Skip to content

systemd: drop now-integrated-upstream patch

da04c5e
Select commit
Loading
Failed to load commit list.
Merged

systemd/257.8 package update #61713

systemd: drop now-integrated-upstream patch
da04c5e
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build succeeded Aug 7, 2025 in 9m 33s

APKs built successfully

Build ID: b84bd817-b462-449a-b112-48fc3487dae8

Details

x86_64 Logs

Click to expand
.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing keyutils-libs (1.6.3-r37)
installing krb5-libs (1.22-r2)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing gdbm (1.26-r1)
installing cyrus-sasl (2.1.28-r44)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libcurl-openssl4 (8.15.0-r4)
installing systemd (257.8-r0)
installing systemd-homed (257.8-r0)
installing systemd-firstboot (257.8-r0)
installing wolfi-keys (1-r12)
installing busybox (1.37.0-r48)
installing wolfi-base (1-r7)
qemu: generating ssh key pairs for ephemeral VM
qemu: starting VM
qemu: waiting for SSH
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
qemu: ssh-keygen: generating new host keys: RSA ECDSA ED25519 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 45198
qemu: Accepted publickey for root from 10.0.2.2 port 45208 ssh2: ECDSA SHA256:hSv/VPVOkDeUcPN9LJfil43NjrdF3D36oHzbRAS/pPQ
qemu: Connection closed by 10.0.2.2 port 45208
qemu: Accepted publickey for root from 10.0.2.2 port 45212 ssh2: ECDSA SHA256:hSv/VPVOkDeUcPN9LJfil43NjrdF3D36oHzbRAS/pPQ
qemu: Accepted publickey for root from 10.0.2.2 port 43350 ssh2: ECDSA SHA256:hSv/VPVOkDeUcPN9LJfil43NjrdF3D36oHzbRAS/pPQ
qemu: setting up local workspace
running step "test/verify-service"
running step "Verify Service files"
+ cat
+ basename /home/build/melange-out/systemd-firstboot
+ package_name=systemd-firstboot
+ skip_expr=
+ skip_expr='()'
+ echo 'Package name: systemd-firstboot'
+ echo 'Skipping files: ()'
Package name: systemd-firstboot
Skipping files: ()
+ mktemp
+ service_files=/tmp/tmp.ptpNhe
+ apk -L info systemd-firstboot
+ grep -E 'usr/lib/systemd/system/.*.(service|socket)$'
+ grep -vE '/()$'
WARNING: opening from cache https://apk.cgr.dev/wolfi-presubmit/29620a5dca933ce98aec065771caaa8cdfc0aa3b: No such file or directory
WARNING: opening from cache https://packages.wolfi.dev/os: No such file or directory
+ '[' '!' -s /tmp/tmp.ptpNhe ]
+ cat /tmp/tmp.ptpNhe
+ systemd-analyze verify '--man=false' usr/lib/systemd/system/systemd-firstboot.service
+ systemd-analyze verify '--man=false' usr/lib/systemd/system/systemd-homed-firstboot.service
+ systemd-analyze verify '--man=false' usr/lib/systemd/system/sysinit.target.wants/systemd-firstboot.service
+ rm /tmp/tmp.ptpNhe
+ exit 0
running step "Check version"
systemd 257 (257.8)
+PAM +AUDIT -SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY +P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF -XKBCOMMON +UTMP +SYSVINIT +LIBARCHIVE
systemd-firstboot [OPTIONS...]

Configures basic settings of the system.

  -h --help                       Show this help
     --version                    Show package version
     --root=PATH                  Operate on an alternate filesystem root
     --image=PATH                 Operate on disk image as filesystem root
     --image-policy=POLICY        Specify disk image dissection policy
     --locale=LOCALE              Set primary locale (LANG=)
     --locale-messages=LOCALE     Set message locale (LC_MESSAGES=)
     --keymap=KEYMAP              Set keymap
     --timezone=TIMEZONE          Set timezone
     --hostname=NAME              Set hostname
     --setup-machine-id           Set a random machine ID
     --machine-id=ID              Set specified machine ID
     --root-password=PASSWORD     Set root password from plaintext password
     --root-password-file=FILE    Set root password from file
     --root-password-hashed=HASH  Set root password from hashed password
     --root-shell=SHELL           Set root shell
     --kernel-command-line=CMDLINE
                                  Set kernel command line
     --prompt-locale              Prompt the user for locale settings
     --prompt-keymap              Prompt the user for keymap settings
     --prompt-timezone            Prompt the user for timezone
     --prompt-hostname            Prompt the user for hostname
     --prompt-root-password       Prompt the user for root password
     --prompt-root-shell          Prompt the user for root shell
     --prompt                     Prompt for all of the above
     --copy-locale                Copy locale from host
     --copy-keymap                Copy keymap from host
     --copy-timezone              Copy timezone from host
     --copy-root-password         Copy root password from host
     --copy-root-shell            Copy root shell from host
     --copy                       Copy locale, keymap, timezone, root password
     --force                      Overwrite existing files
     --delete-root-password       Delete root password
     --welcome=no                 Disable the welcome text
     --reset                      Remove existing files

