Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tik for openSUSE:Factory checked in at 2026-07-06 12:35:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tik (Old) and /work/SRC/openSUSE:Factory/.tik.new.1982 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tik" Mon Jul 6 12:35:43 2026 rev:38 rq:1364013 version:1.5.2 Changes: -------- --- /work/SRC/openSUSE:Factory/tik/tik.changes 2026-07-02 20:16:08.739266177 +0200 +++ /work/SRC/openSUSE:Factory/.tik.new.1982/tik.changes 2026-07-06 12:38:04.743387810 +0200 @@ -1,0 +2,6 @@ +Mon Jul 06 09:38:09 UTC 2026 - Richard Brown <[email protected]> + +- Update to version 1.5.2: + * [15-encrypt] Give up on using sdbootutil in a chroot, pollute install environment and use sbootutil from there + +------------------------------------------------------------------- Old: ---- tik-1.5.1.obscpio New: ---- tik-1.5.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tik.spec ++++++ --- /var/tmp/diff_new_pack.BpV6ob/_old 2026-07-06 12:38:05.555416026 +0200 +++ /var/tmp/diff_new_pack.BpV6ob/_new 2026-07-06 12:38:05.559416165 +0200 @@ -17,7 +17,7 @@ Name: tik -Version: 1.5.1 +Version: 1.5.2 Release: 0 Summary: Transactional Installation Kit License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.BpV6ob/_old 2026-07-06 12:38:05.631418666 +0200 +++ /var/tmp/diff_new_pack.BpV6ob/_new 2026-07-06 12:38:05.635418806 +0200 @@ -3,7 +3,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/sysrich/tik.git</param> <param name="scm">git</param> - <param name="revision">v1.5.1</param> + <param name="revision">v1.5.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.BpV6ob/_old 2026-07-06 12:38:05.687420612 +0200 +++ /var/tmp/diff_new_pack.BpV6ob/_new 2026-07-06 12:38:05.691420752 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/sysrich/tik.git</param> - <param name="changesrevision">249ecc64fd6fc2aba9f11ecf240bf5844751394a</param></service></servicedata> + <param name="changesrevision">0b81b5b43bac51cd56f668d194ba0b9398829fa5</param></service></servicedata> (No newline at EOF) ++++++ tik-1.5.1.obscpio -> tik-1.5.2.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/tik-1.5.1/usr/lib/tik/modules/post/15-encrypt new/tik-1.5.2/usr/lib/tik/modules/post/15-encrypt --- old/tik-1.5.1/usr/lib/tik/modules/post/15-encrypt 2026-06-29 11:44:36.000000000 +0200 +++ new/tik-1.5.2/usr/lib/tik/modules/post/15-encrypt 2026-07-06 11:34:51.000000000 +0200 @@ -69,15 +69,18 @@ cryptUUID=$(lsblk -n -r -d -o UUID "${TIK_CRYPT_PART}") cryptName="${TIK_CRYPT_MAPPER:-cr_root}" echo "${cryptName} UUID=${cryptUUID} none x-initrd.attach" | prun tee "${TIK_ROOT_MNT}/etc/crypttab" - +1 # FIXME: Dracut gets confused by previous installations on occasion with the default config, override the problematic option temporarily echo "hostonly_cmdline=\"no\"" | prun tee "${TIK_ROOT_MNT}/etc/dracut.conf.d/99-tik.conf" + # FIXME: Really shouldn't populate the installer with the target systems crypttab, but sdbootutil just downright refuses to work in a chroot + prun cp "${TIK_ROOT_MNT}/etc/crypttab" /etc/crypttab + # Install bootloader with sdbootutil - prun /usr/bin/chroot "${TIK_ROOT_MNT}" sdbootutil -vv --esp-path /boot/efi --no-variables install 1>&2 + prun sdbootutil -vv --esp-path /boot/efi --no-variables install 1>&2 tik_progress_step "Enrolling recovery key" 40 - prun /usr/bin/chroot "${TIK_ROOT_MNT}" sdbootutil -vv --esp-path /boot/efi --method=recovery-key enroll 1>&2 + prun sdbootutil -vv --esp-path /boot/efi --method=recovery-key enroll 1>&2 # If Default mode has been detected, configure PCR policy. # `etc/sysconfig/fde-tools` must be created before any calls to sdbtools, @@ -97,7 +100,7 @@ # - 1 - Not only changes with CPU/RAM/hardware changes, but also when UEFI config changes are made, which is too common to lockdown # - 2 - Includes option ROMs on pluggable hardware, such as external GPUs. Attaching a GPU to your laptop shouldn't hinder booting. # - 3 - Firmware from pluggable hardware. Attaching hardware to your laptop shouldn't hinder booting - prun /usr/bin/chroot "${TIK_ROOT_MNT}" sdbootutil -vv --esp-path /boot/efi --method=tpm2 enroll 1>&2 + prun sdbootutil -vv --esp-path /boot/efi --method=tpm2 enroll 1>&2 else tik_progress_step "Setting encryption passphrase" 60 d --width=500 --height=300 --no-wrap --warning --icon=security-high-symbolic --title="Set Encryption Passphrase" --text="This ${TIK_OS_NAME} system is encrypted and will require a Passphrase on every boot\n\nYou will be prompted to set the Passphrase on the next screen\n\nFor more information please visit <tt>https://aeondesktop.org/encrypt</tt>" @@ -125,13 +128,15 @@ prun /usr/sbin/cryptsetup luksAddKey --key-file="${tik_keyfile}" --batch-mode --force-password "${TIK_CRYPT_PART}" <<<"${pw}" # Initrd wasn't generated by install or enroll as no TPM interaction, so do it now. - prun /usr/bin/chroot "${TIK_ROOT_MNT}" sdbootutil -vv --esp-path /boot/efi mkinitrd 1>&2 + prun sdbootutil -vv --esp-path /boot/efi mkinitrd 1>&2 break done fi # FIXME: Dracut gets confused by previous installations on occasion with the default config, remove override now initrd done prun /usr/bin/rm "${TIK_ROOT_MNT}/etc/dracut.conf.d/99-tik.conf" + # FIXME: Remove temporary compied /etc/crypttab + prun /usr/bin/rm /etc/crypttab tik_progress_step "Encryption configuration complete" 80 } ++++++ tik.obsinfo ++++++ --- /var/tmp/diff_new_pack.BpV6ob/_old 2026-07-06 12:38:05.939429369 +0200 +++ /var/tmp/diff_new_pack.BpV6ob/_new 2026-07-06 12:38:05.943429508 +0200 @@ -1,5 +1,5 @@ name: tik -version: 1.5.1 -mtime: 1782726276 -commit: 249ecc64fd6fc2aba9f11ecf240bf5844751394a +version: 1.5.2 +mtime: 1783330491 +commit: 0b81b5b43bac51cd56f668d194ba0b9398829fa5
