Merge 262d1b115d into 94eacb9329

mkosi.clangd

@@ -1,18 +1,12 @@
 #!/bin/bash
 # SPDX-License-Identifier: LGPL-2.1-or-later
 
-if command -v flatpak-spawn >/dev/null; then
+MKOSI_CONFIG="$(mkosi --json summary | jq -r .Images[-1])"
-    SPAWN=(flatpak-spawn --host)
-else
-    SPAWN=()
-fi
-
-MKOSI_CONFIG="$("${SPAWN[@]}" --host mkosi --json summary | jq -r .Images[-1])"
 DISTRIBUTION="$(jq -r .Distribution <<< "$MKOSI_CONFIG")"
 RELEASE="$(jq -r .Release <<< "$MKOSI_CONFIG")"
 ARCH="$(jq -r .Architecture <<< "$MKOSI_CONFIG")"
 
-exec "${SPAWN[@]}" mkosi \
+exec mkosi \
     --incremental=strict \
     --build-sources-ephemeral=no \
     --format=none \

mkosi.conf

@@ -38,8 +38,9 @@ SignExpectedPcr=yes
 
 [Content]
 ExtraTrees=
-        mkosi.extra.common
         mkosi.crt:/usr/lib/verity.d/mkosi.crt # sysext verification key
+        mkosi.leak-sanitizer-suppressions:/usr/lib/systemd/leak-sanitizer-suppressions
+        mkosi.coredump-journal-storage.conf:/usr/lib/systemd/coredump.conf.d/10-coredump-journal-storage.conf
         %O/minimal-0.root-%a.raw:/usr/share/minimal_0.raw
         %O/minimal-0.root-%a-verity.raw:/usr/share/minimal_0.verity
         %O/minimal-0.root-%a-verity-sig.raw:/usr/share/minimal_0.verity.sig

mkosi.images/initrd/mkosi.conf

@@ -6,7 +6,9 @@ Include=
         %D/mkosi.sanitizers
 
 [Content]
-ExtraTrees=%D/mkosi.extra.common
+ExtraTrees=
+        %D/mkosi.leak-sanitizer-suppressions:/usr/lib/systemd/leak-sanitizer-suppressions
+        %D/mkosi.coredump-journal-storage.conf:/usr/lib/systemd/coredump.conf.d/10-coredump-journal-storage.conf
 
 Packages=
         findutils

test/units/TEST-22-TMPFILES.sh

@@ -6,14 +6,6 @@ set -o pipefail
 # shellcheck source=test/units/test-control.sh
 . "$(dirname "$0")"/test-control.sh
 
-if systemd-detect-virt --quiet --container; then
-    # This comes from the selinux package and tries to write
-    # some files under sysfs, which will be read-only in a container,
-    # so mask it. It's not our tmpfiles.d file anyway.
-    mkdir -p /run/tmpfiles.d/
-    ln -s /dev/null /run/tmpfiles.d/selinux-policy.conf
-fi
-
 run_subtests
 
 touch /testok