toanju · Oct 14, 2026
@@ -42,7 +42,7 @@ jobs:
   build:
     needs: [set_version]
     if: ${{ github.event_name != 'pull_request' || github.event.action != 'closed' }}
-    uses: gardenlinux/gardenlinux/.github/workflows/build.yml@c15e9789b16b0e64019b52b45fb6fa3b3c0f608c
+    uses: gardenlinux/gardenlinux/.github/workflows/build.yml@ed75af27781084f5e6742bab59b89861150098d8
     with:
       version: ${{ needs.set_version.outputs.VERSION }}
       # to set target to "release" or "nightly" we need proper KMS secrets

@@ -19,7 +19,7 @@ jobs:
           submodules: recursive
   build:
     needs: [checkout]
-    uses: gardenlinux/gardenlinux/.github/workflows/build.yml@c15e9789b16b0e64019b52b45fb6fa3b3c0f608c
+    uses: gardenlinux/gardenlinux/.github/workflows/build.yml@ed75af27781084f5e6742bab59b89861150098d8
     with:
       version: ${{ inputs.version || 'now' }}
       # to set target to "release" or "nightly" we need proper KMS secrets
@@ -49,7 +49,7 @@ jobs:
     name: Run glcli to publish to OCI
     needs: [build]
     # use custom upload_oci.yml as we do not sign the images
-    # uses: gardenlinux/gardenlinux/.github/workflows/upload_oci.yml@c15e9789b16b0e64019b52b45fb6fa3b3c0f608c
+    # uses: gardenlinux/gardenlinux/.github/workflows/upload_oci.yml@ed75af27781084f5e6742bab59b89861150098d8
     uses: ./.github/workflows/upload_oci.yml
     with:
       version: ${{ needs.build.outputs.version }}

@@ -14,7 +14,7 @@ on:
 jobs:
   generate_matrix_publish:
     name: Generate flavors matrix to publish
-    uses: gardenlinux/gardenlinux/.github/workflows/build_flavors_matrix.yml@c15e9789b16b0e64019b52b45fb6fa3b3c0f608c
+    uses: gardenlinux/gardenlinux/.github/workflows/build_flavors_matrix.yml@ed75af27781084f5e6742bab59b89861150098d8
     with:
       flags: '${{ inputs.flavor_filter }} --no-arch --json-by-arch --build --test'
   upload_gl_artifacts:

@@ -61,7 +61,7 @@ update:
 	new_builder_image=$$(grep -m1 '^container_image=' $(ROOT_DIR)/gardenlinux/build | cut -d= -f2); \
 	current_builder_image=$$(grep -m1 '^container_image=' $(ROOT_DIR)/build | cut -d= -f2); \
 	if [ "$$new_builder_image" != "$$current_builder_image" ]; then \
-		$(SED) -i -E 's|^container_image=.*|container_image=$$new_builder_image|' $(ROOT_DIR)/build; \
+		$(SED) -i -E 's|^container_image=.*|container_image='$$new_builder_image'|' $(ROOT_DIR)/build; \
 	fi
 
 clean:

@@ -6,7 +6,7 @@ shopt -s nullglob
 exec 3>&1
 exec 1>&2
 
-container_image=ghcr.io/gardenlinux/builder:0196add0ce875ac0b7721c19b2ee3ac37cf84387
+container_image=ghcr.io/gardenlinux/builder:f7cf91087f7580c6c3aefb26af6cee7df89a9938
 container_engine=podman
 target_dir=.build
 

@@ -0,0 +1 @@
+../gardenlinux/features/stackit
+10 −2		.github/workflows/dev_tests.yml
+23 −7		.github/workflows/nightly_create_issue.yml
+2 −1		.github/workflows/test_flavor_chroot.yml
+2 −1		.github/workflows/test_flavor_cloud.yml
+2 −1		.github/workflows/test_flavor_oci.yml
+2 −1		.github/workflows/test_flavor_qemu.yml
+1 −1		build
+0 −1		docs/explanation/os-releases.md
+6 −10		docs/explanation/secure-boot.md
+1 −2		docs/how-to/secure-boot.md
+1 −1		features/README.md
+0 −28		features/_nopkg/README.md
+0 −3		features/_nopkg/info.yaml
+1 −1		features/_prod/README.md
+0 −3		features/_prod/info.yaml
+0 −22		features/_readonly/README.md
+0 −22		features/_secureboot/README.md
+5 −0		features/_usi/file.include/etc/systemd/system/systemd-pcrlogin@.service.d/override.conf
+5 −0		features/_usi/file.include/etc/systemd/system/systemd-pcrproduct.service.d/override.conf
+0 −22		features/firecracker/README.md
+0 −1		features/server/info.yaml
+34 −0		features/stackit/README.md
+20 −0		features/stackit/exec.config
+4 −0		features/stackit/file.exclude
+26 −0		features/stackit/file.include.markers.yaml
+32 −0		features/stackit/file.include/etc/chrony/chrony.conf
+12 −0		features/stackit/file.include/etc/cloud/cloud.cfg.d/01_debian-cloud.cfg
+1 −0		features/stackit/file.include/etc/cloud/cloud.cfg.d/50-datasource.cfg
+1 −0		features/stackit/file.include/etc/cloud/cloud.cfg.d/99_disable-network-config.cfg
+2 −0		features/stackit/file.include/etc/cloud/ds-identify.cfg
+1 −0		features/stackit/file.include/etc/kernel/cmdline.d/10-console.cfg
+1 −0		features/stackit/file.include/etc/modules-load.d/ptp_kvm.conf
+2 −0		features/stackit/file.include/etc/systemd/system-preset/00-chrony-disable.preset
+3 −0		features/stackit/file.include/etc/systemd/system/chronyd.service.d/10-after_dev-ptp_kvm.device.conf
+3 −0		features/stackit/file.include/etc/udev/rules.d/60-kvm-ptp.rules
+5 −0		features/stackit/info.yaml
+2 −0		features/stackit/pkg.exclude
+6 −0		features/stackit/pkg.include
+37 −0		flavors.yaml
+87 −10		hack/create_nightly_issue.py
+31 −0		tests/handlers/sudoers.py
+107 −1		tests/integration/boot/test_cloud_init.py
+1 −1		tests/integration/core/test_base.py
+30 −0		tests/integration/core/test_services.py
+111 −2		tests/integration/core/test_time.py
+22 −0		tests/integration/kernel/test_kernel_cmdline.py
+2 −1		tests/integration/kernel/test_kernel_modules.py
+4 −4		tests/integration/security/compliance/test_disastig_00209.py
+4 −30		tests/integration/security/compliance/test_disastig_00210.py
+12 −2		tests/integration/security/compliance/test_stig.py
+9 −10		tests/integration/security/test_lsm.py
+1 −1		tests/integration/security/test_ssh.py
+19 −2		tests/plugins/lsm.py
+2 −2		tests/util/container/Containerfile
+0 −4		tests/util/coverage.feature.excludes
+222 −96		tests/util/coverage.py
+56 −18		tests/util/tests/test_coverage.py