sys-apps/systemd: bump to 260.4 - #4261
Conversation
There was a problem hiding this comment.
🔵 Needs a closer look
systemd is a core OS component and this version bump should be validated with image-diff/boot/runtime verification beyond what can be safely inferred from the ebuild-only changes here.
Pull request overview
Bumps the Gentoo ebuild and overlay bits to ship sys-apps/systemd 260.4 (notably to pick up the upstream sysext nested mount fix referenced in the PR description).
Changes:
- Add
systemd-260.4.ebuildand corresponding distfile entry inManifest. - Pin
=sys-apps/systemd-260.4viapackage.accept_keywords. - Add a changelog entry for the systemd update.
File summaries
| File | Description |
|---|---|
| sdk_container/src/third_party/portage-stable/sys-apps/systemd/systemd-260.4.ebuild | New 260.4 ebuild enabling the version bump. |
| sdk_container/src/third_party/portage-stable/sys-apps/systemd/Manifest | Adds the 260.4 tarball hashes/size for fetch verification. |
| sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords | Accept-keywords pin to ensure 260.4 is selected. |
| changelog/updates/2026-03-09-systemd.md | User-facing changelog entry for the systemd update. |
Review details
- Files reviewed: 4/4 changed files
- Comments generated: 3
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| @@ -0,0 +1 @@ | |||
| - systemd ([260.4](https://github.com/systemd/systemd/releases#release-v260.4) (includes [260.3](https://github.com/systemd/systemd/releases#release-v260.3), [260.2](https://github.com/systemd/systemd/releases#release-v260.2))) | |||
| # Pull some fixes | ||
| =sys-apps/systemd-260.4 |
I just dropped one patch ('files/systemd-260.2-networkd-resolve-hook.patch')
which is not needed anymore.
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
this pulls interesting patches (nested mount with sysext) Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
54806be to
f3ce56e
Compare
There was a problem hiding this comment.
🟡 Changes recommended
The newly added changelog entry appears misdated via its filename (will sort out of order in release notes), and should be corrected before merge.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Review details
Suppressed comments (2)
sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords:187
- The reason comment "Pull some fixes" is too vague for a profile keyword pin; please note the actual motivation (e.g., sysext nested-mount fix / related issue) so future updates know what must not regress.
# Pull some fixes
changelog/updates/2026-03-09-systemd.md:1
- This changelog entry is dated 2026-03-09 in the filename, but the systemd 260.4 bump appears to be happening now; that will place the note out of chronological order in release notes. Consider renaming the file to the actual change date (and keeping the same content).
- systemd ([260.4](https://github.com/systemd/systemd/releases#release-v260.4) (includes [260.3](https://github.com/systemd/systemd/releases#release-v260.3), [260.2](https://github.com/systemd/systemd/releases#release-v260.2)))
- Files reviewed: 4/4 changed files
- Comments generated: 1
- Review effort level: Lite
| # malloc_usable_size doesn't play well with _F_S=3: | ||
| # https://github.com/systemd/systemd/issues/41459 (bug #971773) | ||
| if tc-is-clang && tc-enables-fortify-source ; then | ||
| # We can't unconditionally do this b/c we fortify needs |
This mainly provides the nested mount fix for sysext: systemd/systemd#41875 (which has been backported on 260.x: systemd/systemd@34e2cae)
How to use
flatcar/Flatcar#2111 (comment)
Testing done
changelog/directory (user-facing change, bug fix, security fix, update)/bootand/usrsize, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.Related to: