systemd (259.5-0ubuntu3.4) resolute-security; urgency=medium

  * SECURITY UPDATE: systemd-homed: local privilege escalation via missing
    home-record signature verification on the authenticate path
    - homed-fix-verification-of-local-identity-file.patch
    - homed-verify-privileged-worker-changes.patch
    - CVE-2026-16742
  * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary
    processes
    - CVE-2026-15059.patch
    - CVE-2026-15059
  * SECURITY UPDATE: systemd-machined: unprivileged users can terminate
    arbitrary processes
    - CVE-2026-15060.patch
    - CVE-2026-15060
  * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various
    components via Varlink
    - GHSA-5rm9-cc37-35gq.patch
    - GHSA-5rm9-cc37-35gq
  * SECURITY UPDATE: udev: local root execution via malicious iscsi devices
    and unsanitized kernel output
    - GHSA-m8q3-73v4-wvg7.patch
    - GHSA-m8q3-73v4-wvg7
  * SECURITY UPDATE: Local KEY=value pairs formatted files content disclosure
    via systemd-machined
    - GHSA-2p9f-rcmv-x36h.patch
    - GHSA-2p9f-rcmv-x36h
  * SECURITY UPDATE: crash triggered by unprivileged users in various
    components via D-Bus/Varlink
    - core-limit-the-number-of-units-that-can-be-requested-over.patch
    - dbus-limit-the-number-of-env-variables-to-something-reaso.patch
    - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch
    - dns-question-limit-the-number-of-questions-per-query.patch
    - resolve-enforce-the-search-domain-limit-earlier.patch
    - resolve-limit-the-number-NTAs-to-something-sensible.patch
    - sd-bus-store-the-strv-size-when-extending-it.patch
    - sd-json-limit-the-number-of-env-variables-to-something-re.patch
    - sd-json-user-record-store-the-strv-size-when-extending-it.patch
    - GHSA-3jgj-3phh-hx5j

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 27 Jul 2026 16:44:02 -0400

systemd (259.5-0ubuntu3.3) resolute; urgency=medium

  * d/systemd.postinst: move systemd-tmpfiles --create after debhelper.
    Otherwise, the debhelper-generated systemd-tmpfiles call will include
    var.conf, but not rsyslog's 00rsyslog.conf, and breaks rsyslog when
    the systemd package is upgraded. (LP: #2158686)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 22 Jul 2026 13:07:19 -0400

systemd (259.5-0ubuntu3.2) resolute; urgency=medium

  * test: use gnudate in TEST-45-TIMEDATE (LP: #2157342)
  * d/t/upstream: skip TEST-70-TPM2 and TEST-86-MULTI-PROFILE-UKI due to timeouts
    (LP: #2157344)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 18 Jun 2026 10:27:05 -0400

systemd (259.5-0ubuntu3.1) resolute; urgency=medium

  * Fix cloud-init delay caused by systemd-networkd resolve hook (LP: #2148619)
    - units: order networkd resolve hook After=network-pre.target
    - units: drop Before=sockets.target from networkd resolve hook
  * core: Open netfilter socket only when needed (LP: #2150773)
  * mkosi: trim verity.sig json files to remove NUL padding before passing to jq
    (LP: #2155132)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 09 Jun 2026 08:59:25 -0400

systemd (259.5-0ubuntu3) resolute; urgency=medium

  * Drop needs-internet restriction and fix test failures masked by this (LP: #2148202)
    - d/t/upstream: use mkosi from the archive to drop needs-internet
    - d/t/control: add Depends: libcrypt-dev for upstream test
    - test: do not use nanoseconds width specifier in date command

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 15 Apr 2026 14:32:53 -0400

systemd (259.5-0ubuntu2) resolute; urgency=medium

  * Fix handling of VMADDR_CID_ANY in a couple places (LP: #2145027)
    - ssh-proxy: return an error if user supplies VMADDR_CID_ANY
    - socket-util: filter out VMADDR_CID_ANY in vsock_get_local_cid()
  * network-generator: support BOOTIF= and rd.bootif=0 options (LP: #2141588)
  * tmpfiles: remove duplicate /run/lock definition (LP: #2146544)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 02 Apr 2026 08:31:45 -0400

systemd (259.5-0ubuntu1) resolute; urgency=medium

  [ Nick Rosbrook ]
  * New upstream stable version 259.5
    - Update upstream source from tag 'upstream/259.5'
      Update to upstream version '259.5'
      with Debian dir 1076161727931a7063674200c474ec7747a5177f
    - Bug fixes

  [ Oliver Reiche ]
  * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 13 Mar 2026 12:27:31 -0400

systemd (259.3-0ubuntu1) resolute; urgency=medium

  * New upstream stable version 259.3
    - Update upstream source from tag 'upstream/259.3'
      Update to upstream version '259.3'
      with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46
    - Bug fixes

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 06 Mar 2026 09:05:25 -0500

systemd (259.2-0ubuntu2) resolute; urgency=medium

  * Tag KFD and ACCEL devices for uaccess (LP: #2143010)
  * d/control: Add missing dh-dlopenlibdeps to b-d

 -- Mario Limonciello <superm1@gmail.com>  Tue, 03 Mar 2026 12:06:36 -0600

systemd (259.2-0ubuntu1) resolute; urgency=medium

  * New upstream stable version 259.2
    - Bug fixes
    - Update upstream source from tag 'upstream/259.2'
      Update to upstream version '259.2'
      with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67
    - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/515816197e
  * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 27 Feb 2026 09:20:52 -0500

systemd (259.1-1ubuntu2) resolute; urgency=medium

  [ Nick Rosbrook ]
  * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default
    (LP: #2142428)

  [ Alessandro Astone ]
  * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop
    (LP: #2077538, LP: #2142306)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 25 Feb 2026 10:32:56 -0500

systemd (259.1-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
    - debian/control:
      + Add Recommends: systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
      + d/control: demote systemd-userdbd to Suggests for libnss-systemd
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/libnss-systemd.*:
      + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)
      + debian/libnss-systemd.preinst: force nsswitch.conf update
        Drop systemd instances in nsswitch.conf, and force postinst to
        re-generate the file (LP #2121017)
      + debian/linbnss-systemd.nss: Install systemd service after files.
        As suggested by upstream the systemd NSS service should come just after
        files
    - debian/tests:
      + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)
      + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)
    - debian/patches:
      + switch-root: use MS_MOVE for /run when switchig from initrd
      + test: skip TEST-50-DISSECT.dissect (LP #2116460)
      + test: skip TEST-13-NSPAWN.{nspawn,machined}  (LP #2136413)
  * Dropped changes, included upstream:
    - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch
      Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d
    - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch
      Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5
    - test-disable-pipefail-again-in-monitor_check_rr.patch
      Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a
    - resolve-include-current-DNS-server-in-JSON-again.patch
      Applied upstream: https://github.com/systemd/systemd/commit/0de941f937
    - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch
      Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4
  * Dropped changes, no longer needed:
    - d/t/upstream: use GNU cp in test setup (LP #2122363)
      Fixed in rust-coreutils 0.5.0
    - lp2136752-test-workaround-uutils-dd-broken-pipe.patch
      Fixed in rust-coreutils 0.6.0
  * New changes:
    - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 10 Feb 2026 14:05:53 -0500

systemd (259.1-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * Drop dependencies on libcap-dev, no longer used since v259
  * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)
  * Use dh_installsystemd more to manage units. Ensure more units are
    handled as they are added to various packages
  * Use dh_installsystemd to handle journald and networkd
  * Use deb-systemd-invoke to reexec instead of manual calls. Allows the
    tool to handle the complications and use varlink where available
  * Increase number of sections of sd-stub on amd64 too. The default limit
    breaks adding more than 28 sections, which can happen with a UKI with
    many optional profiles. Bump it on amd64 too, at the cost of an extra
    ~80KB in size on the stub.
  * Update upstream source from tag 'upstream/259.1' Update to upstream
    version '259.1' with Debian dir
    f7a9425f1024ef75b5020a216f6be3d0af9ac227
  * Restrict the tpm2-generator manpage to arches where it is built
  * Install ask-password polkit policy file

  [ Yu Watanabe ]
  * Drop use of deprecated options. These options are deprecated since
    v258.

  [ Nick Rosbrook ]
  * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64
    only
  * d/tests: drop tests-in-lxd
  * d/control: make systemd-container Depends: libarchive13t64. This is
    needed for e.g. systemd-import-generator + rd.systemd.pull= to work
    properly. Dracut would like to be able to use that feature reliably
    when systemd-importd is available, so explicitly depend on libarchive.
    Currently, it is only a Suggests of libsystemd-shared via dlopen
    machinery. (LP: #2139822)

 -- Luca Boccassi <bluca@debian.org>  Fri, 06 Feb 2026 18:37:22 +0000

systemd (259-1ubuntu3) resolute; urgency=medium

  * test: skip TEST-13-NSPAWN.nspawn also (LP: #2136413)
  * test: disable pipefail again in monitor_check_rr() (LP: #2136819)
  * d/control: demote systemd-userdbd to Suggests for libnss-systemd
  * resolve: include current DNS server in JSON again (LP: #2138680)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 19 Jan 2026 16:30:42 -0500

systemd (259-1ubuntu2) resolute; urgency=medium

  * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64 only
  * ukify: omit .osrel section when --os-release= is empty (LP: #2133402)
  * d/tests: drop tests-in-lxd
  * test: skip TEST-13-NSPAWN.machined (LP: #2136413)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 06 Jan 2026 10:28:46 -0500

systemd (259-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130132). Remaining changes:
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
    - debian/control:
      + Add Recommends: systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/libnss-systemd.*:
      + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)
      + debian/libnss-systemd.preinst: force nsswitch.conf update
        Drop systemd instances in nsswitch.conf, and force postinst to
        re-generate the file (LP #2121017)
      + debian/linbnss-systemd.nss: Install systemd service after files.
        As suggested by upstream the systemd NSS service should come just after
        files
    - debian/tests:
      + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)
      + d/t/upstream: use GNU cp in test setup (LP #2122363)
    - debian/patches:
      + switch-root: use MS_MOVE for /run when switchig from initrd
      + test: skip TEST-50-DISSECT.dissect (LP #2116460)
  * New changes:
    - test: use journalctl -n option instead of piping to head
      (LP: #2136497)
    - test: cope with uutils coreutils flag parsing for date command
      (LP: #2136408)
    - test: workaround uutils dd broken pipe
      (LP: #2136752)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 18 Dec 2025 11:13:46 -0500

systemd (259-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * Downgrade depends to recommends for IPC endpoint of respective libnss
    modules. Minimal container images might want the libnss modules to
    resolve users, but without the IPC endpoints which will be running on
    the host and which will be reachable anyway via IPC.
  * Update upstream source from tag 'upstream/259' Update to upstream
    version '259' with Debian dir 7a7b4d948977ac3c011ae6188deefd8d2c1efc8c

  [ Helmut Grohne ]
  * Update architecture match for 50-pid-max.conf

 -- Luca Boccassi <bluca@debian.org>  Wed, 17 Dec 2025 23:08:45 +0000

systemd (259~rc3-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130132). Remaining changes:
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
    - debian/control:
      + Add Recommends: systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/libnss-systemd.*:
      + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)
      + debian/libnss-systemd.preinst: force nsswitch.conf update
        Drop systemd instances in nsswitch.conf, and force postinst to
        re-generate the file (LP #2121017)
      + debian/linbnss-systemd.nss: Install systemd service after files.
        As suggested by upstream the systemd NSS service should come just after
        files
    - debian/tests:
      + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)
      + d/t/upstream: use GNU cp in test setup (LP #2122363)
    - debian/patches:
      + switch-root: use MS_MOVE for /run when switchig from initrd
      + test: skip TEST-50-DISSECT.dissect (LP #2116460)
  * Dropped changes, no longer needed:
    - d/rules: set SYSTEMD_IN_CHROOT=1 for build tests
      [ fixed by https://github.com/systemd/systemd/commit/7d23e27e4c ]
    - test-network: add handling for Ubuntu FAN patches (LP #2104943)
    - test: ignore coredumps for gnusleep in addition to sleep (LP #2116459)
    - test: follow /usr/bin/sleep symlink when checking coredumps (LP #2116465)
    - debian/control: Add Recommends: networkd-dispatcher to systemd package
      (LP: #2132159)
  * New upstream release:
    - Fixes LP: #2133462

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 15 Dec 2025 13:53:39 -0500

systemd (259~rc3-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * d/t/control: pull in optional libs for boot-and-services too
  * Update upstream source from tag 'upstream/259_rc3' Update to upstream
    version '259~rc3' with Debian dir
    537fd85ae77caecee4426e24c5b5e59ee5d3ec44
  * Install new udev rule

  [ Helmut Grohne ]
  * Mirror dmi_arches from meson.build into debian/udev.install
  * Update architecture match for 50-pid-max.conf

  [ Nick Rosbrook ]
  * d/extra/dbus-1: rename systemd-localed-read-only.conf (LP: #2133889)
  * d/t/tests-in-lxd: re-construct --pin-packages arguments for
    autopkgtest

 -- Luca Boccassi <bluca@debian.org>  Wed, 10 Dec 2025 17:39:27 +0000

systemd (259~rc2-1) unstable; urgency=medium

  * d/t/control: ensure unit-tests autopkgtest pulls in dlopened libraries
    for test
  * Update upstream source from tag 'upstream/259_rc2' Update to upstream
    version '259~rc2' with Debian dir
    cf601b8ede8f71b078792ce228102fe98830a5fc
  * Install new varlinkctl bash completion script

 -- Luca Boccassi <bluca@debian.org>  Wed, 26 Nov 2025 12:41:32 +0000

systemd (259~rc1-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130132). Remaining changes:
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/libnss-systemd.*:
      + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)
      + debian/libnss-systemd.preinst: force nsswitch.conf update
        Drop systemd instances in nsswitch.conf, and force postinst to
        re-generate the file (LP #2121017)
      + debian/linbnss-systemd.nss: Install systemd service after files.
        As suggested by upstream the systemd NSS service should come just after
        files
    - debian/tests:
      + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)
      + d/t/upstream: use GNU cp in test setup (LP #2122363)
    - debian/patches:
      + switch-root: use MS_MOVE for /run when switchig from initrd
      + test-network: add handling for Ubuntu FAN patches (LP #2104943)
      + test: ignore coredumps for gnusleep in addition to sleep (LP #2116459)
      + test: follow /usr/bin/sleep symlink when checking coredumps (LP #2116465)
      + test: skip TEST-50-DISSECT.dissect (LP #2116460)
  * Dropped changes, included in Debian:
    - d/rules: enable 10-systemd-logind-root-ignore-inhibitors.rules.example
      polkit rule by default (LP #2092438)
      [ was: "d/extra/polkit-1: let root ignore inhibitors on reboot etc" ]
    - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are
      specific to s390x ccw devices are only prevented from being copied if
      zdev_early=0 is set, but copy rules in case of zdev_early=1 or if
      zdev_early is not specified at all. (LP #2102236)
    - debian/tests:
      + d/t/boot-and-services: tweak test_rsyslog regexes
      + debian/tests/boot-and-services: skip apparmor tests on armhf
  * Dropped changes, included upstream:
    - basic: validate timezones in get_timezones() (LP #2125405)
  * New changes:
    - d/systemd{,-cryptsetup}.install: more i386 exclusion
    - d/rules: set SYSTEMD_IN_CHROOT=1 for build tests

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 18 Nov 2025 17:29:48 -0500

systemd (259~rc1-1) unstable; urgency=medium

  [ Nick Rosbrook ]
  * kernel-install: skip 55-initrd.install when an initrd generator is
    configured. This provides a way to avoid conflicts with initrd
    generators using kernel-install like dracut. E.g., dracut can now:  1.
    Ship /usr/lib/kernel/install.conf.d/50-dracut.conf with at least
    initrd_generator=dracut  2. Skip its own scripts unless
    $KERNEL_INSTALL_INITRD_GENERATOR=dracut (Closes: #1117563)
  * d/t/boot-and-services: tweak test_rsyslog regex
  * d/t/boot-and-services: run transient unit to check syslog messages
  * d/t/boot-and-services: skip apparmor test on armhf
  * d/rules: enable 10-systemd-logind-root-ignore-inhibitors.rules.example
    on Ubuntu
  * kernel-install: skip 55-initrd.install when an initrd is already
    staged. Unfortunately, dracut upstream does not think it makes sense
    to ship an install.conf.d drop-in to set initrd_generator=dracut, so
    we need to cope with situations where an initrd is already present in
    the staging area. See https://github.com/dracut-ng/dracut-ng/pull/1812
    (Closes: #1117563)

  [ Luca Boccassi ]
  * Update upstream source from tag 'upstream/259_rc1' Update to upstream
    version '259~rc1' with Debian dir
    ffbb3991599b616b38161a464c0428f8aec93869
  * Drop patches, all merged upstream
  * Install new files for v259~rc1
  * Update symbols file for v259~rc1

