Philip Peterson
f6a831c07d
build-arm64.yml: run natively on runner-arm64-linux, daily
...
Build Aurora / build (push) Successful in 9m9s
The new arm64 runner (a Tart VM on the Mac mini) builds it at native
speed, so it runs daily like build.yml, an hour after it.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-03 21:49:48 -09:00
forgejo-actions
530d3e842d
Merge upstream ublue-os/aurora main
2026-11-04 05:29:55 +00:00
Philip Peterson
0abe38650d
build-arm64.yml: initramfs without kmod-v4l2loopback
...
Build Aurora / build (push) Successful in 7m46s
Run 22 got through every package install and stopped in 19-initramfs.sh,
which asks rpm for kmod-v4l2loopback's files; the arm64 stand-in akmods
has no kmods. dracut --remove none builds fine (checked on Fedora 44).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-03 19:51:36 -09:00
Philip Peterson
414bb548b2
build-arm64.yml: drop intel-compute-runtime, x86_64-only in Fedora
...
Build Aurora / build (push) Successful in 10m45s
Run 20 stopped at it in 01-packages.sh. It's the only package in that
list without an aarch64 or noarch build in Fedora 44 or negativo17.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-03 18:46:38 -09:00
ubot-7274[bot]
2dd27d1930
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 45c510b ( #3141 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-04 03:09:22 +00:00
Philip Peterson
65933688d7
Build and register the schedules at 2cf3613f
...
Build Aurora / build (push) Successful in 9m42s
2cf3613f's message quoted the skip marker, so Forgejo skipped it.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 23:06:57 -09:00
Philip Peterson
2cf3613f3d
Scheduled builds: start from main as it is now
...
Run 18 (schedule) checked out e06d965f , where its schedule was registered,
because the pushes after it said [skip ci]; its merge of upstream was then
behind main and the push was rejected.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 22:49:19 -09:00
Philip Peterson
8f8af2614e
vendor-images.sh: skopeo never read CONTAINERS_REGISTRIES_CONF
...
Not a 1.22 change, as the last commit said: 1.16 ignored it too.
[skip ci]
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 20:43:42 -09:00
Philip Peterson
df3ac0bfc2
Read upstream with skopeo --registries-conf, not the env variable
...
skopeo 1.22 (the runner's, since NixOS 26.05) ignores
CONTAINERS_REGISTRIES_CONF, so vendoring copied the mirror onto itself and
Kinoite stayed at an old, amd64-only copy.
[skip ci]
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 19:50:46 -09:00
Philip Peterson
b5e0848146
build-arm64.yml: stop if Kinoite's tag has no arm64 image
...
Run 16 got the amd64 kernel while quay's kinoite:44 was single-arch.
[skip ci]
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 19:48:18 -09:00
ubot-7274[bot]
f27c96fefd
chore(deps): update zizmorcore/zizmor-action action to v0.8.1 ( #3137 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-03 04:47:21 +00:00
ubot-7274[bot]
e4ac5de71f
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 1ea3d6c ( #3138 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-03 03:11:08 +00:00
Philip Peterson
e06d965f7d
arm64: a weekly emulated build, as aurora:stable-arm64
...
Build Aurora / build (push) Successful in 8m22s
Upstream has no arm64 Aurora or akmods. A stand-in akmods image carries
Fedora's own aarch64 kernel (the one Kinoite ships) and no extra kmods;
buildah-arm64 makes `just build` target linux/arm64. Vendoring now copies
every architecture, and both builds prune their images when done.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 18:04:15 -09:00
inffy
f65d257565
feat(ci): add dnf-retry wrapper script ( #3133 )
...
Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-11-02 14:56:28 +00:00
forgejo-actions
a30c1130a0
Merge upstream ublue-os/aurora main
2026-11-02 06:14:28 +00:00
ubot-7274[bot]
99761ccdd3
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to d54aee1 ( #3135 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-02 03:11:55 +00:00
forgejo-actions
1c425703c8
Merge upstream ublue-os/aurora main
2026-11-01 05:00:09 +00:00
ubot-7274[bot]
db9023259e
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to bfe08b1 ( #3131 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-01 03:06:44 +00:00
ubot-7274[bot]
b2a2a456eb
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 1308485 ( #3130 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-01 01:44:55 +00:00
renner
b798933d1b
chore: remove plasma-union ( #3076 )
...
Will be pulled in with 6.8 [1]
[1] 394b79d2be
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
2026-10-31 20:57:15 +00:00
ubot-7274[bot]
c5a71ca294
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to df4929b ( #3128 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-31 19:52:21 +00:00
ubot-7274[bot]
da2dba6460
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 30f2f77 ( #3123 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-31 19:51:43 +00:00
renner
103bdd39dc
chore: remove fcitx5 from image ( #3081 )
...
part of: https://github.com/ublue-os/aurora/issues/3038
2026-10-31 18:47:28 +00:00
renner
f034c18da1
feat(ci): add dnf makecache before installing things ( #3124 )
2026-10-31 14:49:46 +02:00
Philip Peterson
216a45b35f
build.yml: upload the build's RPMs (left out of the last commit)
...
