summaryrefslogtreecommitdiff
path: root/.github
Commit message (Collapse)AuthorAgeFilesLines
* mkosi: Enable some debugging options by defaultDaan De Meyer2023-03-171-9/+4
|
* mkosi: Use default timeout of 10sDaan De Meyer2023-03-161-0/+1
| | | | | Let's override the default timeout to something more reasonable for mkosi builds.
* github: update default and example in templateYu Watanabe2023-03-152-5/+5
|
* Update github issue template to include systemd-dissectCornelius Hoffmann2023-03-153-0/+5
|
* mkosi: Update to latestDaan De Meyer2023-03-111-1/+1
|
* ci: Adjust for new EFI buildJan Janssen2023-03-102-4/+5
|
* tree-wide: Drop gnu-efiJan Janssen2023-03-101-1/+1
| | | | | | | This drops all mentions of gnu-efi and its manual build machinery. A future commit will bring bootloader builds back. A new bootloader meson option is now used to control whether to build sd-boot and its userspace tooling.
* Merge pull request #26706 from jengelh/masterLuca Boccassi2023-03-071-1/+1
|\ | | | | doc: various orthographic fixes
| * doc: correct wrong use "'s" contractionsJan Engelhardt2023-03-071-1/+1
| |
* | mkosi: Drop debug loggingDaan De Meyer2023-03-071-29/+3
| | | | | | | | | | The spurious "connection timed out" errors from nspawn should be fixed now that we're running the latest version.
* | mkosi: Drop kernel command line masking in CIDaan De Meyer2023-03-071-1/+1
| | | | | | | | | | These services should be disabled by default and not need explicit masking anymore.
* | mkosi: Update to latestDaan De Meyer2023-03-071-1/+1
|/ | | | So that we don't enable services by default anymore on Debian.
* mkosi: Update to latestDaan De Meyer2023-03-061-1/+1
| | | | | Latest version builds nspawn from source which hopefully gets rid of the spurious "Connection timed out" errors we've been seeing in CI.
* build(deps): bump systemd/mkosidependabot[bot]2023-03-011-1/+1
| | | | | | | | | | | | | | Bumps [systemd/mkosi](https://github.com/systemd/mkosi) from 1d131062066fe7b5a83b87319b4464b186adbb1c to d13ff85610c6fb01a2fff0a8187729ebe4a05595. - [Release notes](https://github.com/systemd/mkosi/releases) - [Changelog](https://github.com/systemd/mkosi/blob/main/NEWS.md) - [Commits](https://github.com/systemd/mkosi/compare/1d131062066fe7b5a83b87319b4464b186adbb1c...d13ff85610c6fb01a2fff0a8187729ebe4a05595) --- updated-dependencies: - dependency-name: systemd/mkosi dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump github/codeql-action from 2.1.29 to 2.2.5dependabot[bot]2023-03-012-4/+4
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.29 to 2.2.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ec3cf9c605b848da5f1e41e8452719eb1ccfb9a6...32dc499307d133bb5085bae78498c0ac2cf762d5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump actions/labeler from 4.0.1 to 4.0.2dependabot[bot]2023-03-011-1/+1
| | | | | | | | | | | | | | Bumps [actions/labeler](https://github.com/actions/labeler) from 4.0.1 to 4.0.2. - [Release notes](https://github.com/actions/labeler/releases) - [Commits](https://github.com/actions/labeler/compare/e54e5b338fbd6e6cdb5d60f51c22335fc57c401e...5c7539237e04b714afd8ad9b4aed733815b9fab4) --- updated-dependencies: - dependency-name: actions/labeler dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump meson from 1.0.0 to 1.0.1 in /.github/workflowsdependabot[bot]2023-03-011-3/+3
| | | | | | | | | | | | | | Bumps [meson](https://github.com/mesonbuild/meson) from 1.0.0 to 1.0.1. - [Release notes](https://github.com/mesonbuild/meson/releases) - [Commits](https://github.com/mesonbuild/meson/compare/1.0.0...1.0.1) --- updated-dependencies: - dependency-name: meson dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump actions/checkout from 3.2.0 to 3.3.0dependabot[bot]2023-03-0111-11/+11
| | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/755da8c3cf115ac066823e79a1e1788f8940201b...ac593985615ec2ede58e132d2e21d2b1cbd6127c) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #26518 from DaanDeMeyer/mkosi-stuffDaan De Meyer2023-02-211-1/+1
|\ | | | | mkosi: Drop build script workarounds
| * mkosi: Update to latestDaan De Meyer2023-02-211-1/+1
| |
* | mkosi: Add more debuggingDaan De Meyer2023-02-211-3/+23
|/
* mkosi: Enable debug logging in CIDaan De Meyer2023-02-151-0/+6
| | | | | | "Failed to dissect image: connection timed out" messages have been appearing sporadically in mkosi CI. Let's enable debug logging to help figure out why.
