Commit graph

3668 commits

Author SHA1 Message Date
forgejo-actions
530d3e842d Merge upstream ublue-os/aurora main 2026-11-04 05:29:55 +00:00
Philip Peterson
0abe38650d build-arm64.yml: initramfs without kmod-v4l2loopback
All checks were successful
Build Aurora / build (push) Successful in 7m46s
Run 22 got through every package install and stopped in 19-initramfs.sh,
which asks rpm for kmod-v4l2loopback's files; the arm64 stand-in akmods
has no kmods. dracut --remove none builds fine (checked on Fedora 44).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-03 19:51:36 -09:00
Philip Peterson
414bb548b2 build-arm64.yml: drop intel-compute-runtime, x86_64-only in Fedora
All checks were successful
Build Aurora / build (push) Successful in 10m45s
Run 20 stopped at it in 01-packages.sh. It's the only package in that
list without an aarch64 or noarch build in Fedora 44 or negativo17.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-03 18:46:38 -09:00
ubot-7274[bot]
2dd27d1930
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 45c510b (#3141)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-04 03:09:22 +00:00
Philip Peterson
65933688d7 Build and register the schedules at 2cf3613f
All checks were successful
Build Aurora / build (push) Successful in 9m42s
2cf3613f's message quoted the skip marker, so Forgejo skipped it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 23:06:57 -09:00
Philip Peterson
2cf3613f3d Scheduled builds: start from main as it is now
Run 18 (schedule) checked out e06d965f, where its schedule was registered,
because the pushes after it said [skip ci]; its merge of upstream was then
behind main and the push was rejected.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 22:49:19 -09:00
Philip Peterson
8f8af2614e vendor-images.sh: skopeo never read CONTAINERS_REGISTRIES_CONF
Not a 1.22 change, as the last commit said: 1.16 ignored it too.

[skip ci]

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 20:43:42 -09:00
Philip Peterson
df3ac0bfc2 Read upstream with skopeo --registries-conf, not the env variable
skopeo 1.22 (the runner's, since NixOS 26.05) ignores
CONTAINERS_REGISTRIES_CONF, so vendoring copied the mirror onto itself and
Kinoite stayed at an old, amd64-only copy.

[skip ci]

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 19:50:46 -09:00
Philip Peterson
b5e0848146 build-arm64.yml: stop if Kinoite's tag has no arm64 image
Run 16 got the amd64 kernel while quay's kinoite:44 was single-arch.

[skip ci]

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 19:48:18 -09:00
ubot-7274[bot]
f27c96fefd
chore(deps): update zizmorcore/zizmor-action action to v0.8.1 (#3137)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-03 04:47:21 +00:00
ubot-7274[bot]
e4ac5de71f
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 1ea3d6c (#3138)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-03 03:11:08 +00:00
Philip Peterson
e06d965f7d arm64: a weekly emulated build, as aurora:stable-arm64
All checks were successful
Build Aurora / build (push) Successful in 8m22s
Upstream has no arm64 Aurora or akmods. A stand-in akmods image carries
Fedora's own aarch64 kernel (the one Kinoite ships) and no extra kmods;
buildah-arm64 makes `just build` target linux/arm64. Vendoring now copies
every architecture, and both builds prune their images when done.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 18:04:15 -09:00
inffy
f65d257565
feat(ci): add dnf-retry wrapper script (#3133)
Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-11-02 14:56:28 +00:00
forgejo-actions
a30c1130a0 Merge upstream ublue-os/aurora main 2026-11-02 06:14:28 +00:00
ubot-7274[bot]
99761ccdd3
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to d54aee1 (#3135)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-02 03:11:55 +00:00
forgejo-actions
1c425703c8 Merge upstream ublue-os/aurora main 2026-11-01 05:00:09 +00:00
ubot-7274[bot]
db9023259e
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to bfe08b1 (#3131)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-01 03:06:44 +00:00
ubot-7274[bot]
b2a2a456eb
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 1308485 (#3130)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-01 01:44:55 +00:00
renner
b798933d1b
chore: remove plasma-union (#3076)
Will be pulled in with 6.8 [1]