Build Aurora / build (push) Successful in 4m2s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-31 00:48:40 -08:00
Philip Peterson
85726d8def
Upload each build's RPMs to the forge's RPM registry
...
Build Aurora / build (push) Successful in 3m58s
.forgejo/upload-rpms.sh, from the rpm-mirror-test branch: a group per
upstream repository, packages already there skipped. Best effort: the
step never fails the build.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-31 00:43:12 -08:00
Philip Peterson
36b34ba66c
build.yml: checkout, the upstream merge and the build's GitHub downloads from our pull mirrors [skip ci]
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 22:23:32 -08:00
Philip Peterson
9fe274acb8
vendor-images.sh: copy digest-pinned images by digest, store them by tag
...
Build Aurora / build (push) Successful in 4m12s
skopeo refuses a reference with both a tag and a digest, so common, brew
and chunkah weren't vendored (run 4).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 21:40:06 -08:00
Philip Peterson
4ccf023d2e
Vendor upstream images into the forge's mirror/ before building
...
Build Aurora / build (push) Failing after 3m32s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 19:55:20 -08:00
Philip Peterson
6fb8a69e5b
Tag the image with the commit built, not the one the run started on [skip ci]
...
After Merge upstream, $GITHUB_SHA is still the pre-merge commit.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 13:54:29 -08:00
forgejo-actions
085b5d2e65
Merge upstream ublue-os/aurora main
2026-10-30 21:48:29 +00:00
Philip Peterson
70a5717120
Merge upstream daily, then build [skip ci]
...
A daily schedule (and Run workflow) first merges github.com/ublue-os/aurora
main into ours and pushes the merge, then builds and publishes, picking up
upstream's changes and the day's Fedora package updates.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 13:47:57 -08:00
Philip Peterson
12ef486714
Build on Forgejo and push to its registry [skip ci]
...
.forgejo/workflows/build.yml: just build, then push
forge.quinefoundation.com/quine-global-labs/aurora (stable,
stable-<date>, the commit). Its existence also stops Forgejo from running
upstream's .github/workflows.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 05:10:22 -08:00
ubot-7274[bot]
71dbbd7716
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 2a1fea9 ( #3121 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-30 03:58:51 +00:00
ubot-7274[bot]
1724a27916
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 87090e4 ( #3118 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-29 03:12:54 +00:00
ubot-7274[bot]
a9fcc79966
chore(deps): update dependency sigstore/cosign to v3.1.4 ( #3111 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:59:21 +00:00
ubot-7274[bot]
cc0676b10b
chore(deps): update zizmorcore/zizmor-action action to v0.8.0 ( #3114 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:52:10 +00:00
ubot-7274[bot]
c38c174c6a
chore(deps): update oras-project/setup-oras action to v2.0.3 ( #3113 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:46:59 +00:00
ubot-7274[bot]
45a1f73c1c
chore(deps): update github/codeql-action action to v4.39.1 ( #3112 )
2026-10-28 18:25:09 +02:00
inffy
0f7d21d2c5
fix(renovate): add cosign to exclusion rules and remove cooldown ( #3110 )
...
* fix(renovate): add cosign to exclusion rules
* remove cooldown for now
* also add zizmor to excludes
2026-10-28 17:13:27 +01:00
renner
59f4248e8f
fix: set timestamp for unpackaged content to EPOCH=1 instead of 0 ( #3096 )
...
resolves: https://github.com/ublue-os/aurora/issues/3093
2026-10-28 04:48:58 +00:00
ubot-7274[bot]
c57816a3ee
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 0218c33 ( #3108 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 03:13:34 +00:00
ubot-7274[bot]
0826f8d081
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 0c9703f ( #3106 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-27 19:46:56 +00:00
ubot-7274[bot]
c34f1fa928
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 2888e95 ( #3105 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-27 13:02:30 +00:00
inffy
a26c26e938
feat: use terra pkg to get gaming udev rules ( #3103 )
2026-10-27 12:24:10 +00:00
ubot-7274[bot]
54f446c39e
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 79afb5b ( #3101 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-27 05:25:57 +00:00
inffy
481bdfe702
fix: Regenerate CA trust and crypto policies for eMudhra incident ( #3098 )
...
This handles an issue where the three way /etc merge can leave a user unpatched despite having the new package.
Adapted from https://gitlab.com/fedora/bootc/base-images/-/merge_requests/663
(cherry picked from commit bfa213b13bc967d4652a908ec457e3f1aed34d6d
https://github.com/ublue-os/main/pull/3029 )
Co-authored-by: Kyle Gospodnetich <me@kylegospodneti.ch>
2026-10-26 14:10:26 +00:00
ubot-7274[bot]
a0855c4ccc
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 6887b7c ( #3094 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-26 03:22:50 +00:00
ubot-7274[bot]
cff9396a0f
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 76f11d8 ( #3092 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-25 06:38:22 +00:00
ubot-7274[bot]
bc033fb2fd
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 879ac56 ( #3090 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-25 03:18:20 +00:00