f803e4d4c8
standard: Order CA trust regeneration before systemd-resolved
...
systemd-resolved uses DefaultDependencies=no and orders itself before
sysinit.target, so it could start in parallel with the regeneration and
read a stale trust store for DNS-over-TLS. Order the service before it.
The ordering is ignored when systemd-resolved is not installed.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Vcy8XfBfUtxbEWMu62CiF6
2026-10-31 16:44:10 -04:00
436ea4309c
standard: Focus boot-time regeneration on CA trust
...
Rename the service to atomic-update-ca-trust, remove the legacy extract argument, and defer crypto-policy regeneration. Document early-boot and initramfs limitations and keep regeneration failures visible without preventing boot.
Add standard-image regression coverage for stale bundles, vendor CA changes, local trust and distrust, repeated refreshes, and service activation.
2026-10-31 16:44:10 -04:00
71af986c08
standard: Add ca-trust and crypto-policies regeneration units
...
On bootc/ostree systems, generated config files in /etc may become
stale after an image upgrade due to the 3-way merge. Add systemd
units that regenerate the CA trust store and crypto-policies backend
files early in boot, adapted from CoreOS's approach.
See: https://redhat.atlassian.net/browse/BIFROST-654
Generated-by: AI
2026-10-31 16:44:10 -04:00
konflux
95d73c8c10
Merge branch 'renovate/fedora-rawhide/fedora-rawhide-repos-image' into 'main'
...
Update Fedora Rawhide REPOS_IMAGE to Fedora-Rawhide-20261031.n.0
See merge request fedora/bootc/base-images!1027
2026-10-31 17:15:40 +00:00
b436a7a91f
Merge branch 'konflux/mintmaker/auto-merged-updates' into 'main'
...
Update quay.io/bootc-devel/tekton-catalog/pipeline-buildah-build-bootc-multi-platform-oci-ta Docker digest to 4d9b0d7
See merge request fedora/bootc/base-images!1023
2026-10-31 12:59:47 -04:00
Platform Engineering Bot
50cbf36098
Update Fedora Rawhide REPOS_IMAGE to Fedora-Rawhide-20261031.n.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-31 16:02:05 +00:00
Platform Engineering Bot
baef2f71d7
Update quay.io/bootc-devel/tekton-catalog/pipeline-buildah-build-bootc-multi-platform-oci-ta Docker digest to 4d9b0d7
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-31 16:01:56 +00:00
konflux
14e0bc59e4
Merge branch 'renovate/fedora-45/fedora-45-bootc-pipeline' into 'main'
...
Update Fedora 45 bootc build pipeline to 4d9b0d7
See merge request fedora/bootc/base-images!1021
2026-10-31 13:40:59 +00:00
konflux
f6513cb11c
Merge branch 'renovate/fedora-rawhide/fedora-rawhide-bootc-pipeline' into 'main'
...
Update Fedora Rawhide bootc build pipeline to 4d9b0d7
See merge request fedora/bootc/base-images!1022
2026-10-31 13:40:53 +00:00
ea77d9ba67
Merge branch 'konflux/mintmaker/main/fedora-eln-compose-dependencies' into 'main'
...
Update quay.io/bootc-devel/fedora-bootc-eln-compose Docker tag to Fedora-eln-20261031.n.0
See merge request fedora/bootc/base-images!1024
2026-10-31 09:40:40 -04:00
konflux
4341f2f325
Merge branch 'renovate/fedora-43/fedora-43-repos-image' into 'main'
...
Update Fedora 43 REPOS_IMAGE to Fedora-43-updates-20261031.0
See merge request fedora/bootc/base-images!1025
2026-10-31 13:40:25 +00:00
konflux
0feac67282
Merge branch 'renovate/fedora-44/fedora-44-repos-image' into 'main'
...
