Bump systemd/mkosi from 18 to 21

[dependabot]

Bumps systemd/mkosi from 18 to 21.

Release notes

Sourced from systemd/mkosi's releases.

mkosi v21

• We now handle unmerged-usr systems correctly
• Builtin configs (mkosi-initrd, mkosi-tools) can now be included using Include= (e.g. Include=mkosi-initrd)
• The kernel-install plugin now uses the builtin mkosi-initrd config so there's no need anymore to copy the full mkosi-initrd config into /usr/lib/mkosi-initrd.
• We don't require a build anymore for the journalctl and coredumpctl verbs.
• mkosi ssh works again when used with ToolsTree=default
• We now use .zst instead of .zstd for compressed split artifacts produced by systemd-repart.
• systemd-repart uses a persistent temporary directory again for assembling images instead of a tmpfs.
• Added MicrocodeHost= setting to only include the CPU specific microcode for the current host system.
• The kernel-install plugin now only includes the CPU specific microcode
• Introduced PackageCacheDirectory= to set the directory for package manager caches. This setting defaults to a suitable location in the system or user directory depending on how mkosi is invoked. CacheDirectory= is only used for incremental cached images now.
• Repository metadata is now synced once at the start of each image build and never during an image build. Each image includes a snapshot of the repository metadata in the canonical locations in /var so that incremental images and extension images can reuse the same snapshot. When building an image intended to be used with BaseTrees=, disable CleanPackageMetadata= to make sure the repository metadata in /var is not cleaned up, otherwise any extension images using this image as their base tree will not be able to install additional packages.
• Implemented CacheOnly=metadata. Note that in the JSON output, the value of CacheOnly= will now be a string instead of a boolean.
• Added CompressLevel= to set the compression level to use.
• Dropped experimental Gentoo support.
• Added TriggerMatch= to specify multiple match sections of which only one should be satisfied.
• Added jq, attr, acl, git, sed, grep and findutils to the default tools tree.
• Added mkosi-install, mkosi-upgrade, mkosi-remove and mkosi-reinstall scripts which allow writing scripts that are independent of the package manager being used to build the image.
• We now expand specifiers in Match section values
• Made GPG key handling for Fedora rawhide more robust
• If systemd-repart 256 or newer is available, mkosi will instruct it to generate /etc/fstab and /etc/crypttab for the image if any partition definitions contain the corresponding settings (MountPoint= and EncryptedVolume=).
• bash is now started in the debug shell instead of sh.
• The default release for Ubuntu is now noble.
• Ubuntu is now used as the default tools tree distribution for Ubuntu

... (truncated)

Changelog

Sourced from systemd/mkosi's changelog.

v21

• We now handle unmerged-usr systems correctly
• Builtin configs (mkosi-initrd, mkosi-tools) can now be included using Include= (e.g. Include=mkosi-initrd)
• The kernel-install plugin now uses the builtin mkosi-initrd config so there's no need anymore to copy the full mkosi-initrd config into /usr/lib/mkosi-initrd.
• We don't require a build anymore for the journalctl and coredumpctl verbs.
• mkosi ssh works again when used with ToolsTree=default
• We now use .zst instead of .zstd for compressed split artifacts produced by systemd-repart.
• systemd-repart uses a persistent temporary directory again for assembling images instead of a tmpfs.
• Added MicrocodeHost= setting to only include the CPU specific microcode for the current host system.
• The kernel-install plugin now only includes the CPU specific microcode
• Introduced PackageCacheDirectory= to set the directory for package manager caches. This setting defaults to a suitable location in the system or user directory depending on how mkosi is invoked. CacheDirectory= is only used for incremental cached images now.
• Repository metadata is now synced once at the start of each image build and never during an image build. Each image includes a snapshot of the repository metadata in the canonical locations in /var so that incremental images and extension images can reuse the same snapshot. When building an image intended to be used with BaseTrees=, disable CleanPackageMetadata= to make sure the repository metadata in /var is not cleaned up, otherwise any extension images using this image as their base tree will not be able to install additional packages.
• Implemented CacheOnly=metadata. Note that in the JSON output, the value of CacheOnly= will now be a string instead of a boolean.
• Added CompressLevel= to set the compression level to use.
• Dropped experimental Gentoo support.
• Added TriggerMatch= to specify multiple match sections of which only one should be satisfied.
• Added jq, attr, acl, git, sed, grep and findutils to the default tools tree.
• Added mkosi-install, mkosi-upgrade, mkosi-remove and mkosi-reinstall scripts which allow writing scripts that are independent of the package manager being used to build the image.
• We now expand specifiers in Match section values
• Made GPG key handling for Fedora rawhide more robust
• If systemd-repart 256 or newer is available, mkosi will instruct it to generate /etc/fstab and /etc/crypttab for the image if any partition definitions contain the corresponding settings (MountPoint= and EncryptedVolume=).
• bash is now started in the debug shell instead of sh.
• The default release for Ubuntu is now noble.

... (truncated)

Commits

• ea1b00c Release 21
• 5197732 Copy existing crypto policies from the host into package manager tree
• 165008b Merge pull request #2465 from DaanDeMeyer/kmod
• 69afbf5 Check for bootctl before checking its version
• 0963257 Speed up kernel modules initrd generation if no excludes were specified
• 74c3186 Use rglob() in one more place
• e93a0db Fix kernel_modules_include_host in summary
• 061d697 clarify use of secure boot key for PCR signature
• f0fa598 Make mkosi-check-and-shutdown log to console as well
• 7bba973 Merge pull request #2463 from DaanDeMeyer/news
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #27.