  [ Frank Heimes ]
  * initramfs-tools: only skip chzdev rules if zdev_early=0

 -- Luca Boccassi <bluca@debian.org>  Mon, 17 Nov 2025 18:55:33 +0000

systemd (258.1-2ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130132). Remaining changes:
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - d/rules: enable 10-systemd-logind-root-ignore-inhibitors.rules.example
      polkit rule by default (LP #2092438)
      [ was: "d/extra/polkit-1: let root ignore inhibitors on reboot etc" ]
    - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are
      specific to s390x ccw devices are only prevented from being copied if
      zdev_early=0 is set, but copy rules in case of zdev_early=1 or if
      zdev_early is not specified at all. (LP #2102236)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/libnss-systemd.*:
      + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)
      + debian/libnss-systemd.preinst: force nsswitch.conf update
        Drop systemd instances in nsswitch.conf, and force postinst to
        re-generate the file (LP #2121017)
      + debian/linbnss-systemd.nss: Install systemd service after files.
        As suggested by upstream the systemd NSS service should come just after
        files
    - debian/tests:
      + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)
      + d/t/upstream: use GNU cp in test setup (LP #2122363)
      + d/t/boot-and-services: tweak test_rsyslog regexes
      + debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/patches:
      + switch-root: use MS_MOVE for /run when switchig from initrd
      + test-network: add handling for Ubuntu FAN patches (LP #2104943)
      + basic: validate timezones in get_timezones() (LP #2125405)
      + test: ignore coredumps for gnusleep in addition to sleep (LP #2116459)
      + test: follow /usr/bin/sleep symlink when checking coredumps (LP #2116465)
      + test: skip TEST-50-DISSECT.dissect (LP #2116460)
  * Dropped changes, no longer needed:
    - d/control: Conflicts: and Replaces: systemd-resolved-dnssec
    - meson.build: build with -Wl,-z,gcs-report=none on arm64 (LP #2119100)
  * Dropped changes, included in Debian:
    - Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - d/rules: drop bpf build workarounds for Ubuntu
  * Dropped changes, included upstream:
    - wait-online/resolve-rename-varlink_subscription-varlink_query_results.patch
    - wait-online/resolved-add-link_get_default_route-helper.patch
    - wait-online/resolved-add-a-helper-to-check-if-DNS-server-is-accessibl.patch
    - wait-online/test-add-test-for-resolved-SubscribeDNSConfiguration-API.patch
    - wait-online/networkd-test-add-basic-tests-for-systemd-networkd-wait-o.patch
    - wait-online/wait-online-add-support-for-waiting-for-DNS-configuration.patch
    - wait-online/resolved-add-SubscribeDNSConfiguration-to-varlink-API.patch
    - wait-online/varlink-util-add-varlink_many_notify.patch

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 04 Nov 2025 04:35:17 -0500

systemd (258.1-2) unstable; urgency=medium

  [ Luca Boccassi ]
  * Backport patch to fix autopkgtest with new util-linux due to file move
    (Closes: #1118360)
  * getty-static: add missing Documentation=
  * systemd-tests: drop unused overrides

  [ Simon McVittie ]
  * d/libnss-systemd.postinst: Ensure module is enabled for all four
    databases. Before version 251.3-2, libnss-systemd was only enabled for
    the passwd and group databases. Since that version, new installations
    are set up in all four user/group databases (passwd, group, shadow and
    gshadow) but older installations' configuration remained unchanged
    until now. This resulted in configuration drift: shadow and gshadow
    would list systemd dynamic users in new installations of Debian 12 or
    13, but not in installations that had been upgraded from Debian 11 or
    older, preventing new versions of gdm3 from working on those older
    systems. Address this by doing a one-time migration from the old to
    new configuration. (Closes: #1118640)

 -- Luca Boccassi <bluca@debian.org>  Mon, 27 Oct 2025 13:06:14 +0000

systemd (258.1-1) unstable; urgency=medium

  * Override Lintian warning for groff-message. These manpages are
    generated by docbook, so these warnings are not useful.
  * Override Lintian warning for spare-manual-page
  * Override lintian warnings for conflicts-with-version
  * Drop versioned conflicts added for bullseye upgrades
  * Override Lintian warning for appstream-metadata-missing-modalias-
    provide
  * systemd: recommend login package (Closes: #1116286)
  * Explicitly disable bpf-framework for stage1 builds
  * autopkgest: install bsdutils and bsdextrautils for unit tests
  * Update upstream source from tag 'upstream/258.1' Update to upstream
    version '258.1' with Debian dir
    7941c0a45113f1d3faf0a067f15a8e11a7be2774
  * Make /run/lock world writable by default:
    "The TC therefore resolves that systemd shall provide /var/lock with
     relaxed enough permissions that existing Debian software that uses
     /var/lock for system-wide locks of serial devices (and similar
     purposes) works again. The TC exercises its power under constitution
     #6.1.4 to overrule the systemd maintainers in this regard."
    (Closes: #1110980)

 -- Luca Boccassi <bluca@debian.org>  Mon, 13 Oct 2025 16:34:55 +0100

systemd (258-1) unstable; urgency=medium

  * autopkgtest: manually compress logs on failure. Debci started deleting
    files from the artifacts archive, even though it gets compressed
    later. Compress logs manually at the highest ratio possible in the
    test itself to try and avoid losing logs, as it makes triaging issues
    impossible.
  * autopkgest: install dosfstools for test-loop-block
  * autopkgtest: enable debug logs for unit-tests job
  * Update to new upstream version v258. For a full list of changes:
    https://github.com/systemd/systemd/releases/tag/v258
    (Closes: #1110461)

 -- Luca Boccassi <bluca@debian.org>  Wed, 17 Sep 2025 13:18:27 +0100

systemd (258~rc4-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/258_rc4' Update to upstream
    version '258~rc4' with Debian dir
    90746e462e2de5e83f4bcadd50a96a0fefd795de

 -- Luca Boccassi <bluca@debian.org>  Fri, 05 Sep 2025 11:37:05 +0100

systemd (258~rc3-1) unstable; urgency=medium

  * systemd-boot: install kernel hooks to /usr/share/ It is now supported
    since Trixie, so shim the hooks in /usr/share/ so they can be
    overridden in /etc/
  * Update upstream source from tag 'upstream/258_rc3' Update to upstream
    version '258~rc3' with Debian dir
    024c11377e68f4e54703104737379ce23e48c7cf
    (Closes: #1111326 #1110997)

 -- Luca Boccassi <bluca@debian.org>  Wed, 20 Aug 2025 15:27:08 +0100

systemd (258~rc2-2) unstable; urgency=medium

  * Stop installing /var/lib/systemd in the package. /var/ needs to be
    handled by tmpfiles.d, not by the package, so that it can be deleted
    and recreated as needed on first boot.
  * NEWS: fixlets and adjustments (Closes: #1110569)

 -- Luca Boccassi <bluca@debian.org>  Tue, 12 Aug 2025 21:34:13 +0100

systemd (258~rc2-1) experimental; urgency=medium

  * Install usr/share/factory files and restore nsswitch.conf/pam.d/issue
    on factory reset
  * systemd-boot: register interest in systemd-boot-signed trigger
    (Closes: #1109984)
  * NEWS: fix typo (Closes: #1109979)
  * systemd-boot: fix registering/removing uncompressed kernels
  * d/t/control: prefer systemd-boot-tools if available
  * systemd-boot: make efibootmgr a dependency. Ensures efivars can be set
    up correctly
  * Update upstream source from tag 'upstream/258_rc2' Update to upstream
    version '258~rc2' with Debian dir
    164978ce9ff194871416f304705979b7d540a8e2
  * systemd-container: update lintian overrides for more false positives

 -- Luca Boccassi <bluca@debian.org>  Tue, 05 Aug 2025 17:19:48 +0100

systemd (258~rc1-1) experimental; urgency=medium

  * ukify: recommend sbsigntool | pesign for signing (Closes: #1108803)
  * Move bootctl zsh completion file too to new package
  * systemd-boot-tools: change architecture to linux-any. The tool can be
    used for cross-building, and it's available on all architectures, not
    just EFI ones
  * systemd-boot: fix initramfs post-update hook for uncompressed kernels
    (Closes: #1109098)
  * d/watch: remove restriction to v257.x series
  * Update upstream source from tag 'upstream/258_rc1' Update to upstream
    version '258~rc1' with Debian dir
    79d831e85f4a665f4ecdd61d0fbe6121b48ff7f3
  * Add and remove files for 258~rc1
  * Enable sd-vmspawn (Closes: #1074433)
  * NEWS: note cgroupv1 removal
  * Drop world-writable /run/lock debianism
  * Drop all workarounds that are obsolete after trixie
  * NEWS: note removal of telinit/runlevel
  * Update symbols file for 258~rc1
  * Update Lintian overrides
  * Add a few more conflicts to packages providing the same files
  * d/copyright: update paths

 -- Luca Boccassi <bluca@debian.org>  Wed, 23 Jul 2025 22:23:59 +0100

systemd (257.9-0ubuntu2) questing; urgency=medium

  * basic: validate timezones in get_timezones() (LP: #2125405)
  * debian/libnss-systemd.nss: install after 'compat' too (LP: #2125403)
  * d/t/boot-and-services: use coreutils tunable in apparmor test (LP: #2125614)
  * d/t/upstream: use GNU cp in test setup (LP: #2122363)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 25 Sep 2025 12:45:39 -0400

systemd (257.9-0ubuntu1) questing; urgency=medium

  [ Nick Rosbrook ]
  * New upstream stable version 257.9
    - Bug fixes only
    - Update upstream source from tag 'ubuntu/upstream/257.9'
      Update to upstream version '257.9'
      with Debian dir 991861d2786efe36972fc9cc9d3dcb496264de5a
  * Drop resolve-re-create-link-unicast-scopes-on-reload.patch
    Applied upstream: https://github.com/systemd/systemd/commit/fc74fb8cb3

  [ Marco Trevisan (Treviño) ]
  * debian/libnss-systemd.preinst: force nsswitch.conf update
    Drop systemd instances in nsswitch.conf, and force postinst to
    re-generate the file (LP: #2121017)
  * debian/linbnss-systemd.nss: Install systemd service after files.
    As suggested by upstream the systemd NSS service should come just after
    files

  [ Luca Boccassi ]
  * systemd-boot-tools: change architecture to linux-any.
    The tool can be used for cross-building, and it's available on
    all architectures, not just EFI ones (LP: #2122158)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 08 Sep 2025 08:41:33 -0400

systemd (257.8-0ubuntu2) questing; urgency=medium

  [ Lukas Märdian ]
  * d/[t/]control,d/systemd-resolved-dnssec*: Disable DNSSEC by default.
    (LP: #2121483)

  [ Nick Rosbrook ]
  * resolve: re-create link unicast scopes on reload
  * d/control: Conflicts: and Replaces: systemd-resolved-dnssec
    Ensures systemd-resolved-dnssec is removed on systems that already have
    it.

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 27 Aug 2025 16:09:22 -0400

systemd (257.8-0ubuntu1) questing; urgency=medium

  * New upstream stable version 257.8
    - Bug fixes only
    - d/gbp.conf: set upstream-branch=upstream/257.x
    - Update upstream source from tag 'ubuntu/upstream/257.8'
      Update to upstream version '257.8'
      with Debian dir 8f881d0950662d924a4334d266ef5606b560f61c
  * d/rules: drop bpf build workarounds for Ubuntu
  * test: skip TEST-50-DISSECT.dissect (LP: #2116460)
  * d/t/boot-and-services: tweak test_rsyslog regexes

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 25 Aug 2025 15:51:41 -0400

systemd (257.7-1ubuntu3) questing; urgency=medium

  * meson.build: build with -Wl,-z,gcs-report=none on arm64 (LP: #2119100)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 01 Aug 2025 11:55:27 -0400

systemd (257.7-1ubuntu2) questing; urgency=medium

  [ Lukas Märdian ]
  * d/control,d/systemd-resolved-dnssec*: Add systemd-resolved-dnssec binary,
    shipping a drop-in config from d/extra/resolved.conf.d/ (LP: #2117730)
  * d/t/control: Add new 'dnssec' test case.
  * d/control: Add Recommends to systemd-resolved-dnssec

  [ Nick Rosbrook ]
  * test: ignore coredumps for gnusleep in addition to sleep (LP: #2116459)
  * test: follow /usr/bin/sleep symlink when checking coredumps (LP: #2116465)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 29 Jul 2025 12:11:40 -0400

systemd (257.7-1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - resolve,wait-online: backport wait-online DNS patches
    - test-network: add handling for Ubuntu FAN patches (LP #2104943)
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP #2092438)
    - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are
      specific to s390x ccw devices are only prevented from being copied if
      zdev_early=0 is set, but copy rules in case of zdev_early=1 or if
      zdev_early is not specified at all. (LP #2102236)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 30 Jun 2025 15:11:21 -0400

systemd (257.7-1) unstable; urgency=medium

  * udev: add 'clock' system group for PTP rules
  * systemd-boot: remove fb too on removal
  * systemd-boot: reduce harmless noise on cleanup (Closes: #1108264)
  * Update upstream source from tag 'upstream/257.7' Update to upstream
    version '257.7' with Debian dir
    ef416841c96628293f494812ad2d395cf865f7b5

 -- Luca Boccassi <bluca@debian.org>  Wed, 25 Jun 2025 13:40:07 +0100

systemd (257.6-1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2112075). Remaining changes:
    - debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - resolve,wait-online: backport wait-online DNS patches
    - test-network: add handling for Ubuntu FAN patches (LP #2104943)
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)
    - d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP #2092438)
    - Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are
      specific to s390x ccw devices are only prevented from being copied if
      zdev_early=0 is set, but copy rules in case of zdev_early=1 or if
      zdev_early is not specified at all. (LP #2102236)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
  * Dropped, no longer needed:
    - debian/patches: drop systemd-fsckd patch (LP: #2109800, LP: #1970069)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 30 May 2025 10:56:19 -0400

systemd (257.6-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * d/copyright: use GPL URL instead of old FSF postal address.
  * d/signing-template/copyright: use GPL URL instead of old FSF postal
    address.
  * d/control: bump Standards-Version to 4.7.2, no changes
  * Add version to systemd-boot-efi-signed virtual package. Otherwise
    dependency on systemd-boot-efi-signed (>= 257.5-2) is not satisfiable
    (Closes: #1104663)
  * systemd-homed: add dependency on polkitd (Closes: #1105743)
  * systemd-boot: fix BOOT.CSV usage (Closes: #1106024)
  * Update upstream source from tag 'upstream/257.6' Update to upstream
    version '257.6' with Debian dir
    907f7fd2ae07adbab0ffd7b9235fc25435f12bab
    (Fixes CVE-2025-4598)
  * Drop patches, merged upstream

  [ Tim Small ]
  * document requirement to sync *.link files with initrd (Closes:
    #1005282)

  [ Kirill Rekhov ]
  * Set upstream metadata fields: Security-Contact

 -- Luca Boccassi <bluca@debian.org>  Thu, 29 May 2025 17:52:48 +0100

systemd (257.5-2) unstable; urgency=medium

  * Backport new patch to workaround /lib64 symlink incompatibility
    (Closes: #1079329)

 -- Luca Boccassi <bluca@debian.org>  Mon, 07 Apr 2025 18:39:22 +0100

systemd (257.5-1) unstable; urgency=medium

  * Add NEWS entry to warn about network connectivity loss due to mDNS,
    and workaround
  * Use Conflicts instead of Breaks/Replaces for file move (Closes:
    #1101965)
  * Update upstream source from tag 'upstream/257.5' Update to upstream
    version '257.5' with Debian dir
    2218d137fd911b8d5c2849535b066d27f01406b2
  * Drop backports, included in 257.5
  * Remove conflicts with dracut:arm64 and build nspawn:arm64 again. A
    mutually satisfactory solution for #1079329 has been agreed and is
    being worked on, so temporarily reintroduce #1079329 until it's ready
    in a few days as per agreement with ctte.

 -- Luca Boccassi <bluca@debian.org>  Sun, 06 Apr 2025 18:41:17 +0100

systemd (257.4-9) unstable; urgency=medium

  * resolved: break mDNS, remove conflict with avahi. Feedback from users
    is to prefer breaking mDNS rather than avoiding avahi. Ship a drop-in
    to disable mDNS by default, so that users relying on mDNS for
    reachability can hopefully notice it and mask it before upgrading
    (Closes: #1098914)

 -- Luca Boccassi <bluca@debian.org>  Wed, 02 Apr 2025 11:19:09 +0100

systemd (257.4-8) unstable; urgency=medium

  [ Luca Boccassi ]
  * systemd.preinst: do not use systemctl libsystemd-shared might not be
    unpacked yet, so check things manually (Closes: #1101698)
  * systemd.preinst: fix shellcheck warnings
  * d/t/boot-and-services: skip gdm3 test in nested LXD run. It is flaky
    and fails half the times, not much value in checking a desktop session
    inside a nested container
  * reintroduce systemd-resolved, with conflict on avahi-daemon. It turns
    out the cloud images have a hard dependency on resolved. In order to
    avoid having to change them, reintroduce the package, with a hard
    conflict on avahi-daemon to avoid reintroducing #1098914 (Closes:
    #1101532)

  [ Yu Watanabe ]
  * d/rules: drop nscd meson option. The meson option was deprecated by
    28f1f1a5e652508d6e61ace8918e8b831e4b62b4 (v257).

 -- Luca Boccassi <bluca@debian.org>  Tue, 01 Apr 2025 21:43:18 +0100

systemd (257.4-7) unstable; urgency=medium

  * autopkgtest: when nested tests-in-lxd skips don't fail outer run
  * Backport patches to fix integration tests skipping
  * autopkgtest: re-enable integration tests

 -- Luca Boccassi <bluca@debian.org>  Sat, 29 Mar 2025 19:07:36 +0000

systemd (257.4-6) unstable; urgency=medium

  * systemd: conflict with dracut on arm64. Same as the systemd-
    nspawn/arm64 changes of 257.4-4. As correctly pointed out on the
    reopened #1079329 this combination also creates incompatibilities, so
    add an explicit package conflict to fix this occurrence too as
    requested by the reporter. (Closes: #1079329)
  * d/control: fix systemd-boot and systemd-boot-tools descriptions
  * Add Lintian override for 'unknown-field Protected'

 -- Luca Boccassi <bluca@debian.org>  Fri, 28 Mar 2025 23:33:26 +0000

systemd (257.4-5) unstable; urgency=medium

  * Add missing dh-exec shbang to d/systemd-tests.install

 -- Luca Boccassi <bluca@debian.org>  Fri, 28 Mar 2025 10:28:09 +0000

systemd (257.4-4) unstable; urgency=medium

  [ Luca Boccassi ]
  * Update tzdata-legacy version constraint for new bookworm-p-u tzdata
    version
  * systemd-boot: do case-insensitive parsing of efibootmgr output
    (Closes: #1100653)
  * userdbd: use wildcard to install units
  * systemd-container: use more wildcards to install files
  * Handle new tmp mount on upgrade in preinst rather than postinst. Avoid
    race with new units being activated and pulling it in at the same time
    (Closes: #1101175)
  * autopkgtest: remove workaround for 'meson compiile mkosi' and use
    'mkosi -f' instead to avoid slow rebuilds
  * autopkgtest: drop versioning constraints on tzdata. These do not seem
    to be necessary in order for autopkgtest to pull in the package, so
    drop them as they need to be constantly updated due to p-u uploads
  * Move leftover resolved files to its own package. A few files were
    mistakenly shipping in the main systemd package even though they are
    part of resolved, due to a refactor from some time ago. Move them
    over.
  * Drop systemd-resolved package. The ctte has declared that the way the
    systemd-resolved tool works is incompatible with their decision to
    prioritize avahi in Debian. Furthermore, the resolved tool is being
    used to inflict pain on the maintainer, and induce burnout.
    Regrettably, the only safe solution to ensure this package is
    compliant with this decision is to drop it, as all reasonable
    alternatives put forward have been rejected:
    https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
    (Closes: #1098914)
  * Drop systemd-nspawn on arm64. The ctte has declared that the way the
    systemd-nspawn binary works on arm64 is incompatible with their
    decision to leave in place a recently introduced change in the debian-
    specific base-files package, which caused a dpkg regression.
    Furthermore, the nspawn tool is being used to inflict pain on the
    maintainer, and induce burnout. Regrettably, the only safe solution to
    ensure this package is compliant with this decision is to drop the
    binary on arm64, as all reasonable alternatives put forward have been
    rejected:
    https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289
    (Closes: #1079329)

  [ Nick Rosbrook ]
  * Add myself to Uploaders

  [ Andrea Pappacoda ]
  * d/control: only conflict against opensysusers << 0.7.3-4.1~
    opensysusers 0.7.3-4.1 is no longer co-installable with systemd as it
    conflicts with systemd-sysusers, so it is no longer needed to conflict
    against it systemd-side.

 -- Luca Boccassi <bluca@debian.org>  Fri, 28 Mar 2025 01:24:32 +0000

systemd (257.4-3) unstable; urgency=medium

  * Fix versioned breaks/replaces for sd-boot-tools (Closes: #1100412)

 -- Luca Boccassi <bluca@debian.org>  Thu, 13 Mar 2025 15:25:54 +0000

systemd (257.4-2) unstable; urgency=medium

  * Split bootctl to new systemd-boot-tools package (Closes: #1086860)

 -- Luca Boccassi <bluca@debian.org>  Tue, 11 Mar 2025 14:48:10 +0000

systemd (257.4-1ubuntu3) plucky; urgency=medium

  * test-network: add handling for Ubuntu FAN patches (LP: #2104943)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 28 Mar 2025 11:48:04 -0400

systemd (257.4-1ubuntu2) plucky; urgency=medium

  [ Frank Heimes ]
  * Fix d/extra/initramfs-tools/hooks/udev, so that udev rules that are
    specific to s390x ccw devices are only prevented from being copied if
    zdev_early=0 is set, but copy rules in case of zdev_early=1 or if
    zdev_early is not specified at all. (LP: #2102236)

  [ Nick Rosbrook ]
  * d/extra/polkit-1: let root ignore inhibitors on reboot etc (LP: #2092438)
  * d/control: remove Build-Depends: linux-tools-generic.
    The src:linux package now ships a bpftool binary package.

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 21 Mar 2025 17:48:15 -0400

systemd (257.4-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - resolve,wait-online: backport wait-online DNS patches
    - d/rules: disable bpf support on riscv64 for now (LP #2099864)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
  * Dropped, included in Debian:
    - initramfs-tools: copy hwdb.bin to initramfs
    - d/rules: fix bpftool path discovery on ubuntu
  * New changes:
    - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP: #2102028)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 11 Mar 2025 11:26:05 -0400

systemd (257.4-1) unstable; urgency=medium

  [ Nick Rosbrook ]
  * d/rules: fix bpftool path discovery on ubuntu
  * initramfs-tools: copy hwdb.bin to initramfs. The contents of hwdb.bin
    may influence udev during early boot. E.g., this may change network
    interface naming decisions. Hence, make sure it is available in the
    initrd. This adds about 2MB to the size of the compressed initrd.
  * d/t/tests-in-lxd: skip test on any setup error. When this test fails
    becacuse of snap install, or lxd tools, we prefer to skip because we
    never reached the stage where we are actually testing systemd.

  [ Luca Boccassi ]
  * Set tty device node mode to 0600 (Closes: #1093870)
  * d/rules: ignore more blhc false positives
  * systemd-resolved: recommend libidn2-0. Without it in some cases
    hostname resolution fails (Closes: #1097699)
  * README: add note about out-of-tree patches being forbidden. Prompted
    by #1098221
  * systemd-sysv: add Protected: yes (Closes: #1098260)
  * Update upstream source from tag 'upstream/257.4' Update to upstream
    version '257.4' with Debian dir
    2121ac2e2a87e081b31f819aea969e38b6147ce3

 -- Luca Boccassi <bluca@debian.org>  Thu, 06 Mar 2025 14:52:08 +0000

systemd (257.3-1ubuntu3) plucky; urgency=medium

  * d/control: remove other bpf deps for riscv64

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 24 Feb 2025 10:36:52 -0500

systemd (257.3-1ubuntu2) plucky; urgency=medium

  * d/t/tests-in-lxd: skip test on any setup error
  * d/rules: disable bpf support on riscv64 for now (LP: #2099864)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 24 Feb 2025 09:23:11 -0500

systemd (257.3-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - resolve,wait-online: backport wait-online DNS patches
    - initramfs-tools: copy hwdb.bin to initramfs
    - d/rules: fix bpftool path discovery on ubuntu
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 19 Feb 2025 09:27:00 -0500

systemd (257.3-1) unstable; urgency=medium

  * d/t/control: do not pull in gdm3 on loong64. Not installable, skip it
    like s390x/riscv/armel
  * systemd-boot: warn if efibootmgr is not installed. As it means the
    boot entry won't be created, since it's a recommends
  * systemd-boot: fix creating bootvar on arm64
  * systemd-boot: check that bootvar really points to sd-boot. Otherwise
    it could be a leftover with another second stage. Check both encoded
    and decoded strings.
  * Drop fallback for missing linux-bpf-dev package
  * ukify: depend on python3-zstandard and recommend python3-lz4 arm64
    kernels are getting zboot+zstd so zstandard will be required for uname
    probing. lz4 might be used externally so just recommend it.
  * Update upstream source from tag 'upstream/257.3' Update to upstream
    version '257.3' with Debian dir
    1531e0bcaea1d2bf600be6d542bae876d1829da9
  * autopkgtest: fix mkosi config section

 -- Luca Boccassi <bluca@debian.org>  Thu, 13 Feb 2025 19:54:00 +0000

systemd (257.2-3ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
  * New changes:
    - resolve,wait-online: backport wait-online DNS patches
    - initramfs-tools: copy hwdb.bin to initramfs
    - d/rules: fix bpftool path discovery on ubuntu

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 31 Jan 2025 11:39:18 -0500

systemd (257.2-3) unstable; urgency=medium

  * signing template: add override for executable-not-elf-or-script
  * libsystemd-dev/libudev-dev: depend on libcap-dev. These libraries link
    with libcap, so a dependency is needed for static builds
  * systemd-boot: use boot entry argument instead of installing as
    grub.efi on ESP. It turns out Shim can load sd-boot if the boot entry
    is set correctly.
  * systemd-boot: always check that the boot entry is set, even with Shim
    is already installed
  * libudev1: add udeb back to shlibs. Without this, packages building
    udebs against libudev-dev will end up depending on libudev1 instead of
    libudev1-udeb.

 -- Luca Boccassi <bluca@debian.org>  Thu, 23 Jan 2025 15:17:08 +0000

systemd (257.2-2) unstable; urgency=medium

  [ Luca Boccassi ]
  * Enable libseccomp on loong64 and hppa
  * Enable UEFI on loong64
  * Do not install sd-resolved and drop breaks-testbed from fast tests.
  * d/t/control: remove 'flaky' from tests-in-lxd
  * d/t/upstream: take into account autopkgtest pinning
  * signing template: fix Lintian warnings and errors
  * Link systemctl against libsystemd-shared. This was disabled when we
    did not have a libsystemd-shared package, but it's now available so we
    can change this again. This makes the stripped systemctl binary size
    go from 1.6M down to 291K.
  * signing template: always set urgency to 'high' The main package has
    autopkgtest so gets a bonus, make sure the signed package also
    migrates fast by default. It will always be blocked by the main
    package anyway due to the dependency.
  * Drop udeb packages. The udeb packages will be moved to a new systemd-
    udeb repository, to reduce udeb churn and to unblock changes in the
    main packages, such as building udev without static linking libudev
    and libsystemd-shared, which shrinks the size of the binary from 1.6M
    down to 611K

  [ Philipp Kern ]
  * Update README.source in the signing-template. This previously referred
    to fwupd, which is where it was copied from.

 -- Luca Boccassi <bluca@debian.org>  Fri, 17 Jan 2025 09:53:01 +0000

systemd (257.2-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/257.2' (Closes: #1092125)
  * Drop all patches, merged upstream

 -- Luca Boccassi <bluca@debian.org>  Tue, 07 Jan 2025 20:48:25 +0000

systemd (257.1-7ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/boot-and-services: skip apparmor tests on armhf
    - debian/systemd.postinst:
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
  * Dropped changes, included in Debian:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services: drop test_no_failed
    - debian/systemd.postinst: skip daemon-reexec and try-restarts during shutdown
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/control:
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
  * Dropped changes, no longer needed:
    - debian/tests/boot-and-services: consume stderr in systemctl status call in test_service
  * Dropped changes, included upstream:
    - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 07 Jan 2025 10:58:51 -0500

systemd (257.1-7) unstable; urgency=medium

  * Add missing d/copyright file to signed template packages
  * d/t/tests-in-lxd: more fixes for debci compatibility

 -- Luca Boccassi <bluca@debian.org>  Sat, 04 Jan 2025 01:55:59 +0000

systemd (257.1-6) unstable; urgency=medium

  * d/t/tests-in-lxd: drop auto-apt-proxy.conf from container
  * Drop build dependency on libxen-dev on armhf, no longer available
    (Closes: #1091545)

 -- Luca Boccassi <bluca@debian.org>  Fri, 03 Jan 2025 11:39:41 +0000

systemd (257.1-5) unstable; urgency=medium

  * d/t/tests-in-lxd: install auto-apt-proxy in the nested container.
  * d/t/upstream: do not use --verbose with 'meson test'
  * d/t/upstream: do not mask machined and instead use mkosi workaround
  * d/t/upstream: switch from btrfs to ext4 and use nspawn again. Kernel
    6.12 broke mounting btrfs volumes from loop devices, switch to ext4 as
    a workaround and use nspawn again, as it's faster

 -- Luca Boccassi <bluca@debian.org>  Thu, 26 Dec 2024 18:59:19 +0000

systemd (257.1-4) unstable; urgency=medium

  * d/t/upstream: decrease parallelism to nproc - 1
  * d/t/upstream: do not use nspawn for tests
  * d/t/upstream: disable homed/userdbd in the test runner
  * d/t/upstream: mask systemd-machined
  * Backport patch to workaround issue in new mdadm

 -- Luca Boccassi <bluca@debian.org>  Sun, 22 Dec 2024 13:57:12 +0000

systemd (257.1-3) unstable; urgency=medium

  * autopkgtest: mark tests-in-lxd as flaky

 -- Luca Boccassi <bluca@debian.org>  Sat, 21 Dec 2024 01:19:14 +0000

systemd (257.1-2) unstable; urgency=medium

  * Various fixes for d/t/tests-in-lxd

 -- Luca Boccassi <bluca@debian.org>  Fri, 20 Dec 2024 15:27:15 +0000

systemd (257.1-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * test: fix flaky boot-and-services test.
  * d/t/upstream: fix mkosi syntax warnings
  * systemd-ukify: recommend python3-cryptography. One of the verbs uses
    it, so add a recommend to pull it in by default (Closes: #1090759)
  * d/watch: restrict to v257.x series
  * Update upstream source from tag 'upstream/257.1' (Closes: #1087616)
  * Drop patches, merged upstream
  * Install systemd-creds bash completion

  [ Nick Rosbrook ]
  * d/t/tests-in-lxd: run some tests under LXD
  * debian/tests/boot-and-services: drop test_no_failed
  * debian/control: add Breaks: systemd (<< ${binary:Version}) for udev.
    This ensures that systemd is also upgraded whenever udev is upgraded.
  * d/control: make systemd-sysv Depends: on matching version of systemd
  * d/systemd-resolved.postinst: copy existing /etc/resolv.conf on new
    installs

  [ Balint Reczey ]
  * debian/systemd.postinst: Skip daemon-reexec and try-restarts during
    shutdown. LP #1803391

 -- Luca Boccassi <bluca@debian.org>  Thu, 19 Dec 2024 21:41:25 +0000

systemd (257-2ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - d/t/control: tests-in-lxd Depends: dnsmasq-base
    - d/t/tests-in-lxd: drop patching workaround

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 12 Dec 2024 10:00:12 -0500

systemd (257-2) unstable; urgency=medium

  [ Aurelien Jarno ]
  * udev: install dmi_memory_id and its rules on riscv64.

  [ Luca Boccassi ]
  * Backport patches to fix test failures

 -- Luca Boccassi <bluca@debian.org>  Wed, 11 Dec 2024 18:31:08 +0000

systemd (257-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - d/t/control: tests-in-lxd Depends: dnsmasq-base
    - d/t/tests-in-lxd: drop patching workaround
  * New changes:
    - test: set nsec3-salt-length=8 in knot.conf

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 11 Dec 2024 11:45:03 -0500

systemd (257-1) unstable; urgency=medium

  * Update to new upstream version v257. For a full list of changes:
    https://github.com/systemd/systemd/releases/tag/v257-rc1
  * Update symbols file for v257

 -- Luca Boccassi <bluca@debian.org>  Tue, 10 Dec 2024 19:57:21 +0000

systemd (257~rc3-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable (LP: #2091175). Remaining changes:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
      + Do not create /etc/tmpfiles.d/tmp.conf on upgrades
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Make systemd-cryptsetup Priority: important
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
      + Do not build systemd-boot-efi-{amd64,arm64}-signed-template
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - test: skip TEST-69-SHUTDOWN on ubuntu too (LP #2083704)
    - Delta for i386:
      + debian/systemd.install: exclude files that are not built for i386
      + debian/systemd.manpages: do not ship un-built manpages on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with tpm libraries on i386
      + debian/rules,debian/control,debian/tests/control:
        Do not build with libqrencode on i386
      + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors
  * Dropped changes, included in Debian:
    - Filter out zdev rules in the initramfs hook (LP #2044104)
    - d/t/upstream: honor /etc/apt configured by autopkgtest
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
      (Ubuntu only)
  * Dropped changes, not needed
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
  * New changes:
    - d/t/control: tests-in-lxd Depends: dnsmasq-base
    - d/t/tests-in-lxd: drop patching workaround

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 06 Dec 2024 10:30:12 -0500

systemd (257~rc3-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * systemd-ukify: recommend systemd-boot-efi for the stub (Closes:
    #1087808)
  * Increase minimum sections in stub PE header on arm64/armhf/riscv64 to
    500. Allows riscv64 to include all current DTBs with some room to grow
    (Closes: #1087817)
  * Bump version in tzdata dependency due to p-u upload
  * Update to new upstream version v257~rc3. For a full list of changes:
    https://github.com/systemd/systemd/releases/tag/v257-rc3
  * Drop patches, merged upstream
  * Update symbols for 257~rc3

  [ Ben Hutchings ]
  * sysctl: Add file trigger on /usr/lib/sysctl.d to restart systemd-
    sysctl. (Closes: #1085160)

 -- Luca Boccassi <bluca@debian.org>  Wed, 27 Nov 2024 21:21:02 +0000

systemd (257~rc2-3) unstable; urgency=low

  * Backport patch to remove faulty unit test assertion

 -- Luca Boccassi <bluca@debian.org>  Sat, 16 Nov 2024 10:13:56 +0000

systemd (257~rc2-2) unstable; urgency=low

  * Backport patch to fix FTBFS due to failing unit test

 -- Luca Boccassi <bluca@debian.org>  Sat, 16 Nov 2024 00:36:08 +0000

systemd (257~rc2-1) unstable; urgency=low

  * d/t/control: add more packages to dummy hint-testsuite-triggers. A
    regression was introduced by nvme-cli in testing because the testsuite
    doesn't depend on it anymore directly, as mkosi builds it in the
    image. Add back all the tools/libraries that are only part of the
    mkosi guest image, so that autopkgtest triggers when they get updated,
    and regressions can be flagged before they migrate to testing.
  * Update upstream source from tag 'upstream/257_rc2'
  * Drop all patches, merged upstream
  * Install new systemd-keyutil binary in the systemd-repart package
  * systemd-ukify: downgrade dependency on systemd, not mandatory. It is
    necessary for the systemd-measure binary, but its usage is optional
    behind a specific argument, so the dependency can be downgraded
    (Closes: #1087322)
  * systemd-ukify: recommend systemd-repart. Needed for the systemd-sbsign
    and systemd-keyutil binaries
  * d/rules: adjust blhc override to account for source files being moved
  * Update lintian override to ignore false positive typos

