Skip to content

Conversation

@jlebon
Copy link
Member

@jlebon jlebon commented Sep 18, 2025

Otherwise, we'll get the new substitution rules in stable/testing, which will cause mislabeling of /usr/etc/systemd/system due to a bug in libselinux v3.8.

This is basically the equivalent of
coreos/fedora-coreos-config@fb167ed for the legacy path.

See also coreos/fedora-coreos-tracker#2030.

Otherwise, we'll get the new substitution rules in stable/testing,
which will cause mislabeling of `/usr/etc/systemd/system` due to a bug
in libselinux v3.8.

This is basically the equivalent of
coreos/fedora-coreos-config@fb167ed
for the legacy path.

See also coreos/fedora-coreos-tracker#2030.
Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request freezes the rpm-ostree package to a specific version to work around an issue with libselinux. The change is clear and the reasoning is well-documented in the code comments and pull request description. My review includes a suggestion to improve the robustness of the shell script for better maintainability.


# Freeze rpm-ostree on v2025.10 until we have new enough libselinux. See
# https://github.com/coreos/fedora-coreos-tracker/issues/2030.
frozendeps=$(echo rpm-ostree-{,libs-}2025.10-2.fc42)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

While using echo with command substitution to capture the output of brace expansion works here, it's not the most robust pattern in shell scripting. The behavior of echo can be inconsistent across different shells, and it can misinterpret strings that start with a hyphen as options. A safer and more idiomatic approach in bash is to use an array to hold the list of packages, and then join them into a string.

Suggested change
frozendeps=$(echo rpm-ostree-{,libs-}2025.10-2.fc42)
local temp_pkgs=(rpm-ostree-{,libs-}2025.10-2.fc42)
frozendeps="${temp_pkgs[*]}"

@jlebon
Copy link
Member Author

jlebon commented Sep 18, 2025

Copy link
Member

@dustymabe dustymabe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jlebon jlebon merged commit 712634c into coreos:main Sep 19, 2025
5 of 6 checks passed
@jlebon jlebon deleted the pr/pin-rpm-ostree branch September 19, 2025 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants