SUSE-RU-2026:22539-1: important: Recommended update for python-kiwi, open-vmdk

SLE-UPDATES null at suse.de
Mon Jul 13 16:32:43 UTC 2026 

# Recommended update for python-kiwi, open-vmdk

Announcement ID: SUSE-RU-2026:22539-1  
Release Date: 2026-07-08T09:20:51Z  
Rating: important  
References:

  * bsc#1260340
  * bsc#1263973
  * jsc#PED-15927
  * jsc#PED-9497

  
Affected Products:

  * SUSE Linux Micro 6.2
  * SUSE Linux Micro Extras 6.2

  
  
An update that contains two features and has two fixes can now be installed.

## Description:

This update for python-kiwi, open-vmdk fixes the following issues:

Changes in python-kiwi:

  * Fix rereading DASD partition table with partprobe

On s390 and with a DASD disk the rereading of the partition table can only be
done properly with partprobe. This commit changes the dracut code to Require
parted and partprobe only for DASD disks on s390.

In addition this commit prevents the active device locking for parted and
partprobe when called in the context of a DASD device. The reason for this
change is because of a patch in libparted which applies flock() itself in this
condition.

This change however does not exist in the upstream version of parted which is
causing problems that are hard to solve by kiwi. However, a dead-lock condition
should be avoided and I think it's still better to have this change in kiwi and
convince people to upstream the above parted fix, rather than living with a
dead-lock condition due to double locking in kiwi. This Fixes bsc#1263973

  * Do not hardcode dracut omit module in live builder

This is a relict from the old days when the pure presence of multipath in a live
ISO caused issues at boot time. kiwi should not maintain a hardcoded list of
dracut modules except for those that are mandatory for live boot, if there
should be any special setting needed it should come from an overlay setup in
/etc/dracut.conf.d/*.conf as part of the image description. This is related to
bsc#1260340

  * Drop parted requirement for msdos partitioner

parted was used in kiwi at one place to set the active flag on a partition in
the DOS table. This action can also be done via sfdisk and drops the parted
requirement from the kiwi builder code

  * Move OVA support to open-vmdk

Finally this commit drops the use of the VMware ovftool and moves to the real
opensource alternative open-vmdk This Fixes #2292 and Fixes #2627 and Fixes
jira#PED-9497

  * Limit workflow to SLE supported pythons

  * Refactor use of kiwi settings file

KIWI supports an optional runtime configuration file for settings to control the
behavior of the tools used by KIWI on the build host. So far this config file
could be specified via --config or is searched in the user's HOME or looked up
as /etc/kiwi.yml. With this commit the following changes to this heuristic are
made:

  1. Support reading of /etc/kiwi.yml.d/*.yml
  2. Support reading of /usr/share/kiwi/kiwi.yml and /usr/share/kiwi/kiwi.yml.d/*.yml
  3. Install default settings file as /usr/share/kiwi/kiwi.yml.example from the main package and drop it from kiwi-man-pages which was considered a weird place.

  4. Add support for oci format for disk images

The (oci|docker):image_format format is a special case that stores the disk
image inside of an OCI-compliant container. The disk image is stored in the
specified image_format in the disk/ directory of the container. The disk format
can be one of the above formats or just raw if the disk should be stored as a
raw disk inside of the container. Custom naming conventions for the disk image
can be applied by using the bundle_format attribute. The derived_from attribute
can be used to specify the source container. The resulting container image will
be built by adding the disk image as a new layer on top of the specified
reference container. If there is no derived_from attribute, the container image
will be built from scratch using an empty root directory. This format is
particularly useful for building an image which bundles the actual disk image
and its runtime requirements into one artifact. This Fixes jira#PCT-1008

  * Fix caller environment for non chroot scripts

Make sure non chroot scripts also knows about the kiwi profile environment such
that e.g. the current profile name or other settings from the build can be used
in the script

  * Update spec file due to new package restrictions

On SUSE new package restrictions where added to support the concept of the so
called immutable mode. The new guideline says "Any files in the RPM spec %files
section that are not in /usr or /etc is likely to break in Immutable Mode". For
the kiwi packaging this applies to the kiwi-pxeboot sub package. This commit
implements the suggested solution based on systemd-tmpfiles and only applies for
SUSE. This Fixes jira#PCT-1055

  * Fix result bundler for uncompressed container data

When building container images with the respective runtime configuration:

`yaml container: - compress: false`

The resulting image output files will be uncompressed meaning there is no ".xz"
extension present. When running the result bundler there is an index bug which
causes the container format type of the filename name e.g. ".docker" to be
dropped from the result names. This commit fixes it.

  * Fix spec file requirements for SUSE

There is no erofs on SLES. This commit drops the respective requirement settings
which we have upstream where it exists This Fixes jira#PCT-899

  * Fix upstream merge README

  * Support SOURCE_DATE_EPOCH for OCI containers (jsc#PED-15927)

If SOURCE_DATE_EPOCH is available, use it for the container creation time and
history.

open-vmdk is shipped as new package.

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro Extras 6.2  
    zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1183=1

## Package List:

  * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64)
    * python3-kiwi-10.2.33-160000.3.1
    * kiwi-systemdeps-core-10.2.33-160000.3.1
    * open-vmdk-debuginfo-0.3.12-160000.1.1
    * open-vmdk-0.3.12-160000.1.1
    * open-vmdk-debugsource-0.3.12-160000.1.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1260340
  * https://bugzilla.suse.com/show_bug.cgi?id=1263973
  * https://jira.suse.com/browse/PED-15927
  * https://jira.suse.com/browse/PED-9497

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260713/537bdb18/attachment.htm>

More information about the sle-updates mailing list