Skip to content

chore: stable promotion - #2625

Merged
renner0e merged 79 commits into
ublue-os:stable-f44from
renner0e:stable-promotion
Jul 26, 2026
Merged

chore: stable promotion#2625
renner0e merged 79 commits into
ublue-os:stable-f44from
renner0e:stable-promotion

Conversation

@renner0e

Copy link
Copy Markdown
Member

supersedes: #2563

ubot-7274 Bot and others added 30 commits July 1, 2026 05:02
…digest to 51c7b27 (ublue-os#2475)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to e7338ae (ublue-os#2479)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 9c79b8a (ublue-os#2481)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 97ae835 (ublue-os#2486)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to a93e788 (ublue-os#2488)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 390a9dc (ublue-os#2490)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
This didn't break anything in CI, this is why this went unnoticed.

fixup of cfd014f.
…t to c00fc6b (ublue-os#2494)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 59c7dc8 (ublue-os#2500)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
taken from blue-build[1], this also happens to make updates smaller by
100MB. Might fix the following issues like [2] and [3]. I could not
reproduce these issues myself and just using chunkah made it possible
for me to overlay firefox with rpm-ostree.

[1]: blue-build/cli@b6f36bd
[2]: ublue-os#2209
[3]: ublue-os#2492

Co-authored-by: Daniel Hast <32797673+HastD@users.noreply.github.com>
If you specified --kernel-pin from cli it will now correctly verify and
donwload the right version (instead of the newest one), if it's
specified in the Justfile and CLI then CLI wins.

The pin that is always set to an empty string would override it.
* feat(ci): rootless CI

26.04 runners use sudo-rs, which does not support this flag. It doesn't
seem to have broken too much, Only thing I could see is the github token
not being passed to the build.

```
sudo: preserving the entire environment is not supported, '-E' is ignored
```

So this is a good time to move over to a rootless CI I guess.

* chore: unset target-dir for container-storage-action

This defaults to the user container storage
* fix(just): disk-image recipe

follow up of: cfd014f

* run recipe as root in CI

* fix: do load-rootful before disk-image
The --retry flags for podman/buildah pull/build do not seem to do
anything on transient network issues. Notably our base image pull from
quay is failing quite often, this should make this less likely to
happen in the future.

fixes: ublue-os#2381
xref: ublue-os#2337
* feat(ci): package cache with OCI artifacts

We are hitting a couple limitations in regards to actions/cache [1] with
our new testing branch workflow, as we previously relied on scheduled
builds from the main branch, which we no longer do with this model.

Now we make new cache on merge_group on the first build on Sundays, I
chose Sundays just because. Which means we run only a single build with
no cache per week and use that same build to generate a new fresh cache.

Else we would end up with 3 versions of vscode in our cache.
There is no point uploading cache on *every* PR.

For simplicity sake this has no handling/differentiation for our stable
and main branch. When we bump the fedora version of our main/testing
images then the cache for stable will just get stale.

We are mixing root/rootless usage of oras/cosign, I made it use root or
else we will get premission issues.

[1]: actions/cache#1537

fixes: ublue-os#2351

* define blessed day

* chore: remove command -v prefixes

not needed, running everything rootless now
…ee15 (ublue-os#2509)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 92c80b6 (ublue-os#2510)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to b85b98e (ublue-os#2512)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to dbcd1f0 (ublue-os#2515)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 3889933 (ublue-os#2516)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 050d2dd (ublue-os#2518)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 0e3dabc (ublue-os#2521)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…bc94 (ublue-os#2525)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
we haven't used this for over a year, might as well remove it.

This used to be needed in a time before we had renovate, before the
bluefin split, we build way less images now in general and also latest
and stable do not build from the main branch anymore.
inffy and others added 20 commits July 21, 2026 11:25
* chore(ci): add gh token to release generator

Seems we need to pass the token to gh cli in workflows too

https://github.com/ublue-os/aurora/actions/runs/29793388914/job/88563341082#step:7:13

* consistency

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
…t to 222e448 (ublue-os#2592)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
When you make a PR to aurora on a Sunday before the daily renovate bump
kicked off (POINT=1) (before 4AM UTC) then this run would not have any
cache.

PRs always should have cache.
…digest to 91a2029 (ublue-os#2599)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 686b3b8 (ublue-os#2601)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…lue-os#2595)

* chore(deps): update github/codeql-action digest to e064762

* set proper version

---------

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
…digest to aa63217 (ublue-os#2607)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to a89ec80 (ublue-os#2609)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 8ea3db2 (ublue-os#2614)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to f737d3b (ublue-os#2617)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Stable builds are currently failing because of this
* feat: delete /run leftovers from the image

This is to make bootc container lint happy.

We should probably make warnings fatal so we fix new offenders.

Related: bootc-dev/bootc#2051

* chore: remove unused rm

No idea why this is here, probably some super old leftover.

* do dx specific things as well
…digest to 4825b41 (ublue-os#2623)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…a0f6 (ublue-os#2621)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
* feat: add ZFS deprecation notifier

This will spawn a one-time notification that has to be dismissed by the
user if ZFS is being used.

xref: ublue-os#1765
resolves: ublue-os#2210

* fix typo

* be more explicit in msg

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>

* run it always every week

The chance that people will see it are way bigger this way.

* only actually enable on systems that have ship zfs

---------

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>
@renner0e renner0e changed the title Stable promotion chore: stable promotion Jul 26, 2026
@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@renner0e
renner0e enabled auto-merge July 26, 2026 16:41
@renner0e
renner0e merged commit 0f72ce8 into ublue-os:stable-f44 Jul 26, 2026
14 checks passed
@renner0e
renner0e deleted the stable-promotion branch July 26, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants