508d6e61ace8918e8b831e4b62b4 (v257).

systemd (257.4-7) unstable; urgency=medium

  * autopkgtest: when nested tests-in-lxd skips don't fail outer run
  * Backport patches to fix integration tests skipping
  * autopkgtest: re-enable integration tests

systemd (257.4-6) unstable; urgency=medium

  * systemd: conflict with dracut on arm64. Same as the systemd-
    nspawn/arm64 changes of 257.4-4. As correctly pointed out on the
    reopened #1079329 this combination also creates incompatibilities, so
    add an explicit package conflict to fix this occurrence too as
    requested by the reporter. (Closes: #1079329)
  * d/control: fix systemd-boot and systemd-boot-tools descriptions
  * Add Lintian override for 'unknown-field Protected'

systemd (257.4-5) unstable; urgency=medium

  * Add missing dh-exec shbang to d/systemd-tests.install

systemd (257.4-4) unstable; urgency=medium

  [ Luca Boccassi ]
  * Update tzdata-legacy version constraint for new bookworm-p-u tzdata
    version
  * systemd-boot: do case-insensitive parsing of efibootmgr output
    (Closes: #1100653)
  * userdbd: use wildcard to install units
  * systemd-container: use more wildcards to install files
  * Handle new tmp mount on upgrade in preinst rather than postinst. Avoid
    race with new units being activated and pulling it in at the same time
    (Closes: #1101175)
  * autopkgtest: remove workaround for 'meson compiile mkosi' and use
    'mkosi -f' instead to avoid slow rebuilds
  * autopkgtest: drop versioning constraints on tzdata. These do not seem
    to be necessary in order for autopkgtest to pull in the package, so
    drop them as they need to be constantly updated due to p-u uploads
  * Move leftover resolved files to its own package. A few files were
    mistakenly shipping in the main systemd package even though they are
    part of resolved, due to a refactor from some time ago. Move them
    over.
  * Drop systemd-resolved package. The ctte has declared that the way the
    systemd-resolved tool works is incompatible with their decision to
    prioritize avahi in Debian. Furthermore, the resolved tool is being
    used to inflict pain on the maintainer, and induce burnout.
    Regrettably, the only safe solution to ensure this package is
    compliant with this decision is to drop it, as all reasonable
    alternatives put forward have been rejected:
    https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
    (Closes: #1098914)
  * Drop systemd-nspawn on arm64. The ctte has declared that the way the
    systemd-nspawn binary works on arm64 is incompatible with their
    decision to leave in place a recently introduced change in the debian-
    specific base-files package, which caused a dpkg regression.
    Furthermore, the nspawn tool is being used to inflict pain on the
    maintainer, and induce burnout. Regrettably, the only safe solution to
    ensure this package is compliant with this decision is to drop the
    binary on arm64, as all reasonable alternatives put forward have been
    rejected:
    https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
    (Closes: #1079329)

  [ Nick Rosbrook ]
  * Add myself to Uploaders

  [ Andrea Pappacoda ]
  * d/control: only conflict against opensysusers << 0.7.3-4.1~
    opensysusers 0.7.3-4.1 is no longer co-installable with systemd as it
    conflicts with systemd-sysusers, so it is no longer needed to conflict
    against it systemd-side.

systemd (257.4-3) unstable; urgency=medium

  * Fix versioned breaks/replaces for sd-boot-tools (Closes: #1100412)

systemd (257.4-2) unstable; urgency=medium

  * Split bootctl to new systemd-boot-tools package (Closes: #1086860)

