<div class="container">
<h1>Recommended update for python-kiwi</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2025:21001-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2025-11-14T18:18:17Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Enterprise Server 16.0</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 16.0</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that can now be installed.</p>
<h2>Description:</h2>
<p>This update for python-kiwi fixes the following issues:</p>
<p>Version 10.2.33.</p>
<ul>
<li>Run grub mkconfig with os-prober disabled</li>
</ul>
<p>Set GRUB_DISABLE_OS_PROBER=true to the caller environment
such that it gets consumed via /etc/grub.d/30_os-prober
This Fixes #2883</p>
<ul>
<li>Fixed typo in documentation</li>
</ul>
<p>Invalid XML syntax, missing end tag. This Fixes #2882</p>
<ul>
<li>
<p>References #2474 and #2475 poweroff instead of halt on oem shutdown</p>
</li>
<li>
<p>Fix rawhide integration test</p>
</li>
</ul>
<p>The package shim-ia32 got dropped</p>
<ul>
<li>Add test for profiled overlays</li>
</ul>
<p>kiwi supports overlay files per profile, but we didn't had a
proper integration test for it. This commit adds one</p>
<ul>
<li>Mount proc when needed</li>
</ul>
<p>Using cp -a might lookup in proc/self/.. under certain conditions.
Make sure to mount proc for config/function that might trigger
this condition. This Fixes #2876</p>
<ul>
<li>Update test-image-custom-partitions test build</li>
</ul>
<p>Fix patch files to match with new dracut module dirs</p>
<ul>
<li>Update dracut version compat runtime check</li>
</ul>
<p>Update check_dracut_module_versions_compatible_to_kiwi to match
with new dracut module dirs which have changed due to recommended
dracut module ordering for out-of-tree modules.</p>
<ul>
<li>Fix dracut Makefile install target</li>
</ul>
<p>module dir names have changed due to recommended dracut
module ordering for out-of-tree modules.</p>
<ul>
<li>Update pacman spec to dract changed module dirs</li>
</ul>
<p>Follow up change for the fix of the recommended dracut
module ordering for out-of-tree modules.</p>
<ul>
<li>Update spec file due to dract changed module dirs</li>
</ul>
<p>Follow up change for the fix of the recommended dracut
module ordering for out-of-tree modules.</p>
<ul>
<li>Follow the recommended dracut module ordering for out-of-tree modules</li>
</ul>
<p>In dracut release v108 or later the recommended ordering
for out out of tree modules is 50-59 range. The following is a section from dracut documentation:</p>
<p>> Not using the 50-59 range for out of tree dracut modules will likely
> lead to unintended errors in the initramfs generation process as your
> dracut module will either run too early or too late in the generation process.
> You have been warned.</p>
<ul>
<li>Fix agama integration test</li>
</ul>
<p>Disable no longer existing agama-auto.service</p>
<ul>
<li>Fixed agama integration test</li>
</ul>
<p>nothing provides agama-auto anymore</p>
<ul>
<li>Update SLFO integration test</li>
</ul>
<p>Make sure ps tool is installed</p>
<ul>
<li>Fix exclude list for live image builds</li>
</ul>
<p>When specifying a filesystem attribute for a live image build,
the rootfs gets build directly into this filesystem instead of
being a squashfs wraped ext4 which is the default layout for
compatibility reasons. In this direct filesystem mode the
exclude list was not passed along to the filesystem creation
and causes unwanted metadata to be part of the final image.
This Fixes #2873</p>
<ul>
<li>Fix test-image-custom-partitions integration test</li>
</ul>
<p>Same fix as for the Tumbleweed test now also applied
to the Leap test. Patching of the new root device did
no longer apply</p>
<ul>
<li>Fix test-image-custom-partitions integration test</li>
</ul>
<p>Patching of the new root device did no longer apply</p>
<ul>
<li>
<p>fix: resize for raid device, ensure vars like kiwi_RaidDev are loaded before setting disk variable</p>
</li>
<li>
<p>Do not clobber initialize method</p>
</li>
</ul>
<p>There was a method named initialize defined and implemented
differently in the dracut modules kiwi-lib and kiwi-repart.
