Skip to content

[pull] main from bootc-dev:main#170

Merged
pull[bot] merged 3 commits into
TheTechOddBug:mainfrom
bootc-dev:main
May 25, 2026
Merged

[pull] main from bootc-dev:main#170
pull[bot] merged 3 commits into
TheTechOddBug:mainfrom
bootc-dev:main

Conversation

@pull

@pull pull Bot commented May 25, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

cgwalters and others added 3 commits May 25, 2026 12:53
…lization

ostree explicitly unlinks /etc/.updated (and /var/.updated) when
finalizing a new deployment so that systemd ConditionNeedsUpdate=|/etc
services like systemd-sysusers and systemd-tmpfiles always run on the
first boot of that deployment.

The native composefs path was missing this step.  initialize_state()
copies /etc from the container image with 'cp -a', which preserves any
/etc/.updated stamp from the build environment.  composefs_backend_finalize()
merges /etc into the staged deployment directory but similarly never removes
the stamp.

The consequence is that systemd sees /etc/.updated already present and
concludes /etc needs no update, causing sysusers (and tmpfiles) to be
skipped entirely on the first boot of an upgraded deployment.

Assisted-by: OpenCode (Claude Sonnet 4.6)
Signed-off-by: Colin Walters <walters@verbum.org>
…ysusers

There's a bit of a trap in the movement from nss-altfiles to systemd-sysusers;
if users/groups migrate from the former to the latter, they may leave
orphaned entires in the shadow files.

systemd-sysusers then tries to create those users/groups at boot it
finds them already in the shadow files and fatally errors.

Add a generator which enables a unit detects this situation and cleans
up the shadow entries.

Now in practice: we probably should have made sure that nss-altfiles
users don't have shadow entries at all, but that ship has sailed.

Fixes: #1179

Assisted-by: OpenCode (Claude Sonnet 4.6)
Signed-off-by: Colin Walters <walters@verbum.org>
Signed-off-by: Asish Kumar <officialasishkumar@gmail.com>
@pull pull Bot locked and limited conversation to collaborators May 25, 2026
@pull pull Bot added the ⤵️ pull label May 25, 2026
@pull pull Bot merged commit c29c97e into TheTechOddBug:main May 25, 2026
0 of 6 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants