SUSE-RU-2026:23208-1: important: Recommended update for python-kiwi

Tue Aug 25 12:33:29 UTC 2026

# Recommended update for python-kiwi

Announcement ID: SUSE-RU-2026:23208-1  
Release Date: 2026-08-18T08:30:25Z  
Rating: important  
References:

  * bsc#1253637
  * bsc#1254116
  * bsc#1260340
  * bsc#1263564
  * bsc#1263973
  * bsc#1271367
  * jsc#PED-15927

Affected Products:

  * SUSE Linux Micro 6.0

An update that contains one feature and has six fixes can now be installed.

## Description:

This update for python-kiwi fixes the following issues:

Update from version 10.2.29 to 10.2.33

New features and enhancements:

  * Add support for OCI format for disk images: store a disk image inside an
    OCI-compliant container, optionally layered on a reference container via the
    derived_from attribute
  * Add support for import of custom CA certificates during the build via the
    new <certificates> section or the command line. Certificates are imported
    right after bootstrap, before further packages are retrieved (bsc#1271367)
  * Add support for sha512sum: select between shasum size 256 and 512 via the
    new 'shasum' runtime config section
  * Support SOURCE_DATE_EPOCH for OCI containers for reproducible container
    creation time and history (jsc#PED-15927)
  * Refactor use of the kiwi settings file: additionally read
    /etc/kiwi.yml.d/_.yml, /usr/share/kiwi/kiwi.yml and
    /usr/share/kiwi/kiwi.yml.d/_.yml, and install the default settings as
    /usr/share/kiwi/kiwi.yml.example from the main package
  * Drop the parted requirement for the msdos partitioner; the active flag is
    now set via sfdisk
  * Do not hardcode the dracut omit module list in the live builder; special
    settings should come from /etc/dracut.conf.d/*.conf in the image description
    (bsc#1260340)
  * Follow the recommended dracut module ordering (50-59 range) for out-of-tree
    modules as required by dracut v108 and later

Bug fixes:

  * Fix reading of runtime config files: honor both vendor (/usr) and admin
    (/etc) locations per the systemd/uapi spec, including drop-in directories
  * Do not require qemu variant packages on 32bit architectures (bsc#1263564)
  * Fix rereading of the DASD partition table with partprobe on s390 and avoid a
    possible dead-lock caused by double locking with parted (bsc#1263973)
  * Fix system resize: avoid failure when the device was locked beforehand and
    skip the pre-resize filesystem check for btrfs
  * Fix repartitioning with parted: parted locks itself, wrapping it in udevadm
    lock resulted in a deadlock that broke boot
  * Fix the ramdisk sysroot generator to use the UUID device representation
    (bsc#1254116)
  * Fix resize for RAID devices: load variables such as kiwi_RaidDev before
    setting the disk variable
  * Fix the exclude list for live image builds when a filesystem attribute is
    set
  * Fix the result bundler dropping the container format type from result names
    for uncompressed container data
  * Fix the caller environment for non-chroot scripts so they know about the
    kiwi profile environment
  * Mount proc when needed, as cp -a may look up proc/self
  * Run grub mkconfig with os-prober disabled
  * Skip the kiwi-repart module in install and live ISOs
  * Do not clobber the initialize method shared between the kiwi-lib and kiwi-
    repart dracut modules; the library function is now lib_initialize
  * Power off instead of halt on OEM shutdown
  * Handle zstd-compressed repository metadata files in the solver
  * Log the metalink URI when it cannot be resolved
  * Catch exceptions from pathlib.Path.mkdir instead of ending in a stack trace
  * Fix a shell condition that always printed "Settings from the kiwi
    description will be ignored"
  * kiwi-pxeboot now uses systemd-tmpfiles
  * Drop the erofs requirement for SLES where it does not exist
  * Fix the binutils requirement condition to also cover SLES16/Leap16
    (bsc#1253637)
  * Fix a documentation rendering indentation bug and an invalid XML syntax typo
    in the documentation

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro 6.0  
    zypper in -t patch SUSE-SLE-Micro-6.0-849=1

## Package List:

  * SUSE Linux Micro 6.0 (aarch64 s390x x86_64)
    * dracut-kiwi-lib-10.2.33-1.1
    * dracut-kiwi-oem-dump-10.2.33-1.1
    * dracut-kiwi-oem-repart-10.2.33-1.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1253637
  * https://bugzilla.suse.com/show_bug.cgi?id=1254116
  * https://bugzilla.suse.com/show_bug.cgi?id=1260340
  * https://bugzilla.suse.com/show_bug.cgi?id=1263564
  * https://bugzilla.suse.com/show_bug.cgi?id=1263973
  * https://bugzilla.suse.com/show_bug.cgi?id=1271367
  * https://jira.suse.com/browse/PED-15927

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260825/bcd7db77/attachment-0001.htm>