Date: Fri, 30 May 2025 10:56:19 -0400
Changed-By: Nick Rosbrook <enr0n at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/systemd/257.6-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 30 May 2025 10:56:19 -0400
Source: systemd
Built-For-Profiles: noudeb
Architecture: source
Version: 257.6-1ubuntu1
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Nick Rosbrook <enr0n at ubuntu.com>
Closes: 1005282 1079329 1086860 1098914 1100412 1100653 1101175 1101532 1101698 1101965 1104663 1105743 1106024
Launchpad-Bugs-Fixed: 1970069 2109800 2112075
Changes:
 systemd (257.6-1ubuntu1) questing; urgency=medium
 .
   * Merge with Debian unstable (LP: #2112075). Remaining changes:
     - debian/tests/boot-and-services: skip apparmor tests on armhf
     - debian/systemd.postinst:
       + manually call systemd-tmpfiles --create in postinst
       + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
     - debian/control:
       + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
       + Make systemd-cryptsetup Priority: important
       + Give systemd-resolved Priority: important
       + Add Recommends: systemd-hwe-hwdb to udev package
       + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
       + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
     - switch-root: use MS_MOVE for /run when switchig from initrd
     - resolve,wait-online: backport wait-online DNS patches
     - test-network: add handling for Ubuntu FAN patches (LP #2104943)
     - d/rules: disable bpf support on riscv64 for now (LP #2099864)
     - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
     - d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP #2092438)
     - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are
       specific to s390x ccw devices are only prevented from being copied if
       zdev_early=0 is set, but copy rules in case of zdev_early=1 or if
       zdev_early is not specified at all. (LP #2102236)
     - Delta for i386:
       + debian/systemd.install: exclude files that are not built for i386
       + debian/systemd.manpages: do not ship un-built manpages on i386
       + debian/rules,debian/control,debian/tests/control:
         Do not build with tpm libraries on i386
       + debian/rules,debian/control,debian/tests/control:
         Do not build with libqrencode on i386
       + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
   * Dropped, no longer needed:
     - debian/patches: drop systemd-fsckd patch (LP: #2109800, LP: #1970069)
 .
 systemd (257.6-1) unstable; urgency=medium
 .
   [ Luca Boccassi ]
   * d/copyright: use GPL URL instead of old FSF postal address.
   * d/signing-template/copyright: use GPL URL instead of old FSF postal
     address.
   * d/control: bump Standards-Version to 4.7.2, no changes
   * Add version to systemd-boot-efi-signed virtual package. Otherwise
     dependency on systemd-boot-efi-signed (>= 257.5-2) is not satisfiable
     (Closes: #1104663)
   * systemd-homed: add dependency on polkitd (Closes: #1105743)
   * systemd-boot: fix BOOT.CSV usage (Closes: #1106024)
   * Update upstream source from tag 'upstream/257.6' Update to upstream
     version '257.6' with Debian dir
     907f7fd2ae07adbab0ffd7b9235fc25435f12bab
     (Fixes CVE-2025-4598)
   * Drop patches, merged upstream
 .
   [ Tim Small ]
   * document requirement to sync *.link files with initrd (Closes:
     #1005282)
 .
   [ Kirill Rekhov ]
   * Set upstream metadata fields: Security-Contact
 .
 systemd (257.5-2) unstable; urgency=medium
 .
   * Backport new patch to workaround /lib64 symlink incompatibility
     (Closes: #1079329)
 .
 systemd (257.5-1) unstable; urgency=medium
 .
   * Add NEWS entry to warn about network connectivity loss due to mDNS,
     and workaround
   * Use Conflicts instead of Breaks/Replaces for file move (Closes:
     #1101965)
   * Update upstream source from tag 'upstream/257.5' Update to upstream
     version '257.5' with Debian dir
     2218d137fd911b8d5c2849535b066d27f01406b2
   * Drop backports, included in 257.5
   * Remove conflicts with dracut:arm64 and build nspawn:arm64 again. A
     mutually satisfactory solution for #1079329 has been agreed and is
     being worked on, so temporarily reintroduce #1079329 until it's ready
     in a few days as per agreement with ctte.
 .
 systemd (257.4-9) unstable; urgency=medium
 .
   * resolved: break mDNS, remove conflict with avahi. Feedback from users
     is to prefer breaking mDNS rather than avoiding avahi. Ship a drop-in
     to disable mDNS by default, so that users relying on mDNS for
     reachability can hopefully notice it and mask it before upgrading
     (Closes: #1098914)
 .
 systemd (257.4-8) unstable; urgency=medium
 .
   [ Luca Boccassi ]
   * systemd.preinst: do not use systemctl libsystemd-shared might not be
     unpacked yet, so check things manually (Closes: #1101698)
   * systemd.preinst: fix shellcheck warnings
   * d/t/boot-and-services: skip gdm3 test in nested LXD run. It is flaky
     and fails half the times, not much value in checking a desktop session
     inside a nested container
   * reintroduce systemd-resolved, with conflict on avahi-daemon. It turns
     out the cloud images have a hard dependency on resolved. In order to
