It is necessary for configure template with salt.

Fixes QubesOS/qubes-issues#8806

Centos Stream 8 is soon EOL and support for 9 is not in the builder yet

It isn't what is actually installed in Fedora, and in Fedora 40 it
conflicts with base packages....

fuser will exit with exit code 1 if there was in fact nothing to kill.
No leftover processes is ...

It's used by Python's multiprocessing.synchronize for locking, which is
part of brp-python-bytec...

* origin/pr/127:
Make shellcheck happy
Include cryptsetup package in xfce template too

They are supposed to be 0/1, not N/Y.

* fc39:
Add RPM Fusion repo package for F39 and F40
Add Fedora 39 and 40 keys

The F40 may need to be updated later (it has lower version than others).

QubesOS/qubes-issues#8499

exit doesn't take empty string

Fixes: ec78f6d "Fix missing quotes"

Issue detected by shellcheck. In practice $RETCODE is always set to a
single word, but lets make...

Just linux-firmware package is not enough, include the whole
@hardware-support group, similar to...

It preloads nosync library from the host system, into binaries running
in chroot, and glibc in C...

Make 4.4 includes exported variables also in $(shell) invocation. Avoid
exporting shell-computed...

We do have pipewire agent already.

QubesOS/qubes-issues#6358

* origin/pr/124:
Fix query-spec invocations in Makefile.rpmbuilder
Simplify GIT_TARBALL_NAME...

Fixes: fa9a4c0 "Several refactors according to current qubes-builderv2/source_rpm"

fa9a4c08bb49178313af3579c76fa464b92930d5 changed how scripts/query-spec
gets its arguments, but ...

$(ORIG_SRC) is passed as the first argument and doesn't need to be set
as an environment variabl...

Already escaped % (double-%) was escaped into tripple-%. This was
later interpretted as literal ...

There may be a newer version of some package (or a fork of it)
available. This for example appli...

QubesOS/qubes-issues#8069

QubesOS/qubes-issues#8069

* origin/pr/122:
Place SELinux in enforcing mode out of the box
Adapt to changes in template...

Otherwise SELinux provides no security advantages for those who do not
turn it on manually.

Suggested-by: Marek Marczykowski-Górecki <[email protected]>

Do not use the list file.

This avoids pulling in unnecessary dependencies, fixes the R4.1 build,
and allows using SELinux ...

Flash is long since end of life.

This will cause qubes-core-agent to pull in qubes-core-agent-selinux via
RPM rich dependencies.

This avoids needing a relabel after system installation.

Otherwise a partially-relabeled system could result, which is bad.

qvm-template will use this to set the selinux feature, which tells
qubesd to enable SELinux in t...

No point in including them, and they might be trusted when they should
not be.

Qubes OS no longer supports either.

If macro (included from another file) contains literal % that is
properly escaped, double parsin...

Legacy builder looks for "fc" as the distribution name, not its full
"fedora" name.

* origin/pr/120:
04_install_qubes: reintroduce YUM0 for legacy builder
04_install_qubes.sh: ...

QubesOS/qubes-issues#

Commits:
- fd7089b277b5c310d9c0a5da636838c2c55ad838
- 750918400a9843e176cc55bb39aa150a5aa36170

It is an integration with gnome-shell, which is excluded already.

QubesOS/qubes-issues#7807

QubesOS/qubes-issues#7807

Use DIST_TAG (which is el8 for centos-stream8), instead of just DIST
(which is centos-stream8, a...

QubesOS/qubes-issues#7342

wireless-tools package is removed in F36:
https://fedoraproject.org/wiki/Changes/RemoveWirelessE...

prepare-chroot-base always uses rpm from the host, so it can very well
keep the rpmdb location a...

* origin/pr/118:
Drop Travis CI

It fails on a pre-trans script of a java package. From Fedora 25. We
don't have any need for thi...

It's required to use systemd-nspawn.

According to documentation it is the default if available, but be
explicit about it. "nspawn" ha...

It uses nosync library from the host, which may be incompatible with
environment inside chroot. ...

* origin/pr/116:
legacy: fix native double % in sed regex

Commit 08f596625c692130ce90ba5d909284fb0acbe049 tried to fix native
double %, but there are some...

* origin/pr/115:
Add Fedora 36 primary key

For example in grub2, we have several entries like
%{expand:%define_legacy_variant %%{legacy_pac...

This is needed notably for grub2.

* origin/pr/112:
builder.conf: add mock only on USE_DIST_BUILD_TOOLS
builder: ensure to add ...

* origin/pr/95:
Fix REPO_PROXY builds

* origin/pr/113:
Fix double parsing spec file

* origin/pr/111:
Makefile-mock: fail with a clear error when mock is not installed.

* origin/pr/110:
prepare-chroot-base: add cracklib for Fedora 34+
Support for Fedora 35

The legacy builder parses the spec file twice: once inside the chroot to
resolve all the macros ...

"mock" is not included in the "make install-deps" set, so the build
with `USE_DIST_BUILD_TOOLS=1...

QubesOS/qubes-issues#6969

Signed-off-by: Yann Dirson <[email protected]>

Legacy spec files try to access 'version' (and sometimes 'rel') file
directly, in a current dire...

Fixes QubesOS/qubes-issues#6810