Skip to content

[pull] main from bootc-dev:main#148

Merged
pull[bot] merged 3 commits into
TheTechOddBug:mainfrom
bootc-dev:main
Apr 27, 2026
Merged

[pull] main from bootc-dev:main#148
pull[bot] merged 3 commits into
TheTechOddBug:mainfrom
bootc-dev:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Apr 27, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

cgwalters and others added 3 commits April 27, 2026 05:13
See osbuild/osbuild#2428

When running inside a container or sandbox without /run/udev
bind-mounted (e.g. osbuild's bwrap), lsblk returns null for partition
metadata fields like parttype (partition type GUID) and pttype
(partition table type), because these come from the udev database.

This causes partition discovery to fail -- most visibly on ppc64le
where the PReP partition can't be found by GUID, but also affecting
ESP discovery on all architectures. On x86_64 UEFI, bootupd silently
falls back to mounted-ESP detection, masking the problem; on ppc64le
there is no fallback and the install fails hard.

Add a blkid -p fallback in backfill_missing() that probes partition
metadata directly from the disk when udev is absent. The udev check
tests for /run/udev/data (the actual database directory) rather than
/run/udev, because bootc's ensure_mirrored_host_mount() creates an
empty /run/udev directory on the bwrap tmpfs that is_same_as_host()
then considers 'already mounted'.

Tested end-to-end via the BIB tmt test (plan-33-bib-build) with a
patched bootupd that removes the mounted-ESP fallback entirely.

This follows the same approach coreos-installer uses (PRs #1511,
sfdisk-based workaround originally added in PR #688.

Assisted-by: OpenCode (Claude Opus 4)
Signed-off-by: Colin Walters <walters@verbum.org>
In restricted build environments such as Tekton/Buildah containers,
/proc/1/ns/ipc can be masked even when the process has CAP_SYS_ADMIN.
The read_link() call fails with EACCES, which causes bootc to exit
with a fatal error.

Handle PermissionDenied by silently skipping the IPC namespace join,
consistent with the existing CAP_SYS_ADMIN gate.

Also drop tracing::debug! from join_host_ipc_namespace() since tracing
is not yet initialized when global_init() runs.

Fixes: d250000
Assisted-by: OpenCode (Claude Opus 4.6)
Signed-off-by: Joseph Marrero Corchado <jmarrero@redhat.com>
We were stripping `.staged` suffix from UKI/UKI Addons whenever
unstaging the bootloader entries for the currently staged composefs
deployment. Earlier we needed this as we were putting all EFI
binaries in `ESP/EFI/Linux` all of which (staged or unstaged) would
be picked up by the bootloader which is not what we want.

We now put all EFI binaries in `ESP/EFI/Linux/bootc` and use BLS .conf
files to point to the binaries, which makes the `.staged` suffix for
EFI binaries irrelevant.

Signed-off-by: Pragyan Poudyal <pragyanpoudyal41999@gmail.com>
@pull pull Bot locked and limited conversation to collaborators Apr 27, 2026
@pull pull Bot added the ⤵️ pull label Apr 27, 2026
@pull pull Bot merged commit 77cab5f into TheTechOddBug:main Apr 27, 2026
1 of 11 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants