Bump systemd/mkosi from 18 to 22

[dependabot]

Bumps systemd/mkosi from 18 to 22.

Release notes

Sourced from systemd/mkosi's releases.

mkosi v22

• We'll now try to delete btrfs subvolumes with btrfs subvolume delete first before falling back to recursively deleting the directory.
• The invoking user is now always mapped to root when running sync scripts. This fixes an issue where we would fail when a package manager tree or skeleton tree contained a /usr directory as we would not have permissions to run mount in the sandbox.
• We now use qemu's official firmware descriptions to find EDK2/OVMF UEFI firmware. Addititionally, QemuFirmware=uefi now boots without SecureBoot support, and QemuFirmware=uefi-secure-boot was introduced to boot with SecureBoot support. By default we will still boot with SecureBoot support if QemuFirmware=auto.
• Added support for QemuFirmwareVariables=custom and QemuFirmwareVariables=microsoft to use OVMF/EDK2 variables with either the user's custom keys enrolled or with the Microsoft keys enrolled.
• Added UnifiedKernelImages= to control whether we generate unified kernel images or not.
• Bootloader=grub will now generate a grub EFI image and install it. If SecureBoot= is enabled and ShimBootloader= is not set to signed, the grub EFI image will be signed for SecureBoot.
• ShimBootloader=signed will now also instruct mkosi to look for and install already signed grub, systemd-boot, kernel and UKI binaries.
• We now build grub images with a fixed set of modules and don't copy any grub modules to the ESP anymore.
• The configuration is now made available as a JSON file to all mkosi scripts via the $MKOSI_CONFIG environment variable.
• $PROFILE is now set for all mkosi scripts containing the value of Profile= if it is set.

mkosi v21

• We now handle unmerged-usr systems correctly
• Builtin configs (mkosi-initrd, mkosi-tools) can now be included using Include= (e.g. Include=mkosi-initrd)
• The kernel-install plugin now uses the builtin mkosi-initrd config so there's no need anymore to copy the full mkosi-initrd config into /usr/lib/mkosi-initrd.
• We don't require a build anymore for the journalctl and coredumpctl verbs.
• mkosi ssh works again when used with ToolsTree=default
• We now use .zst instead of .zstd for compressed split artifacts produced by systemd-repart.
• systemd-repart uses a persistent temporary directory again for assembling images instead of a tmpfs.
• Added MicrocodeHost= setting to only include the CPU specific microcode for the current host system.
• The kernel-install plugin now only includes the CPU specific microcode
• Introduced PackageCacheDirectory= to set the directory for package manager caches. This setting defaults to a suitable location in the system or user directory depending on how mkosi is invoked.

... (truncated)

Changelog

Sourced from systemd/mkosi's changelog.

v22

• We'll now try to delete btrfs subvolumes with btrfs subvolume delete first before falling back to recursively deleting the directory.
• The invoking user is now always mapped to root when running sync scripts. This fixes an issue where we would fail when a package manager tree or skeleton tree contained a /usr directory as we would not have permissions to run mount in the sandbox.
• We now use qemu's official firmware descriptions to find EDK2/OVMF UEFI firmware. Addititionally, QemuFirmware=uefi now boots without SecureBoot support, and QemuFirmware=uefi-secure-boot was introduced to boot with SecureBoot support. By default we will still boot with SecureBoot support if QemuFirmware=auto.
• Added support for QemuFirmwareVariables=custom and QemuFirmwareVariables=microsoft to use OVMF/EDK2 variables with either the user's custom keys enrolled or with the Microsoft keys enrolled.
• Added UnifiedKernelImages= to control whether we generate unified kernel images or not.
• Bootloader=grub will now generate a grub EFI image and install it. If SecureBoot= is enabled and ShimBootloader= is not set to signed, the grub EFI image will be signed for SecureBoot.
• ShimBootloader=signed will now also instruct mkosi to look for and install already signed grub, systemd-boot, kernel and UKI binaries.
• We now build grub images with a fixed set of modules and don't copy any grub modules to the ESP anymore.
• The configuration is now made available as a JSON file to all mkosi scripts via the $MKOSI_CONFIG environment variable.
• $PROFILE is now set for all mkosi scripts containing the value of Profile= if it is set.

v21

• We now handle unmerged-usr systems correctly
• Builtin configs (mkosi-initrd, mkosi-tools) can now be included using Include= (e.g. Include=mkosi-initrd)
• The kernel-install plugin now uses the builtin mkosi-initrd config so there's no need anymore to copy the full mkosi-initrd config into /usr/lib/mkosi-initrd.
• We don't require a build anymore for the journalctl and coredumpctl verbs.
• mkosi ssh works again when used with ToolsTree=default
• We now use .zst instead of .zstd for compressed split artifacts produced by systemd-repart.
• systemd-repart uses a persistent temporary directory again for assembling images instead of a tmpfs.
• Added MicrocodeHost= setting to only include the CPU specific microcode for the current host system.
• The kernel-install plugin now only includes the CPU specific microcode
• Introduced PackageCacheDirectory= to set the directory for package

... (truncated)

Commits

• fcae016 Release 22
• 195acc2 Update NEWS
• 7ff9ad0 Set $PROFILE to the current profile
• bd645c7 Merge pull request #2487 from behrmann/cisection
• 3eebd34 ci: print group section lines for GitHub workflow
• ae1fe43 arch: install dbus-broker and dbus-broker-units explicitly
• 08bd030 ci: Remove btrfs logic
• 6264135 Merge pull request #2499 from DaanDeMeyer/async-rm
• 0d602ce ci: Btrfs mount option tuning
• 84524c8 ci: Free up disk space asynchronously
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #31.