SUSE-RU-2025:21001-1: moderate: Recommended update for python-kiwi

Wed Nov 26 20:31:44 UTC 2025

# Recommended update for python-kiwi

Announcement ID: SUSE-RU-2025:21001-1  
Release Date: 2025-11-14T18:18:17Z  
Rating: moderate  
References:

Affected Products:

  * SUSE Linux Enterprise Server 16.0
  * SUSE Linux Enterprise Server for SAP Applications 16.0

An update that can now be installed.

## Description:

This update for python-kiwi fixes the following issues:

Version 10.2.33.

  * Run grub mkconfig with os-prober disabled

Set GRUB_DISABLE_OS_PROBER=true to the caller environment such that it gets
consumed via /etc/grub.d/30_os-prober This Fixes #2883

  * Fixed typo in documentation

Invalid XML syntax, missing end tag. This Fixes #2882

  * References #2474 and #2475 poweroff instead of halt on oem shutdown

  * Fix rawhide integration test

The package shim-ia32 got dropped

  * Add test for profiled overlays

kiwi supports overlay files per profile, but we didn't had a proper integration
test for it. This commit adds one

  * Mount proc when needed

Using cp -a might lookup in proc/self/.. under certain conditions. Make sure to
mount proc for config/function that might trigger this condition. This Fixes
#2876

  * Update test-image-custom-partitions test build

Fix patch files to match with new dracut module dirs

  * Update dracut version compat runtime check

Update check_dracut_module_versions_compatible_to_kiwi to match with new dracut
module dirs which have changed due to recommended dracut module ordering for
out-of-tree modules.

  * Fix dracut Makefile install target

module dir names have changed due to recommended dracut module ordering for out-
of-tree modules.

  * Update pacman spec to dract changed module dirs

Follow up change for the fix of the recommended dracut module ordering for out-
of-tree modules.

  * Update spec file due to dract changed module dirs

Follow up change for the fix of the recommended dracut module ordering for out-
of-tree modules.

  * Follow the recommended dracut module ordering for out-of-tree modules

In dracut release v108 or later the recommended ordering for out out of tree
modules is 50-59 range. The following is a section from dracut documentation:

> Not using the 50-59 range for out of tree dracut modules will likely > lead to
> unintended errors in the initramfs generation process as your > dracut module
> will either run too early or too late in the generation process. > You have
> been warned.

  * Fix agama integration test

Disable no longer existing agama-auto.service

  * Fixed agama integration test

nothing provides agama-auto anymore

  * Update SLFO integration test

Make sure ps tool is installed

  * Fix exclude list for live image builds

When specifying a filesystem attribute for a live image build, the rootfs gets
build directly into this filesystem instead of being a squashfs wraped ext4
which is the default layout for compatibility reasons. In this direct filesystem
mode the exclude list was not passed along to the filesystem creation and causes
unwanted metadata to be part of the final image. This Fixes #2873

  * Fix test-image-custom-partitions integration test

Same fix as for the Tumbleweed test now also applied to the Leap test. Patching
of the new root device did no longer apply

  * Fix test-image-custom-partitions integration test

Patching of the new root device did no longer apply

  * fix: resize for raid device, ensure vars like kiwi_RaidDev are loaded before
    setting disk variable

  * Do not clobber initialize method

There was a method named initialize defined and implemented differently in the
dracut modules kiwi-lib and kiwi-repart. kiwi-lib is expected to be shared code
across all kiwi dracut modules. However if one module redefines a method of the
same name which is used in another module and expected to work differently
there, this is evil. This commit cleans up the name conflict and names the kiwi
library init function as lib_initialize. All dracut code that is expected to
make use of this method has been adopted too.

  * Skip kiwi-repart module in install ISOs

In case the kiwi-repart module is explicitly requested in a dracut.conf file and
the image is also configured to build an install ISO image this leads the
install ISO to contain the kiwi-repart module as well which is unwanted. This
commit explicitly omits the kiwi-repart when creating the initrd for the install
image

  * Skip repart when booting install/live iso

  * Update leap test-image-disk integration test

Add test for alternative volume ID in install ISO

  * Consolidate device lock into its own method

Add set_device_lock method which uses udevadm lock preferable but also supports
an flock fallback in case there is no lock command provided via systemd/udev

  * Fix bug in shell condition

The shell code test ... || warn A; warn B will always print the warning for B
despite the test result. This lead to the warning message "Settings from the
kiwi description will be ignored" to be printed always. This commit fixes it
with a clean if/then condition

  * Fix documentation rendering

There was an indentation bug which caused the docs to render wrong. This commit
fixes it

  * solver/repository: Handle zstd-compressed metadata files

`_create_solvables` assumes metadata files are gzip-compressed, but modern
Fedora ones are not, they are zstd-compressed.

