Etienne Champetier

host-device: use temp network namespace for rename

10

Using a temporary name / doing a fast rename causes some race conditions with udev and NetworkManager: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1599 Fixes #1072

host-device temp interface name causes race conditions

2

Since https://github.com/containernetworking/plugins/pull/1002 the host-device plugin renames the interface before moving it. This doesn't play too well with udev and NetworkManager, see https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1599 Would it be possible to use a temporary...

Rework grub2 default static config

44

Rework grub2 default static config - Add support for `GRUB2_PASSWORD` in `user.cfg` (partially fix https://issues.redhat.com/browse/RHEL-78299) - include dropins instead of sourcing them, this should help updating config in the future...

Allow to adjust LinuxNamespaces

6

2 use cases I have in mind: - add cgroup namespace for k8s privileged pods - enable time namespace (depends at least on https://github.com/opencontainers/runtime-tools/issues/783)

bootc-fstab-edit: 2 small improvements

5

- fixup_etc_fstab: comment / when using defaults ``` If we 'upgrade' to an image without composefs or if we runtime disable composefs, remounting ro will break the system. If option...

rpm-ostree doesn't filter out docs directory

2

### Describe the bug rpm has some logic to not create folders that are owned by a rpm if empty after filtering out the doc `rpm --excludedocs` rpm-ostree doesn't https://github.com/rpm-software-management/rpm/discussions/3782#discussioncomment-13432284...

rpm-ostree upgrade / rebase can't read non world readeable local files

3

``` # rpm-ostree upgrade Pulling manifest: ostree-unverified-image:oci:/var/lib/appliance/upgrade/XXX error: Creating importer: failed to invoke method OpenImage: failed to invoke method OpenImage: faccessat /var/lib/appliance/upgrade/XXX: permission denied ``` `/var/lib/appliance/upgrade` is only readable by...

container encapsulate & zstd

2

Using `rpm-ostree-2025.5-1.el9.x86_64` / `ostree-2025.1-1.el9.x86_64` Running `rpm-ostree compose container-encapsulate` or `ostree container encapsulate` creating an `ociarchive`, the layers are gzip compressed, looking at using zstd I tried to set `compression_format =...

#### Share the context EL 9 (RHEL / Alma / ...) DEFAULT crypto policy only uses SHA1 for HMAC where safe https://access.redhat.com/articles/6846411 https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/blob/rhel9/policies/DEFAULT.pol https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/blob/rhel9/policies/modules/NO-SHA1.pmod #### Description of problem: we direct...

discriminator property must be required ?

5

**Describe the bug** I'm not certain, but I think the discriminator property must be required https://spec.openapis.org/oas/v3.1.0.html#fixed-fields-20 ``` The expectation now is that a property with name petType MUST be present...