See the systemd-firstboot(1) man page for details.
qemu: sending shutdown signal
running test pipeline for subpackage systemd-homed
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [apk-tools grep systemd systemd-homed]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing ld-linux (2.41-r56)
installing libgcc (15.1.0-r4)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing zlib (1.3.1-r51)
installing libcrypto3 (3.5.2-r0)
installing libssl3 (3.5.2-r0)
installing apk-tools (2.14.10-r7)
installing libpcre2-8-0 (10.45-r3)
installing grep (3.12-r3)
installing libcom_err (1.47.3-r1)
installing e2fsprogs-libs (1.47.3-r1)
installing quota-tools (4.10-r1)
installing libtasn1 (4.20.0-r5)
installing libunistring (1.3-r4)
installing libstdc++ (15.1.0-r4)
installing gmp (6.3.0-r8)
installing gmp-dev (6.3.0-r8)
installing nettle (3.10.2-r1)
installing libffi (3.5.2-r0)
installing p11-kit (0.25.5-r3)
installing gnutls (3.8.10-r1)
installing libmicrohttpd (1.0.2-r1)
installing libseccomp (2.6.0-r1)
installing libcap-ng (0.8.5-r3)
installing libaudit (4.1.1-r1)
installing libcap (2.76-r6)
installing libsystemd (257.8-r0)
installing dbus-libs (1.16.2-r3)
installing libexpat1 (2.7.1-r3)
installing dbus (1.16.2-r3)
installing popt (1.19-r3)
installing json-c (0.18-r4)
installing libssh (0.11.2-r1)
installing device-mapper-libs (2.03.34-r1)
installing libblkid (2.41.1-r4)
installing libuuid (2.41.1-r4)
installing cryptsetup (2.8.0-r2)
installing libgpg-error (1.55-r2)
installing libgcrypt (1.11.2-r0)
installing libacl1 (2.3.2-r53)
installing libzstd1 (1.5.7-r3)
installing xz (5.8.1-r2)
installing kmod (34.2-r41)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libxcrypt (4.4.38-r4)
installing libcrypt1 (2.41-r56)
installing linux-pam (1.7.1-r1)
installing libfdisk (2.41.1-r4)
installing libmount (2.41.1-r4)
installing libsystemd-shared (257.8-r0)
installing systemd-boot (257.8-r0)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libbrotlicommon1 (1.1.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing keyutils-libs (1.6.3-r37)
installing krb5-libs (1.22-r2)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing gdbm (1.26-r1)
installing cyrus-sasl (2.1.28-r44)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libcurl-openssl4 (8.15.0-r4)
installing systemd (257.8-r0)
installing systemd-homed (257.8-r0)
installing wolfi-keys (1-r12)
installing busybox (1.37.0-r48)
installing wolfi-base (1-r7)
qemu: generating ssh key pairs for ephemeral VM
qemu: starting VM
qemu: waiting for SSH
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.

aarch64 Logs

Click to expand
          Require maximum time between password changes
     --password-change-warn=TIME
                               How much time to warn before password expiry
     --password-change-inactive=TIME
                               How much time to block password after expiry

Resource Management User Record Properties:
     --disk-size=BYTES         Size to assign the user on disk
     --access-mode=MODE        User home directory access mode
     --umask=MODE              Umask for user when logging in
     --nice=NICE               Nice level for user
     --rlimit=LIMIT=VALUE[:VALUE]
                               Set resource limits
     --tasks-max=MAX           Set maximum number of per-user tasks
     --memory-high=BYTES       Set high memory threshold in bytes
     --memory-max=BYTES        Set maximum memory limit
     --cpu-weight=WEIGHT       Set CPU weight
     --io-weight=WEIGHT        Set IO weight

Storage User Record Properties:
     --storage=STORAGE         Storage type to use (luks, fscrypt, directory,
                               subvolume, cifs)
     --image-path=PATH         Path to image file/directory
     --drop-caches=BOOL        Whether to automatically drop caches on logout