Update Fedora 44 REPOS_IMAGE to Fedora-44-updates-20261031.0
See merge request fedora/bootc/base-images!1026
2026-10-31 13:40:13 +00:00
Platform Engineering Bot
78428bfafb
Update quay.io/bootc-devel/fedora-bootc-eln-compose Docker tag to Fedora-eln-20261031.n.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-31 12:04:03 +00:00
Platform Engineering Bot
af414a08c9
Update Fedora 44 REPOS_IMAGE to Fedora-44-updates-20261031.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-31 12:03:16 +00:00
Platform Engineering Bot
a60a89c6f3
Update Fedora 43 REPOS_IMAGE to Fedora-43-updates-20261031.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-31 12:02:28 +00:00
konflux
d93fa2aab4
Merge branch 'renovate/fedora-rawhide/fedora-rawhide-repos-image' into 'main'
...
Update Fedora Rawhide REPOS_IMAGE to cfee508
See merge request fedora/bootc/base-images!1020
2026-10-31 01:14:07 +00:00
konflux
1da11a469f
Merge branch 'renovate/fedora-45/fedora-45-repos-image' into 'main'
...
Update Fedora 45 REPOS_IMAGE to 57d3209
See merge request fedora/bootc/base-images!1019
2026-10-31 01:12:04 +00:00
Platform Engineering Bot
7915c4222d
Update Fedora Rawhide REPOS_IMAGE to cfee508
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-31 00:03:34 +00:00
Platform Engineering Bot
a830b69fea
Update Fedora 45 REPOS_IMAGE to 57d3209
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-31 00:02:44 +00:00
konflux
85e89f8089
Merge branch 'renovate/fedora-rawhide/fedora-rawhide-repos-image' into 'main'
...
Update Fedora Rawhide REPOS_IMAGE to Fedora-Rawhide-20261030.n.0
See merge request fedora/bootc/base-images!1018
2026-10-30 21:24:11 +00:00
konflux
ebfb9edb05
Merge branch 'renovate/fedora-45/fedora-45-repos-image' into 'main'
...
Update Fedora 45 REPOS_IMAGE to Fedora-45-20261030.n.0
See merge request fedora/bootc/base-images!1017
2026-10-30 21:13:13 +00:00
Platform Engineering Bot
1891b04176
Update Fedora Rawhide REPOS_IMAGE to Fedora-Rawhide-20261030.n.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 20:02:54 +00:00
Platform Engineering Bot
55a06eab95
Update Fedora 45 REPOS_IMAGE to Fedora-45-20261030.n.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 20:02:06 +00:00
d18a6b69b0
Merge branch 'konflux/mintmaker/main/fedora-eln-compose-dependencies' into 'main'
...
Update quay.io/bootc-devel/fedora-bootc-eln-compose Docker tag to Fedora-eln-20261030.n.0
See merge request fedora/bootc/base-images!1007
2026-10-30 15:14:18 -04:00
konflux
4149ef6099
Merge branch 'renovate/fedora-43/fedora-43-repos-image' into 'main'
...
Update Fedora 43 REPOS_IMAGE to Fedora-43-updates-20261030.0
See merge request fedora/bootc/base-images!1015
2026-10-30 19:14:04 +00:00
konflux
a3a5157ff4
Merge branch 'renovate/fedora-44/fedora-44-repos-image' into 'main'
...
Update Fedora 44 REPOS_IMAGE to Fedora-44-updates-20261030.0
See merge request fedora/bootc/base-images!1016
2026-10-30 19:13:23 +00:00
Platform Engineering Bot
b09de5abf8
Update Fedora 44 REPOS_IMAGE to Fedora-44-updates-20261030.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 16:03:22 +00:00
Platform Engineering Bot
e8ce5cdbcb
Update Fedora 43 REPOS_IMAGE to Fedora-43-updates-20261030.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 16:02:34 +00:00
Platform Engineering Bot
22e6655dfe
Update quay.io/bootc-devel/fedora-bootc-eln-compose Docker tag to Fedora-eln-20261030.n.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 15:24:02 +00:00
Platform Engineering Bot
241a18d808
Update Fedora Rawhide bootc build pipeline to 4d9b0d7
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 15:23:32 +00:00
Platform Engineering Bot
1197b1755d
Update Fedora 45 bootc build pipeline to 4d9b0d7
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 15:23:02 +00:00
konflux
399d6ce24e
Merge branch 'renovate/fedora-43/fedora-43-bootc-pipeline' into 'main'
...