  * uri: If we fail to resolve the metalink URI, log it

It's rather useful to know _what_ the URI is when something goes wrong, after
all.

Signed-off-by: Adam Williamson <awilliam at redhat.com>

  * Fix repartitioning with parted

parted does locking itself already. Wrapping it in udevadm lock results in a
deadlock, breaking boot.

  * Update test-image-disk-simple integration test

Update slfo/test-image-disk-simple. Add more space for flake testing and add a
user to test flakes for non root

  * Catch potential exceptions from pathlib.Path.mkdir

Creating a directory can fail, we should catch this error instead of ending up
in a stack trace

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Server 16.0  
    zypper in -t patch SUSE-SLES-16.0-17=1

  * SUSE Linux Enterprise Server for SAP Applications 16.0  
    zypper in -t patch SUSE-SLES-16.0-17=1

## Package List:

  * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64)
    * dracut-kiwi-live-10.2.33-160000.1.1
    * kiwi-systemdeps-iso-media-10.2.33-160000.1.1
    * dracut-kiwi-lib-10.2.33-160000.1.1
    * dracut-kiwi-oem-repart-10.2.33-160000.1.1
    * dracut-kiwi-oem-dump-10.2.33-160000.1.1
    * kiwi-systemdeps-disk-images-10.2.33-160000.1.1
    * kiwi-systemdeps-image-validation-10.2.33-160000.1.1
    * dracut-kiwi-verity-debuginfo-10.2.33-160000.1.1
    * python3-kiwi-10.2.33-160000.1.1
    * dracut-kiwi-overlay-10.2.33-160000.1.1
    * kiwi-systemdeps-containers-10.2.33-160000.1.1
    * kiwi-systemdeps-filesystems-10.2.33-160000.1.1
    * kiwi-systemdeps-core-10.2.33-160000.1.1
    * kiwi-systemdeps-containers-wsl-10.2.33-160000.1.1
    * kiwi-systemdeps-bootloaders-10.2.33-160000.1.1
    * dracut-kiwi-verity-10.2.33-160000.1.1
    * kiwi-systemdeps-10.2.33-160000.1.1
    * kiwi-man-pages-10.2.33-160000.1.1
  * SUSE Linux Enterprise Server 16.0 (noarch)
    * kiwi-bash-completion-10.2.33-160000.1.1
  * SUSE Linux Enterprise Server 16.0 (x86_64)
    * kiwi-pxeboot-10.2.33-160000.1.1
  * SUSE Linux Enterprise Server for SAP Applications 16.0 (ppc64le x86_64)
    * dracut-kiwi-live-10.2.33-160000.1.1
    * kiwi-systemdeps-iso-media-10.2.33-160000.1.1
    * dracut-kiwi-lib-10.2.33-160000.1.1
    * dracut-kiwi-oem-repart-10.2.33-160000.1.1
    * dracut-kiwi-oem-dump-10.2.33-160000.1.1
    * kiwi-systemdeps-disk-images-10.2.33-160000.1.1
    * kiwi-systemdeps-image-validation-10.2.33-160000.1.1
    * dracut-kiwi-verity-debuginfo-10.2.33-160000.1.1
    * python3-kiwi-10.2.33-160000.1.1
    * dracut-kiwi-overlay-10.2.33-160000.1.1
    * kiwi-systemdeps-containers-10.2.33-160000.1.1
    * kiwi-systemdeps-filesystems-10.2.33-160000.1.1
    * kiwi-systemdeps-core-10.2.33-160000.1.1
    * kiwi-systemdeps-containers-wsl-10.2.33-160000.1.1
    * kiwi-systemdeps-bootloaders-10.2.33-160000.1.1
    * dracut-kiwi-verity-10.2.33-160000.1.1
    * kiwi-systemdeps-10.2.33-160000.1.1
    * kiwi-man-pages-10.2.33-160000.1.1
  * SUSE Linux Enterprise Server for SAP Applications 16.0 (noarch)
    * kiwi-bash-completion-10.2.33-160000.1.1
  * SUSE Linux Enterprise Server for SAP Applications 16.0 (x86_64)
    * kiwi-pxeboot-10.2.33-160000.1.1

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20251126/3b8ef1b1/attachment.htm>