summaryrefslogtreecommitdiffstats
path: root/.github (follow)
Commit message (Collapse)AuthorAgeFilesLines
* mkosi: Update to latestDaan De Meyer2024-04-261-1/+1
|
* mkosi: Only keep failed test journals and other logs for 7 daysDaan De Meyer2024-04-251-0/+1
| | | | | The default retention of 90 days seems a bit long, so drop it to 7 days.
* mkosi: Only archive outputs in systemd and systemd-stable repositoriesDaan De Meyer2024-04-251-2/+2
| | | | | | Private forks would very quickly reach their quota or spend lots of money trying to archive all these artifacts, so let's make sure it only happens on our own repositories.
* ci: Add the meson logs to failure log artifactsRichard Maw2024-04-251-0/+1
| | | | | It is not a lot of use to add --debug to tests without it since only the last 100 lines are printed to console.
* ci: Update mkosi versionRichard Maw2024-04-251-1/+1
| | | | | The change to add microcode support had a bug in ukify handling that broke when it should have been picked up from ExtraSearchPaths.
* ci: remove packages.microsoft.comLuca Boccassi2024-04-242-0/+4
| | | | | It is not needed, it publishes things like dotnet, and it is often broken, so just remove the sources
* mkosi: Update to latestRichard Maw2024-04-241-1/+1
|
* mkosi: Configure lower retention limit for package artifactsDaan De Meyer2024-04-231-0/+1
| | | | | This is more than 0.5G per job, so let's drop the retention to 4 days to make sure we don't hit github's limits.
* mkosi: Fix Arch Linux package globDaan De Meyer2024-04-231-1/+1
|
* mkosi: Run integration tests in CIDaan De Meyer2024-04-231-33/+90
| | | | | | | | | | We do the image build and run the tests in a btrfs loopback so we can make use of btrfs subvolumes and COW to keep the disk space requirements to a minimum and speed up the ephemeral copies we make of the image to run the tests. We also switch to building debug packages and publishing the built packages as artifacts.
* mkosi: Update to latestDaan De Meyer2024-04-231-1/+1
|
* mkosi: Update to latestDaan De Meyer2024-04-221-1/+1
|
* ci: fix systemd-machined component nameFrantisek Sumsal2024-04-201-1/+1
| | | | Follow-up for d762f4d52d31c8eb6a6a7e517f107dfe8d443ee8.
* Replaced "machined" label with "machine" #32373Sarvajith Adyanthaya2024-04-201-2/+2
|
* labeler: merge "logind" label into "login"Frantisek Sumsal2024-04-192-5/+2
| | | | | | Existing issues/PRs were migrated to the login label using: $ gh search issues --repo systemd/systemd --label logind --limit=1000 --json number -q .[].number | \ xargs gh issue edit --add-label login --remove-label logind
* mkosi: Update to latestDaan De Meyer2024-04-181-1/+1
|
* mkosi: Drop workaroundsDaan De Meyer2024-04-171-9/+0
| | | | | With the latest Github Actions image release none of these should be required anymore (20240414.1.1).
* mkosi: Update to latestDaan De Meyer2024-04-151-1/+1
|
* github: add systemd-vmspawn to the issue templatesKristian Klausen2024-04-153-0/+5
|
* mkosi: Remove outdated commentDaan De Meyer2024-04-141-1/+0
|
* mkosi: Don't log debug logs to consoleDaan De Meyer2024-04-141-0/+1
| | | | | | | We have various tools that log directly to the console, as well as pid1 which logs directly to the console when running in a container. Let's make sure that we don't log debug messages to the console by default, but keep the behavior when running in CI.
* mkosi: Update to latestDaan De Meyer2024-04-141-1/+1
|
* mkosi: Update to latestDaan De Meyer2024-04-091-1/+1
|
* labeler: add mountfsd and nsresourceMike Yuan2024-04-081-0/+6
|
* ci: fix commit SHA for stefanbuck/github-issue-parserFrantisek Sumsal2024-04-021-1/+1
| | | | | | | | | | | | | | | The SHA for this action was updated by Dependabot in #25900 to a commit which later disappeared from the repo. Since then Dependabot kept (silently) failing to bump the SHA further: updater | 2024/03/31 21:22:13 ERROR <job_807574419> Error processing stefanbuck/github-issue-parser (Dependabot::SharedHelpers::HelperSubprocessFailed) updater | 2024/03/31 21:22:13 ERROR <job_807574419> error: no such commit c1a559d78bfb8dd05216dab9ffd2b91082ff5324 See: https://github.com/systemd/systemd/pull/25900#issuecomment-2028912672 Let's bump the SHA manually to v3.1.0 to get Dependabot back on the track. Co-authored-by: Evgeny Vereshchagin <evvers@ya.ru>
* build(deps): bump systemd/mkosidependabot[bot]2024-04-021-1/+1
| | | | | | | | | | | | | | Bumps [systemd/mkosi](https://github.com/systemd/mkosi) from 31af101620fc2996517d87e86da310f7ba553d58 to 4dfdf98ed2877a1e40f37234e0b8fbba0fec3584. - [Release notes](https://github.com/systemd/mkosi/releases) - [Changelog](https://github.com/systemd/mkosi/blob/main/NEWS.md) - [Commits](https://github.com/systemd/mkosi/compare/31af101620fc2996517d87e86da310f7ba553d58...4dfdf98ed2877a1e40f37234e0b8fbba0fec3584) --- updated-dependencies: - dependency-name: systemd/mkosi dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump redhat-plumbers-in-action/differential-shellcheckdependabot[bot]2024-04-011-1/+1
| | | | | | | | | | | | | | | Bumps [redhat-plumbers-in-action/differential-shellcheck](https://github.com/redhat-plumbers-in-action/differential-shellcheck) from 5.1.0 to 5.1.1. - [Release notes](https://github.com/redhat-plumbers-in-action/differential-shellcheck/releases) - [Changelog](https://github.com/redhat-plumbers-in-action/differential-shellcheck/blob/main/docs/CHANGELOG.md) - [Commits](https://github.com/redhat-plumbers-in-action/differential-shellcheck/compare/b9df2a9417f69c056e0aeaf870abd9a2065a403e...c15070885a82a2c93db8a765d332c38c50dde8b3) --- updated-dependencies: - dependency-name: redhat-plumbers-in-action/differential-shellcheck dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* mkosi: Update to latestDaan De Meyer2024-03-271-1/+1
|
* mkosi: Re-enable OpenSUSE buildDaan De Meyer2024-03-271-4/+2
|
* mkosi: Update to latestDaan De Meyer2024-03-271-1/+1
|
* ci: build with clang-18Frantisek Sumsal2024-03-251-2/+2
|
* CI: revert the mmap_rnd_bits kludgeEvgeny Vereshchagin2024-03-214-8/+0
| | | | | | This reverts commit 2e0c2fb8fb15faeedf213930a4c2a3a6d584101f and commit b7c7498de814b1e9825b43c28e307a7f0af8ffd2 now that https://github.com/actions/runner-images/issues/9491 is closed.
* ci(freezer): update `devel-freezer` GHA to `v1.1.0`Jan Macku2024-03-201-1/+3
| | | | | | The new version of `devel-freezer` GitHub Action adds support for milestones, labels, and more. Now, when the `rc` tag is published, it won't post a development freeze comment on PRs included in the next milestone. This commit also sets a delay of the 20s for PR validation to give some time for updating labels and milestones on submitted PRs.
* ci(freezer): update metadata and development_freeze workflowJan Macku2024-03-202-48/+10
| | | | use custom action to gather PR metadata and download artifact rather then inline script
* ci(metadata): remove `fetch-depth: 0` it's not needed anymoreJan Macku2024-03-201-2/+0
|
* mkosi: Do disk space cleanup asynchronouslyDaan De Meyer2024-03-151-2/+6
| | | | | This can actually take a rather long time (multiple minutes) so make sure we do it asynchronously.
* cifuzz,cflite: set mmap_rnd_bits to 28Evgeny Vereshchagin2024-03-152-0/+2
| | | | | | | to get MSan jobs to work with the latest Ubuntu images. https://github.com/google/sanitizers/issues/1614 https://github.com/actions/runner-images/issues/9491
* mkosi: Enable KVMDaan De Meyer2024-03-131-2/+4
| | | | | | | | | | Since https://github.blog/2024-01-17-github-hosted-runners-double-the-power-for-open-source/, it seems that KVM is supported on GA runners, so let's explicitly enable it to make sure it is used. We update mkosi to latest and set QemuFirmware=uefi to disable secure boot which crashes qemu until https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2038777 is fixed.
* build(deps): bump github/codeql-action from 3.24.6 to 3.24.7dependabot[bot]2024-03-132-4/+4
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.6 to 3.24.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8a470fddafa5cbb6266ee11b37ef4d8aae19c571...3ab4101902695724f9365a384f86c1074d94e18c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump actions/checkout from 4.1.1 to 4.1.2dependabot[bot]2024-03-1312-12/+12
| | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/b4ffde65f46336ab88eb53be808477a3936bae11...9bb56186c3b09b4f86b1c65136769dd318469633) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump meson from 1.3.2 to 1.4.0 in /.github/workflowsdependabot[bot]2024-03-131-3/+3
| | | | | | | | | | | | | | Bumps [meson](https://github.com/mesonbuild/meson) from 1.3.2 to 1.4.0. - [Release notes](https://github.com/mesonbuild/meson/releases) - [Commits](https://github.com/mesonbuild/meson/compare/1.3.2...1.4.0) --- updated-dependencies: - dependency-name: meson dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump softprops/action-gh-release from 1 to 2dependabot[bot]2024-03-131-1/+1
| | | | | | | | | | | | | | | Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 1 to 2. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/de2c0eb89ae2a093876385947365aca7b0e5f844...9d7c94cfd0a1f3ed45544c887983e9fa900f0564) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* mkosi: Introduce packaging sources as submodulesDaan De Meyer2024-03-131-0/+5
| | | | | | | | | | | | | | | | By always cloning the latest branch commit, we can't bisect properly using mkosi as when bisecting wildly different packaging sources will be used compared to when the commit was merged. By using submodules, we track individual commits which means when bisecting the same packaging sources will be used. We use git submodules as dependabot has support for automatically making PRs to update git submodules. This commit also includes the necessary dependabot configuration to enable this. We make ubuntu/debian use the same submodule instead of adding the debian packaging sources twice by introducing a new $PKG_SUBDIR environment variable and using it instead of $DISTRIBUTION.
