13 files changed, 27 insertions, 19 deletions
diff --git a/mkosi.conf b/mkosi.conf
index 3e33410c71..b76cefe0df 100644
--- a/mkosi.conf
+++ b/mkosi.conf
@@ -26,16 +26,18 @@ PassEnvironment=
 [Output]
 RepartDirectories=mkosi.repart
 OutputDirectory=build/mkosi.output
+
+[Build]
 BuildDirectory=build/mkosi.builddir
 CacheDirectory=build/mkosi.cache
+BuildSourcesEphemeral=yes
+Incremental=yes
 
 # TODO: Remove when TEST-70-TPM doesn't fail in an image with signed PCRs anymore.
 [Validation]
 SignExpectedPcr=no
 
 [Content]
-BuildSourcesEphemeral=yes
-
 ExtraTrees=
         mkosi.crt:/usr/lib/verity.d/mkosi.crt # sysext verification key
         mkosi.leak-sanitizer-suppressions:/usr/lib/systemd/leak-sanitizer-suppressions
@@ -141,11 +143,9 @@ Credentials=
         tty.serial.hvc0.login.noauth=yes
         tty.console.agetty.autologin=root
         tty.console.login.noauth=yes
-Incremental=yes
 RuntimeBuildSources=yes
 RuntimeScratch=no
 QemuSmp=2
 QemuSwtpm=yes
 QemuVsock=yes
 QemuKvm=yes
-ToolsTreePackages=virtiofsd
diff --git a/mkosi.conf.d/10-centos-fedora/mkosi.conf.d/10-selinux.conf b/mkosi.conf.d/10-centos-fedora/mkosi.conf.d/10-selinux.conf
index 0a388f3c08..137130e569 100644
--- a/mkosi.conf.d/10-centos-fedora/mkosi.conf.d/10-selinux.conf
+++ b/mkosi.conf.d/10-centos-fedora/mkosi.conf.d/10-selinux.conf
@@ -3,9 +3,6 @@
 # libselinux does not work in the slightest with /usr-only images so don't install the packages if we're
 # building a /usr-only image.
 
-[Match]
-Profile=!particle
-
 [Content]
 Packages=
         selinux-policy
diff --git a/mkosi.conf.d/10-centos/mkosi.conf b/mkosi.conf.d/10-centos/mkosi.conf
index dd462efcee..d2178315a2 100644
--- a/mkosi.conf.d/10-centos/mkosi.conf
+++ b/mkosi.conf.d/10-centos/mkosi.conf
@@ -6,7 +6,7 @@ Distribution=centos
 [Distribution]
 Release=10
 
-[Content]
+[Build]
 Environment=
         # CentOS doesn't support btrfs so we have to use something else. We'd prefer to use XFS here but it
         # fails to mount on duplicate filesystem UUIDs which happens when running tests in parallel so we use
@@ -16,5 +16,6 @@ Environment=
         # mkfs.ext4 enabled it by default, so we disable it explicitly.
         SYSTEMD_REPART_MKFS_OPTIONS_EXT4="-O ^orphan_file"
 
+[Content]
 Packages=
         kernel-modules # For squashfs
diff --git a/mkosi.conf.d/20-sanitizers.conf b/mkosi.conf.d/20-sanitizers.conf
index 62d052360a..ecbb02ba61 100644
--- a/mkosi.conf.d/20-sanitizers.conf
+++ b/mkosi.conf.d/20-sanitizers.conf
@@ -4,13 +4,15 @@
 Environment=SANITIZERS
 Environment=!SANITIZERS=
 
-[Content]
+[Build]
 # Set verify_asan_link_order=0 to prevent ASAN warnings when building the image and make sure the real ASAN
 # options are set when booting the image.
 # Set intercept_tls_get_addr=0 to work around leak sanitizer segmentation fault in test-dlopen-so on CentOS
 # Stream 9.
 # TODO: Drop intercept_tls_get_addr=0 when we remove CentOS Stream 9 builds.
 Environment=ASAN_OPTIONS=verify_asan_link_order=0:intercept_tls_get_addr=0
+
+[Content]
 KernelCommandLine=
         ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1
         systemd.setenv=ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1
@@ -19,5 +21,5 @@ KernelCommandLine=
         LSAN_OPTIONS=suppressions=/usr/lib/systemd/leak-sanitizer-suppressions
         systemd.setenv=LSAN_OPTIONS=suppressions=/usr/lib/systemd/leak-sanitizer-suppressions
 
-[Config]
+[Include]
 Include=%D/mkosi.sanitizers
diff --git a/mkosi.images/build/mkosi.conf.d/arch/mkosi.conf b/mkosi.images/build/mkosi.conf.d/arch/mkosi.conf
index ced3ea4108..fc90285561 100644
--- a/mkosi.images/build/mkosi.conf.d/arch/mkosi.conf
+++ b/mkosi.images/build/mkosi.conf.d/arch/mkosi.conf
@@ -3,13 +3,14 @@
 [Match]
 Distribution=arch
 
-[Content]
+[Build]
 Environment=
         GIT_URL=https://gitlab.archlinux.org/archlinux/packaging/packages/systemd.git
         GIT_BRANCH=main
         GIT_COMMIT=d5a2dc54dad2bcfefa1032cc95823f1acedfcb4c
         PKG_SUBDIR=arch
 
+[Content]
 Packages=
         base
         base-devel
diff --git a/mkosi.images/build/mkosi.conf.d/centos-fedora/mkosi.conf b/mkosi.images/build/mkosi.conf.d/centos-fedora/mkosi.conf
index 1efca6d4b2..0f4a79652c 100644
--- a/mkosi.images/build/mkosi.conf.d/centos-fedora/mkosi.conf
+++ b/mkosi.images/build/mkosi.conf.d/centos-fedora/mkosi.conf
@@ -4,13 +4,14 @@
 Distribution=|centos
 Distribution=|fedora
 
-[Content]
+[Build]
 Environment=
         GIT_URL=https://src.fedoraproject.org/rpms/systemd.git
         GIT_BRANCH=rawhide
         GIT_COMMIT=a67221c3f0d0b81b9b5b3230a71d09044342f1a4
         PKG_SUBDIR=fedora
 
+[Content]
 Packages=
         compiler-rt
         git-core
diff --git a/mkosi.images/build/mkosi.conf.d/debian-ubuntu/mkosi.conf b/mkosi.images/build/mkosi.conf.d/debian-ubuntu/mkosi.conf
index 29727d7e22..2351aaa6ce 100644
--- a/mkosi.images/build/mkosi.conf.d/debian-ubuntu/mkosi.conf
+++ b/mkosi.images/build/mkosi.conf.d/debian-ubuntu/mkosi.conf
@@ -4,7 +4,7 @@
 Distribution=|debian
 Distribution=|ubuntu
 
-[Content]
+[Build]
 Environment=
         GIT_URL=https://salsa.debian.org/systemd-team/systemd.git
         GIT_SUBDIR=debian
@@ -12,6 +12,7 @@ Environment=
         GIT_COMMIT=51389fefcabae6d1e28153fed84a5e69a9147b19
         PKG_SUBDIR=debian
 
+[Content]
 Packages=
         apt
         erofs-utils
diff --git a/mkosi.images/build/mkosi.conf.d/opensuse/mkosi.conf b/mkosi.images/build/mkosi.conf.d/opensuse/mkosi.conf
index 0b17435672..a4882df8b1 100644
--- a/mkosi.images/build/mkosi.conf.d/opensuse/mkosi.conf
+++ b/mkosi.images/build/mkosi.conf.d/opensuse/mkosi.conf
@@ -3,13 +3,14 @@
 [Match]
 Distribution=opensuse
 
-[Content]
+[Build]
 Environment=
         GIT_URL=https://src.opensuse.org/pool/systemd
         GIT_BRANCH=factory
         GIT_COMMIT=612bc16021b28ab99002fa1069f1ec97124397a25c7a207d013213b5cfb86055
         PKG_SUBDIR=opensuse
 
+[Content]
 Packages=
         diffutils
         erofs-utils
diff --git a/mkosi.images/exitrd/mkosi.conf b/mkosi.images/exitrd/mkosi.conf
index 28da8a592b..ea4fc806bf 100644
--- a/mkosi.images/exitrd/mkosi.conf
+++ b/mkosi.images/exitrd/mkosi.conf
@@ -13,5 +13,5 @@ MakeInitrd=yes
 Packages=
         bash
 
-[Config]
+[Include]
 Include=%D/mkosi.sanitizers
diff --git a/mkosi.images/initrd/mkosi.conf b/mkosi.images/initrd/mkosi.conf
index 3f2c5c77ce..ca28c123af 100644
--- a/mkosi.images/initrd/mkosi.conf
+++ b/mkosi.images/initrd/mkosi.conf
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: LGPL-2.1-or-later
 
-[Config]
+[Include]
 Include=
         mkosi-initrd
         %D/mkosi.sanitizers
diff --git a/mkosi.images/minimal-0/mkosi.conf b/mkosi.images/minimal-0/mkosi.conf
index 5ef80b8bc7..5d6717f897 100644
--- a/mkosi.images/minimal-0/mkosi.conf
+++ b/mkosi.images/minimal-0/mkosi.conf
@@ -7,7 +7,9 @@ Dependencies=minimal-base
 Format=portable
 SplitArtifacts=yes
 
+[Build]
+Environment=SYSTEMD_REPART_OVERRIDE_FSTYPE=squashfs
+
 [Content]
 BaseTrees=%O/minimal-base
-Environment=SYSTEMD_REPART_OVERRIDE_FSTYPE=squashfs
 Bootable=no
diff --git a/mkosi.images/minimal-1/mkosi.conf b/mkosi.images/minimal-1/mkosi.conf
index 5ef80b8bc7..5d6717f897 100644
--- a/mkosi.images/minimal-1/mkosi.conf
+++ b/mkosi.images/minimal-1/mkosi.conf
@@ -7,7 +7,9 @@ Dependencies=minimal-base
 Format=portable
 SplitArtifacts=yes
 
+[Build]
+Environment=SYSTEMD_REPART_OVERRIDE_FSTYPE=squashfs
+
 [Content]
 BaseTrees=%O/minimal-base
-Environment=SYSTEMD_REPART_OVERRIDE_FSTYPE=squashfs
 Bootable=no
diff --git a/mkosi.images/minimal-base/mkosi.conf b/mkosi.images/minimal-base/mkosi.conf
index d841f9b76b..56040f8b21 100644
--- a/mkosi.images/minimal-base/mkosi.conf
+++ b/mkosi.images/minimal-base/mkosi.conf
@@ -15,5 +15,5 @@ Packages=
         grep
         util-linux
 
-[Config]
+[Include]
 Include=%D/mkosi.sanitizers