<div class="container">
<h1>Recommended update for python-kiwi, open-vmdk</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2026:22539-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-07-08T09:20:51Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1260340">bsc#1260340</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263973">bsc#1263973</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-15927">jsc#PED-15927</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-9497">jsc#PED-9497</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Micro 6.2</li>
<li class="list-group-item">SUSE Linux Micro Extras 6.2</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains two features and has two fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for python-kiwi, open-vmdk fixes the following issues:</p>
<p>Changes in python-kiwi:</p>
<ul>
<li>Fix rereading DASD partition table with partprobe</li>
</ul>
<p>On s390 and with a DASD disk the rereading of the partition
table can only be done properly with partprobe. This commit
changes the dracut code to Require parted and partprobe only
for DASD disks on s390.</p>
<p>In addition this commit prevents the active device locking
for parted and partprobe when called in the context of a
DASD device. The reason for this change is because of a
patch in libparted which applies flock() itself in this
condition.</p>
<p>This change however does not exist in the upstream version
of parted which is causing problems that are hard to solve
by kiwi. However, a dead-lock condition should be avoided
and I think it's still better to have this change in kiwi
and convince people to upstream the above parted fix, rather
than living with a dead-lock condition due to double locking
in kiwi. This Fixes bsc#1263973</p>
<ul>
<li>Do not hardcode dracut omit module in live builder</li>
</ul>
<p>This is a relict from the old days when the pure presence of
multipath in a live ISO caused issues at boot time. kiwi should
not maintain a hardcoded list of dracut modules except for those
that are mandatory for live boot, if there should be any special
setting needed it should come from an overlay setup in
/etc/dracut.conf.d/*.conf as part of the image description.
This is related to bsc#1260340</p>
<ul>
<li>Drop parted requirement for msdos partitioner</li>
</ul>
<p>parted was used in kiwi at one place to set the active flag
on a partition in the DOS table. This action can also be
done via sfdisk and drops the parted requirement from the
kiwi builder code</p>
<ul>
<li>Move OVA support to open-vmdk</li>
</ul>
<p>Finally this commit drops the use of the VMware ovftool
and moves to the real opensource alternative open-vmdk
This Fixes #2292 and Fixes #2627 and Fixes jira#PED-9497</p>
<ul>
<li>
<p>Limit workflow to SLE supported pythons</p>
</li>
<li>
<p>Refactor use of kiwi settings file</p>
</li>
</ul>
<p>KIWI supports an optional runtime configuration file for
settings to control the behavior of the tools used by
KIWI on the build host. So far this config file could be
specified via --config or is searched in the user's HOME
or looked up as /etc/kiwi.yml. With this commit the
following changes to this heuristic are made:</p>
<ol>
<li>Support reading of /etc/kiwi.yml.d/*.yml</li>
<li>Support reading of /usr/share/kiwi/kiwi.yml and /usr/share/kiwi/kiwi.yml.d/*.yml</li>
<li>
<p>Install default settings file as /usr/share/kiwi/kiwi.yml.example
from the main package and drop it from kiwi-man-pages which
was considered a weird place.</p>
</li>
<li>
<p>Add support for oci format for disk images</p>
</li>
</ol>
<p>The (oci|docker):image_format format is a special case that
stores the disk image inside of an OCI-compliant
container. The disk image is stored in the specified
image_format in the disk/ directory of the container.
The disk format can be one of the above formats
or just raw if the disk should be stored as a raw disk
inside of the container. Custom naming conventions for
the disk image can be applied by using the bundle_format
attribute. The derived_from attribute can be used to
specify the source container. The resulting container
image will be built by adding the disk image as a
new layer on top of the specified reference container.
If there is no derived_from attribute, the container
image will be built from scratch using an empty root
directory. This format is particularly useful for building
an image which bundles the actual disk image and its
runtime requirements into one artifact.
This Fixes jira#PCT-1008</p>
<ul>
<li>Fix caller environment for non chroot scripts</li>
</ul>
<p>Make sure non chroot scripts also knows about the kiwi
profile environment such that e.g. the current profile name
or other settings from the build can be used in the script</p>
<ul>
<li>Update spec file due to new package restrictions</li>
</ul>
<p>On SUSE new package restrictions where added to support the
concept of the so called immutable mode. The new guideline
says "Any files in the RPM spec %files section that are not
in /usr or /etc is likely to break in Immutable Mode". For
the kiwi packaging this applies to the kiwi-pxeboot sub
package. This commit implements the suggested solution based
on systemd-tmpfiles and only applies for SUSE.
This Fixes jira#PCT-1055</p>
<ul>
<li>Fix result bundler for uncompressed container data</li>
</ul>
<p>When building container images with the respective runtime
configuration:</p>
<p><code>yaml
container:
- compress: false</code></p>
<p>The resulting image output files will be uncompressed meaning
there is no ".xz" extension present. When running the result
bundler there is an index bug which causes the container format
type of the filename name e.g. ".docker" to be dropped from the
result names. This commit fixes it.</p>
<ul>
<li>Fix spec file requirements for SUSE</li>
</ul>
<p>There is no erofs on SLES. This commit drops the respective
requirement settings which we have upstream where it exists
This Fixes jira#PCT-899</p>
<ul>
<li>
<p>Fix upstream merge README</p>
</li>
<li>
<p>Support SOURCE_DATE_EPOCH for OCI containers (jsc#PED-15927)</p>
</li>
</ul>
<p>If SOURCE_DATE_EPOCH is available, use it for the container creation
time and history.</p>
<p>open-vmdk is shipped as new package.</p>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Micro Extras 6.2
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1183=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64)
<ul>
<li>python3-kiwi-10.2.33-160000.3.1</li>
<li>kiwi-systemdeps-core-10.2.33-160000.3.1</li>
<li>open-vmdk-debuginfo-0.3.12-160000.1.1</li>
<li>open-vmdk-0.3.12-160000.1.1</li>
<li>open-vmdk-debugsource-0.3.12-160000.1.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1260340">https://bugzilla.suse.com/show_bug.cgi?id=1260340</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263973">https://bugzilla.suse.com/show_bug.cgi?id=1263973</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-15927">https://jira.suse.com/browse/PED-15927</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-9497">https://jira.suse.com/browse/PED-9497</a>
</li>
</ul>
</div>