* ci: reduce ASLR entropyFrantisek Sumsal2024-03-122-0/+6
| | | | | | | | | | The latest GH Action runners started using 32-bit entropy for ASLR, which makes it incompatible with llvm-14. This was fixed in later llvm releases, but these aren't available on Ubuntu Jammy (22.04). Let's reduce the ASLR entropy to 28-bit, which should make llvm happy again, until the issue is resolved. See: https://github.com/actions/runner-images/issues/9491
* Merge pull request #31345 from DaanDeMeyer/mkosi-packagesDaan De Meyer2024-03-071-10/+6
|\ | | | | Build distribution packages in mkosi
| * Build distribution packages in mkosiDaan De Meyer2024-03-071-9/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of running meson install and hoping for the best, let's build distribution packages from the downstream packaging specs. This gets us the following: - Vastly simplified mkosi scripts since we don't need a separate initrd image anymore but can just reuse the default mkosi initrd. - Almost everything can move to the base image as its not the basis anymore for the initrd and as such we don't need to care about the size anymore. - The systemd packages that get pulled in as dependencies of other packages get properly uninstalled and replaced with our packages that we built instead of just installing on top of an existing systemd installation with no guarantee that everything from that previous installation was removed. - Much better testing coverage as what we're testing is much closer to what will actually be deployed in distributions. - Immediate feedback if something we change breaks distribution packaging - We get integration with the distribution for free as we'll automatically use the proper directories and such instead of having to hack this into a mkosi build script. - ...
| * mkosi: Update to v21Daan De Meyer2024-03-071-1/+1
| |
* | ci: explicitly change oom-{score}-adj before running testsFrantisek Sumsal2024-03-061-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some reason root in GH actions is able to _decrease_ its oom score even after dropping all capabilities (including CAP_SYS_RESOURCE), until the oom score is changed explicitly after sudo: $ systemd-detect-virt microsoft $ sudo su - ~# capsh --drop=all -- -c 'capsh --print; grep -H . /proc/self/oom*; choom -p $$ -n -101' Current: = Bounding set = Ambient set = Current IAB: !cap_chown,!cap_dac_override,!cap_dac_read_search,...,!cap_sys_resource,...,!cap_checkpoint_restore Securebits: 00/0x0/1'b0 secure-noroot: no (unlocked) secure-no-suid-fixup: no (unlocked) secure-keep-caps: no (unlocked) secure-no-ambient-raise: no (unlocked) uid=0(root) euid=0(root) gid=0(root) groups=0(root) Guessed mode: UNCERTAIN (0) /proc/self/oom_adj:8 /proc/self/oom_score:1000 /proc/self/oom_score_adj:500 pid 22180's OOM score adjust value changed from 500 to -101 ~# choom -p $$ -n 500 pid 22027's OOM score adjust value changed from 500 to 500 ~# capsh --drop=all -- -c 'capsh --print; grep -H . /proc/self/oom*; choom -p $$ -n -101' Current: = Bounding set = Ambient set = ... uid=0(root) euid=0(root) gid=0(root) groups=0(root) Guessed mode: UNCERTAIN (0) /proc/self/oom_adj:8 /proc/self/oom_score:1000 /proc/self/oom_score_adj:500 choom: failed to set score adjust value: Permission denied I have no idea what's going on, but it breaks exec-oomscoreadjust-negative.service from test-execute when running unprivileged.
* | ci: make the build dir accessible when running w/o privilegesFrantisek Sumsal2024-03-061-0/+5
|/ | | | | | | | | | | | | Otherwise the unprivileged part of test-execute gets silently skipped: /* test_run_tests_unprivileged */ Successfully forked off '(test-execute-unprivileged)' as PID 20998. ... pin_callout_binary: build dir binary: /home/runner/work/systemd/systemd/build/systemd-executor pin_callout_binary: open(/home/runner/work/systemd/systemd/build/systemd-executor)=-13 Failed to pin executor binary: No such file or directory (test-execute-unprivileged): manager_new, skipping tests: No such file or directory (test-execute-unprivileged) succeeded.
* CI: free up diskspace before mkosi jobsLuca Boccassi2024-03-011-0/+5
| | | | | | | | | | The runner has a lot of useless things installed, taking ~10GB, and jobs have started to fail when booting images due to lack of disk space, so delete some directories to make room. 2024-02-27T20:20:58.0998709Z ##[warning]You are running out of disk space. The runner will stop working when the machine runs out of disk space. Free space left: 0 MB Co-authored-by: Daan De Meyer <daan.j.demeyer@gmail.com>
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-04 13:51:03 +0100