kiwi-lib is expected to be shared code across all kiwi dracut
modules. However if one module redefines a method of the
same name which is used in another module and expected to
work differently there, this is evil. This commit cleans
up the name conflict and names the kiwi library init function
as lib_initialize. All dracut code that is expected to make
use of this method has been adopted too.</p>
<ul>
<li>Skip kiwi-repart module in install ISOs</li>
</ul>
<p>In case the kiwi-repart module is explicitly requested in a
dracut.conf file and the image is also configured to build an
install ISO image this leads the install ISO to contain the
kiwi-repart module as well which is unwanted. This commit
explicitly omits the kiwi-repart when creating the initrd
for the install image</p>
<ul>
<li>
<p>Skip repart when booting install/live iso</p>
</li>
<li>
<p>Update leap test-image-disk integration test</p>
</li>
</ul>
<p>Add test for alternative volume ID in install ISO</p>
<ul>
<li>Consolidate device lock into its own method</li>
</ul>
<p>Add set_device_lock method which uses udevadm lock preferable
but also supports an flock fallback in case there is no lock
command provided via systemd/udev</p>
<ul>
<li>Fix bug in shell condition</li>
</ul>
<p>The shell code test ... || warn A; warn B will always
print the warning for B despite the test result. This lead
to the warning message "Settings from the kiwi description will be ignored"
to be printed always. This commit fixes it with a clean if/then
condition</p>
<ul>
<li>Fix documentation rendering</li>
</ul>
<p>There was an indentation bug which caused the docs to
render wrong. This commit fixes it</p>
<ul>
<li>solver/repository: Handle zstd-compressed metadata files</li>
</ul>
<p><code>_create_solvables</code> assumes metadata files are gzip-compressed,
but modern Fedora ones are not, they are zstd-compressed.</p>
<ul>
<li>uri: If we fail to resolve the metalink URI, log it</li>
</ul>
<p>It's rather useful to know <em>what</em> the URI is when something goes
wrong, after all.</p>
<p>Signed-off-by: Adam Williamson <awilliam@redhat.com></p>
<ul>
<li>Fix repartitioning with parted</li>
</ul>
<p>parted does locking itself already. Wrapping it in udevadm lock results
in a deadlock, breaking boot.</p>
<ul>
<li>Update test-image-disk-simple integration test</li>
</ul>
<p>Update slfo/test-image-disk-simple. Add more space for
flake testing and add a user to test flakes for non root</p>
<ul>
<li>Catch potential exceptions from pathlib.Path.mkdir</li>
</ul>
<p>Creating a directory can fail, we should catch this error
instead of ending up in a stack trace</p>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise Server 16.0
<br/>
<code>zypper in -t patch SUSE-SLES-16.0-17=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 16.0
<br/>
<code>zypper in -t patch SUSE-SLES-16.0-17=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64)
<ul>
<li>dracut-kiwi-live-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-iso-media-10.2.33-160000.1.1</li>
<li>dracut-kiwi-lib-10.2.33-160000.1.1</li>
<li>dracut-kiwi-oem-repart-10.2.33-160000.1.1</li>
<li>dracut-kiwi-oem-dump-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-disk-images-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-image-validation-10.2.33-160000.1.1</li>
<li>dracut-kiwi-verity-debuginfo-10.2.33-160000.1.1</li>
<li>python3-kiwi-10.2.33-160000.1.1</li>
<li>dracut-kiwi-overlay-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-containers-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-filesystems-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-core-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-containers-wsl-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-bootloaders-10.2.33-160000.1.1</li>
<li>dracut-kiwi-verity-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-10.2.33-160000.1.1</li>
<li>kiwi-man-pages-10.2.33-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 16.0 (noarch)
<ul>
<li>kiwi-bash-completion-10.2.33-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 16.0 (x86_64)
<ul>
<li>kiwi-pxeboot-10.2.33-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 16.0 (ppc64le x86_64)
<ul>
<li>dracut-kiwi-live-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-iso-media-10.2.33-160000.1.1</li>
<li>dracut-kiwi-lib-10.2.33-160000.1.1</li>
<li>dracut-kiwi-oem-repart-10.2.33-160000.1.1</li>
<li>dracut-kiwi-oem-dump-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-disk-images-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-image-validation-10.2.33-160000.1.1</li>
<li>dracut-kiwi-verity-debuginfo-10.2.33-160000.1.1</li>
<li>python3-kiwi-10.2.33-160000.1.1</li>
<li>dracut-kiwi-overlay-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-containers-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-filesystems-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-core-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-containers-wsl-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-bootloaders-10.2.33-160000.1.1</li>
<li>dracut-kiwi-verity-10.2.33-160000.1.1</li>
<li>kiwi-systemdeps-10.2.33-160000.1.1</li>
<li>kiwi-man-pages-10.2.33-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 16.0 (noarch)
<ul>
<li>kiwi-bash-completion-10.2.33-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 16.0 (x86_64)
<ul>
<li>kiwi-pxeboot-10.2.33-160000.1.1</li>
</ul>
</li>
</ul>
</div>