 -- Luca Boccassi <bluca@debian.org>  Fri, 15 Nov 2024 19:49:02 +0000

systemd (257~rc1-4) unstable; urgency=medium

  * Backport patch to fix TEST-07-PID1 integration test

 -- Luca Boccassi <bluca@debian.org>  Fri, 08 Nov 2024 01:09:19 +0000

systemd (257~rc1-3) unstable; urgency=low

  * Backport another patch to fix test failure on buildd

 -- Luca Boccassi <bluca@debian.org>  Thu, 07 Nov 2024 11:13:25 +0000

systemd (257~rc1-2) unstable; urgency=low

  * Backport patch to fix unit test failure on buildd

 -- Luca Boccassi <bluca@debian.org>  Thu, 07 Nov 2024 09:35:17 +0000

systemd (257~rc1-1) unstable; urgency=low

  * gbp.conf: switch upstream branch to full upstream history
  * Update to new upstream version v257~rc1. For a full list of changes:
    https://github.com/systemd/systemd/releases/tag/v257-rc1
  * Drop all patches, merged upstream
  * Install new files
  * List new libsystemd0 symbols
  * Ignore Lintian warning dh-exec-script-without-dh-exec-features
  * d/copyright: remove pattern for directory that is no longer present

 -- Luca Boccassi <bluca@debian.org>  Wed, 06 Nov 2024 23:58:55 +0000

systemd (256.7-3) unstable; urgency=medium

  [ Luca Boccassi ]
  * Backport patch to fix test failures with tzdata 2024b-1
  * systemd-boot: provide provisional integration with shim. Not yet
    used, will be active once the signed packages are available.
    https://wiki.debian.org/SecureBoot#Secure_Boot_setup_with_systemd-boot

  [ Kirill Rekhov ]
  * d/systemd.postrm: delete more internal state directories on purge

 -- Luca Boccassi <bluca@debian.org>  Fri, 01 Nov 2024 18:13:09 +0000

systemd (256.7-2) unstable; urgency=medium

  [ Nick Rosbrook ]
  * d/systemd.postinst: do not restart systemd-binfmt.service if masked
    (LP: #2077869)

  [ Luca Boccassi ]
  * systemd-boot: depend on systemd for kernel-install (Closes: #1085012)
  * Disable utmp support, not y2038 safe. utmp support in tmux has been
    disabled, so autopkgtest should no longer break
  * Backport fixes for upstream autopkgtest suite

  [ Benjamin Drung ]
  * initramfs-tools: support missing /etc/udev/udev.conf. Installing
    initramfs-tools fails in case `/etc/udev/udev.conf` is removed
    (LP: #2084592)

 -- Luca Boccassi <bluca@debian.org>  Fri, 18 Oct 2024 15:47:12 +0100

systemd (256.7-1) unstable; urgency=medium

  * autopkgtest: skip gdm3 on armel for smoke tests. Gnome is no longer
    built for armel. (Closes: #1082516)
  * New upstream version 256.7
  * Mark dependencies on clang and bpftool as :native (Closes: #1083064)
  * Revert "autopkgtest: skip TEST-64-UDEV-STORAGE due to qemu crash". The
    qemu crash is now detected in the upstream integration test script.

 -- Luca Boccassi <bluca@debian.org>  Tue, 08 Oct 2024 18:37:53 +0100

systemd (256.6-1) unstable; urgency=medium

  [ Helmut Grohne ]
  * salsa-ci: test the stage1 build profile

  [ Simon Chopin ]
  * Filter out zdev rules in the initramfs hook (LP: #2044104). s390-tools
    has its own initramfs customization logic that deals with those files.

  [ Luca Boccassi ]
  * Re-enable utmp support, tmux's autopkgtests require it. This will
    break as logind writing into utmp will wrap around, so Trixie won't be
    y2038 ready after all
  * New upstream version 256.6
  * Note systemd-cryptsetup package split in NEWS (Closes: #1079644)

 -- Luca Boccassi <bluca@debian.org>  Tue, 10 Sep 2024 18:28:21 +0200

systemd (256.5-2ubuntu4) plucky; urgency=medium

  * Make sure systemd-cryptsetup is pulled in by systemd on install/upgrade
    (LP: #2084251)
    - d/control: make systemd-cryptsetup Priority: important
    - d/control: make systemd Recommends: systemd-cryptsetup again
  * debian/gbp.conf: update for plucky

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 16 Oct 2024 16:30:52 -0400

systemd (256.5-2ubuntu3) oracular; urgency=medium

  * d/control: demote systemd-cryptsetup from Recommends: to Suggests: of systemd
  * test: skip TEST-69-SHUTDOWN on ubuntu too (LP: #2083704)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 04 Oct 2024 11:37:37 -0400

systemd (256.5-2ubuntu2) oracular; urgency=medium

  * initramfs-tools: ensure rules file exists before invoking chzdev (LP: #2079993)

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 09 Sep 2024 09:42:11 -0400

systemd (256.5-2ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades.
      We want the upgrades on Ubuntu to be aligned with what a new install
      would look like.
    - d/control: do not build systemd-boot-efi-{amd64,arm64}-signed-template
  * New changes:
    - Keep utmp support for this release, since we are passed Feature Freeze
      in Ubuntu.
    - Filter out zdev rules in the initramfs hook (LP: #2044104)
    - d/t/upstream: honor /etc/apt configured by autopkgtest

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 06 Sep 2024 09:21:01 -0400

systemd (256.5-2) unstable; urgency=medium

  [ Helmut Grohne ]
  * Fix stage1 build (Closes: #1078821)

  [ Luca Boccassi ]
  * Disable utmp support, replaced by wtmpdb. utmp is not y2038-safe, util-
    linux has now turned it off and relies on logind, so disable utmp
    support in logind too, as it is no longer necessary. wtmpdb replaces
    the functionality.

 -- Luca Boccassi <bluca@debian.org>  Sun, 01 Sep 2024 22:03:06 +0100

systemd (256.5-1) unstable; urgency=medium

  * New upstream version 256.5
  * Drop patch merged upstream
  * autopkgtest: skip TEST-64-UDEV-STORAGE due to qemu crash. This tests
    randomly causes qemu to crash, making it very flaky, skip it
    downstream

 -- Luca Boccassi <bluca@debian.org>  Thu, 15 Aug 2024 22:00:36 +0100

systemd (256.4-3) unstable; urgency=medium

  * Drop redundant pot build. This was added many years ago, when
    apparently the upstream pot generation wasn't run or wasn't working.
    This is not the case anymore, pot files are regenerated upstream and
    checked in on every release, so this manual step just updates the
    timestamp in the existing template and nothing else. Drop it.
  * Use debian/clean instead of override in d/rules
  * Stop shipping empty /etc/init.d directory. We do not have any need for
    it, and will soon stop supporting legacy init files, so stop shipping
    it
  * Use d/not-installed instead of manual removals. We no longer install
    in the main package with a wildcard so we do not need to manually
    delete files, listing them in d/not-installed is sufficient. The only
    exceptions are files picked up by directory/wildcard entries in
    dh_install that have to be deleted.
  * autopkgtest: run upstream test last. It is the most complex and thus
    the most likely to show temporary failures, so move it last so that
    it's easier to read the logs
  * autopkgtest: use hint-testsuite-triggers to ensure other packages
    changes trigger our testsuite
  * Depend on new linux-bpf-dev package where available

 -- Luca Boccassi <bluca@debian.org>  Sun, 11 Aug 2024 11:53:32 +0100

systemd (256.4-2ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades.
      We want the upgrades on Ubuntu to be aligned with what a new install
      would look like.
    - d/control: do not build systemd-boot-efi-{amd64,arm64}-signed-template

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 30 Jul 2024 10:44:28 -0400

systemd (256.4-2) unstable; urgency=medium

  * autopkgtest: allow localectl in localed tests.

 -- Luca Boccassi <bluca@debian.org>  Thu, 25 Jul 2024 13:18:09 +0100

systemd (256.4-1ubuntu3) oracular; urgency=medium

  * d/systemd.install: remove systemd-time-wait-sync again
    This was mistakenly added back when resolving a merge conflict.
    This binary was moved to systemd-timesyncd in commit 9d74923dd7
    ("Move systemd-time-wait-sync to systemd-timesyncd package").

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 29 Jul 2024 10:00:05 -0400

systemd (256.4-1ubuntu2) oracular; urgency=medium

  * d/systemd.install: do not ship systemd-tpm2-setup on i386

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 26 Jul 2024 15:44:16 -0400

systemd (256.4-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades.
      We want the upgrades on Ubuntu to be aligned with what a new install
      would look like.
  * New changes:
    - d/control: do not build systemd-boot-efi-{amd64,arm64}-signed-template

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 26 Jul 2024 13:36:33 -0400

systemd (256.4-1) unstable; urgency=medium

  [ Nick Rosbrook ]
  * Move systemd-time-wait-sync to systemd-timesyncd package
    (LP: #1938058)
  * d/t/boot-and-services: skip test_tmp_cleanup if tmp.mount is
    overridden
  * d/t/upstream: ensure correct ubuntu codename is used
  * d/t/control: add Depends: lib{systemd,udev}-dev for upstream

  [ Luca Boccassi ]
  * Drop /etc/sysctl.d/99-sysctl.conf symlink procps no longer ships
    /etc/sysctl.conf (Closes: #1076190)
  * autopkgtest: add allow-stderr to timedated test
  * autopkgtest: set Release= in mkosi.local.conf to distinguish testing
    vs unstable
  * Drop out-of-tree localed patch and use D-Bus policy instead. We can
    forbid changing locale/keymap/keyboard via a D-Bus policy instead of
    an out-of-tree patch.
  * New upstream version 256.4 (Closes: #1074789)
  * Install varlinkctl zsh completion file
  * Drop last patch, all merged upstream

 -- Luca Boccassi <bluca@debian.org>  Wed, 24 Jul 2024 14:23:56 +0100

systemd (256.2-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - switch-root: use MS_MOVE for /run when switchig from initrd
    - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades.
      We want the upgrades on Ubuntu to be aligned with what a new install
      would look like.
  * Dropped changes, no longer needed:
    - Drop Revert-network-if-sys-is-rw-then-udev-should-be-around.patch
    - Drop test-skip-exec-privatenetwork-yes-privatemounts-yes.servi.patch.
      With security.nesting: true, this AppArmor denial is not hit. We can
      drop this now.
    - debian/tests/unit-tests: don't skip test-execute on armhf anymore
  * Dropped changes, not compatible with mkosi-based test suite:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
  * New changes:
    - debian/tests/tests-in-lxd: set security.nesting true for LXD containers
    - d/t/boot-and-services: skip test_tmp_cleanup if tmp.mount is overridden
    - d/t/upstream: ensure correct ubuntu codename is used
    - d/t/control: add Depends: lib{systemd,udev}-dev for upstream

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 19 Jul 2024 11:56:45 -0400

systemd (256.2-1) unstable; urgency=medium

  * d/not-installed: fix shutdown.standalone path
  * autopkgtest: skip qemu tests on arm64
  * Add recommends on linux-sysctl-defaults. This package contains the
    default sysctl settings, and is maintained by the kernel team. This is
    not available in Ubuntu so keep it as a recommends for now, to avoid
    breaking the upstream CI.
    (Closes: #1027773)
  * initramfs-tools: copy network drop-ins too (Closes: #1074564)
  * d/e/checkout-upstream: fix shellcheck warnings
  * d/e/checkout-upstream: do not fail if rebase fails
  * d/e/checkout-upstream: switch packaging branch on upstream stable PRs.
  * New upstream version 256.2 (Closes: #1074789)
  * Install run0 zsh completion file

 -- Luca Boccassi <bluca@debian.org>  Fri, 05 Jul 2024 19:15:59 +0100

systemd (256.1-2) unstable; urgency=medium

  * Bump breaks/replaces to conflicts for DEP17. Breaks/replaces are not
    enough when moving files between packages and between locations as per
    DEP17, so bump to Conflicts. (Closes: #1073922)
  * autopkgtest: add dependency on libcryptsetup-dev in unit-tests suite

 -- Luca Boccassi <bluca@debian.org>  Sun, 23 Jun 2024 13:33:33 +0100

systemd (256.1-1) unstable; urgency=medium

  * Bump versioned breaks against dracut to 102-2 (Closes: #1073290)
  * autopkgtest: switch upstream suite to mkosi-based builds
  * Add conflict against sysv-rc, insserv and startpar in systemd-sysv.
    They are not needed, and having them installed causes problems.
    (Closes: #1072562)
  * New upstream version 256.1
  * Drop section from binary packages where it matches the source package
  * Override Lintian false positives about spare manpages
  * Deduplicate template packages descriptions
  * Add Lintian override for template package false positives
  * Rename EFI architecture variable to avoid dpkg clash. Fixes Lintian
    warning: debian-rules-sets-dpkg-architecture-variable
  * Upload to unstable.

 -- Luca Boccassi <bluca@debian.org>  Tue, 18 Jun 2024 23:19:16 +0100

systemd (256-2) experimental; urgency=medium

  * Add templated packages for UEFI Secure Boot signing of systemd-boot.
  * Add systemd-standalone-shutdown package for exitrds. Allows building
    minimal exitrd images, used to gracefully cleanup complex root
    filesystems storage. Not intended for normal systems.
  * Add systemd-repart package to reduce dependencies sd-repart pulls in
    several libraries that binaries in the main systemd package do not
    need, so split it out to reduce the dependencies of the main package
  * Add systemd-cryptsetup package to reduce dependencies sd-
    cryptsetup/integritysetup/veritysetup pull in several libraries that
    other files in the main systemd package do not need, so split them out
    to reduce the dependencies of the main package
  * Move sd-sysupdate to systemd-container
  * Move importd manpages to systemd-container, where the binaries are.
    Left behind when importd was moved
  * Move systemd-boot/stub manpages to systemd-boot. The EFI packages
    should just have the EFI binaries, no point in duplicating the docs.
    And the stub manpage should also be in the boot package, not the main
    package.

 -- Luca Boccassi <bluca@debian.org>  Wed, 12 Jun 2024 01:30:51 +0100

systemd (256-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC
    - debian/test/unit-tests: skip test-execute on armhf.
  * Dropped changes, included in Debian:
    - debian/extra: use a drop-in resolved.conf to configure Cache=no-negative
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
    - debian/tests/storage: skip tests if scsi_debug module is not available
  * Dropped changes:
    - debian/patches/tmpfiles.d-tmp.conf-make-cleanup-age-30d-on-Ubuntu.patch:
      We want to stay aligned with Debian and upstream instead of keeping this
      30d cleanup.
    - debian/systemd-resolved.install: drop unnecessary delta
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      We do not actually ship sysctld.d/50-default.conf in Debian or Ubuntu.
      When this patch was written, we did, but that change was lost in a merge
      from Debian. The preferred package to set sysctl defaults is procps
      anyways, so rather than restoring sysctl.d/50-default.conf to make this
      patch relevant, drop the patch.
  * New changes:
    - debian/extra: remove systemd-logind.service.d/nice.conf (LP: #2067927)
    - switch-root: use MS_MOVE for /run when switchig from initrd (LP: #2064096)
    - debian/systemd.postinst: do not create /etc/tmpfiles.d/tmp.conf on upgrades.
      We want the upgrades on Ubuntu to be aligned with what a new install
      would look like.

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 13 Jun 2024 11:46:06 -0400

systemd (256-1) unstable; urgency=medium

  [ Kevin Fleming ]
  * Additional workaround for links to legacy /usr/share/systemd/tmp.mount
    placeholder

  [ Yu Watanabe ]
  * debian/extra/network: use NamePolicy=mac only when ID_NET_NAME_MAC is
    set.

  [ Luca Boccassi ]
  * New upstream version 256. For a full list of changes, see:
    https://github.com/systemd/systemd/releases/tag/v256

 -- Luca Boccassi <bluca@debian.org>  Tue, 11 Jun 2024 22:59:12 +0100

systemd (256~rc4-1) unstable; urgency=high

  [ Luca Boccassi ]
  * Restart managers on libc-upgrade dpkg trigger (Closes: #1072373)
  * LimitCORE: restore default hard limit to infinity. The intention was
    to change the soft limit, but by default it applies to both unless
    specified, so fix it.
  * New upstream version 256~rc4
  * Drop patches merged upstream

  [ Nick Rosbrook ]
  * debian/extra: set ManagedOOMSwap=auto on -.slice. This has the effect
    of disabling swap kill by default, so cgroups will only be monitored
    for memory pressure, and not swap usage.
  * debian/extra: use a drop-in resolved.conf to configure Cache=no-
    negative. Only ship this on Ubuntu.
  * debian/extra: use a dropin to configure Nice=-1 on systemd-
    journald.service. Only ship this on Ubuntu.