Update Fedora 43 bootc build pipeline to 4d9b0d7
See merge request fedora/bootc/base-images!1008
2026-10-30 14:26:43 +00:00
konflux
eb16d2632b
Merge branch 'renovate/fedora-44/fedora-44-bootc-pipeline' into 'main'
...
Update Fedora 44 bootc build pipeline to 4d9b0d7
See merge request fedora/bootc/base-images!1009
2026-10-30 14:26:35 +00:00
konflux
77e723b982
Merge branch 'renovate/fedora-45/fedora-45-repos-image' into 'main'
...
Update Fedora 45 REPOS_IMAGE to 3c1b735
See merge request fedora/bootc/base-images!1010
2026-10-30 14:26:27 +00:00
konflux
6cc1ba8176
Merge branch 'renovate/fedora-rawhide/fedora-rawhide-repos-image' into 'main'
...
Update Fedora Rawhide REPOS_IMAGE to 6d2a619
See merge request fedora/bootc/base-images!1011
2026-10-30 14:26:14 +00:00
41c683e6f6
Merge branch 'reenable-ppc64le' into 'main'
...
Revert "chore: disable ppc64le for now"
See merge request fedora/bootc/base-images!996
2026-10-30 08:56:14 -04:00
Platform Engineering Bot
050416bb44
Update Fedora Rawhide REPOS_IMAGE to 6d2a619
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 12:03:39 +00:00
Platform Engineering Bot
7a6fb2d14a
Update Fedora 45 REPOS_IMAGE to 3c1b735
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 12:02:52 +00:00
Platform Engineering Bot
d98d9312a0
Update Fedora 44 bootc build pipeline to 4d9b0d7
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 04:02:50 +00:00
Platform Engineering Bot
6d9423bfe3
Update Fedora 43 bootc build pipeline to 4d9b0d7
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-30 04:02:01 +00:00
bb6d900a88
Revert "chore: disable ppc64le for now"
...
This reverts commit 2682f40f70
2026-10-29 18:09:14 -04:00
konflux
3b1c12bc8e
Merge branch 'renovate/fedora-43/fedora-43-repos-image' into 'main'
...
Update Fedora 43 REPOS_IMAGE to Fedora-43-updates-20261029.0
See merge request fedora/bootc/base-images!1003
2026-10-29 22:08:14 +00:00
konflux
de65915e4c
Merge branch 'renovate/fedora-44/fedora-44-repos-image' into 'main'
...
Update Fedora 44 REPOS_IMAGE to Fedora-44-updates-20261029.0
See merge request fedora/bootc/base-images!1004
2026-10-29 21:16:29 +00:00
konflux
89fe22975b
Merge branch 'renovate/fedora-45/fedora-45-repos-image' into 'main'
...
Update Fedora 45 REPOS_IMAGE to Fedora-45-20261029.n.0
See merge request fedora/bootc/base-images!1005
2026-10-29 21:16:18 +00:00
konflux
f8d7b61f0a
Merge branch 'renovate/fedora-rawhide/fedora-rawhide-repos-image' into 'main'
...
Update Fedora Rawhide REPOS_IMAGE to Fedora-Rawhide-20261029.n.0
See merge request fedora/bootc/base-images!1006
2026-10-29 21:16:03 +00:00
Platform Engineering Bot
31a5d57e4b
Update Fedora Rawhide REPOS_IMAGE to Fedora-Rawhide-20261029.n.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-29 20:03:01 +00:00
Platform Engineering Bot
b86e703bd7
Update Fedora 45 REPOS_IMAGE to Fedora-45-20261029.n.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-29 20:02:12 +00:00
Platform Engineering Bot
0f2171ee23
Update Fedora 44 REPOS_IMAGE to Fedora-44-updates-20261029.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-29 16:03:06 +00:00
Platform Engineering Bot
063482aa3d
Update Fedora 43 REPOS_IMAGE to Fedora-43-updates-20261029.0
...
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
2026-10-29 16:02:15 +00:00
1e68a6115d
Merge branch 'konflux/mintmaker/main/fedora-eln-compose-dependencies' into 'main'
...
Update quay.io/bootc-devel/fedora-bootc-eln-compose Docker tag to Fedora-eln-20261029.n.0
See merge request fedora/bootc/base-images!1002
2026-10-29 09:01:27 -04:00