LUKS Storage User Record Properties:
     --fs-type=TYPE            File system type to use in case of luks
                               storage (btrfs, ext4, xfs)
     --luks-discard=BOOL       Whether to use 'discard' feature of file system
                               when activated (mounted)
     --luks-offline-discard=BOOL
                               Whether to trim file on logout
     --luks-cipher=CIPHER      Cipher to use for LUKS encryption
     --luks-cipher-mode=MODE   Cipher mode to use for LUKS encryption
     --luks-volume-key-size=BITS
                               Volume key size to use for LUKS encryption
     --luks-pbkdf-type=TYPE    Password-based Key Derivation Function to use
     --luks-pbkdf-hash-algorithm=ALGORITHM
                               PBKDF hash algorithm to use
     --luks-pbkdf-time-cost=SECS
                               Time cost for PBKDF in seconds
     --luks-pbkdf-memory-cost=BYTES
                               Memory cost for PBKDF in bytes
     --luks-pbkdf-parallel-threads=NUMBER
                               Number of parallel threads for PKBDF
     --luks-sector-size=BYTES
                               Sector size for LUKS encryption in bytes
     --luks-extra-mount-options=OPTIONS
                               LUKS extra mount options
     --auto-resize-mode=MODE   Automatically grow/shrink home on login/logout
     --rebalance-weight=WEIGHT Weight while rebalancing

Mounting User Record Properties:
     --nosuid=BOOL             Control the 'nosuid' flag of the home mount
     --nodev=BOOL              Control the 'nodev' flag of the home mount
     --noexec=BOOL             Control the 'noexec' flag of the home mount

CIFS User Record Properties:
     --cifs-domain=DOMAIN      CIFS (Windows) domain
     --cifs-user-name=USER     CIFS (Windows) user name
     --cifs-service=SERVICE    CIFS (Windows) service to mount as home area
     --cifs-extra-mount-options=OPTIONS
                               CIFS (Windows) extra mount options

Login Behaviour User Record Properties:
     --stop-delay=SECS         How long to leave user services running after
                               logout
     --kill-processes=BOOL     Whether to kill user processes when sessions
                               terminate
     --auto-login=BOOL         Try to log this user in automatically
     --session-launcher=LAUNCHER
                               Preferred session launcher file
     --session-type=TYPE       Preferred session type

See the homectl(1) man page for details.
pod 41a9d92b614d89d0c301ad2ba2ec7d1761c9c0063e5667908d13a025bcba42ec terminated
running test pipeline for subpackage systemd-userdb
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [apk-tools grep systemd systemd-userdb]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing libgcc (15.1.0-r4)
installing ld-linux (2.41-r56)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing zlib (1.3.1-r51)
installing libcrypto3 (3.5.2-r0)
installing libssl3 (3.5.2-r0)
installing apk-tools (2.14.10-r7)
installing libpcre2-8-0 (10.45-r3)
installing grep (3.12-r3)
installing libcom_err (1.47.3-r1)
installing e2fsprogs-libs (1.47.3-r1)
installing quota-tools (4.10-r1)
installing libtasn1 (4.20.0-r5)
installing libunistring (1.3-r4)
installing libstdc++ (15.1.0-r4)
installing gmp (6.3.0-r8)
installing gmp-dev (6.3.0-r8)
installing nettle (3.10.2-r1)
installing libffi (3.5.2-r0)
installing p11-kit (0.25.5-r3)
installing gnutls (3.8.10-r1)
installing libmicrohttpd (1.0.2-r1)
installing libseccomp (2.6.0-r1)
installing libcap (2.76-r6)
installing libsystemd (257.8-r0)
installing dbus-libs (1.16.2-r3)
installing libexpat1 (2.7.1-r3)
installing dbus (1.16.2-r3)
installing libcap-ng (0.8.5-r3)
installing libaudit (4.1.1-r1)
installing popt (1.19-r3)
installing json-c (0.18-r4)
installing libssh (0.11.2-r1)
installing device-mapper-libs (2.03.34-r1)
installing libblkid (2.41.1-r4)
installing libuuid (2.41.1-r4)
installing cryptsetup (2.8.0-r2)
installing libgpg-error (1.55-r2)
installing libgcrypt (1.11.2-r0)
installing libacl1 (2.3.2-r53)
installing libzstd1 (1.5.7-r3)
installing xz (5.8.1-r2)
installing kmod (34.2-r41)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libxcrypt (4.4.38-r4)
installing libcrypt1 (2.41-r56)
installing linux-pam (1.7.1-r1)
installing libfdisk (2.41.1-r4)
installing libmount (2.41.1-r4)
installing libsystemd-shared (257.8-r0)
installing systemd-boot (257.8-r0)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libbrotlicommon1 (1.1.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing keyutils-libs (1.6.3-r37)
installing krb5-libs (1.22-r2)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing gdbm (1.26-r1)
installing cyrus-sasl (2.1.28-r44)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libcurl-openssl4 (8.15.0-r4)
installing systemd (257.8-r0)
installing systemd-userdb (257.8-r0)
installing wolfi-keys (1-r12)
installing busybox (1.37.0-r48)
installing wolfi-base (1-r7)
layer digest: sha256:08fc2a4016a1232ccc034e599a93aad542b7d5fc1f3d60edd1643b5c3a7b0cf6
layer diffID: sha256:e4fa1e3e5aa50adedfaaf2e096bb9c790b300cb67a6a0f5692a4f4dbc9f7ec2a
saving OCI image locally: apko.local/cache:9f2820ae41ba72d99f0831e9e775a2b86d52f870748232c08e1db248dc020b7d
running step "test/verify-service"
running step "Verify Service files"
+ cat
+ basename /home/build/melange-out/systemd-userdb
Package name: systemd-userdb
Skipping files: ()
+ package_name=systemd-userdb
+ skip_expr=
+ skip_expr='()'
+ echo 'Package name: systemd-userdb'
+ echo 'Skipping files: ()'
+ mktemp
+ service_files=/tmp/tmp.2k3VI7
+ apk -L info systemd-userdb
+ grep -E 'usr/lib/systemd/system/.*.(service|socket)$'
+ grep -vE '/()$'
WARNING: opening from cache https://apk.cgr.dev/wolfi-presubmit/29620a5dca933ce98aec065771caaa8cdfc0aa3b: No such file or directory
WARNING: opening from cache https://packages.wolfi.dev/os: No such file or directory
+ '[' '!' -s /tmp/tmp.2k3VI7 ]
+ cat /tmp/tmp.2k3VI7
+ systemd-analyze verify '--man=false' usr/lib/systemd/system/systemd-userdbd.service
+ systemd-analyze verify '--man=false' usr/lib/systemd/system/systemd-userdbd.socket
+ rm /tmp/tmp.2k3VI7
+ exit 0
userdbctl [OPTIONS...] COMMAND ...

Show user and group information.

Commands:
  user [USER…]               Inspect user
  group [GROUP…]             Inspect group
  users-in-group [GROUP…]    Show users that are members of specified groups
  groups-of-user [USER…]     Show groups the specified users are members of
  services                   Show enabled database services
  ssh-authorized-keys USER   Show SSH authorized keys for user

Options:
  -h --help                  Show this help
     --version               Show package version
     --no-pager              Do not pipe output into a pager
     --no-legend             Do not show the headers and footers
     --output=MODE           Select output mode (classic, friendly, table, json)
  -j                         Equivalent to --output=json
  -s --service=SERVICE[:SERVICE…]
                             Query the specified service
     --with-nss=BOOL         Control whether to include glibc NSS data
  -N                         Do not synthesize or include glibc NSS data
                             (Same as --synthesize=no --with-nss=no)
     --synthesize=BOOL       Synthesize root/nobody user
     --with-dropin=BOOL      Control whether to include drop-in records
     --with-varlink=BOOL     Control whether to talk to services at all
     --multiplexer=BOOL      Control whether to use the multiplexer
     --json=pretty|short     JSON output mode
     --chain                 Chain another command
     --uid-min=ID            Filter by minimum UID/GID (default 0)
     --uid-max=ID            Filter by maximum UID/GID (default 4294967294)
  -z --fuzzy                 Do a fuzzy name search
     --disposition=VALUE     Filter by disposition
  -I                         Equivalent to --disposition=intrinsic
  -S                         Equivalent to --disposition=system
  -R                         Equivalent to --disposition=regular
     --boundaries=BOOL       Show/hide UID/GID range boundaries in output
  -B                         Equivalent to --boundaries=no

See the userdbctl(1) man page for details.
pod 44a4c272e2bf8e2defdc6299a1752c237c9df6d3afa81a5481b5ba955c3cdd01 terminated
command "melange" completed successfully
tests completed successfully

Indexes

https://apk.cgr.dev/wolfi-presubmit/29620a5dca933ce98aec065771caaa8cdfc0aa3b

Packages

Tests

More Observability

Command

cg build log \
  --build-id b84bd817-b462-449a-b112-48fc3487dae8 \
  --project prod-wolfi-os \
  --cluster elastic-pre-a \
  --namespace pre-wolfi \
  --start 2025-08-07T15:52:29Z \
  --end 2025-08-07T16:12:03Z