  [ Dan Streetman ]
  * debian/tests/storage: without scsi_debug, skip test

 -- Luca Boccassi <bluca@debian.org>  Thu, 06 Jun 2024 20:49:17 +0100

systemd (256~rc3-7) unstable; urgency=medium

  * NEWS: note that any leftover file in /tmp/ will be invisible due to
    the tmpfs and other clarifications (Closes: #1072249)
  * Add pkg.systemd.noukify profile. Will be useful for i386 reduced
    builds
  * d/rules: be more robust against non-existing dirs when deleting files
  * Allow setting GENSYMBOLS_LEVEL from the environment. Needed when
    building with llvm to work around #986746

 -- Luca Boccassi <bluca@debian.org>  Sat, 01 Jun 2024 12:30:39 +0100

systemd (256~rc3-6) unstable; urgency=medium

  * NEWS: clarify tmpfiles.d entry (Closes: #1072155)
  * Override false positive Lintian warning
  * Add workaround for links to legacy /usr/share/systemd/tmp.mount
    placeholder. Some users apparently link to the placeholder in
    /usr/share/ so delete any such links, given we don't ship it anymore
    (Closes: #1072187)

 -- Luca Boccassi <bluca@debian.org>  Thu, 30 May 2024 18:11:19 +0100

systemd (256~rc3-5ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC
  * Dropped changes, no longer needed:
    - Drop debian/UBUNTU-read-only-etc-hacks.patch
    - Drop debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
    - Drop debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
    - Drop lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch.
      As stated in the patch description, this is *not* the proper fix for the
      issue. The proper fix was sent to bcache-tools upstream, but that
      upstream is abandoned. However, that patch is now included in Debian
      (shipped starting in 1.0.8-5). Hence, we can finally drop this patch
      from systemd.
    - Drop test-temporarily-skip-credentials-tests-in-LXC.patch
      This is redundant with the current skip in tests-in-lxd, and skipping
      on armhf all together.
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
  * New changes:
    - Keep 30d cleanup for /tmp in Ubuntu
    - debian/extra: use a drop-in resolved.conf to configure Cache=no-negative
      This allows us to drop the current patch.
    - debian/test/unit-tests: skip test-execute on armhf.
      The run-unit-tests.py script supports a --skip flag for wholesale
      skipping like this, so use that instead of a patch.
    - debian/tests/tests-in-lxd: fix apparmor profile path

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 31 May 2024 15:52:20 -0400

systemd (256~rc3-5) unstable; urgency=medium

  * homed: fixup pam-auth-update file via trigger pam-auth-update assumes
    nothing comes after a password module, but this is not true for
    pam_systemd_home, which is a no-op for users not managed by homed.
    Fixup common-password accordingly, using a trigger watching for pam-
    auth-update files being installed.

 -- Luca Boccassi <bluca@debian.org>  Wed, 29 May 2024 01:04:53 +0100

systemd (256~rc3-4) unstable; urgency=medium

  * autopkgtest: take into account compat tmp.conf in tmpfiles.d test.
  * Backport patch to fix TEST-64-UDEV-STORAGE autopkgtest.

 -- Luca Boccassi <bluca@debian.org>  Tue, 28 May 2024 12:11:36 +0100

systemd (256~rc3-3) unstable; urgency=medium

  [ Zbigniew Jędrzejewski-Szmek ]
  * tests/boot-and-services: don't wait for systemd-tmpfiles-clean.service
    to finish. It's a oneshot service, so the 'start' call above is
    effectively synchronous.
  * test/boot-and-services: use pidof instead of ps -C

  [ Chris Hofstaedtler ]
  * autopkgtest: install open-iscsi and tgt for upstream suite

  [ Gioele Barabucci ]
  * d/libnss-mymachines.nss: Install before `resolve` and `dns`. Installing
    `mymachines` before `dns` and `resolve` (whatever comes first) is
    suggested in the manpage. It also avoids leaking information about
    local machines to the DNS resolver. (Closes: #825438, #851314)
  * d/libnss-myhostname.nss: Install after `files`

  [ Luca Boccassi ]
  * Drop /bin/systemd legacy symlink. The systemd binary should not be in
    the default PATH. This symlink was created due to some old
    documentation (long since corrected) suggesting to use
    init=/bin/systemd to test switching to systemd. (Closes: #913061)
  * initramfs: call udevadm settle before control --exit to ensure workers
    have stopped. Otherwise there might be lock files left under /run/
    which will break 'nuke' and cause the boot to fail. (Closes: #1056564)
  * Restore open files limit bump on boot. Broken packages ought to have
    been fixed by now. (Closes: #1029152)
  * Set default core limit to 0 via PAM for users. Otherwise it only
    applies to services.
  * Cleanup /var/tmp/ and /tmp/ on a timer by default. Remove the
    downstream patch and restore the upstream behaviour set by the
    tmpfiles.d which is to cleanup /var/tmp/ once a month and /tmp/ once
    every 10 days. Can be overridden via: touch /etc/tmpfiles.d/tmp.conf
    (Closes: #966621)
  * Make /tmp/ a tmpfs by default. Restore the upstream default and make
    /tmp/ a tmpfs. Can be overridden with: touch
    /etc/systemd/system/tmp.mount or: systemctl mask tmp.mount
  * Drop out-of-tree /run/lock patch and use a mount unit and tmpfiles.d
    instead. Only lvm2 and open-iscsi have mentions of /run/lock and an
    early-boot unit, so it's trivial to add ordering in those units
    instead of maintaining an out-of-tree patch.
  * homed: use standalone pam config file instead of pam-auth-config
    pam_unix.so assumes that if anything comes before it then the password
    has already been queried for sure. This doesn't work for homed, so
    passwd breaks. pam-auth-config has this hard-coded assumption and it
    cannot be disabled. Use an upstream standard pam config file instead.
    (Closes: #1056166)
  * NEWS: note recent changes

 -- Luca Boccassi <bluca@debian.org>  Tue, 28 May 2024 00:07:57 +0100

systemd (256~rc3-2) unstable; urgency=medium

  * autopkgtest: do not install gdm3 on riscv64 tests. gnome-shell hasn't
    built since last year for riscv64 due to #1058687 so the test fails as
    it cannot be installed, skip it like on s390x.

 -- Luca Boccassi <bluca@debian.org>  Thu, 23 May 2024 16:31:42 +0100

systemd (256~rc3-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
      Workaround Ubuntu core's read-only etc
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - test: temporarily skip credentials tests in LXC.
      This was already skipped in another patch, but now that we know what's
      going on with it, split it out.
    - test: skip test-execute in arhmf LXC containers
    - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC
  * Dropped changes, no longer needed:
    - Provide upgrade path (Replaces:) for Jammy's systemd-repart
    - test: deny-list TEST-08-INITRD.
  * New changes:
    - debian/tests/tests-in-lxd: skip until credentials can be used in LXD

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 23 May 2024 10:45:03 -0400

systemd (256~rc3-1) unstable; urgency=medium

  * Bump Breaks on dracut, on request of the maintainer (Closes: #1071278)
  * autopkgtest: reboot before logind test
  * Disable D-Bus introspection XML generation with nodoc profile
  * autopkgtest: install systemd-dev for upstream suite too
  * New upstream version 256~rc3
  * Drop patches merged upstream

 -- Luca Boccassi <bluca@debian.org>  Wed, 22 May 2024 23:24:02 +0100

systemd (256~rc2-3) unstable; urgency=medium

  * Explicitly enable systemd-boot only on supported architectures

 -- Luca Boccassi <bluca@debian.org>  Thu, 16 May 2024 22:51:08 +0100

systemd (256~rc2-2) unstable; urgency=medium

  * Build depend on dh-dlopenlibdeps and dynamically generate dlopen
    dependencies
  * Backport patches to fix journald asserts Compress=yes (Closes:
    #1071201)

 -- Luca Boccassi <bluca@debian.org>  Thu, 16 May 2024 17:40:43 +0100

systemd (256~rc2-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Provide upgrade path (Replaces:) for Jammy's systemd-repart
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
      + Build-Depends: linux-tools-generic
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
      Workaround Ubuntu core's read-only etc
    - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
    - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
      Disable -Wformat-overflow on gcc with -O3
    - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
      On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
      /etc/init.d, but nothing guarantees that the path is created for the
      test.
    - test: deny-list TEST-08-INITRD.
      Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
      It makes sense for us to as well, because we don't run systemd in the
      initrd.
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
      It is preferred that we override units with dropins like this, rather
      than patching the original. This has no functional change.
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship un-built manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - test: temporarily skip credentials tests in LXC.
      This was already skipped in another patch, but now that we know what's
      going on with it, split it out.
    - test: skip test-execute in arhmf LXC containers
    - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC
  * Dropped changes:
    - Drop test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch.
    - Drop test-ensure-SYSVINIT_PATH-exists-in-TEST-26-SYSTEMCTL.patch.
    - Drop meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch

 -- Nick Rosbrook <enr0n@ubuntu.com>  Sun, 19 May 2024 04:07:45 +0200

systemd (256~rc2-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * report-bug: add presubj template to recommend opening functionality
    bugs upstream first
  * report-bug: include runtime taints
  * Recommend libzstd1 and suggest liblz4-1, liblzma5, libgcrypt20
  * autopkgtest: install polkitd in upstream suite
  * Build depend on rsync or meson >= 1.3.0 for follow-symlink workaround.
  * Change links from freedesktop.org to systemd.io (Closes: #1070499)
  * Add dependency on python3-psutil to systemd-tests, needed by networkd
    test suite
  * d/t/boot-and-services: drop tmp check. LXC now sets up a tmpfs on /tmp
    as per upstream recommendation, so we cannot detect it via fstab
    anymore. Just drop this test, as we are about to make /tmp a tmpfs
    ourselves anyway.
  * Set SBAT distro URL to tracker.d.o as suggested by EFI team
  * Drop out-of-tree coredump patch and use config drop-ins instead. As
    per: https://github.com/systemd/systemd/pull/27066 instead of carrying
    an out-of-tree patch, use drop-ins to set the default pattern to
    'core' and the default core limit to '0' in the systemd package, and a
    higher priority drop-in to set the default core limit to 'infinity' in
    the systemd-coredump package (it already ships a sysctl to set the
    pattern). The end result is the same, but with config drop-ins instead
    of patches.
  * Drop out-of-tree fsckd daemon patch. This was dropped upstream long
    ago, and Plymouth on Debian doesn't actually use this. A different
    upstream change provides the required functionality.
  * Drop out-of-tree systemctl scheduled shutdown fallback. This patch was
    rejected upstream and there's no path to have it merged, so drop it
    and restore the default behaviour in case of error.
  * Drop out-of-tree fsck skip patch and use drop-in instead. Non-root
    filesystems are only checked when mounted, so the other change is not
    needed. The root one can be fixed with a drop-in instead of a patch.
  * d/t/control: explicitly depend on systemd-dev for tests that run pkg-
    config
  * systemd.postinst: use DPKG_ROOT in one more place.
  * NEWS: note scheduled shutdown failure case changes
  * New upstream version 256~rc2
  * Drop patches merged upstream
  * Refresh patches for v256~rc2
  * Install new files from v256~rc2
  * Drop Lintian overrides for false positives that have been fixed
  * Upload to unstable

  [ Michael Marley ]
  * Use absolute path when including libkmod in initramfs. The relative
    path works fine when the hook is executed during a normal APT
    install/update, but if the user runs "update-initramfs -u" from any
    directory other than /, the relative path doesn't match anything,
    libkmod is not included, and the system fails to boot due to not
    loading the storage driver(s).

  [ Michael Biebl ]
  * Stop setting the build system explicitly. No longer necessary since
    https://github.com/systemd/systemd/pull/31530
  * Remove systemd-dev dependency from systemd and udev. This was a
    temporary measure to ease the migration.

 -- Luca Boccassi <bluca@debian.org>  Wed, 15 May 2024 00:40:56 +0100

systemd (256~rc1-1~exp2ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Provide upgrade path (Replaces:) for Jammy's systemd-repart
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
      Workaround Ubuntu core's read-only etc
    - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
    - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
      Disable -Wformat-overflow on gcc with -O3
    - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
      On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
      /etc/init.d, but nothing guarantees that the path is created for the
      test.
    - test: deny-list TEST-08-INITRD.
      Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
      It makes sense for us to as well, because we don't run systemd in the
      initrd.
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
      It is preferred that we override units with dropins like this, rather
      than patching the original. This has no functional change.
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship sd-bsod manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - test: temporarily skip credentials tests in LXC.
      This was already skipped in another patch, but now that we know what's
      going on with it, split it out.
    - test: skip test-execute in arhmf LXC containers
    - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC
  * Dropped changes, fixed upstream:
    - Drop lp2058179-copy-ignore-EOPNOTSUPP-from-copy_file_range.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/c0bc1e8971
  * Dropped changes:
    - debian/extra/start-udev: drop scsi_mod delta.
      We have long held this delta in Ubuntu. Right now, this script is only
      installed in udev-udeb, but we do not build udebs on Ubuntu, so it is
      unnecessary to carry this delta.
    - Drop debian/Ubuntu-UseDomains-by-default.patch
  * New changes:
    - debian/gbp.conf: update for oracular
    - debian/systemd-resolved.postinst: ignore cp failure (LP: #2047975)
    - debian/control: Build-Depends: linux-tools-generic
    - debian/systemd.manpages: don't ship un-built manpages on i386
    - debian/tests: fix patching of autopkgtest-build-lxd

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 10 May 2024 15:44:17 -0400

systemd (256~rc1-1~exp2) experimental; urgency=medium

  * Backport patch to fix test-build-path on RISC-V/MIPS
  * Backport patch to fix build reproducibility
  * Backport patch to fix BPF build on s390x

 -- Luca Boccassi <bluca@debian.org>  Sat, 27 Apr 2024 18:14:25 +0100

systemd (256~rc1-1~exp) experimental; urgency=medium

  * d/watch: switch to main repository
  * New upstream version 256~rc1
  * Drop Downgrade-a-couple-of-warnings-to-debug.patch. It is time to
    start noticeably warning about these legacy setups
  * Refresh patches for v256
  * Build depend on libarchive-dev
  * Install new tools, units and manpages
  * Enable bpf and new nsresourced/mountfsd services. Requires vmlinux.h
    from linux-headers-$ARCH, disable if not found
  * Backport patch to fix unit test failure in build environment
  * Update libsystemd symbols file
  * Update Lintian overrides

 -- Luca Boccassi <bluca@debian.org>  Fri, 26 Apr 2024 12:22:04 +0100

systemd (255.5-1) sid; urgency=medium

  [ Michael Biebl ]
  * autopkgtest: depend on pkgconf rather than pkg-config
  * Stop setting default-hierarchy to unified explicitly. It is already
    the default and the meson option has been deprecated and is expected
    to be removed in a future release. See https://github.com/systemd/syst
    emd/commit/31323f21bb0ae7c712f43500c42997c91a6d20bf
  * Replace Skip-flaky-test_resolved_domain_restricted_dns-in-
    network.patch with a proper upstream fix.
  * Remove myself from Uploaders

  [ Luca Boccassi ]
  * autopkgtest: add dhcpcd5 as alternative dependency to dhcpcd-base
    dhcpcd-base is not available in Jammy
  * d/e/checkout-upstream: stop overriding sshconfdir. It actually works
    after some upstream test fixes, and it is necessary for TEST-46-HOMED
    to work
  * autopkgtest: install systemd-resolved for all suites. Necessary to
    avoid breaking the network on Ubuntu, in the upstream jammy-based CI
    jobs. Can be dropped once jammy is no longer tested.
  * autopkgtest: add breaks-testbed to more tests. Given resolved is
    installed, the testbed needs to be reset to switch back to the default
    network stack, otherwise installing packages in the salsa-ci
    autopkgtest job fails
  * autopkgtest: restrict systemd-boot-efi to architectures where it's
    built
  * Enable libpwquality support. Suggest it from systemd (used by
    firstboot and cryptenroll) and depend on it from homed (user creation
    is a core part of it). It's a dlopen() dependency. (Closes: #1063391)
  * d/e/checkout-upstream: do not initialize submodules. They are used by
    mkosi, not needed for CI builds
  * Autopkgtest: add dependency on libkmod-dev to upstream suite.
  * Switch build-depend form liblz4-tool to lz4. The former is deprecated
    and now dropped, the latter is available since buster. (Closes: #1068730)
  * initramfs hooks: pull in libkmod manually udev now opens it with
    dlopen, so the ldd-based resolver will not see it, pull it in the
    initramfs manually
  * New upstream version 255.5
  * Drop resolve-skip-IP_UNICAST_IF-for-local-sockets.patch, merged
    upstream
  * Refresh patches for v255.5
  * Bump Standards-Version to 4.7.0, no changes

  [ Daan De Meyer ]
  * Build in developer mode when building for upstream. Developer mode
    enables some helpful debugging options and enables various
    experimental components such as systemd-vmspawn which we want to be
    enabled when testing upstream.

 -- Luca Boccassi <bluca@debian.org>  Wed, 24 Apr 2024 16:34:40 +0100

systemd (255.4-1ubuntu8) noble; urgency=medium

  * copy: ignore -EOPNOTSUPP from copy_file_range() (LP: #2058179)
    File: debian/patches/lp2058179-copy-ignore-EOPNOTSUPP-from-copy_file_range.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fc81bb680f5d5c8c5995fcf6ed7f55f739dcd6a7

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 19 Apr 2024 10:24:36 -0400

systemd (255.4-1ubuntu7) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 05 Apr 2024 05:38:07 +0000

systemd (255.4-1ubuntu6) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 08:26:16 +0000

systemd (255.4-1ubuntu5) noble; urgency=medium

  * No-change rebuild against libcurl4t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 16 Mar 2024 07:04:30 +0000

systemd (255.4-1ubuntu4) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 04 Mar 2024 21:29:45 +0000

systemd (255.4-1ubuntu3) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 04 Mar 2024 08:28:30 +0000

systemd (255.4-1ubuntu2) noble; urgency=medium

  * debian/patches: modify tmpfiles.d/tmp.conf default for Ubuntu (LP: #2019026)
    In addition to cleaning /tmp at boot as is done in Debian, add a 30d
    cleanup age for files in /tmp.
    File: debian/patches/debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1b9bc51bb1b58a6f625f67f1632296940d78e82c

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 29 Feb 2024 12:02:44 -0500

systemd (255.4-1ubuntu1) noble; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
      to the kernel (we previously only set it in modprobe.d)
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Provide upgrade path (Replaces:) for Jammy's systemd-repart
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
    - d/p/debian/Ubuntu-UseDomains-by-default.patch:
      Enable UseDomains by default on Ubuntu.
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
      Workaround Ubuntu core's read-only etc
    - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
    - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
      Disable -Wformat-overflow on gcc with -O3
    - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
      On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
      /etc/init.d, but nothing guarantees that the path is created for the
      test.
    - test: deny-list TEST-08-INITRD.
      Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
      It makes sense for us to as well, because we don't run systemd in the
      initrd.
    - debian/systemd.install: do not install pcrlock.d on i386.
      We don't build this stuff on i386.
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
      It is preferred that we override units with dropins like this, rather
      than patching the original. This has no functional change.
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - debian/systemd.links: mask systemd-gpt-auto-generator by default
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship sd-bsod manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches
    - test: temporarily skip credentials tests in LXC.
      This was already skipped in another patch, but now that we know what's
      going on with it, split it out.
    - test: skip test-execute in arhmf LXC containers
    - test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC
  * Dropped changes, fixed upstream:
    - Drop lp2046498-test-skip-test_exec_networknamespacepath-if-netns-setup-f.patch.
      Applied upstream: https://github.com/systemd/systemd-stable/commit/019d5f88ec
    - Drop test-skip-TEST-43-PRIVATEUSER-UNPRIV-if-unprivileged-user.patch.
      Applied upstream: https://github.com/systemd/systemd-stable/commit/c07a21408b
    - Drop test-skip-a-systemd-run-test-if-unprivileged-userns-is-re.patch.
      Applied upstream: https://github.com/systemd/systemd-stable/commit/159b80d44f
    - Drop test-execute-skip-tests-that-are-broken-without-unprivile.patch.
      Applied upstream: https://github.com/systemd/systemd-stable/commit/8c4d70178a
  * New changes:
    - debian/tests/tests-in-lxd: update workaround patch (LP: #2055200)
      The autopkgtest-build-lxd script changed in a way that this patch no
      longer applies. Update the patch so it does apply.
      Thanks to Florent 'Skia' Jacquet

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 27 Feb 2024 17:13:21 -0500

systemd (255.4-1) sid; urgency=medium

  [ Luca Boccassi ]
  * Drop override for deprecated package-supports-alternative-init-but-no-
    init.d-script warning
  * Build-depend on pkgconf pkg-config is deprecated
  * Move kernel-install initrd script to slightly later prefix
    afea8e1a35e15382977d459241e8c56c180c862d moved it from 85 to 50, but
    this conflicts with the upstream mkosi job, which also runs at 50 and
    needs to run first. Move it back up slightly to 55 to fix the mkosi
    builds, eg: https://github.com/systemd/systemd-
    stable/actions/runs/7863691120/job/21454589626?pr=366
  * Mark python3-pefile build dependency as native. As suggested in
    #1063393
  * Skip python3-pefile build dependency only if both nocheck and
    noinsttests are set (Closes: #1063393)
  * Build with -Dtests=false if nocheck and noinsttest profiles are set.
    The required build dependencies will not be installed, so the tests
    won't build.
  * systemd-binfmt: use restart instead of try-restart on upgrade. It's
    not a long-running service so it doesn't matter, and it fixes
    installing a new binfmt provider (Closes: #1061960)
  * d/e/checkout-upstream: do not rebase when building on systemd-stable
    repo. We do rebase only pulls in the stable repo, and it's too much
    hassle to figure out the right parent branch, given the webhook is
    configured per repository rather than per branch, so just skip it
  * d/e/checkout-upstream: build with default-timeout-sec=180. Helps with
    slow daemon-reload on some CI runs. As requested by:
    https://github.com/systemd/systemd/pull/27182
  * d/e/checkout-upstream: enable log-trace by default. Its abscence
    appears to cause TEST-10-ISSUE-2467 to reliably fail. Enable it while
    we figure it out. Also probably it is helpful to have it always turned
    on for the CI, to get more info out of test runs. See:
    https://github.com/systemd/systemd/issues/19154
  * d/e/checkout-upstream: do not install userdbd sshd config drop-in.
    Breaks booting testbed in Jammy. Can be dropped after rebasing to
    Noble.
  * d/t/upstream: add dependencies on openssh, gnutls-bin, opensc and
    softhsm2. Required for https://github.com/systemd/systemd/pull/28658
    and https://github.com/systemd/systemd/pull/30777
  * d/t/upstream: fix shellcheck warning. SC2086 (info): Double quote to
    prevent globbing and word splitting.
  * Add dependency on libkmod2 on udev, and suggestion on systemd dlopen()
    dependency since https://github.com/systemd/systemd/pull/31131 but the
    system can't boot without it, so add it as a dependency on udev which
    is also needed outside of containers
  * Update tzdata build dependency constraint to 2024a-1
  * Drop libarchive-dev build dependency. Not useful for now, we'll re-add
    it after the next release
  * New upstream version 255.4
  * Drop patches merged upstream

  [ Daan De Meyer ]
  * Fix libtss2-mu dependency. This package recently changed name so let's
    update the Suggests to account for that.
  * Add Suggests for libtss2-tcti-device systemd wants to use this library
    when tpm2 support is enabled so let's make sure we list it in
    Suggests. (https://github.com/systemd/systemd/blob/db11bab38ccf1ed257f
    310d29070843d4c58ea01/meson.build#L1341)
  * Make sure awk only matches PROJECT|PACKAGE_VERSION
  * Use DEB_BUILD_MAINT_OPTIONS instead of meson options.
  * Don't put debian revision in version tag when building for upstream.
  * Allow users to configure DH_MISSING.

  [ Frantisek Sumsal ]
  * d/t/storage: ignore credential mounts when checking /proc/mounts.

  [ Daniel P. Berrangé ]
  * debian/rules: don't override default telinit-path. The 'telinit-path'
    meson option is to be used to point to a non-systemd telinit binary
    path. When systemctl is invoked as 'telinit', it will exec this binary
    when it detects the current environment is not running under systemd.
    If 'telinit-path' points back to 'systemctl', that would result in an
    infinite re-execve() loop. (Closes: #1063147)

 -- Luca Boccassi <bluca@debian.org>  Tue, 27 Feb 2024 17:43:55 +0000

systemd (255.3-2) sid; urgency=medium

  * Backport patches to fix reproducibility issues
  * Salsa: re-enable reprotest

 -- Luca Boccassi <bluca@debian.org>  Mon, 29 Jan 2024 10:46:19 +0000

systemd (255.3-1) sid; urgency=medium

  * New upstream version 255.3
  * Drop patches merged upstream
  * Refresh patches

 -- Luca Boccassi <bluca@debian.org>  Wed, 24 Jan 2024 20:03:15 +0000

systemd (255.2-4) sid; urgency=medium

  * autopkgtest: add btrfs-progs Depends to upstream suite.
    Required by TEST-83-BTRFS and testcase_btrfs_basic from
    TEST-64-UDEV-STORAGE.
  * Revert "test: deny-list TEST-13-NSPAWN"
    This reverts commit df8e5367aca20e0c75c9c91f826d22d8a0f7e36d.
  * autopkgtest: add multipath-tools and kpartx Depends to upstream suite.
    Required by testcase_multipath_basic_failover from TEST-64-UDEV-STORAGE.
  * test: install correct kpartx udev rules on Debian

 -- Michael Biebl <biebl@debian.org>  Sat, 06 Jan 2024 16:21:03 +0100

systemd (255.2-3ubuntu2) noble; urgency=medium

  * test: skip test_exec_networknamespacepath if netns setup fails (LP: #2046498)
    Files:
    - debian/patches/lp2046498-test-skip-test_exec_networknamespacepath-if-netns-setup-f.patch
    - debian/patches/test-skip-failing-test-execute-tests-in-LXC.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=de1fcf756e47858f4a206db97434bce4a71384d0
  * test: skip TEST-43-PRIVATEUSER-UNPRIV if unprivileged userns is restricted
    File: debian/patches/test-skip-TEST-43-PRIVATEUSER-UNPRIV-if-unprivileged-user.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2aba69874c83289c43d199ca360aa2fc451486a7
  * Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch.
    This will be re-addressed with a different patch.
    File: debian/patches/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3cd814e028364fe0c641d4bacfce22aafd1b572
  * Drop test-skip-failing-test-execute-tests-in-LXC.patch.
    This will be re-addressed with different patches.
    File: debian/patches/test-skip-failing-test-execute-tests-in-LXC.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ab853707f4cc3e7e2d5993ff38998c3c2c789f62
  * test: temporarily skip credentials tests in LXC.
    This was already skipped in another patch, but now that we know what's
    going on with it, split it out.
    File: debian/patches/test-temporarily-skip-credentials-tests-in-LXC.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c71acb411d315267fe811f024cdab97e032453f3
  * test: skip test-execute in arhmf LXC containers
    File: debian/patches/test-skip-test-execute-in-arhmf-LXC-containers.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1cb1e3060822bfadddead564e779942e73e02f62
  * test: skip exec-privatenetwork-yes-privatemounts-yes.service in LXC (LP: #2046495)
    File: debian/patches/test-skip-exec-privatenetwork-yes-privatemounts-yes.servi.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3ab76fd2db4291ee0531a07085c72cee06cb0d12
  * test: skip a systemd-run test if unprivileged userns is restricted
    File: debian/patches/test-skip-a-systemd-run-test-if-unprivileged-userns-is-re.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c85f2b4e32ee8fd1c0dc58d23e7fabdb7590d3cc
  * test-execute: skip tests that are broken without unprivileged userns
    File: debian/patches/test-execute-skip-tests-that-are-broken-without-unprivile.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7a6573c4f5133a7fec11fb059dd215f7c8c2204e

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 24 Jan 2024 14:53:46 -0500

systemd (255.2-3ubuntu1) noble; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
      to the kernel (we previously only set it in modprobe.d)
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Provide upgrade path (Replaces:) for Jammy's systemd-repart
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
    - d/p/debian/Ubuntu-UseDomains-by-default.patch:
      Enable UseDomains by default on Ubuntu.
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
      Workaround Ubuntu core's read-only etc
    - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
    - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
      Disable -Wformat-overflow on gcc with -O3
    - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
      On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
      /etc/init.d, but nothing guarantees that the path is created for the
      test.
    - test: deny-list TEST-08-INITRD.
      Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
      It makes sense for us to as well, because we don't run systemd in the
      initrd.
    - debian/systemd.install: do not install pcrlock.d on i386.
      We don't build this stuff on i386.
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
      It is preferred that we override units with dropins like this, rather
      than patching the original. This has no functional change.
    - test: skip failing test-execute tests in LXC.
      These are hopefully temporary workarounds so that we can figure out the
      root cause in either upstream systemd or LXC.
  * Dropped changes, fixed upstream:
    - Drop test-install-all-necessary-units-generators-for-LVM-on-De.patch.
      Applied upstream: https://github.com/systemd/systemd-stable/commit/b1dba6bcaa
    - Drop firstboot-remove-etc-localtime-on-reset.patch.
      Applied upstream: https://github.com/systemd/systemd-stable/commit/1d1b1fa25b
  * Dropped changes, replaced with new approach:
    - d/p/test-increase-QEMU_MEM-for-some-tests.patch:
      Increase QEMU_MEM for some tests to improve success rate
  * Dropped changes, included in Debian:
    - debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE
    - debian/tests/upstream: drop blacklist support.
    - test-skip-tests-for-unsupported-localectl-features.patch:
      skip tests for unsupported localectl features
  * New changes:
    - debian/tests/upstream: export QEMU_MEM="1024M" for all tests
    - Revert "Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch"
    - debian/systemd.links: mask systemd-gpt-auto-generator by default (LP: #2046459)
      Re-ship the generator so that it can be used if needed, but mask the
      generator so that it remains disabled by default.
    - debian/systemd.install: exclude files that are not built for i386
    - debian/systemd.manpages: do not ship sd-bsod manpages on i386
    - debian/tests/control: only install systemd-boot-efi for supported arches

 -- Nick Rosbrook <enr0n@ubuntu.com>  Wed, 03 Jan 2024 17:34:00 -0500

systemd (255.2-3) sid; urgency=medium

  * Cherry-pick fixes for upstream integration tests.
    Fixes TEST-07-PID1, TEST-08-INITRD (skip), TEST-26-SYSTEMCTL and
    TEST-75-RESOLVED.
  * Add explicit Build-Depends on debhelper (>= 13.11.6)
    This ensures we have a recent enough version of dh_installsystemd that
    supports service files in /usr/lib/.
  * test: deny-list TEST-13-NSPAWN.
    The default ram size of 1024M for qemu virt is not sufficient
    to make the test pass reliably on Debian sid/trixie.
    Disable the test for now until this has been addressed in debci:
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059840

 -- Michael Biebl <biebl@debian.org>  Tue, 02 Jan 2024 11:44:49 +0100

systemd (255.2-2) unstable; urgency=medium

  * udev: mips does not install dmi_memory_id and its rules

 -- Luca Boccassi <bluca@debian.org>  Sun, 24 Dec 2023 14:25:27 +0100

systemd (255.2-1) unstable; urgency=medium

  * New upstream version 255.2
  * Drop resolved-actually-check-authenticated-flag-of-SOA-transac.patch,
    merged upstream

 -- Luca Boccassi <bluca@debian.org>  Sun, 24 Dec 2023 11:26:42 +0100

systemd (255.1-3) unstable; urgency=medium

  * Upload to unstable
  * Fix installation of dmi_memory_id on i386 and x32
  * Explicitly disable bootloader for stage1 build.
    This ensures that the stage1 build is not broken in a tainted build
    environment.
  * Mark missing man pages from stage1 build

 -- Michael Biebl <biebl@debian.org>  Sun, 24 Dec 2023 11:08:06 +0100

systemd (255.1-2) experimental; urgency=medium

  [ Michael Biebl ]
  * Upgrade the Breaks to Conflicts for the systemd-ukify package split.
    This avoids potential loss of the /usr/lib/systemd/ukify compat symlink
    for upgrades from bookworm-backports.
  * Update package description of libnss-myhostname to use the correct IPv4
    address (Closes: #1057953)
  * resolved: actually check authenticated flag of SOA transaction.
    Patch cherry-picked from upstream Git.
    (CVE-2023-7008, Closes: #1059278)
  * Explicitly disable ukify for stage1 builds
  * Enable dh-exec for systemd.manpages and udev.install.
    This enables files to be installed specific to certain architectures or
    build profiles. Unfortunately for systemd.manpages this requires to add a
    debian/tmp/ prefix to all files.
    See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053834#46
  * Restrict pcr/tpm2 related files to UEFI architectures.
    Mirrors the python3-pyelftools [amd64 i386 arm64 armhf riscv64]
    Build-Depends.
  * Install dmi_memory_id and its udev rules file only on dmi architectures.
  * Fix stage1 profile build

  [ Helmut Grohne ]
  * Restore diverted symlinks in systemd-sysv.postinst that may have been lost
    due to /usr-merge (Closes: #1057220)

 -- Michael Biebl <biebl@debian.org>  Sun, 24 Dec 2023 00:52:15 +0100

systemd (255.1-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * Drop pkgconfig-keep-unmerged-paths-for-udevdir.patch, no longer needed
  * New upstream version 255.1
  * Refresh patches

  [ Michael Biebl ]
  * autopkgtest: install systemd-boot-efi for upstream suite.
    TEST-70-TPM2 (specifically test/units/testsuite-70.pcrlock.sh) requires
    the EFI stub files from /usr/lib/systemd/boot/efi/.
  * test: skip tests for unsupported localectl features.
    Update the upstream test suite to skip tests for unsupported localectl
    features in Debian. Fixes TEST-73-LOCALE.
    Thanks to Nick Rosbrook
  * Update symbol versions for the final 255 release
  * Install systemd and udev files explicitly without duplicates.
    Stop making systemd and udev "catch-all" packages and removing duplicate
    files in debian/rules by compiling a list of files that are installed by
    other systemd binary packages. This approach no longer works reliably
    if we have arch "all" binary packages and we do a partial type "any" build.
    Instead, list all files that are installed in systemd and udev
    explicitly in .install and .manpages.
  * Mark usr/lib/sysctl.d/50-pid-max.conf as arch specific.
    It's only installed by Meson if cc.sizeof('long') > 4.
    See https://wiki.debian.org/ArchitectureSpecificsMemo
  * Fix arch "all" builds.
    Files handled by debian/rules and dh-exec are not understood by
    dh_missing. So mark those as not-installed.
    See man dh_missing and
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831786
  * Install standalone binaries using dh-exec
  * Print empty directories
    dh_missing will not fail on uninstalled (empty) directories.
    So show them during build as it makes it easier to spot if all of them
    are handled.
  * Split ukify into a separate package named systemd-ukify.
    The main motivation for splitting the tool (and its kernel-install
    integration) into a separate package is the dependency on python3 and
    python3-pefile, which are not suitable dependencies for the main systemd
    package. (Closes: #1051981)
  * Make the Conflicts against bfh-container and progress-linux-container
    versioned

  [ Nick Rosbrook ]
  * debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE.
    This ensures that testcase_mdadm_lvm in TEST-64-UDEV-STORAGE will run.
  * debian/tests/upstream: drop blacklist support.
    Upstream has been using deny-list-ubuntu-ci, rather than
    blacklist-ubuntu-ci, for a while now. In Ubuntu, we use the
    deny-list-upstream-ci convention too. Hence, it seems we can drop
    support for the blacklist version.

 -- Michael Biebl <biebl@debian.org>  Wed, 20 Dec 2023 17:54:00 +0100

systemd (255-1ubuntu1) noble; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
      + drop test_no_failed
    - debian/systemd.postinst:
      + skip daemon-reexec and try-restarts during shutdown
      + manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
      + Do not ship systemd-gpt-auto-generator
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
      to the kernel (we previously only set it in modprobe.d)
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Provide upgrade path (Replaces:) for Jammy's systemd-repart
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
    - d/p/debian/Ubuntu-UseDomains-by-default.patch:
      Enable UseDomains by default on Ubuntu.
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - d/p/test-increase-QEMU_MEM-for-some-tests.patch:
      Increase QEMU_MEM for some tests to improve success rate
    - debian/patches/debian/UBUNTU-read-only-etc-hacks.patch:
      Workaround Ubuntu core's read-only etc
    - test-skip-tests-for-unsupported-localectl-features.patch:
      skip tests for unsupported localectl features
    - d/p/test-drop-etc-default-locale-handling-from-TEST-74-AUX-UT.patch
    - d/p/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch:
      Disable -Wformat-overflow on gcc with -O3
  * Dropped changes, fixed upstream:
    - Drop lp2009743/test-network-add-one-more-testcase-for-DHCPv4-classless-r.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/86f6760038
    - Drop lp2009743/network-dhcp4-do-not-ignore-the-gateway-even-if-the-desti.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/77451f654a
    - Drop lp2013543-core-reorder-systemd-arguments-on-reexec.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/06afda6b38
    - Drop lp2033325-Revert-core-service-when-resetting-PID-also-reset-known-f.patch.
      Applied upstream: https://github.com/systemd/systemd/commit/996b00ede8
    - Drop test-denylist-TEST-29-PORTABLE-again.patch.
      According to upstream, this has been resolved by
      https://github.com/systemd/systemd/pull/28123, and a PPA autopkgtest
      confirms this.
  * Dropped changes, no longer needed:
    - Drop deny-list-TEST-55-OOMD-on-ppc64el.patch.
      We already disable qemu tests on ppc64el, so having this too is
      unnecessary.
    - Drop debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch.
      These tests no longer fail when run in LXD, so drop the patch.
    - Drop debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch (LP: #1959047)
  * New changes:
    - test: ensure SYSVINIT_PATH exists in TEST-26-SYSTEMCTL.
      On Ubuntu, we hit the case where SYSVINIT_PATH falls back to
      /etc/init.d, but nothing guarantees that the path is created for the
      test.
    - firstboot: remove /etc/localtime on --reset
    - debian/tests/upstream: drop blacklist support.
    - test: deny-list TEST-08-INITRD.
      Upstream already disables this: https://github.com/systemd/systemd/pull/28813.
      It makes sense for us to as well, because we don't run systemd in the
      initrd.
    - debian/tests/control: add Depends: systemd-boot-efi for upstream-2.
      TEST-70-TPM2 wants the systemd-boot EFI binary for testing pcrlock, so
      just install the binaries.
    - debian/systemd.install: do not install pcrlock.d on i386.
      We don't build this stuff on i386.
    - debian/tests/control: add Depends: mdadm lvm2 for TEST-64-UDEV-STORAGE
    - test: install all necessary units & generators for LVM on Debian
    - debian/extra: use a dropin to configure Nice=-1 on systemd-journald.service.
      It is preferred that we override units with dropins like this, rather
      than patching the original. This has no functional change.
    - test: skip failing test-execute tests in LXC.
      These are hopefully temporary workarounds so that we can figure out the
      root cause in either upstream systemd or LXC.

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 14 Dec 2023 18:11:39 -0500

systemd (255-1) unstable; urgency=medium

  * New upstream version 255. For a full list of changes, see:
    https://github.com/systemd/systemd/releases/tag/v255
  * Drop seccomp patches, merged upstream

 -- Luca Boccassi <bluca@debian.org>  Wed, 06 Dec 2023 21:24:09 +0000

systemd (255~rc4-2) unstable; urgency=medium

  * Backport patches to fix seccomp issues on armhf/armel/ppc64el

 -- Luca Boccassi <bluca@debian.org>  Mon, 04 Dec 2023 16:56:42 +0000

systemd (255~rc4-1) unstable; urgency=medium

  * New upstream version 255~rc4

 -- Luca Boccassi <bluca@debian.org>  Sat, 02 Dec 2023 02:16:07 +0000

systemd (255~rc3-3) unstable; urgency=medium

  [ Oxan van Leeuwen ]
  * Move kernel-install initrd script to earlier prefix. From systemd v255
    onwards, the 60-ukify.install script automatically uses initrd files
    that are present in the staging area. Move the initrd script to run
    earlier, so that ukify can use the initrd. The only third-party
    kernel-install script present in the Debian archive is
    40-dkms.install, so it is not impacted by this change. Both dracut and
    mkinitcpio upstream also ship their script with priority 50.

  [ Luca Boccassi ]
  * systemd.pc: point unit install directory to /usr/lib/systemd/system/

 -- Luca Boccassi <bluca@debian.org>  Thu, 30 Nov 2023 21:09:08 +0000

systemd (255~rc3-2) unstable; urgency=medium

  * systemd: ignore '_systemctl kill' failures in postinst

 -- Luca Boccassi <bluca@debian.org>  Wed, 22 Nov 2023 22:23:49 +0000

systemd (255~rc3-1) unstable; urgency=medium

  * d/systemd.install: mark pcrlock.d as !stage1. pcrlock configs are only
    installed when libtss and libssl are available which is not the case
    for stage1 builds, so mark accordingly
  * New upstream version 255~rc3
  * Drop patches merged upstream
  * Refresh patches
  * systemd: reexec user manager sessions on upgrade. So far we only
    reexec'ed PID1, and ignored user managers, which means bug or security
    fixes were not applied for running sessions till the next reboot. Fix
    this using 'systemctl kill', which is asynchronous but works even if
    the D-Bus user session is not active.
  * autopkgtest: install dhcpcd-base for boot-and-services

 -- Luca Boccassi <bluca@debian.org>  Wed, 22 Nov 2023 21:33:09 +0000

systemd (255~rc2-3) unstable; urgency=medium

  [ Michael Biebl ]
  * Use canonical paths for scripts in debian/extra. Update scripts for
    udev-udeb, initramfs-tools integration scripts and dhclient hook
    script to use the new canonical paths in /usr.

  [ Luca Boccassi ]
  * Bump conflict with molly-guard to 0.8.2. The previous workarounds are
    not enough, so a new upload will be needed. (Closes: #1056292)
  * Backport patches to fix FTBFS on hppa and x32

 -- Luca Boccassi <bluca@debian.org>  Mon, 20 Nov 2023 20:58:27 +0000

systemd (255~rc2-2) unstable; urgency=medium

  * Add versioned Breaks against dracut.
    The introduction of systemd-executor in v255 breaks the initrd that is
    generated by dracut. Without systemd-executor, a systemd based initrd
    will fail to boot. The dracut package needs to be updated to include
    this new binary. (Closes: #1056108)

 -- Michael Biebl <biebl@debian.org>  Sat, 18 Nov 2023 22:02:39 +0100

systemd (255~rc2-1) unstable; urgency=medium

  [ Matthias Geiger ]
  * Bump version number for udev.postinst and udev.maintscript
  * Fix udev.postinst to preserve the enablement of the init script. When
    transferring ownership of the udev init script to sysvinit, the
    service was disabled as it didn't check for enablement before calling
    update-rc.d. Thanks to Mark Hindley for the original fix. (Closes:
    #1053301)

  [ Luca Boccassi ]
  * New upstream version 255~rc2
  * Drop fix-build-without-SBAT_DISTRO.patch, merged upstream
  * Refresh patches
  * Upload to unstable

 -- Luca Boccassi <bluca@debian.org>  Wed, 15 Nov 2023 17:10:26 +0000

systemd (255~rc1-4) experimental; urgency=medium

  * Add version to Conflict with molly-guard
  * Move systemd-hwdb-update.service to udev package. Commit a12cf5d187cb
    in 249-1 removed systemd-hwdb-update.service from udev, and 254.4-1
    re-added it in systemd, so move it back to udev. (Closes: #1055863)

 -- Luca Boccassi <bluca@debian.org>  Mon, 13 Nov 2023 13:51:12 +0000

systemd (255~rc1-3) experimental; urgency=medium

  * Do not ship repart.standalone and shutdown.standalone
  * /usr/lib/sysvinit/telinit was dropped long ago, use /usr/sbin/telinit
  * Add Suggests: libip4tc2 as it is now dlopen'ed
  * Drop rc/rcS masking, no longer necessary
  * Add Conflicts to avoid issues due to DEP17P3. libpam-elogind-compat,
    opensysusers, bfh-container, molly-guard, and progress-linux-container
    divert files from our packages, so DEP17P3 is triggered. Add
    unversioned conflicts until those diversions are updated according to
    DEP17M18, and then we can make the conflicts versioned. (Closes:
    #1055485)

 -- Luca Boccassi <bluca@debian.org>  Tue, 07 Nov 2023 15:17:12 +0000

systemd (255~rc1-2) experimental; urgency=medium

  * Build-depend on python3-pefile on all architectures ukify
  * meson: use enabled/disabled instead of true/false for 'feature'
    options
  * meson: use canonical paths for configured tools too

 -- Luca Boccassi <bluca@debian.org>  Mon, 06 Nov 2023 22:36:23 +0000

systemd (255~rc1-1) experimental; urgency=medium

  [ Michael Biebl ]
  * Update symbol versions for the final 254 release
  * Remove mangling of man pages post build trying to fix up paths. With
    merged-/usr being mandatory, this is no longer necessary as the paths
    will now always point to the correct location.
  * Use a drop-in to avoid startup failures of systemd-logind when dbus is
    missing. Instead of patching the systemd-logind.service file, use a
    drop-in. This way the Debian specific change becomes more visible and
    easier to override.

  [ Luca Boccassi ]
  * New upstream version 255~rc1
  * Drop test-skip-test-path-on-Salsa-CI.patch, merged upstream
  * Drop Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-back-to-.patch,
    no longer necessary
  * Refresh patches
  * Temporarily keep systemd.pc and udev.pc pointing to legacy unmerged paths.
    This will be dropped in the short term, but there are still a lot of
    FTBFS when changing, so keep it for now
  * systemd/udev: assert that the system is merged-usr. Support for
    unmerged system was dropped project-wide. Things will break subtly if
    ran on such unsupported setups, so add an explicit assert at preinst.
  * Drop deprecated split-usr and install files from /usr
  * Install new pam_systemd_loadkey module. If configured, and systemd-
    cryptsetup and logind are used, the crypsetup passphrase is passed to
    the PAM stack for later authentication steps such as the GNOME
    keyring.
  * Install the default pcrlock config files
  * Update libsystemd0.symbols
  * autopkgtest: add dependencies on python3-pefile and nvme-cli for
    upstream suite
  * Backport patch to fix arm64 cross-build
  * Update Lintian overrides

 -- Luca Boccassi <bluca@debian.org>  Mon, 06 Nov 2023 20:25:25 +0000

systemd (254.5-1) unstable; urgency=medium

  * New upstream version 254.5
  * Refresh patches for 254.5

 -- Luca Boccassi <bluca@debian.org>  Sat, 30 Sep 2023 11:34:39 +0100

systemd (254.4-1) unstable; urgency=medium

  [ Michael Biebl ]
  * Fix installation of tzdata-legacy. Apply a version constraint to the
    tzdata alternative. Specifically (<< 2023c-8), which is the version
    tzdata was split. Otherwise tzdata-legacy is not considered, as tzdata
    is installed by default. (Closes: #1051760)
  * Drop obsolete Breaks/Replaces and migration code for versions older
    than oldstable
  * Drop -f from update-rc.d udev remove

  [ Luca Boccassi ]
  * upstream-ci: run unit tests from installed location. (Closes: #1051756)
  * New upstream version 254.4. Fixes minor security issue in arm64
    and riscv64 systemd-boot (EFI) with device tree blobs loading:
    https://github.com/systemd/systemd/security/advisories/GHSA-6m6p-rjcq-334c
  * Refresh patches
  * Install factory-reset related units

  [ Gioele Barabucci ]
  * debian/udev.debian-udev.sysusers: Add Debian-specific sysusers for
    udev
  * d/udev.postinst: Do not use addgroup to add udev-related groups
  * d/control: Remove adduser, it is no longer needed now that all
    udev-related groups are generated via `sd-sysusers`.

 -- Luca Boccassi <bluca@debian.org>  Thu, 21 Sep 2023 11:13:06 +0100

systemd (254.3-1) unstable; urgency=medium

  [ Daniel Andersson ]
  * Add systemd-sysupdate.

  [ Luca Boccassi ]
  * New upstream version 254.2
  * Refresh patches for 254.2
  * New upstream version 254.3

  [ Michael Biebl ]
  * Remove obsolete SysV init script. Keep the udev alias for one more
    release cycle.
  * Use dh_installsystemd to handle systemd-udevd.service. This allows us
    to drop a lot of custom maintscript code. Fix the formatting of the
    udev maintscript code while at it.
  * Add Conflicts against initscripts and orphan-sysvinit-scripts. Those
    packages have undesirable side effects if systemd is the active init
    system so ensure they can't be installed.

 -- Luca Boccassi <bluca@debian.org>  Mon, 11 Sep 2023 09:11:51 +0100

systemd (254.1-3) unstable; urgency=medium

  [ Nick Rosbrook ]
  * debian: ship libsystemd.a in libsystemd-dev.
    Thanks to Serge Hallyn
  * autopkgtest: add build test for static libsystemd
  * debian/rules: build with -ffat-lto-objects.
    Building with -flto=auto, but without -ffat-lto-objects, causes static
    archives to end up without any code sections. This is needed to ship a
    usable libsystemd.a in libsystemd-dev.
    See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977596.

  [ Luca Boccassi ]
  * Backport patch to fix test-path failure on Salsa CI

  [ Michael Biebl ]
  * Ask before attaching the udev db information to the bug report
    (Closes: #1041652)
  * Install D-Bus interface files in systemd-dev.
    Now that we have a dedicated -dev package, use that to install
    /usr/share/dbus-1/interfaces.
  * Clean up a couple more __pycache__ directories
  * Remove workarounds for dh_installman.
    No longer needed as stable ships a fixed debhelper.
  * Remove all empty directories from (/usr)/lib.
    This mitigates the accidental empty directory removal by dpkg on
    merged-/usr systems. (Closes: #1036920)
  * Remove no longer needed maintainer scripts migration code for versions
    older then oldstable
  * Revert "Add workaround for Meson regression to fix FTBFS on mips64el"
    This reverts commit 97ebdcea6d0ce52973dd5a9cfeede1573a628bd0.
    No longer needed as a fixed meson package is available now.

 -- Michael Biebl <biebl@debian.org>  Fri, 25 Aug 2023 12:04:10 +0200

systemd (254.1-2) unstable; urgency=medium

  * Build-depend on tzdata-legacy | tzdata. Some timezones were split out,
    but some unit tests need them, so pull in the new tzdata-legacy
    package if it exists.

 -- Luca Boccassi <bluca@debian.org>  Thu, 10 Aug 2023 23:31:48 +0100

systemd (254.1-1) unstable; urgency=medium

  [ Luca Boccassi ]
  * systemd-userdbd: depend on libnss-systemd. This library provides nss
    integration for userdbd/homed and is needed for homed logins
  * New upstream version 254.1
  * Refresh patches for v254.1
  * systemd: do not ship empty .wants/ directories. These will conflict
    with finalizing usrmerge as they are in /lib, so remove them for now.
    systemctl enable creates them anyway when needed.

  [ Helmut Grohne ]
  * duplicate udev trigger interest for /usr-merge. As packages move their
    files from / to /usr, dpkg will cease activating udev's trigger
    interest for hwdb.d files. In DEP17, this is documented as P2. Since
    there are only two packages in Debian affected by this issue, we opt
    for an individual mitigation and explicitly duplicate the trigger
    interest to both locations (M12). This is safe regardless of the other
    chosen mitigations as trigger activations are accumulated.

 -- Luca Boccassi <bluca@debian.org>  Thu, 10 Aug 2023 21:41:13 +0100

systemd (254-1) unstable; urgency=medium

  * New upstream version 254
  * Drop patches merged upstream
  * d/watch: switch back to stable repository
  * Refresh patches

 -- Luca Boccassi <bluca@debian.org>  Fri, 28 Jul 2023 10:01:15 +0100

systemd (254~rc3-3) unstable; urgency=low

  * Backport patch to fix FTBFS on armhf
  * Add workaround for Meson regression to fix FTBFS on mips64el

 -- Luca Boccassi <bluca@debian.org>  Mon, 24 Jul 2023 20:50:48 +0100

systemd (254~rc3-2) unstable; urgency=medium

  * ukify: enable only on UEFI architectures.