     avoid having to change them, reintroduce the package, with a hard
     conflict on avahi-daemon to avoid reintroducing #1098914 (Closes:
     #1101532)
 .
   [ Yu Watanabe ]
   * d/rules: drop nscd meson option. The meson option was deprecated by
     28f1f1a5e652508d6e61ace8918e8b831e4b62b4 (v257).
 .
 systemd (257.4-7) unstable; urgency=medium
 .
   * autopkgtest: when nested tests-in-lxd skips don't fail outer run
   * Backport patches to fix integration tests skipping
   * autopkgtest: re-enable integration tests
 .
 systemd (257.4-6) unstable; urgency=medium
 .
   * systemd: conflict with dracut on arm64. Same as the systemd-
     nspawn/arm64 changes of 257.4-4. As correctly pointed out on the
     reopened #1079329 this combination also creates incompatibilities, so
     add an explicit package conflict to fix this occurrence too as
     requested by the reporter. (Closes: #1079329)
   * d/control: fix systemd-boot and systemd-boot-tools descriptions
   * Add Lintian override for 'unknown-field Protected'
 .
 systemd (257.4-5) unstable; urgency=medium
 .
   * Add missing dh-exec shbang to d/systemd-tests.install
 .
 systemd (257.4-4) unstable; urgency=medium
 .
   [ Luca Boccassi ]
   * Update tzdata-legacy version constraint for new bookworm-p-u tzdata
     version
   * systemd-boot: do case-insensitive parsing of efibootmgr output
     (Closes: #1100653)
   * userdbd: use wildcard to install units
   * systemd-container: use more wildcards to install files
   * Handle new tmp mount on upgrade in preinst rather than postinst. Avoid
     race with new units being activated and pulling it in at the same time
     (Closes: #1101175)
   * autopkgtest: remove workaround for 'meson compiile mkosi' and use
     'mkosi -f' instead to avoid slow rebuilds
   * autopkgtest: drop versioning constraints on tzdata. These do not seem
     to be necessary in order for autopkgtest to pull in the package, so
     drop them as they need to be constantly updated due to p-u uploads
   * Move leftover resolved files to its own package. A few files were
     mistakenly shipping in the main systemd package even though they are
     part of resolved, due to a refactor from some time ago. Move them
     over.
   * Drop systemd-resolved package. The ctte has declared that the way the
     systemd-resolved tool works is incompatible with their decision to
     prioritize avahi in Debian. Furthermore, the resolved tool is being
     used to inflict pain on the maintainer, and induce burnout.
     Regrettably, the only safe solution to ensure this package is
     compliant with this decision is to drop it, as all reasonable
     alternatives put forward have been rejected:
     https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
     (Closes: #1098914)
   * Drop systemd-nspawn on arm64. The ctte has declared that the way the
     systemd-nspawn binary works on arm64 is incompatible with their
     decision to leave in place a recently introduced change in the debian-
     specific base-files package, which caused a dpkg regression.
     Furthermore, the nspawn tool is being used to inflict pain on the
     maintainer, and induce burnout. Regrettably, the only safe solution to
     ensure this package is compliant with this decision is to drop the
     binary on arm64, as all reasonable alternatives put forward have been
     rejected:
     https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
     (Closes: #1079329)
 .
   [ Nick Rosbrook ]
   * Add myself to Uploaders
 .
   [ Andrea Pappacoda ]
   * d/control: only conflict against opensysusers << 0.7.3-4.1~
     opensysusers 0.7.3-4.1 is no longer co-installable with systemd as it
     conflicts with systemd-sysusers, so it is no longer needed to conflict
     against it systemd-side.
 .
 systemd (257.4-3) unstable; urgency=medium
 .
   * Fix versioned breaks/replaces for sd-boot-tools (Closes: #1100412)
 .
 systemd (257.4-2) unstable; urgency=medium
 .
   * Split bootctl to new systemd-boot-tools package (Closes: #1086860)
Checksums-Sha1:
 6131ae80f7a58028c1294c61403db8942f0de276 8466 systemd_257.6-1ubuntu1.dsc
 d9022cbcc23f7a8e08f3779be69139cc4307bfef 16321562 systemd_257.6.orig.tar.gz
 79d3e4e70118cfed427c4cc45ef3635903d041e1 245624 systemd_257.6-1ubuntu1.debian.tar.xz
 84e4d04f2b4c5a78a334db6928f43a1a1e3da8dd 14464 systemd_257.6-1ubuntu1_source.buildinfo
Checksums-Sha256:
 3c7bb050eaa923a56b8f06e7c59ce050ec64df4d3d9d984ba819a58b76a90ecb 8466 systemd_257.6-1ubuntu1.dsc
 1ac656c61e595cc6e653883d554caadd2053f323d9065c0daff69f83368b120c 16321562 systemd_257.6.orig.tar.gz
 6bdd9058b488c1744f4a5c71a2dc8e2d6f0d0111122435738b4839881d2e11c0 245624 systemd_257.6-1ubuntu1.debian.tar.xz
 e74978ab22788130b2d1661ba419d960644939be585287c7c1d3f5a7d2537262 14464 systemd_257.6-1ubuntu1_source.buildinfo
Files:
 3c4378d618567cf2de268bea491b0836 8466 admin optional systemd_257.6-1ubuntu1.dsc
 458b07e140cd65d25baf7752398c5d13 16321562 admin optional systemd_257.6.orig.tar.gz
 8bfebc243a164d45e8a546042678d75c 245624 admin optional systemd_257.6-1ubuntu1.debian.tar.xz
 bab783fdd6ecc83e5df37a01bf3244c8 14464 admin optional systemd_257.6-1ubuntu1_source.buildinfo
Original-Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers at lists.alioth.debian.org>