[1] 394b79d2be

Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
2026-10-31 20:57:15 +00:00
ubot-7274[bot]
c5a71ca294
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to df4929b (#3128)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-31 19:52:21 +00:00
ubot-7274[bot]
da2dba6460
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 30f2f77 (#3123)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-31 19:51:43 +00:00
renner
103bdd39dc
chore: remove fcitx5 from image (#3081)
part of: https://github.com/ublue-os/aurora/issues/3038
2026-10-31 18:47:28 +00:00
renner
f034c18da1
feat(ci): add dnf makecache before installing things (#3124) 2026-10-31 14:49:46 +02:00
Philip Peterson
216a45b35f build.yml: upload the build's RPMs (left out of the last commit)
All checks were successful
Build Aurora / build (push) Successful in 4m2s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-31 00:48:40 -08:00
Philip Peterson
85726d8def Upload each build's RPMs to the forge's RPM registry
All checks were successful
Build Aurora / build (push) Successful in 3m58s
.forgejo/upload-rpms.sh, from the rpm-mirror-test branch: a group per
upstream repository, packages already there skipped. Best effort: the
step never fails the build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-31 00:43:12 -08:00
Philip Peterson
36b34ba66c build.yml: checkout, the upstream merge and the build's GitHub downloads from our pull mirrors [skip ci]
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 22:23:32 -08:00
Philip Peterson
9fe274acb8 vendor-images.sh: copy digest-pinned images by digest, store them by tag
All checks were successful
Build Aurora / build (push) Successful in 4m12s
skopeo refuses a reference with both a tag and a digest, so common, brew
and chunkah weren't vendored (run 4).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 21:40:06 -08:00
Philip Peterson
4ccf023d2e Vendor upstream images into the forge's mirror/ before building
Some checks failed
Build Aurora / build (push) Failing after 3m32s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 19:55:20 -08:00
Philip Peterson
6fb8a69e5b Tag the image with the commit built, not the one the run started on [skip ci]
After Merge upstream, $GITHUB_SHA is still the pre-merge commit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 13:54:29 -08:00
forgejo-actions
085b5d2e65 Merge upstream ublue-os/aurora main 2026-10-30 21:48:29 +00:00
Philip Peterson
70a5717120 Merge upstream daily, then build [skip ci]
A daily schedule (and Run workflow) first merges github.com/ublue-os/aurora
main into ours and pushes the merge, then builds and publishes, picking up
upstream's changes and the day's Fedora package updates.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 13:47:57 -08:00
Philip Peterson
12ef486714 Build on Forgejo and push to its registry [skip ci]
.forgejo/workflows/build.yml: just build, then push
forge.quinefoundation.com/quine-global-labs/aurora (stable,
stable-<date>, the commit). Its existence also stops Forgejo from running
upstream's .github/workflows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 05:10:22 -08:00
ubot-7274[bot]
71dbbd7716
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 2a1fea9 (#3121)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-30 03:58:51 +00:00
ubot-7274[bot]
1724a27916
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 87090e4 (#3118)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-29 03:12:54 +00:00
ubot-7274[bot]
a9fcc79966
chore(deps): update dependency sigstore/cosign to v3.1.4 (#3111)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:59:21 +00:00
ubot-7274[bot]
cc0676b10b
chore(deps): update zizmorcore/zizmor-action action to v0.8.0 (#3114)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:52:10 +00:00
ubot-7274[bot]
c38c174c6a
chore(deps): update oras-project/setup-oras action to v2.0.3 (#3113)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:46:59 +00:00
ubot-7274[bot]
45a1f73c1c
chore(deps): update github/codeql-action action to v4.39.1 (#3112) 2026-10-28 18:25:09 +02:00
inffy
0f7d21d2c5
fix(renovate): add cosign to exclusion rules and remove cooldown (#3110)
* fix(renovate): add cosign to exclusion rules

* remove cooldown for now

* also add zizmor to excludes
2026-10-28 17:13:27 +01:00
renner
59f4248e8f
fix: set timestamp for unpackaged content to EPOCH=1 instead of 0 (#3096)
resolves: https://github.com/ublue-os/aurora/issues/3093
2026-10-28 04:48:58 +00:00
ubot-7274[bot]
c57816a3ee
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 0218c33 (#3108)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 03:13:34 +00:00
ubot-7274[bot]
0826f8d081
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 0c9703f (#3106)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-27 19:46:56 +00:00
ubot-7274[bot]
c34f1fa928
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 2888e95 (#3105)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-27 13:02:30 +00:00
inffy
a26c26e938
feat: use terra pkg to get gaming udev rules (#3103) 2026-10-27 12:24:10 +00:00
ubot-7274[bot]
54f446c39e
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 79afb5b (#3101)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-27 05:25:57 +00:00
inffy
481bdfe702
fix: Regenerate CA trust and crypto policies for eMudhra incident (#3098)
This handles an issue where the three way /etc merge can leave a user unpatched despite having the new package.

Adapted from https://gitlab.com/fedora/bootc/base-images/-/merge_requests/663
(cherry picked from commit bfa213b13bc967d4652a908ec457e3f1aed34d6d
 https://github.com/ublue-os/main/pull/3029)

Co-authored-by: Kyle Gospodnetich <me@kylegospodneti.ch>
2026-10-26 14:10:26 +00:00
ubot-7274[bot]
a0855c4ccc
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 6887b7c (#3094)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-26 03:22:50 +00:00
ubot-7274[bot]
cff9396a0f
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 76f11d8 (#3092)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-25 06:38:22 +00:00
ubot-7274[bot]
bc033fb2fd
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 879ac56 (#3090)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-25 03:18:20 +00:00
ubot-7274[bot]
f86fe91bd6
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 025ddf2 (#3089)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-25 02:04:48 +00:00