 -- Luca Boccassi <bluca@debian.org>  Mon, 24 Jul 2023 16:55:57 +0100

systemd (254~rc3-1) unstable; urgency=low

  * Drop Suggests on transitional policykit-1 package
  * Drop autopkgtest dependency on transitional policykit-1 package
  * Ship ukify in systemd package (Closes: #1041399)
  * New upstream version 254~rc3 (Closes: #1041648, #1041540)
  * Drop patches merged upstream
  * Refresh patches

 -- Luca Boccassi <bluca@debian.org>  Mon, 24 Jul 2023 12:59:37 +0100

systemd (254~rc2-3) unstable; urgency=low

  * Upload to unstable

 -- Luca Boccassi <bluca@debian.org>  Sun, 16 Jul 2023 11:37:22 +0100

systemd (254~rc2-2) experimental; urgency=medium

  * Backport two more mips64 fixes from upstream

 -- Luca Boccassi <bluca@debian.org>  Sat, 15 Jul 2023 15:07:20 +0100

systemd (254~rc2-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * Bump dependency on Meson to 0.60
  * upstream-ci: install libdw and libelf for boot-and-services too.
  * upstream-ci: add libssl-dev to autopkgtest upstream suite.
  * upstream-ci: add nftables.
  * upstream-ci: add 'stress' to the upstream testsuite dependency list.
  * tests/upstream: install curl.
  * tests/upstream: bump timeout by 10 minutes.
  * New upstream version 254~rc2
  * Drop patches merged upstream
  * Refresh patches for v254-rc2

  [ Yu Watanabe ]
  * autopkgtest: create directory to make accounts-daemon.service not
    fail. The service requires /usr/share/accountsservice/interfaces, but
    the directory is not packaged (at least in 22.08.8-6). This adds a
    workaround for the failure.

 -- Luca Boccassi <bluca@debian.org>  Sat, 15 Jul 2023 01:29:39 +0100

systemd (254~rc1-4) experimental; urgency=medium

  * Backport patches to fix FTBFS on mipsel, ia64, x32
  * d/rules: explicitly disable EFI on x32. On x32 the cpu architecture is
    just x86_64 so EFI will be enabled, and it will fail to build as
    userland doesn't support building the EFI ABI. Disable it explicitly,
    and leave it on 'auto' elsewhere.

 -- Luca Boccassi <bluca@debian.org>  Sun, 09 Jul 2023 15:13:53 +0100

systemd (254~rc1-3) experimental; urgency=medium

  * Restrict pyelftools to UEFI-enabled architectures and drop explicit
    meson settings.

 -- Luca Boccassi <bluca@debian.org>  Sat, 08 Jul 2023 00:40:33 +0100

systemd (254~rc1-2) experimental; urgency=medium

  * Backport patch to fix fuzz test without cgroup access. Fix build on
    buildds https://github.com/systemd/systemd/pull/28303

 -- Luca Boccassi <bluca@debian.org>  Fri, 07 Jul 2023 22:55:16 +0100

systemd (254~rc1-1) experimental; urgency=medium

  [ Luca Boccassi ]
  * d/watch: watch main repository
  * New upstream version 254~rc1
  * Refresh patches for v254-rc1
  * Drop build dependency on gnu-efi and add python3-pyelftools. Move to
    !stage1 given it's external python modules
  * Install new libsystemd.3 manpage
  * Install new mount.ddi alias for sd-dissect
  * Update symbols file for 254
  * Update Lintian overrides for systemd-tests
  * autopkgtest: find test-udev in new location.

  [ Zbigniew Jędrzejewski-Szmek ]
  * autopkgtest: drop 'udev' test
    https://github.com/systemd/systemd/pull/27534 makes it into a normal
    unit test, so it will be invoked as part of 'upstream'.

 -- Luca Boccassi <bluca@debian.org>  Fri, 07 Jul 2023 11:05:37 +0100

systemd (253.5-1ubuntu7) noble; urgency=medium

  * Revert "debian/rules: set MulticastDNS=resolve by default" (LP: #2038894)
    File: debian/rules
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3d753238699f54e8c2892d8107136d49f09e44b6
  * debian/gbp.conf: update for noble
    File: debian/gbp.conf
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a65decb3a73592af8b952b159cfb453e9c0babd5

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 26 Oct 2023 09:51:33 -0400

systemd (253.5-1ubuntu6) mantic; urgency=medium

  * debian/tests: Depends: tzdata-legacy for upstream-{1,2} (LP: #2035778)
    File: debian/tests/control
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=28d9f59c6abb6e460dd34baa4237ef04aa06aced

 -- Nick Rosbrook <enr0n@ubuntu.com>  Tue, 19 Sep 2023 11:54:35 -0400

systemd (253.5-1ubuntu5) mantic; urgency=medium

  * Revert "core/service: when resetting PID also reset known flag" (LP: #2033325)
    Thanks to Sergio Durigan Junior
    File: debian/patches/lp2033325-Revert-core-service-when-resetting-PID-also-reset-known-f.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=021b6fafca7ae9bddaa479500614a4a4be40ce59
  * debian/rules: do not ship systemd-gpt-auto-generator.
    We do not want the functionality provided by this generator, so do not
    ship it.
    File: debian/rules
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a366279a84730e92ed734710560ea833709f359d

 -- Nick Rosbrook <enr0n@ubuntu.com>  Thu, 07 Sep 2023 16:09:54 -0400

systemd (253.5-1ubuntu4) mantic; urgency=medium

  * Revert "Drop Provides: time-daemon for bin:systemd-timesyncd"
    File: debian/control
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e88d9f0241a307a3c1b4bcaf4bf29799d984aa3c

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 25 Aug 2023 16:36:26 -0400

systemd (253.5-1ubuntu3) mantic; urgency=medium

  [ Nick Rosbrook ]
  * debian/rules: build with -ffat-lto-objects (LP: #2031416)
    File: debian/rules
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c78b7a6a2578d2b3f70638db918858f9b78107a4

  [ Utkarsh Gupta ]
  * Drop Provides: time-daemon for bin:systemd-timesyncd
    Author: Utkarsh Gupta
    File: debian/control
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9b78ef26d64a40c21cac1e48534c6bf33661e6d7

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 25 Aug 2023 15:31:17 -0400

systemd (253.5-1ubuntu2) mantic; urgency=medium

  * core: reorder systemd arguments on reexec (LP: #2013543)
    File: debian/patches/lp2013543-core-reorder-systemd-arguments-on-reexec.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c93e797cdd4f3678cdcc7449f8a6f6820e98b7f0
  * network/dhcp4: do not ignore the gateway even if the destination is in same network (LP: #2009743)
    Files:
    - debian/patches/lp2009743/network-dhcp4-do-not-ignore-the-gateway-even-if-the-desti.patch
    - debian/patches/lp2009743/test-network-add-one-more-testcase-for-DHCPv4-classless-r.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c09bc22fca4259301c88195f34ae3b24956afb22
  * debian/systemd.postint: do not daemon re-exec if we could hit LP: #2013543
    File: debian/systemd.postinst
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=19447af92c6d30e331ff97420e7ddcf3e5d723e1
  * meson.build: disable -Wformat-overflow on gcc with -O3
    File: debian/patches/meson.build-disable-Wformat-overflow-on-gcc-with-O3.patch
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8c8595bf0f12e56d4b3a063c93a3ba69c798add2
  * debian: ship libsystemd.a in libsystemd-dev (LP: #2012437)
    Thanks to Serge Hallyn
    Files:
    - debian/libsystemd-dev.install
    - debian/rules
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5997dd2a25a7c65d7c8a826346c0120532a0e083
  * autopkgtest: add build test for static libsystemd
    Files:
    - debian/tests/build-with-static-libsystemd
    - debian/tests/control
    https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d90da82d6b4adcf59b9a6b6188af3a49381fea8

 -- Nick Rosbrook <enr0n@ubuntu.com>  Mon, 14 Aug 2023 11:28:09 -0400

systemd (253.5-1ubuntu1) mantic; urgency=medium

  * Merge 253.5-1 from Debian unstable. Remaining changes:
    - debian/tests/upstream{,-1,-2}: split upstream tests into two parts
    - debian/tests/tests-in-lxd: run some autopkgtests in LXD too
    - debian/tests/storage: skip tests if scsi_debug module is not available
    - debian/tests/boot-and-services:
      + skip test_syslog on s390x
      + skip coredump tests on s390x
      + skip apparmor tests on armhf
      + consume stderr in systemctl status call in test_service
    - debian/systemd.postinst: skip daemon-reexec and try-restarts during shutdown
    - debian/systemd.postinst,debian/rules:
      Disable dh_installinit generation of tmpfiles for systemd package, and
      manually call systemd-tmpfiles --create in postinst
    - debian/systemd-resolved.postinst: copy existing /etc/resolv.conf to
      /run/systemd/resolve/stub-resolv.conf
    - debian/rules:
      + Set default user path
      + Disable LLMNR by default
      + Remove unneeded efi artifacts on i386 to avoid debugedit errors
    - debian/rules,debian/control,debian/tests/control:
      + Do not build with tpm libraries on i386
      + Do not build with libqrencode on i386
    - debian/gbp.conf,debian/extra/wrap_cl.py:
      Use a customization script to add LP commit links to changelog
    - debian/extra/systemd-oomd-defaults/-.slice.d/10-oomd-root-slice-defaults.conf:
      Set ManagedOOMSwap=auto, disabling swap kill by default
    - debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin
      to the kernel (we previously only set it in modprobe.d)
    - debian/control:
      + Add Recommends: networkd-dispatcher systemd-resolved to systemd package
      + Provide upgrade path (Replaces:) for Jammy's systemd-repart
      + Give systemd-resolved Priority: important
      + Add Recommends: systemd-hwe-hwdb to udev package
      + Add Breaks: systemd (<< ${binary:Version}) to udev package so that
        systemd is upgraded as well when upgrading udev
      + Make systemd-sysv Depends: on matching version of systemd
      + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved
    - d/p/debian/Ubuntu-UseDomains-by-default.patch:
      Enable UseDomains by default on Ubuntu.
    - d/p/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch:
      Set AssumedAppArmorLabel=unconfined in timedate1 dbus service file
    - d/p/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch:
      Launch QEMU with -vga none in test-functions
    - d/p/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch:
      Set Nice=-1 in journald.service to dodge watchdog on soft lockups
    - d/p/debian/UBUNTU-Revert-namespace-be-more-careful-when-handling-namespacin.patch:
      Revert "namespace: be more careful when handling namespacing failures gracefully"
      upstream commit
    - d/p/debian/UBUNTU-resolved-default-no-negative-caching.patch:
      Default to Cache=no-negative in systemd-resolved
    - d/p/Revert-network-if-sys-is-rw-then-udev-should-be-around.patch:
      Revert "network: if /sys is rw, then udev should be around" upstream
      commit
    - d/p/debian/UBUNTU-src-test-test-execute.c-Skip-parts-of-test-execute-in-con.patch:
      Skip some of test-execute when running in LXD
    - d/p/lp1861941-dont-generate-disk-byuuid-for-bcache-uuid.patch:
      skip disk/by-uuid for bcache devices
    - d/p/deny-list-TEST-55-OOMD-on-ppc64el.patch:
      Deny-list TEST-55-OOMD om ppc64el
    - d/p/debian/UBUNTU-Don-t-override-Ubuntu-s-default-sysctl-values-LP-1962038.patch:
      Don't override Ubuntu's default sysctl values
    - d/p/test-increase-QEMU_MEM-for-some-tests.patch:
      Increase QEMU_MEM for some tests to improve success rate
    - d/p/test-denylist-TEST-29-PORTABLE-again.patch:
      Deny-list TEST-29-PORTABLE
  * Dropped changes, fixed upstream:
    - lp1999275-binfmt-util-also-check-if-binfmt-is-mounted-in-read-write.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/5aaa79ce96
    - lp1999275-stat-util-introduce-fd_is_read_only_fs.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/dc1752ea72
    - lp1999275-binfmt-check-if-binfmt-is-mounted-before-applying-rules.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/94ba5b1532
    - lp2002445-sd-netlink-do-not-swap-old-name-and-alternative-name.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/080afbb57c
    - lp2002445-udev-net-allow-new-link-name-as-an-altname-before-renamin.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/d0b31efc1a
    - lp2004478-network-dhcp4-accept-local-subnet-routes-from-DHCP.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/1d84a3c779
    - lp1999275-binfmt-util-split-out-binfmt_mounted.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/a51a9684c9
    - lp2002445-sd-netlink-restore-altname-on-error-in-rtnl_set_link_name.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/4d600667f8
    - lp2002445-test-network-add-a-test-for-renaming-device-to-current-al.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/f68f644a16
    - lp2002445/sd-device-make-device_set_syspath-clear-sysname-and-sysnu.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/9a26098e90
    - lp2002445/core-device-ignore-failed-uevents.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/e9336d6ac3
    - lp2002445/udev-restore-syspath-and-properties-on-failure.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/210033847c
    - lp2002445/sd-device-introduce-device_get_property_int.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/eedfef0f0d
    - lp2002445-udev-attempt-device-rename-even-if-interface-is-up.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/53584e7b61
    - lp1999275-unit-check-more-specific-path-to-be-written-by-systemd-bi.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/f74a7cb45c
    - lp2002445-sd-netlink-add-a-test-for-rtnl_set_link_name.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/b338a8bb40
    - test-skip-some-tests-when-machine-id-is-not-initialized.patch:
      Applied upstream: https://github.com/systemd/systemd/pull/25732
    - sd-netlink-skip-test_rtnl_set_link_name-when-altnames-are.patch:
      Applied upstream: https://github.com/systemd/systemd/commit/5ccbe7fb197
    - debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch (LP: #1982218):
      This has been implemented upstream in a different way, but with the same
      outcome: https://github.com/systemd/systemd/commit/ab3aed4a034.
    - debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch:
      This is obsoleted by an upstream change to fix the underlying issue:
      https://github.com/systemd/systemd/commit/362235bf59.
  * Dropped changes, no longer needed:
    - Deny-list-TEST-74-AUX-UTILS-on-s390x.patch:
      This test passes on s390x now.
    - debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch:
      This test passes without this patch now.
    - debian/UBUNTU-Revert-cgroup-Continue-unit-reset-if-cgroup-is-busy.patch:
      Testing libvirt against systemd without this patch passses now.
    - debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch:
      This test passes without this patch now.
    - debian/UBUNTU-src-test-testmount-util.c-Skip-parts-of-test-mount-util-in-LXC.patch:
      This test passes in LXD without this patch now.
    - debian/systemd.prerm: remove unnecessary whitespace
    - debian/systemd.maintscript:
      Our delta pertains to versions older than 249, which is in Jammy and is
      therefore the oldest version direct upgrades will be supported from.
    - test: drop /etc/default/locale handling from TEST-74-AUX-UTILS
  * New changes:
    - debian/patches: consolidate Ubuntu core hacks into one patch,
      debian/UBUNTU-read-only-etc-hacks.patch:
      + debian/UBUNTU-Fix-timezone-setting-on-read-only-etc.patch
      + debian/UBUNTU-Support-system-image-read-only-etc.patch
      + debian/timedatectl-lp1650688.patch
      + lp1981042-core-firstboot-workaround-timezone-issues-caused-by-Ubunt.patch
      + debian/UBUNTU-read-only-etc-hacks.patch
    - debian/systemd.postinst: remove duplicate if block
    - debian/gbp.conf: update debian-branch to ubuntu-mantic
    - debian/tests: add ability to override SELECTED_TESTS in upstream tests
    - debian/systemd.postinst: fix /etc/locale.conf migration
    - debian/tests/tests-in-lxd: use --reuse flag in lxc publish (LP: #2023229)
    - debian/rules: set MulticastDNS=resolve by default
    - test-skip-tests-for-unsupported-localectl-features.patch:
      skip tests for unsupported localectl features
    - debian/tests/boot-and-services: drop test_no_failed

 -- Nick Rosbrook <nick.rosbrook@canonical.com>  Tue, 11 Jul 2023 14:11:33 -0400

systemd (253.5-1) unstable; urgency=medium

  * New upstream version 253.5 (Closes: #1040035)
  * Refresh patches for 253.5

 -- Luca Boccassi <bluca@debian.org>  Sat, 01 Jul 2023 11:57:46 +0100

systemd (253-4) unstable; urgency=medium

  * Stop localed from writing to /etc/default/keyboard and symlink it to
    /etc/vconsole.conf. Integration is not set up for now, but GDM needs
    to query the configured values. Allow reading, but disallow setting
    keymaps. (Closes: #1038762)

 -- Luca Boccassi <bluca@debian.org>  Sat, 24 Jun 2023 20:21:24 +0100

systemd (253-3) unstable; urgency=medium

  * systemd-dev: add missing breaks/replaces with udev. (Closes: #1037924)
  * Run the systemd-binfmt trigger unconditionally.
  * Upload to unstable.

 -- Luca Boccassi <bluca@debian.org>  Tue, 20 Jun 2023 11:45:22 +0100

systemd (253-2) experimental; urgency=medium

  * Add systemd-dev package for pkg-config files. Move systemd.pc and
    udev.pc to systemd-dev, so that packages can build-depend on a small
    package instead of the whole set of binaries. (Closes: #945922,
    #917549)

 -- Luca Boccassi <bluca@debian.org>  Mon, 12 Jun 2023 00:22:52 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libsystemd-shared`.