* ci(labeler): fix missing emoji in `dont-merge` labelJan Macku2023-02-111-1/+1
|
* ci(labeler): fix missing emoji in `quick-review` labelJan Macku2023-02-111-1/+1
|
* mkosi: Update to latestDaan De Meyer2023-02-101-5/+6
| | | | | | | | | Let's make sure we're testing unprivileged builds properly. Usage of SourceFileTransfer= and SourceFileTransferFinal= are removed as they were dropped by mkosi. SourceFileTransfer=mount is now the default in mkosi so behavior for the build script is unchanged. We stop copying sources in the final image until mkosi adds support for virtiofs.
* ci: Add names to steps in labeler workflowJan Macku2023-02-081-4/+9
| | | | | This makes it easier to see what step failed/was skipped in the GitHub Actions UI. It also makes future debugging easier.
* ci: remove `if: github.event.issue.pull_request` from `labeler.yml`Jan Macku2023-02-071-1/+1
| | | | | | | `github.event.issue.pull_request` is an object, not a boolean. This is the root cause of why the step that is supposed to remove labels is always skipped. Having this condition in place is not necessary since the workflow is run on the `pull_request_target` event.
* ci: fix missing quotes in `labeler.yml`Jan Macku2023-02-071-1/+1
|
* test: drop whitespace after shell redirection operatorsZbigniew Jędrzejewski-Szmek2023-02-061-1/+1
| | | | | | | | | | (The one case that is left unchanged is '< <(subcommand)'.) This way, the style with no gap was already dominant. This way, the reader immediately knows that ' < ' is a comparison operator and ' << ' is a shift. In a few cases, replace custom EOF replacement by just EOF. There is no point in using someting like "_EOL" unless "EOF" appears in the text.
* ci: Fix Development Freeze AutomationJan Macku2023-02-032-6/+88
| | | | | | | | | | | | | | | | | | | | Due to the limitation of `GITHUB_TOKEN` when running workflows from forks, it's required to split the `development_freeze` workflow in two. * First workflow will run on the `pull_request` trigger and save the PR number in the artifact. This workflow is running with read-only permissions on `GITHUB_TOKEN`. * Second workflow will get triggered on `workflow_run`. It will be run directly in the `systemd/systemd` context and can get permission to be able to create comments on PR. GITHUB_TOKEN limitations: * https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token GitHub Security Labs Article - How to correctly and safely overcome GITHUB_TOKEN limitations: * https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
* ci: Test with secure boot enabled under mkosiJan Janssen2023-02-011-1/+4
| | | | | | This gives us some nice test coverage for secure boot enrolling and the stub secure boot workound. The authenticated EFI variables are already created by mkosi, all we need to do is request secure boot to be used.
* build(deps): bump systemd/mkosidependabot[bot]2023-02-011-1/+1
| | | | | | | | | | | | | | Bumps [systemd/mkosi](https://github.com/systemd/mkosi) from f36983f552a197faf9e36361cc68a297e68bee73 to 500f93a36cc3d5bf1d06848a0a8870bf1424625f. - [Release notes](https://github.com/systemd/mkosi/releases) - [Changelog](https://github.com/systemd/mkosi/blob/main/NEWS.md) - [Commits](https://github.com/systemd/mkosi/compare/f36983f552a197faf9e36361cc68a297e68bee73...500f93a36cc3d5bf1d06848a0a8870bf1424625f) --- updated-dependencies: - dependency-name: systemd/mkosi dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump actions/github-script from 6.3.3 to 6.4.0dependabot[bot]2023-02-011-3/+3
| | | | | | | | | | | | | | Bumps [actions/github-script](https://github.com/actions/github-script) from 6.3.3 to 6.4.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/d556feaca394842dc55e4734bf3bb9f685482fa0...98814c53be79b1d30f795b907e553d8679345975) --- updated-dependencies: - dependency-name: actions/github-script dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump redhat-plumbers-in-action/advanced-issue-labelerdependabot[bot]2023-02-011-1/+1
| | | | | | | | | | | | | | Bumps [redhat-plumbers-in-action/advanced-issue-labeler](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler) from 2.0.1 to 2.0.4. - [Release notes](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler/releases) - [Commits](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler/compare/88209aef583c66312529c515d41ea6a710a4baba...25a1e41826424cdf577c71b58c852df4347f13b8) --- updated-dependencies: - dependency-name: redhat-plumbers-in-action/advanced-issue-labeler dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* mkosi: Disable auditd when running with nspawn in CIDaan De Meyer2023-01-291-1/+1
| | | | | auditd fails to start in CentOS Stream 9 causing CI failures so let's disable it when running with nspawn in CI.
* mkosi: Add back CentOS Stream 8 to CIDaan De Meyer2023-01-291-1/+3
| | | | | | It's still useful to test the EFI handover logic in systemd-boot. We use a mkosi.prepare script to install a newer python and update the system to use it.
* mkosi: Update and enable ukify in mkosi buildsDaan De Meyer2023-01-271-4/+2
| | | | | | | We also add the necessary deps for ukify to the mkosi configs. CentOS Stream 8 is dropped from CI because its python version is too old (3.6) to be able to run ukify.
* github/labeller: fix yaml syntaxZbigniew Jędrzejewski-Szmek2023-01-261-1/+1
|
* github/labeller: add more match patternsZbigniew Jędrzejewski-Szmek2023-01-261-26/+120
|
* ci: Update mkosi action to latest commitDaan De Meyer2023-01-151-14/+4
| | | | | | | | | | | | Let's make sure we're testing with the latest changes in mkosi. This includes both the switch to systemd-repart and ukify, making sure we get extra testing coverage for those components. This also drops options from the centos config that have been removed in the newer mkosi. For some reason idmapping runs into some issues so we disable it for now.
* ci: Fix PR labelingDaan De Meyer2023-01-121-3/+3
| | | | | Make sure we only add labels to open pull request and remove labels from closed pull requests.
* github: use 'meson setup'Zbigniew Jędrzejewski-Szmek2023-01-111-3/+4
| | | | | | | Meson started warning when 'setup' is not used: WARNING: Running the setup command as `meson [options]` instead of `meson setup [options]` is ambiguous and deprecated. Also add more quoting in output to make the message clearer.
* ci: Remove a bunch of labels when a PR is mergedDaan De Meyer2023-01-101-1/+32
|
* boot: Simplify object erasureJan Janssen2023-01-091-1/+1
| | | | | | | | This erase_obj() machinery looks like voodoo and creates an awful lot of noise as soon as we get back to building with -O0. We can do this in a more simple way by introducing a struct that holds the information we need on cleanup. When building with optimization enabled, all this gets inlined and the eraser vanishes.
* build(deps): bump stefanbuck/github-issue-parser from 2.0.4 to 3.0.1dependabot[bot]2023-01-061-1/+1
| | | | | | | | | | | | | | Bumps [stefanbuck/github-issue-parser](https://github.com/stefanbuck/github-issue-parser) from 2.0.4 to 3.0.1. - [Release notes](https://github.com/stefanbuck/github-issue-parser/releases) - [Commits](https://github.com/stefanbuck/github-issue-parser/compare/f80b14f78892a66d7a35bba44f0a7d63bee03602...c1a559d78bfb8dd05216dab9ffd2b91082ff5324) --- updated-dependencies: - dependency-name: stefanbuck/github-issue-parser dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump ossf/scorecard-action from 2.0.6 to 2.1.2dependabot[bot]2023-01-061-1/+1
| | | | | | | | | | | | | | | Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.6 to 2.1.2. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/99c53751e09b9529366343771cc321ec74e9bd3d...e38b1902ae4f44df626f11ba0734b14fb91f8f86) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump github/super-linter from 4.9.6 to 4.9.7dependabot[bot]2023-01-061-1/+1
| | | | | | | | | | | | | | | Bumps [github/super-linter](https://github.com/github/super-linter) from 4.9.6 to 4.9.7. - [Release notes](https://github.com/github/super-linter/releases) - [Changelog](https://github.com/github/super-linter/blob/main/docs/release-process.md) - [Commits](https://github.com/github/super-linter/compare/01d3218744765b55c3b5ffbb27e50961e50c33c5...bb2d833b08b6c288608686672b93a8a4589cdc49) --- updated-dependencies: - dependency-name: github/super-linter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump actions/checkout from 3.0.2 to 3.2.0dependabot[bot]2023-01-0610-10/+10
| | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.2.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3.0.2...755da8c3cf115ac066823e79a1e1788f8940201b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump meson from 0.64.1 to 1.0.0 in /.github/workflowsdependabot[bot]2023-01-061-3/+3
| | | | | | | | | | | | | | Bumps [meson](https://github.com/mesonbuild/meson) from 0.64.1 to 1.0.0. - [Release notes](https://github.com/mesonbuild/meson/releases) - [Commits](https://github.com/mesonbuild/meson/compare/0.64.1...1.0.0) --- updated-dependencies: - dependency-name: meson dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* github: update version in bug templatesZbigniew Jędrzejewski-Szmek2022-12-202-2/+2
|